last executing test programs:

7.287028666s ago: executing program 3 (id=36):
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1)
truncate(&(0x7f0000000000)='./file0\x00', 0x30000)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0)

7.190428878s ago: executing program 3 (id=37):
r0 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r0, 0x20007461)
readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/4, 0x4}], 0x1)
ioctl$TIOCSTAT(r0, 0x20007465)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0xc}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendto(r1, 0x0, 0x0, 0x400, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000004000000000000741600", 0xffffffc0}, 0x1c)
r2 = socket(0x18, 0x2, 0x0)
close(r2)
socket(0x18, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setsockopt(r2, 0x1000000029, 0x37, &(0x7f0000000180)="03000000", 0x4)
connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x800, "fe80000400000000fdff00"}, 0x1c)
syz_open_pts() (async)
setsid() (async)
ioctl$TIOCSCTTY(r0, 0x20007461) (async)
readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/4, 0x4}], 0x1) (async)
ioctl$TIOCSTAT(r0, 0x20007465) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0xc}, 0x1c) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x18, 0x2, 0x0) (async)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
sendto(r1, 0x0, 0x0, 0x400, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000004000000000000741600", 0xffffffc0}, 0x1c) (async)
socket(0x18, 0x2, 0x0) (async)
close(r2) (async)
socket(0x18, 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
setsockopt(r2, 0x1000000029, 0x37, &(0x7f0000000180)="03000000", 0x4) (async)
connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x800, "fe80000400000000fdff00"}, 0x1c) (async)

2.893352626s ago: executing program 5 (id=96):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x5, 0x80001000, 0xfffffffe, 0xffffff81, "35a7fc000000f100004000000000000021000500", 0x4000041, 0x5})
ioctl$TIOCSTAT(r0, 0x20007465)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x2c757368, 0x4007ff, 0xd, 0x3cd1, "0e6400b76d7639c50400957000c6000200", 0x3f64, 0x80001000})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000900)="ced5f854abb9dca93f69212f58e3aa772f4b48eb921543ceab64bdeed6c729abc60f6a26c5478dc7e93181e22d19b24c948599d14034ce1f43a9849f09f1c29a9027879e0ebb93d1a62f79f9251a84c004f21dbc39e29da10fe4ac4f25ba0ea2c4e6e0358c78e69ea48682a765836061efbe8c388416453effda099d6e10f9d58be68e3eaf4054921e52363a817757ed5eb7f5e1d928860bac0d821f", 0x9c}], 0x1)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0x11, 0x4, 0x7, 0x9}, {{r0}, 0xfffffffffffffff9, 0x8, 0x1, 0xc, 0x5}, {{r3}, 0xfffffffffffffff8, 0x44, 0x4, 0x6, 0x7f}], 0x1ff, 0x0, 0x0, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0)

2.726053675s ago: executing program 5 (id=141):
setsid()
openat$tty(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, 0x0, 0x5, 0x0)
kill(0x0, 0x13)
r1 = syz_open_pts()
ioctl$TIOCSCTTY(r1, 0x20007461)
r2 = fcntl$getown(r1, 0x5)
ktrace(0x0, 0x5, 0x1800, r2)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='\x00'], &(0x7f0000000100)=[&(0x7f00000000c0)='*^e-$\x00'])

2.278225072s ago: executing program 5 (id=143):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x1d5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000)
syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"])

2.27099011s ago: executing program 4 (id=144):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x1, 0x6, 0x80000001, 0x21d}, {0x4, 0xfffffffb, 0x6, 0xfff}, {0x9, 0xfffffffe, 0x2006, 0x1}, {0x4000002, 0x7, 0x8000f}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x10, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x6, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x20000401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]})
r0 = syz_open_pts()
syz_open_pts()
poll(&(0x7f0000000000), 0x35, 0x0)
syz_open_pts()
ioctl$TIOCSBRK(r0, 0x2000747b)
ioctl$TIOCSCTTY(r0, 0x20007461)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
pipe(&(0x7f0000000100))
unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='x\x00')
unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f0000000200)='c\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20)
unveil(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='w\x00')
unveil(&(0x7f00000011c0)='./file0/file1\x00', &(0x7f0000001200)='c\x00')

2.231884777s ago: executing program 7 (id=149):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x3, 0x8, 0xc65, 0x40, 0x10, [{0x40, 0x3, 0x10775, 0x3}, {0x8, 0x8, 0x9, 0xffc}, {0x7, 0xfdfffffe, 0xb, 0x1}, {0x5, 0xfffffffe, 0x3}, {0x1, 0x7, 0xf13, 0xb}, {0x1, 0xffffffff, 0x7, 0x1}, {0x3, 0x801, 0x2, 0x5}, {0x4, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfe}, {0x2, 0x8000000, 0x0, 0x2}, {0x4, 0xc7ce, 0x800000, 0x9}, {0xd6, 0x106, 0x92fb, 0x3e}, {0x200003, 0x80000000, 0x0, 0x6f5fc48b}, {0x19, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x7fff}]})
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f00000002c0)="03000000", 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x1, 0xc, 0x3})
sendmmsg(r0, &(0x7f0000000200)={{&(0x7f00000001c0)=@in6={0x1c, 0x18, 0x3, 0x5, "ff010000002100008000", 0x36d}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8)
poll(&(0x7f0000000000), 0x35, 0x0)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x44}, 0x4, &(0x7f0000000100)="71f91e3401000000000000001d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x3, 0x8, 0xc65, 0x40, 0x10, [{0x40, 0x3, 0x10775, 0x3}, {0x8, 0x8, 0x9, 0xffc}, {0x7, 0xfdfffffe, 0xb, 0x1}, {0x5, 0xfffffffe, 0x3}, {0x1, 0x7, 0xf13, 0xb}, {0x1, 0xffffffff, 0x7, 0x1}, {0x3, 0x801, 0x2, 0x5}, {0x4, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfe}, {0x2, 0x8000000, 0x0, 0x2}, {0x4, 0xc7ce, 0x800000, 0x9}, {0xd6, 0x106, 0x92fb, 0x3e}, {0x200003, 0x80000000, 0x0, 0x6f5fc48b}, {0x19, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x7fff}]}) (async)
socket(0x18, 0x2, 0x0) (async)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f00000002c0)="03000000", 0x4) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x1, 0xc, 0x3}) (async)
sendmmsg(r0, &(0x7f0000000200)={{&(0x7f00000001c0)=@in6={0x1c, 0x18, 0x3, 0x5, "ff010000002100008000", 0x36d}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) (async)
poll(&(0x7f0000000000), 0x35, 0x0) (async)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x44}, 0x4, &(0x7f0000000100)="71f91e3401000000000000001d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async)

2.231356338s ago: executing program 5 (id=151):
open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
recvfrom$unix(0xffffffffffffff9c, &(0x7f00000001c0)=""/241, 0xf1, 0x0, &(0x7f00000002c0)=@abs={0x4, 0x1, 0x0, 0x2}, 0x8)
r0 = socket(0x18, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x80000000, "fe80000400400d00009c180400002fee", 0x3}, 0x1c)
pselect(0x40, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x6, 0x9, 0xfffffffffffffc42, 0x3, 0x6}, &(0x7f0000000080)={0xfffffffffffffffa, 0xfffffffffffffffb, 0x5, 0xd4b1, 0xfffffffffffffff9, 0x40000009, 0x9, 0x3}, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa7210e10bc3c9def)
r1 = socket(0x18, 0x2, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
ioctl$DIOCCLRSTATUS(r2, 0xc0284416, &(0x7f0000000440)={'./file1\x00', &(0x7f0000000340)=""/217, 0x10001, 0x5, 0x6, 0x100})
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r3, 0x7fff)
setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000100)=0x7f, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x8200, 0x0, 0xfffc}}}}}})
truncate(&(0x7f0000000480)='./file1\x00', 0x401)
setsockopt(r1, 0x1000000000029, 0x23, 0x0, 0x0)
semop(0xffffffffffffffff, &(0x7f0000004f00)=[{0x3, 0x7ff, 0x800}], 0x1)
unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='x\x00')
rmdir(&(0x7f0000000180)='./file1\x00')

2.079633564s ago: executing program 5 (id=152):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="a7cf831bd1f5", @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x5, 0x1c, 0x66, 0x0, 0x8f, 0x3a, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0xc8}, @lsrr={0x83, 0x3, 0x2}]}}}}}})
setrlimit(0x8, &(0x7f0000000300)={0x42, 0x63})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x2d757368, 0x7fc, 0x9, 0xffffffed, "0e6400b76d0100c50400957000c600", 0x2, 0x100000e})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="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", 0x5cd}], 0x1)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.962324387s ago: executing program 5 (id=155):
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x2010, r1, 0x0)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0xec, 0x7ff, 0x5, 0xfffffff4, "0e6400b76d7639c5040a951326c600", 0x9, 0x100000a})
unveil(0x0, &(0x7f0000000100)='c\x00')

1.743832102s ago: executing program 7 (id=163):
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184)
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x10000)
r1 = semget$private(0x0, 0x3, 0x10)
semctl$IPC_RMID(r1, 0x0, 0xff7f)
pwritev(r0, &(0x7f0000000840)=[{0x0}], 0x1, 0x7)
truncate(&(0x7f0000000000)='./file0\x00', 0x30000)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0)

1.673530256s ago: executing program 1 (id=167):
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r0 = syz_open_pts()
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x10000, 0x0, 0x300, 0x100000003}) (async)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x10000, 0x0, 0x300, 0x100000003})
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2, 0x2})
munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

1.670526709s ago: executing program 6 (id=168):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = semget(0x3, 0x2, 0x302)
semop(r0, &(0x7f0000000000)=[{0x1, 0x2}, {0x3, 0x1, 0x1000}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="c4fcffffffff0000", @ANYRES32], 0x10, 0xe}, 0x6)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
semget(0x3, 0x2, 0x302) (async)
semop(r0, &(0x7f0000000000)=[{0x1, 0x2}, {0x3, 0x1, 0x1000}], 0x2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="c4fcffffffff0000", @ANYRES32], 0x10, 0xe}, 0x6) (async)

1.668712718s ago: executing program 1 (id=169):
r0 = syz_open_pts()
r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xe000)
closefrom(r1)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f00000000c0)={0x0, 0x3, <r2=>0xffffffffffffffff, 0x0, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ppoll(&(0x7f0000000100)=[{0xffffffffffffff9c, 0x40}, {0xffffffffffffffff, 0x100}, {r0, 0x10}, {r1, 0x8}, {0xffffffffffffffff, 0x1}, {r2, 0x80}], 0x6, &(0x7f0000000140)={0x5}, &(0x7f0000000180)={0x2})
r3 = kqueue()
kqueue1(0x10000)
r4 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='#', 0x1}], 0x1)
kevent(r4, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x0, 0xf27ff779bbbc9c09, 0xfb, 0x10000}], 0x8010003, 0x0, 0x9b6c, 0x0)
kevent(r3, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0xa7, 0x40000000, 0xfffffffffffffffd, 0x8000000000013fff}], 0x4, 0x0, 0x8, 0x0)
kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)

1.66765373s ago: executing program 6 (id=170):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
close(r0) (async)
close(r0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794d) (async)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794d)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
select(0x40, &(0x7f0000000000)={0x9, 0x1, 0x401, 0x8, 0xce, 0x101, 0x3, 0x1}, 0x0, 0x0, 0x0)
readv(r2, &(0x7f00000000c0), 0x0)
accept(r1, &(0x7f0000000140)=@in, &(0x7f0000000180)=0x10) (async)
r4 = accept(r1, &(0x7f0000000140)=@in, &(0x7f0000000180)=0x10)
setsockopt(r4, 0xb, 0xa5, &(0x7f0000000480)="2dca6ac6066b16e215984941fd71c5ae25eb8fd77bc44d327896636acca23b2315d46ffe61455c2eb7c95744747a53662f2055374d3d04e0f22d16644c6cc41557079a3105216885809c6263e7934c4ce3eaa6c11412d04ba8d364c4f52fcb5aa8ac27213e1ad1b20bac8846097993054ef82a228b75ccd598cb73bc217e75d44c157241fd76cb531f5200db8a97098f4a58b77cf9d131d300c5da83d756e8786b86a04a55cdc7168327bde09431549d3019c0625cefd8fa39f87e7a5ae36fc08c9aeed70e954f3163e167cb6714958e8efce2b40be61adea1b94250aa07ba0e521d8f18ba7884edf84673d4d5a79caf600409ca63", 0xf5)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x33, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000)={0xa, 0x21}, 0x2, &(0x7f0000000580)="c61a4764e4737ba04718cee237f9310a624f9363302635791569e8fc93cf005840932745fa1c8d0c4a8790f272e148967024fdb11fb7793f9415fba834b4dd8cd1dc9be1254620dc6f7b1fb681b50e3cbca0e71684079b98627c91e76b2f43d1aaa41f4ea19600b1c259f097b44e7b5b4b8684bab031b428852704147e8bffca29", 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0xfffffffffffffffe, 0x0, 0x3, 0x1})
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0xd1e9, 0x0, 0x10000, 0x0)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000440)="9b6c", 0x2}], 0x1) (async)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000440)="9b6c", 0x2}], 0x1)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mknodat(r2, &(0x7f0000000240)='./file0\x00', 0xc0e99db6de761f86, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x4)
readlink(&(0x7f0000000040)='./file0\x00', 0x0, 0xe) (async)
readlink(&(0x7f0000000040)='./file0\x00', 0x0, 0xe)
kqueue() (async)
r6 = kqueue()
r7 = syz_open_pts()
kevent(r0, 0x0, 0x1, &(0x7f00000002c0)=[{{r4}, 0xfffffffffffffffe, 0x25, 0x1, 0x2c8, 0xa000000000000}, {{r3}, 0xfffffffffffffffe, 0x1a, 0x1, 0x0, 0x8000000000000001}, {{r6}, 0xffffffffffffffff, 0x24, 0x1, 0x5, 0x2}, {{r4}, 0xfffffffffffffffc, 0x8, 0x4, 0x7, 0x1}, {{r7}, 0xfffffffffffffffc, 0x9, 0x40000000, 0x1, 0x6d1}], 0x3ff, 0x0)
kqueue() (async)
r8 = kqueue()
kevent(r8, &(0x7f0000000000), 0x8a8a, 0x0, 0xc0000002, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4108, 0x0)
getitimer(0x2, &(0x7f0000000100)) (async)
getitimer(0x2, &(0x7f0000000100))

1.386038918s ago: executing program 3 (id=171):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0x3, 0x7}, 0x4, 0xfffc, 0x0, 0x0, 0x1, 0x5, 0x800000800000000, 0x0, 0x5, 0xffffffffe154f620})
mprotect(&(0x7f00003d7000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000002)
r1 = kqueue()
kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
mlock(&(0x7f0000002000/0x1000)=nil, 0x1000)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)

1.141602132s ago: executing program 4 (id=144):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x1, 0x6, 0x80000001, 0x21d}, {0x4, 0xfffffffb, 0x6, 0xfff}, {0x9, 0xfffffffe, 0x2006, 0x1}, {0x4000002, 0x7, 0x8000f}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x10, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x6, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x20000401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]})
r0 = syz_open_pts()
syz_open_pts()
poll(&(0x7f0000000000), 0x35, 0x0)
syz_open_pts()
ioctl$TIOCSBRK(r0, 0x2000747b)
ioctl$TIOCSCTTY(r0, 0x20007461)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
pipe(&(0x7f0000000100))
unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='x\x00')
unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f0000000200)='c\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20)
unveil(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='w\x00')
unveil(&(0x7f00000011c0)='./file0/file1\x00', &(0x7f0000001200)='c\x00')

1.117875651s ago: executing program 4 (id=175):
r0 = syz_open_pts()
readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x6, 0x10005, 0xea7a, 0x40000001, "00ef1f0160fbff2000404b000000000000000800", 0x838, 0x929})
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xc8fd, 0xf4f, 0x4, 0x74449b7b, "e790ee4f64861c1e658534f1ed0773b779f86707", 0x4, 0x6})

1.11726391s ago: executing program 2 (id=176):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0xa011, r0, 0x0)
pwrite(r0, &(0x7f0000000140)="e7f0", 0x2, 0x3)

1.116836037s ago: executing program 2 (id=177):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3ff}, 0x400, 0xfffffffffffffff9, 0x0, 0x200006, 0x4, 0x800000000000108, 0x24, 0x6, 0x0, 0x2})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
socket$inet(0x2, 0x1, 0x0) (async)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x7fff)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000100)=0x7f, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x68, 0x0, 0xf, 0x6, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x68, 0x0, 0xf, 0x6, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})
dup(0xffffffffffffffff) (async)
dup(0xffffffffffffffff)
semget(0x0, 0x1, 0x600)
r1 = syz_open_pts()
close(r1)
fcntl$lock(r1, 0x9, 0x0)
semget(0x0, 0x4, 0x200) (async)
semget(0x0, 0x4, 0x200)
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f0000000140)="87a0ce5c623c378bb0f46a87ad11c78ba123fa13e26e6c81703afd13f047f879985fb24e8343995090c7c371bdfbfea43d47f84ca4053a08f12c58429afaad972c1b5603f7a29a2d78f30bca607a46a2763085b8189a44aabaadcc61f0", &(0x7f00000001c0)=0x5d, &(0x7f0000000200)="a2e44da15fb05af293243c1a7d9dbcaf4b585d19f36ca0e1c83e5ec8d31355e45402aebfb644a5e6a96c979d016ef2c73f4c693326ba11a0fe699cef016863e67f2bb5d0daa7782d998c9f56fde867c2fe5127fb294b385dbfeeae240fefecfc9b2e2b6a0d82e743c0", 0x69)

992.52598ms ago: executing program 4 (id=178):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x2, 0x1, './file0\x00'}, 0xa)
getsockname$unix(r1, 0x0, &(0x7f0000000180))
close(r0) (async)
syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0xcda9, 0x9429, 0x6fab, 0xfff7ff9f, "0800046d7d997f000000006000647400fffa00", 0xf, 0xffff}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x15, &(0x7f0000000000), 0x0) (async)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="42633c39965636417b12863dae6b27d10bd7b61449253121a73a6f766566fc4b80", 0x21}], 0x1)

992.106191ms ago: executing program 2 (id=179):
pledge(&(0x7f0000002200)='\x00', &(0x7f0000002240)='x\x00')
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r0 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x80206918, &(0x7f00000001c0))
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372802", 0x62, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x117, 0x3}, 0xfffffffffffffff9, 0x8000000000001, 0x6, 0x651, 0xfffffffffffffffe, 0x0, 0x400000000000a8, 0xffffffffffff0001, 0x0, 0xd2, 0x0, 0x2})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a807c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343711051eea040000000000", 0xb1, 0x400, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
sysctl$hw(&(0x7f0000000000)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$hw(&(0x7f0000000040)={0x6, 0xe}, 0x2, &(0x7f0000000080)="f64ae65309aff52b4b61f8b78289085cd04b4835c959ac6d5f84d39809a8a93b82244693a03fa83a5f6a44e1bf2be7d84a4c573f41789e94cf7861c12783d8c0b2802fe1c03ef065277a7b5c436248baa2b99f8869cbf4ac390666fc7d6c25099d1f318f1c52c59ac7538774cf5f5ab7d892afa23bc7d7e7b505a1e6c8771d783fbd86e1a73fb6cffe022960f92dc602d1c92263eddbbe4837ac5f8a5741badabf7fbfc905a8611c1380905a2ef50d73969550855422cd56e489ba7ae7b7f659ee", &(0x7f0000000180)=0xc1, &(0x7f00000001c0)="423995c108328c60083e5f93d2e0773b1e9187f430bcdbab721c2caa67beca8b6e67825a58fe2f1064c188", 0x2b)

991.679492ms ago: executing program 6 (id=180):
socket(0x18, 0x2, 0x0) (async)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x1, 0x1}) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async)
r2 = fcntl$getown(r0, 0x5)
fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x5, 0xff, r2, 0x1, 0x2}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32)
r3 = socket(0x18, 0x1, 0x0) (rerun: 32)
setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000300)=0x71eb, 0x4)
r4 = socket(0x18, 0x8004, 0x14) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
bind$unix(r5, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 64)
r6 = syz_open_pts() (rerun: 64)
fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x17fdffffffffc, 0x1}) (async)
sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
getsockopt(r4, 0x29, 0xc, 0x0, 0x0)

990.909571ms ago: executing program 2 (id=181):
sysctl$kern(&(0x7f0000000100)={0x1, 0x1}, 0x0, &(0x7f0000000000)="64e773af7d6ee467747ac0fdb6be3aa91083312416159902f20e54cb06a0119ca180ee72d806dd6cff1ff1a600c431a806145d08ececd497a53c4ee8200be4f142d429acb3df2f0bb68cd62e404d9b9d08dbd341900cf0f6f018ae2973f2630cad1d776adc4956cc7682fd08e463eb7a124a5f8dc5259ddca6e91b78fdd38fda00d0bb522bc3153beb5ffcd9a2beacfc0075c6d350b0a7d84ebf277cf2470a570c2a1898eae99e6f7714cbf75774f76bf93fa25130504d861b56ce9bf86b494e1333", 0x0, 0x0, 0x0)

968.041495ms ago: executing program 2 (id=182):
r0 = syz_open_pts()
r1 = socket$inet(0x2, 0x1, 0x6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ftruncate(r1, 0x383)
write(0xffffffffffffffff, &(0x7f0000000300)="b96aacf5ac3a14430a36d714633b86f96561eb3739b0a3d25c1ae41b8a086bda0c2fc5e9172222bd00fc3561b35bcb1be652a58cf7502a5408d2034f2844329a3aa4ac9806ef66509a349eb47e64b40abd25a3d99d608e01d177", 0x5a)
read$audio(0xffffffffffffffff, &(0x7f0000001a00)=""/176, 0xb0)
r2 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa, 0x3}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x63b77150e7b7249d)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x4, 0x1, r2})
getsockopt(r1, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0xa2, 0x0, 0x3, 0x1})
connect(r1, &(0x7f00000000c0)=@in={0x10, 0x2, 0x0, 0x8}, 0x10)
syz_open_pts()
syz_open_pts()
syz_open_pts() (async)
socket$inet(0x2, 0x1, 0x6) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
ftruncate(r1, 0x383) (async)
write(0xffffffffffffffff, &(0x7f0000000300)="b96aacf5ac3a14430a36d714633b86f96561eb3739b0a3d25c1ae41b8a086bda0c2fc5e9172222bd00fc3561b35bcb1be652a58cf7502a5408d2034f2844329a3aa4ac9806ef66509a349eb47e64b40abd25a3d99d608e01d177", 0x5a) (async)
read$audio(0xffffffffffffffff, &(0x7f0000001a00)=""/176, 0xb0) (async)
openat$audioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
sysctl$kern(&(0x7f0000000000)={0xa, 0x3}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x63b77150e7b7249d) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x4, 0x1, r2}) (async)
getsockopt(r1, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe) (async)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0xa2, 0x0, 0x3, 0x1}) (async)
connect(r1, &(0x7f00000000c0)=@in={0x10, 0x2, 0x0, 0x8}, 0x10) (async)
syz_open_pts() (async)
syz_open_pts() (async)

967.27899ms ago: executing program 7 (id=163):
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184)
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x10000)
r1 = semget$private(0x0, 0x3, 0x10)
semctl$IPC_RMID(r1, 0x0, 0xff7f)
pwritev(r0, &(0x7f0000000840)=[{0x0}], 0x1, 0x7)
truncate(&(0x7f0000000000)='./file0\x00', 0x30000)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0)

817.281387ms ago: executing program 7 (id=183):
sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0xac, "ff010000000000000000000000000001", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0x3d, &(0x7f0000003680)="000000f0", 0x4)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0)
ftruncate(r2, 0x79c8)
mlock(&(0x7f0000002000/0x1000)=nil, 0x1000)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)

816.854774ms ago: executing program 7 (id=184):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf02, 0x186) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x19, 0x0}, 0x7}, 0x38, 0x1841, &(0x7f0000003f00)={0x40007, 0x1020fdc7}) (async)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="0000000000000086", 0x8)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) (async)
truncate(&(0x7f0000000080)='./file0\x00', 0xafffe) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x1006, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0)

816.430471ms ago: executing program 1 (id=185):
r0 = open(&(0x7f0000000000)='./file1\x00', 0x2, 0x1f8) (async)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r1, 0x0, 0x18, 0x0, 0x0) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000080)=0x1, 0x4) (async)
shutdown(r2, 0x1) (async)
ioctl$FIONREAD(r0, 0xc0206917, &(0x7f0000000100))
unlinkat(r0, 0x0, 0x0)

815.43562ms ago: executing program 4 (id=186):
rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
lseek(r0, 0x80000005, 0x0) (async)
rename(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
open(&(0x7f0000000100)='./file0\x00', 0xfffd, 0x2) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x110) (async)
r2 = kqueue() (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffc, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x7, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x3, 0xfffffffe, 0x6, 0x3}, {0x2, 0xdf, 0xf, 0x3c}, {0x1, 0x80000001, 0xf11, 0x7}, {0x800, 0xfffb, 0x2, 0x6}, {0x0, 0x3, 0xc5, 0x2}, {0x7, 0x1, 0xfffffff8, 0xf3ffe2eb}, {0x8, 0xfff, 0x6, 0x20}, {0x3, 0x5, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7ce, 0x800000, 0xa66}, {0x3fd, 0x10a, 0x9, 0x41}, {0x200083, 0xee2, 0x2, 0x4}, {0x81, 0xd54a, 0x3, 0x5}, {0xffffffff, 0x0, 0x6, 0x869}]}) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r3 = syz_open_pts()
syz_open_pts() (async)
dup3(r3, r3, 0x10000)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0xffffff2e, 0x1, 0xd, 0x9, "efe976b72fc690025405a9d0697182bcd5bc5c05", 0x1, 0x6}) (async)
poll(&(0x7f0000000000), 0x35, 0x0) (async)
closefrom(r2)
ioctl$TIOCSWINSZ(r1, 0x40047307, &(0x7f0000000080)={0x9, 0x6, 0x8}) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, &(0x7f0000000940), 0x9, 0x0}}, 0xfc9c, 0x402)

813.58147ms ago: executing program 3 (id=171):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0x3, 0x7}, 0x4, 0xfffc, 0x0, 0x0, 0x1, 0x5, 0x800000800000000, 0x0, 0x5, 0xffffffffe154f620})
mprotect(&(0x7f00003d7000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000002)
r1 = kqueue()
kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
mlock(&(0x7f0000002000/0x1000)=nil, 0x1000)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)

598.469801ms ago: executing program 1 (id=187):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
r1 = syz_open_pts()
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4108, 0x0)
closefrom(r2)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180))
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r3 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0206922, &(0x7f00000001c0))
flock(r1, 0x6)
listen(r0, 0xfffffffa)
setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x74, 0x65, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x8200, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x0, 0x6}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xffff6c2b, 0x1}, @sack={0x5, 0x1e, [0xff, 0xffff, 0x10000, 0x98e, 0x41db7fe1, 0x9, 0x6]}, @generic={0x5, 0x3, "d9"}, @md5sig={0x13, 0x12, "ba8c37083c4fdce19918e70400ad8765"}]}}}}}}})

596.805364ms ago: executing program 3 (id=188):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000080))
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x24, &(0x7f0000000080), 0x0) (async)
r2 = socket(0x18, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4b}, 0x2, &(0x7f0000002180)='qiG:', &(0x7f0000000000)=0x4, 0x0, 0x0) (async)
ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000180)={0x8, &(0x7f0000000100)=[{0x401, 0x4, 0x1, 0x7ff, 0xb398}, {0x5, 0xd1, 0x0, 0x28, 0x10}, {0x7, 0x7fff, 0x0, 0x0, 0x5}, {0x80, 0xa05c, 0xd8d7, 0xe544, 0x401}, {0x0, 0x7, 0x3, 0x3ff, 0x4}, {0x8, 0x6bce, 0x5, 0xfffa, 0x9bf}, {0x3, 0x626, 0xfe00, 0x4, 0xfe}, {0x2, 0x77, 0x1, 0x7f, 0x5}]}) (async)
ioctl$FIONREAD(r2, 0xc018696c, &(0x7f00000001c0))

582.129331ms ago: executing program 2 (id=189):
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00')
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x110)

581.036174ms ago: executing program 3 (id=190):
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffff0200ea09066dbd86dd60db834400081101fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000000000014e234e2200089078"])
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f00000002c0)="03000000", 0x4) (async)
setsockopt(r0, 0xad, 0x9, &(0x7f0000000500)="0245bc2cb3b03bcac115540af9ba2b7d23a1177e8e5af0b81b091db548470a635508cf2597b9676cc6f913e0f8e231000e8b99eae5cd55b57dffc9f185e2bd5c9e4b1c9acadc92c1a669ed2483a9c407fee0fc2eda0effec30a6d0917bacd6b4847305fe25c7851b9fe72b8c7905549cec1f7bf25c0d4058ff515fc0d7c192d2e3d10191d86d89ab6f68aa4fe5517fd8227392e25113be603a2267e921ed3c230928ed714a974fa31423ca650d0f1c00142a7c5a90a96f6bf44e3d862a4cc1bb3969dfaf", 0x90) (async)
r1 = syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x3, 0x100, 0x2, 0x10001, "b45c9f5eb02daf02b2630341682fb85964fa5300", 0x1, 0xffffff84}) (async)
setrlimit(0x8, &(0x7f0000000300)={0x42, 0x63})
r2 = syz_open_pts() (async)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3})
close(r2)
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000000)={0x2d757368, 0x7fc, 0x9, 0xffffffed, "0e6400b76d7639c50400957000c600", 0x2, 0x100000e}) (async)
ioctl$TIOCSFLAGS(0xffffffffffffff9c, 0x8004745c, &(0x7f0000000080)=0x20000082) (async)
r4 = socket(0x1, 0x5, 0x0)
close(r4) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f00000000c0)=@in={0x10, 0x2, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0}}, 0x38, 0x4) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r5 = socket(0x20, 0x1, 0x0)
close(r5) (async)
socket(0x18, 0x2, 0x0) (async)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x3e) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
pwrite(r7, &(0x7f00000000c0)="a7", 0x1, 0x8008)
write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x112, 0x2ebbb14db139be9d) (async)
sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000302000/0x1000)=nil, 0x1000)

580.342474ms ago: executing program 1 (id=191):
r0 = kqueue()
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) (async)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959)
link(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='.\x00') (async)
link(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='.\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x70)
r2 = getpgid(0xffffffffffffffff)
close(r0) (async)
close(r0)
fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x80000001, 0x2, r2, 0x2})
kevent(r0, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffff6, 0x31, 0xf27ff7794bbc9c2f, 0xfd, 0x10004}], 0x1, 0x0, 0x9b68, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0)

425.438266ms ago: executing program 1 (id=193):
write(0xffffffffffffffff, &(0x7f0000000640)="b96aacf5ac3a14430a36d714633b86f96561eb3739b0a3d25c1ae41b8a8c2fc5e9172222bd00fcdf19ced97590a8e661b35bcb1be652a58cf7502a5408d2034f2844329a3aa4ac9806ef0166509a349eb47e64b40abd25000000f43eea1bd5b1a3a3e7d4c31b72e4ac94551771579fe4b141264bf344bb46", 0x78) (async)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53})
r0 = syz_open_pts()
unveil(&(0x7f00000000c0)='./file0/file0/..\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x43}}, 0x8702dbf4fe616c50, 0x40e) (async)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/124, 0x7c}], 0x1, 0x0}, 0x40) (async)
close(r0)
syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x920f, 0x9, 0x3, 0xffffff8f, "08954c1cfabb0a0004293cfcef0800", 0x3, 0x100}) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x5, 0xffff63de, 0x7, 0x0, 0x1000008, 0x3, 0x40, 0x10, [{0x25, 0x3, 0x6, 0x80000201}, {0x7, 0x8, 0x6, 0xffd}, {0x7, 0x1df9, 0x7, 0x20001}, {0x2, 0xdc, 0x5}, {0x0, 0x8, 0xf11, 0xb}, {0x3, 0xffff, 0x80ce, 0x4}, {0x3, 0x52e, 0x10100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffeae9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x0, 0x5}, {0x4, 0xc7ce, 0x800001, 0x8}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x101, 0x1003, 0x9}, {0x9be2, 0x8001, 0x6, 0x8000069}]}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000400), 0x0, 0x0, 0x0)

420.420247ms ago: executing program 0 (id=194):
r0 = syz_open_pts()
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4085, 0xff5}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, 0x0)
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xc8fd, 0xf4f, 0x4, 0x74449b7b, "e790ee4f64861c1e658534f1ed0773b779f86707", 0x4, 0x6})

418.673925ms ago: executing program 0 (id=195):
r0 = semget$private(0x0, 0xb, 0x19e)
semop(r0, &(0x7f0000000200)=[{0x0, 0x4, 0x1000}], 0x1)
semop(r0, &(0x7f0000001240)=[{0x1, 0x4000, 0x1800}], 0x1)
r1 = socket$inet6(0x18, 0x1, 0x6)
getsockname$inet6(r1, 0x0, &(0x7f0000000340))
semctl$SETVAL(r0, 0x0, 0x8, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffff6f29ffff86dd69529c51002c0096fe80000059874a9e00000000000000aaff0200000000000000000000000000013a020001000000000080"])

418.313906ms ago: executing program 0 (id=196):
mkdir(0x0, 0xc1)
unlink(&(0x7f0000000000)='./file2/../file0\x00')
symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000180)='./file0\x00', 0x615, 0xbe)
rename(&(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00')
unveil(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='c\x00')
truncate(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000000)

195.670162ms ago: executing program 0 (id=197):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045f400280065000000069078ac1400bbac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50028200907800fc3447826f3739513559e6100d5a81fc3257d07aae70419bb7fe85c45e53e2b1f7692c09fa16565fd66b97ee75afb67852aa54b4d1a531229cd04614612d9631950c826d8f1c081273e1d6d810bc4dc57a3fad4fd4437f4a64ce19549edb452da49fa0698fec5dd2675e391c21d8b5e7f8bc4aee6cf4cbf4dadda371137d982691d25c5ec8cf8b2816e5fec09fa8d418f94cc5ebeadf07d7be829fea"])
r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000040)=@file={0x0, 0x0, ""/14}, &(0x7f0000000080)=0x10)
connect$unix(r1, &(0x7f0000000280)=@abs={0x5, 0x0, 0x0, 0x2}, 0x8)
r2 = socket(0x11, 0x3, 0x0)
fsync(r2)
syz_extract_tcp_res(&(0x7f00000000c0)={<r3=>0x41424344}, 0x5, 0x8)
syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, <r4=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x2fc, &(0x7f0000000800)={@remote, @broadcast, [], {@ipv6={0x86dd, {0x4, 0x6, "661520", 0x2c6, 0x62, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr="6c829eeb5f1ce9761356a96288a8ae3b", {[@fragment={0xff, 0x0, 0xf3, 0x1, 0x0, 0x1, 0x66}, @dstopts={0x6c, 0x2b, '\x00', [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x20, 0xc9, "f700ec9cf971669aca47ff07334efaf9cefc1fbce544cc7c16165af742a27ef1ae184ebb5289264bdc430f64b07fcea82d6af5f682602db29ed1737f7fec52928a259a6cb21f5e5c7daf20c32db5eeb39f4897036bd48e3fdf80ff3bddea206f3e5fa30c580e79555432c3cab746bd45354f0b6f8f407f918423044b3350836077feac995b8ee48d5edd99ff3f68303b2834ca3ed08502e51e8c6c43b4ab82dae11994517ef0c6d89486080fcdd9ddfb0a3e3b479b9b58e4954e8b5eb6c7370820afa7d08f52590891"}, @generic={0x3, 0x81, "b8f6cbce705035bb5d915863adfa93061951f2c7c1737f6a3f64af7175e8fc0226de4d6c7fbf58eb6b129873413f970c3ea9e345289223d45d336a187b835152f2c3378161eddc759bc613f3c9a870df0e3d64185931cc44e8995a08448852e4c030ace87ca4ada6da5240c8de8ce8bb039b4f3e88b137003b1d8cd8134cf07b3b"}, @enc_lim={0x4, 0x1, 0x2}]}, @fragment={0x2f, 0x0, 0x40, 0x0, 0x0, 0x8, 0x66}, @dstopts={0x16, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x33, 0xa, 0x0, 0x10, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @empty, @empty, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}]}], @tcp={{0x2, 0x0, r3, r4, 0x1, 0x0, 0x8, 0x20, 0x8, 0x0, 0x98, {[@sack={0x5, 0xa, [0xa1, 0x6]}]}}, {"f5a217813fbcf6fa3fc13c94ba1d6d85c10cd7b7a19c7c3f5dcddcaeee4d171c22c118163f59ab590592a5f92ceda58094702c3301af125d2ebf32472e11e356387ece4fde80975494bc79626bd5d766f175bab61036d6d46d3bf27a0ac8b02cd24e2ba59a291bc1a3e2ac5f2235ce13f61e5acd5f6da7b9e7bc43b8da306ae78f71c2422eb9347ba40a9fa7c8e2dde162b19141f0ed14bb56653daff15ba02f84450537a84d0a348336bc3ca8bd1176bc377bf21a33675ea9559eff97ce3be34b1acce7a09a"}}}}}}})
sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0)

194.668038ms ago: executing program 7 (id=198):
sysctl$kern(&(0x7f0000000000)={0x1, 0x26}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @random="e34fb2aaed3f", @rand_addr=0xcd50}}}})
ioctl$DIOCRCLRTABLES(0xffffffffffffff9c, 0xc450443c, &(0x7f0000000240)={{'./file0\x00', './file0\x00', 0x27, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x6, 0x60})
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/97)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x22}, 0x2, 0x0, 0x0, 0x0, 0x0)

193.733418ms ago: executing program 0 (id=199):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
flock(r0, 0x1)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)=""/62, 0x3e}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x18, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x20, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="13"], 0x18, 0x401}, 0x0)
r2 = socket(0x0, 0x4, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={0x18}], 0x18, 0x400}, 0x0)

192.761364ms ago: executing program 0 (id=200):
r0 = socket(0x2, 0x1, 0x0)
r1 = socket(0x2, 0x4001, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2)
fsync(r1)
socket(0x18, 0x2, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000280), 0x4)
r4 = semget$private(0x0, 0xb, 0x19e)
semctl$GETALL(r4, 0x0, 0x6, &(0x7f00000001c0)=""/171)
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x4001, 0x0) (async)
fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async)
close(r2) (async)
fsync(r1) (async)
socket(0x18, 0x2, 0x0) (async)
fcntl$dupfd(r0, 0x0, r1) (async)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000280), 0x4) (async)
semget$private(0x0, 0xb, 0x19e) (async)
semctl$GETALL(r4, 0x0, 0x6, &(0x7f00000001c0)=""/171) (async)

1.681325ms ago: executing program 4 (id=201):
r0 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r0, 0x20007461)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
dup3(r1, r0, 0x10000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x110, 0x43}, 0x6205, 0x2a3, 0x6, 0x544, 0x3, 0x0, 0x0, 0x20000000007f, 0x0, 0x0, 0x0, 0xffff})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
sysctl$net_inet_ipip(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x1}, 0x4, &(0x7f00000000c0)="04f783fd", &(0x7f0000000100)=0x4, 0x0, 0x0)
r2 = syz_open_pts()
fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x0, 0x160a1690, 0xa, 0x100000001, 0x2})
fcntl$lock(r2, 0x9, &(0x7f0000000100)={0xa1, 0x6, 0x0, 0x2})
fcntl$lock(r2, 0x8, &(0x7f00000001c0)={0x4c, 0x5b, 0x0, 0x2, 0x2})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0xe, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xffff7115, 0x9}, {0xfffffffb, 0xffffff7e, 0x40006, 0xfff}, {0x1, 0x4bad, 0x3, 0x9}, {0xc, 0xe2, 0x1, 0x5a}, {0x0, 0x7, 0xf15, 0x1000084}, {0x2, 0xa, 0x8, 0x6}, {0x4, 0x802, 0x3, 0x2}, {0xff, 0xb16c, 0x28000, 0xffffe2eb}, {0x5, 0x4001000, 0x6, 0x20008001}, {0x5, 0x5, 0xb, 0x3}, {0x5, 0x0, 0x4, 0x6}, {0x1000fffc, 0xfffffffd, 0x800001, 0x1}, {0x401, 0x4, 0xa, 0x404}, {0x3, 0x6, 0x2, 0x1}, {0x3, 0xfffffffd, 0x3, 0x5}, {0x20009be2, 0x1, 0x1000002, 0x8e}]})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0x3, 0x7}, 0x4, 0xfffc, 0x0, 0x0, 0x1, 0x5, 0x800000800000000, 0x0, 0x5, 0xffffffffe154f620})
shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0)
msync(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x42, 0x0, 0x37)

1.068834ms ago: executing program 6 (id=180):
socket(0x18, 0x2, 0x0) (async)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x1, 0x1}) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async)
r2 = fcntl$getown(r0, 0x5)
fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x5, 0xff, r2, 0x1, 0x2}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32)
r3 = socket(0x18, 0x1, 0x0) (rerun: 32)
setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000300)=0x71eb, 0x4)
r4 = socket(0x18, 0x8004, 0x14) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
bind$unix(r5, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 64)
r6 = syz_open_pts() (rerun: 64)
fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x17fdffffffffc, 0x1}) (async)
sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
getsockopt(r4, 0x29, 0xc, 0x0, 0x0)

597.62µs ago: executing program 6 (id=202):
closefrom(0xffffffffffffff9c)
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000040)=0x9, 0x4)
syz_emit_ethernet(0x59, &(0x7f0000000080)={@local, @remote, [], {@generic={0x8138, "6c61505f7074dae7238a94e9807d888aa57ecb6d68a3c6e8179d87302d930deacd79ce1b4f5298d0e6d95435a104d20d2947203b571ca1e00d8b902ad834dffc940e945d479c6a58d106c3"}}})
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="5013ca26ca29d32ee9b66f4aab67a4a9ac5c741a4517d72d5ce51e2ba86706a51e822c7d5b30876865f27d85b79050458f4615cdd954c5f9", 0x38}, {&(0x7f0000000180)="bc5c56a2a6fce87fbe63d9250bf83cd87ab2c2d9868c75a8a3d33f304483b37d2faf61306be93927770a3d6926a3e1c69464d0455a62bd71daacc4bcfd2c8e3bfbf79d92bdc7780f6ea5620c05fc", 0x4e}, {&(0x7f0000000200)="9ed1fe229e35e3cd6a1d1d276d53fb43410dcedee0a1e097ffc309b1114992995a2d481211447b2102fbfa6e39dc25894fbcb73da1", 0x35}, {&(0x7f0000000240)="a73dcf3601fe0adf7b2b6b15d0ee1a20a12036bb", 0x14}], 0x4, 0x0)
ioctl$AUDIO_GETPAR(r0, 0x40404124, &(0x7f00000002c0))
r2 = socket(0x10, 0x1, 0x2)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4)
ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000300))
fchmod(r2, 0x41)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000380)={<r3=>0x0, 0x2, 0x7, 0x5, &(0x7f0000000340)=[{0x6, 0x5, 0x5, 0x300}, {0xd, 0xce0, 0x432a, 0xdc91}, {0x4, 0x0, 0x5, 0x6}, {0x1ff, 0xbb12, 0xf, 0x2}, {0x1, 0xfa2, 0x0, 0x1}]})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000440)={r3, 0x2, 0x3, 0x9, &(0x7f00000003c0)=[{0x81, 0x1, 0x5, 0x7}, {0xb, 0x7f, 0x8001, 0x3}, {0x7f, 0x0, 0x5, 0xcc8}, {0x0, 0x8a, 0x81}, {0x7, 0x924, 0x6, 0x3}, {0x4, 0x0, 0x7, 0x8}, {0x7, 0x7, 0x3, 0x1}, {0x2, 0x9, 0x7ff, 0x3}, {0x3, 0x3, 0x7f, 0x8}]})
connect$inet6(r0, &(0x7f0000000480)={0x1c, 0x18, 0x0, 0x80000001, "a5f5615c7ae1316f251c22292ff3e2ea", 0x293}, 0x1c)
writev(r1, &(0x7f0000000700)=[{&(0x7f00000004c0)="8d0c990d401fd1b171b0ec5c77befa01ce141f6d1cd8c2c85f3d62cd058c21748107c10fec04d557ac2ed2cdf0b3200e381ac11f5745ff21d056db540d1ffd98439f4fd5d789dbf9c1127eb3e0d693d25f515784811ace997abeea81a79f2dd5a7d592db4ed9c1ba186c89784fb9d62589ede6704208eebb1fa93090c7fac6351d6c293eabf849d18e208be35040e5e3cf9b972513c994ff30c1dd2a41c5a03d43dc4f1952a6a8", 0xa7}, {&(0x7f0000000580)="c223ef411bce98ea6242a73f64e4f435465743656f39567eb1fd5f8a06af8b4c80f523e8b2601c4f45e5ddee9e72994861635ca7b2eedadb895d7491a273b0e917550e6e81891d7e738ae27c2fd6b5ee62da030d1c3a8478e5969ba3", 0x5c}, {&(0x7f0000000600)="20938271d91ae81df6a2af094069e9642282e7ab7ba316a61522681bb2f6b3b6dc5b3742738418fde5b479a4b8e16f408a44e3dc276b8a74538359f1ebc397440377f7738fa111f57866bce5ae74ff7175e6696db15f243d503e80e6180e21c2204d6c64b2fb92b5f12d32e0602b", 0x6e}, {&(0x7f0000000680)="828fd3a1f4c5586c4934d3d11b7d1e6448a92c543869f5d50d1447a696bc1a5e33f8590579c9e759d870e6de657248d1d17e940cbc65868b90cfadc4ac03241a8979ff1a5bcfd8e4a31b74ac226c1506e899e1a94cd96389492e1cc503564d547c1fb9d0fbbaaa52af05d384ff4d8fb7e51ef2eb7e", 0x75}], 0x4)
syz_extract_tcp_res$synack(&(0x7f0000000740)={<r4=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x10b, &(0x7f0000000780)={@local, @local, [{[], {0x8100, 0x5, 0x0, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "37bbe6", 0xd1, 0x4, 0xdd, @ipv4={'\x00', '\xff\xff', @loopback}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x50, 0x2, 0x0, 0xa5, 0x0, [@rand_addr="986f7d26cd3f241bb053bca74e1921e9"]}, @fragment={0x50, 0x0, 0x6, 0x0, 0x0, 0x4, 0x66}, @routing={0x11, 0x8, 0x0, 0xf7, 0x0, [@empty, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @empty]}, @fragment={0x1, 0x0, 0x2, 0x1, 0x0, 0x2, 0x64}, @fragment={0xff, 0x0, 0x6, 0x1, 0x0, 0x1, 0x66}, @fragment={0x60, 0x0, 0x2, 0x0, 0x0, 0x7, 0x68}], @tcp={{0x1, 0x3, r4, 0x41424344, 0x1, 0x0, 0xa, 0x8, 0x8, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0xe}, @nop, @mss={0x2, 0x4, 0x7ff}, @eol, @eol]}}, {"5a498dd406f763dc4876eb14359deba892ff146246be33b8b009a177b8c133082fab720fdf7ea50ed7"}}}}}}})
poll(&(0x7f00000008c0)=[{r1, 0x2}, {r0, 0x20}, {r2, 0x4}, {r1, 0x8}, {r1, 0x80}, {r2, 0x20}, {r2, 0x1}], 0x7, 0x3)
pipe2(&(0x7f0000000900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x10004)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000b80)={<r7=>0x0, 0x6, 0x0, 0x4, 0xe})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000d40)={&(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[{}, {}], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x9, 0x2, 0x0, <r8=>0x0, 0x5, 0x5, 0x1, 0x63e005ef, 0x7, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000940)=[0x0], &(0x7f0000000980)=[{}, {}, {}, {}, {}], &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x1, r7, r8, 0x0, 0x20af, 0xfffeffff, 0x356c, 0x40000, 0x1e})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000e40)={0x0, 0xffffffff, 0x7, 0x38305559, 0x2, [0x0, 0x0, 0x0, <r9=>0x0], [0xfff, 0xf3e, 0x3, 0x2295], [0xfd0f5e8, 0x2, 0x9, 0x7], [0x5ba, 0x5, 0x7, 0x1]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000ec0)={0x0, 0x3, 0x8001, 0x30313250, 0x0, [0x0, 0x0, 0x0, <r10=>0x0], [0xe, 0x4, 0x1, 0x9], [0x2, 0x401, 0x6, 0x1], [0x3, 0x1, 0x8, 0x8]})
ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000f40)={0x3, 0x3ff, 0x1, 0xff, 0x9, 0x5, <r11=>0x0, 0x3, 0x5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000f80)={0x9, 0x3, 0xfffffff3, 0x401, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000fc0)={0x0, 0x3, 0x8, 0x30335241, 0x0, [r9, r10, r11, r12], [0xffff, 0x4, 0x10001, 0x4], [0x10, 0x849, 0xb, 0x6], [0x7f, 0xffff, 0x814b, 0x64b]})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000001040))
ioctl$DIOCSETDEBUG(r0, 0xc0044418, &(0x7f0000001080)=0x8)
write(r0, &(0x7f00000010c0)="80a44dc78fe5b35468a27576c68993f4e5a1d80f50f6d24737141ba6c8457487ec59f688edbca6f24c3f78ef7cf74c60ca4e6a6865d3b6419cac8b2fd0ce281b4b81d489", 0x44)

0s ago: executing program 6 (id=203):
r0 = fcntl$getown(0xffffffffffffff9c, 0x5)
r1 = getpgid(r0)
r2 = getthrid()
r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x0, 0x0, ""/4105}, &(0x7f0000001040)=0x100b)
fcntl$setown(r3, 0x6, r1)
ktrace(&(0x7f0000001080)='./file0\x00', 0x1, 0x2214, r2)
shutdown(r3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000001100)=@file={0x0, 0x0, './file0\x00'}, 0xa)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001140), 0x20000, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(r6, 0xc1045763, &(0x7f0000001180)={0x730, [{0x3, 0x8}, {0x2, 0x7fffffff}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x80}, {0x1, 0x7}, {0x1, 0x9}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x100}, {0x3, 0x3}, {0x3, 0x4}, {0x3, 0x2}, {0x3}, {0x2, 0x9}, {0x1}, {0x2, 0x65}, {0x3, 0x4}, {0x3}, {0x2, 0x7f}, {0x2, 0x4}, {0x3, 0x2}, {0x2, 0x5}, {0x2, 0x1000}, {0x3, 0xffff0000}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0xf91c}]})
r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000012c0), 0x20000, 0x0)
ioctl$DIOCADDQUEUE(r7, 0xc148445d, &(0x7f0000001300)={0x8, 0x7fff, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x8}, {0x5, 0x9}, 0xe}, {{0x0, 0x8}, {0x1, 0xf}, 0x3ff}, {{0x9}, {0x3, 0x2}, 0x6}, {0x2, 0x2, 0x100, 0x5}, 0x0, 0xffffffad, 0x0, 0x7, 0x5}})
mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, r3, 0x789c282d)
shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil)
setpgid(r1, r0)
getpeername$unix(r5, &(0x7f0000001480)=@abs, &(0x7f00000014c0)=0x8)
readv(r6, &(0x7f0000002540)=[{&(0x7f0000001500)=""/54, 0x36}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2)
socket(0x10, 0x5, 0xd)
kill(r0, 0xb)
fcntl$setown(r3, 0x6, r0)
getsid(r1)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0)
ioctl$AUDIO_GETPOS(r8, 0x40104123, &(0x7f00000025c0))
closefrom(r7)
r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000002600), 0x80, 0x0)
ioctl$DIOCRSETTFLAGS(r9, 0xc450444a, &(0x7f0000002640)={{'./file0\x00', './file0\x00', 0x2d, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x100, 0x4, 0x14, 0x9cf8})
ioctl$DIOCGETSTATES(r4, 0xc0104419, &(0x7f0000002e00)={0x3, &(0x7f0000002ac0)=[{0x0, ""/16, [{[@v4=@local, @v6=@local]}, {[@v6=@empty, @v6=@local]}], {}, {}, @v4=@remote}, {0x0, ""/16, [{[@v6=@mcast2, @v6=@mcast2]}, {[@v4=@loopback, @v6=@mcast1]}], {}, {}, @v6=@empty}, {0x0, ""/16, [{[@v4=@broadcast, @v6=@loopback]}, {[@v6=@loopback, @v6=@empty]}]}]})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002ec0)={0x0, 0x0, r4, 0x0, 0x4e05319e})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 32: Broken pipe)


OpenBSD/amd64 (ci-openbsd-setuid-2.us-central1-b.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffff7806f805a58, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
Password:
Login incorrect
login: show panic
Password:
Login incorrect
login: trace
Password:
Login incorrect
login: show proc
Password:
Login incorrect
show all locks
login: Password:
Login incorrect
show all pools
login: Password:
Login incorrect
trace
login: Password:
Login incorrect
trace
login: Password: