last executing test programs: 27.045091521s ago: executing program 5 (id=89): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x2, 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r1, 0x6, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) socket(0x2, 0x2, 0x0) (async) getppid() (async) fcntl$setown(r1, 0x6, r2) (async) fcntl$getown(r1, 0x5) (async) fcntl$setown(r1, 0x6, r3) (async) 23.319803501s ago: executing program 7 (id=30): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r2 = socket(0x2, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) setuid(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async) socket(0x2, 0x2, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) (async) setuid(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, 0x0) (async) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) (async) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) 22.62877535s ago: executing program 5 (id=89): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x2, 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r1, 0x6, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) socket(0x2, 0x2, 0x0) (async) getppid() (async) fcntl$setown(r1, 0x6, r2) (async) fcntl$getown(r1, 0x5) (async) fcntl$setown(r1, 0x6, r3) (async) 20.857543837s ago: executing program 2 (id=58): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x61, 0xfa, 0x81, 0x6}]}) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="5c8f6abdf145067e0d3eb6d25fff56db7c7ea942d7ec31f5c8e27a9b3b6ae40441d705d09fde48f2aaa8e255e36794901ae7e254c0897d0efacbe9510ddc66b1654917acff08cdf4fc805a1df8ab6c0e9b3c08c34b359034e5b5b9bd20e0c3addc6ae6ad100ebf717d27e707b143dd4d44474d9cc371b0eaeb1178e43ee50ede409d4bdd1a0b10d0e412798f6607b9d03b777b93a21e472d", 0x98}], 0x1, 0x4000000000401) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r3 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r5, r6, 0x8f, 0x9, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[r5, r7, r7]) r8 = socket(0x11, 0x3, 0x0) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)) r9 = socket(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r10 = socket(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r10, 0xffff, 0x1, &(0x7f0000000040)=0x2, 0x4) closefrom(r9) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(r8, 0x11, 0x2, &(0x7f0000000000), 0x4) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000340)=0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x91) open(&(0x7f00000002c0)='./file0\x00', 0x712, 0x80) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) 20.857056322s ago: executing program 3 (id=167): setuid(0xffffffffffffffff) (async) r0 = shmget$private(0x0, 0x1000, 0x624, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 0x102, 0xfa}, 0x81, 0x0, 0x0, 0x7, 0x0, 0xde1, 0xfffffffffffff622, 0x2, 0xa1, 0x82, 0x4}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x5}, 0x81, 0x0, 0x0, 0x81, 0x0, 0x1, 0x4bef, 0xbb11, 0xb, 0x80000, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2/file0/file0\x00', 0x8, 0x42) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000480)) (async) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af90000000000e1de6e252c2000000000000000000000fe8000000000000000000000000000aa01029078fc000000205f7f0000012c00fe8000000000000000000000000000aafe8000000000000005000000000000002b00000167000000e25bc56887c88c7c8c0639d0931f26e6767ed050b3a882c0bf936ad938ee24d63f5b43250210d1be37b5245103c61b2f66637f95"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7, 0xffff63db, 0x800007, 0x56, 0x8, 0x8007f, 0x6, 0x10, [{0xffffffff, 0x10001, 0x7, 0x1}, {0x0, 0x0, 0x200103, 0x6}, {0xcd4, 0x3, 0x6f7, 0x4}, {0x5, 0x8020fc, 0x11, 0x20000fe}, {0x6, 0xb4e, 0x7, 0x7}, {0x3996, 0xfffa, 0x8, 0x2000040a}, {0x10004, 0x0, 0x8000, 0xfffffffb}, {0x207, 0x8, 0x228002, 0xffffe2e1}, {0x2000009, 0xfffffffe, 0x6, 0x8006}, {0x3, 0xffffffff, 0x80000007, 0x40}, {0x10086, 0xfffffffe, 0x8a3a000a, 0x4009}, {0xffffffff, 0x6, 0x9, 0xa72}, {0x9, 0x49, 0x3, 0xa}, {0x4, 0x401, 0xfffdfffd, 0x7}, {0x8, 0x3fffffd, 0x7, 0x4}, {0x5, 0x0, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) (async) mkdir(0x0, 0xc2) unveil(&(0x7f0000000340)='./file2/file0/file0\x00', 0x0) (async) r3 = getgid() setregid(0xffffffffffffffff, r3) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="e727eb9375865a3f42581c393b2d3b341dadda695fe4662f6639ee129b6c284400539ad58f63716e90cae4d479f9342c6f035d857c149278807a4343e9f9c114e4249f30ccb1add36ca8a034242af2ccc15f3f833243dc1d00e3ff948cfa44e6beaf8bef7e0d8cbf83108461771a8bbddab63bf63fb61603574fa8ed9edbd8bf6046b80d", 0x84, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x1b, &(0x7f0000000300)=""/27}) chdir(&(0x7f0000000180)='./file2/file0/file0\x00') 20.853691794s ago: executing program 6 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) accept$unix(r0, 0x0, 0x0) close(r0) socket$inet6(0x18, 0x4000, 0x9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket(0x2, 0x8002, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r2) (async) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x1) (async) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) (async) accept$unix(r0, 0x0, 0x0) (async) close(r0) (async) socket$inet6(0x18, 0x4000, 0x9) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) 20.8535311s ago: executing program 7 (id=30): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r2 = socket(0x2, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) setuid(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async) socket(0x2, 0x2, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) (async) setuid(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, 0x0) (async) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) (async) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) 18.300499734s ago: executing program 2 (id=58): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x61, 0xfa, 0x81, 0x6}]}) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="5c8f6abdf145067e0d3eb6d25fff56db7c7ea942d7ec31f5c8e27a9b3b6ae40441d705d09fde48f2aaa8e255e36794901ae7e254c0897d0efacbe9510ddc66b1654917acff08cdf4fc805a1df8ab6c0e9b3c08c34b359034e5b5b9bd20e0c3addc6ae6ad100ebf717d27e707b143dd4d44474d9cc371b0eaeb1178e43ee50ede409d4bdd1a0b10d0e412798f6607b9d03b777b93a21e472d", 0x98}], 0x1, 0x4000000000401) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r3 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r5, r6, 0x8f, 0x9, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[r5, r7, r7]) r8 = socket(0x11, 0x3, 0x0) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)) r9 = socket(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r10 = socket(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r10, 0xffff, 0x1, &(0x7f0000000040)=0x2, 0x4) closefrom(r9) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(r8, 0x11, 0x2, &(0x7f0000000000), 0x4) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000340)=0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x91) open(&(0x7f00000002c0)='./file0\x00', 0x712, 0x80) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) 18.300170413s ago: executing program 3 (id=167): setuid(0xffffffffffffffff) (async) r0 = shmget$private(0x0, 0x1000, 0x624, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 0x102, 0xfa}, 0x81, 0x0, 0x0, 0x7, 0x0, 0xde1, 0xfffffffffffff622, 0x2, 0xa1, 0x82, 0x4}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x5}, 0x81, 0x0, 0x0, 0x81, 0x0, 0x1, 0x4bef, 0xbb11, 0xb, 0x80000, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2/file0/file0\x00', 0x8, 0x42) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000480)) (async) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af90000000000e1de6e252c2000000000000000000000fe8000000000000000000000000000aa01029078fc000000205f7f0000012c00fe8000000000000000000000000000aafe8000000000000005000000000000002b00000167000000e25bc56887c88c7c8c0639d0931f26e6767ed050b3a882c0bf936ad938ee24d63f5b43250210d1be37b5245103c61b2f66637f95"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7, 0xffff63db, 0x800007, 0x56, 0x8, 0x8007f, 0x6, 0x10, [{0xffffffff, 0x10001, 0x7, 0x1}, {0x0, 0x0, 0x200103, 0x6}, {0xcd4, 0x3, 0x6f7, 0x4}, {0x5, 0x8020fc, 0x11, 0x20000fe}, {0x6, 0xb4e, 0x7, 0x7}, {0x3996, 0xfffa, 0x8, 0x2000040a}, {0x10004, 0x0, 0x8000, 0xfffffffb}, {0x207, 0x8, 0x228002, 0xffffe2e1}, {0x2000009, 0xfffffffe, 0x6, 0x8006}, {0x3, 0xffffffff, 0x80000007, 0x40}, {0x10086, 0xfffffffe, 0x8a3a000a, 0x4009}, {0xffffffff, 0x6, 0x9, 0xa72}, {0x9, 0x49, 0x3, 0xa}, {0x4, 0x401, 0xfffdfffd, 0x7}, {0x8, 0x3fffffd, 0x7, 0x4}, {0x5, 0x0, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) (async) mkdir(0x0, 0xc2) unveil(&(0x7f0000000340)='./file2/file0/file0\x00', 0x0) (async) r3 = getgid() setregid(0xffffffffffffffff, r3) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="e727eb9375865a3f42581c393b2d3b341dadda695fe4662f6639ee129b6c284400539ad58f63716e90cae4d479f9342c6f035d857c149278807a4343e9f9c114e4249f30ccb1add36ca8a034242af2ccc15f3f833243dc1d00e3ff948cfa44e6beaf8bef7e0d8cbf83108461771a8bbddab63bf63fb61603574fa8ed9edbd8bf6046b80d", 0x84, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x1b, &(0x7f0000000300)=""/27}) chdir(&(0x7f0000000180)='./file2/file0/file0\x00') 18.299998493s ago: executing program 5 (id=89): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x2, 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r1, 0x6, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) socket(0x2, 0x2, 0x0) (async) getppid() (async) fcntl$setown(r1, 0x6, r2) (async) fcntl$getown(r1, 0x5) (async) fcntl$setown(r1, 0x6, r3) (async) 18.293897039s ago: executing program 7 (id=30): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r2 = socket(0x2, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) setuid(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async) socket(0x2, 0x2, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) (async) setuid(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, 0x0) (async) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) (async) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) 18.091407635s ago: executing program 4 (id=211): syz_emit_ethernet(0x2d9, &(0x7f00000002c0)={@broadcast, @broadcast, [{[{0x88a8, 0x1}], {0x8100, 0x7, 0x1, 0x4}}], {@ipv6={0x86dd, {0x8, 0x6, '\nf.', 0x29b, 0x3c, 0x6, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x2, 0x0, 0x6, 0x1, 0x0, 0x19, 0x66}, @hopopts={0x0, 0xf, '\x00', [@pad1, @generic={0x0, 0x4e, "67e8c93f475ee58ffbfee225ec70b7f3c8bc225eecab13ed376d2f90bab28107014a0d3ac295ab237f184c8de7aede92b4b2958b13c7e08bead6781df8453e2b860cc292701bcef7fd9aeb5ce661"}, @generic={0x8, 0x2a, "1f009f11000d023c88f21c45cca07c7210532486ddc4968a5e5695110d9f91e76b7424ddf1dabf6ff818"}]}, @hopopts={0x1, 0x20, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1}, @padn, @generic={0x20, 0x27, "5cbf43c8a9f03d2c41e4c33734b00341797e7a1cff9cdbbfe5e9448f0681945c6027b91a2f815c"}, @generic={0x2, 0xc1, "e793fcf453d13685fd6c76b70de17d53982abd701a550a2bcead56ff308af10ef7ea0eac8a587445adb2bd052b2727347e1e18496bf78f1d3ab04dd1bdb1d1c3e26775bffefcedc2e1648ad095fd55df7f03c23182ac9d7fb4ce7a62a5f3e8b98dc15a94210523b4efaa953e6bdba08feedcbb791de505d2e191dabf6755e153d65e3df7bbf61b874211210194f12afc5be283846577a3f15b8bdbcdcc8fc19656e08ffe88b2f5924d379176d0e623256b1d4be621731b2e21e7592f4e869bb9a7"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @generic="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"}}}}}) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "0000000100", 0x40007}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x17, &(0x7f0000001340)}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x6}], 0x8, 0x0, 0xb, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x3000)=nil, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 17.356960119s ago: executing program 6 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) accept$unix(r0, 0x0, 0x0) close(r0) socket$inet6(0x18, 0x4000, 0x9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket(0x2, 0x8002, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r2) (async) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x1) (async) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) (async) accept$unix(r0, 0x0, 0x0) (async) close(r0) (async) socket$inet6(0x18, 0x4000, 0x9) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) 17.139044218s ago: executing program 4 (id=214): r0 = socket(0x18, 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="b7f312603ef69e2ca45251af19040c19be48ee2a72eff256bcb242a5ecab10d9ce3c1738bac96287d9fdd01a75a858591b924d1ea87f707d84b89d6526277e4de950dab27b6850fc9aead4", 0x4b}], 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x3a) (async) setuid(0xee01) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x5) (async) r1 = socket(0x18, 0x3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x6, "fea5f5c9418d96a414e4b2c625339ef1", 0x1}, 0x1c) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, &(0x7f0000000200)="0a0000fce6ae94d31bc3ec98c152950d20b955495ed0dee30fb07f040a3a06fcee883f9c3ec67a96e0184a1acd5d485539257a716433a6735f14402ab5a99859a1aa13eaa99d274f2387ee6868a7bb2ef4ccee2a0dec551ac09bd3993948715bcdf0095ecc0ef447fe17a12a9b85991499543ad054fa2063eb7fc966c4bedb913ef57919b1", 0x85) (async, rerun: 64) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dee06a00c222f", 0x41}], 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x3, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') (async) socket(0x18, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x5, 0x23c3800000, 0x6, 0x2, 0x2}) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random="4f0c7503aed2", @empty, [], {@ipv4={0x800, {{0x18, 0x4, 0x2, 0x5, 0x6c, 0x64, 0x2, 0x1, 0xf0, 0x0, @rand_addr=0xf, @multicast2, {[@end, @ra={0x94, 0x4, 0x2}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x6, [{[], 0x7b}]}, @ssrr={0x89, 0x2b, 0xfd, [@local={0xac, 0x14, 0x0}, @broadcast, @empty, @multicast2, @rand_addr=0x7ff, @broadcast, @multicast2, @multicast1, @broadcast, @multicast2]}, @end, @generic={0x83, 0x11, "f0de58a475ef218106109c26925a8f"}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7ff, 0x7ff, 0x1}}}}}) 15.42061337s ago: executing program 3 (id=167): setuid(0xffffffffffffffff) (async) r0 = shmget$private(0x0, 0x1000, 0x624, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 0x102, 0xfa}, 0x81, 0x0, 0x0, 0x7, 0x0, 0xde1, 0xfffffffffffff622, 0x2, 0xa1, 0x82, 0x4}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x5}, 0x81, 0x0, 0x0, 0x81, 0x0, 0x1, 0x4bef, 0xbb11, 0xb, 0x80000, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2/file0/file0\x00', 0x8, 0x42) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000480)) (async) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af90000000000e1de6e252c2000000000000000000000fe8000000000000000000000000000aa01029078fc000000205f7f0000012c00fe8000000000000000000000000000aafe8000000000000005000000000000002b00000167000000e25bc56887c88c7c8c0639d0931f26e6767ed050b3a882c0bf936ad938ee24d63f5b43250210d1be37b5245103c61b2f66637f95"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7, 0xffff63db, 0x800007, 0x56, 0x8, 0x8007f, 0x6, 0x10, [{0xffffffff, 0x10001, 0x7, 0x1}, {0x0, 0x0, 0x200103, 0x6}, {0xcd4, 0x3, 0x6f7, 0x4}, {0x5, 0x8020fc, 0x11, 0x20000fe}, {0x6, 0xb4e, 0x7, 0x7}, {0x3996, 0xfffa, 0x8, 0x2000040a}, {0x10004, 0x0, 0x8000, 0xfffffffb}, {0x207, 0x8, 0x228002, 0xffffe2e1}, {0x2000009, 0xfffffffe, 0x6, 0x8006}, {0x3, 0xffffffff, 0x80000007, 0x40}, {0x10086, 0xfffffffe, 0x8a3a000a, 0x4009}, {0xffffffff, 0x6, 0x9, 0xa72}, {0x9, 0x49, 0x3, 0xa}, {0x4, 0x401, 0xfffdfffd, 0x7}, {0x8, 0x3fffffd, 0x7, 0x4}, {0x5, 0x0, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) (async) mkdir(0x0, 0xc2) unveil(&(0x7f0000000340)='./file2/file0/file0\x00', 0x0) (async) r3 = getgid() setregid(0xffffffffffffffff, r3) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="e727eb9375865a3f42581c393b2d3b341dadda695fe4662f6639ee129b6c284400539ad58f63716e90cae4d479f9342c6f035d857c149278807a4343e9f9c114e4249f30ccb1add36ca8a034242af2ccc15f3f833243dc1d00e3ff948cfa44e6beaf8bef7e0d8cbf83108461771a8bbddab63bf63fb61603574fa8ed9edbd8bf6046b80d", 0x84, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x1b, &(0x7f0000000300)=""/27}) chdir(&(0x7f0000000180)='./file2/file0/file0\x00') 13.817669167s ago: executing program 2 (id=58): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x61, 0xfa, 0x81, 0x6}]}) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="5c8f6abdf145067e0d3eb6d25fff56db7c7ea942d7ec31f5c8e27a9b3b6ae40441d705d09fde48f2aaa8e255e36794901ae7e254c0897d0efacbe9510ddc66b1654917acff08cdf4fc805a1df8ab6c0e9b3c08c34b359034e5b5b9bd20e0c3addc6ae6ad100ebf717d27e707b143dd4d44474d9cc371b0eaeb1178e43ee50ede409d4bdd1a0b10d0e412798f6607b9d03b777b93a21e472d", 0x98}], 0x1, 0x4000000000401) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r3 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r5, r6, 0x8f, 0x9, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[r5, r7, r7]) r8 = socket(0x11, 0x3, 0x0) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)) r9 = socket(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r10 = socket(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r10, 0xffff, 0x1, &(0x7f0000000040)=0x2, 0x4) closefrom(r9) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(r8, 0x11, 0x2, &(0x7f0000000000), 0x4) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000340)=0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x91) open(&(0x7f00000002c0)='./file0\x00', 0x712, 0x80) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) 13.817348721s ago: executing program 4 (id=214): r0 = socket(0x18, 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="b7f312603ef69e2ca45251af19040c19be48ee2a72eff256bcb242a5ecab10d9ce3c1738bac96287d9fdd01a75a858591b924d1ea87f707d84b89d6526277e4de950dab27b6850fc9aead4", 0x4b}], 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x3a) (async) setuid(0xee01) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x5) (async) r1 = socket(0x18, 0x3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x6, "fea5f5c9418d96a414e4b2c625339ef1", 0x1}, 0x1c) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, &(0x7f0000000200)="0a0000fce6ae94d31bc3ec98c152950d20b955495ed0dee30fb07f040a3a06fcee883f9c3ec67a96e0184a1acd5d485539257a716433a6735f14402ab5a99859a1aa13eaa99d274f2387ee6868a7bb2ef4ccee2a0dec551ac09bd3993948715bcdf0095ecc0ef447fe17a12a9b85991499543ad054fa2063eb7fc966c4bedb913ef57919b1", 0x85) (async, rerun: 64) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dee06a00c222f", 0x41}], 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x3, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') (async) socket(0x18, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x5, 0x23c3800000, 0x6, 0x2, 0x2}) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random="4f0c7503aed2", @empty, [], {@ipv4={0x800, {{0x18, 0x4, 0x2, 0x5, 0x6c, 0x64, 0x2, 0x1, 0xf0, 0x0, @rand_addr=0xf, @multicast2, {[@end, @ra={0x94, 0x4, 0x2}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x6, [{[], 0x7b}]}, @ssrr={0x89, 0x2b, 0xfd, [@local={0xac, 0x14, 0x0}, @broadcast, @empty, @multicast2, @rand_addr=0x7ff, @broadcast, @multicast2, @multicast1, @broadcast, @multicast2]}, @end, @generic={0x83, 0x11, "f0de58a475ef218106109c26925a8f"}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7ff, 0x7ff, 0x1}}}}}) 13.817217116s ago: executing program 5 (id=89): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x2, 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r1, 0x6, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) socket(0x2, 0x2, 0x0) (async) getppid() (async) fcntl$setown(r1, 0x6, r2) (async) fcntl$getown(r1, 0x5) (async) fcntl$setown(r1, 0x6, r3) (async) 13.817021084s ago: executing program 6 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) accept$unix(r0, 0x0, 0x0) close(r0) socket$inet6(0x18, 0x4000, 0x9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket(0x2, 0x8002, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r2) (async) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x1) (async) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) (async) accept$unix(r0, 0x0, 0x0) (async) close(r0) (async) socket$inet6(0x18, 0x4000, 0x9) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) 13.816703355s ago: executing program 7 (id=30): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r2 = socket(0x2, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) setuid(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async) socket(0x2, 0x2, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) (async) setuid(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, 0x0) (async) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) (async) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) 13.279255533s ago: executing program 1 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001500), 0x20000, 0x0) ioctl$DIOCGETLIMIT(r0, 0xc0084427, &(0x7f0000001540)={0x7, 0xf}) r1 = socket(0x18, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) chroot(&(0x7f0000000740)='.\x00') r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x150) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r4], 0x28, 0x40f}, 0x4) rename(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f0000000480)={'./file0\x00', 0xffff, 0x4a, 0x56f, 0x0, 0x7, 0x9, 0xb1b0, 0x0, 0x2, 0x1ff, 0xc635}) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/72, 0x48}, 0x3800) socket(0x1, 0x1, 0x7) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="3ac5a1dd1424f4e6263f357ea711738b32cefda126c933563ad938355162ca8e54ecbed74f65b294134a0342a461fe198a78409c25cfd0dbf1cbfba21190fcff", 0x40}, {&(0x7f0000000240)="1c1a899684cc93f991c8cf73f30f9817f56957c640b10a47e80bd233f6f7f391734fb38d4c542e8de2b95f9dcc74a521411fd640324e66a5a2a685a48acb52554d2cfd544ec6b4fbabd99c9d6f54d35ada3b9a6761b5699157d2a1a0e3c0ed7f1b9405594c9811cb241cd9f11cf0a057030e3f44477f48f6a88b5f0a5af6438aa4af7802a13a64bf74884d8293fb869ffbf99c38faf6229770264c53e5a506ce9b26d48940df55345a91f5c858df23527c827d09a0941e0b8ccda177b47951762b1caf347f153a281ee71bd56807e518eaf3ae026c9a", 0xd6}, {&(0x7f0000000380)="656bf265de0de871a8ae66a5e9ee1d97e0fdf2284b3f2dec65f6a3b9056f6c017df73c3d72c118699ee74a1342b456d636d4d2fe39dfb5c27913ffce0c1a497edab36296d9ca7ce2fc563d7e60a3493c0086934aa2658e147addbe67179d9099754b4f4ec5aeca22786211ee02e31631b638d63d97aa1ab2c7dfcda612a4acd0b60f0f0cfffe7aa112d70b2edd68af7d9b4b2f5d5671688da1171b", 0x9b}], 0x3, 0x7) 8.601435626s ago: executing program 1 (id=220): sysctl$net_inet_icmp(&(0x7f0000000240)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000280)="684c3114", &(0x7f00000002c0)=0x4, 0x0, 0x0) (async) sysctl$net_inet_icmp(&(0x7f0000000240)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000280)="684c3114", &(0x7f00000002c0)=0x4, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x0, 0xc8, 0x4}, {0x94, 0xcb, 0xfc, 0x22c1}, {0x6, 0x76, 0xf8, 0xfffff802}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x9, 0x9, 0xff, 0x10001}, {0x800, 0x5, 0xef, 0x21f}, {0xff, 0x4, 0x9, 0x3}, {0x6, 0x6, 0x83, 0x8}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @random="d09b049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36dab7", 0x30, 0x2b, 0x25, @rand_addr="a55702eadfc9c553517dd04fcce15c79", @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0xf9, '\x00', {0x0, 0x6, "5f7f00", 0x0, 0x0, 0x0, @mcast2, @empty}}}}}}}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) (async) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f00000000c0)={0x2, 0x0, {0x8000, 0xb8}}) (async) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f00000000c0)={0x2, 0x0, {0x8000, 0xb8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KDENABIO(r1, 0x20004b3c) socket(0x18, 0x1, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) 8.590327774s ago: executing program 2 (id=58): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x61, 0xfa, 0x81, 0x6}]}) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="5c8f6abdf145067e0d3eb6d25fff56db7c7ea942d7ec31f5c8e27a9b3b6ae40441d705d09fde48f2aaa8e255e36794901ae7e254c0897d0efacbe9510ddc66b1654917acff08cdf4fc805a1df8ab6c0e9b3c08c34b359034e5b5b9bd20e0c3addc6ae6ad100ebf717d27e707b143dd4d44474d9cc371b0eaeb1178e43ee50ede409d4bdd1a0b10d0e412798f6607b9d03b777b93a21e472d", 0x98}], 0x1, 0x4000000000401) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r3 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r5, r6, 0x8f, 0x9, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[r5, r7, r7]) r8 = socket(0x11, 0x3, 0x0) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)) r9 = socket(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r10 = socket(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r10, 0xffff, 0x1, &(0x7f0000000040)=0x2, 0x4) closefrom(r9) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(r8, 0x11, 0x2, &(0x7f0000000000), 0x4) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000340)=0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x91) open(&(0x7f00000002c0)='./file0\x00', 0x712, 0x80) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) 8.59012065s ago: executing program 3 (id=167): setuid(0xffffffffffffffff) (async) r0 = shmget$private(0x0, 0x1000, 0x624, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 0x102, 0xfa}, 0x81, 0x0, 0x0, 0x7, 0x0, 0xde1, 0xfffffffffffff622, 0x2, 0xa1, 0x82, 0x4}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x5}, 0x81, 0x0, 0x0, 0x81, 0x0, 0x1, 0x4bef, 0xbb11, 0xb, 0x80000, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2/file0/file0\x00', 0x8, 0x42) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000480)) (async) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af90000000000e1de6e252c2000000000000000000000fe8000000000000000000000000000aa01029078fc000000205f7f0000012c00fe8000000000000000000000000000aafe8000000000000005000000000000002b00000167000000e25bc56887c88c7c8c0639d0931f26e6767ed050b3a882c0bf936ad938ee24d63f5b43250210d1be37b5245103c61b2f66637f95"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7, 0xffff63db, 0x800007, 0x56, 0x8, 0x8007f, 0x6, 0x10, [{0xffffffff, 0x10001, 0x7, 0x1}, {0x0, 0x0, 0x200103, 0x6}, {0xcd4, 0x3, 0x6f7, 0x4}, {0x5, 0x8020fc, 0x11, 0x20000fe}, {0x6, 0xb4e, 0x7, 0x7}, {0x3996, 0xfffa, 0x8, 0x2000040a}, {0x10004, 0x0, 0x8000, 0xfffffffb}, {0x207, 0x8, 0x228002, 0xffffe2e1}, {0x2000009, 0xfffffffe, 0x6, 0x8006}, {0x3, 0xffffffff, 0x80000007, 0x40}, {0x10086, 0xfffffffe, 0x8a3a000a, 0x4009}, {0xffffffff, 0x6, 0x9, 0xa72}, {0x9, 0x49, 0x3, 0xa}, {0x4, 0x401, 0xfffdfffd, 0x7}, {0x8, 0x3fffffd, 0x7, 0x4}, {0x5, 0x0, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) (async) mkdir(0x0, 0xc2) unveil(&(0x7f0000000340)='./file2/file0/file0\x00', 0x0) (async) r3 = getgid() setregid(0xffffffffffffffff, r3) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="e727eb9375865a3f42581c393b2d3b341dadda695fe4662f6639ee129b6c284400539ad58f63716e90cae4d479f9342c6f035d857c149278807a4343e9f9c114e4249f30ccb1add36ca8a034242af2ccc15f3f833243dc1d00e3ff948cfa44e6beaf8bef7e0d8cbf83108461771a8bbddab63bf63fb61603574fa8ed9edbd8bf6046b80d", 0x84, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x1b, &(0x7f0000000300)=""/27}) chdir(&(0x7f0000000180)='./file2/file0/file0\x00') 8.589867958s ago: executing program 4 (id=214): r0 = socket(0x18, 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="b7f312603ef69e2ca45251af19040c19be48ee2a72eff256bcb242a5ecab10d9ce3c1738bac96287d9fdd01a75a858591b924d1ea87f707d84b89d6526277e4de950dab27b6850fc9aead4", 0x4b}], 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x3a) (async) setuid(0xee01) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x5) (async) r1 = socket(0x18, 0x3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x6, "fea5f5c9418d96a414e4b2c625339ef1", 0x1}, 0x1c) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, &(0x7f0000000200)="0a0000fce6ae94d31bc3ec98c152950d20b955495ed0dee30fb07f040a3a06fcee883f9c3ec67a96e0184a1acd5d485539257a716433a6735f14402ab5a99859a1aa13eaa99d274f2387ee6868a7bb2ef4ccee2a0dec551ac09bd3993948715bcdf0095ecc0ef447fe17a12a9b85991499543ad054fa2063eb7fc966c4bedb913ef57919b1", 0x85) (async, rerun: 64) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dee06a00c222f", 0x41}], 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x3, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') (async) socket(0x18, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x5, 0x23c3800000, 0x6, 0x2, 0x2}) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random="4f0c7503aed2", @empty, [], {@ipv4={0x800, {{0x18, 0x4, 0x2, 0x5, 0x6c, 0x64, 0x2, 0x1, 0xf0, 0x0, @rand_addr=0xf, @multicast2, {[@end, @ra={0x94, 0x4, 0x2}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x6, [{[], 0x7b}]}, @ssrr={0x89, 0x2b, 0xfd, [@local={0xac, 0x14, 0x0}, @broadcast, @empty, @multicast2, @rand_addr=0x7ff, @broadcast, @multicast2, @multicast1, @broadcast, @multicast2]}, @end, @generic={0x83, 0x11, "f0de58a475ef218106109c26925a8f"}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7ff, 0x7ff, 0x1}}}}}) 8.589783472s ago: executing program 5 (id=89): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x2, 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r1, 0x6, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) socket(0x2, 0x2, 0x0) (async) getppid() (async) fcntl$setown(r1, 0x6, r2) (async) fcntl$getown(r1, 0x5) (async) fcntl$setown(r1, 0x6, r3) (async) 8.589652712s ago: executing program 6 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) accept$unix(r0, 0x0, 0x0) close(r0) socket$inet6(0x18, 0x4000, 0x9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket(0x2, 0x8002, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r2) (async) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x1) (async) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) (async) accept$unix(r0, 0x0, 0x0) (async) close(r0) (async) socket$inet6(0x18, 0x4000, 0x9) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) 8.09989398s ago: executing program 1 (id=222): syz_emit_ethernet(0xa5, &(0x7f00000000c0)={@remote, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x97, 0x67, 0x3, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0xac14ffff}, @udp={{0x2, 0x2, 0x8}, {"29094f715f34abc4778ab0c6feba0df41619c24f449018d740ec74e1c2f0857b26bfe8f574be7f0d621bcae53171fef38c9570c79a7cbf7d1aff2267de7071340df3b8a04b163d1aed7a9bd1f7c57401e6b0feb00cbe65ecd7bf20850d68a4b4410bd1a678abf85f4edf2e0ebe6fe8c4950c6e581b3673f7179570"}}}}}}) 7.882193045s ago: executing program 1 (id=223): sysctl$kern(&(0x7f0000000040)={0x1, 0x2d}, 0x2, &(0x7f00000002c0)="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"/401, &(0x7f0000000080)=0xd2, 0x0, 0xfffffffffffffd40) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x59}, 0x2, &(0x7f0000000480)="fbca3f82d2d7c9a752dc6ff186161332091d3ba4de086b2a501fc26294472463a31a8b646dd4b89c33bcaa7075c1682d5aa8b28c5ffdb45c33e40000005eb2291b44caae80059d379830b7058c0b0265256cffe65a9295d0e015c8144d8e30a0c8642894471899c926caf2d060944eaab37def595720d7c30e5cbf9e9df63cbe7b69f88f1e039e9ab69ddd088837ba278a141e0adc215ec0d6d5cb3c08ee7590e530f14c0b6fc1af9a60153e7460dd6975c13786405d120cc5b6823490d96750e2c381e9bc3db17b6e64", &(0x7f00000000c0)=0xca, &(0x7f0000000100)="af5a850600000000000000bcf5caa0c5802e2e8762d375fce99b4ce1b500000000a88e0000000000", 0x28) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r0 = shmget$private(0x0, 0x4000, 0xc, &(0x7f0000ffb000/0x4000)=nil) (async) r1 = getuid() sysctl$hw(&(0x7f0000000880)={0x6, 0x10}, 0x2, &(0x7f00000008c0)="9dbe89f7e0760f0ba3b68d4cbbbc6562977ef80cf6b9f47d910991568dc629824fccccd9d6084083005f87134f7ef7e65b0e8de46d3ad0f71fecad96a78be95553d0d871b7067c552d43973877082dabcfdbb27a9c100c7cc8d6e8525b6619db56a2128068d2929fe5812b75c0cf69708f345101d34d08d929a9fb494f51514fe182f49d9f7fa7791d3f8bbe4ef828eaffd5850baf460a51aeea62db384ba1b6f9a6479c9090001e2373dae0367c0b883df1156f8e005da4cc182f664186d0cfd5ab50a1cc82810ba571c2f7b25270470af8310b3c79231e26", &(0x7f00000009c0)=0xd9, &(0x7f0000000a00)="4ce597f4ae9c3b7c2cbd5ee8122f3c115a73069aa094168d4cd3c0aa4effdd530e7e8a49406bba7ba76bc000003342c0e97f4e1fd4b4e01aca749c132ef04ed3b2dbfa86e6988560fdb0cbbad6932fc5da184feea1e02a3fb03f02c4c1237943f1aa27db7ab4b2bb0e769b2ee4c2e0859f1c2308682c19f6b0dec0e7a7eb9c6c2ecffb9e0a9cba3ef3c3b87449b0fd950a006ae31810c6c24a34fd08aec65be1d7236509c28ebf6ef8ebd3ee4a8029cc1b3f", 0xb2) (async) getresuid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000680)) (async, rerun: 32) chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) (async, rerun: 32) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) r4 = setsid() (async) r5 = accept$inet(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x10) read(r5, &(0x7f0000000740)=""/224, 0xe0) (async, rerun: 64) setpgid(r4, 0x0) (async, rerun: 64) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) (async, rerun: 64) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7, 0xf9, 0x4, 0x0, 0x6, 0x3, 0x3d, 0x2, 0x1, 0x100002000640, 0x9}) (rerun: 64) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async, rerun: 64) r7 = semget$private(0x0, 0x4, 0x101) (rerun: 64) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async, rerun: 32) setuid(0xffffffffffffffff) (async, rerun: 32) semctl$GETZCNT(r7, 0x1, 0x7, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xc, 0xfffffffd, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4bad, 0x9, 0x4}, {0x8, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0xffc, 0x8, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x201, 0xfffffff4}, {0xc, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x1, 0x800}]}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r6, 0x4}, {r6, 0x20}], 0x3, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0x80d04466, &(0x7f0000000140)={0x9, 0xa526, 0x1005, 0x107492, "08e500", 0x20004116, 0x6}) (rerun: 64) r8 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000600)={{r1, 0xffffffffffffffff, r2, r3, 0x0, 0x9da4, 0x8000000000000000}, 0x326c, r4, r8, 0xc1be, 0x0, 0x6, 0x1, 0x6, 0x10000, 0x6, 0x8}) 7.230242201s ago: executing program 0 (id=224): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7, 0xffff63db, 0x800007, 0x56, 0x8, 0x8007f, 0x6, 0x10, [{0x8, 0x10001, 0x7, 0x1}, {0x0, 0xffffffff, 0x200103, 0x6}, {0xcd4, 0x3, 0x200006, 0x4}, {0x5, 0x8020fc, 0x11, 0x20000fe}, {0x6, 0x2000004, 0x7, 0x7}, {0x3996, 0xfffa, 0x8, 0x2000040a}, {0x10004, 0x0, 0x8000, 0xfffffffb}, {0x207, 0x9, 0x228002, 0xffffe2e1}, {0x2000009, 0xfffffffe, 0x6, 0x8006}, {0x3, 0x1, 0x80000007, 0x40}, {0x10086, 0xfffffffe, 0x8a3a000a, 0x9}, {0x2, 0x6, 0x9, 0xa6e}, {0x9, 0x49, 0x3, 0xa}, {0x4, 0x401, 0xfffdfffd, 0x7}, {0x8, 0x3fffffd, 0x7, 0x4}, {0x9be9, 0x0, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(0x0, 0xc2) unveil(&(0x7f0000000340)='./file2/file0/file0\x00', 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x800) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb5219f1000b913f1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x100, 0x11) close(r1) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f00000000c0)={0x2, 0xfffffffb}) ioctl$FIONREAD(r3, 0x8020690e, &(0x7f00000001c0)) 7.228207224s ago: executing program 0 (id=225): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[@ANYRES64=0x0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x5) poll(&(0x7f0000000100), 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000002f40), 0x40000, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000002f80)={@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4, @v4=@multicast1, @v4=@loopback, 0x1, 0x0, 0x7fc, 0x0, 0x935, 0xe, 0x18, 0x11}) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendto(r2, 0x0, 0x0, 0x80a, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x0, 0x7, "fffe0000fffffffffffffff200", 0x7}, 0x1c) chflagsat(0xffffffffffffffff, 0x0, 0x0, 0xa1337bc42d94b26b) semget$private(0x0, 0x1, 0x200) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaa8aaaaa0000c9db73f00800455c001c0064060000009078ffffffffe00000011000907800050001"]) 7.120085866s ago: executing program 0 (id=226): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f0000000080)="03109c7424a1cf85482676778f181b12184c256b1ca6f583", 0x18) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x98, &(0x7f0000000380), 0xfffa4961, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) pwritev(r1, &(0x7f0000001440)=[{&(0x7f00000006c0)="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", 0x186}], 0x1, 0x3) r2 = open(&(0x7f0000000a40)='.\x00', 0x20000, 0x22) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x45}, 0x0) utimensat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000000)={0x4, 0x2, 0x2, 0x2f, "1d00030100010000000000060068a95a010400", 0x6, 0x25}) 7.118833173s ago: executing program 0 (id=227): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x300000003}) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @random="d09b049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36d2b5", 0x38, 0x3a, 0xf9, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0xfc, '\x00', {0x0, 0x6, "5f7f00", 0x1, 0x2c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, [@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x67}]}}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0xc0785101, &(0x7f0000000080)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) 7.094867393s ago: executing program 6 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) accept$unix(r0, 0x0, 0x0) close(r0) socket$inet6(0x18, 0x4000, 0x9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket(0x2, 0x8002, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r2) (async) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x1) (async) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) (async) accept$unix(r0, 0x0, 0x0) (async) close(r0) (async) socket$inet6(0x18, 0x4000, 0x9) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) 6.890334188s ago: executing program 0 (id=228): setgid(0xffffffffffffffff) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x37, &(0x7f0000000040), 0x0) setuid(0xffffffffffffffff) getegid() sysctl$kern(&(0x7f0000000280)={0x1, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) (async) setuid(0xee01) (async) pipe(&(0x7f0000000000)) r1 = socket(0x2, 0x1, 0x0) shutdown(r1, 0x0) (async, rerun: 32) connect$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async, rerun: 32) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0xc000005, 0xffe, 0x7, 0x3, 0xf7, 0x10, [{0x8, 0x8, 0xfffff116, 0x80000001}, {0x3, 0x400, 0x4, 0x401}, {0x4, 0x4baa, 0x3, 0xd}, {0x1a, 0x3, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0xfffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0xffffffff, 0x27ffc, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x3ff}, {0x3, 0x11, 0x1, 0x8bfd}, {0xfffffffd, 0x0, 0x1, 0x3}, {0x9, 0x4, 0x800000, 0x5}, {0x601, 0x6, 0x40000b, 0x2}, {0x3, 0x6e2, 0xffff, 0x6f5fc48f}, {0x3, 0x80000000, 0x3, 0x10006}, {0x8ff9, 0x1, 0x100000, 0x2000401}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) (async, rerun: 32) openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (rerun: 32) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v4=@multicast2, @v4=@multicast1], [0x9, 0x4], 0x2, 0x1a}, {[@v6=@mcast1, @v6=@loopback], [0x34], 0x4005, 0x14}], {{0x1, 0x48, 0xba, 0x7}, 0x6546, 0x6, 0xffeffff8, 0x3, 0x4008, 0x9}, {{0x80, 0x9, 0xfd, 0x5}, 0x2, 0x100c88, 0x10027, 0x0, 0x3fd, 0xf0}, @v6=@mcast1, 0x1, 0x1000000a, 0x1000, 0x9, 0x5, [[0xd7, 0x146], [0x3, 0x408000]], [[0xfc000002, 0x4], [0xfffffff7, 0x9]], 0x5f8, [0x1d2, 0x4000807a], 0x2, 0x18, 0x7f, 0x0, 0x10, 0x3, 0x7, 0x83, 0x5, 0xff, 0x1, 0xce57, "0200"}}) (async) r2 = socket(0x2, 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x40) connect$inet(r2, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x8, &(0x7f0000000040)={0xf51, 0xfffffffffffff30a, 0x0, 0x3}) (async) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x8, 0xa, 0x0, 0x1}) (async) fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x3, 0xf, 0x0, 0x1}) poll(&(0x7f0000000000)=[{}], 0x2b, 0x400) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = semget$private(0x0, 0x4, 0x13e) semop(r4, &(0x7f0000000240)=[{0x3, 0x3, 0x1800}, {0x0, 0x1000, 0x1000}], 0x2) semctl$SETVAL(r4, 0x3, 0x8, 0x0) 6.885459714s ago: executing program 1 (id=223): sysctl$kern(&(0x7f0000000040)={0x1, 0x2d}, 0x2, &(0x7f00000002c0)="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"/401, &(0x7f0000000080)=0xd2, 0x0, 0xfffffffffffffd40) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x59}, 0x2, &(0x7f0000000480)="fbca3f82d2d7c9a752dc6ff186161332091d3ba4de086b2a501fc26294472463a31a8b646dd4b89c33bcaa7075c1682d5aa8b28c5ffdb45c33e40000005eb2291b44caae80059d379830b7058c0b0265256cffe65a9295d0e015c8144d8e30a0c8642894471899c926caf2d060944eaab37def595720d7c30e5cbf9e9df63cbe7b69f88f1e039e9ab69ddd088837ba278a141e0adc215ec0d6d5cb3c08ee7590e530f14c0b6fc1af9a60153e7460dd6975c13786405d120cc5b6823490d96750e2c381e9bc3db17b6e64", &(0x7f00000000c0)=0xca, &(0x7f0000000100)="af5a850600000000000000bcf5caa0c5802e2e8762d375fce99b4ce1b500000000a88e0000000000", 0x28) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r0 = shmget$private(0x0, 0x4000, 0xc, &(0x7f0000ffb000/0x4000)=nil) (async) r1 = getuid() sysctl$hw(&(0x7f0000000880)={0x6, 0x10}, 0x2, &(0x7f00000008c0)="9dbe89f7e0760f0ba3b68d4cbbbc6562977ef80cf6b9f47d910991568dc629824fccccd9d6084083005f87134f7ef7e65b0e8de46d3ad0f71fecad96a78be95553d0d871b7067c552d43973877082dabcfdbb27a9c100c7cc8d6e8525b6619db56a2128068d2929fe5812b75c0cf69708f345101d34d08d929a9fb494f51514fe182f49d9f7fa7791d3f8bbe4ef828eaffd5850baf460a51aeea62db384ba1b6f9a6479c9090001e2373dae0367c0b883df1156f8e005da4cc182f664186d0cfd5ab50a1cc82810ba571c2f7b25270470af8310b3c79231e26", &(0x7f00000009c0)=0xd9, &(0x7f0000000a00)="4ce597f4ae9c3b7c2cbd5ee8122f3c115a73069aa094168d4cd3c0aa4effdd530e7e8a49406bba7ba76bc000003342c0e97f4e1fd4b4e01aca749c132ef04ed3b2dbfa86e6988560fdb0cbbad6932fc5da184feea1e02a3fb03f02c4c1237943f1aa27db7ab4b2bb0e769b2ee4c2e0859f1c2308682c19f6b0dec0e7a7eb9c6c2ecffb9e0a9cba3ef3c3b87449b0fd950a006ae31810c6c24a34fd08aec65be1d7236509c28ebf6ef8ebd3ee4a8029cc1b3f", 0xb2) (async) getresuid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000680)) (async, rerun: 32) chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) (async, rerun: 32) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) r4 = setsid() (async) r5 = accept$inet(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x10) read(r5, &(0x7f0000000740)=""/224, 0xe0) (async, rerun: 64) setpgid(r4, 0x0) (async, rerun: 64) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) (async, rerun: 64) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7, 0xf9, 0x4, 0x0, 0x6, 0x3, 0x3d, 0x2, 0x1, 0x100002000640, 0x9}) (rerun: 64) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async, rerun: 64) r7 = semget$private(0x0, 0x4, 0x101) (rerun: 64) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async, rerun: 32) setuid(0xffffffffffffffff) (async, rerun: 32) semctl$GETZCNT(r7, 0x1, 0x7, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xc, 0xfffffffd, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4bad, 0x9, 0x4}, {0x8, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0xffc, 0x8, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x201, 0xfffffff4}, {0xc, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x1, 0x800}]}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r6, 0x4}, {r6, 0x20}], 0x3, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0x80d04466, &(0x7f0000000140)={0x9, 0xa526, 0x1005, 0x107492, "08e500", 0x20004116, 0x6}) (rerun: 64) r8 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000600)={{r1, 0xffffffffffffffff, r2, r3, 0x0, 0x9da4, 0x8000000000000000}, 0x326c, r4, r8, 0xc1be, 0x0, 0x6, 0x1, 0x6, 0x10000, 0x6, 0x8}) 6.670946422s ago: executing program 2 (id=58): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x61, 0xfa, 0x81, 0x6}]}) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="5c8f6abdf145067e0d3eb6d25fff56db7c7ea942d7ec31f5c8e27a9b3b6ae40441d705d09fde48f2aaa8e255e36794901ae7e254c0897d0efacbe9510ddc66b1654917acff08cdf4fc805a1df8ab6c0e9b3c08c34b359034e5b5b9bd20e0c3addc6ae6ad100ebf717d27e707b143dd4d44474d9cc371b0eaeb1178e43ee50ede409d4bdd1a0b10d0e412798f6607b9d03b777b93a21e472d", 0x98}], 0x1, 0x4000000000401) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r3 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r5, r6, 0x8f, 0x9, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[r5, r7, r7]) r8 = socket(0x11, 0x3, 0x0) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)) r9 = socket(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r10 = socket(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r10, 0xffff, 0x1, &(0x7f0000000040)=0x2, 0x4) closefrom(r9) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(r8, 0x11, 0x2, &(0x7f0000000000), 0x4) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000340)=0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x91) open(&(0x7f00000002c0)='./file0\x00', 0x712, 0x80) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) 6.670658107s ago: executing program 3 (id=167): setuid(0xffffffffffffffff) (async) r0 = shmget$private(0x0, 0x1000, 0x624, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 0x102, 0xfa}, 0x81, 0x0, 0x0, 0x7, 0x0, 0xde1, 0xfffffffffffff622, 0x2, 0xa1, 0x82, 0x4}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x5}, 0x81, 0x0, 0x0, 0x81, 0x0, 0x1, 0x4bef, 0xbb11, 0xb, 0x80000, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2/file0/file0\x00', 0x8, 0x42) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000480)) (async) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af90000000000e1de6e252c2000000000000000000000fe8000000000000000000000000000aa01029078fc000000205f7f0000012c00fe8000000000000000000000000000aafe8000000000000005000000000000002b00000167000000e25bc56887c88c7c8c0639d0931f26e6767ed050b3a882c0bf936ad938ee24d63f5b43250210d1be37b5245103c61b2f66637f95"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7, 0xffff63db, 0x800007, 0x56, 0x8, 0x8007f, 0x6, 0x10, [{0xffffffff, 0x10001, 0x7, 0x1}, {0x0, 0x0, 0x200103, 0x6}, {0xcd4, 0x3, 0x6f7, 0x4}, {0x5, 0x8020fc, 0x11, 0x20000fe}, {0x6, 0xb4e, 0x7, 0x7}, {0x3996, 0xfffa, 0x8, 0x2000040a}, {0x10004, 0x0, 0x8000, 0xfffffffb}, {0x207, 0x8, 0x228002, 0xffffe2e1}, {0x2000009, 0xfffffffe, 0x6, 0x8006}, {0x3, 0xffffffff, 0x80000007, 0x40}, {0x10086, 0xfffffffe, 0x8a3a000a, 0x4009}, {0xffffffff, 0x6, 0x9, 0xa72}, {0x9, 0x49, 0x3, 0xa}, {0x4, 0x401, 0xfffdfffd, 0x7}, {0x8, 0x3fffffd, 0x7, 0x4}, {0x5, 0x0, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) (async) mkdir(0x0, 0xc2) unveil(&(0x7f0000000340)='./file2/file0/file0\x00', 0x0) (async) r3 = getgid() setregid(0xffffffffffffffff, r3) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="e727eb9375865a3f42581c393b2d3b341dadda695fe4662f6639ee129b6c284400539ad58f63716e90cae4d479f9342c6f035d857c149278807a4343e9f9c114e4249f30ccb1add36ca8a034242af2ccc15f3f833243dc1d00e3ff948cfa44e6beaf8bef7e0d8cbf83108461771a8bbddab63bf63fb61603574fa8ed9edbd8bf6046b80d", 0x84, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x1b, &(0x7f0000000300)=""/27}) chdir(&(0x7f0000000180)='./file2/file0/file0\x00') 6.670469324s ago: executing program 4 (id=214): r0 = socket(0x18, 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="b7f312603ef69e2ca45251af19040c19be48ee2a72eff256bcb242a5ecab10d9ce3c1738bac96287d9fdd01a75a858591b924d1ea87f707d84b89d6526277e4de950dab27b6850fc9aead4", 0x4b}], 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x3a) (async) setuid(0xee01) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x5) (async) r1 = socket(0x18, 0x3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x6, "fea5f5c9418d96a414e4b2c625339ef1", 0x1}, 0x1c) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, &(0x7f0000000200)="0a0000fce6ae94d31bc3ec98c152950d20b955495ed0dee30fb07f040a3a06fcee883f9c3ec67a96e0184a1acd5d485539257a716433a6735f14402ab5a99859a1aa13eaa99d274f2387ee6868a7bb2ef4ccee2a0dec551ac09bd3993948715bcdf0095ecc0ef447fe17a12a9b85991499543ad054fa2063eb7fc966c4bedb913ef57919b1", 0x85) (async, rerun: 64) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dee06a00c222f", 0x41}], 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x3, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') (async) socket(0x18, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x5, 0x23c3800000, 0x6, 0x2, 0x2}) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random="4f0c7503aed2", @empty, [], {@ipv4={0x800, {{0x18, 0x4, 0x2, 0x5, 0x6c, 0x64, 0x2, 0x1, 0xf0, 0x0, @rand_addr=0xf, @multicast2, {[@end, @ra={0x94, 0x4, 0x2}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x6, [{[], 0x7b}]}, @ssrr={0x89, 0x2b, 0xfd, [@local={0xac, 0x14, 0x0}, @broadcast, @empty, @multicast2, @rand_addr=0x7ff, @broadcast, @multicast2, @multicast1, @broadcast, @multicast2]}, @end, @generic={0x83, 0x11, "f0de58a475ef218106109c26925a8f"}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7ff, 0x7ff, 0x1}}}}}) 6.670396067s ago: executing program 5 (id=89): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x2, 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r1, 0x6, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) socket(0x2, 0x2, 0x0) (async) getppid() (async) fcntl$setown(r1, 0x6, r2) (async) fcntl$getown(r1, 0x5) (async) fcntl$setown(r1, 0x6, r3) (async) 6.670230098s ago: executing program 7 (id=30): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r2 = socket(0x2, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) setuid(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async) socket(0x2, 0x2, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) (async) setuid(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, 0x0) (async) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) (async) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) 210.898608ms ago: executing program 0 (id=228): setgid(0xffffffffffffffff) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x37, &(0x7f0000000040), 0x0) setuid(0xffffffffffffffff) getegid() sysctl$kern(&(0x7f0000000280)={0x1, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) (async) setuid(0xee01) (async) pipe(&(0x7f0000000000)) r1 = socket(0x2, 0x1, 0x0) shutdown(r1, 0x0) (async, rerun: 32) connect$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async, rerun: 32) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0xc000005, 0xffe, 0x7, 0x3, 0xf7, 0x10, [{0x8, 0x8, 0xfffff116, 0x80000001}, {0x3, 0x400, 0x4, 0x401}, {0x4, 0x4baa, 0x3, 0xd}, {0x1a, 0x3, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0xfffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0xffffffff, 0x27ffc, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x3ff}, {0x3, 0x11, 0x1, 0x8bfd}, {0xfffffffd, 0x0, 0x1, 0x3}, {0x9, 0x4, 0x800000, 0x5}, {0x601, 0x6, 0x40000b, 0x2}, {0x3, 0x6e2, 0xffff, 0x6f5fc48f}, {0x3, 0x80000000, 0x3, 0x10006}, {0x8ff9, 0x1, 0x100000, 0x2000401}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) (async, rerun: 32) openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (rerun: 32) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v4=@multicast2, @v4=@multicast1], [0x9, 0x4], 0x2, 0x1a}, {[@v6=@mcast1, @v6=@loopback], [0x34], 0x4005, 0x14}], {{0x1, 0x48, 0xba, 0x7}, 0x6546, 0x6, 0xffeffff8, 0x3, 0x4008, 0x9}, {{0x80, 0x9, 0xfd, 0x5}, 0x2, 0x100c88, 0x10027, 0x0, 0x3fd, 0xf0}, @v6=@mcast1, 0x1, 0x1000000a, 0x1000, 0x9, 0x5, [[0xd7, 0x146], [0x3, 0x408000]], [[0xfc000002, 0x4], [0xfffffff7, 0x9]], 0x5f8, [0x1d2, 0x4000807a], 0x2, 0x18, 0x7f, 0x0, 0x10, 0x3, 0x7, 0x83, 0x5, 0xff, 0x1, 0xce57, "0200"}}) (async) r2 = socket(0x2, 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x40) connect$inet(r2, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x8, &(0x7f0000000040)={0xf51, 0xfffffffffffff30a, 0x0, 0x3}) (async) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x8, 0xa, 0x0, 0x1}) (async) fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x3, 0xf, 0x0, 0x1}) poll(&(0x7f0000000000)=[{}], 0x2b, 0x400) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = semget$private(0x0, 0x4, 0x13e) semop(r4, &(0x7f0000000240)=[{0x3, 0x3, 0x1800}, {0x0, 0x1000, 0x1000}], 0x2) semctl$SETVAL(r4, 0x3, 0x8, 0x0) 954.108µs ago: executing program 1 (id=223): sysctl$kern(&(0x7f0000000040)={0x1, 0x2d}, 0x2, &(0x7f00000002c0)="a2ffffffff50e8b977d5af9700bd6e754b25fba68dfa20b241d05c575d214edf8f0e45b7989c3159f7c3e90a91ec60aa3218beacd95f5cff749ba3090621dfe470d51c6ea7419ef2ac55204fc3d191e0a42b533d7069dd3a6bb0d5a0c7b2dfc360b9c6f3d65da1d05dc07344b8f4a9c061be5413dac2e4002a9499af6e882a6915585d6f7ccc4eeadb59f4740c632302403432ee3998f3b1559f6e21c0afc998e1b17bbf2b5354dacb788f3ced29bc0c1480d985f17d3d003cc0c95cad3269779db3c2e0d5350a4d53191c43c356f7151f82e4280c2769bdaff95e32163aa6f9724d8f51585c5678d3277ae536a0b01917df57972b9d4f7f154c0e0e60ddc2976dec92f1ebe25eae05a199216d2dbd4a58e4701604bc9b9fb24631e1305c3db0227051ac18dad80402a0a161ec3634c0a130028aa1c3458151417be8676e9e8eefe46fedc2cc94459f4360c47059faf7b7339116d9c609b7fecbba55988481777c96a4aba9c38ccd94024ccab01cc8cc31baaa46ec70d420167de662e2ce044c74895c7500"/401, &(0x7f0000000080)=0xd2, 0x0, 0xfffffffffffffd40) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x59}, 0x2, &(0x7f0000000480)="fbca3f82d2d7c9a752dc6ff186161332091d3ba4de086b2a501fc26294472463a31a8b646dd4b89c33bcaa7075c1682d5aa8b28c5ffdb45c33e40000005eb2291b44caae80059d379830b7058c0b0265256cffe65a9295d0e015c8144d8e30a0c8642894471899c926caf2d060944eaab37def595720d7c30e5cbf9e9df63cbe7b69f88f1e039e9ab69ddd088837ba278a141e0adc215ec0d6d5cb3c08ee7590e530f14c0b6fc1af9a60153e7460dd6975c13786405d120cc5b6823490d96750e2c381e9bc3db17b6e64", &(0x7f00000000c0)=0xca, &(0x7f0000000100)="af5a850600000000000000bcf5caa0c5802e2e8762d375fce99b4ce1b500000000a88e0000000000", 0x28) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r0 = shmget$private(0x0, 0x4000, 0xc, &(0x7f0000ffb000/0x4000)=nil) (async) r1 = getuid() sysctl$hw(&(0x7f0000000880)={0x6, 0x10}, 0x2, &(0x7f00000008c0)="9dbe89f7e0760f0ba3b68d4cbbbc6562977ef80cf6b9f47d910991568dc629824fccccd9d6084083005f87134f7ef7e65b0e8de46d3ad0f71fecad96a78be95553d0d871b7067c552d43973877082dabcfdbb27a9c100c7cc8d6e8525b6619db56a2128068d2929fe5812b75c0cf69708f345101d34d08d929a9fb494f51514fe182f49d9f7fa7791d3f8bbe4ef828eaffd5850baf460a51aeea62db384ba1b6f9a6479c9090001e2373dae0367c0b883df1156f8e005da4cc182f664186d0cfd5ab50a1cc82810ba571c2f7b25270470af8310b3c79231e26", &(0x7f00000009c0)=0xd9, &(0x7f0000000a00)="4ce597f4ae9c3b7c2cbd5ee8122f3c115a73069aa094168d4cd3c0aa4effdd530e7e8a49406bba7ba76bc000003342c0e97f4e1fd4b4e01aca749c132ef04ed3b2dbfa86e6988560fdb0cbbad6932fc5da184feea1e02a3fb03f02c4c1237943f1aa27db7ab4b2bb0e769b2ee4c2e0859f1c2308682c19f6b0dec0e7a7eb9c6c2ecffb9e0a9cba3ef3c3b87449b0fd950a006ae31810c6c24a34fd08aec65be1d7236509c28ebf6ef8ebd3ee4a8029cc1b3f", 0xb2) (async) getresuid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000680)) (async, rerun: 32) chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) (async, rerun: 32) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) r4 = setsid() (async) r5 = accept$inet(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x10) read(r5, &(0x7f0000000740)=""/224, 0xe0) (async, rerun: 64) setpgid(r4, 0x0) (async, rerun: 64) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) (async, rerun: 64) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7, 0xf9, 0x4, 0x0, 0x6, 0x3, 0x3d, 0x2, 0x1, 0x100002000640, 0x9}) (rerun: 64) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async, rerun: 64) r7 = semget$private(0x0, 0x4, 0x101) (rerun: 64) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async, rerun: 32) setuid(0xffffffffffffffff) (async, rerun: 32) semctl$GETZCNT(r7, 0x1, 0x7, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xc, 0xfffffffd, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4bad, 0x9, 0x4}, {0x8, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0xffc, 0x8, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x201, 0xfffffff4}, {0xc, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x1, 0x800}]}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r6, 0x4}, {r6, 0x20}], 0x3, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0x80d04466, &(0x7f0000000140)={0x9, 0xa526, 0x1005, 0x107492, "08e500", 0x20004116, 0x6}) (rerun: 64) r8 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000600)={{r1, 0xffffffffffffffff, r2, r3, 0x0, 0x9da4, 0x8000000000000000}, 0x326c, r4, r8, 0xc1be, 0x0, 0x6, 0x1, 0x6, 0x10000, 0x6, 0x8}) 769.146µs ago: executing program 2 (id=58): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x61, 0xfa, 0x81, 0x6}]}) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="5c8f6abdf145067e0d3eb6d25fff56db7c7ea942d7ec31f5c8e27a9b3b6ae40441d705d09fde48f2aaa8e255e36794901ae7e254c0897d0efacbe9510ddc66b1654917acff08cdf4fc805a1df8ab6c0e9b3c08c34b359034e5b5b9bd20e0c3addc6ae6ad100ebf717d27e707b143dd4d44474d9cc371b0eaeb1178e43ee50ede409d4bdd1a0b10d0e412798f6607b9d03b777b93a21e472d", 0x98}], 0x1, 0x4000000000401) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r3 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r5, r6, 0x8f, 0x9, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[r5, r7, r7]) r8 = socket(0x11, 0x3, 0x0) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)) r9 = socket(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r10 = socket(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r10, 0xffff, 0x1, &(0x7f0000000040)=0x2, 0x4) closefrom(r9) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(r8, 0x11, 0x2, &(0x7f0000000000), 0x4) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000340)=0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x91) open(&(0x7f00000002c0)='./file0\x00', 0x712, 0x80) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) 495.779µs ago: executing program 3 (id=167): setuid(0xffffffffffffffff) (async) r0 = shmget$private(0x0, 0x1000, 0x624, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 0x102, 0xfa}, 0x81, 0x0, 0x0, 0x7, 0x0, 0xde1, 0xfffffffffffff622, 0x2, 0xa1, 0x82, 0x4}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x5}, 0x81, 0x0, 0x0, 0x81, 0x0, 0x1, 0x4bef, 0xbb11, 0xb, 0x80000, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2/file0/file0\x00', 0x8, 0x42) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000480)) (async) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af90000000000e1de6e252c2000000000000000000000fe8000000000000000000000000000aa01029078fc000000205f7f0000012c00fe8000000000000000000000000000aafe8000000000000005000000000000002b00000167000000e25bc56887c88c7c8c0639d0931f26e6767ed050b3a882c0bf936ad938ee24d63f5b43250210d1be37b5245103c61b2f66637f95"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7, 0xffff63db, 0x800007, 0x56, 0x8, 0x8007f, 0x6, 0x10, [{0xffffffff, 0x10001, 0x7, 0x1}, {0x0, 0x0, 0x200103, 0x6}, {0xcd4, 0x3, 0x6f7, 0x4}, {0x5, 0x8020fc, 0x11, 0x20000fe}, {0x6, 0xb4e, 0x7, 0x7}, {0x3996, 0xfffa, 0x8, 0x2000040a}, {0x10004, 0x0, 0x8000, 0xfffffffb}, {0x207, 0x8, 0x228002, 0xffffe2e1}, {0x2000009, 0xfffffffe, 0x6, 0x8006}, {0x3, 0xffffffff, 0x80000007, 0x40}, {0x10086, 0xfffffffe, 0x8a3a000a, 0x4009}, {0xffffffff, 0x6, 0x9, 0xa72}, {0x9, 0x49, 0x3, 0xa}, {0x4, 0x401, 0xfffdfffd, 0x7}, {0x8, 0x3fffffd, 0x7, 0x4}, {0x5, 0x0, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) (async) mkdir(0x0, 0xc2) unveil(&(0x7f0000000340)='./file2/file0/file0\x00', 0x0) (async) r3 = getgid() setregid(0xffffffffffffffff, r3) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="e727eb9375865a3f42581c393b2d3b341dadda695fe4662f6639ee129b6c284400539ad58f63716e90cae4d479f9342c6f035d857c149278807a4343e9f9c114e4249f30ccb1add36ca8a034242af2ccc15f3f833243dc1d00e3ff948cfa44e6beaf8bef7e0d8cbf83108461771a8bbddab63bf63fb61603574fa8ed9edbd8bf6046b80d", 0x84, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x1b, &(0x7f0000000300)=""/27}) chdir(&(0x7f0000000180)='./file2/file0/file0\x00') 294.943µs ago: executing program 4 (id=214): r0 = socket(0x18, 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="b7f312603ef69e2ca45251af19040c19be48ee2a72eff256bcb242a5ecab10d9ce3c1738bac96287d9fdd01a75a858591b924d1ea87f707d84b89d6526277e4de950dab27b6850fc9aead4", 0x4b}], 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x3a) (async) setuid(0xee01) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x5) (async) r1 = socket(0x18, 0x3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x6, "fea5f5c9418d96a414e4b2c625339ef1", 0x1}, 0x1c) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, &(0x7f0000000200)="0a0000fce6ae94d31bc3ec98c152950d20b955495ed0dee30fb07f040a3a06fcee883f9c3ec67a96e0184a1acd5d485539257a716433a6735f14402ab5a99859a1aa13eaa99d274f2387ee6868a7bb2ef4ccee2a0dec551ac09bd3993948715bcdf0095ecc0ef447fe17a12a9b85991499543ad054fa2063eb7fc966c4bedb913ef57919b1", 0x85) (async, rerun: 64) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dee06a00c222f", 0x41}], 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x3, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') (async) socket(0x18, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x5, 0x23c3800000, 0x6, 0x2, 0x2}) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random="4f0c7503aed2", @empty, [], {@ipv4={0x800, {{0x18, 0x4, 0x2, 0x5, 0x6c, 0x64, 0x2, 0x1, 0xf0, 0x0, @rand_addr=0xf, @multicast2, {[@end, @ra={0x94, 0x4, 0x2}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x6, [{[], 0x7b}]}, @ssrr={0x89, 0x2b, 0xfd, [@local={0xac, 0x14, 0x0}, @broadcast, @empty, @multicast2, @rand_addr=0x7ff, @broadcast, @multicast2, @multicast1, @broadcast, @multicast2]}, @end, @generic={0x83, 0x11, "f0de58a475ef218106109c26925a8f"}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7ff, 0x7ff, 0x1}}}}}) 167.465µs ago: executing program 6 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) accept$unix(r0, 0x0, 0x0) close(r0) socket$inet6(0x18, 0x4000, 0x9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket(0x2, 0x8002, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r2) (async) bind$unix(r0, &(0x7f00000000c0)=@file={0x10, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x1) (async) accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x6000) (async) accept$unix(r0, 0x0, 0x0) (async) close(r0) (async) socket$inet6(0x18, 0x4000, 0x9) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) 0s ago: executing program 7 (id=30): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r2 = socket(0x2, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) setuid(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x4, 0x23c3800000, 0x6, 0x2, 0x2}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async) socket(0x2, 0x2, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) (async) setuid(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, 0x0) (async) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x8001) (async) syz_emit_ethernet(0xe1, &(0x7f00000002c0)={@broadcast, @local, [], {@generic={0x9000, "55aa376dc77ac8713b912b313cb3c73c5a2e15893aeb851cb8904943b92a721efb033f3e095444f91e9d1b01c7d20e8c540b97ef7dcb6cba3d079914a297849f596420d443a6d05ca060ae6501dbed15c47939b2ccb223e117913085998a0aba6e0b579a1321abaa564eec6b7dd8be8a641d997465bc05e7380faaa28d79296c0ac27faee15197c5c5c83e9eb0d052a7ab4ac0351cac0541efee34f9011ff4314812807616f6d3a68216ad3de277ee85c496da27aa689e5b35331c18701123bad7c7500a65b2ef6336e3f22bcf3701b2eeb4b0"}}}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error SYZFAIL: cover mmap failed (errno 9: Bad file descriptor) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: cover mmap failed (errno 9: Bad file descriptor) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) SYZFAIL: repeatedly failed to execute the program proc=2 req=58 state=3 status=67 (errno 4: Interrupted system call) OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) login: uvn_flush: obj=0xffffee006f483eb8, offset=0x3ff000. error during pageout. uvn_flush: WARNING: changes to page may be lost! set $lines = 0 Password: Login incorrect login: show panic Password: Login incorrect login: trace Password: Login incorrect login: show proc Password: Login incorrect show all locks login: Password: Login incorrect show all pools login: Password: Login incorrect trace login: Password: Login incorrect trace login: Password: