last executing test programs: 8.606267524s ago: executing program 2 (id=44): sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0xb, 0x7, 0x2000a, 0x1765, 0x1, 0x10, [{0x3, 0x3, 0xffff7113, 0x800}, {0xfffffffb, 0xffffffff, 0x40006, 0x2000fff}, {0x1, 0x4bad, 0x100003, 0x9}, {0x4, 0xe2, 0xd, 0x33b}, {0x0, 0x7, 0xf15, 0x41000084}, {0x200788c, 0x1, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0xff, 0xb16c, 0x48, 0xffffe2eb}, {0x4, 0x1000, 0x0, 0x20008000}, {0x3, 0x5, 0x8, 0x800002}, {0x1, 0x0, 0x8, 0x2}, {0x10010001, 0x4000, 0x40800001, 0x1}, {0x401, 0x4, 0xa, 0x403}, {0x3, 0x1000, 0x1, 0x9}, {0x3, 0xfffffffd, 0x3, 0x9}, {0x9be2, 0x1, 0x1000005, 0x1}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000040)=""/117, 0x75}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="7c903707bc03", 0x6) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000900001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0xa, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x1c8, 0x207e, 0x0, 0x0, 0x1}, 0x0, 0x2103, 0x0, 0x0, 0x4, 0x0, 0xa}) semctl$GETVAL(r4, 0x4, 0x5, 0x0) semctl$GETNCNT(r4, 0x2, 0x3, 0x0) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/245, 0xf5}], 0x1, 0x0}, 0x3002) readv(r3, &(0x7f0000001380)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/91, 0x5b}, {&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x5) open(&(0x7f0000000040)='./file0\x00', 0x9cab835cfdc52675, 0xdc) r5 = kqueue() kevent(r5, &(0x7f0000000040), 0xb6b5, 0x0, 0x7fff, 0x0) kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="a5f58f4988e4aaaaaaaaaaaa08004604002400650000fd019078ac1400aa0000000089037f00110090781000000000000f98"]) bind$unix(r2, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r2, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) accept$unix(r2, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x8) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x18, 0x2, 0xff) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f0000001400)) 8.299524009s ago: executing program 2 (id=52): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() close(r0) syz_open_pts() (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0xfffffffffffffffe, 0x2, 0x100200000, 0x100000000, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xb72, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x80000001, 0xfffffffffffffffa, 0xff, 0xa, 0xfffffffffffffffb, 0x800, 0x9, 0x20000000000, 0x5], [0xfffffffe, 0x40000000008000, 0x40000002, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0xb, 0x800001ffff7ffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x400000, 0x0, 0x7d06}, {0x2, 0x22, 0x5, 0x20000000000000}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x80004, 0x5, 0xfffffffffffffff7}, {0xfffe, 0x2, 0xffff, 0xb}, {0x0, 0x9, 0x9, 0xfffffffffffff281}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xf, 0x6, 0x6d5, 0x6}}}) (async) r1 = kqueue() mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 8.1843555s ago: executing program 5 (id=54): r0 = socket$unix(0x1, 0x1, 0x0) (async) open$dir(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x184) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mlock(&(0x7f0000302000/0x1000)=nil, 0x1000) (async) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x11) (async) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$DIOCADDQUEUE(0xffffffffffffff9c, 0xc148445d, &(0x7f00000006c0)={0x101, 0xf, {'\x00', './file0\x00', './file0\x00', './file0aaaaaaaaa', {{0x9, 0xc8c}, {0x4, 0x4}, 0x39}, {{0x6, 0x6}, {0x4, 0x8}, 0x6d}, {{0x9d6}, {0x7, 0x3ff}, 0x6}, {0x3, 0x3, 0x4, 0x5}, 0x0, 0x9, 0x2, 0x8001, 0x4}}) rename(&(0x7f00000012c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') (async) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') (async) rename(&(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) bind$unix(r0, &(0x7f0000000040)=@file={0xfd, 0x1, './file0\x00'}, 0xa) open(&(0x7f0000000040)='./file0\x00', 0x28, 0x0) 8.173783211s ago: executing program 5 (id=57): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() (async) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x7) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/104, 0x68}], 0x1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DIOCRSETTFLAGS(r2, 0xc450444a, &(0x7f00000009c0)={{'./file0\x00', './file0\x00', 0x7, 0x2}, 0x0, 0x0, 0x0, 0xffffffff, 0x49f039af, 0x2, 0x3, 0x50}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="d058036338f0b7fc00112d3e118669fac31b6e47fa4113595ef7b6953520a9f9d3fc903e61b4a254a6597e79f4fd81183958bdb6212829188b8d1fa4a2fd8b3cc859fc3d228121940ae99d", 0x4b}, {&(0x7f0000000200)="cd7848ab79add2f589c46bd1977d0f31ea3d41121087fd247de7da689314", 0x1e}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) 8.16574888s ago: executing program 2 (id=58): r0 = socket$inet6(0x18, 0x1, 0x6) fcntl$dupfd(r0, 0xa, r0) r1 = socket(0x18, 0x4, 0x6) getsockopt$sock_int(r1, 0xffff, 0x40, 0x0, 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) r2 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r2, 0xffff, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0xfffb, 0x7}, 0x100004, 0x0, 0x0, 0x0, 0x1, 0x5, 0x800000800000000, 0x0, 0x5, 0xffffffffe154f620, 0xbf}) r4 = shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) shmdt(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x5, 0x8) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000300)='./file1\x00', &(0x7f0000000440)='./file0\x00') open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0xe3) open$dir(&(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf02, 0x186) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.090265758s ago: executing program 2 (id=62): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x82) r1 = kqueue() kevent(r1, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffffc, 0xd, 0xfffff, 0x2, 0x7fff}], 0x10, 0x0, 0x80000001, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) chmod(&(0x7f0000000100)='.\x00', 0x49) unveil(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='x\x00') ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x94, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x1, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffd, 0x22, 0x8, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x9, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x80, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x2c, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x5}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r3 = socket(0x18, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x18, 0x3, 0x800, "fe80000400000000fdff00"}, 0x1c) write(r3, &(0x7f0000000480)="2f85401f6c5ad582007021f982e3972447cbd42ada194a8856815711287be8e715ccd1532b2421082b03b95f177ca353d5a1034b75c5b7dbf6236c797aff370ce8720f616d69122b9a8a0b77e6786a2bed8775f06a5f65333cf08a5aab7d63595f9bb5a2bdfbf4664de0a8eff53d2011b9283646d3c38a5e04fd42fd17e0dfba48ea58a896f975812843010000005959ae", 0x91) write(r0, &(0x7f0000000140)='$', 0x1) kevent(r1, 0xffffffffffffffff, 0xfffffe3f, 0x0, 0x9, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r4, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='c\x00') open$dir(&(0x7f0000000140)='./file0\x00', 0x20, 0x58) ftruncate(r4, 0x79c8) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x10, 0x2, 0x3, 0xac1402aa}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) gettimeofday(&(0x7f0000000200), 0x0) kevent(r5, &(0x7f0000000040)=[{{r6}, 0xfffffffffffffff9, 0xd8, 0x40, 0x5, 0x1000}], 0x4, &(0x7f0000000380)=[{{r2}, 0x0, 0x1b, 0x20000000, 0x2, 0x100}, {{r1}, 0xfffffffffffffff1, 0x11, 0x40000000, 0x2, 0x6}, {{r0}, 0xfffffffffffffff7, 0x0, 0x1, 0x7, 0xfffffffffffffff7}, {{}, 0xfffffffffffffffd, 0xfd48ea1a79c802ca, 0xfffff, 0xfffffffffffffffc, 0x9}, {{r0}, 0xfffffffffffffff8, 0x78, 0x1, 0x7ce3, 0xfffffffffffffbff}, {{r4}, 0xffffffffffffffff, 0x40, 0x2, 0x2, 0x5}], 0x0, &(0x7f0000000440)={0xfb, 0xc}) ioctl$DIOCCHANGERULE(r4, 0xcd60441a, &(0x7f00000005c0)={0x1, 0x1000, 0xa000, './file0\x00', './file0/file0\x00', 0x0, "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"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.910458507s ago: executing program 2 (id=66): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socket(0x2, 0x5, 0x77) pipe2(0x0, 0x10004) 7.669838592s ago: executing program 2 (id=79): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x9, 0x3}, {0xfffffffffffffff4, 0x7f8}}, 0x2) (async) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd600000000000000400697a653e336f000000500000000000ff020000000000000000000000000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="3ba7a5", 0x3) write(r0, &(0x7f0000000500)="e52f1f9e00000100b5e6464934dbf8a54a3f93aad7f4e6cf27999b980c6cba856e1fe1862c8fb972baeb89603ae8d059250a6531bd4a5d69adfb584b90e0d5560ea72a495349aae97e64d601b83f7f6a837ae34ed2194315a0d34509f581ee72ccc4e23bdb488c3f725ddcc15ef708fe2f009cf27d1fab10b382bd1810f50fa37cfa7213311a561b525041ecbc8fb4d249c8be6f6cc5226d9bc10196388c1627de0b6400278994ed60561697aacc011f4a4daaa24dcf4926c4dda5e5fa9ac40fa75d890c7817b000"/215, 0xffffffa9) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[]) fsync(0xffffffffffffffff) 7.660013084s ago: executing program 32 (id=79): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x9, 0x3}, {0xfffffffffffffff4, 0x7f8}}, 0x2) (async) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd600000000000000400697a653e336f000000500000000000ff020000000000000000000000000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="3ba7a5", 0x3) write(r0, &(0x7f0000000500)="e52f1f9e00000100b5e6464934dbf8a54a3f93aad7f4e6cf27999b980c6cba856e1fe1862c8fb972baeb89603ae8d059250a6531bd4a5d69adfb584b90e0d5560ea72a495349aae97e64d601b83f7f6a837ae34ed2194315a0d34509f581ee72ccc4e23bdb488c3f725ddcc15ef708fe2f009cf27d1fab10b382bd1810f50fa37cfa7213311a561b525041ecbc8fb4d249c8be6f6cc5226d9bc10196388c1627de0b6400278994ed60561697aacc011f4a4daaa24dcf4926c4dda5e5fa9ac40fa75d890c7817b000"/215, 0xffffffa9) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[]) fsync(0xffffffffffffffff) 7.561716118s ago: executing program 8 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/238, 0xee}, {&(0x7f0000001780)=""/50, 0x32}, {&(0x7f00000017c0)=""/102, 0x66}], 0x7) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) r5 = dup2(r4, r3) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000040)=@file={0xd2, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d7088985dee806d8f3c4041", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x2c, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r5, 0x10004) close(0x3) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000a00)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) getsockname(r8, &(0x7f0000000cc0)=@un=@file={0x0, 0x0, ""/504}, &(0x7f00000004c0)=0x1fa) sendmmsg(r8, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) semget(0x3, 0x2, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYRES64]) bind$unix(r1, &(0x7f0000000480)=@abs={0x40, 0x0, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r10 = fcntl$dupfd(r9, 0x3, 0xffffffffffffffff) ioctl$BIOCSRTIMEOUT(r9, 0x8010426d, &(0x7f0000000200)={0xeed0, 0x8}) sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f00000000c0)="ad5d5e59e175aadfd4935e8bc303106455ad7d03d071455f8742e6a613d07c673c97ca0b1e7d97a4ea86768a410e9c226493", &(0x7f0000000100)=0x32, &(0x7f0000000140)="bac2568b82e72bca69d7acda98be336f4e0e9a491a6fa8dfee6c6890737dd2820be4df7cd33285a040cfa049045f618996262e0e5e0a6625ab50a59b9bfd8544eab9fc52c0feb85469018c8d", 0x4c) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x2000641e) 6.612989904s ago: executing program 8 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/238, 0xee}, {&(0x7f0000001780)=""/50, 0x32}, {&(0x7f00000017c0)=""/102, 0x66}], 0x7) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) r5 = dup2(r4, r3) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000040)=@file={0xd2, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d7088985dee806d8f3c4041", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x2c, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r5, 0x10004) close(0x3) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000a00)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) getsockname(r8, &(0x7f0000000cc0)=@un=@file={0x0, 0x0, ""/504}, &(0x7f00000004c0)=0x1fa) sendmmsg(r8, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) semget(0x3, 0x2, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYRES64]) bind$unix(r1, &(0x7f0000000480)=@abs={0x40, 0x0, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r10 = fcntl$dupfd(r9, 0x3, 0xffffffffffffffff) ioctl$BIOCSRTIMEOUT(r9, 0x8010426d, &(0x7f0000000200)={0xeed0, 0x8}) sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f00000000c0)="ad5d5e59e175aadfd4935e8bc303106455ad7d03d071455f8742e6a613d07c673c97ca0b1e7d97a4ea86768a410e9c226493", &(0x7f0000000100)=0x32, &(0x7f0000000140)="bac2568b82e72bca69d7acda98be336f4e0e9a491a6fa8dfee6c6890737dd2820be4df7cd33285a040cfa049045f618996262e0e5e0a6625ab50a59b9bfd8544eab9fc52c0feb85469018c8d", 0x4c) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x2000641e) 6.612548442s ago: executing program 4 (id=103): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x20007461) sysctl$vm_swapencrypt(&(0x7f0000000140)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000180)="9b8c98dfbdff", &(0x7f00000001c0)=0x6, &(0x7f0000000200)="d3d754a252d656bc340277e8475699a4b53421937013e833cfbfe5acdc681c8667c5c680aab1410d99a68dc98159388fee85a3fcf62104a0babfa14e8a11c4c290e3379e24f3e280a7a4bfbcf43121b86e1e67eca15c130cb9a4550d5dfa26f4b8681d4def2ae17067b5ce1de2bb4768771fdfee7681b1e35d120d15c185f714f820c822d9a94ca1375330f0961e611bb0ab7451232a4a11827341f60248f70c33117d76cbd47fa63111f8cbcda6223b8e9420bcb441e6f09a0d3ff1abb7c0bfe4", 0xc1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "ff2e77f8ffff00200000004000000001", 0x4}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) r1 = syz_open_pts() close(r1) r2 = socket(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='!', 0x1}], 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3, 0xfffffff8}, 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f0000000040)=0xe1ae, 0x4) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) write(r2, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000980)={0x42, 0x62}) r4 = syz_open_pts() close(r4) syz_open_pts() writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000080)={0x8, 0x9, 0xd, 0x80000001, "0a6400b72860147bccc70204000300", 0x80000007, 0x4005}) socket(0x6, 0x1000, 0x4) select(0x40, &(0x7f0000000000)={0x2, 0x4, 0x401, 0x8, 0xce, 0x0, 0x3, 0x8}, &(0x7f0000000080)={0x3ff, 0x7, 0x7fff, 0x4cb6f9a9, 0x6, 0x3, 0x8, 0xc4f7}, 0x0, 0x0) ioctl$TIOCSFLAGS(r4, 0x8004745c, &(0x7f00000000c0)=0x1) getsid(0x0) 6.096775724s ago: executing program 4 (id=105): r0 = socket$inet(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="287ca27fb26273c9be5b87e7", 0xc) r2 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x9010, r2, 0x0) ktrace(0x0, 0x1, 0x0, 0x0) 6.044888333s ago: executing program 8 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/238, 0xee}, {&(0x7f0000001780)=""/50, 0x32}, {&(0x7f00000017c0)=""/102, 0x66}], 0x7) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) r5 = dup2(r4, r3) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000040)=@file={0xd2, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d7088985dee806d8f3c4041", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x2c, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r5, 0x10004) close(0x3) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000a00)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) getsockname(r8, &(0x7f0000000cc0)=@un=@file={0x0, 0x0, ""/504}, &(0x7f00000004c0)=0x1fa) sendmmsg(r8, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) semget(0x3, 0x2, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYRES64]) bind$unix(r1, &(0x7f0000000480)=@abs={0x40, 0x0, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r10 = fcntl$dupfd(r9, 0x3, 0xffffffffffffffff) ioctl$BIOCSRTIMEOUT(r9, 0x8010426d, &(0x7f0000000200)={0xeed0, 0x8}) sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f00000000c0)="ad5d5e59e175aadfd4935e8bc303106455ad7d03d071455f8742e6a613d07c673c97ca0b1e7d97a4ea86768a410e9c226493", &(0x7f0000000100)=0x32, &(0x7f0000000140)="bac2568b82e72bca69d7acda98be336f4e0e9a491a6fa8dfee6c6890737dd2820be4df7cd33285a040cfa049045f618996262e0e5e0a6625ab50a59b9bfd8544eab9fc52c0feb85469018c8d", 0x4c) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x2000641e) 5.396256656s ago: executing program 4 (id=111): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0) rename(&(0x7f0000000100)='./file0\x00', 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x1c0, 0x43}, 0x6205, 0x2a3, 0x4, 0xc, 0x1, 0x0, 0x0, 0x401, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffe}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x1c0, 0x43}, 0x6205, 0x2a3, 0x4, 0xc, 0x1, 0x0, 0x0, 0x401, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffe}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='r\x00') r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0) (async) setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0/../file0\x00', 0x1ffa, 0x7) 5.1274505s ago: executing program 6 (id=114): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() getrlimit(0x3, &(0x7f0000000040)) close(r0) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0xfffffffb, 0x7f, 0x4347e793, 0xffffff8d, "0d262804027953c927250fd70cffffffffffffff", 0x5, 0x721}) r1 = socket(0x1, 0x5, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0x1c, 0x18, 0x0, 0x7, "fe8000040000000000ff00", 0x4}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000140)=0x20000, 0x4) write(r1, &(0x7f0000000200)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e650876593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2cce0d51b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f62414871", 0xff9f) writev(r0, &(0x7f00000016c0)=[{&(0x7f00000005c0)="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", 0x1d7}], 0x1) unveil(&(0x7f0000000000)='./file0/file0/..\x00', &(0x7f0000000100)='x\x00') 5.125312543s ago: executing program 1 (id=116): sysctl$vfs_ffs(&(0x7f00000000c0)={0x4, 0x1, 0xf}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) (async) r2 = socket(0x1, 0x5, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) ioctl$FIOASYNC(r1, 0x8004745d, &(0x7f0000000000)=0x8) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f0000d80000/0x2000)=nil, &(0x7f00006ad000/0x1000)=nil}, {&(0x7f0000001000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc}, {0x0, &(0x7f0000e08000/0x4000)=nil, 0x10000}, {0x0, &(0x7f0000815000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffffffffffffffff}, {0x0, 0x0, 0x9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000b72000/0x4000)=nil, 0x1}, {&(0x7f00001d0000/0x2000)=nil, &(0x7f00001d2000/0x1000)=nil}, {&(0x7f00006ad000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a80000/0x1000)=nil}, {&(0x7f0000eef000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000aeb000/0x3000)=nil, &(0x7f00001d3000/0x2000)=nil}, {&(0x7f00009ff000/0x1000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil}], './file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd24]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) (async) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4}], 0x1, &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x5}) 5.103714175s ago: executing program 8 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/238, 0xee}, {&(0x7f0000001780)=""/50, 0x32}, {&(0x7f00000017c0)=""/102, 0x66}], 0x7) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) r5 = dup2(r4, r3) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000040)=@file={0xd2, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d7088985dee806d8f3c4041", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x2c, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r5, 0x10004) close(0x3) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000a00)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) getsockname(r8, &(0x7f0000000cc0)=@un=@file={0x0, 0x0, ""/504}, &(0x7f00000004c0)=0x1fa) sendmmsg(r8, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) semget(0x3, 0x2, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYRES64]) bind$unix(r1, &(0x7f0000000480)=@abs={0x40, 0x0, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r10 = fcntl$dupfd(r9, 0x3, 0xffffffffffffffff) ioctl$BIOCSRTIMEOUT(r9, 0x8010426d, &(0x7f0000000200)={0xeed0, 0x8}) sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f00000000c0)="ad5d5e59e175aadfd4935e8bc303106455ad7d03d071455f8742e6a613d07c673c97ca0b1e7d97a4ea86768a410e9c226493", &(0x7f0000000100)=0x32, &(0x7f0000000140)="bac2568b82e72bca69d7acda98be336f4e0e9a491a6fa8dfee6c6890737dd2820be4df7cd33285a040cfa049045f618996262e0e5e0a6625ab50a59b9bfd8544eab9fc52c0feb85469018c8d", 0x4c) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x2000641e) 4.558298308s ago: executing program 4 (id=118): ioctl$WSKBDIO_SETBACKLIGHT(0xffffffffffffff9c, 0x800c5712, &(0x7f0000000040)={0x8, 0x3, 0x2}) sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) 4.557844186s ago: executing program 7 (id=119): r0 = socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="ed", 0x1) shutdown(r3, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "ff2e77f8ffff00200000004000000001", 0x4}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) syz_emit_ethernet(0x8d, &(0x7f0000000040)={@random="efd3627d7868", @broadcast, [], {@generic={0x3c01, "0bc67247e402079a692df0903f128b6a48226a9f80bd706734f31116e2fad7d398e9a1333b29a7a6887efdc5a725d68ca996d85ec887e0f0d7307eebb5d55ffeac60ee117a1d1836d60286ac9dd00c1bc07b94b9bcd346fa10cf1bdf4a3fc66a1c092a86feef28634873180a6e0490299cb1e8be86a71c1cf1a1efc8a812f1"}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x2, 0x1, 0x0) setsockopt(r5, 0x106, 0x1a, &(0x7f0000000100), 0x0) connect$inet(r5, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x1}, 0x10) closefrom(r0) 4.519009022s ago: executing program 6 (id=120): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f0000d80000/0x2000)=nil, &(0x7f00006ad000/0x1000)=nil}, {&(0x7f0000001000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc}, {0x0, &(0x7f0000e08000/0x4000)=nil, 0x10000}, {0x0, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffffffffffffffff}, {0x0, 0x0, 0x9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000b72000/0x4000)=nil, 0x1}, {&(0x7f00001d0000/0x2000)=nil, &(0x7f00001d2000/0x1000)=nil}, {&(0x7f00006ad000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a80000/0x1000)=nil}, {&(0x7f0000eef000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d3000/0x2000)=nil}, {&(0x7f00009ff000/0x1000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil}], './file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(&(0x7f0000000100)={0x1, 0x44}, 0x3, &(0x7f0000000040)="71f91e43b6181f5a9a03fc1282d42584a8ca9becb71d5a", &(0x7f0000000000)=0xfe10, 0x0, 0xfffffe31) close(0x3) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x2, 0x0, 0x0, 0x0, 0x26) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc020699c, &(0x7f0000000100)) getrlimit(0x0, &(0x7f0000000a00)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x9e) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f0000000100)) 4.518581723s ago: executing program 4 (id=121): setegid(0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='#', 0x1}], 0x1) r0 = msgget$private(0x0, 0x1ba) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[], 0x401, 0x0) (async) msgsnd(r0, 0x0, 0x401, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x40, 0x13, 0x1}], 0x0, 0x0, 0x59b, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) (async) r1 = socket(0x18, 0x2, 0x0) r2 = syz_open_pts() (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)=0x9) (async) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) clock_settime(0x100000000000000, &(0x7f0000000000)={0xb69e8cfe, 0x11}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0xc}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) (async) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8, 0x800) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 4.307762439s ago: executing program 3 (id=122): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372821", 0x62, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x9}, 0xfffffffffffffff9, 0x8000000000001, 0x100000000, 0x6, 0xffffffffffffffff, 0x0, 0x400000000000a8, 0x3, 0x0, 0x0, 0x0, 0x201}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) poll(&(0x7f0000000000), 0x35, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 4.301033021s ago: executing program 3 (id=123): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000000)='./file0\x00', 0x30000) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) readlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=""/182, 0xb6) closefrom(r2) socket(0x18, 0x1, 0x0) openat$pci(0xffffffffffffff9c, 0x0, 0x100, 0x0) 3.600914153s ago: executing program 0 (id=124): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, 0x0, ""/252}, &(0x7f0000000100)=0xfe) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000140), 0x4) connect$unix(r0, &(0x7f0000000180)=@abs={0x2, 0x1, 0x0, 0x3}, 0x8) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DIOCRCLRTSTATS(r1, 0xc4504441, &(0x7f0000001f40)={{'./file0\x00', './file0\x00', 0x28, 0x9}, &(0x7f0000000200)=[{'./file0\x00', './file0\x00', 0x2, 0x6}, {'./file0\x00', './file0\x00', 0x41, 0x8}, {'./file0\x00', './file0\x00', 0x8, 0xa}, {'./file0\x00', './file0\x00', 0x40, 0x9}, {'./file0\x00', './file0\x00', 0x61, 0x56}, {'./file0\x00', './file0\x00', 0x14, 0x3}, {'./file0\x00', './file0\x00', 0x2f, 0x5}], 0xe, 0x7, 0x9, 0xfffffbf5, 0x6, 0x7fffffff, 0x0, 0xd}) (async) select(0x40, &(0x7f00000023c0)={0x5, 0x4, 0xa1, 0xb1, 0x828, 0x1459, 0xffff, 0x5}, &(0x7f0000002400)={0x2, 0xe0f1, 0x100000001, 0x5, 0x9, 0x3, 0xfffffffffffffe00, 0x6}, &(0x7f0000002440)={0x7, 0x4, 0x4, 0x6, 0x40, 0x7, 0x5, 0x4}, &(0x7f0000002480)={0x1, 0x1}) pipe2(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) (async) getrusage(0xffffffffffffffff, &(0x7f0000002500)) ioctl$DIOCSETSYNFLWATS(r1, 0xc0084461, &(0x7f00000025c0)={0x8, 0xffff0001}) (async) getrusage(0xffffffffffffffff, &(0x7f0000002600)) r4 = open(&(0x7f00000026c0)='./file0/file0\x00', 0x1, 0x150) fchdir(r3) symlinkat(&(0x7f0000002700)='./file0/file0\x00', r3, &(0x7f0000002740)='./file0/file0\x00') (async) getresuid(&(0x7f0000002780)=0x0, &(0x7f00000027c0)=0x0, &(0x7f0000002800)=0x0) fchown(r3, r6, 0xffffffffffffffff) (async) seteuid(r7) (async) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000002840)=0x5) (async) ioctl$BIOCGRTIMEOUT(r4, 0x4010426e, &(0x7f0000002880)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000028c0), 0x80, 0x0) write$audio(r8, &(0x7f0000002900)="fbb64ce7f2b8e4b2ff60f3d7996fc550e152067d639e8fa0f3245c7a0f94f9c9124175413c7cbaac22c3c14914b0947d6d3169344fe599aeec8d71db79d2cb1d3c8a856ea4f9d6b3665a20c610e423045a312961a6d13a687dd32ef92b04f30e6f3d5b077796209cd62a29a2f43c7d45372209ec724e164eb3c571987ac9b0c16e21d18aa339dd133ef08b1728f2f0ad920ecf33b39f892df37d7a00858b9d38006541f94af263f5048205383dfbfb9ac38016da44", 0xb5) socket(0x2, 0x2, 0x3) (async) ioctl$AUDIO_SETPAR(r3, 0xc0404125, &(0x7f00000029c0)={0x0, 0x1, 0x20, 0x2, 0x2, 0xbb80, 0x6, 0xc, 0x18, 0x85e1}) getrusage(0x0, &(0x7f0000002a00)) (async) ioctl$DIOCRCLRTABLES(r1, 0xc450443c, &(0x7f0000002ac0)={{'./file0/file0\x00', './file0\x00', 0x11, 0x8}, 0x0, 0x0, 0x0, 0xfffff001, 0x7, 0x1, 0x2, 0x0, 0x1}) (async) lchown(&(0x7f0000002f40)='./file0/file0\x00', r5, 0xffffffffffffffff) (async) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000002f80), 0x200, 0x0) ioctl$AUDIO_GETSTATUS(r9, 0x40204128, &(0x7f0000002fc0)) (async) fstatat(r2, &(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) wait4(0x0, &(0x7f00000030c0), 0x8, &(0x7f0000003100)) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000031c0)={{r10, r11, r10, 0x0, 0x110, 0x1b6b, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x100000001, 0x0, 0x1, 0x0, 0xb1a}) 3.59933006s ago: executing program 1 (id=125): r0 = semget$private(0x0, 0xb, 0x19f) setregid(0xffffffffffffffff, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() setresgid(r2, r2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000580)={{0x0, 0x0, r1, r2, 0x10b, 0xffff, 0x0, 0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0xf3d, 0x0, 0x8}) semop(r0, &(0x7f0000000600)=[{0x0, 0x81, 0x800}], 0x1) semop(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000180)=""/145) semctl$GETNCNT(r0, 0x42f434189d5316d4, 0x3, &(0x7f0000000140)=""/131) r3 = getuid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) fstat(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000440)={{r7, r8, r4, r5, 0x8c, 0xfff7, 0x0, 0x0, 0x2}, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x8}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = semget$private(0x0, 0x2, 0x6) semctl$SETALL(r10, 0x0, 0x9, &(0x7f0000000100)=[0x200, 0x9, 0x5]) fstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) r13 = semget$private(0x0, 0x3, 0x25d) semctl$IPC_SET(r13, 0x0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x1c4, 0x7e, 0x0, 0x0, 0x5}, 0x0, 0x103, 0x0, 0x0, 0x800000000000206, 0x0, 0xfffffffffffffffa}) semctl$IPC_SET(r13, 0x0, 0x1, &(0x7f0000000340)={{r4, r12, r11, r12, 0x0, 0x1000, 0x0, 0x0, 0x359}, 0x0, 0x8, 0x0, 0x0, 0x8000000000000001, 0x0, 0x9}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r14 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r14, 0xffff, 0x1001, 0x0, 0x51) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004503003000000411907800000004ffffffff0b0190780044ee5141cdac62a762a50b00134509000200680001ed11c5a6989ba9b858c852426924fdaacb9d56238fa9eb74a6d7029c92eee461812a368810422f6da92706a90074d5a877f0a87086c842"]) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{r3, r5, r9, r12, 0xd, 0x7, 0x0, 0x0, 0xffffffff80000000}, 0x0, 0x4, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x7}) getuid() 3.579654462s ago: executing program 3 (id=126): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000300)="e88cb67ff949663b56a1fe85d47b5515e541ae08510e8ec29a622c7f04a78b03c02fd721e71cc40d1b10f984d409a8567de6a287dca52ad1a774f89cac682e6a54ec8c2efdc44d03c58f45e777d7b473166bc68a48470b7f307235b55eda0683f0f1c62e816c65b5ec949ee070eae7ac964d5b6edbd64f69dee3aeaa1578f1d40419cadf699709849bf9bdd9144db5a7e51e3f364f272e845b28b27fe9d7494a4d106ae4bbb1fdacac4c15f855a8a1ebd0f2a868d16c9f697e4781219809799c68febb2e9cd01d6a32ec2ab968221eaefd4acbd49cf03863c8d129b56f7c9dd1814f7189ca54ec98", 0xe8) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x7fff) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000100)=0x7f, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x7b, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x8201, 0x0, 0xfff9}}}}}}) sendto(r0, &(0x7f0000000180)="b646678868e95222938d30e865dbc3e40308ebd1f32838fc78098c3f6881059d8195d9c3b65bf031bce5e861d618282c51b9cb22fee043d80d6148528873770a97956062723ab86e6bc440694b11ec341b83406a4851f376c924a0d146b138bcccab230d5a4298815af7dcb5e0a49df8f9f1635ef78e8a51cbf4167083cf49a8c226e002619933a7354b8c83c3d071f1aa12ef63b1c8c1fba1b94a9a49d4e7a73297ad8936d8ecdabce876405a035004cf56a0ce32e5027c33516fa86b266e6641b26a27f8fbf5b6b8ace50fccda1c8daa", 0xfffffe9a, 0x404, &(0x7f0000000000)=@in={0x10, 0x2, 0x2, 0x404000}, 0x3) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f0000000400)="d85da6f970f6d7066c624facc619d8620e7b44e003a098bbdb6782067f2b08432734b27b08349cfb939a631a19550ffc30d7be323a969764b6b69dd1a66357e91ae7e7b1f6e16921195968d44b132176b3cb343969d9c892fff243aaeed34e77cc76ba062c112d21cc1398fc8ffa7e7a1e1c55506157346c0d98b29a61e27ef6d294a91bdefc84f71324d45311a86e2cd853d67544657fca1ccd", &(0x7f00000004c0)=0x9a, &(0x7f0000000500)="4cee6c85109e0875c8d066ebb1ddc412a092f289a8da976cdb09d0039de555d2cde7d38e111d38c926ae0227298578f700fdc7e83c506b3dc9b0a9092ababc10684c371ef0efe4ab2cea444ebcc386222890e1acfb4da00048b97652be6bbfc4934fe99c0bb2e805aecd8c3e6f342bacf3550260a164a11b78a6b8a86293bf341dd7687ba0e09fc6d296b087181780a9e595605e18ddb24347cf04dc8f3e33a2a739", 0xa2) sendto(r0, &(0x7f00000002c0)="a02d", 0x2, 0x406, 0x0, 0x0) closefrom(r0) 3.578979048s ago: executing program 4 (id=127): r0 = shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) shmdt(r0) (async) r1 = socket(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) (async) r3 = socket(0x18, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x800, "fe80000400000300"}, 0x1c) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0x5, 0x1f1, 0xfffffffe, 0x2, "ffc184bf08d7d753c6afffff00", 0x44, 0x400000e}) (async) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) syz_open_pts() (async) ioctl$TIOCFLUSH(r5, 0x80047410, &(0x7f0000000780)=0x7) (async) r6 = getpgid(0x0) fcntl$setown(r4, 0x6, r6) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f00000000c0)=0xde) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r7 = socket(0x2, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000), 0x10) sendto$inet(r7, &(0x7f0000000540)='Ezy', 0x4000, 0x403, 0x0, 0x0) (async) r8 = socket(0x2, 0x8002, 0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r9) (async) write(r4, &(0x7f0000000200)="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", 0x253) 3.578014533s ago: executing program 6 (id=128): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0xe010, 0xffffffffffffffff, 0x0) r0 = syz_open_pts() sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) setsid() (async) setsid() r1 = socket(0x18, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x2, "ff2e96ff9d65000000000000ffff0020", 0x4}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x2, "ff2e96ff9d65000000000000ffff0020", 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x800, "e680000401000000fdff00", 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x800, "e680000401000000fdff00", 0x1}, 0x1c) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) (async) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x1) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@random="3bf6a1d269d6", @remote, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x64, 0x65, 0x2000, 0x8, 0xc, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0x5, 0x1, 0x0, [{[@multicast1], 0x81821028}]}]}}}}}}) ioctl$TIOCSCTTY(r0, 0x20007461) fcntl$getown(r0, 0x5) syz_open_pts() 3.577432267s ago: executing program 7 (id=129): r0 = syz_open_pts() socket(0x18, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x50}) sysctl$kern(&(0x7f0000000080)={0x1, 0x4d}, 0x2, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1025, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0xf609, 0x3, 0x7c5db431, 0x1603509, "04f0ee090004030000000005600e00", 0x2, 0x5}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) closefrom(r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) execve(0x0, 0x0, 0x0) 3.257165725s ago: executing program 0 (id=130): socket(0x18, 0x2, 0x0) setrlimit(0x1, &(0x7f0000000180)={0x7, 0x56}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) pipe(0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="eaf5ff0800000000", 0x8) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r1 = syz_open_pts() socket(0x18, 0x4, 0x1) close(r1) r2 = syz_open_pts() r3 = socket(0x18, 0x1, 0x6) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040), 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000200)={0x2264, 0x7, 0x7, 0x14, "18a67f076e15417e077f4d01000400200400", 0x1ff, 0x9}) r4 = socket(0x1, 0x5, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, 0x0, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0x1c, 0x18, 0x0, 0x7, "fe8000040000000000ff00", 0x4}, 0x1c) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000140)=0x20000, 0x4) write(r4, &(0x7f0000000200)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e650876593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2cce0d51b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f62414871", 0xff9f) r6 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r6, 0x40047477, &(0x7f0000000100)) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000040)='tap8yW\x94\x0e\x11D\x81e\xc4\xd2\xd78A[\x80\xf7\x885\xb2=\x1dl\xeeo\xa9R\x8fS\x99\x9bF\xd3\'}\xc8|\xe6\x02\x82\xb2\x1a2H_&c-\x0f\x1dF\xcd\xff\x1e\xe5$[q\xe7)\xa7\xf1\xc0\x7fQ\xa7(\xffu\x00\x00\x00\x00\x00\x00\x04\x00\xad\x1a\x8b\xd5\xceo'], 0x0) socket(0x1, 0x5, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000300)=""/63, 0x3f}, {&(0x7f0000000340)=""/15, 0xf}], 0x2) 3.256036517s ago: executing program 7 (id=131): nanosleep(&(0x7f0000000040)={0x0, 0x164d8c86}, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) readv(0xffffffffffffffff, &(0x7f0000000040), 0x100000fa) r0 = syz_open_pts() r1 = socket$inet(0x2, 0x2, 0x0) getsockopt(r1, 0x0, 0x6, 0x0, 0x0) close(r0) syz_open_pts() read(r0, &(0x7f0000000000)=""/32, 0x20) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000180)=0x1) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f00000000c0)=0xe) r2 = syz_open_pts() fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1000300000080}) flock(r2, 0x1) flock(r2, 0x1) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x300, 0x100000001}) unveil(0x0, &(0x7f0000000100)='w\x00') execve(0x0, 0x0, 0x0) 2.374840572s ago: executing program 0 (id=132): open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000440)={0x80000100, 0xffff63de, 0x2, 0x8, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x6, 0x80000001, 0x80000204}, {0x2, 0xfffffffb, 0xf, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x7, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0x100ffff, 0x80d2}, {0x8000, 0x1, 0x85, 0x1}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffd, 0x206, 0x7fff}, {0x1000, 0xfffffff8, 0x400005, 0x8bfb}, {0x7, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0xe62, 0x9, 0xfffffffc}, {0x200003, 0xee2, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x1}, {0x9be2, 0x6, 0x40002, 0x69}]}) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) (async) poll(&(0x7f0000000000), 0x35, 0x0) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f00000000c0)={0x2f06, 0x81}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) socket(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x4d}, 0x2, &(0x7f0000000080)="71f62b4d", &(0x7f0000000000)=0x4, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x4d}, 0x2, &(0x7f0000000080)="71f62b4d", &(0x7f0000000000)=0x4, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x5, 0x3, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x49, 0x91c, 0xb, 0x180, 0x0, 0xb8, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x3, 0x1001, 0x5, 0x1, 0x1, 0x8, 0x8, 0x1, 0x3], [0x7fffffffffffffff, 0x9, 0x10000, 0x8000000008, 0x10000, 0x9, 0x2], [0x100000000, 0x10801, 0x0, 0x10000000000005, 0x3, 0xa], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x924, 0x3, 0x338}, {0x1000, 0x1, 0x0, 0x5}, {0xf, 0xa3a1, 0x1003, 0x895}, {0x4, 0x6bbc, 0x2, 0x9}, {0xeff8, 0x4, 0x0, 0x7}, {0x5f, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10080, 0x4, 0x5}], {0x52b, 0x4, 0xfffffffc, 0x8}, {0xfffb, 0x3, 0x2, 0xfffffffffffffffe}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x5, 0x3, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x49, 0x91c, 0xb, 0x180, 0x0, 0xb8, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x3, 0x1001, 0x5, 0x1, 0x1, 0x8, 0x8, 0x1, 0x3], [0x7fffffffffffffff, 0x9, 0x10000, 0x8000000008, 0x10000, 0x9, 0x2], [0x100000000, 0x10801, 0x0, 0x10000000000005, 0x3, 0xa], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x924, 0x3, 0x338}, {0x1000, 0x1, 0x0, 0x5}, {0xf, 0xa3a1, 0x1003, 0x895}, {0x4, 0x6bbc, 0x2, 0x9}, {0xeff8, 0x4, 0x0, 0x7}, {0x5f, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10080, 0x4, 0x5}], {0x52b, 0x4, 0xfffffffc, 0x8}, {0xfffb, 0x3, 0x2, 0xfffffffffffffffe}}}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) close(0xffffffffffffffff) syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0x42, 0x8062}) r0 = syz_open_pts() close(r0) syz_open_pts() (async) r1 = syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x2000020e, 0xe, 0xb, 0xfff7ff9f, "08000200006267041c0000110020f59c00", 0x8004, 0x4000083d}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0xffff7ffd, [{0x2, 0x3}, {0x2, 0x100000}, {0x1, 0x6}, {0x1, 0xf}, {0x0, 0x1}, {0x0, 0xfffffffd}, {0x1, 0x20000001}, {0x0, 0xfffbffff}, {0x0, 0xfffffffb}, {0x2, 0x7de}, {0x1, 0x10000002}, {0x0, 0xf7f}, {0x3, 0x3}, {0x3, 0xfffffffd}, {0x1, 0x22}, {0x0, 0x5}, {0x1, 0xffffc671}, {0x1, 0xd}, {0x2, 0x1}, {0x1, 0xfffffffd}, {}, {0x3, 0x3}, {0x3, 0xa77}, {0x0, 0x344}, {0x3, 0x2}, {0x2, 0x800}, {0x3, 0xffffff7f}, {0x1, 0x3}, {0x2, 0xfffffffd}, {0x1, 0x2}, {0x2, 0x8001}, {0x1, 0x200060}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0xfe) getsockopt$sock_int(r2, 0xffff, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x0, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000002}) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x0, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000002}) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 2.345432204s ago: executing program 1 (id=133): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x18, 0x2, 0x0) r6 = socket(0x18, 0x2, 0x0) r7 = dup2(r6, r5) sendmmsg(r7, &(0x7f0000000200)={{&(0x7f0000000080)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x404) ioctl$VMM_IOC_READREGS(r7, 0xc2485607, &(0x7f0000000180)={0xfd5, 0x4, 0x3ff, {[0x7, 0x4, 0xfff, 0x2, 0x4, 0x2, 0x7, 0x4, 0x100, 0xffffffffffffffff, 0x6, 0xb6, 0x40, 0x2e3c000000000000, 0x7, 0x85, 0x5, 0xfffffffffffffffa], [0x7, 0x80, 0x1, 0x0, 0x2, 0x4, 0x0, 0x8, 0x200, 0x80000001], [0x9, 0x4, 0x3, 0x2977dc29, 0xf0, 0xf1a, 0x9], [0xfffffffffffffffc, 0x8, 0x8, 0x2, 0x3, 0x2], [{0xe, 0x80000000, 0x3, 0x200}, {0x3, 0x80000001, 0x401, 0x8000}, {0x72c3, 0x7ff, 0x7bf4e118, 0xfffffffffffffffa}, {0x775d, 0x2, 0x401, 0x5}, {0x1016, 0x932f, 0x89, 0x881}, {0x1ff, 0x1, 0x0, 0x9}, {0x401, 0x3, 0xfffffff7, 0x6}, {0x7, 0x1, 0x4, 0x6}], {0x0, 0x400, 0x7, 0x6}, {0x6, 0x80, 0x80000000, 0x4}}}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/81, 0x51}, 0x1800) listen(r0, 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffc, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0xa, 0x10, [{0x1, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0x3, 0xfff}, {0x1, 0xfff7fffe, 0x6, 0x3}, {0xfffffffe, 0x8000, 0xf, 0x6}, {0x1, 0x7, 0xf11, 0x7}, {0x800, 0xffff, 0x80cf}, {0x0, 0x3, 0xc5, 0x9}, {0x7, 0x1, 0xfffffff8, 0x45d}, {0x8, 0xfff, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x2, 0x8000000, 0x8, 0x7}, {0x40, 0xc7ce, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x3e}, {0x200003, 0x3, 0x2, 0x6f5fc48f}, {0x81, 0xd54a, 0x203, 0x5}, {0xffffffff, 0x8003, 0x6, 0x869}]}) poll(&(0x7f0000000000), 0x35, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) socket(0x2, 0x8002, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket(0x18, 0x2, 0x0) (async) socket(0x18, 0x2, 0x0) (async) dup2(r6, r5) (async) sendmmsg(r7, &(0x7f0000000200)={{&(0x7f0000000080)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x404) (async) ioctl$VMM_IOC_READREGS(r7, 0xc2485607, &(0x7f0000000180)={0xfd5, 0x4, 0x3ff, {[0x7, 0x4, 0xfff, 0x2, 0x4, 0x2, 0x7, 0x4, 0x100, 0xffffffffffffffff, 0x6, 0xb6, 0x40, 0x2e3c000000000000, 0x7, 0x85, 0x5, 0xfffffffffffffffa], [0x7, 0x80, 0x1, 0x0, 0x2, 0x4, 0x0, 0x8, 0x200, 0x80000001], [0x9, 0x4, 0x3, 0x2977dc29, 0xf0, 0xf1a, 0x9], [0xfffffffffffffffc, 0x8, 0x8, 0x2, 0x3, 0x2], [{0xe, 0x80000000, 0x3, 0x200}, {0x3, 0x80000001, 0x401, 0x8000}, {0x72c3, 0x7ff, 0x7bf4e118, 0xfffffffffffffffa}, {0x775d, 0x2, 0x401, 0x5}, {0x1016, 0x932f, 0x89, 0x881}, {0x1ff, 0x1, 0x0, 0x9}, {0x401, 0x3, 0xfffffff7, 0x6}, {0x7, 0x1, 0x4, 0x6}], {0x0, 0x400, 0x7, 0x6}, {0x6, 0x80, 0x80000000, 0x4}}}) (async) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) recvmsg(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/81, 0x51}, 0x1800) (async) listen(r0, 0x1) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffc, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0xa, 0x10, [{0x1, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0x3, 0xfff}, {0x1, 0xfff7fffe, 0x6, 0x3}, {0xfffffffe, 0x8000, 0xf, 0x6}, {0x1, 0x7, 0xf11, 0x7}, {0x800, 0xffff, 0x80cf}, {0x0, 0x3, 0xc5, 0x9}, {0x7, 0x1, 0xfffffff8, 0x45d}, {0x8, 0xfff, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x2, 0x8000000, 0x8, 0x7}, {0x40, 0xc7ce, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x3e}, {0x200003, 0x3, 0x2, 0x6f5fc48f}, {0x81, 0xd54a, 0x203, 0x5}, {0xffffffff, 0x8003, 0x6, 0x869}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) (async) poll(&(0x7f0000000000), 0x35, 0x0) (async) 2.277048662s ago: executing program 3 (id=134): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x9, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0x97, "000004008d5474eff8e5976800000100", 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x9, "00000000000000000000000000000001", 0xc}, 0x1c) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x8) r3 = getuid() setreuid(r3, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x3, 0x1, './file0\x00'}, 0xa) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1) sendmsg$unix(r0, &(0x7f0000001400)={&(0x7f0000001300)=@file={0x92, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa) 2.276235303s ago: executing program 6 (id=135): semget$private(0x0, 0xe, 0x790) socket(0x2, 0x4001, 0x0) (async) r0 = socket(0x2, 0x4001, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x800, 0x0, {[0xfffffbeffffffffb, 0x0, 0xffffffffffffffff, 0x2, 0xfffffffffffffff7, 0x6, 0x6, 0xfffffffffffffffe, 0x9, 0x2, 0x80000000000, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa3, 0x82, 0xce5], [0xfffffffffffffffe, 0x7, 0x20000000009, 0x2, 0x20000000000, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x214e, 0x7ff, 0x40000000, 0x0, 0x9, 0x11003, 0x4], [0x100, 0x20000000004, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x0, 0xfffffffd, 0x7d06}, {0xfffc, 0x26, 0x5, 0x9b7}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x4, 0x4b72, 0x3, 0x7}, {0x0, 0x2, 0xfffffffe, 0x8}, {0x0, 0x2003, 0xb, 0x8}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0xb5}], {0x1fff, 0x7, 0x5}, {0x3, 0x8001, 0xb0, 0x2}}}) setrlimit(0x2, &(0x7f0000000980)={0x60000000, 0x60000000}) syz_open_pts() (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x2000020a, 0xe, 0x6fab, 0xfff7ff9f, "08000200006267041c0000110020f59c00", 0x0, 0x4000083d}) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x2000020a, 0xe, 0x6fab, 0xfff7ff9f, "08000200006267041c0000110020f59c00", 0x0, 0x4000083d}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1) (async) readv(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async) r3 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r3) r4 = socket(0x2b, 0x1000, 0xfd) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000180)={0x1, 0x55}, 0x2, &(0x7f00000001c0)="57a4a105a888ab081e3032", &(0x7f0000000200)=0xb, &(0x7f0000000240)="2e42053c513f795fc7e4", 0xa) connect$unix(r4, &(0x7f0000000380)=@abs={0x83, 0x1, 0x0, 0x0}, 0x8) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) r5 = socket(0x2, 0x8002, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) sysctl$net_inet_etherip(&(0x7f0000000080)={0x4, 0x2, 0x6c, 0x3}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffc52) closefrom(r6) sysctl$vfs_nfs(&(0x7f0000002580)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000080)="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", &(0x7f00000035c0)=0x270, 0x0, 0x0) (async) sysctl$vfs_nfs(&(0x7f0000002580)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000080)="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", &(0x7f00000035c0)=0x270, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x0, 0x20}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000080001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000080001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x0) (async) r7 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x16, &(0x7f0000000040)="fd0cc085", 0x4) sysctl$vm(&(0x7f0000000040)={0x2, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) 2.275915118s ago: executing program 7 (id=136): setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) ioctl$TIOCDRAIN(r1, 0x2000745e) r2 = open(&(0x7f0000000140)='./file1\x00', 0x9cab835cfdc52655, 0xa2) r3 = socket(0x1, 0x4, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1ee) readv(r0, &(0x7f0000002e80)=[{&(0x7f0000000240)=""/193, 0xc1}], 0x1) write(r0, &(0x7f0000000500)="3e537fe16eb677dcf7911da15d37c5f00c995e87c6aae6398f516120a11d74ab7acb977693ac54cde7e2832b1c", 0x2d) 2.273724339s ago: executing program 0 (id=137): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f00000000c0)={0x2f06, 0x81}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) mprotect(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000140)={0x7, 0x6, 0x8, 0xb0b0b0b0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) socket(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0x3, 0x7}, 0x4, 0x0, 0x0, 0xff, 0x1, 0x0, 0x800000800000000, 0x0, 0x5, 0xffffffffe154f620}) shmat(r0, &(0x7f0000001000/0x4000)=nil, 0x5000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7, 0xd}, {0x6, 0x76}, {0x43, 0x4420}, {0x6, 0x7}], 0x4}) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) setsockopt(r1, 0x6, 0x2, &(0x7f0000000040)="01c1f6aa", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x195, 0x7}, 0x85c, 0x4, 0x0, 0x2, 0x8, 0x4000000000007b, r2, 0x8000004, 0x0, 0x4}) 2.27267998s ago: executing program 1 (id=138): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000008226, 0x4ebfac6bbaf79db) bind$inet6(r0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) kevent(r1, &(0x7f0000000340)=[{{r1}, 0xfffffffffffffffd, 0x70, 0x20000002, 0x3f, 0x6}, {{r1}, 0xfffffffffffffffe, 0x8, 0x2, 0x6, 0x9}, {{}, 0xfffffffffffffffc, 0x4, 0x4, 0xffffffffffff46b1, 0x4}], 0x3, &(0x7f00000003c0)=[{{r1}, 0xfffffffffffffff9, 0x195b5bd8c1a5f2e5, 0x40000000, 0x5, 0x6}, {{r1}, 0xfffffffffffffffe, 0x20, 0x40, 0x20006, 0x8}], 0x9, &(0x7f0000000400)={0xd, 0x1f39}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r4 = getgid() setresgid(r4, r4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fchown(r2, r3, r4) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) setsockopt(r0, 0xfc, 0x1ff, &(0x7f0000000500)="b941e821d900713d086d3413ddbbdbf272b75e34901872e9aceb", 0x1a) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x79, 0x401, {[0xfffefbfffffffffb, 0x21, 0x200000007, 0x1, 0x0, 0x10000, 0x8, 0x100, 0x0, 0x1000000000002f01, 0x4, 0x3, 0x8, 0xa8a, 0x8000007, 0xa8, 0x20000000002, 0xce7], [0x1, 0x280000001, 0x58, 0x10000, 0x8, 0x7b97, 0x1fe, 0x2000406, 0xa], [0x41, 0xfffffffffffffffe, 0x400000000, 0x4, 0xffffffffffffffff, 0x40005, 0xfffffffffffffffe], [0x200000000000fd, 0x8, 0x100000401, 0x100000000, 0xffffffffffefffff, 0x5e3f8722], [{0x0, 0x2, 0x101, 0x7d06}, {0xf7fc, 0xfffffffa, 0x5, 0x3}, {0x6, 0xb, 0x5bea, 0x200000000814}, {0x3, 0x9, 0x8, 0x8000080000001}, {0xe, 0xfffffffe, 0x4, 0x32db87de}, {0x4, 0x2003, 0xcc, 0x4}, {0x1, 0xf, 0xb, 0x7}, {0x0, 0x200965, 0x0, 0x1}], {0x2001, 0xd, 0x10002, 0x9}, {0x1, 0x8004009, 0x3, 0x8000000000000000}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) sendto$inet(r5, &(0x7f0000000340)="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", 0x10a, 0x402, 0x0, 0x0) select(0x3, &(0x7f0000000080)={0x5, 0x8000, 0x7ff, 0xa, 0xfffffffffffffff7, 0xda6, 0x6, 0x4}, 0x0, 0x0, &(0x7f0000001600)={0x8080, 0x7}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r1, 0xc, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000440)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x35, 0x67, 0x0, 0x0, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @generic="d0c04eb4551146a7fa4d657d2ae6bc10094a1883651739b942e2dd9a1eba8973fa"}}}}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x190) ioctl$VT_WAITACTIVE(r6, 0x20007606, &(0x7f0000000000)=0x3ff) 2.270661654s ago: executing program 8 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/238, 0xee}, {&(0x7f0000001780)=""/50, 0x32}, {&(0x7f00000017c0)=""/102, 0x66}], 0x7) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) r5 = dup2(r4, r3) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000040)=@file={0xd2, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d7088985dee806d8f3c4041", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x2c, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r5, 0x10004) close(0x3) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000a00)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) getsockname(r8, &(0x7f0000000cc0)=@un=@file={0x0, 0x0, ""/504}, &(0x7f00000004c0)=0x1fa) sendmmsg(r8, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) semget(0x3, 0x2, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYRES64]) bind$unix(r1, &(0x7f0000000480)=@abs={0x40, 0x0, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r10 = fcntl$dupfd(r9, 0x3, 0xffffffffffffffff) ioctl$BIOCSRTIMEOUT(r9, 0x8010426d, &(0x7f0000000200)={0xeed0, 0x8}) sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f00000000c0)="ad5d5e59e175aadfd4935e8bc303106455ad7d03d071455f8742e6a613d07c673c97ca0b1e7d97a4ea86768a410e9c226493", &(0x7f0000000100)=0x32, &(0x7f0000000140)="bac2568b82e72bca69d7acda98be336f4e0e9a491a6fa8dfee6c6890737dd2820be4df7cd33285a040cfa049045f618996262e0e5e0a6625ab50a59b9bfd8544eab9fc52c0feb85469018c8d", 0x4c) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x2000641e) 1.259287909s ago: executing program 5 (id=139): r0 = socket(0x2, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = syz_open_pts() flock(r1, 0x6) (async) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x3, 0xa60ba7ab3565db50, 0x2, 0x32}) (async) sendmmsg(r0, &(0x7f0000000100)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x1, 0xd8, "6aabf90b2645788bfbae90ca05860642", 0x2}, 0x1c, 0x0, 0xfffffffffffffd75, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x20}}, 0x35, 0xe) 1.253614511s ago: executing program 0 (id=140): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x41) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffd52, 0x4) 1.251503824s ago: executing program 1 (id=141): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x800, 0xffff63df, 0x3, 0x2, 0x0, 0x3, 0x41, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0xfffffffe, 0x2, 0x1}, {0x2, 0x80df, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x803, 0x10002, 0x80cf}, {0x80, 0x4, 0x20000000, 0x2}, {0x7, 0x8, 0xfffffff8, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000100, 0x8, 0x6}, {0x14, 0xc7cb, 0x1, 0xa66}, {0x401, 0x10a, 0x6, 0xd}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0xfffffffd, 0x8003, 0xff, 0x69}]}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) read$audio(r0, &(0x7f0000002a80)=""/4096, 0x1000) write(r1, &(0x7f0000004d00)="99bf", 0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_int(0xffffffffffffff9c, 0xffff, 0x4, &(0x7f0000000000)=0xfffffffd, 0x4) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) r2 = socket(0x18, 0x2, 0x0) write(r2, &(0x7f00000002c0)="2f85401f6c5ad582007021f9ff335a31c08e6169f1205f82e3972447cbd42ada194a8856815711287be8e715ccd1532b2421082b03b95f177ca353d5a1034b75c5b7dbf6236c797aff370ce8720f616d69122b9a8a0b77e6786a2bed8775f06a5f65333cf08a5aab7d63595f9bb5a2bdfbf4664de0a8eff53d2011b9283646d3c38a5e04fd42fd331e0349c0e2137496f97581283a010000", 0x98) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xb811, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() ioctl$TIOCMSET(r3, 0x8004746d, 0x0) close(r3) sysctl$hw(0x0, 0x40000000000001e5, &(0x7f0000000340)="68417d17deadd7513877841b5b3ee7ae2712e9df3bbb1a12632c393304", 0x0, 0x0, 0xffffffffffffffaa) sysctl$hw(&(0x7f0000000000)={0x7, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) pread(r3, &(0x7f00000009c0)="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", 0x1000, 0x9) syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sysctl$net_inet_ip(&(0x7f0000000380)={0x4, 0x2, 0x0, 0x9}, 0x4, &(0x7f00000003c0)="9e25e9d49bfee843c0f419c145964928b55a841551b5593d7835f3e4a4e129b8e962ebef488900af978a7ed60bf516d78eafa29685d6d40e17f7f4eaf0c05626790fe61bc3df8384a7b350404053c1d5f7", &(0x7f0000000480)=0x51, &(0x7f00000004c0)="9bf3e93a3690db247b7ea863a2cc043c4680fa998ba4daf549bbfd714826bcb8f37776532b269655a21cf331936a778e0a954fa6b829bd324915d78dccb8d07137782d8eb98f51867edbda52e302", 0xffffffffffffff65) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x6, {[0xbffffbfffffffffb, 0xfffffffffffffffe, 0x2, 0x100200000, 0x100000003, 0x6, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xb72, 0x19b0, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x7, 0xfffffffffffffffa, 0xff, 0xa, 0xfffffffffffffffe, 0x800, 0x9, 0x20000000000, 0x5], [0xffffffff, 0xc, 0x0, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0xb, 0x800001ffff7ffffb, 0x80000001, 0x4000200, 0x4, 0x90000000], [{0x3, 0x400000, 0x0, 0x7d06}, {0x2, 0x4000022, 0x5, 0x20000000000000}, {0x5, 0x0, 0x9, 0x283}, {0x3, 0x80004, 0x5, 0xfffffffffffffff8}, {0xfffe, 0x2, 0xffff, 0xb}, {0x0, 0x9, 0x9, 0xfffffffffffff27d}, {0x5, 0x0, 0xfffffff7, 0x947}, {0x7, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000007, 0x3}, {0xf, 0x263f, 0x6d9, 0x6}}}) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.228036428s ago: executing program 3 (id=142): open$dir(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x4) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x6, 0x80000001, 0x80000201}, {0x2, 0xfffffffb, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x5000002, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0x100ffff, 0x80d2}, {0x2024, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x813, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x40006, 0x69}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96a", 0x2) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="8100", 0x2}], 0x7) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') 1.217181751s ago: executing program 6 (id=143): r0 = kqueue() r1 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x1000) shmdt(r1) (async) kevent(r0, 0x0, 0x1, &(0x7f00000004c0)=[{{r0}, 0xffffffffffffffff, 0x8, 0x7, 0x101, 0x9}], 0x5, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0xffffffffffffff72, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0xfffffffffffffffc, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x2, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x6}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x800006d5, 0x6}}}) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) 1.216090361s ago: executing program 7 (id=144): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r3, 0x2000747b) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) select(0x40, &(0x7f0000000940)={0x9, 0xffffffeffffffff7, 0x8b, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, &(0x7f00000009c0)={0xff, 0x0, 0x7, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x9, 0x3, 0x8}, 0x0) r6 = semget$private(0x0, 0xe, 0x790) semctl$SETALL(r6, 0x0, 0x9, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r7 = syz_open_pts() close(r7) r8 = syz_open_pts() ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000000140)={0x2000020e, 0xe, 0x6fab, 0xfff7ff9f, "08000200006267041c0000110020f59c00", 0x4, 0x4000083d}) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000040)=0x142) r9 = socket(0x18, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0xfffffffe, "00000000000000ffd8c18baa8d510910", 0x4}, 0x1c) connect$unix(r9, &(0x7f0000000b00)=@abs={0x4e, 0xe7acb8a8e3d7a412, 0x0, 0x2}, 0x8) readv(r8, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) unveil(0x0, &(0x7f0000000100)='c\x00') semop(r6, &(0x7f0000000000)=[{0x0, 0x2610, 0x1000}, {0x1, 0x6}, {0x1, 0xfffe, 0x1000}], 0x3) closefrom(r1) 977.539381ms ago: executing program 5 (id=145): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x4) r0 = syz_open_pts() fcntl$getflags(r0, 0x1) chflags(&(0x7f0000001540)='./file0\x00', 0x10000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x10, r1, 0x0) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x8) 974.396835ms ago: executing program 8 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/238, 0xee}, {&(0x7f0000001780)=""/50, 0x32}, {&(0x7f00000017c0)=""/102, 0x66}], 0x7) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) r5 = dup2(r4, r3) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000040)=@file={0xd2, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d7088985dee806d8f3c4041", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x2c, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r5, 0x10004) close(0x3) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000a00)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) getsockname(r8, &(0x7f0000000cc0)=@un=@file={0x0, 0x0, ""/504}, &(0x7f00000004c0)=0x1fa) sendmmsg(r8, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) semget(0x3, 0x2, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYRES64]) bind$unix(r1, &(0x7f0000000480)=@abs={0x40, 0x0, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r10 = fcntl$dupfd(r9, 0x3, 0xffffffffffffffff) ioctl$BIOCSRTIMEOUT(r9, 0x8010426d, &(0x7f0000000200)={0xeed0, 0x8}) sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f00000000c0)="ad5d5e59e175aadfd4935e8bc303106455ad7d03d071455f8742e6a613d07c673c97ca0b1e7d97a4ea86768a410e9c226493", &(0x7f0000000100)=0x32, &(0x7f0000000140)="bac2568b82e72bca69d7acda98be336f4e0e9a491a6fa8dfee6c6890737dd2820be4df7cd33285a040cfa049045f618996262e0e5e0a6625ab50a59b9bfd8544eab9fc52c0feb85469018c8d", 0x4c) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x2000641e) 40.53846ms ago: executing program 3 (id=146): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x20) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3}, {0x0, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$DIOCRGETADDRS(0xffffffffffffff9c, 0xc4504446, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x60, 0x7}, &(0x7f0000000100)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x9d, 0x18, 0x8, 0x6, 0x5d, 0x6}, {@empty, '\x00', './file0\x00', 0xf, 0x4, 0x0, 0x5, 0x17, 0x2, 0xa}, {@broadcast, '\x00', './file0\x00', 0x6, 0x401, 0x0, 0x1, 0xc, 0x1, 0x8}, {@empty, '\x00', './file0\x00', 0x9, 0x7fff, 0x2, 0x0, 0x8, 0x78}, {@multicast2, '\x00', './file1\x00', 0xa28, 0x382, 0x2, 0x2, 0x80, 0xac, 0x40}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x2, 0x1ea, 0x1a, 0x3c, 0x5, 0x3, 0x5}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x3, 0x8, 0x2, 0xc, 0x0, 0x7, 0x3}, {@rand_addr=0x33, '\x00', './file0\x00', 0x2, 0x28, 0x1a, 0x1, 0xa, 0x8, 0x8}, {@loopback, '\x00', './file0\x00', 0x3, 0x3, 0x0, 0x6, 0x3, 0xf8, 0x7}], 0x8b4, 0x9, 0x10001, 0x10001, 0x6, 0x0, 0x8, 0x9}) fstatat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000800), 0x4) ppoll(0x0, 0x0, 0xffffffffffffffff, 0x0) linkat(r0, &(0x7f0000000780)='./file0\x00', r0, &(0x7f00000007c0)='./file1\x00', 0x4) 40.098201ms ago: executing program 0 (id=147): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af0500000021", 0x62, 0x41f, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) kill(0xffffffffffffffff, 0x1e) r1 = socket(0x20, 0x5, 0x7) (async) r2 = openat$dri(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f0000000100)={0x0, 0x1, r1, 0x0, 0x9800000000000000}) 36.898184ms ago: executing program 1 (id=148): r0 = socket(0x2, 0x4001, 0x0) close(0x3) r1 = socket$inet(0x2, 0x2, 0x0) closefrom(r1) shutdown(r0, 0x2) syz_emit_ethernet(0x3e, &(0x7f00000020c0)={@broadcast, @remote, [], {@ipv6={0x86dd, {0xe, 0x6, "ca075f", 0x8, 0x3b, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x1}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x2, 0x8}}}}}}}) 36.27843ms ago: executing program 5 (id=149): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000040)=0x7, 0x4) sendto(r0, &(0x7f00000007c0)="c1", 0x1, 0x400, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000540)='Ezy', 0xff98, 0x403, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x2, 0x1, 0x9) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x3}, 0x10) sysctl$hw(&(0x7f0000000040)={0x6, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf02, 0x186) 10.962371ms ago: executing program 6 (id=150): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) write(0xffffffffffffffff, &(0x7f0000000080)="ed", 0x1) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_pts() ioctl$FIONREAD(r0, 0x80047476, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x12, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0xa, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xffff7115, 0x80000001}, {0xfffffffb, 0xfffffffe, 0x40006, 0x2000fff}, {0x1, 0x4bad, 0x3, 0x9}, {0x4, 0xe2, 0xd, 0x100}, {0x0, 0x7, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0xff, 0xb16c, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x5, 0x5, 0xb, 0x2}, {0x5, 0x0, 0x8, 0x6}, {0x1000fffe, 0xfffffffd, 0x800001, 0x1}, {0x401, 0x4, 0xa, 0x3ff}, {0x3, 0x6, 0x2, 0x1}, {0x3, 0xfffffffd, 0x3, 0x9}, {0x20009be2, 0x1, 0x1000002, 0x8e}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x0, 0x1}, {0x1, 0x0, 0x0, 0x2}]}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x0, 0x1, 0xdff5ff7e, 0x1603528, "04e4577e011b0900000000000000000000010400", 0x200101, 0xfff}) writev(r1, &(0x7f00000019c0)=[{&(0x7f00000009c0)="2c3b8db14456b8bc8ebc18df0d0ab20d5585ca20ce522435317da4a59c6ff1630ccaa9b3f54ef76a9de967a7aa6ec008d32a70897c72cd791fa29254f6ec54140803921b157baf4adf978d6aaa3a7f757343f1db0e74f26e8cf0133297e67004133fdd96e710ae73eaeb151fef334d4f05473c23226ff5606c318a2307dfb15196136d728eaefc4da93f03998f692c301279044280608ef12ab8e2725d427da68c05511813c86dbd0502cacc043b39230b1d205fe2fe3332985f937e218ebf9b385f8b067f06b7ca40523d6c35cc668e13c127f0c87aaf1683590fdcd188a498dee26debb536871026ea92777f9cdf29db8448c46690391d4d2dd1d38cb0ab305f7cb4645cf83a35f415a533f489d7f4c0cd42160738202d7f07fbd7e4620ab1b35338e77c24bf442a0a510db5f0c5e4ee3f7dca1b21d0b4fe3bebd1b3ff95a0cdea3d1e15d6ebf1ab1d5f199c1820290966dbe5e6c501bbb12817726da46057d38a2824567eeba2dd2cbc5818e03b6ff9f750c663e2b7d66e71c8c04a00fbbb3223cff445376de212830e2bc9dbcb744f5105d3803967c5db6f2c920b156a2c01cdd784cc5bb45ca01f9b1ba7a0aeab54c276a0a3fed62e45da97e1280b0bb5410bfec5a384a488c19dd753d27806aa9b7c86b77a2086be7590e25f7b88580bb7ca25351857d3eec6e596c5b17f955bda13e7c2f31fab68df36392a6d57032933e57e402d516da1c82c7215d681953464fce716f518298e97b28c3e872ac99931bc727005668643e90a9b15f744a2a5506f79cc584eaa3d8e02470356c8175385cf944716cc0aae131789402adcd6ee7a46ea0a945891f03470d32030370f4c659618203c9e819078c907257d20b2b6dc9eabf6767bb31d2082d258c70943473aa3aa45145b4d54bfd519722f0a09cfe5a2ad4c6713b18d85a4d805171defd378e16d1b4e3084475c69d9d6cc8b8ade70f3a9e6f8bfc9404cb451330118a5c1ea32585db05272c11a5af98715755b10fd7e2e203599e411ba4cc1de3284c99dbe08ee1466776d2ffd792a71c9a7b96a85bb0ca595a648fea7a857f3082f2622612b2cfb8b61ddb06aa9033d66a67a0e475345613e618305015caa94a3951dcd93ef02661dade26ae1d41ec20bedb9dc5a59ac3beab47c0a9df8e76d9d9cdc8088bd5b2f03e05ed1272179c6a035f2f2d7ce93fad750e957dce4eb16f1d60c366b2faa4603cf8e8606daa3c7aa072bcf1aa7ad1f595dcc019873a1ec8788d166091585271a36bfdd27719087488dee3287b86ec666e5104b8faaa7cc72c4aad7b923c1c22253045caae5be741d3747f83a54c753e050ec356f74db467b2ce35e689817ff64e461a76d080d69133d889fb93af8bc406728e032e21b438811318d34cc737457a37cf794c9778abafdf818eec3db6f4dcd3c499e290b368733d4bb385d40d9004a03e91d43c3ff94b6da7ae4d7ccd0fa618f228b028b2b49715cbc194518e8e5e3ea45a3d8af7d0caa40b84a19a77d87a36b58fac333994b63f970a6808ec592bea342ef33be99ed32f7b6946f804f4eaf483e07614ce71ea35f25d7560ec14c44f1b2834ff9c197860a70325246a05e2d5d253893192af273a05d8b8c17b285dfa0b60c33889830292d21d583e2de76c5734ee06f74e6505fe073011bff85927093236219ebd1a848b2251da42d551bb44339cc7d06efac2c84ac8f527404f262e164ff769959662de3c0fc138f8e7a170182293f61d5735785c24363800c188ebce7b64c554a4e92e01730e119da870930019c6dce8fa8a9d171fa5cde2a9fd11499b27700d8c2111144aee1433998c98b4f9e6e76c5173978c5ac3d357d226c23aa7d848aa0a1a482593a47654e81c9f4a59164b7e201d647fec0382d0df4f5d269d22435fc4004cd7e2bb325246bdbbc4aeb4626c6c8135458e2c06b0bb02b5fb2e80b9fb28d98b1a6781db74d23d04af30f2ee39d57b4539e6034b9634d41973ffa57552417ab50fbb738c8026602ea3eaef3a125340caab5df30b2e5bed5979b705935141c4251b7429516d7d57cc770074e2fdca7b57f1e55c8ea3024aa3b49136f45b0f6d7fc9e533c72cd61be6379d7a16221e13893ecd5813baac43af529f3b9c7aa6261890c7ab12ae7f128d94c925d18c70ef9699a3af1a43c2e8b65dbe65be1ecc7efa20bc5c2b0bf7b8c07840e8ebe7c05a5707addc6e0a71efa71f858abd88a02a0d83100a5f976e54b4d558d98c812b1d231b626adbcbdf1fdc1896e09ee71e0faef36c29ca87bdb303e7092de5bbc3015bf06dc6c8d256e6fc5da8eae46ba7ca28e3930af90656d404eeab57336e924ea54cbeb91059c300d15edcbbfacef47976d9eb807b24007b99a92022ef1a188101bf67b45fd5bc10944d9716d8c8e582cc33e255f7f009407139ffcbc4154b87c68290d5057621cc72e4bbf0110c763b226b1719b68495d81d074dc2c9937249735872b6beef7ad02746fad603a934a0e59696fb760b1703888d59868a0170942d58b277a36bc57854b3c657d2ec110c11e873e6746c0f171c53258ec4a8e184b9b315e3ac6a2215cf007fba7e725a9e8656c8e6c545bbe207c9a38ba804ce187621b", 0x740}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) preadv(0xffffffffffffffff, &(0x7f0000001700), 0x0, 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x1f4) readlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r4 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="e3587b6b1bd441d57f3f1515a0da077c0593101ce2dc14b68400f101f27ea21b7cd09e9d086d969b584ae4874297aa52f1c2e04dd9dd4f5f633a268f8dd72a2f", 0x40}], 0x1) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x38, 0x8) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 10.460408ms ago: executing program 7 (id=151): r0 = socket(0x18, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) fcntl$setstatus(r0, 0x4, 0x40) (async) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x800, "fe80000400000000fdff00"}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) r1 = kqueue() kevent(r1, &(0x7f0000000440)=[{{r1}, 0xfffffffffffffffa, 0x9, 0x1, 0x80, 0x9}, {{r1}, 0xfffffffffffffffa, 0x4c, 0xf0000000, 0x7, 0xb}], 0xe48, 0x0, 0xa9fa, 0x0) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x1, 0x2d20, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa60e7c79282f69994d404c49a36abe15a63062d35c0357b3c0265633fe8e6924869b8f1bc577f3be1168a8ce4c67d770501726f2b9e2200ebd30447e89d731fdb751ce45fd3a7cbd597ad7b1b56ea1621881f3faf2a5c17d37eba02a277a143362070268b4faba51274ccd254c2fd60c92cebb2cfb1", @ANYRES32], 0x10, 0x7}, 0x0) 0s ago: executing program 5 (id=152): r0 = msgget$private(0x0, 0x220) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getresgid(0x0, 0x0, &(0x7f0000000240)=0x0) getresgid(0x0, 0x0, &(0x7f0000000340)=0x0) setregid(r2, r3) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() fcntl$setown(r4, 0x6, r5) r6 = setsid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xc6, 0xd, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x5, 0x3ff, 0xd3, r5, r6, 0x4, 0x0, 0x1000, 0x0, 0x3}) msgsnd(r0, &(0x7f0000000f40)=ANY=[@ANYRES32=r0], 0xe1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. panic: amap_pp_adjref: negative reference count Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *227789 17221 0 0x2 0 0K sshd-session db_enter() at db_enter+0x25 panic(ffffffff8351e671) at panic+0x1e5 amap_pp_adjref(fffff9806da352b0,0,2,1) at amap_pp_adjref+0x74c amap_adjref_anons(fffff9806da352b0,0,2,1,0) at amap_adjref_anons+0x22d uvm_mapent_clone(fffff9806ce9a030,fef1650f000,2000,0,3,7,1320eb1aff81da6d,fffff98075994578,ffff8000333aa018,fffff9806ce9a030) at uvm_mapent_clone+0x17e uvm_mapent_forkcopy(1,fffff9806ce9a030,fffff9806ce9a7d0,fffff98075994578,ffff8000333aa018) at uvm_mapent_forkcopy+0x6f uvmspace_fork(ffff80003b3d2b70) at uvmspace_fork+0x299 process_new(ffff800045ff3ca0,ffff80003b3d2b70,1) at process_new+0x583 fork1(ffff800045feba10,1,ffffffff810342d0,0,ffff8000333aa1f0,0) at fork1+0x3f6 syscall(ffff8000333aa2a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f084a5f4ea0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: amap_pp_adjref: negative reference count ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8351e671) at panic+0x1e5 amap_pp_adjref(fffff9806da352b0,0,2,1) at amap_pp_adjref+0x74c amap_adjref_anons(fffff9806da352b0,0,2,1,0) at amap_adjref_anons+0x22d uvm_mapent_clone(fffff9806ce9a030,fef1650f000,2000,0,3,7,1320eb1aff81da6d,fffff98075994578,ffff8000333aa018,fffff9806ce9a030) at uvm_mapent_clone+0x17e uvm_mapent_forkcopy(1,fffff9806ce9a030,fffff9806ce9a7d0,fffff98075994578,ffff8000333aa018) at uvm_mapent_forkcopy+0x6f uvmspace_fork(ffff80003b3d2b70) at uvmspace_fork+0x299 process_new(ffff800045ff3ca0,ffff80003b3d2b70,1) at process_new+0x583 fork1(ffff800045feba10,1,ffffffff810342d0,0,ffff8000333aa1f0,0) at fork1+0x3f6 syscall(ffff8000333aa2a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f084a5f4ea0, count: -11 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff8000333a9ce0 rbx 0xffffffff83996e07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff800045feba10 rax 0xffffffff83995ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xa0c5dd768f447637 r11 0x1496ae5e5b1e3a71 r12 0xffffffff83996c08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff8234efc5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000333a9cd0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (sshd-session) tid=227789 pid=17221 tcnt=1 stat=onproc flags process=2 proc=0 runpri=59, usrpri=86, slppri=24, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045fea2b8,0xffff800045feaa90 process=0xffff80003b3d2b70 user=0xffff8000333a5000, vmspace=0xfffff9806ce9a7d0 estcpu=36, cpticks=16636, pctcpu=20.55, user=1, sys=16611, intr=23 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 75322 157468 21458 32767 2 0x10 0 syz-executor 75322 321471 21458 32767 3 0x10 0x4000080 fsleep syz-executor *17221 227789 23909 0 7 0x2 0 sshd-session 76499 51534 97241 32767 2 0x10 0 syz-executor 9887 352650 14058 32767 2 0x10 0 syz-executor 24244 494989 78041 32767 2 0x10 0 syz-executor 63574 381515 64918 0 2 0x2 0 syz-executor 23386 408144 352 32767 2 0x10 0 syz-executor 6368 348793 74176 32767 2 0x10 0xc80 syz-executor 21458 491587 65882 32767 2 0x10 0xc80 syz-executor 78041 200664 94361 32767 2 0x10 0xc80 syz-executor 55823 177258 21424 32767 3 0x10 0x80 wait syz-executor 97241 30687 21469 32767 2 0x10 0xc80 syz-executor 14058 281040 49317 32767 2 0x10 0xc80 syz-executor 352 126810 64918 0 3 0x2 0x80 wait syz-executor 74176 100353 64918 0 3 0x2 0x80 wait syz-executor 65882 125521 64918 0 3 0x2 0x80 wait syz-executor 21424 120614 64918 0 3 0x2 0x80 wait syz-executor 94361 249049 64918 0 3 0x2 0x80 wait syz-executor 21469 54862 64918 0 3 0x2 0x80 wait syz-executor 49317 135235 64918 0 3 0x2 0x80 wait syz-executor 64918 427499 40023 0 2 0x2 0xc80 syz-executor 40023 441764 99220 0 3 0x100002 0x88 sigsusp ksh 99220 425850 54408 0 3 0x10 0x88 kqread sshd-session 54408 380340 23909 0 3 0x12 0x80 kqread sshd-session 63014 523562 1 0 3 0x100003 0x80 ttyin getty 23909 267014 1 0 3 0 0x88 kqread sshd 53647 210507 76598 73 2 0x1100010 0xc80 syslogd 76598 245453 1 0 3 0x100002 0x80 sbwait syslogd 32826 210580 1 0 3 0x100000 0x80 kqread resolvd 2616 260304 39181 77 3 0x100012 0x80 kqread dhcpleased 17064 291418 39181 77 3 0x100012 0x80 kqread dhcpleased 39181 40610 1 0 3 0 0x80 kqread dhcpleased 91183 412497 0 0 3 0x14000 0x200 bored smr 72143 4986 0 0 2 0x14000 0x200 zerothread 44494 426457 0 0 3 0x14000 0x200 aiodoned aiodoned 48631 299165 0 0 2 0x14000 0xe00 update 18508 75697 0 0 3 0x14000 0x200 cleaner cleaner 408 259697 0 0 3 0x14000 0x200 reaper reaper 91353 356908 0 0 3 0x14000 0x200 pgdaemon pagedaemon 21441 502375 0 0 3 0x14000 0x200 bored viomb 70604 214866 0 0 3 0x14000 0x40000200 acpi0 acpi0 70255 410351 0 0 3 0x14000 0x40000200 idle1 79404 343493 0 0 3 0x14000 0x200 bored softnet1 60755 102530 0 0 2 0x14000 0x200 softnet0 22889 109023 0 0 2 0x14000 0x200 systqmp 49698 504691 0 0 3 0x14000 0x200 bored systq 51206 279912 0 0 2 0x14000 0x200 softclockmp 32409 364451 0 0 2 0x14000 0x40000200 softclock 28613 324706 0 0 3 0x14000 0x40000200 idle0 1 403438 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 17221 (sshd-session) thread 0xffff800045feba10 (227789) exclusive rwlock amaplk r = 0 (0xfffff9806b496950) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 amap_ref+0x3c #3 uvm_mapent_clone+0x17e #4 uvm_mapent_forkcopy+0x6f #5 uvmspace_fork+0x299 #6 process_new+0x583 #7 fork1+0x3f6 #8 syscall+0xb17 #9 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xfffff9806ce9a130) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x12b #4 process_new+0x583 #5 fork1+0x3f6 #6 syscall+0xb17 #7 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xfffff9806ce9a8d0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x44 #4 process_new+0x583 #5 fork1+0x3f6 #6 syscall+0xb17 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b3e680) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 Process 23386 (syz-executor) thread 0xffff800045fead18 (408144) exclusive rrwlock inode r = 0 (0xfffff9806e2c08e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff9806d92b308) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11054 12017K 12034K 166960K 12148 0 pcb 17 12K 12K 166960K 17 0 rtable 219 6K 7K 166960K 424 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 70 0 iov 0 0K 12K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1288 81K 81K 166960K 1527 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 12 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 22 81K 125K 166960K 335 0 sigio 0 0K 0K 166960K 66 0 proc 58 99K 131K 166960K 526 0 subproc 64 4K 4K 166960K 172 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 30 0 in_multi 88 5K 6K 166960K 104 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 15 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 393 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 213 159K 186K 166960K 4607 0 UVM aobj 5 2K 2K 166960K 6 0 pinsyscall 47 94K 111K 166960K 1455 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 16 0 NDP 10 0K 2K 166960K 27 0 temp 35 9118K 9134K 166960K 4245 0 kqueue 13 20K 24K 166960K 63 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 46 0 43 1 0 1 1 0 8 0 rtentry 176 115 0 14 6 0 6 6 0 8 0 unpcb 144 159 0 140 1 0 1 1 0 8 0 syncache 336 10 0 10 1 0 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 56 0 48 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 251 0 240 4 0 4 4 0 8 2 nd6 152 28 0 5 2 0 2 2 0 8 1 kcovpl 48 19 0 12 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 509 0 72 31 0 31 31 0 8 2 art_table 40 510 0 72 6 0 6 6 0 8 0 art_node 32 115 0 23 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 4 1 0 1 1 0 8 0 semapl 72 10 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1851 0 374 93 0 93 93 0 8 0 ffsino 296 1851 0 374 114 0 114 114 0 8 0 nchpl 144 2267 0 565 64 0 64 64 0 8 0 vnodes 216 2032 0 0 113 0 113 113 0 8 0 namei 1024 7268 0 7267 2 1 1 2 0 8 0 percpumem 16 51 0 1 1 0 1 1 0 8 0 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scxspl 216 7783 0 7783 4 3 1 3 1 8 1 plimitpl 152 98 0 74 2 0 2 2 0 8 1 sigapl 424 611 0 558 7 0 7 7 0 8 0 knotepl 120 327 0 0 10 0 10 10 0 8 0 kqueuepl 224 67 0 58 1 0 1 1 0 8 0 pipepl 344 171 0 143 3 0 3 3 0 8 0 fdescpl 528 595 0 559 4 0 4 4 0 8 0 filepl 160 2842 0 2636 13 0 13 13 0 8 4 lockfpl 104 86 0 84 1 0 1 1 0 8 0 lockfspl 48 21 0 19 1 0 1 1 0 8 0 sessionpl 144 47 0 31 1 0 1 1 0 8 0 pgrppl 48 68 0 44 1 0 1 1 0 8 0 ucredpl 104 584 0 566 1 0 1 1 0 8 0 zombiepl 144 560 0 558 1 0 1 1 0 8 0 processpl 1232 611 0 558 5 0 5 5 0 8 0 procpl 664 859 0 805 6 0 6 6 0 8 1 sockpl 752 459 0 426 7 0 7 7 0 8 3 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mextrefs 64 19 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 1220 0 0 77 0 77 77 0 8 0 bufpl 272 2785 0 102 179 0 179 179 0 8 0 anonpl 32 7385 0 0 60 0 60 60 0 247 0 amapchunkpl 152 14926 0 14498 38 0 38 38 0 158 15 amappl16 200 2284 0 2267 16 5 11 14 0 8 8 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 401 0 400 1 0 1 1 0 8 0 amappl13 176 137 0 124 1 0 1 1 0 8 0 amappl12 168 831 0 799 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 59 0 49 1 0 1 1 0 8 0 amappl9 144 291 0 291 1 1 0 1 0 8 0 amappl8 136 94 0 93 1 0 1 1 0 8 0 amappl7 128 149 0 136 1 0 1 1 0 8 0 amappl6 120 151 0 149 1 0 1 1 0 8 0 amappl5 112 108 0 99 1 0 1 1 0 8 0 amappl4 104 290 0 275 1 0 1 1 0 8 0 amappl3 96 2228 0 2150 4 1 3 3 0 8 0 amappl2 88 771 0 690 3 1 2 3 0 8 0 amappl1 80 12960 0 12321 16 0 16 16 0 8 1 amappl 88 3842 0 3697 5 0 5 5 0 92 0 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 595 0 559 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 595 0 559 1 0 1 1 0 8 0 vmmpekpl 168 7596 0 7554 3 0 3 3 0 8 0 vmmpepl 168 50424 0 48336 104 1 103 104 0 357 10 vmsppl 488 594 0 558 7 1 6 6 0 8 0 rwobjpl 80 18339 0 17340 25 0 25 25 0 8 2 pdppl 4096 1197 0 1116 113 32 81 97 0 8 0 pvpl 32 15852 0 0 128 0 128 128 0 265 0 pmappl 256 594 0 558 4 1 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 529 0 36 15 0 15 15 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8351e671) at panic+0x1e5 amap_pp_adjref(fffff9806da352b0,0,2,1) at amap_pp_adjref+0x74c amap_adjref_anons(fffff9806da352b0,0,2,1,0) at amap_adjref_anons+0x22d uvm_mapent_clone(fffff9806ce9a030,fef1650f000,2000,0,3,7,1320eb1aff81da6d,fffff98075994578,ffff8000333aa018,fffff9806ce9a030) at uvm_mapent_clone+0x17e uvm_mapent_forkcopy(1,fffff9806ce9a030,fffff9806ce9a7d0,fffff98075994578,ffff8000333aa018) at uvm_mapent_forkcopy+0x6f uvmspace_fork(ffff80003b3d2b70) at uvmspace_fork+0x299 process_new(ffff800045ff3ca0,ffff80003b3d2b70,1) at process_new+0x583 fork1(ffff800045feba10,1,ffffffff810342d0,0,ffff8000333aa1f0,0) at fork1+0x3f6 syscall(ffff8000333aa2a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f084a5f4ea0, count: -11 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x38 __mp_lock(ffffffff83b3de80) at __mp_lock+0x1a3 exit1(ffff800045feaa80,0,0,1) at exit1+0x720 sys_exit(ffff800045feaa80,ffff80003339eee0,ffff80003339ee30) at sys_exit+0x1a syscall(ffff80003339eee0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fb9cf4c3fd0, count: 6 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x38 __mp_lock(ffffffff83b3de80) at __mp_lock+0x1a3 exit1(ffff800045feaa80,0,0,1) at exit1+0x720 sys_exit(ffff800045feaa80,ffff80003339eee0,ffff80003339ee30) at sys_exit+0x1a syscall(ffff80003339eee0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fb9cf4c3fd0, count: -9