last executing test programs: 1.109227869s ago: executing program 5 (id=6): r0 = socket(0x18, 0x3, 0x3a) getsockopt(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x7}, 0x10) (async) listen(r1, 0x7fff) (async) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045b4002c0067010000069078e0000001ac1400aa4e224e23", @ANYRESDEC=r1, @ANYRES32=0x41424344, @ANYBLOB="6002fff89078fffc1e020000"]) 1.09744177s ago: executing program 4 (id=5): sysctl$kern(&(0x7f00000000c0)={0x1, 0x74}, 0x2, &(0x7f0000000000)="715d3d79a37d248ce9b3046e7ab253a3f4f192b35559d21a", &(0x7f0000000080)=0x18, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(&(0x7f0000000080)='./file3\x00', &(0x7f00000000c0)='c\x00') 1.046323104s ago: executing program 5 (id=9): mkdir(&(0x7f0000000180)='./file0\x00', 0x25) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x80) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = socket$inet6(0x18, 0x3, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x280c, "00000000000000000000ffff0000006b", 0x8000000}, 0x1c) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000180)={0x0, 0x3, r2, 0x0, 0xa16}) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') symlinkat(&(0x7f00000003c0)='./file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) flock(r3, 0x8) readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r4, 0x0, 0x66, 0x0, 0x0) r5 = socket$inet6(0x18, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x8d, "fe80000400000000000000000000fdff", 0x8}, 0x1c) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x30, 0x1, 0x8, "31439023a47c5ed9e5ead09ec419c4307db231c7566e1875846ad7b79391fb9dab"}], 0x30}, 0x400) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f04) open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4c, 0x7, 0xd0, 0x48}, {0x60, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 1.045915703s ago: executing program 4 (id=10): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x3, 0x8cb, 0xfffffffe, 0xffff7ffe, "ffb1251242758d00000300", 0x40, 0x3effb}) ioctl$TIOCSTAT(r0, 0x20007465) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000100)="f9615f55", 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000140)={0xfff, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/7, 0x7}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000180)) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x26) open$dir(&(0x7f0000000100)='./file0\x00', 0xc5a, 0x81) ioctl$VNDIOCSET(r1, 0xc0387200, &(0x7f00000000c0)={0x0, 0x9e7c, 0x0}) fchdir(r2) 859.794036ms ago: executing program 5 (id=25): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0xbac3, 0x3, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0x1300b7fe, 0xe, 0x7}, {0x100006, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x3, 0x81000001, 0x9}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0xfffffe00}, {0x0, 0x7, 0x34, 0xfffffffe}, {0xfffffc04, 0x32aebf9a, 0x8003, 0x1}, {0xff, 0xfff9, 0xa38c000, 0xe1}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x10008, 0xe2, 0xfffffff5, 0xfffffff8}, {0x5, 0x5, 0x24, 0x4}, {0x5, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) r2 = socket(0x18, 0x3, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x100800000000009}, {0x7ffefffbeffefffe, 0x8000003}}, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x20) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) 850.843036ms ago: executing program 3 (id=28): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FIONBIO(r0, 0xc0107008, &(0x7f0000000040)=0x23) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc0284459, &(0x7f0000000740)={0x48, 0x2, 0x3, 0x2, "00ecffffff0000010000000400", 0xaa2d, 0x8007}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r2 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) setuid(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) utimes(0x0, &(0x7f0000000080)={{0x48, 0x40010000}, {0x6, 0x1}}) sysctl$kern(&(0x7f0000000080)={0x1, 0x29}, 0x2, &(0x7f0000000100)="64cde143bc591b12846e29d122cb15233d7f282b8f11111c48c0237ecc852cc4df8b0a9ce9ac2561163edfd951ae2ec3042e1dd466dd463d2780e102b191567ebf12d3b3df3e32ff1c6c280d501fde27bf830ad4041c292afe1ba01e311b5aaa", &(0x7f00000001c0)=0x60, &(0x7f0000000240), 0x0) 813.415696ms ago: executing program 3 (id=30): r0 = socket(0x11, 0x3, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="b10005016000009f0500060003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x0, 0x0, 0x0) 812.10334ms ago: executing program 3 (id=32): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x6fae) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000240)=[{0x6c, 0x11, 0x83, 0xfffffff5}, {0x7, 0x7b, 0x9}, {0x6, 0x80, 0x12, 0xb}]}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x8, 0x3b, 0x0, @rand_addr="01a74b63742b40c3fa3d76af5fc1fa00", @mcast2, {[], @udp={{0x1, 0x0, 0x8}}}}}}}) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x81, 0x6, 0x0, 0xdf60, 0xfffffffffffffffb, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1000000000001fe, 0x0, 0x0, 0xffffffffffffffff], [0xe369, 0x2, 0x40000000, 0x0, 0xb, 0x10ffc, 0x4], [0x100, 0x1ffffffffff, 0x7ffffffffffffffc, 0x8, 0xfffffffffffffffe, 0x7], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2001, 0x9, 0x2000000000008000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x2}}}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x3, 0x1, 0xffffdf84, 0xfffffbff, "ffff02010280000000ff00", 0x4000000, 0xfd8}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0)="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", 0x10e}], 0x1) read(r4, &(0x7f00000001c0)=""/184, 0xb8) kevent(r2, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) 730.702609ms ago: executing program 3 (id=34): ioctl$TIOCCONS(0xffffffffffffff9c, 0x80047462, &(0x7f0000000100)=0x3ff) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0xd2) r0 = semget(0x0, 0x1, 0x241) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty=0x23, @rand_addr=0xac14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}) semctl$SETVAL(r0, 0xff7f0000, 0x8, 0x0) semctl$GETALL(r0, 0x0, 0x6, 0x0) r1 = shmget$private(0x0, 0x3000, 0x441, &(0x7f0000003000/0x3000)=nil) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) shmctl$IPC_STAT(r1, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0xf82) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x23, 0x8, 0x6, 0x3, 0x11, 0x5, 0x4fc, 0x7, 0x2, 0x2, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0x7], [0x5438b950, 0x5, 0x7, 0x5, 0x41, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x2, 0x4, 0x3c2, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x3, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0xffffffff, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x4, 0x2, 0x5}, {0x1b, 0x1, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x6123, 0x0, 0x401, 0x8}, {0xeffe, 0xffffbfc0, 0x8, 0x4}}}) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206916, &(0x7f00000001c0)) sendmsg(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0xe) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000a, &(0x7f00000000c0), 0x0) sendsyslog(&(0x7f0000000100), 0x0, 0x2e) setsockopt(r2, 0x1000000029, 0xd, 0x0, 0x0) futimes(0xffffffffffffffff, &(0x7f0000000000)=[{0xfffffffffffffff1, 0xe5a}, {0x10000, 0xb5f}]) openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) select(0x40, &(0x7f0000000080)={0xfffffffffffffff9, 0x44809e9f, 0xec6, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x9, 0x2000000000000004}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 729.846236ms ago: executing program 3 (id=36): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x23}, 0x7ff, 0x8003, 0x2}) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7a", &(0x7f0000000180)=0x5, 0x0, 0x0) 618.644452ms ago: executing program 3 (id=43): open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f0000001640)="00002afd", 0x4) (async) syz_emit_ethernet(0x19d, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/413]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2}) (rerun: 32) getitimer(0x2, 0xfffffffffffffffe) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r1 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x3, 0x0, 0x3, 0xfffeffff, 0x0, 0x1, 0x2, 0x2000000000003, 0xff}) (async) r2 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) r3 = syz_open_pts() ioctl$TIOCGWINSZ(r3, 0x40087468, &(0x7f0000000040)) (async) setitimer(0x1, &(0x7f0000000140)={{0xcdc, 0x3}, {0x10000030e, 0x11}}, 0x0) (async) mprotect(&(0x7f000019f000/0x1000)=nil, 0x1000, 0x1) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) accept(r4, &(0x7f0000000300)=@un=@file={0x0, 0x0, ""/247}, &(0x7f0000000400)=0xf9) (async, rerun: 64) r5 = socket$inet(0x2, 0x3, 0x20) (async, rerun: 64) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) open(0x0, 0x10686, 0x8) select(0x40, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x3, 0x0, 0x400}, &(0x7f00000024c0)={0x8, 0x20008000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$inet(r5, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async, rerun: 64) open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) (rerun: 64) 574.232126ms ago: executing program 1 (id=48): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3, 0x7f}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x3, 0x6}, {0x2, 0x1}, {0x3, 0x1000000}, {}, {0x2}, {0x1, 0xb4}, {0x1, 0x7ff}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f0000000080)="79960000", &(0x7f0000000040)=0x4, &(0x7f0000000100)="f0f8a258", 0x4) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000a80), 0x80, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000fc0)=0x8) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x54, 0x7f, 0xf9, 0x80000000}]}) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000ac0)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x3ff, 0x2, 0x8, 0xfff, 0x3, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0xd, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa094, 0x2, 0x100, 0xffffffff, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0x0, 0x81, 0xa, 0x5, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x4, 0x2, 0x2, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x6, 0x7, 0x2, 0x7, 0x6, 0x7, 0xfffffff4, 0x4, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x7, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x0, 0x1, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x6, 0x7063, 0xa, 0x6, 0x7, 0xa23d, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x2, 0x2, 0xfff, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x2, 0x2, 0x5, 0x5, 0xd, 0x9, 0x8001, 0x80000000, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xea3c, 0x5, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x2, 0x9, 0x4, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x800, 0x7, 0x6, 0x7fff, 0x6, 0x800, 0x21, 0x9, 0x5, 0x8, 0x8, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x0, 0x8, 0x1, 0x4f3, 0x800, 0x9, 0x75a1, 0x0, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0x8, 0x100, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0xc, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x6, 0x7, 0x9, 0x7fffffff, 0x5, 0x0, 0x1, 0xfffffff7, 0xc74c, 0xff, 0x8, 0x6, 0x4, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x3, 0x7, 0x81, 0x3, 0x8, 0x1, 0x2, 0xb, 0x8e6, 0x5, 0x6, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x8, 0x81, 0x4c1, 0x0, 0xb, 0x4, 0xffffffff, 0x12000, 0x10001, 0x99, 0x80ba8, 0x1, 0xfffffffb, 0xa, 0x1, 0x200, 0x6b73, 0x0, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd2, 0x80, 0x1b, 0xe2, 0x0, 0x0, 0x1, 0x1, 0x7, 0xffff, 0x99, 0x8, 0x8, 0xe, 0xfff, 0x225, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x5, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x0, 0x4, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x6, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffffffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x800, 0x2, 0x100, 0x3, 0x2, 0x1, 0x10000, 0x3, 0x51, 0x8, 0x0, 0x1, 0x5ed, 0x2, 0x9, 0x22, 0x2, 0x8001, 0xdf, 0x5, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x9, 0x7ff, 0x101, 0x5c, 0x93, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x5, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x1, 0x9, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x827, 0x8, 0x81, 0x80000000, 0x9, 0x0, 0x4, 0xd, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0xe, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0xa53d, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x3, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fffffff, 0x9, 0x4, 0x8, 0x4, 0x8, 0xffffffff, 0x7f, 0x7fffffff, 0x4, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x7, 0x132, 0x80000001, 0x5, 0x100000a, 0x2, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xcf71, 0x1e46c000, 0x9, 0xe, 0xb, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x5, 0x80000001]}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8, 0x80) ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x20000b) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0x2000747b, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000e00)={&(0x7f0000000d80)='./file0\x00', 0x100000000, &(0x7f0000000dc0)='./file1\x00', 0x8}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) r4 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7900) ioctl$VNDIOCCLR(r4, 0xc0a86b04, &(0x7f0000000200)={0x0, 0x10000, 0x0}) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r5, 0xc1045763, &(0x7f0000000e80)={0xc82, [{0x2, 0xfffffff8}, {0x1, 0x7ff}, {0x2, 0x1}, {0x2, 0xffffffff}, {0x1, 0x80000001}, {0x3, 0x1}, {0x2}, {0x1, 0xffff}, {0x3, 0xffffff81}, {0x2, 0x45}, {0x2, 0x50c1}, {0x1, 0xfffffff0}, {0x1, 0x101}, {0x2, 0x3}, {0x3, 0xca0}, {0x3, 0x80}, {0x2, 0x10}, {0x2, 0xf}, {0x1ad270b09c20798f, 0x7}, {0x2, 0x3}, {0x2, 0x10000}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x21a7}, {0x3, 0x7}, {0x2, 0xfffffff9}, {0x1, 0xffff}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x400}, {0x1, 0xfffffffe}, {0x1, 0x9}]}) r6 = open$dir(&(0x7f0000000b00)='./file0/file0\x00', 0x80, 0x20) r7 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) kevent(r3, &(0x7f0000000b40)=[{{r0}, 0x3, 0x2e, 0x20, 0x8, 0xd}, {{r0}, 0xfffffffffffffff9, 0x1c, 0x2, 0x8000000000000001, 0x80000001}, {{r1}, 0xfffffffffffffffc, 0xb, 0x20, 0x35, 0x8000000000000000}, {{r0}, 0xfffffffffffffffa, 0xc0, 0x4, 0x6, 0x1}, {{r0}, 0xfffffffffffffffa, 0x0, 0x8, 0x2, 0x7}, {{r0}, 0xfffffffffffffff7, 0x0, 0x1, 0x0, 0x3}, {{r6}, 0xfffffffffffffff6, 0xc0, 0x1, 0x80000001, 0x7}], 0x4, &(0x7f0000000c80)=[{{r0}, 0xfffffffffffffff8, 0xc5, 0x40000000, 0x1000, 0x4}, {{r1}, 0xffffffffffffffff, 0x81, 0x2, 0x7fff, 0xfffffffffffffff8}, {{r0}, 0x0, 0x0, 0x1, 0x9, 0x4}, {{r7}, 0xfffffffffffffff8, 0xc0, 0x0, 0x0, 0xb9e}, {{r1}, 0xfffffffffffffff6, 0xe0, 0x1, 0xe, 0x6}, {{r0}, 0x2, 0x10, 0x4, 0x8, 0x401}], 0x1, &(0x7f0000000d40)={0x3, 0xb2}) 525.854013ms ago: executing program 1 (id=50): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = socket$inet(0x2, 0x1, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a29", 0x91) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000412000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x190, 0x3fd}, 0x4, 0x9, 0x0, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x1}) setuid(0xee01) shmat(r1, &(0x7f00000a1000/0x2000)=nil, 0x3000) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') listen(r0, 0x7fff) r2 = syz_open_pts() setsid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000b00), 0x20, 0x0) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000b40)={'./file0\x00', 0xfffffffd, 0x5, 0x4}) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000200)={0x20ff, 0x3, 0xfffffdab, 0x9, "9a3cca359ea26c6e7635d7181f77cf0e7fcd2a5c", 0x6, 0x40}) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa7}}}}}}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$DIOCRGETTABLES(r4, 0xc450443f, &(0x7f0000000f80)={{'\x00', './file0\x00', 0x2a, 0x2a}, 0x0, 0x428, 0xffffffffffffff82, 0x3, 0x80000001, 0x9, 0x73d, 0x0, 0x3}) getpeername$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket$inet(0x2, 0x3, 0x0) 524.620121ms ago: executing program 1 (id=51): r0 = socket(0x11, 0x3, 0x3) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) setreuid(0xee00, 0x0) r1 = getuid() chown(&(0x7f0000000100)='./file0\x00', r1, 0xffffffffffffffff) (async) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) (async) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x40a, 0x0, 0x0) 523.419436ms ago: executing program 1 (id=53): chdir(&(0x7f0000000040)='./file0/file0/../../file0\x00') sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd6000000000102c03cb697a653e336f000000500000000000ff02000000000000000000000000000100000001"]) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff020000000000000000000000000001890e000e"]) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x6) syz_extract_tcp_res(&(0x7f0000000080), 0xf1, 0x4ff4) 512.125643ms ago: executing program 1 (id=56): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$DIOCGETLIMIT(r0, 0xc0084427, &(0x7f0000000000)={0x4, 0x10000}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSETA(r1, 0xc0284457, &(0x7f00000000c0)={0x80000000, 0xfffffffa, 0x1000, 0x1, "080000000000000000010000f0ff0f000f1e0400", 0xfffffffe, 0x8}) setreuid(0xee00, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x9, 0x0, {0x8, 0x4000000000000003}}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r4, 0x80047476, &(0x7f00000000c0)=0x1300) ioctl$DIOCGETSTATUS(r2, 0xc2084415, &(0x7f00000003c0)) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000002500)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x800) setuid(0xffffffffffffffff) r6 = socket(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r6, 0x80206916, &(0x7f00000001c0)) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) r8 = syz_open_pts() ioctl$TIOCFLUSH(r8, 0x80047410, &(0x7f0000000380)=0x1ff) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 409.432216ms ago: executing program 6 (id=65): open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x97) r0 = socket(0x18, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x510, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) 296.009962ms ago: executing program 0 (id=67): r0 = socket$inet(0x2, 0x8003, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x2da7d975b830ce63}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69b8159b6174aaa7aaaaaabb86dd60102e6e"]) execve(0x0, 0x0, 0x0) setsockopt(r0, 0x0, 0x1f, &(0x7f0000000340)="15337ac0", 0x4) r2 = socket$inet(0x2, 0x3, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) munlockall() sendto$inet(r2, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) 290.022787ms ago: executing program 0 (id=70): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x9, &(0x7f0000ffa000/0x4000)=nil) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r2, &(0x7f0000000100)=[{&(0x7f0000001200)='#', 0x1}, {&(0x7f0000000080)='!u', 0x2}], 0x2) r3 = syz_open_pts() syz_open_pts() r4 = syz_open_pts() r5 = dup2(r3, r4) getdents(r5, 0x0, 0x0) write(r2, &(0x7f0000000140)="09092800a2e200dd1c3600000cfd5026b8812b000000000000519247c40a71", 0x1f) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sysctl$kern(&(0x7f0000001340)={0x1, 0x32}, 0x2, &(0x7f0000000040)="d95a2b6a", &(0x7f0000001440)=0x4, &(0x7f0000001480)="04000000", 0x4) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ff2000/0xc000)=nil, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)={0xcb, 0x0, 0x0, 0x4}, &(0x7f0000000180)) syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[]) 205.955043ms ago: executing program 6 (id=71): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xe2) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x8, 0xfffffff9}, {0x80000101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0x8ce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x5, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0x9, 0x60, 0x7}, {0x6, 0xfffffffa, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) socket(0x1e, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x100000000000023f) 205.496355ms ago: executing program 2 (id=72): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x8, 0x6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 204.393048ms ago: executing program 4 (id=73): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x7ec}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0xffffffff, 0x2d, 0xffffdf7f, 0x8, "180a02e9ff401e10e6fffffffffffbff00", 0x3, 0x10}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sysctl$vfs_nfs(&(0x7f0000002e80)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000002ec0)="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", &(0x7f0000003ec0)=0x270, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @random="5924d0feb5ec", [], {@generic={0x8035}}}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{0x7, 0xf0, 0x7, 0x9}, {0xa4, 0x10, 0x15, 0xb83a}, {0x6, 0x4, 0x2, 0xffffffff}]}) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff946dbd86dd60db8344001011000100016c000000000092000000000000ff02000000000000000000000000000186009078014100050000800000000101000000"]) mmap(&(0x7f0000404000/0x1000)=nil, 0x1000, 0x1, 0x2011, r2, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x1000, 0x7) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000100)) closefrom(r5) kevent(r5, 0x0, 0x2, 0x0, 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffe1a) 203.951373ms ago: executing program 2 (id=74): sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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", 0x111) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x1e, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x80}) (async, rerun: 64) mlock(&(0x7f0000294000/0x2000)=nil, 0x2000) mlock(&(0x7f0000120000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f00003b5000/0x4000)=nil, 0x4000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x401, 0x9, 0x7fffffff, 0x7}) (async, rerun: 64) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) (rerun: 64) 202.660043ms ago: executing program 2 (id=75): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async, rerun: 64) r0 = syz_open_pts() (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) close(r0) syz_open_pts() (async) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000040)=0x6a3db3a) (async) ioctl$TIOCSTOP(r0, 0x2000746f) (async) poll(&(0x7f0000000300)=[{r0, 0xe3b038fca49cb4dd}], 0x1, 0x5) 201.788396ms ago: executing program 4 (id=76): sysctl$net_inet_ipcomp(&(0x7f0000000000)={0x4, 0x2, 0x6c, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) shmget(0x3, 0x3000, 0x35, &(0x7f000018b000/0x3000)=nil) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x1e}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x3) sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYRES16=0x0], 0x28, 0x8}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/59, 0x3b}, 0x80) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ipcomp(&(0x7f0000000000)={0x4, 0x2, 0x6c, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x18, 0x1, 0x0) (async) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async) shmget(0x3, 0x3000, 0x35, &(0x7f000018b000/0x3000)=nil) (async) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x1e}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x3) (async) sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYRES16=0x0], 0x28, 0x8}, 0x0) (async) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/59, 0x3b}, 0x80) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) 180.508924ms ago: executing program 0 (id=77): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000000880)={0x2, 0x8972, &(0x7f0000000040)=[{0x0, './file0\x00', 0x4}, {0x0, './file0\x00', 0x5}]}) ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f00000009c0)={{'./file0\x00', './file0\x00', 0x4c, 0xa6}, &(0x7f00000008c0)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0xc, 0x2, 0x5, 0x6c, 0xf, 0x2}, {@rand_addr=0x6, '\x00', './file0\x00', 0x5, 0x6, 0x18, 0x0, 0x2, 0x9, 0xcc}, {@rand_addr=0x4, '\x00', './file0\x00', 0x81, 0xbd9, 0xe, 0x5, 0x7, 0x7, 0x8}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0x4, 0x1a, 0xef, 0x3, 0x92, 0x6}], 0x7, 0x4, 0x9, 0x0, 0x0, 0x3, 0x2c, 0xffff}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000e40)=0x5243) unveil(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='x\x00') r2 = openat$dri(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000f80)={&(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0x8, 0x0, 0x8, 0x800, {0x0, 0xf, 0x3, 0x9, 0x7f, 0x0, 0x7, 0x3, 0x401, 0x5, 0x0, 0x7, 0x100, 0x10, "82b4bc42f493de8a6f1d21a35078b55ab0b487299b50f8ac0c5923b33497cd25"}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000001040)={0x0, 0x0, 0x2, 0x6, &(0x7f0000001000)=[{0x2cd5, 0xfff, 0x8, 0x7}, {0x1, 0x1ed2, 0xe1a3}, {0x0, 0x401, 0x1, 0x3}, {0x6, 0x3, 0x5, 0x1}, {0x7e, 0x8, 0x7ff, 0xfffa}, {0xaf5a, 0x4ad0, 0xa, 0xd}]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000001080)={r3, r5, 0x0, 0x0, 0x1}) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000001100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000001200)={&(0x7f00000011c0)=[r8, r9, r10], 0xfffffffffffff000, 0x3, 0x0, 0x0, 0x0, 0x7c57}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000001240)={0x0, 0x8, 0x80000000, 0x38415842, 0x3, [0x0, 0x0, 0x0], [0x1069, 0x8, 0x0, 0x2], [0x2, 0x2, 0x510, 0x4], [0x9, 0x2b5, 0x6, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000012c0)={r11, 0xb, 0x20000, 0xfffffff8, 0x6, 0x3}) r14 = openat(r0, &(0x7f0000001300)='./file0\x00', 0x20000, 0x80) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000001340)={r4, 0x3, 0x401, 0x8, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000001480)={&(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0xa, 0x5, 0x6, 0x5, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000014c0)={0x4, 0xae8, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000001500)={r17, 0x1, 0x400, 0x7e, 0x6, 0x5, r13}) ioctl$DIOCRCLRADDRS(r6, 0xc4504442, &(0x7f0000001540)={{'./file0\x00', './file0\x00', 0x0, 0x3}, 0x0, 0x0, 0x0, 0x957c, 0x8, 0x7, 0x4, 0x20, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r14, 0xc01864c2, &(0x7f00000019c0)={0x0, 0x0, r2, 0x0, 0x9}) setrlimit(0x3, &(0x7f0000001a00)={0x4, 0xc}) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000001a40)={r11, 0x3, 0xfffffff4, 0x9, 0x7ab5, 0x1, r12}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001a80)={0x0, r19, r15, 0xfffffff8, 0xa, 0x0, 0x0, 0x2, 0x4, 0x4, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001ac0)={r20, r18, r16, 0x5, 0x913, 0x2, 0x3ff, 0x800, 0x8, 0x5, 0x80, 0x8}) sysctl$vm(&(0x7f0000001b00)={0x2, 0x1}, 0x2, &(0x7f0000001b40)="5ebcfd350fec07722f4ddacb90bbc959c89e27ed2eace9e053cc61872c50755162b6d04d9d7db8efda50c65e8220013b49472fc6b737ab9de74a319118ce10ecb4b050e184d29ed03a42326edeb27bff34fd7bfc7e1f73127fcd340d5732596d1a830bc871597845719480a3cf2b8b0a0e2969cba0094ee43136bfbbc5b3af8b875d6a4bdb0a82379e627fd93b0932bdb7fd3898c4877b8256454ca46bab55b8a61a71154bc8e43715580109963499ec34e13dc6177de9f88a94ac9ce7", &(0x7f0000001c00)=0xbd, &(0x7f0000001c40)="6835c313", 0x4) ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f0000001c80)={0xff, 0xffffffff, {0x1, 0x6}}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 180.161357ms ago: executing program 7 (id=78): r0 = kqueue() r1 = socket(0x18, 0x1, 0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x40, "63ef632c7f4c7fab311443368927c6aa", 0x80}, 0x1c) r2 = dup2(r0, r0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x0, 0x6}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r3 = syz_open_pts() accept(r1, 0x0, &(0x7f0000000100)) close(r2) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x200007bc, 0x400, 0xffffdf86, 0xffffff8a, "080100000000000080ffffb12b02002a5f04e81e", 0x84, 0x401}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCGWINSZ(r3, 0x40087468, &(0x7f0000000040)) ioctl$SPKRTONE(r2, 0x80085301, &(0x7f0000000000)={0x4c, 0x40005}) mkdir(&(0x7f0000000000)='./file1\x00', 0x8) 180.030554ms ago: executing program 2 (id=79): sysctl$net_pipex(&(0x7f0000000180)={0x6, 0x1b, 0x2}, 0x3, &(0x7f0000000000)="d8646b881ee49f7aea0ea1674f2e88bc0e64a88dc968c69ac2dd752da9cbebe8dfcfb841ccfb4e8eb90ef42b0d8fb1e4a5280b2065bc4ba46b4f8c2d3e6f8af2c85428d5580763f4f14301407b", 0x0, 0x0, 0x0) 177.396056ms ago: executing program 1 (id=80): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x64) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x4, 0x3}, {0x3, 0x1}}, 0x2) chflagsat(r0, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x2) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$DIOCKILLSTATES(r1, 0x0, &(0x7f0000000140)={{0x8, 0x3c, 0x1}, 0x0, '\x00', 0xffffffff, {@any={'\x00', 0x0, 0x2, 0x5}, [0x8aa3, 0x9], 0x7, 0x0, 0x1000}, {@table={'./file0/file0\x00', 0x0, 0x3, 0x89}, [0x3, 0x9], 0x81, 0x5, 0xc}, './file0\x00', './file0\x00', 0xfffffff9, 0xfff7}) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000240)={0xd, 0x7ff, 0x9, 0x9, "5e1ca96b86dcd5866022baac960280c00b9ff91a", 0x0, 0x5}) ioctl$DIOCGETRULESETS(r1, 0xc444443a, &(0x7f0000000280)={0x2, './file0\x00', './file0\x00'}) select(0x40, &(0x7f0000000700)={0xfffffffffffffff7, 0xac7a, 0x3ff, 0xbc4b, 0xf4, 0xb, 0x9, 0x3}, &(0x7f0000000740)={0x5, 0x5f0, 0xf, 0x8, 0x3, 0xfffffffffffffffc, 0xc, 0x8}, &(0x7f0000000780)={0x2, 0x53, 0x9, 0x8, 0x7fff, 0x1, 0x872, 0x4}, &(0x7f00000007c0)={0x3e272ffa, 0xfff}) truncate(&(0x7f0000000800)='./file0\x00', 0x5) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000840)) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000000880)) mkfifoat(r0, &(0x7f00000008c0)='./file0\x00', 0x4fdbe56f96453052) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000940)={&(0x7f0000000900)=[0x8, 0xfffffffb, 0xfff, 0x2], 0x4, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x2000641f) connect(0xffffffffffffff9c, &(0x7f0000000980)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) ioctl$DIOCRSETTFLAGS(r1, 0xc450444a, &(0x7f00000009c0)={{'./file0\x00', './file0\x00', 0x20, 0x5}, 0x0, 0x0, 0x0, 0xfff, 0x6, 0xe1e, 0x8, 0x8, 0x2}) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000e40)={0x2, 0x13dbc3ee, 0xb, 0xaa, "83361c8c9cb2c30c0fa2683d640968d30e0db856", 0x3, 0x437}) ioctl$DIOCRSETADDRS(r1, 0xc4504445, &(0x7f0000000ec0)={{'./file0/file0\x00', './file0\x00', 0x0, 0x2}, &(0x7f0000000e80)=[{@empty, '\x00', './file0\x00', 0x6, 0x0, 0x28, 0x2, 0x8, 0x3, 0xb}], 0xa2b7, 0x1, 0x28d, 0x401, 0xfffffc01, 0x7, 0x30, 0x10000}) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001340), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r4, 0xca605601, &(0x7f0000001380)={0x10, 0xc7f, [{&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fec000/0x13000)=nil, 0x9}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x10001}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7}, {&(0x7f0000fec000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x741a}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x7}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, 0xe}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xfff}, {&(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x5}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x400}, {&(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0xbb5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x800}, {&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffff7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x5}], './file0/file0\x00', 0xffff8001, 0x10000, 0x0, 0xb, [0x7, 0x8, 0x4, 0x81, 0x3, 0x0, 0x6, 0x2, 0x8, 0x6, 0x4, 0x7, 0x2, 0x8, 0x8, 0x4, 0xe5ca, 0x5, 0xf, 0x5, 0x0, 0x81, 0x1, 0x4, 0xffffffff, 0x3, 0xae, 0x4, 0x8, 0x6, 0x5, 0xffffffff, 0x800, 0x90, 0x2, 0x9, 0x6, 0x1, 0x1, 0x440000, 0xdf7d, 0x3, 0xef2, 0x4, 0x2, 0x6, 0x3ff, 0x1, 0x4, 0x5, 0xfffff436, 0xa, 0xff, 0x4, 0x1, 0x4, 0x3, 0x80, 0x10001, 0x9, 0xcba6, 0xca3, 0x7fffffff, 0x3, 0x6, 0x7, 0x0, 0xfffeffff, 0x6, 0x5, 0x3, 0x7a, 0x6b8, 0x5, 0x4, 0x33cd363f, 0xf4, 0xe02d2970, 0x0, 0x7, 0x5, 0x9, 0x0, 0x400, 0xffff, 0x10001, 0x23fc, 0x3, 0x4872, 0x7, 0x5, 0x1, 0x4, 0x500, 0x7, 0x5, 0x6, 0x6, 0x401, 0x0, 0xa7f4, 0x8001, 0xe47, 0x0, 0x6, 0xffe000, 0x800, 0x1000, 0x200, 0x3d, 0x884e, 0x6, 0x3, 0x3, 0x0, 0x537, 0x9, 0xfffffff7, 0x25e, 0x47c6, 0x4, 0x0, 0x66, 0x7, 0x0, 0x3, 0x6, 0x8, 0x4, 0x3efa, 0x8001, 0x8, 0xfffffffd, 0x9, 0x7, 0x3, 0xe8, 0x200, 0x3, 0x2, 0x4, 0x7fffffff, 0xfffffff7, 0x1, 0x0, 0x5, 0xfffff801, 0xe61c, 0x5, 0x2, 0x9, 0x2b, 0xce, 0x1, 0x2, 0xe42, 0xd, 0x3, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x2, 0x0, 0x1, 0x7fff, 0xfffffffb, 0x2, 0x1, 0x81, 0x7dff, 0x10000, 0x9, 0x8, 0x9b9d, 0x4, 0x3, 0x6, 0x8, 0x3, 0xd, 0x380000, 0xfa4, 0xfff, 0x4, 0x7, 0x8b, 0x3, 0x2, 0x0, 0x400, 0x4, 0x2, 0x0, 0x0, 0x800, 0x1, 0x6, 0x59, 0x7, 0x1, 0x8, 0x5, 0x9, 0x10000, 0x1, 0x6, 0x3, 0x80000001, 0x8, 0x4, 0x7ff, 0xd8, 0x6, 0x9, 0x69, 0x10000, 0xfffff000, 0xbe1c, 0x3, 0x0, 0x1, 0x7, 0x1, 0x8001, 0x81, 0xa4, 0x2, 0x80000000, 0x9, 0x7, 0x3, 0x5, 0x5, 0x1, 0x38, 0x6, 0xffff6091, 0xfffffffa, 0x6, 0x8, 0x5, 0x1, 0x2, 0x9, 0x5, 0x10000000, 0x200, 0x9, 0x7, 0x3, 0x6b, 0xffff, 0xffffffff, 0x1bc3, 0x8, 0x9, 0xfffffffe, 0x4, 0xfffffff8, 0x7fff, 0x1, 0x7, 0x5, 0xfff, 0x1, 0x0, 0x6, 0x800, 0x7fffffff, 0xdb3, 0x8, 0x9, 0x4, 0x101, 0x3, 0xa8, 0x1, 0x4, 0x2, 0x5, 0x8, 0x0, 0x6a, 0x0, 0x1, 0x7fffffff, 0x3, 0x10001, 0x88, 0x3, 0x8000, 0x1cce, 0x0, 0xffff, 0x4, 0x6, 0x2, 0x1, 0x8, 0x659a, 0xe, 0x9, 0xcd, 0xba, 0x0, 0x197df040, 0x0, 0x5, 0x502, 0xffffffff, 0x99, 0x9, 0xa, 0x6, 0x0, 0x401, 0x1, 0x8, 0x0, 0x8, 0xb77, 0xfffffffc, 0x64cd, 0x44000000, 0x9, 0x6, 0xa2ad, 0x8001, 0x6, 0xffff, 0x1, 0x5, 0x58, 0x1, 0x7fffffff, 0x0, 0xfffffffb, 0x6, 0x6, 0x400, 0x7, 0x7, 0xe, 0x3ff, 0x6, 0x3, 0xa072634c, 0x4, 0x7, 0xdd8, 0xc4d, 0x0, 0x3, 0x80, 0x7, 0x4, 0x0, 0x8b0f, 0x0, 0xfc000000, 0x40, 0x7, 0x8, 0x1000, 0x7, 0xc3, 0x8, 0x321f2b9e, 0xacf3, 0x4, 0xfe, 0x3969c456, 0xd657, 0x8, 0x0, 0x9, 0x58, 0xc71, 0x7, 0x8, 0x5, 0x8, 0x80, 0xffffffff, 0xf0, 0x75ff35be, 0x1, 0x0, 0x3, 0x5, 0x400, 0x621, 0x5, 0x2, 0x7fa2, 0x81, 0x40, 0x5, 0xf, 0x80000001, 0x1, 0x1b, 0xdc, 0x401, 0x9, 0xd0, 0xda4, 0x25, 0x0, 0x22, 0x1, 0x3, 0x0, 0xa, 0x4, 0x4, 0xe, 0x200, 0x4a, 0xfb, 0x3, 0x7ff, 0x26c, 0xdc24, 0x1, 0x1, 0x4, 0x2, 0xffffffff, 0x3, 0x9, 0x9, 0xc, 0xfffffffa, 0x552c, 0x7fffffff, 0x9, 0x6, 0x7, 0x4ee00000, 0x9, 0x80000000, 0xc, 0x100, 0x4, 0x400, 0xfff, 0x4, 0x5, 0x1, 0x5a36, 0x0, 0xb, 0x1000, 0xfae, 0x6850, 0x4, 0x40, 0x45c1, 0x1, 0x9, 0x4, 0xe, 0x2, 0x8, 0x3, 0xffff6f67, 0x1, 0x54ff11e6, 0x1, 0xebc, 0xb, 0x6346bf66, 0x7, 0x45, 0x7, 0x5b, 0x2, 0x8, 0x3, 0x9, 0x5, 0x1, 0xa, 0x5, 0x3e92, 0x7, 0x8, 0x1000, 0x3b, 0x8001, 0xad4, 0x2d0, 0x1860, 0x40, 0xfffffffc, 0xbfd, 0x7, 0x9, 0xff, 0x470, 0x9, 0x1, 0x6, 0x5, 0x2, 0x0, 0x800, 0xfffffffb, 0x7]}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x2000641e) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffff9c, 0xc01064bd, &(0x7f0000002d80)={&(0x7f0000001d80)="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", 0x1000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000003000)={&(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002fc0)=[0x0, 0x0], 0x6, 0x4, 0x8, 0x2, 0x3, 0x989}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000003240)={&(0x7f0000003040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003080)=[{}, {}, {}, {}], &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x5, 0x0, 0x0, 0x1, 0x4, 0x0, 0xa44, 0x7f, 0x7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000032c0)={&(0x7f0000002dc0)=[0x0, 0x0], &(0x7f0000002e00)=[{}], &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x2, r5, r6, 0x13, 0x2, 0x7, 0x5, 0x5, 0x9}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000003380)={0x2, &(0x7f0000003340)=[{0xf, 0xf7, 0xf8, 0x4}, {0x0, 0x4, 0x0, 0x5349d57e}]}) r7 = getpgrp() fcntl$lock(r1, 0x7, &(0x7f00000033c0)={0x3, 0x1, 0x5, 0x9, r7}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffff9c, 0x80585750, &(0x7f0000003400)={'./file0/file0\x00', 0x10001, 0x6, 0x6, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x4}) 136.703405ms ago: executing program 4 (id=81): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x4, 0x0, 0xc14}, {0x0, 0x7, 0x0, 0x1}, {0x6, 0x0, 0x45, 0x10000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r2, 0x8020691f, &(0x7f00000001c0)) select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) dup2(r1, r0) 135.562985ms ago: executing program 2 (id=82): syz_open_pts() (async) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0xc, 0x6, 0xfffffffe, 0x5, "ff14e7130b1e58c200", 0x40, 0x5}) syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x7e, 0x3, 0x48}, {0xc, 0xa, 0xff}, {0x6, 0x83, 0x6, 0xfffff805}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x7e, 0x3, 0x48}, {0xc, 0xa, 0xff}, {0x6, 0x83, 0x6, 0xfffff805}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="a7bdd61de4a1090992003b47915d8156c41fe591026c9e82b38908f5b063c973f06ac0153544e9331a36ee4e7e37a7a8feecdb4ce9c130ed4c8684b2d79256bcc51a079442dd60eaa30cc2cfb43a07758e0971266408609beb0eccd3bf0ae4a00b", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[]) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) r3 = socket(0x18, 0x1, 0x0) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0xf, 0x0, 0x0, 0x3}, 0x8) (async) connect$unix(r3, &(0x7f0000000100)=@abs={0xf, 0x0, 0x0, 0x3}, 0x8) socket(0x18, 0x2, 0x0) (async) r4 = socket(0x18, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7edb9b821d8b18902a6bbc9a0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7edb9b821d8b18902a6bbc9a0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r5, 0xc4504446, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) connect(r2, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x3, 0x8f38, "330400080000000000e8ffffff00", 0x8}, 0x1c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0xaa4) ioctl$WSKBDIO_GETENCODING(r2, 0x4004570f, &(0x7f00000000c0)) connect$unix(r4, &(0x7f0000000080)=@file={0x3, 0x1, './file0\x00'}, 0xa) sendto$inet6(r4, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0xc9e, "fffe00000000000000000000ffff00ff", 0x1}, 0x1c) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x118, 0x0) 135.261206ms ago: executing program 0 (id=83): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x102) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x7e, 0x3, 0x1048}, {0x4c, 0x9, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a7a6d61de4a1090992003b47915d8156c41fe591", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r1, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0xa010, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 134.570665ms ago: executing program 7 (id=84): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="cac73ce119f42809f7c30824a593555ffe", 0x11}], 0x1, 0x0, 0xc8}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc038694e, &(0x7f00000001c0)) r1 = socket(0x18, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @loopback}], [0xa, 0x40], 0xfffe, 0x28}, {[@v4=@loopback, @v4=@multicast1], [0x6, 0x2], 0x4, 0x18}], {{0x247, 0x3, 0x1, 0x7ff}, 0xd, 0x409, 0x80, 0xfff, 0x80, 0x17, 0xe}, {{0x15, 0x2, 0xff, 0x7}, 0x8002, 0x7, 0x2, 0x6, 0x9, 0xf0, 0xac}, @v4=@rand_addr=0x2c5c, 0x0, 0x9, 0x2, 0x0, 0x6, [[0xfffffff7, 0x4], [0x2, 0x8350]], [[0x3, 0x603f], [0x20007, 0x3]], 0x1, [0x0, 0x7], 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0x4, 0x83, 0x1, 0x8, 0x9, 0xce51, "e800"}}) poll(&(0x7f0000000000), 0x35, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0xfffffffd, 0x100, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe, 0x100}) futimens(r2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000140)='\t\x00\x00\b', 0x4) 84.347808ms ago: executing program 6 (id=85): syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe8000000000000000000000000000aa00030000000000000101000101000401000401000103000000000100010200000000c7ab6f1eba08bf03d1805fce0ef2ab82f4a065245eccda108bec7cb23f632c993265a4cefeb77b1406d562a47d"]) (async) setegid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) (async) r1 = semget(0x3, 0x4, 0x281) (async) sysctl$net_inet_tcp(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) (async) setuid(0xffffffffffffffff) (async) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x9}, 0x5d) semctl$SETVAL(r1, 0x2, 0x8, 0x0) setregid(r0, r0) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000180)="03000000", 0x4) (async) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000140)={@v4, @v6=@loopback, @v6=@empty, @v6=@mcast1, 0x2, 0x5, 0xfff, 0xb, 0x1000, 0x7, 0x18, 0x6, 0x3}) 83.023401ms ago: executing program 0 (id=86): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x35) chroot(&(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, r3, r3, 0x0, 0x81}, 0x20000000000, 0xf86, 0x0, 0x0, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) r4 = dup2(r0, r1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) read$audioctl(r4, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x3fb}) r5 = socket$inet(0x18, 0x3, 0x102) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x10000009, "00000000000001000800000000000001", 0xffffffff}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="6788020000003a9aff55f6f2efa24a85aba70000000000feffcf9323100084410a853ec5950b5a9fad", 0x29}], 0x1, 0x0}, 0x402) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = syz_open_pts() getrlimit(0x92d660025e0cac9, &(0x7f0000000040)) close(r6) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f0000000500)) syz_open_pts() r7 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) syz_emit_ethernet(0xffffffb7, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0xf, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}}}}}) ioctl$VMM_IOC_RESETCPU(r7, 0x82405605, &(0x7f00000002c0)={0x1, 0x2, {[0x7, 0x1ff, 0x9, 0x5, 0x0, 0x124, 0xe2e, 0xa92, 0x6, 0x58, 0x2ca0, 0x7, 0x1d1e, 0x6, 0x76c, 0xfa9, 0xac5, 0x100], [0x7fffffffffffffff, 0x560, 0x10, 0x3, 0xfffffffffffffff7, 0x8, 0x0, 0x3, 0xa90e, 0x3], [0x400, 0x9, 0xfffffffffffffffb, 0xd, 0x7ff, 0x7, 0xffff], [0x34bc, 0x5aa7e228, 0x80000001, 0x2, 0x9, 0x8], [{0x7f, 0xfe1, 0x4, 0x101}, {0x0, 0x0, 0x96, 0xd0}, {0xa, 0x46e4de2d, 0xbc93, 0x6}, {0xe, 0xc186, 0x80000001, 0x7fffffff}, {0x5, 0x0, 0xfffffc00, 0x8}, {0x7, 0x0, 0x1, 0x571}, {0x7, 0x53, 0x4, 0x5}, {0x3, 0x2, 0x7, 0x6}], {0xf59, 0x3, 0x6, 0x3}, {0x7, 0xfffff801, 0x2, 0x5}}}) ioctl$FIOASYNC(r6, 0x80047466, &(0x7f0000000200)=0x5) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x7, 0x2, r8}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r9, 0xc0104451, &(0x7f0000000040)={0x271, 0x408, &(0x7f0000000b80)=[{0x1, './file0\x00', 0x7}, {0x1, './file0\x00', 0x7}, {0x0, './file0\x00'}, {0x0, './file0\x00', 0xffe00000}]}) munlock(&(0x7f00009d3000/0x3000)=nil, 0x3000) bind$inet(r4, &(0x7f0000000080)={0x10, 0x2, 0x2, 0xa}, 0x10) 82.662267ms ago: executing program 7 (id=87): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x3, 0x2}, {0x0, 0xfffffffb}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xc8}, {0x5, 0xfffffffd}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x1, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x2000000}, {0x0, 0xffff}, {0x3, 0x4}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x2000}, {0x1, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xda}, {0x3, 0x3}, {0x1, 0x2}, {0x2, 0x257fd}]}) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x0) (async, rerun: 32) close(r0) (async, rerun: 32) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) 82.241943ms ago: executing program 2 (id=88): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) kill(0xffffffffffffffff, 0x3) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) writev(r0, &(0x7f0000002d00)=[{&(0x7f00000009c0)="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", 0xa1e}, {&(0x7f00000019c0)}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) r2 = open(&(0x7f0000000040)='\x00', 0x20, 0x11) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread(r3, &(0x7f0000000180)="48810aab", 0x4, 0x11) recvmsg(0xffffffffffffffff, 0x0, 0x1001) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000054c0), 0x2, 0x0) ioctl$DIOCIGETIFACES(r4, 0xc0284457, &(0x7f0000006700)={'./file0\x00', 0x0, 0x100, 0x7106fc0e, 0x4, 0x3}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x88, 0x8, 0xfc, 0x1}, {0x2, 0x8, 0x4, 0x2}, {0x7, 0x1, 0xcd, 0x8}, {0xfff, 0x6, 0x3, 0x5}, {0x3, 0x0, 0x5, 0x3}, {0x4, 0x5, 0x0, 0x800000}, {0x2, 0x8, 0x5, 0x2}]}) ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f0000000000)=0x21bb) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) kill(0xffffffffffffffff, 0x3) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) (async) writev(r0, &(0x7f0000002d00)=[{&(0x7f00000009c0)="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", 0xa1e}, {&(0x7f00000019c0)}], 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) (async) open(&(0x7f0000000040)='\x00', 0x20, 0x11) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pread(r3, &(0x7f0000000180)="48810aab", 0x4, 0x11) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1001) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000054c0), 0x2, 0x0) (async) ioctl$DIOCIGETIFACES(r4, 0xc0284457, &(0x7f0000006700)={'./file0\x00', 0x0, 0x100, 0x7106fc0e, 0x4, 0x3}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x88, 0x8, 0xfc, 0x1}, {0x2, 0x8, 0x4, 0x2}, {0x7, 0x1, 0xcd, 0x8}, {0xfff, 0x6, 0x3, 0x5}, {0x3, 0x0, 0x5, 0x3}, {0x4, 0x5, 0x0, 0x800000}, {0x2, 0x8, 0x5, 0x2}]}) (async) ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f0000000000)=0x21bb) (async) 82.040947ms ago: executing program 6 (id=89): recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x308}, 0xc) ioctl$DIOCGETSYNFLWATS(0xffffffffffffffff, 0xc0084463, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) 21.592509ms ago: executing program 7 (id=90): r0 = socket(0x18, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000000)="02000000", 0x4) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r3, 0xc0105715, &(0x7f0000001540)={0x52, &(0x7f0000000340)=[0x0, 0x0]}) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000003c0), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r5, 0x80804465, &(0x7f0000000740)={0x872, 0xe90f, 0x2, 0xffffffff, "6700be000100000000060002ad0000001000", 0x6, 0x4}) ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000140)={0x5, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @random="0f3a9a5b352c", [], {@ipv6={0x86dd, {0x0, 0x6, "99ffff", 0x0, 0x16, 0x7f, @rand_addr="cb697a653c336f0068707f6b00009992", @mcast2}}}}) 21.263074ms ago: executing program 6 (id=91): r0 = socket(0x6, 0x4000, 0x1) shutdown(r0, 0x1) listen(r0, 0x1) (async, rerun: 32) getpeername$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c) (async, rerun: 32) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x30, 0x1, './file0\x00'}, 0xa) (async) sendmsg$unix(r2, &(0x7f0000001400)={&(0x7f0000001300)=@file={0x92, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xa) 20.933094ms ago: executing program 7 (id=92): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0x18, 0x4003, 0x47) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DIOCSTOP(r1, 0x20004402) 11.921608ms ago: executing program 0 (id=93): r0 = socket$inet(0x2, 0x2, 0x0) accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="4f07abb7ed0bc9ed37435bb91500ee5f71b560df0631e8b5ebe2d0db6ba8fce3108c85592a13ecfeee8f2578157598167c495963c0ab5fadbc88b67b744f26ccf5174535f70200000000000000b75fe2639b4d1d45214aa749165414d79cec7bcf5609647522eb9e321d3a7e9bebb9658ef92efd", 0x16) 1.206256ms ago: executing program 7 (id=94): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000040)={&(0x7f0000000240)=[{0x7, 0xcf}, {0x25, 0x3}], 0x2}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db8344ffaa1100fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000000000014e234e22ffaa00"]) 147.576µs ago: executing program 5 (id=95): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) getgroups(0x1, &(0x7f0000000240)=[0x0]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2012, r2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) recvfrom(r0, &(0x7f0000001200)=""/4096, 0x1000, 0x62, &(0x7f0000000280)=@in6={0x1c, 0x18, 0x3, 0xd, "a7bb428f6e8b4e54c7085ed58b6955bd", 0x8}, 0x1c) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x40047477, &(0x7f0000000340)={0x0}) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)="56b8f286cf3202f951c9eae2356ed5ab8c1fedb9d2787efe32abae43a1b1ba694e8d6072a397b90d862385f585d4be1644f9e24f1e55dadad8b19a03854727471b652d", 0x43}], 0x1, 0xc) execve(0x0, 0x0, 0x0) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETBELL(r4, 0x40105704, &(0x7f0000000040)) setrlimit(0x1, &(0x7f00000011c0)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) r5 = open(&(0x7f0000000080)='./file0\x00', 0x8, 0xa2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fff, 0x6b881aef, 0xb, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x7, 0x88, 0x8008, 0x4}, {0x101, 0x9, 0x0, 0x9}, {0xf, 0xd, 0xe, 0x4}, {0x6, 0xa, 0x100027ff, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x7d4d095c}, {0x2, 0x84, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11088}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0x10001, 0x4, 0x1000008, 0x2}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x7, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30004}]}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0xe, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) socket$inet(0x1e, 0x1000, 0x8b) 0s ago: executing program 6 (id=96): ktrace(0x0, 0x5, 0x4000054d, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0xa011, r0, 0x1) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43260c7c79f, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) unlink(&(0x7f0000000040)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. Connection to 10.128.0.97 closed by remote host. uvm_fault(0xfffffd806c9a7e78, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *350708 89870 0 0 0x4000000 0 syz-executor ktrops(ffff80002f0b0fa8,ffffffffffffffff,0,e0c7c79f,fffffd8076fff6d0,fffffd8007ffd7b8) at ktrops+0x58 doktrace(fffffd8076fff6d0,4,60c7c79f,0,ffff80002f0b0fa8) at doktrace+0x6bd sys_ktrace(ffff80002f0b0fa8,ffff80002a7b7dd0,ffff80002a7b7d20) at sys_ktrace+0x11c syscall(ffff80002a7b7dd0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbe50d909760, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806c9a7e78, 0xf, 0, 1) -> e ddb> trace ktrops(ffff80002f0b0fa8,ffffffffffffffff,0,e0c7c79f,fffffd8076fff6d0,fffffd8007ffd7b8) at ktrops+0x58 doktrace(fffffd8076fff6d0,4,60c7c79f,0,ffff80002f0b0fa8) at doktrace+0x6bd sys_ktrace(ffff80002f0b0fa8,ffff80002a7b7dd0,ffff80002a7b7d20) at sys_ktrace+0x11c syscall(ffff80002a7b7dd0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbe50d909760, count: -5 ddb> show registers rdi 0xffff8000380ca000 rsi 0x58eb __ALIGN_SIZE+0x48eb rbp 0xffff80002a7b7af0 rbx 0xfffffd8007ffd7b8 rdx 0xffff8000380ca000 rcx 0x58ea __ALIGN_SIZE+0x48ea rax 0xffffffff82e154e3 ktrops+0x43 r8 0xfffffd8076fff6d0 r9 0xfffffd8007ffd7b8 r10 0x4c3da5b321bfc3 r11 0xa047a4e1876be41f r12 0xffff80002f0b0fa8 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xe0c7c79f rip 0xffffffff82e154f8 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a7b7a70 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb> show proc PROC (syz-executor) tid=350708 pid=89870 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f0b1a08,0xffffffff83abb230 process=0xffff8000ffff9b18 user=0xffff80002a7b2000, vmspace=0xfffffd806c9a7e78 estcpu=6, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 89870 63306 30010 0 2 0 syz-executor *89870 350708 30010 0 7 0x4000000 syz-executor 52988 499226 3237 0 2 0 syz-executor 52988 249368 3237 0 3 0x4000080 fsleep syz-executor 57242 24235 81510 0 2 0 syz-executor 57242 148468 81510 0 3 0x4000080 fsleep syz-executor 12595 520711 7538 0 2 0 syz-executor 12595 514901 7538 0 3 0x4000080 fsleep syz-executor 32442 426430 6495 0 3 0x80 nanoslp syz-executor 32442 224385 6495 0 3 0x4000080 kqsel syz-executor 32442 497649 6495 0 3 0x4000080 fsleep syz-executor 32442 80193 6495 0 3 0x4000080 fsleep syz-executor 3237 17183 8040 0 3 0x82 nanoslp syz-executor 30010 492141 8040 0 2 0xc82 syz-executor 78344 53690 8040 0 3 0x82 nanoslp syz-executor 29146 451588 8040 0 2 0xc82 syz-executor 6495 223661 8040 0 2 0xc82 syz-executor 81510 295973 8040 0 2 0xc82 syz-executor 7538 248862 8040 0 2 0xc82 syz-executor 56882 466508 8040 0 2 0x2 syz-executor 8040 332662 53949 0 3 0x82 kqread syz-executor 53949 482440 1 0 3 0x10008a sigsusp ksh 39102 330302 1 0 3 0x102803 bqwait getty 32511 385397 91406 73 3 0x1100090 kqread syslogd 91406 180311 1 0 3 0x100082 sbwait syslogd 9105 1141 1 0 3 0x102800 bqwait resolvd 59509 446444 0 0 3 0x14200 bored smr 27445 175315 0 0 2 0x14200 zerothread 98976 190164 0 0 3 0x14200 aiodoned aiodoned 47650 362610 0 0 3 0x14200 syncer update 78160 428979 0 0 3 0x14200 cleaner cleaner 76323 504076 0 0 3 0x14200 reaper reaper 17743 155070 0 0 3 0x14200 pgdaemon pagedaemon 18353 332192 0 0 3 0x14200 bored viomb 8685 506626 0 0 3 0x40014200 acpi0 acpi0 23581 63229 0 0 3 0x14200 bored softnet0 55673 203775 0 0 3 0x14200 bored systqmp 35127 287117 0 0 3 0x14200 bored systq 70371 235123 0 0 2 0x40014200 softclock 14480 95271 0 0 3 0x40014200 idle0 1 146252 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11027 12098K 12431K 166960K 12225 0 pcb 18 16K 17K 166960K 122 0 rtable 245 7K 8K 166960K 398 0 pf 32 13K 13K 166960K 38 0 ifaddr 41 7K 7K 166960K 47 0 ifgroup 50 2K 2K 166960K 54 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 18K 166960K 37 0 ioctlops 0 0K 4K 166960K 110 0 iov 0 0K 16K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1356 85K 86K 166960K 1493 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 93K 166960K 226 0 sigio 0 0K 0K 166960K 36 0 proc 54 43K 108K 166960K 507 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 9 0 in_multi 95 7K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 369 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 170 109K 166K 166960K 3708 0 UVM aobj 103 3K 3K 166960K 104 0 pinsyscall 26 52K 94K 166960K 1317 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 16 0K 2K 166960K 30 0 temp 42 9111K 9183K 166960K 6697 0 kqueue 5 8K 26K 166960K 36 0 SYN cache 2 16K 16K 166960K 2 0 ddb>