last executing test programs: 1.656382854s ago: executing program 5 (id=6): r0 = getpid() ktrace(0x0, 0x39500f9a1a026d7d, 0x200, r0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f00000003c0)={0x40978b, 0x10001, 0x7, 0x800033, "3b08000100f167c99e3bb0c69d73230100040c00", 0x200, 0x81}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000001c0)=0x1) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x80000000) r3 = syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000300)=0x5) mmap(&(0x7f000045f000/0x3000)=nil, 0x3000, 0x1, 0x8010, r3, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) clock_gettime(0x2, &(0x7f00000002c0)) ppoll(0x0, 0x0, &(0x7f0000000100)={0xe7, 0x9}, &(0x7f0000000180)={0x1000}) 1.654910697s ago: executing program 3 (id=4): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x9012, r0, 0x100000001) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="74029b16f4284a6dc151f368d3db0c509c28709a6a75939b6a76d63b571f9e94717df347f8557334198b061981918c61ae691ee43a0a774d60e54848ed125e079fe809825636d4a9392320c2bccf13a546bd", 0x52) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x637f) stat(&(0x7f00000015c0)='./file0/file0\x00', &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8008, 0x7}, {0x101, 0x8, 0x1, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x4}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0xc038694e, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x801169ab, &(0x7f00000001c0)) execve(&(0x7f0000001a40)='./file0/file0\x00', &(0x7f0000001a80), &(0x7f0000001b40)=[&(0x7f0000001ac0)='tap', &(0x7f0000001b00)='tap']) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) poll(&(0x7f0000000380)=[{r3, 0xcb}], 0x1, 0x487) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="cac73ce119f42809f7c30824a593555ffe", 0x11}], 0x1, 0x0, 0xc8}, 0x0) recvmsg(r0, &(0x7f0000001a00)={&(0x7f0000000280)=@in6, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001600)=""/245, 0xf5}, {&(0x7f0000001700)=""/67, 0x43}, {&(0x7f00000017c0)=""/137, 0x89}, {&(0x7f0000001880)=""/116, 0x74}], 0x4, &(0x7f0000001940)=""/175, 0xaf}, 0x801) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000001540)=""/65, 0x41}, {&(0x7f0000000340)=""/23, 0x17}], 0x4, 0x3c4f) socket(0x18, 0x1, 0x0) ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f0000000200)=0x4) sysctl$net_inet_ip(&(0x7f0000001a80)={0x4, 0x2, 0x0, 0x26}, 0x4, &(0x7f0000001b80)="959d82157b8e2e160167006706e08e403ed2cdf752e07364406b90c4cc9404fac617bf2881308d488cbc0668b73ac0597195e01c31dcbc89d90ce8f5ad58b779aba806d445709421fc8d14d2c01c4ab32276b14d4f166692129a43dc0f8a4ca3731fbdf3ba6acb83a6377d35a98c2739bd56c7f29392c6d45b3bea2996fc23235dff8c61602485d5fb30f55deee9a19ef2e35b79fcfe20046a884abf52509faf3797e58999ed9305317a9807758b42c5933468af186f03454f445dc7d2e82b5e9e4ccab3e7cdb8167ed646cde5361b75bcf1b810cc1043e59fa0f51a1b50165309420e15612b9ddd7f2fed", &(0x7f0000001c80)=0xeb, &(0x7f0000001cc0)="6c7842b2eabd5d5a60575897345bd7994f5926fb4e6fbe3becc6eaa7f1bbc632cbba48db54ed070c4ab02795dfc5c0b7a33e4942e1e4b2275c1a8523ed8bacedbf1f0d965f0aa24c4f4cec89b0a50d4b6d829b0d0485f7e7a9f758650b6557ea01cc19ea5157606021899ba95abc414aa63e8d4d82e66ce9cf0f81ba701071399452377f64e16f42d6de2e4c23afb7d91eb290d3be7a0c5a8d5cec1d45e0646775f62c86efb3ed077216c89891548105d54808c2493b8c719872f4be2920e06c7b70c4ad987549a20f00dbebdaa447925641f8e6f71c08c609d7f03cd08c29cc834e89e90f882338819ef343db9a2b271b8d371f87", 0xf5) 1.651990522s ago: executing program 1 (id=9): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f00000002c0)={{'./file0\x00', './file0\x00', 0x11, 0x6}, 0x0, 0x0, 0x0, 0x6, 0xffffff81, 0x2, 0x4, 0xc8, 0x7}) 1.633877107s ago: executing program 7 (id=8): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, 0x0, 0x0) 1.631298514s ago: executing program 1 (id=11): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x1e, 0x3, 0x0) close(r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000172000/0x2000)=nil, 0x2000, 0x1) socket$inet(0x2, 0x8003, 0x0) mknod(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100000000205f, 0x2802) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x8) open(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, 0x66) select(0x40, &(0x7f0000000000)={0xc, 0x2, 0x8, 0xffff, 0x6, 0x2008, 0x4, 0x4}, &(0x7f0000000080)={0x7, 0x2fe8, 0x8, 0x3, 0x1000, 0x574, 0xb7, 0x1}, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mknod(&(0x7f0000000180)='./bus\x00', 0x1000, 0xd01) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r4, 0x41406474, &(0x7f0000000500)={0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r3, &(0x7f00000003c0), 0x0) open(0x0, 0x40000, 0x110) syz_open_pts() r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x181) ioctl$FIONREAD(r5, 0xc028698b, 0x0) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x26, 0xb, &(0x7f0000000200)='\x00\x00 ', 0x3) setsockopt(r6, 0x2, 0xb, &(0x7f00000002c0)="27ea539e73f1b86a56e6bad8244d98015d1e1bb32d72875bb6ceef092adc2f2113a14d78ebcdb23f5c9760fd51747d03f6a83c9166cc0b6a987cc6982a67f6cffea81ac8823be3302bf08f0cecf0e9971f24ce25a157", 0x56) ioctl$WSDISPLAYIO_ADDSCREEN(r5, 0x80245753, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x10c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r7, 0x8531) sendmsg$unix(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)='P', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x5) 415.158034ms ago: executing program 6 (id=12): mknod(&(0x7f0000000200)='./file0\x00', 0x20, 0x412dff) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setuid(0xffffffffffffffff) r1 = socket(0x800000018, 0x4000, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x4, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="7f37ce070000003d965a1564287bafc1d6d531c28c4a7eaa13e5232a74bba3779ca27b8e0d00000004fe8a4cc330bb35350cb60a9a374aa8a836289681106692", 0x40}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r2 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) symlink(&(0x7f0000000280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001280)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@broadcast, @random="00e0300eaaf8", [], {@generic={0x1600, "9fbdcae47388345002806ca3b25e9dde52cbc29a310a4aa8abbcc98bfa7ed9d0b08773cdacbf5e47a2899edf740f9b1667741c79cd06f2fad878a4aa8207a44109b22c2e86eb77c5d84e"}}}) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r3 = socket(0x18, 0x1, 0x0) close(r3) getsockname$inet6(r1, &(0x7f0000000080), &(0x7f0000000100)=0x1c) r4 = socket(0x24, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0x1c, 0x18, 0x2, 0x0, "054838dc1d2786588a829679830a9c5c", 0xff}, 0x1c) setsockopt(r3, 0x6, 0x1, &(0x7f0000000280)="e9f6d779", 0x4) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x2, 0x0) dup(r4) ioctl$BIOCSBLEN(0xffffffffffffffff, 0xc0044266, &(0x7f0000000000)=0x2) futimes(r5, &(0x7f0000000340)=[{0x10001, 0x5}, {0x7f}]) write(0xffffffffffffffff, &(0x7f0000000040)="0920e80000007c60e1016745b65369db00000000ebbd07a90172c84c838b4278ad535c39413f308cbbaee4ffcb7f31dbd1562eb77b6a0a", 0x37) 414.7457ms ago: executing program 7 (id=13): syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaacc871d004f9908004b7000340067000109049078e0000001000000009406000144100785890000030000000d000000054e214e2200089078"]) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000180)={0x3, 0x4}) r1 = socket(0x11, 0x3, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa15, 0xd, 0xd2, 0x6}]}) sendto$unix(r1, &(0x7f0000000340)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32618180000720fd38bdb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f834371205050052fbe03f49b11b7aaeb70000fca65361ba84913f0100000000000006000000", 0xb1, 0x408, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x23, [{&(0x7f0000330000/0x2000)=nil, &(0x7f000055c000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f000063b000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000238000/0x3000)=nil, &(0x7f0000460000/0x1000)=nil}, {&(0x7f0000310000/0x1000)=nil, &(0x7f00005a8000/0x1000)=nil, 0x4}, {&(0x7f0000270000/0x1000)=nil, &(0x7f00003cb000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000013b000/0x2000)=nil, 0x8}, {&(0x7f0000762000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000017000/0x3000)=nil, 0xfff}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x8000000000000000}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f000009a000/0x1000)=nil, 0xba4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x6}, {&(0x7f000012a000/0x1000)=nil, &(0x7f00003fe000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00006b6000/0x1000)=nil, &(0x7f000066e000/0x4000)=nil, 0x200000fffffffe}, {&(0x7f00006f1000/0x4000)=nil, &(0x7f0000357000/0x3000)=nil, 0x20000}], './file0\x00'}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060396372"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='r\x00') ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x5, 0x6, 0x10, 0x1000}, {0x9, 0x9, 0xc5, 0x8004744}, {0x101, 0xd, 0x2, 0x9}, {0x1, 0xfa, 0x1, 0x2}, {0xe5, 0x4, 0x5}, {0x1, 0xa, 0x9, 0x81}]}) getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 291.44049ms ago: executing program 1 (id=14): sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt(r0, 0x6, 0x4, &(0x7f0000000240)="5194eb5d", 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f0000001400)='./file0\x00', 0x567, 0x0}) setsockopt(r1, 0x6, 0x8, &(0x7f0000000080)="1385d4d8", 0x4) 290.789832ms ago: executing program 1 (id=15): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000040)={0x10, 0x1, [{&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1d882971}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8000}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xceb}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x40000000000000}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x80000000}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7fff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x43}], './file0\x00', 0x7ff, 0x4, 0x1, 0xf83, [0x4ca, 0x80, 0x400, 0x400, 0x3, 0x4, 0x9, 0x8, 0x323, 0x1, 0xc0f6, 0xfffffff8, 0x4, 0x7f, 0x5f1, 0x7f, 0x0, 0x0, 0x4, 0x10, 0x7, 0x10000, 0x29f, 0x8, 0x9, 0x9, 0x0, 0x9, 0x4, 0x3, 0x81, 0xe, 0x8000, 0x7, 0x3, 0xfffffff8, 0x7fff, 0x7, 0x8a51, 0x80000000, 0x2, 0x80, 0x0, 0x9, 0xffff8a91, 0x2, 0xb, 0x4, 0x7, 0x4, 0x0, 0x5, 0xffffffff, 0x5, 0x9, 0x401, 0x3, 0x6, 0x6, 0x2, 0xfc, 0x1, 0x10001, 0x2, 0x0, 0xd, 0x60, 0xcd5e, 0x7, 0x2, 0x0, 0x1, 0x9224, 0xfff, 0x5d48, 0x0, 0x0, 0x7, 0x8, 0xffff44e8, 0x6, 0x51e62e45, 0xffffffff, 0x4, 0xc2, 0xef5, 0x6, 0x800, 0xe3, 0x5, 0x6d, 0x27bf, 0xafa1, 0x0, 0x8000, 0x3, 0x80, 0x7fff, 0x0, 0xf5, 0xffff, 0x10b1, 0xfff, 0x4, 0x10001, 0x6, 0x40, 0x6, 0x204c00, 0x2, 0xa5, 0x10, 0x7ff, 0x2, 0x80, 0x1, 0xfffffffc, 0x20000bb, 0x4, 0x0, 0x8, 0x4, 0xcb2, 0x7, 0x401, 0x91c6, 0xfffffa79, 0x7, 0xb, 0x9, 0xff, 0xca, 0xa, 0x7f, 0x9, 0x2, 0x100, 0x8, 0x5, 0x7, 0xfffffffc, 0x993, 0x6, 0x3, 0xb1d, 0x91, 0x7, 0x232f, 0xf5a, 0xfffffc01, 0x0, 0x81, 0x998, 0x9, 0x5, 0x5, 0x4, 0x0, 0x638, 0x10000, 0x7, 0x4, 0x7, 0x7ff, 0x2, 0x40, 0x1, 0x8, 0x7b8, 0x10, 0x9, 0xdc2, 0x38c, 0xfdf8, 0x5, 0xfffff800, 0x80000001, 0xb7, 0x400, 0xa, 0x0, 0x7, 0x4ef, 0x9a91, 0x7ff, 0x26b, 0x800, 0x4, 0xe77e, 0x9, 0x1, 0x3, 0x9, 0x5, 0x5, 0x8, 0x2, 0x3, 0x81, 0x558, 0x7, 0x8, 0x8, 0x2, 0x9, 0xd84d, 0x7ff, 0x1, 0x4, 0x7, 0x3, 0x72ee, 0xb2, 0x8, 0xbf, 0xe, 0x400, 0x8, 0x9ba, 0x6, 0x5, 0x8, 0x5d80, 0xffff, 0x0, 0x9, 0x8, 0x5, 0x0, 0x1, 0xb, 0xc, 0xe75c, 0x3, 0x4, 0x7, 0xc16f, 0x7fffffff, 0x1, 0x6, 0x8, 0x8, 0x1, 0x2, 0x7, 0xca5, 0x1, 0x10, 0x6, 0x2, 0xfffffffc, 0x4, 0x6, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x5, 0x3, 0x7fffffff, 0x65, 0x0, 0x0, 0x9, 0x2, 0x800, 0x9, 0x10000000, 0x7, 0x3ff, 0x0, 0x7, 0xabe, 0x200, 0x2, 0x5, 0x10000, 0x73, 0x59d, 0x4, 0x191, 0xaf9, 0x400, 0x3, 0x7, 0x8, 0x7, 0x1e3, 0x9, 0x9, 0xe, 0x5, 0x4, 0x2, 0x7, 0xbf, 0x1, 0x3, 0x10001, 0x1, 0x7, 0x734, 0xda, 0x100, 0x401, 0x401, 0x0, 0xfffffff1, 0x1000, 0x2, 0x8, 0x5, 0x7, 0x4, 0x101, 0x6, 0x5, 0x5, 0xc, 0x7f, 0x8, 0x1, 0x0, 0x8000, 0xbda, 0xfffffff7, 0xd6e, 0x1, 0x2, 0x5, 0x8, 0xca, 0x7, 0xfffffff8, 0xfffffffe, 0x9, 0x3f3, 0x1, 0x1ff, 0x10000, 0x82, 0x1, 0x2, 0x8, 0xb0c, 0x4, 0x6, 0x80, 0x4, 0x6, 0x60, 0xfffffffb, 0x81, 0x0, 0x101, 0xbd, 0xd89c, 0x325, 0x8000, 0x2, 0x1, 0x4c, 0x7, 0x8, 0xffff, 0x4, 0x98, 0xaf3, 0x2, 0x5, 0x9, 0x7, 0x8, 0x39ae1c73, 0x823, 0x4, 0x7, 0x400, 0xfffffff8, 0x0, 0x0, 0x9, 0x9, 0x9, 0x8, 0x9, 0x8, 0x6, 0x5, 0x7, 0x1, 0x8001, 0x2, 0x475, 0xdd7, 0xffff, 0x7a5f, 0x421, 0x2, 0x13, 0x9, 0x2, 0x7ff, 0x1b, 0x1ff, 0xc0000, 0x1, 0x0, 0x9, 0x4000000, 0x7fffffff, 0xfffffff7, 0x2, 0x4, 0x8000, 0xf, 0x3, 0x0, 0xd3, 0x8, 0x401, 0x4, 0x8, 0x8, 0x6d, 0x2f1, 0x10, 0xe0, 0x5, 0x5, 0x2, 0x2, 0x70d, 0xffffff80, 0x8, 0x81, 0x90, 0x4, 0x98e, 0x4, 0xe, 0x3, 0x80000000, 0xf14, 0x5, 0xffff, 0x5, 0x6, 0x0, 0x2, 0x5, 0x8137, 0x7, 0x5, 0xb6, 0x4, 0x7, 0x7, 0x9, 0x852a, 0xe13f, 0x3, 0x0, 0x7, 0xeb2d, 0xef, 0xa3, 0x100, 0x8001, 0x5, 0xffffffff, 0x8000000, 0x5, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7fff, 0x0, 0x1ff, 0x2, 0xfff, 0x5, 0x2, 0x80000000, 0x9, 0xfd5e, 0x9, 0x9, 0x6, 0x5, 0x75, 0x7, 0x7, 0x19f06f83, 0x8000, 0x3, 0xb7, 0x7, 0xcf7, 0x1, 0x0, 0x7000, 0x200, 0x4, 0x8, 0x2, 0x4, 0x7]}) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000a40), 0x100, 0x0) ioctl$TIOCCLRVERAUTH(r1, 0x2000741d) 263.367526ms ago: executing program 1 (id=16): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x6}, {0x48, 0xa3, 0xff}, {0x6, 0x80, 0x12, 0xfffff805}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346bcfc2e786031d4b86fc1f36e5250f6d2b982fd38", &(0x7f0000000000)=0x3d, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[]) r3 = dup(r0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x7, 0x6, 0xf8, 0x6}, {0x0, 0xb, 0x4, 0xcf1}, {0x1, 0x0, 0x55, 0x7ff}]}) 262.248578ms ago: executing program 4 (id=17): sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x9, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) openat$dri(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x8, 0x0) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f00000002c0)={0x6, 0x2, 0xfffffff5, 0xffffffff, 0x2, 0x9, 0x3, 0x10, [{0x0, 0x3, 0x5, 0x2}, {0xfffff786, 0x8, 0x8, 0x8}, {0x7, 0x4, 0x7, 0xfffffffa}, {0xfffffffc, 0x0, 0x46, 0x9}, {0x2, 0x8, 0x5, 0xfff}, {0x7fffffff, 0x10001, 0x100, 0x9}, {0x3, 0x401, 0x4, 0x9}, {0x7, 0x7, 0x0, 0x8001}, {0x9, 0xffffffff, 0x8, 0x10001}, {0x0, 0x89, 0x8, 0xffff}, {0x80000000, 0x4, 0x7, 0x1}, {0x772, 0x6, 0x2, 0xffffffff}, {0x80000001, 0xd5c6, 0x10, 0xff}, {0x4, 0x8000, 0x6, 0x22}, {0x5, 0xd7ae, 0x101, 0x4}, {0x82, 0x5, 0x7fff, 0x1}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fd, 0x1a, 0xfffffffe, 0xfd4, 0xcfe6, 0xcd1, 0x17ffe, 0x10, [{0x0, 0xd, 0x2, 0xa24}, {0xc5c, 0xfffffff8, 0x5, 0xfffffff1}, {0x800008, 0x20f04, 0x1fc, 0x7d2}, {0x7ffffffe, 0x3, 0x2, 0x784c}, {0x3fd, 0x8, 0x3ff, 0xf8c}, {0x8, 0xfc, 0x3, 0x32}, {0x8000008, 0x0, 0xa1ea, 0x29}, {0xf64, 0x836, 0x13, 0x3}, {0x2, 0x40087e, 0xfffffeff, 0x7}, {0x10005, 0xa74d925a, 0x5, 0x40000088}, {0x1db, 0x1, 0x4, 0x8f}, {0x1, 0xa, 0x20008, 0x40000010}, {0xb8d, 0x4, 0x8, 0x3}, {0x4, 0x9f2, 0x1, 0x6}, {0x400002, 0x7, 0xfffffff8, 0x104}, {0x4000200, 0xc, 0x801202, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f0000000240)={0x0, 0xcf, 0x0, 0x5c}) 261.865502ms ago: executing program 1 (id=18): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) (async) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r0 = syz_open_pts() close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, 0x0, 0x0, 0x4, 0x0, 0x0) dup2(r2, r1) r3 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="3ee6691ac4a343d1e38334bd2e48dee6b8ec0a9b313aabbdaba15ea0f9c1fb7c0726e1ceda5c0497429e6c2cc24219c2ab37ad5541e826723ecdb44afae356a1d13046947bb6be536f706a58b826a82b3db75700a3f297bfe1432942489c7ae8c3fac91f0bd6393f709fad27a70f3da83d84011a3e77edff8012cc4ad825519ad0c0380d4aad4c903ebe", 0x8a}], 0x1) dup2(r3, r0) (async) dup2(r3, r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x121) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x121) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) (async) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) r4 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) setrlimit(0x5, &(0x7f0000000280)={0x7fffffffffffffff, 0x477a}) setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000008, 0x1}, {0x6, 0x401}}, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) utimes(0x0, &(0x7f0000000380)={{0x1ff, 0x1}, {0xfe7, 0x8001}}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000004c0)={0xd27, 0xffff, 0x7, 0x7fc, "2cffffffffd613696e4f569fa539543ef0d000", 0x104, 0x4200008}) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000004c0)={0xd27, 0xffff, 0x7, 0x7fc, "2cffffffffd613696e4f569fa539543ef0d000", 0x104, 0x4200008}) poll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x100) 193.423737ms ago: executing program 5 (id=19): r0 = socket(0x2, 0x4001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x121) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setrlimit(0x5, &(0x7f0000000280)={0x7fffffffffffffff, 0x477a}) setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000008, 0x1}, {0x6, 0x401}}, 0x0) setuid(0xffffffffffffffff) utimes(0x0, &(0x7f0000000380)={{0x1ff, 0x1}, {0xfe7, 0x8001}}) r2 = dup(r0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = dup2(r2, r3) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x14) r5 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x7, 0x88, 0x8008, 0x7}, {0x101, 0x9, 0x0, 0x9}, {0x9, 0xd, 0xe}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11088}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x7, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30004}]}) listen(r4, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$WSDISPLAYIO_DELFONT(r6, 0x8058574f, &(0x7f0000000740)={'./file0\x00', 0x10000, 0x9, 0x41966489, 0x2, 0x90, 0x1ff, 0x61, 0x1, 0x0, 0x8, 0x4}) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000001340), 0x4) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) r7 = socket(0x2, 0x3, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r7, 0x80206913, &(0x7f0000000100)) 192.847173ms ago: executing program 5 (id=20): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x1, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x1, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x7, 0x0, 0x1, 0x6, 0x6, 0x2300000000000000, 0x4}, &(0x7f00000000c0)={0x2, 0xac1e, 0x0, 0x89b7, 0x9, 0x7c, 0x85, 0x64}, &(0x7f0000000100)={0x0, 0x86c4}) 161.61898ms ago: executing program 7 (id=22): r0 = socket(0x18, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40) shutdown(r0, 0x2) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x4, 0x12, 0x0, 0x20000007}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x200) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCGRSIG(r1, 0x40044273, &(0x7f00000000c0)) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x3, 0x17, 0x2000004, 0x6, 0x40cbe, 0x7, 0x17ffe, 0x10, [{0x0, 0x7, 0xc50, 0xa24}, {0xc5c, 0xb, 0x8, 0xffffffff}, {0x800004, 0x7, 0xb, 0x9}, {0x7ffffffe, 0x80000800, 0xba2, 0x1}, {0x3fe, 0x20007ff, 0x6, 0x4d8a}, {0x3, 0x101, 0x3, 0xb4}, {0x8000008, 0xd173, 0x81e8, 0xffffffff}, {0x100004, 0x3, 0x40006, 0x400006}, {0x2, 0x881, 0x5, 0x9}, {0x1000002, 0x1ff, 0xd1b, 0x84}, {0x1c1, 0x92c, 0x4, 0x49ac8391}, {0x100003, 0x6, 0x20004, 0x4000000c}, {0x9, 0x7, 0x6da, 0xfffffffd}, {0x69a71720, 0xffffdffa, 0x3, 0x6}, {0x91, 0x7, 0xfffffff9, 0x100}, {0xfffffffe, 0x8, 0x40004, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') 160.822185ms ago: executing program 5 (id=23): r0 = semget(0x0, 0x1, 0x480) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000400)=0xfff) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[]) clock_gettime(0x4, 0xfffffffffffffffe) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) semctl$SETALL(r0, 0x0, 0x9, &(0x7f00000001c0)) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/183) semctl$GETPID(r0, 0x4, 0x4, &(0x7f00000000c0)=""/4096) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000010c0)=""/4096) 160.033668ms ago: executing program 6 (id=24): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KDSETMODE(r0, 0x20004b0a, &(0x7f0000000040)=0x1) ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f0000000080)) ioctl$WSDISPLAYIO_GINFO(r0, 0x40185741, &(0x7f00000000c0)) ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(r0, 0x4004575c, &(0x7f0000000100)) r1 = syz_open_pts() ioctl$TIOCSTART(r1, 0x2000746e) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000140)={0x2, 0x7fffffff}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x7012, r0, 0x8) pread(r1, &(0x7f0000000180)="348d33a05879c20eaaca4af045e6f05508acc53b6def01fd900e3ed465dfc9d326aa745a40552bb31dd9852ba063b43754b582e2dbb9d9ec80c107807d8e136e1bf184c7b976e1055c8bb55db8407a0ef4802d4b1e0f9f65bdb42e33c2db5690c33e115862dfc59df0dd8c64b67c8c23ef392f925cee6941bab09c643c4b5d21f215fb45f6bfa6649b88ad1d5301b52353f34af94208148816b05e063d270fae13cd74ac997a401f0335d69a158921a8bca55b4131a632311f373623771f5ad23975eff0cfaaf3c91e5cc397f9f7043b278574996a842e5357866912a4cbbb3f428df5d7b62c4174", 0xe8, 0x2be) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$TIOCNXCL(r1, 0x2000740e) r2 = msgget$private(0x0, 0x80c) msgsnd(r2, &(0x7f0000000280)={0x2, "0acf2bdf5137a11d98dc63413d3d9b5e6854fc4cea5f9fb1cb2b8d19"}, 0x24, 0x0) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) ioctl$WSDISPLAYIO_WSMOUSED(r3, 0x80185758, &(0x7f0000000300)={0x5, 0x6, {0x9, 0x8000000000000000}}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) ioctl$DIOCRSETADDRS(r4, 0xc4504445, &(0x7f0000000400)={{'./file0\x00', './file0\x00', 0x2, 0xe8}, &(0x7f0000000380)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x10000, 0xc0, 0x0, 0x0, 0xa, 0x7f, 0x6}, {@multicast2, '\x00', './file0\x00', 0x430, 0x20, 0x18, 0x1, 0x5, 0x3, 0x8}], 0xe, 0x2, 0x9, 0x81, 0x3, 0x9, 0x0, 0x659424e5}) ioctl$VT_WAITACTIVE(r3, 0x20007606, &(0x7f0000000880)=0x1000) r5 = socket(0x3a, 0x8000, 0x1) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f00000008c0)={'./file0\x00', 0x1, 0x6, 0x0, 0x1, 0xa, 0x7, 0x9, 0x0, 0x2, 0x2, 0xfffffffffffffff7}) recvfrom(r5, &(0x7f0000000940)=""/42, 0x2a, 0x1800, 0x0, 0x0) r6 = open$dir(&(0x7f0000000980)='./file0\x00', 0x10, 0x101) r7 = open$dir(&(0x7f0000000a00)='./file0\x00', 0x80, 0x40) linkat(r6, &(0x7f00000009c0)='./file0\x00', r7, &(0x7f0000000a40)='./file0\x00', 0x4) utimes(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={{0xa, 0x40}, {0x0, 0x800}}) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000b00)=""/124) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b80)=@abs={0x8, 0x1, 0x0, 0x0}, 0x8, &(0x7f0000000c40)=[{&(0x7f0000000bc0)='iyc/', 0x4}, {&(0x7f0000000c00)="638b98ed66e318", 0x7}], 0x2, &(0x7f0000000d00)=[@cred={0x18, 0xffff, 0x0, 0xffffffffffffffff}], 0x18, 0xe}, 0x0) 159.642281ms ago: executing program 2 (id=25): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x6, 0x2000007, 0x104, 0x80000001, 0x80000082, 0x4, 0x10, [{0x0, 0x101, 0x3, 0x71000}, {0x7, 0x88, 0x1}, {0x8, 0x9, 0x0, 0x9}, {0x3, 0x900, 0x4}, {0x401, 0x4, 0x2800, 0x7}, {0x82, 0x27f6, 0x3, 0x99}, {0x7, 0x227a, 0x4f8, 0x6d}, {0xc, 0x3, 0x8, 0x7}, {0x2, 0x82, 0xfffffff9, 0x9}, {0x8, 0x100, 0xd1b, 0x108b}, {0x1e3, 0x10001, 0xd, 0x6}, {0x7fe, 0x26, 0x8, 0x9}, {0xb8e, 0x4, 0x6, 0x10000}, {0x29a71719, 0x3, 0x1, 0x6}, {0xc, 0x7, 0x4, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d2", 0x0, 0x0, 0x0) ioctl$TIOCSETA(r2, 0xc450443e, &(0x7f0000000040)={0x7fff, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1d100", 0x4, 0x5}) ioctl$VNDIOCSET(r1, 0x80044403, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0xffffffff7fffffff}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00000e7000/0x3000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f0000701000/0x3000)=nil, &(0x7f0000673000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0xa8}, {&(0x7f000015d000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000483000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) 151.867609ms ago: executing program 4 (id=26): msgget$private(0x500000000000000, 0x260) 104.25161ms ago: executing program 3 (id=27): setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000000)) 103.7659ms ago: executing program 4 (id=28): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x11, 0x3, 0xfffffff5}, {0x54, 0x5, 0x3}, {0x6, 0x80, 0x0, 0x4}]}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x2}, 0x2, &(0x7f0000000300), 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c2a6d6000000005ae39d73988d800f00ecfe746fc6", &(0x7f0000000000)=0x15, 0x0, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x33}, 0x2, &(0x7f0000000380)="48a76729208785a7ee290c15aee4b081c398f9e93a5e497826c3850176e72d452b62ca02db2605176e949ec1dfca8d8c1c414214f9e4bd0d0295e91862e0aeef055ae5c183576c694084e73ef740f4b80a4395561eda8b298ebadf2c92f775ba99b4e95b40a4b687339faf0257cc3f3cdd0fa7f8e6f8fcd6e8c5324014aa8c21ad1314ccfb6e85311fdb66134a7e9e4fcac4c9b822e13409809f2df23064be9519", &(0x7f0000000140)=0xa1, &(0x7f0000000180)="8d9fbb729579d948368a65c7222ce00e4eae2610ae14a1d884fbea", 0x1b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="00e0300eaaf8", [], {@ipv6={0x86dd, {0x5, 0x6, "435df7", 0x0, 0x3a, 0xfc, @loopback, @empty}}}}) syz_emit_ethernet(0x13d, &(0x7f0000000240)={@random="1df73ee61d91", @random="c412f11fc49f", [{[], {0x8100, 0x6, 0x1, 0x2}}], {@ipv4={0x800, {{0x11, 0x4, 0x2, 0x15, 0x12b, 0x67, 0x7ff, 0xcc, 0x67, 0x0, @multicast1, @rand_addr=0x9, {[@ssrr={0x89, 0x7, 0x7, [@multicast1]}, @rr={0x7, 0xf, 0x9, [@loopback, @remote={0xac, 0x14, 0x0}, @empty]}, @timestamp={0x44, 0x4, 0x83, 0x1, 0x4}, @end, @end, @ssrr={0x89, 0x7, 0xf7, [@multicast2]}, @timestamp={0x44, 0xc, 0x3, 0x1, 0x8, [{[@loopback], 0x7}]}]}}, @generic="77e102fea336d2207fdbcc9c223441237d54e7e8d4b87965b3bedd860473e208173d72f7a28a7c0216d491bcc4b76ccbd2100744bfd705d398da8175ffa5f3b4c535df3a5d98991cb77dacaddefb5b148fe2797e254800e78d60473415701b0f9164373dfd4c1f8d563c00b9960d185f1ac9ed52c249344d0f55ad3a4c0117a3a6a57bca610fb01d4f57871f9043cd6073058f8bb09d57365ecd9775a63d1360872607e87d666d80fb30e1b196f082e788464d17fd154facb91e832dfebb561b9a04e3535e7d25978452234f076957110095c4a86525a960cbfdbcf8a1a1c655a9e9f036361c9c"}}}}) 102.236387ms ago: executing program 3 (id=29): sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, &(0x7f0000000140)="d5bd0d1d2d9ffe09", &(0x7f0000000040)=0x8, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a6f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x5c, 0x0, 0x0, 0x406}, 0x10) ioctl$TIOCSETA(r2, 0xc4504449, &(0x7f0000000740)={0x9, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x3, 0x6}) listen(r0, 0x4) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000257000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000003a00)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7fff}, 0x38, 0xf) 91.754548ms ago: executing program 7 (id=30): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FIONREAD(r0, 0xc0205609, 0x0) 91.356391ms ago: executing program 2 (id=31): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x7ff) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$BIOCGBLEN(r1, 0x40044266, &(0x7f0000000300)) (async, rerun: 64) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000140)=0xa1f86e4a) (rerun: 64) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) pread(r0, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 32) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, &(0x7f0000000100)="a6f39fb89f88", &(0x7f0000000880)=0x6, 0x0, 0x0) (rerun: 32) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x7, 0x1, 0x4, 0x5}, {0x44, 0xf1, 0x1, 0x7}, {0x1026, 0x89, 0x46, 0x8}]}) (rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f0000000240)=ANY=[]) (async) r3 = dup3(r2, r2, 0x4) (async, rerun: 64) select(0x40, &(0x7f0000000180)={0x1, 0x0, 0x80, 0xfffffffffffffe01, 0x3, 0x60f, 0x1, 0x100000000}, &(0x7f00000001c0)={0x8000000000000001, 0x6, 0x2, 0x80, 0x7fffffffffffffff, 0x5, 0x8, 0x800}, &(0x7f0000000240)={0x2, 0x19e, 0x6, 0x40, 0x9, 0x0, 0x9, 0x8000000000000000}, &(0x7f00000002c0)={0xa, 0x5}) (rerun: 64) ioctl$TIOCGWINSZ(r3, 0x40087468, &(0x7f00000000c0)) 90.629256ms ago: executing program 6 (id=32): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f00000001c0)='\"', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x1, 0x0, 0x0}, 0x8) r2 = socket$inet(0x2, 0x3, 0xfc) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="8d6bb85551ec84", 0x7}], 0x1) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) mkfifo(&(0x7f0000000200)='./file0\x00', 0x1a2) r3 = open$dir(&(0x7f0000000000)='./file1\x00', 0x8, 0xa8) fstatat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0) 64.490842ms ago: executing program 4 (id=33): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x8, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e699", 0x10) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1c}, 0x2, &(0x7f0000001080), &(0x7f0000000080)=0x5f, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x100) read(r2, &(0x7f0000000480)=""/148, 0x94) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000300)=""/121, 0x79}, {0x0}], 0x2, 0x7fffffffffffffff) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000880)={0xfffffffa, 0x5, {0x3, 0xe}}) 64.235952ms ago: executing program 7 (id=34): r0 = socket(0x2, 0x8000, 0x6) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xfffffe97) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x100, 0x1, r1}) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x8) getsockopt(r0, 0x29, 0xa, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) 63.691099ms ago: executing program 3 (id=35): poll(0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000440)={0x45, 0x56}) r0 = syz_open_pts() close(r0) sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) open(&(0x7f0000000040)='./file1\x00', 0x200, 0x104) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={0x3ff}, 0x0) ioctl$TIOCSBRK(r1, 0x2000747b) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) 63.4525ms ago: executing program 6 (id=36): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x7) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000700)="2e46b5ccd20f42f025f4da0cab8b788e5cad97a89a9f23b2aa18ee96ea53b80ed2fd1ddd28dd50a8a8ff0aa252ce1cce4c6d5b3a5e2647ff694d529caf6017ba5e94f4c16d24", 0x46}, {&(0x7f0000000040)="2a26b02e96510a", 0x7}], 0x2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x18a) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000040)=0x9) close(r3) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setresgid(r4, 0x0, 0x0) 29.09492ms ago: executing program 2 (id=37): syz_open_pts() sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)="5ff68b9b26a58cca24eafea3f0fe8a7000f1b19105d0d55f241d47136fef7d5d084ae8a93474079d037d8043bacce9abcc49b40114e156afc14640d84d6f002fbf27c1e9d0f7648e23b1a61353a00c6704ea5993616706cde0fa39c32dbbf67624eebdb541057e0802760f589a6174844c1034d63f4d10bf9fb5fc2a353917784e0b9420d8d2840bedb3d862117fb4360da397e62515cbdf57906e9163de2e47e55ef53a6b3546b54803af930c914b330fcc348811bc9ca75f06ce358edf4bb3ff2b3f1d2589e333bfeabc0a662f", 0xce) mknod(0x0, 0x2000, 0x4270) sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000000000000ffff0000070000007b97c2378d967b1288110afcf60278d34210047c9e97d5d222786317ad75e96d6de37b5fe355dca8d7e43dd99d0b15a3b4106baaed09341100b4ab2ffd978e9aa800000000000000010000000180ffff28a04997184820f2e4982879200d3b2f9cfb00aa8fd1622d25abeee89b886e486051e6e12a6d251f5c621cb157d82eaf7853a910c6bb424d42d9cec25ccc60757aa05472f0e253def5ee715b23182360dd7563b81b3909c9274bc006118352bfdba4cf49a62454bd1eec3509206d6c81c18051973b7ee3dffd7fdd7985e1ba68febb8c8a7bc04b26e7233e740a870d4d3d7e2a7be0f39b002800000000000000010000000800000001bf8093b31ecd8a3fc84d6edb936a208d18fbbf11420000f00000000000000001000000ff070000f64e1838f79726412d01c762cb5cdf14e605329ead48ada1317b3185403f29709aaa299a7932bcc6bb668a690d21cfa7c1e3f24131e71ecc9dbdac88b668d4452872b450600563f2d82e9598cc45910303510d2bcfbefd737b7d54b085a775ae7fbe573bb9289171d788461274d8ad4d7151bbb547798dcb2a05e112613cdaa89f5ca096c901501d3531bc6c4df975c8a7e4042e8bdedd86a7ac10fc405b46003c6168d0b47086ddf6e7f2c8b54bb431bff21b38372c13b2ed4a489214eb5659f68e053388df0b4a0bbcc191350255d0f2d7d258f09f000dc9de0000000000009000000000000000ffff00000600000057247fd7074069a16184aeab7fa8c8621fcc04b11ed1c59687a8d1b5207005b96164c655c32b6ee2d675c24f32818beb9c9e0483525024bc1d1804d429eba11902f597c065aae9d5fbd453499cf543cf848d72d5b751ec56e535d593807fb1bc37306adb5970dccba44fa950dceaa941e7dc18ec03e32b8b9a4519d41308ce002800000000000000ffff000064000000e292fb1d3b9195d169561562e31e897c625ddcfca8000000b000000000000000ffff0000ffff000044feff0609d15fcd54ba6b5495ed420de0f005f612240657a7b4e840993c5cf18f0dc396f55f5f6e797f563b290632955c2c183b959a49c40ac678f70b6795661fb1d0537562aecda6d71d360bd557c7c1d42bb04ede105c31e101c15088256dc20a4306a6a3e586e98b93297c0554f851a3fd86800b010dd18b3e465808f969f19f53e5b6e0413fdaa4e5d6e191014dcbf3ccb2d3bfdd788e000000000000009800000000000000010000000600000036af0dbe02"], 0x410}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) sysctl$kern(&(0x7f00000000c0)={0x0}, 0x0, &(0x7f0000000140)="aee71b246683d94b45d0e48433ba5054e7482da11782acc53ee51d28808b9020915697cbf242350434c82769f53e9bc5efb7f8a3b69b1bd1e9d1879d7eaf57e94408d56728603a7d64ed89eb4ea48feedad9bac888835f5c9eb6d5d0e0363a6c006bbc82cc3c95835b1a80862f294d63aa4e6172014e9e3d1502a2f1bdca39bd6a5afcfd257eb35e0e20bf8d18f8d56d6478d75fb2d731ba", &(0x7f0000000200)=0x98, &(0x7f0000000240)="d4902fff3bbbbcd8350a", 0xa) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) r1 = socket(0x18, 0x1, 0x0) getsockname(r1, 0x0, 0x0) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$TIOCMBIC(r2, 0x8004746b, &(0x7f0000000080)=0x1) syz_open_pts() syz_open_pts() sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x3, 0x0, 0x0, &(0x7f0000001300), 0x0) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x1, 0x3, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x8, 0x5, 0xfffffffffffffff7, 0x100], [0x9, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80104000, 0xfffffffffffffffd, 0x0, 0x0, 0x48], [0x7, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x295dcbee, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xff9}, {0x1008, 0x0, 0x8, 0x3}, {0x8000, 0x400, 0x10, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x6, 0x1fd, 0xc}], {0x0, 0x25, 0x1, 0x849}, {0x7, 0x40010, 0x4, 0x2}}}) kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 24.505588ms ago: executing program 3 (id=38): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = kqueue() ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000100)=0x425) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) setregid(0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) setsockopt$sock_int(r1, 0xffff, 0x100, &(0x7f00000001c0)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, r3, 0x0, 0x0, 0x81}, 0x20000000000, 0x0, 0x0, 0x0, 0x5}) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8981, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105727, &(0x7f0000000280)={&(0x7f0000000000)=[{0x2}, {0x1}], 0x2}) fstatat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='c\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getegid() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x1d6) ioctl$VNDIOCSET(r5, 0x80184405, &(0x7f00000001c0)={0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)="828631840d0038c13f76d6d8cb0af6f0cda537c9b866ee65f25b3574b21c7bee9ca48df63707247837ba4924294b5446b42c8eb3332cdd26eec272d02942fd6706b096ee4e3a12ad63b998a46d6b047bdd5b98edb0bcb3db54dd482e1c977c72070fbcec77643b8fb45919a626ba38b51b0c2fc29456c9a78919a5538d0b23a3e5350014", 0x84}], 0x1) 24.191928ms ago: executing program 6 (id=39): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4c, 0xee, 0xd, 0x4}, {0x2c2e, 0x80, 0xd, 0xfffff803}]}) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x2}}}}}}}) getresgid(&(0x7f0000000040), 0x0, 0x0) 23.853547ms ago: executing program 4 (id=40): r0 = socket(0x2, 0x2, 0x0) setsockopt(r0, 0x3, 0x0, &(0x7f0000000040)="dec1f8d4cee35d4a9b8cec03d73f0fc5", 0x10) close(0x3) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$VNDIOCGET(r1, 0x20006473, 0x0) r2 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000080)={@broadcast, @remote, [{[{0x88a8, 0x7, 0x0, 0x3}], {0x8100, 0x7, 0x0, 0x2}}], {@generic={0x8130, "7ec5f20f060a53380ae222f8234dd32d43e510839d07419c12b485c7a917acc749e8a7704292"}}}) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f00000000c0)=@abs={0xba, 0x1, 0x0, 0x1}, 0x8) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) 12.601847ms ago: executing program 2 (id=41): sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1842, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x1840) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0x7ffbffff, 0xfffffffa, 0xfeffffff, 0xfffffff7, "0800fffffffffffffff10000000000000f1e0400", 0x0, 0x10000}) 11.266264ms ago: executing program 2 (id=42): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x10000301, 0x0, 0xfffffffffffffdd9}, 0x9}, 0x38, 0x3042, 0x0) 10.569128ms ago: executing program 6 (id=43): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000140)={0x9, './file0\x00', './file0\x00'}) r1 = fcntl$getown(0xffffffffffffffff, 0x5) r2 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r2, 0xffff, 0x100, &(0x7f0000000040)=0x7, 0x2) getpgid(r1) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0xa40, 0x0, 0x2a}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) fcntl$lock(r3, 0x8, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x5}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) 2.877467ms ago: executing program 4 (id=44): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x10000301, 0x0, 0xfffffffffffffdd9}, 0x9}, 0x38, 0x3042, 0x0) (fail_nth: 1) 2.366357ms ago: executing program 3 (id=45): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x8, 0x81, 0x4, 0x1}, {0x16, 0x1, 0x0, 0x800ee68}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="840cbf3e87c006a62a075a37308e7bd3403e6b8bc8bf2c2db10fa8389d9c479df600cc9f9fb133cc4e654e22a11ffbe84cf292ab289e9f28b43b158fff49a341dff8b210cf9d7d94", 0x48}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x21}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[]) futimens(r0, &(0x7f00000000c0)=[{0x7, 0xb}, {0x7, 0x3240000}]) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x10000301, 0x0, 0xfffffffffffffdd9}, 0x9}, 0x38, 0x3042, 0x0) 1.906585ms ago: executing program 7 (id=46): sysctl$machdep(&(0x7f0000000000)={0x7, 0x1}, 0x2, &(0x7f0000000040)="71d48ad2edec", &(0x7f0000000140)=0x6, &(0x7f0000000180), 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x7, 0x1, 0x4, 0x5}, {0x44, 0xf1, 0x1, 0x40004}, {0x1026, 0x89, 0x6, 0x8}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0xac, 0x8, 0x5d, 0x61b0d}, {0x40, 0x3, 0x17, 0x1}, {0x6, 0x2, 0x5, 0x3}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000240)=ANY=[]) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x3) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @icmp=@dest_unreach={0x3, 0x3, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x4, 0x66, 0xecd, 0x4, 0x3b, 0xab7, @multicast2, @broadcast}}}}}}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) sendto$inet6(r2, &(0x7f0000000080)="9a5dfe5a98ed9d43993844a4c44eb86ab0cea15fc945a336fb7e7aa6ef5236216091050227767467ecd71321ac84200cc972b05780164c9441c8912b5026f9222f2325d8d3bc941613b3c37a52450cc5d2bd6ea1558e75b8e7890018daa6af1cd5814998131524644cb456695c37f3acbca307a8efa0278b21d492d0fec953242adb6b35829fef532894aa09cc1b4422ec8acfb2b8cb2d048c2cd8c98d", 0x9d, 0xc, &(0x7f0000000140)={0x1c, 0x18, 0x2, 0x37339f34, "07ffa6c6c31d8c9b55c86640e534ba89", 0x9}, 0x1c) chdir(&(0x7f0000000180)='./file0\x00') 0s ago: executing program 2 (id=47): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000800cc0000f7fd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x418) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810, 0x7fffffff}) socket(0x18, 0x3, 0x4) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0x80047476, &(0x7f0000000080)={0x401, [{0x2, 0x101}, {0x1, 0x5}, {0x2, 0x800}, {0x3, 0x8}, {0x3, 0xd98}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x7f}, {0x1, 0x6}, {0x2, 0x3}, {0x3}, {0x2, 0x200}, {0x1, 0xa224}, {0x1, 0xf1}, {0x3, 0xb4}, {0x2, 0xdc}, {0x1, 0x8}, {0x3, 0x7}, {0x2, 0x11}, {0x3, 0x9f6}, {0x3, 0x40}, {0x1, 0x10000}, {0x2, 0xaec}, {0x2, 0x10001}, {0x3, 0xd}, {0x1, 0x3e33}, {0x3, 0x372002ea}, {0x1}, {0x1, 0x4}]}) openat$bpf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x28}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getthrid() mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='c\x00') unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x8, 0xac) getpgrp() r3 = getpid() setpgid(r3, r3) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x400}, 0x0) r4 = kqueue1(0x8) r5 = socket(0x1, 0x2, 0x40) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4) dup2(r6, r5) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0xffffffffffffffff, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYRES8=r4]) mprotect(&(0x7f00006e3000/0x2000)=nil, 0x2000, 0x1) bind(r5, &(0x7f0000000000), 0x10) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. pckbd_enable: command error uvm_fault(0xfffffd806ccee180, 0x70, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dovutimens+0x368: movl 0x70(%rax),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND *122099 82007 0 0 0x4000000 0 syz-executor dovutimens(ffff80003c90bca8,fffffd806d107538,ffff80003c909c40) at dovutimens+0x368 sys_futimens(ffff80003c90bca8,ffff80003c909d80,ffff80003c909cd0) at sys_futimens+0xb3 syscall(ffff80003c909d80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6332ae52db0, count: 11 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806ccee180, 0x70, 0, 1) -> e ddb> trace dovutimens(ffff80003c90bca8,fffffd806d107538,ffff80003c909c40) at dovutimens+0x368 sys_futimens(ffff80003c90bca8,ffff80003c909d80,ffff80003c909cd0) at sys_futimens+0xb3 syscall(ffff80003c909d80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6332ae52db0, count: -4 ddb> show registers rdi 0xffff8000314c8000 rsi 0x40 rbp 0xffff80003c909c30 rbx 0 rdx 0xffff8000314c8000 rcx 0x3f rax 0 r8 0x7f7fffffc000 r9 0 r10 0x3f07618725bc027 r11 0xbf5ab5df750a0e00 r12 0xffff80003c909c40 r13 0 r14 0xfffffd806d107538 r15 0xffff80003c90bca8 rip 0xffffffff82960a18 dovutimens+0x368 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c909b30 ss 0x10 dovutimens+0x368: movl 0x70(%rax),%r12d ddb> show proc PROC (syz-executor) tid=122099 pid=82007 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c90a550,0xffff80003c90b4f0 process=0xffff8000ffff8018 user=0xffff80003c904000, vmspace=0xfffffd806ccee180 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 61111 44015 31815 0 2 0 syz-executor 61111 256018 31815 0 3 0x4000080 fsleep syz-executor 95213 425967 30204 0 2 0 syz-executor 95213 15101 30204 0 3 0x4000080 fsleep syz-executor 57079 482310 52534 0 2 0 syz-executor 57079 224678 52534 0 3 0x4000080 fsleep syz-executor 82007 110660 82550 0 2 0 syz-executor *82007 122099 82550 0 7 0x4000000 syz-executor 10744 435411 92767 0 2 0 syz-executor 10744 166543 92767 0 3 0x4000080 fifor syz-executor 85097 266097 6009 0 2 0 syz-executor 85097 97891 6009 0 3 0x4000080 bpf syz-executor 85097 307330 6009 0 3 0x4000080 fsleep syz-executor 94298 271636 7755 0 2 0x40 syz-executor 52534 135949 36297 0 3 0x82 nanoslp syz-executor 92767 148264 36297 0 2 0xc82 syz-executor 6009 98319 36297 0 2 0xc82 syz-executor 31815 507703 36297 0 3 0x82 nanoslp syz-executor 82550 270777 36297 0 2 0xc82 syz-executor 30204 319790 36297 0 3 0x82 nanoslp syz-executor 82565 426892 36297 0 2 0x2 syz-executor 7755 514176 36297 0 3 0x82 ppwait syz-executor 36297 93736 85817 0 3 0x82 kqread syz-executor 85817 397008 95879 0 3 0x10008a sigsusp ksh 95879 156322 87554 0 3 0x98 kqread sshd-session 87554 417196 98948 0 3 0x92 kqread sshd-session 52976 381873 1 0 3 0x100083 ttyin getty 98948 288896 1 0 3 0x88 kqread sshd 60399 492473 51547 73 3 0x1100090 kqread syslogd 51547 385721 1 0 3 0x100082 sbwait syslogd 87121 109925 1 0 3 0x100080 kqread resolvd 65984 323701 89118 77 3 0x100092 kqread dhcpleased 52067 204852 89118 77 3 0x100092 kqread dhcpleased 89118 394663 1 0 3 0x80 kqread dhcpleased 278 162289 0 0 3 0x14200 bored smr 62829 239215 0 0 2 0x14200 zerothread 12868 122238 0 0 3 0x14200 aiodoned aiodoned 76339 215282 0 0 3 0x14200 syncer update 26063 111724 0 0 3 0x14200 cleaner cleaner 1586 476691 0 0 3 0x14200 reaper reaper 16339 11829 0 0 3 0x14200 pgdaemon pagedaemon 70717 165840 0 0 3 0x14200 bored viomb 31099 209071 0 0 3 0x40014200 acpi0 acpi0 65059 72218 0 0 3 0x14200 bored softnet0 46072 28114 0 0 3 0x14200 bored systqmp 35572 414937 0 0 3 0x14200 bored systq 46949 466037 0 0 3 0x40014200 tmoslp softclock 56071 36248 0 0 3 0x40014200 idle0 1 78804 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11047 12233K 12385K 166960K 12349 0 pcb 19 12K 12K 166960K 22 0 rtable 235 6K 6K 166960K 359 0 pf 31 13K 13K 166960K 33 0 ifaddr 41 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 52 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 34 0 ioctlops 0 0K 4K 166960K 35 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1327 83K 83K 166960K 1417 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 174 0 proc 58 59K 91K 166960K 490 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 89 6K 6K 166960K 89 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 360 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 209 150K 158K 166960K 3237 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 38 76K 94K 166960K 1246 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 11 0K 1K 166960K 26 0 temp 36 9062K 9126K 166960K 3989 0 kqueue 13 20K 24K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 38 0 35 1 0 1 1 0 8 0 rtentry 136 108 0 2 4 0 4 4 0 8 0 unpcb 144 55 0 38 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 22 0 18 1 0 1 1 0 8 0 arp 96 19 0 0 1 0 1 1 0 8 0 inpcb 328 81 0 72 1 0 1 1 0 8 0 nd6 112 21 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 1 0 1 1 0 1 1 0 8 1 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 416 0 0 26 0 26 26 0 8 0 art_table 40 417 0 0 5 0 5 5 0 8 0 art_node 32 107 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 112 1 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1610 0 153 92 0 92 92 0 8 0 ffsino 256 1610 0 153 92 0 92 92 0 8 0 nchpl 144 1861 0 176 63 0 63 63 0 8 0 vnodes 216 1747 0 0 98 0 98 98 0 8 0 namei 1024 5431 0 5431 2 0 2 2 0 8 2 kstatmem 264 24 0 2 2 0 2 2 0 8 0 scxspl 216 6007 0 6007 2 0 2 2 1 8 2 plimitpl 152 34 0 18 1 0 1 1 0 8 0 sigapl 424 464 0 422 6 0 6 6 0 8 1 knotepl 120 3765 0 3718 2 0 2 2 0 8 0 kqueuepl 184 30 0 21 1 0 1 1 0 8 0 pipepl 304 119 0 92 3 0 3 3 0 8 0 fdescpl 448 451 0 422 5 0 5 5 0 8 1 filepl 120 1621 0 1410 8 0 8 8 0 8 1 lockfpl 104 10 0 8 1 0 1 1 0 8 0 lockfspl 48 6 0 4 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 109 0 98 1 0 1 1 0 8 0 zombiepl 144 422 0 422 1 0 1 1 0 8 1 processpl 1152 464 0 422 4 0 4 4 0 8 0 procpl 664 518 0 469 5 0 5 5 0 8 0 sockpl 552 177 0 148 3 0 3 3 0 8 0 mcl64k 65536 3 0 3 1 0 1 1 0 8 1 mcl16k 16384 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 8 0 8 1 0 1 1 0 8 1 mcl4k 4096 2517 0 2464 13 0 13 13 0 8 6 mcl2k 2048 151 0 150 3 0 3 3 0 8 2 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4407 0 4267 13 0 13 13 0 8 0 bufpl 280 2265 0 102 155 0 155 155 0 8 0 anonpl 24 100318 0 97324 23 0 23 23 0 187 3 amapchunkpl 152 9178 0 8748 19 0 19 19 0 158 2 amappl16 200 1876 0 1857 5 0 5 5 0 8 3 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 404 0 403 1 0 1 1 0 8 0 amappl13 176 157 0 147 1 0 1 1 0 8 0 amappl12 168 687 0 660 2 0 2 2 0 8 0 amappl11 160 22 0 22 1 0 1 1 0 8 1 amappl10 152 57 0 47 1 0 1 1 0 8 0 amappl9 144 262 0 262 1 0 1 1 0 8 1 amappl8 136 92 0 91 1 0 1 1 0 8 0 amappl7 128 141 0 130 1 0 1 1 0 8 0 amappl6 120 149 0 148 1 0 1 1 0 8 0 amappl5 112 103 0 96 1 0 1 1 0 8 0 amappl4 104 249 0 235 1 0 1 1 0 8 0 amappl3 96 1619 0 1520 3 0 3 3 0 8 0 amappl2 88 495 0 443 2 0 2 2 0 8 0 amappl1 80 9059 0 8513 13 0 13 13 0 8 1 amappl 88 2563 0 2418 4 0 4 4 0 92 0 uvmvnodes 80 95 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 451 0 422 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 451 0 422 1 0 1 1 0 8 0 vmmpekpl 168 5244 0 5214 2 0 2 2 0 8 0 vmmpepl 168 36696 0 34967 80 0 80 80 0 357 3 vmsppl 368 450 0 422 4 0 4 4 0 8 1 rwobjpl 40 13558 0 12648 11 0 11 11 0 8 0 pdppl 4096 908 0 844 94 26 68 80 0 8 4 pvpl 32 226876 0 218538 79 0 79 79 0 265 8 pmappl 216 450 0 422 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 356 0 26 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dovutimens(ffff80003c90bca8,fffffd806d107538,ffff80003c909c40) at dovutimens+0x368 sys_futimens(ffff80003c90bca8,ffff80003c909d80,ffff80003c909cd0) at sys_futimens+0xb3 syscall(ffff80003c909d80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6332ae52db0, count: -4 ddb> machine ddbcpu 1 No such command ddb> trace dovutimens(ffff80003c90bca8,fffffd806d107538,ffff80003c909c40) at dovutimens+0x368 sys_futimens(ffff80003c90bca8,ffff80003c909d80,ffff80003c909cd0) at sys_futimens+0xb3 syscall(ffff80003c909d80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6332ae52db0, count: -4