last executing test programs: 16.878848923s ago: executing program 4 (id=61): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r1 = socket(0x2f, 0x4000, 0x7) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) recvmsg(r1, &(0x7f00000019c0)={&(0x7f0000000600)=@un=@file={0x0, 0x0, ""/515}, 0x205, &(0x7f0000001900)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/133, 0x85}], 0x2, &(0x7f0000001940)=""/100, 0x64}, 0x802) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000080), 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) truncate(&(0x7f0000000000)='./file0\x00', 0x30000) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x22, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000040)="89202009095c2a415642000000005624b77b6a0a", 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000001a80)={0xfffffffd, [{0x2, 0xffffff02}, {0x2, 0x100000}, {0x3, 0x6}, {0x1, 0xf}, {}, {0x0, 0xfffffffd}, {0x2, 0x1}, {0x0, 0xffffffff}, {0x0, 0xfffffffd}, {0x1, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x9}, {0x3}, {0x1, 0x80}, {0x0, 0x5}, {0x0, 0x1000001}, {0x3, 0x4000006}, {0x1, 0x1}, {}, {}, {}, {0x2, 0xfff7fc00}, {0x2, 0xfffffff9}, {0x0, 0x3}, {0x2, 0x7fd}, {0x3, 0xffffff80}, {0x1}, {0x2, 0xfffffffd}, {0x1, 0x2}, {0x2, 0x8001}, {0x1, 0x200060}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) sendto(r3, &(0x7f0000000180)="b646678868e95222938d30e865dbc3e40308ebd1f32838fc78098c3f6881059d8195d9c3b65bf031bce5e861d618282c51b9cb22fee043d80d6148528873770a97956062723ab86e6bc440694b11ec341b83406a4851f376c924a0d146b138bcccab230d5a4298815af7dcb5e0a49df8f9f1635ef78e8a51cbf4167083cf49a8c226e002619933a7354b8c83c3d071f1aa12ef63b1c8c1fba1b94a9a49d4e7a73297ad8936d8ecdabce876405a035004cf56a0ce32e5027c33516fa86b266e6641b26a27f8fbf5b6b8ace50fccda1c8daa", 0xfffffe9a, 0x404, &(0x7f0000000000)=@in={0x10, 0x2, 0x2, 0x404000}, 0x3) execve(&(0x7f0000001bc0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000300)='%}-\x00', &(0x7f0000001c80)='\xe1\xd0\t\x8a\nb\xe9\x9c-\xb3\xac\xa2\xa4`\x93\"\xcf\x90M\x8e\xf4\xe8\x1f\xd3\x15m:y\x1aTN\tp(b\xdf\xe3\x04g\xdd\x8e.^\x00\xce\xaf\x00\xa0\x0eL0\xe0\xa0\xb90\x1aQ\x14M\xd4\xc2c\x03\xf0\t\xce \xd8\b\xfb\"C\xf8x\xba8\xe3q\xe1]^\n\x9b\x00\x839', &(0x7f0000000080)='\x00>\xfc\x83\x02&a\x89\xe8$N\xb9\xbc`!u\xe1F%\x9b\xd1\x19\b&uT\xbe\fTbT\xf8J\xfd\xf3\xbbB\x02y\"\xbc\"w\xbc\xe4\xd2\x8bmIH\xd2\x06\xce@\xf7\x98\xe9mt\xaa@'], &(0x7f00000005c0)=[&(0x7f00000004c0)='\x00', &(0x7f0000000480)='%\'-+-\x00', &(0x7f0000001d00)='\x00bE\xbf\xfe\xdd\x9a\xd9\x98\x8a\x91M/4\x9a\xe2\xacB\xe1\xaf\xb7A\xbd\x1e \x1c\xfd\xf4v\xfe\xec\xd2 \xea\xcaw\xf9Z\x1a\xfa!\xd9\x17\xe1Z\xdbT\xa5\x95\xf5sb\x8eX\x06\xbf\x0e\x80\x9d\xcboC\xd5e\xa8x\x0fw:\xc3\xdcO\x8a\xf9\x8d+(\xc3%\b4\x06\"D_,\xef!\x11\xb7\xe8f#v\x0e\x18\x86\xa2i\xed\xa7\txq\xc0+6\x06qpg1\xe3\xa6\x05i\xc5\x87\xc6\x9bs6\xb1\xcca\xf432\x91\x06O\xe6d\xd83\xa8\xd0\b\xde\x9bF\xb2\x06\x8c\xbf1\xcf\xfb\x15v\x8c6\xc2\xa4\'\x1f\xe6\xb4d\xea8\\z\x02\xc7\xac\xe2\xea', &(0x7f00000003c0)='#([/%&.\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00']) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff7fffff4cea09066dbd86dd60db0e0000001100fed38d5ba80b9e61cd0c535a98000000ff020000000000000000000000000001"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) execve(0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003100)={{&(0x7f0000000280)=@in={0x10, 0x2, 0x2, 0x3}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000000400)="c3257264cdbad6ba365a9c0983956031c560833576", 0x15}, {&(0x7f0000001dc0)="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", 0xfa}], 0x2, &(0x7f0000001f00)=[{0xf8, 0x1, 0x51bdc791, "d6d8f482869a4edeb4fef8f0feb332684d71eb3e60f85eecb518755dc4a2117668b73d9214483478a919ed00694c6d7f97357562069818272e55c2c400c68a6e193b97be5c28809dfbd6cf2f3e7586eb0eb9f2fc1daca379db9b4a6e2cff4c20872001e0ec37f2372f577f5b5a520196714f795c2eba0be18647a34dbdb9e4fbe99dab93e7cf58d89a59f1cc51cafe5d9d1a88f3974e7b86e402a1734c240d1b3f4d0d6e0b4487b97a3d4ec4985c2ee22aa45ed1b3f13b5738044b7ef19f7e30f491d87b2f87410b98d752202df0b650b64a5b2c3b2d54599db467a1038659af3c3867cb9f4da3ac02a4fbeb"}, {0x100c, 0x1, 0x10001, "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"}, {0xd0, 0x1, 0x9, "cdd76aa6f70b3438cbc58a110499a7a9f571a033bf790e7fa8346c11218089fc39c8b963b4afc9efa6c2dd9085420b4a8a1df44bd0162fb80799fc070f8850a55b74ab736e7db92f5b0bef94a33bcadd141a44652a9c4f2ca58155c8b75863c97369a9ac9aa3e93aa5a033644094f65ea0dc28a851cbfe51d78b08734e76cb23351ab946bc81374e3d3d7a6468ea7c2da38dc7d15f31a96804911c35d31d4e84187d3a10cf3b74c6db2e608f9d96c16492a06e206718146d298da983650021fb20b4"}], 0x11d4}}, 0x38, 0x2) clock_gettime(0x3, 0xfffffffffffffffe) r4 = msgget(0x0, 0x1) msgget(0x3, 0x100) msgsnd(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000005c36ffc0212952d1c776ab56fc331937fc789a070eb6a94ea4d0e2173b01be310af186fe707191f6c9432054372effaea6cadde2621dbc9d84fdfffe000000"], 0x47, 0x800) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 16.256825397s ago: executing program 4 (id=72): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000280000fed38d5ba80b9e61470c535a98000000ff0200000000000000000000000000012c"]) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000800082b00fe8000000000000000000000000000bbfe"]) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffff6, 0x11, 0x40, 0x8, 0x80}, {{r0}, 0xfffffffffffffff6, 0x48, 0x80000000, 0x40000000e, 0xfffffffffffffffb}], 0x8a8a, 0x0, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080a4800002c0000a00078ac1400bbfffefbff440c830f0f1f01e0000001000000034e214e2200a21cd155778c3e7a3084f251a5ad89d17652a367626f9347ec2da8a2896662b71b72add24e7af6cff9f9685930044d6f6aba33def9433443c8f346d624fc613860d21b0a7e2c6a079d000000"]) syz_emit_ethernet(0x32, &(0x7f0000000000)={@empty, @broadcast, [{[{0x88a8, 0x3, 0x0, 0x1}], {0x8100, 0x0, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @remote={0xac, 0x14, 0x0}, @random="897c70806e3d"}}}}) 15.741657269s ago: executing program 4 (id=82): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@empty, @remote, [{[{0x88a8, 0x2, 0x1, 0x3}], {0x8100, 0x7}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x1, 0x24, 0x65, 0x0, 0xfd, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @empty, {[@lsrr={0x83, 0x3}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x9, 0x100, 0xf98}}}}}) (async) r0 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setrlimit(0x1, &(0x7f0000000980)={0x7, 0x62}) (async) dup(r0) 15.19702056s ago: executing program 4 (id=86): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) chdir(&(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) rmdir(&(0x7f0000000180)='./file1\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) mknod(&(0x7f0000000000)='./file1\x00', 0x1, 0xff) 14.842356373s ago: executing program 4 (id=88): unveil(&(0x7f0000002400)='.\x00', &(0x7f0000000080)='c\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f00000000c0)='./file2/file0\x00', 0x2f) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) unlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.838763215s ago: executing program 4 (id=92): r0 = socket(0x18, 0x1, 0x0) (async, rerun: 64) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x109, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x2, 0x1) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000001c0)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCEXCL(r2, 0x2000740d) (async, rerun: 32) fcntl$setstatus(r3, 0x4, 0x40) (rerun: 32) poll(&(0x7f0000000040)=[{r2, 0x4}], 0x1, 0x9611) (async, rerun: 32) close(r3) (async, rerun: 32) setsockopt(r0, 0x1a8, 0x26, 0x0, 0x0) r4 = socket(0x1, 0x2, 0x1) r5 = dup3(r0, r4, 0x0) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000000)) 14.674696226s ago: executing program 32 (id=92): r0 = socket(0x18, 0x1, 0x0) (async, rerun: 64) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x109, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x2, 0x1) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000001c0)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCEXCL(r2, 0x2000740d) (async, rerun: 32) fcntl$setstatus(r3, 0x4, 0x40) (rerun: 32) poll(&(0x7f0000000040)=[{r2, 0x4}], 0x1, 0x9611) (async, rerun: 32) close(r3) (async, rerun: 32) setsockopt(r0, 0x1a8, 0x26, 0x0, 0x0) r4 = socket(0x1, 0x2, 0x1) r5 = dup3(r0, r4, 0x0) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000000)) 10.448113818s ago: executing program 8 (id=96): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x6e, &(0x7f0000000000)={0xfffffffffffffffd, 0x6, 0xdc4, 0x564, 0x3ff, 0x1, 0x4004, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x33, 0x0, 0x32) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() preadv(r3, &(0x7f00000004c0)=[{0x0}], 0x1, 0x5) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x5b4) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 8.930980422s ago: executing program 8 (id=96): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x6e, &(0x7f0000000000)={0xfffffffffffffffd, 0x6, 0xdc4, 0x564, 0x3ff, 0x1, 0x4004, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x33, 0x0, 0x32) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() preadv(r3, &(0x7f00000004c0)=[{0x0}], 0x1, 0x5) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x5b4) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 7.064058793s ago: executing program 3 (id=179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x1001, 0x0) accept$inet(r2, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f}]}) bind$unix(r1, &(0x7f0000000040)=@file={0xa5, 0x0, './file0\x00'}, 0xa) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) getpeername$unix(r0, 0x0, &(0x7f0000001400)) 7.059284491s ago: executing program 7 (id=182): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='#', 0x1}], 0x1) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000666000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 7.018554332s ago: executing program 8 (id=96): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x6e, &(0x7f0000000000)={0xfffffffffffffffd, 0x6, 0xdc4, 0x564, 0x3ff, 0x1, 0x4004, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x33, 0x0, 0x32) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() preadv(r3, &(0x7f00000004c0)=[{0x0}], 0x1, 0x5) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x5b4) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 5.819917132s ago: executing program 1 (id=184): r0 = socket(0x2, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794d) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000003c0)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf64, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x0, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x2, 0x5e, 0x100000000007b98, 0x2, 0x9, 0x0, 0xfffffffffffffffe], [0x20100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x411000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x5, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0xff, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x1, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80200006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) r2 = kqueue() pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VMM_IOC_TERM(r3, 0x80045604, &(0x7f0000000180)={0x3}) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@broadcast, @random="eb01300eaaf8", [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x3b, 0x28, 0xfffd, 0x0, 0x7, 0x1, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0x4, 0x1, 0x0, [{[@multicast1], 0x3}]}]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x1, 0x9}}}}}) syz_emit_ethernet(0x9e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000682c00fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000000000013c"]) setrlimit(0x8, &(0x7f0000000980)={0x47, 0x62}) r4 = syz_open_pts() socket(0x18, 0x2, 0x0) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000200)) close(r4) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r5, 0x8531) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) sendmmsg(r0, &(0x7f0000000100)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x1, 0x9, "6aabf90b2645788bfbae90ca05860642"}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x20}}, 0x38, 0xe) 5.818697376s ago: executing program 2 (id=185): r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x76ec, 0x2, 0x10001, 0xffffff09, "9ddc4d80307eecfaffffffd7fc5b8196f2283f04", 0x7, 0xffffff81}) writev(r1, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x192}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r3 = socket(0x2, 0x4001, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) (async) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) unveil(0x0, &(0x7f0000000100)='c\x00') (async) r6 = socket(0x2, 0x8002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) closefrom(r7) (async) r8 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r8, 0xc0206921, &(0x7f00000001c0)) 5.816866805s ago: executing program 3 (id=186): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x4812, r0, 0x7ffffff) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 5.797534489s ago: executing program 7 (id=189): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xf9a, 0x8001, 0x8001, 0xc0c0c0c0}) select(0x4d, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x800000000000, 0xc}) r1 = syz_open_pts() futimens(r1, &(0x7f0000000080)=[{0x5, 0xfffffffffffffffe}, {0x2, 0xffffffffffffffff}]) close(r0) unveil(0x0, &(0x7f0000000200)='w\x00') ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000000c0)=0x3) 5.536364794s ago: executing program 1 (id=191): r0 = syz_open_pts() (async, rerun: 32) r1 = kqueue() (rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000002240)=[{0x0}], 0x1, 0xf) (async, rerun: 64) clock_getres(0x0, &(0x7f00000025c0)) (async, rerun: 64) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) (async) kevent(r1, &(0x7f0000000000), 0x3cd6, 0x0, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000040)=0x100) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r2 = socket(0x18, 0x1, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) (rerun: 32) write(r3, &(0x7f00000000c0)="e8ad0ae8", 0x4) write(r3, &(0x7f0000000240)="d0e8", 0xff44) (async) ioctl$VMM_IOC_RESETCPU(r3, 0x82405605, &(0x7f0000000080)={0x1, 0xb7bfe7c, {[0x0, 0x10000, 0xa, 0xd907, 0x4, 0x2, 0x3, 0x0, 0xfffffffffffffbb5, 0x800, 0x4, 0x6, 0x100000000, 0x7, 0x6, 0x6, 0x0, 0x10000], [0x9, 0xdb00, 0x5, 0x300000000000000, 0x3, 0x6, 0x10001, 0x1ca4, 0x6, 0x1], [0x2, 0x12, 0x7, 0x1ff, 0x7, 0x0, 0xffffffffffffb26a], [0x371678b6, 0x10, 0x4, 0x81, 0xcfa, 0x8000000000000000], [{0xfff, 0x3866, 0xff, 0x6}, {0x4, 0x0, 0x2, 0xc}, {0x4, 0x0, 0x7fffffff, 0x5}, {0xa, 0x6, 0xb84, 0x413}, {0x7, 0x6, 0x1000, 0x8}, {0x303, 0x8, 0x8, 0x7}, {0x400, 0xb, 0x6, 0x3}, {0x9, 0x5, 0x2, 0x6}], {0x1, 0xf0000000, 0x9, 0x1}, {0x7f, 0xfffffffe, 0x8, 0x33}}}) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebff929648", 0x5) (async) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040), 0x0) (async) kqueue1(0x4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000001340), 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) fcntl$getflags(r0, 0x3) 5.535158099s ago: executing program 8 (id=96): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x6e, &(0x7f0000000000)={0xfffffffffffffffd, 0x6, 0xdc4, 0x564, 0x3ff, 0x1, 0x4004, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x33, 0x0, 0x32) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() preadv(r3, &(0x7f00000004c0)=[{0x0}], 0x1, 0x5) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x5b4) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 4.521644717s ago: executing program 5 (id=192): r0 = socket(0x1, 0x5, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000000180)="57292b4907e1cda833a83ad7dd667e903ddf8aabedc4fe0d6d33b5266292f2c4", &(0x7f0000000080)=0x20, 0x0, 0x0) write(r0, 0x0, 0x0) 4.509579084s ago: executing program 0 (id=193): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x6, 0x1, 0x1) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) socket(0x6, 0x5, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) read(r2, &(0x7f0000000300)=""/69, 0x45) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket(0x2, 0x2, 0x0) getpeername(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001180)={@local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x2, 0x1, 0x38, 0x67, 0x3, 0x6, 0x9d, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}, {[@noop, @timestamp={0x44, 0xc, 0x2d, 0x3, 0xe, [{[@local={0xac, 0x14, 0x0}], 0x9}]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x4d}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.50911615s ago: executing program 1 (id=194): r0 = socket(0x18, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x800, "fe80000400000000fdff00"}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unveil(&(0x7f00000001c0)='./file0/file0/../file0\x00', &(0x7f0000000100)='c\x00') 4.505591499s ago: executing program 2 (id=195): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x1, 0x2, 0x8, 0x20001fffffffd}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x41e, 0x80}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.496051556s ago: executing program 3 (id=196): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) mprotect(&(0x7f00006ef000/0x3000)=nil, 0x3000, 0x4) r0 = socket(0x18, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x148) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) pselect(0x40, &(0x7f0000000000)={0xfffffffffffffff5, 0x4, 0x0, 0x2, 0x83a8, 0x9, 0x6, 0x6}, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r3 = accept$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "ff2e77f8ffff00200000004000000001", 0x4}, 0x1c) syz_emit_ethernet(0x78, &(0x7f00000001c0)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x8847, {0x0, 0x6, "db8344", 0x42, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}, {"2f141def860ca18e033ef166ff68eb47015b0674d36b9dfb0840c163368b1e7f4ccbe88b7c3daf1bc5328da15cf7b946683fbb99b6b425126341"}}}}}}}) syz_emit_ethernet(0x9f, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x91, 0x0, 0x0, 0x1, 0x1, 0x0, @multicast1, @local={0xac, 0x14, 0x0}, {[@generic={0x7, 0x3, "80"}, @generic={0x44, 0xc, "14560eab7099f5b5d2f6"}]}}, @udp={{0x0, 0x2, 0x8}, {"0795e619bb0378324a1656f894af5ebf872fc0a18f1ae07e4e011da4229873d63bab8d028a6f85316a4a0f0e2deb87377688e0fa1bf8df475911e1df6f3b74dbd38f59d3a12a6fd9f15815262abe3606ca07274c7b02d338c4d90cdf2f7599fb06f1c50134"}}}}}}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) 4.495613448s ago: executing program 6 (id=197): close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x11, 0x3, 0x0) getsockopt$sock_int(r1, 0xffff, 0x20, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x80, 0x8, 0x100200000, 0x6, 0x7, 0x5, 0x3, 0x0, 0x2f00, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0x0, 0x2, 0xfffffffffffffffe, 0x400000000120], [0xdfd, 0x80000001, 0xf800000000010000, 0x525, 0x20000000000005e, 0x200000000207b9d, 0x80000000000001fa, 0x0, 0x0, 0x9], [0x100000001, 0x1, 0x3ffffffe, 0x10f, 0xb, 0x800011000, 0xffffffff00000000], [0x7, 0x1fffffffffb, 0x7ffffffffffffffc, 0x7f, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffdfffffffff9}, {0x4, 0xa, 0xfffffffe, 0x400000000005}, {0x3, 0xb7, 0x5, 0xfffffffffffffffb}, {0xfff7, 0x2, 0x7f, 0x4000008}, {0x0, 0x5, 0x6, 0x2000004000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x6, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x200000003}, {0xde80, 0x1, 0x0, 0x200}}}) close(0x3) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) listen(r4, 0x2) close(0x3) 4.489192559s ago: executing program 7 (id=198): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x1, 0xb, {0x0, 0x1}}) ioctl$TIOCSFLAGS(0xffffffffffffffff, 0x8004745c, &(0x7f0000000080)=0x1ff) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000280)={0x1, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) 4.486817402s ago: executing program 5 (id=199): r0 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) close(0x3) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ktrace(&(0x7f0000000100)='./file0\x00', 0x2, 0x20001500, 0x0) ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) 4.215768829s ago: executing program 0 (id=200): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x5, 0x5, 0x9, 0xffffff8a, "ffa0a8000063267be8793b8539d9ae91001000", 0x8, 0x8}) r3 = socket$inet6(0x18, 0x1, 0x81) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000240)={0x8, 0x1, 0x2, 0x2584, 0x6}, 0xc) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @broadcast, [], {@generic={0x8848}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff7fffff4cea09066dbd86dd60db0e0000001100fed38d5ba80b9e61cd0c535a98000000ff020000000000000000000000000001"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCMBIS(r1, 0x8004746c, &(0x7f0000000040)=0xfb4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x200007, 0x7, 0x1000101, 0x7, 0x7, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x35}, {0x7, 0xfffffffc, 0x8, 0xfffffff8}, {0x9, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x8, 0x400}, {0x401, 0x4, 0xe, 0x3}, {0x2, 0x6, 0x203, 0x99}, {0xddf, 0x1, 0x40000005, 0x101}, {0x9, 0x7ff, 0x14, 0x8}, {0x5, 0x7fffffff, 0x1, 0x9}, {0xfffffffe, 0x7, 0xc8, 0x88}, {0x3, 0x50001, 0x9, 0xaec}, {0x7ff, 0x9, 0x3, 0x4}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x2, 0x6}, {0x4, 0x80000004, 0x6}, {0x0, 0x132e, 0x2, 0xfe}]}) listen(r0, 0x7fff) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffe13fb2fea0823fa01000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600282019078fffc01020000"]) 4.215098305s ago: executing program 2 (id=201): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x17) r1 = socket(0x18, 0x2, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000200)={0xfffff77b, 0xfffffffe, 0x3, 0xffdffffa, "18264e026c8c0100ff7f4d01000400000400", 0x6, 0x2}) writev(r2, &(0x7f0000001240)=[{&(0x7f0000000240)="2cda63d7c4d67427b10249ee452b5ad4a0f1aa5b9c4c63b4a680e9410a9a62db32d2a7b2cfb242e2627099db9cbcb28a633cd4c8e53dd343a2abf2a4eed84cba14104af263f484c34f917090c3b131ff", 0xfffe}], 0x1) unveil(0x0, &(0x7f0000000140)='x\x00') bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x8000, "e74c65fe6a0de935ad10de700709a85e", 0x1}, 0x1c) pselect(0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffa, 0xfffffffffffffffb, 0x5, 0x1f9, 0x8e75, 0xa, 0xb, 0x3}, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000000c0)={0xf605, 0x4000d, 0xfffdff83, 0x160350d, "04538b7fc8000000eb08002900", 0x7fffffff, 0x46}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r5 = getuid() setresuid(r5, r5, r5) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0xfffffffe, 'b\x00', 0x6}, 0x1c) r6 = syz_open_pts() close(r6) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0x5, 0x5, 0x9, 0xffffff86, "ffa0a8000063267be8793b8539d9ae91001000", 0x8, 0x8}) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000240)=""/39, 0x27}], 0x1) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x10, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 4.214782968s ago: executing program 8 (id=96): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x6e, &(0x7f0000000000)={0xfffffffffffffffd, 0x6, 0xdc4, 0x564, 0x3ff, 0x1, 0x4004, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x33, 0x0, 0x32) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() preadv(r3, &(0x7f00000004c0)=[{0x0}], 0x1, 0x5) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x5b4) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 3.127607745s ago: executing program 6 (id=202): faccessat(0xffffffffffffffff, 0x0, 0x80, 0x3) sysctl$kern(&(0x7f0000000140)={0x1, 0x2a}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x1, 0x8, 0x6, 0x6}, {0x2, 0x81, 0x0, 0x5}, {0x2, 0x0, 0x2, 0x200}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e", &(0x7f0000000080)=0x3, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x20000, 0x0) flock(r0, 0x4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) 3.049071548s ago: executing program 7 (id=203): fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x1, 0x7, 0x8000000000000005}) setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x920e, 0x5, 0xffffdf82, 0xffffffd0, "08954c1cfac164e20a070c000000291cfcf20800", 0x4002000, 0x5}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x1, 0x7, 0x8000000000000005}) (async) setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x920e, 0x5, 0xffffdf82, 0xffffffd0, "08954c1cfac164e20a070c000000291cfcf20800", 0x4002000, 0x5}) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) 3.032731052s ago: executing program 0 (id=204): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x5, 0x8, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20000}, {0x8, 0x200000df, 0xf}, {0x0, 0x7, 0xf0f, 0xb}, {0x3, 0xffff, 0x80cf, 0xfffffbff}, {0x3, 0x800, 0x100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0x3, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x44d2, 0x9}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r0) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) ftruncate(r2, 0x200000000000000e) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) connect(r1, &(0x7f0000000280)=@in={0x10, 0x2, 0x1, 0x6}, 0x10) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmmsg(r1, &(0x7f0000000400)={{&(0x7f0000000300)=@in6={0x1c, 0x18, 0x3, 0x7, "22998f8811ea45d8205db922daf06f3b", 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="71b9c802bb6becbd", 0x8}], 0x1, &(0x7f00000003c0)=[{0x28, 0x1, 0x887c, "9a5a9e961f79bf5338de618bce26b39ab245b05f9e2e26b13a9b85"}, {0x18, 0x1, 0x7, "8270f56cd1ccceced4"}], 0x40}}, 0x38, 0x400) connect$unix(r1, &(0x7f0000000000), 0x10) sendto$unix(r1, &(0x7f0000000040)="01d0ceca40e2fe1133f059f0a27d154ecc417d2c8db6349d9f23e8f8670b6f53f5b2378081013fe3529d7a1601d59e3c63d397b0729f3647f6742fc9c1b4d24059c49142c587ff9e191306bba39ca465410341de1f33e1e0f19a1e66a98d517f865a546584685c41ef07e23f326d1d268f42dcdf86cbcfd340419115c1bbc6bf8771ff3b7de6cd72a6eedf8a67717f97c735430ea6254215630b618ec72bdd120f21d141c6ac3316ea7fd35deeb31ad6b2027265aa7e01b76762026de9ea99c2b18b962f2a8dd6a822f79f096eba5b44e3594abc5c2e2b907b268a51a46d0c57d2ddf31847950c5d1dd5e09ccee7fd17b3fdabfc51827a48e2cdf040f41e9320a03cb89b1087531546ea463c94bc8de3199604d90a9dd04e8b966bd3aad019e60c579dbf9c856513d88d3a378bad1bc5470b7c91d146ae9d0711bf8f11fb81692b3643db948f798bb630e6ea2926c2fc9ba12fef9a9d2755f5a42d16142727a08de1e111c018652fe9731cc13509bc5d60e760f91577c3bc214b9cff10dded9684b34700ecd0f90b5fee61eb33b34c36f7a04817144f221fe48d5772606e5371d4c4d63a7b6b5d8618cbdf8f57a28c35eb5dc2610d9e0ae8616591fd3f4ca04b98b7462e21a7952e574227a861ba91d5126746b4186865", 0xffffffca, 0x0, 0x0, 0xffffffffffffff01) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file1/../file0\x00') rename(&(0x7f00000012c0)='./file1\x00', &(0x7f00000002c0)='./file1/../file0\x00') r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$DIOCADDRULE(r3, 0xcd604404, &(0x7f00000013c0)={0x0, 0xffff, 0x0, './file1\x00', './file0\x00', 0x0, "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"}) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') 3.02259504s ago: executing program 1 (id=205): socket(0x18, 0x2, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000000c0), 0x0) (async) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000000c0), 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x58}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/file0/..\x00', 0x80, 0x145) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='c\x00') open$dir(&(0x7f00000001c0)='./file0/file0/..\x00', 0x20000, 0x80) unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='c\x00') r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) ioctl$DIOCRTSTADDRS(r3, 0xc4504449, &(0x7f0000000b00)={{'./file0/file1\x00', './file0/file1\x00', 0x6e, 0x6}, &(0x7f0000000500)=[{@multicast1, '\x00', './file0/file1\x00', 0x9, 0x8, 0x1a, 0x8, 0xeb, 0x71, 0xb}, {@broadcast, '\x00', './file0\x00', 0x6, 0x5, 0x1a, 0x1, 0x81, 0x4}, {@multicast1, '\x00', './file0/file0/..', 0x9, 0x0, 0x18, 0xd, 0x4, 0x7f}, {@loopback, '\x00', './file0\x00', 0x6, 0x6, 0x1a, 0x6d, 0x2, 0x7, 0x7}, {@rand_addr=0x3, '\x00', './file0/file1\x00', 0x6c, 0x7f, 0x2, 0x4, 0x81, 0xc0, 0x6}, {@multicast1, '\x00', './file0/file0/..', 0x4, 0xcf89, 0x28, 0x2, 0x9, 0x96, 0x8}, {@multicast1, '\x00', './file0\x00', 0x9, 0xad, 0x2, 0x7f, 0x3, 0x9, 0x5}, {@empty, '\x00', './file0/file1\x00', 0x4, 0x5, 0x18, 0x2, 0x3, 0x1, 0x8}], 0x0, 0x8, 0x0, 0x2, 0x30000000, 0x3, 0x5c, 0x7}) openat(r2, &(0x7f0000000ac0)='./file0\x00', 0x800, 0x4) (async) openat(r2, &(0x7f0000000ac0)='./file0\x00', 0x800, 0x4) minherit(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000000)='./file0\x00', 0x30000) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x30000) readlink(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.991187545s ago: executing program 2 (id=206): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='#', 0x1}], 0x1) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000666000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2.975241321s ago: executing program 3 (id=207): r0 = semget$private(0x0, 0x0, 0x48) semop(r0, &(0x7f0000000000)=[{0x2, 0x9}, {0x2, 0x3, 0x1000}, {0x4, 0x3, 0x1800}, {0x2, 0x5, 0x1000}], 0x4) ioctl$TIOCDRAIN(0xffffffffffffff9c, 0x2000745e) ioctl$TIOCFLUSH(0xffffffffffffff9c, 0x80047410, &(0x7f0000000040)=0x9) r1 = semget(0x0, 0x1, 0x48) semctl$GETZCNT(r1, 0x1, 0x7, &(0x7f0000000080)=""/4096) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001080)={0x5, 0x3cf, 0xffffffffffffff9c}) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0xc) fstat(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r6) bind$inet6(r2, &(0x7f0000001180)={0x1c, 0x18, 0x2, 0x0, "3d23b7a848ba6559b5d96a0d95356228", 0xfffeffff}, 0x1c) getpeername$inet6(r2, &(0x7f00000011c0), &(0x7f0000001200)=0x1c) semctl$GETPID(r0, 0x1, 0x4, &(0x7f0000001240)=""/82) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000012c0)={0x0, 0x0}, 0xc) mknod(&(0x7f0000001300)='./file0\x00', 0x4, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001380)={&(0x7f0000001340)=[0xffffffff, 0x0, 0x2, 0x9, 0xb, 0x3b, 0x2, 0xb6, 0x6], 0x9, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f00000013c0)={0x0, 0x1, r2, 0x0, 0x63e}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r9, 0xc01864c1, &(0x7f0000001400)={r10, 0x3, 0xffffffffffffffff, 0x0, 0xb87}) ioctl$DIOCCLRSTATUS(r11, 0xc0284416, &(0x7f0000002440)={'./file0\x00', &(0x7f0000001440)=""/4096, 0xffffff80, 0xd0, 0x3, 0x7}) setsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000002480)={r7, r5, r4}, 0xc) r12 = semget$private(0x0, 0x0, 0x4) semctl$IPC_RMID(r12, 0x0, 0x0) ioctl$TIOCSETAW(r11, 0x802c7415, &(0x7f00000024c0)={0x2, 0x417, 0x4, 0x0, "ad4c65afeb2eb5cf90d8296403600eb0f5a9cf26", 0xfbda3731, 0x5}) r13 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002500), 0x40000, 0x0) ioctl$FIONREAD(r13, 0x4004667f, &(0x7f0000002540)) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000002580)={0x0, 0x0, 0x800, 0x0, 0x2, [], [0x8, 0xd, 0x2, 0x3], [0x4, 0x1, 0x5f03b060, 0x5], [0x935, 0x2, 0x1, 0x5]}) ioctl$DRM_IOCTL_GEM_OPEN(r11, 0xc010640b, &(0x7f0000002600)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000002640)={r14, 0x15, 0x0, 0x101, 0x3d, 0x5, r15}) setresuid(r3, r8, r8) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000002680), &(0x7f00000026c0)=0xc) 2.959115163s ago: executing program 5 (id=208): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x2b, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e699319296b4", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "ff2e77f8ffff00200000004000000001", 0x4}, 0x1c) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="aa9b2319dde055b3ed5bb3c35d5ac8346c72d9c90f0361670ce2c8b1e6fcbb225160ff30a57f84cf6afd850951f80271feda7b4197bdc6c3216ee2b129fd9204080594106c9789a5f2ecbadac6f31c72dfaf2792180560234ec446afac379e1423d9df53902079062aa6a5f41b34c438b97b6b79cccceccb465439f051c2de4c5907e08c9a632768445c4ff4ce019c3ebefd7494e5747f41fd86dc935498985bbca00955bf6f19084ab9d824f06a68cb67ac108d2b29793f992a58bab1fe864f622327d868bc4321964a08861d8f1500a02424685f", 0xd5}, {&(0x7f00000001c0)="957956d0130dfa1cd7c9105aed07989ba373ac129c04d2316900826a7e36e24fbcd2e4edcd2b330f083be6a2eac2ed283b12a0d2ce5663e806891fd556d94137326ad4ce69295127ed56129a1eb6ea1883ff4d0f5d22e88a3dc67dbe087c466a8dc866b874f8846ab47254ed6fb513c38445a1545a955f74bddab596cb366e", 0x7f}, {&(0x7f0000000240)="acc90328fd24eefe5b0f1e6207cf2aa3c70436bc530b0388a9836468858d5119c3c1c17b4c3af528707026d155ffe9ab90de9065472d6679e0211537558ce502fa3f6e3b300e4f67279b0cde137fa5e1e649a4f5fdd0877fdb5b7d7200cacde48b4d0e33212efe5ab73465bfda1313e879dcb74d8376ad37a30d7c934d77081384d9beefd260473e2bb0c06657ff1298856c53acbb2bed3fa63f8cb7386b2d008612d67d1423ba622f8476caecc16f7ebb62dee5732ec2b693b34a3fa7357fd36df6e9a051dfd2938895b67a060676dcc284d49e1b97cb12306e909a3be5dcf67ab7dcde36e1aff1e3b927f04856", 0xee}], 0x3) sendto(r0, 0x0, 0x0, 0x40a, &(0x7f0000000080)=@in6={0x1c, 0x18, 0x1, 0x4, "737a6acc8014f925b31c3b68e8cb0f85", 0x4}, 0x1c) 2.956419285s ago: executing program 6 (id=209): r0 = socket(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x7, "6e2e6b76209629ad0b16dbe94530ffc8", 0xd}, 0x1c) setsockopt(r0, 0x6, 0x4, &(0x7f00000000c0)="0000b0d6", 0x4) setsockopt(r0, 0x6, 0x8, &(0x7f00000001c0)="002d3c02", 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0xff80, 0x1, 0x5, 0x8}]}) 2.956111843s ago: executing program 5 (id=210): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "ff2e77f8ffff00200000004000000001", 0x4}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f00000002c0)=""/229, 0xe5}], 0x3, 0x0) r2 = syz_open_pts() getpeername$inet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000040)) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x1011, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f000024f000/0x4000)=nil, 0x4000, 0x5) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) 2.952478803s ago: executing program 6 (id=211): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x19d) setrlimit(0x8, &(0x7f0000000280)={0x42, 0x62}) r1 = syz_open_pts() r2 = socket(0x18, 0x2, 0x0) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f00000002c0)="03000000", 0x4) r5 = dup2(r4, r3) sendmmsg(r5, &(0x7f0000000200)={{&(0x7f0000000240)=@un=@abs={0xb0, 0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0}}, 0x38, 0x40c) setsockopt(r2, 0x1000000000029, 0x3e, &(0x7f00000001c0), 0x0) close(r1) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000080)={0x2df57366, 0x9, 0xd, 0xbffffdfb, "0a6400b7b6000000ccc7020400060000d4620300", 0x80000005, 0x4003}) writev(r1, &(0x7f00000019c0)=[{&(0x7f0000000100)="fd5282cd16a11d5bdc437c426d7d7b73f8d7444366cd3e6d328e837f69ea4615ab2335fad4de92af47ea1e9e277f8227188faab24a611d71661ee728f40724c2d771b3d6aa8e2c3e97c903545feaf785eb850905842271741e0b252d35d7086be55c7de522afb24d2fd963a5805a58bc5cd152b86a4a0154c90b1f5c27", 0x7d}], 0x1) r6 = syz_open_pts() fcntl$lock(r6, 0x8, &(0x7f00000001c0)={0x1, 0x2, 0x8000009, 0x80002ffffffff}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x145) write(r7, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x40000) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r8 = dup3(r7, r0, 0x10000) syz_open_pts() munmap(&(0x7f0000ff4000/0x2000)=nil, 0x2000) r9 = socket(0x18, 0x1, 0x0) getsockopt(r9, 0x29, 0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000200)) 1.628185414s ago: executing program 0 (id=212): r0 = socket(0x2, 0x2, 0x0) ktrace(0x0, 0x1, 0x2000, 0x0) setsockopt$inet_opts(r0, 0x0, 0x16, &(0x7f0000000040)="fd0cc085", 0x4) 1.627484121s ago: executing program 1 (id=213): r0 = socket$inet(0x2, 0x5, 0xe9) accept$inet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) r1 = getppid() fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x2, 0x2, 0x8, 0x4a, r1}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000040)={0x6, 0x8}, 0x2, &(0x7f0000000080)="1eee0031b56bac7f9bf328f3b7e292681909000000", &(0x7f0000000000)=0x15, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) munmap(&(0x7f00001fb000/0x1000)=nil, 0x1000) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000000c0)="e1a90468", 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0x200, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x8, 0x8, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20000}, {0x5, 0xdf, 0xf}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80cf, 0x1}, {0x3, 0x800, 0x100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffc, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000001, 0x44d2, 0x9}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0xffffec82, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x90) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) poll(&(0x7f0000000000), 0x35, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) 1.618712352s ago: executing program 2 (id=214): ioctl$WSDISPLAYIO_SMODE(0xffffffffffffffff, 0x8004574c, &(0x7f0000000040)=0x2) r0 = socket(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$WSDISPLAYIO_GETPARAM(r1, 0xc0205759, &(0x7f0000000140)={0x2, 0x40, 0x3, 0x4}) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0x1f84) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) ftruncate(r0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6(0x18, 0x1, 0x6) write(r0, &(0x7f0000000080)="bada902f4d63f45c80a200e3", 0xc) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x3, "ffffffffffff00000000000000000001", 0x7}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="b96aacf5ac3a146561eb3739b0a3d25c1ae41b8a086bda0c2fc5e9172222bd00fc3561b35bcb1be652a58cf7502a5408d2034f2844329a3aa4", 0x39) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000280000fed38d5ba80b9e61470c535a98000000ff0200000000000000000000000000012c"]) 1.616996485s ago: executing program 3 (id=215): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) mkdir(&(0x7f0000000100)='./file0\x00', 0x74) chmod(&(0x7f00000003c0)='./file0/file0\x00', 0x3ea) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f4003c206600000006907800000005ac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00282009078fffc13128094d3555ee04e56ede729d2fc7bad5aae07adb554dc9235d806782f59361dd4c4af6c9ee6288373317ff49414240fff5c97ca0ab80dc03e2c69271e72f123d49e6cce1f6cc950ce6c09d5a4405bedc600f59ae14a2ada20df75ba35d842accefb9ea3c167501ffbedad65e15bb97484d9dc6b3c40674cf5806221"]) (async) r1 = msgget$private(0x0, 0x1f2) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000000000)={0x1}, 0x8, 0x0) (async) getresuid(0x0, 0x0, &(0x7f0000001040)) 1.532572885s ago: executing program 5 (id=216): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x9011, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000cc0)) 1.531599744s ago: executing program 0 (id=217): openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2e6253aef7552ec0, 0x0) r0 = msgget$private(0x0, 0x1ba) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) msgrcv(r0, &(0x7f0000000240)={0x0, ""/127}, 0xfffffffffffffe8b, 0x0, 0x1800) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2e6253aef7552ec0, 0x0) (async) msgget$private(0x0, 0x1ba) (async) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x401, 0x0) (async) msgsnd(r0, 0x0, 0x401, 0x0) (async) msgrcv(r0, &(0x7f0000000240)={0x0, ""/127}, 0xfffffffffffffe8b, 0x0, 0x1800) (async) 1.530882872s ago: executing program 6 (id=218): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, r1, 0x400000000000) (async) ioctl$SPKRTONE(r1, 0x80085301, &(0x7f0000000000)={0x0, 0x613e}) close(r0) (async) r2 = syz_open_pts() sysctl$vm_swapencrypt(&(0x7f0000000680)={0x2, 0x5, 0x2}, 0x3, &(0x7f00000006c0)="ba480d9761bff3bd591f0a16e52bd33cf038ce8c23880eae565168770f69499b9c2856333d9aa911b497279fa2713fa283eb93541694bd2c1be07c00fb3667e6e935278804a1087a32c377237132b8cffbd0edba6c2f1059286d32fa61346d4cbb1f0a67c5703988f9b68f9fceb3550962bfd5fab022e54c4c6dcf1ea365be0d4082955dc3fbe1db1696d5f34a6555711818ad323b3e2e84a8c31a23daeb948b031805da1201", &(0x7f0000000780)=0xa6, &(0x7f00000007c0)="61734947e41711925249708ac1ae498b127a7a05aa70cc39c4c8d0e57776fe2e33547f0014f5f1d3d60f0c1137444eba0d8c372ec0c5b2d6e039063c2ad99949a62f82519b179481cf267d3fb2a9f38dae165fffc1542c3620f78d753fe1bc4b3a3c951a97b1e691e98c5e6e847b83b5192c6054aaf104ee909ead490ff3677da69fbdcaaeed26241b5ff75a451116f131e6dfd1e6e535e175f3159eff6b7d", 0x9f) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0xf609, 0x9, 0xfffdff80, 0x8, "04f0ee000000e31cccb30505ff22700907ffe000", 0x9, 0x20046}) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000480)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f00000004c0)={0x0, 0xfa3c3b4ede4d6fee, r2, 0x0, 0x401}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000500)={0x0, 0x0, r0, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000540)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000580)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000005c0)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000600)={&(0x7f0000000640)=[r4, r6, r5, r3, r6], 0x5}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0xffffffff, 0x40, 0x10, [{0x4, 0x3, 0x775, 0x80000201}, {0x8, 0x8, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x600000, 0x20000}, {0x5, 0xdf, 0xf}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xfffb, 0x80cf, 0x1}, {0x3, 0x800, 0x100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x3, 0x0, 0x44d2, 0x2}, {0x5, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x48}, {0x200005, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) (async) getgroups(0x5, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0]) (async) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = getgid() setregid(r9, 0x0) (async) fstat(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = getegid() setregid(r11, 0xffffffffffffffff) (async) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r14 = getgid() getgroups(0x9, &(0x7f0000000400)=[r7, r8, r9, r10, r11, r12, r13, 0x0, r14]) 1.518841547s ago: executing program 7 (id=219): setrlimit(0x8, &(0x7f0000000980)={0x47, 0x62}) sysctl$net_inet_ip(&(0x7f0000000400)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_pts() socket(0x18, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x5, 0x80000000, 0xfffffffe, 0x800, "ff14e7130b1e586ca6294000", 0x44, 0xffff}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSTAT(r2, 0x20007465) ftruncate(r1, 0x8531) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.517142444s ago: executing program 8 (id=96): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x6e, &(0x7f0000000000)={0xfffffffffffffffd, 0x6, 0xdc4, 0x564, 0x3ff, 0x1, 0x4004, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x33, 0x0, 0x32) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() preadv(r3, &(0x7f00000004c0)=[{0x0}], 0x1, 0x5) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x5b4) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 6.759582ms ago: executing program 0 (id=220): r0 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) close(0x3) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x9e) ktrace(&(0x7f0000000100)='./file0\x00', 0x2, 0x20001500, 0x0) ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) 6.265245ms ago: executing program 1 (id=221): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0xfffffffa) setsockopt(r0, 0x3ff, 0xffffffff, &(0x7f0000000200)="d2403f1672dd84aa4cd1f4f21b072c43956080f66c17a5baef2fea18780598e712132f9cf2cc9bb4b0c1461e244901040ee819f06cf5bc358e45437f87e59e1cc624fed85810ef117b8f6bc2405bcc66c5ffb24b0858ccd732f0b9ff189ac2cd72b7cd525eacf9320c2f6c4ee65cce72d26c3d90cc6d703c773c19e5d127e2c16634245cb76bb14e2df7ba6ea551bc7ec48a9740a8f4dceee9e5e56f8447b78de1c17e8d7d53dd4f9a44b4d8f69415ce040f", 0xb2) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa6c8c8fee9ea3080045f4002c206800000006907800000005ac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00']) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x7f, 0xe, 0x8, 0xfff, 0x2, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x80086409, &(0x7f0000000080)={r1, 0x101}) 5.598204ms ago: executing program 2 (id=222): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x4, 0x1, './file0\x00'}, 0xa) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0x10) recvfrom(r0, &(0x7f00000000c0)=""/33, 0x21, 0x41, &(0x7f0000000100)=@in6={0x1c, 0x18, 0x0, 0x8, "f82e6189aebbb84c5847798fa4b0d225", 0xffff}, 0x1c) r1 = semget(0x0, 0x4, 0x120) semop(r1, &(0x7f0000000140)=[{0x1, 0x4, 0x800}, {0x2, 0x2}, {0x2, 0x3, 0x1000}, {0x1, 0x8, 0x1000}, {0x0, 0x3ff, 0x1000}, {0x4, 0x6, 0x1800}], 0x6) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) r2 = socket$inet(0x2, 0x4007, 0x7) connect$inet(r2, &(0x7f0000000200)={0x10, 0x2, 0x2, 0x7ff}, 0x10) write(r2, &(0x7f0000000240)="46af92bc45d22c5c3795849ef32e608dac0278b72a8ef5cdf676886e67ade9e839274b16e4b5", 0x26) sendto$inet(r2, &(0x7f0000000280)="0cef57469d546cb567869dbe2362a607751f59322ed2e401883aab54b9e4eaa7c7e2814cc61e091c0277a417062b537d74be839d7c570a63b9f65bc756fc297330f10625dd4a2ad0023ec13321cc3799257af2d25d6b31cec2a72a3dbfef409e0d743a1c5d1de2c9529d4c181b76ee7b381ad169c3", 0x75, 0x8, &(0x7f0000000300)={0x10, 0x2, 0x2, 0x1}, 0x10) sendmmsg(0xffffffffffffff9c, &(0x7f00000007c0)={{&(0x7f0000000340)=@un=@file={0x5, 0x0, './file0\x00'}, 0xa, &(0x7f0000000540)=[{&(0x7f0000000380)="103359397a2962385cc37eb50add6123e8311a56c48adffb2fbcd14ababcff0a15a4d08138ed107cf49320f3dbbb8f28b5ff70cc5cbab78521a18b31c231fe7f47c8db5cf570d264c314cd4bf8ac1fc98cd7b04d67380b8e59932a0840b2bbcca19e8088c3619f4d19660a9ef36ca3bed74ef0dc3be0f7eb82115c4b3846e8a231e0500c08fd", 0x86}, {&(0x7f0000000440)="2581884faadb4c95f21d61e9f4c2a1213774e133f52a6f0f91ef0aeabb361b399401ecf3ef5836fcee3a1fe01e0cabb37ebef70d8c6946c73ed5", 0x3a}, {&(0x7f0000000480)="c3242b95610aa5955e56f0d4941498556185ee67bf0828e7551d95681949986ea790ef871d97a699f68943a8e582ac83586c081c75ee39f91a8915b07e3ba23e7161242bf94652484ba133da1976b381c76c3b61ff8562f098a0ce9002f1daae99a7872990333e74e06a8ad536cedf666293427770d2a976e071527286fe089dcb39b1d04815937d17e642d0c8b5f4da37e0bfe3c03f534aa1dabdbf2aca09dc8dc55518fea727dc23a323bf2d72f91531b35163", 0xb4}], 0x3, &(0x7f0000000580)=[{0xd8, 0x1, 0x0, "db02cf657f500adbadc97790e3c84ed0543e71bb052742d83cd941f596181382b86e18adfc4f9ba3145748b93b20cf7094e58ff2cbbbc06cce42eb4680bd358ac2123a1b7c1a6f3271bbe797077cea98c4ac6640b6c4897f061dd255e1dbb65f7e88650bd70e533ad29253ecb6c5f0780a4ae5e2e4eda2c369b934ae0b60f6ad286e46dea8100631b3ae90a351980e704023cc5636054288eaaea81436d4d16491bed9ad17a0d8df13d8e9616cb460fe3908998815b66c954ef29e4dd6d449775494abb5975651cbe449aec4"}, {0xc4, 0x1, 0x7, "280427199b0a43de571393a43e99ca1cb46d8a0bd816ef54e9d8bd822763b96327e63948f341666009912646725705b3b36884a86e32764a477bed7d8d0027b04e892375a4d485549bb293680cbdb4b2470c6413898e5cce24a2dc4b9820edaf0b6745b3d8d07d9cc01c8afaf02ee5375f7f431c33c88161b4210cd46f8554c3031264520cf3a005a4ccd2ea2eef8f609fd515f83b333fd59d5880b6fc473fcc39c34a64815ed671fc0bb19f4bd1d5d446d9bf58f3"}, {0x88, 0xffff, 0xe, "4cf9f183debb055c329bd585d6fbcb649978be43bdac8b355652f87ee2d5fff6f6747bf232fada5cf1edc026312eafadf6d8f6d821f9592db57f71099aee9070dae195c8ea67f7aa1bea86dafd2fa501c937013312bec5a6c34ef5a3c4fbbbb4543c1a0ecaf19dee9060e6135aa12d4491710e7fc221cdc29c"}], 0x224}}, 0x38, 0x8) r3 = open$dir(&(0x7f0000000800)='./file1\x00', 0x10000, 0x60) mknodat(r3, &(0x7f0000000840)='./file0\x00', 0x4, 0xfffffff7) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000008c0)={&(0x7f0000000880)=[0x2, 0x6, 0x1, 0xe, 0x5, 0x437d, 0x1, 0x6c4], 0x8, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000009c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000b40)={&(0x7f0000000a00)=[0x0], &(0x7f0000000a40)=[{}], &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0], 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000cc0)={&(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x1, 0x4, 0x2, 0x3, 0x708f, 0x0, 0x5, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000f40)={&(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[{}, {}, {}, {}, {}], &(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x6, 0x0, 0x0, 0xa, 0x8001, 0xee3, 0x8ef, 0x2, 0x37000000}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000001140)={&(0x7f0000000fc0)=[0x0, 0x0, 0x0], &(0x7f0000001000)=[{}, {}], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x3, 0x0, 0x0, 0x14, 0x1, 0x9, 0x8000, 0xff, 0x80000001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000001300)={&(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[{}], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0], 0x1, 0x9, 0x6, 0x0, 0x0, 0x6, 0x8, 0x1000, 0x7, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000013c0)={&(0x7f0000001380)=[r6, r7, r8, r9, r10], 0x5, 0x0, 0x0, 0x9, 0x8, 0x9, 0x5, {0x7, 0x0, 0x97, 0x800, 0x4, 0x8, 0x2, 0x4, 0x6, 0x99a2, 0x7, 0x2, 0x4000, 0x20, "2b4883de5718c0252120dad45470046759b4b565da78c8cfd414df896313593a"}}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x2000641f) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000001440), &(0x7f0000001480)=0x1c) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r4, 0xc01864c2, &(0x7f00000014c0)={0x0, 0x2, r11, 0x0, 0x6}) getpeername$unix(0xffffffffffffff9c, &(0x7f0000001500)=@abs, &(0x7f0000001540)=0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000001580)) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, r0, 0x9) 4.697013ms ago: executing program 3 (id=223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ppoll(&(0x7f0000000480)=[{r2, 0x1}, {r1, 0x80}, {r1, 0xc2}, {r0, 0x1}, {r0, 0x4}, {r1, 0x2}, {r0, 0x4}, {r1, 0x2}, {0xffffffffffffffff, 0x80}], 0x9, &(0x7f0000000540)={0x8, 0x2}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r3, 0x7fff) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x10000, 0x10) openat(r4, &(0x7f0000000400)='./file0\x00', 0x8000, 0x93) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@generic={0x2, 0x2}]}}}}}}}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0xd, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x9, 0x91c, 0xa, 0x100180, 0xfffe, 0xb8, 0x74, 0xffffffffffdffff7], [0x5438b950, 0x3, 0x1005, 0xf14, 0x6f1a683a, 0x8000001, 0x8, 0x7, 0x1, 0x3], [0x6, 0x9, 0x10000, 0x800000000a, 0x10000, 0x8, 0x100000000002], [0x100000000, 0x10803, 0x0, 0x10000000000005, 0x3, 0x200000000008], [{0x5ad, 0x7, 0x5, 0x7}, {0x2, 0x926, 0x8002}, {0x1000, 0x40, 0x1, 0x5}, {0x6, 0x8, 0x1003, 0x8000}, {0x4, 0x3, 0x2, 0x10000}, {0xeff8, 0x4, 0x5, 0xfffffffffffffffe}, {0x5f, 0xffffff7e, 0x1fb, 0x9}, {0x3, 0x10000, 0x6, 0x4}], {0x52f, 0x4, 0xfffffffc, 0x8}, {0x690, 0x3, 0x40000048, 0x80000001}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) syz_extract_tcp_res(&(0x7f0000000300), 0x2, 0x6) connect(r0, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000000c0)=@abs={0x8, 0xed4e2f4b28102231, 0x0, 0x2}, 0x8) sysctl$hw(&(0x7f0000000080)={0x6, 0x1}, 0x2, &(0x7f0000000380)="1b006b548e21", &(0x7f0000000500)=0x6, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) connect$inet(r3, &(0x7f0000000340)={0x10, 0x2, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) bind$unix(r0, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async) ppoll(&(0x7f0000000480)=[{r2, 0x1}, {r1, 0x80}, {r1, 0xc2}, {r0, 0x1}, {r0, 0x4}, {r1, 0x2}, {r0, 0x4}, {r1, 0x2}, {0xffffffffffffffff, 0x80}], 0x9, &(0x7f0000000540)={0x8, 0x2}, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) listen(r3, 0x7fff) (async) open$dir(&(0x7f00000003c0)='./file0\x00', 0x10000, 0x10) (async) openat(r4, &(0x7f0000000400)='./file0\x00', 0x8000, 0x93) (async) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@generic={0x2, 0x2}]}}}}}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0xd, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x9, 0x91c, 0xa, 0x100180, 0xfffe, 0xb8, 0x74, 0xffffffffffdffff7], [0x5438b950, 0x3, 0x1005, 0xf14, 0x6f1a683a, 0x8000001, 0x8, 0x7, 0x1, 0x3], [0x6, 0x9, 0x10000, 0x800000000a, 0x10000, 0x8, 0x100000000002], [0x100000000, 0x10803, 0x0, 0x10000000000005, 0x3, 0x200000000008], [{0x5ad, 0x7, 0x5, 0x7}, {0x2, 0x926, 0x8002}, {0x1000, 0x40, 0x1, 0x5}, {0x6, 0x8, 0x1003, 0x8000}, {0x4, 0x3, 0x2, 0x10000}, {0xeff8, 0x4, 0x5, 0xfffffffffffffffe}, {0x5f, 0xffffff7e, 0x1fb, 0x9}, {0x3, 0x10000, 0x6, 0x4}], {0x52f, 0x4, 0xfffffffc, 0x8}, {0x690, 0x3, 0x40000048, 0x80000001}}}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) (async) syz_extract_tcp_res(&(0x7f0000000300), 0x2, 0x6) (async) connect(r0, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x8, 0xed4e2f4b28102231, 0x0, 0x2}, 0x8) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x1}, 0x2, &(0x7f0000000380)="1b006b548e21", &(0x7f0000000500)=0x6, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async) connect$inet(r3, &(0x7f0000000340)={0x10, 0x2, 0x1}, 0x10) (async) 2.807185ms ago: executing program 5 (id=224): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (rerun: 32) futimes(r1, &(0x7f00000000c0)=[{0x2}, {0xbd, 0xfffffffffffffffc}]) r2 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$TIOCCHKVERAUTH(r0, 0x2000741e) (async) fchmod(r0, 0x0) (async) ioctl$BIOCPROMISC(r1, 0x20004269) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) (async) ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f00000002c0)={{'./file0\x00', './file0\x00', 0x0, 0x2}, &(0x7f0000000140)=[{@multicast1, '\x00', './file0\x00', 0x200, 0x101, 0x0, 0x2, 0xb6, 0xc9, 0xe}, {@rand_addr=0x30718986, '\x00', './file1\x00', 0x3, 0x7ff, 0x0, 0xa8, 0x7, 0x8, 0x5}, {@broadcast, '\x00', './file0\x00', 0x6, 0x5af, 0x18, 0x9, 0xff, 0x8, 0x58}, {@multicast2, '\x00', './file0\x00', 0x6, 0x800, 0x18, 0x7, 0x9, 0x6, 0x5}, {@broadcast, '\x00', './file0/file0\x00', 0x1, 0x0, 0x1a, 0x9, 0x30, 0xe, 0xf5}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x6, 0x6, 0x1a, 0x2, 0x3, 0x1, 0x2b}, {@empty, '\x00', './file0\x00', 0x5, 0x3, 0x1a, 0x16, 0xa, 0x0, 0x7}], 0x2, 0x7, 0x7, 0x10, 0x0, 0xf9c, 0x0, 0x8}) (async) fcntl$setstatus(r1, 0x4, 0x40) (async) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000740)={0x2, 0x2}) (async) write(r2, &(0x7f0000000780)="0e9c1374febc9928caec40ff9e94d3f7bf28bbd106fd51a4b3e51a9f40a280b7685269ca627cff8155eefaea116c5711f45e57f75c94c37d19432ea4618d8180e75e05e45b4d4c43b0d190763180fdaf24f6c9a514f88f364321462328", 0x5d) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000800)=0x8) (async) ioctl$TIOCSDTR(r0, 0x20007479) (async) bind$unix(r1, &(0x7f0000000840)=@file={0x3, 0x0, './file0/file0\x00'}, 0x10) (async) sendto(r0, &(0x7f0000000880)="4bb8e045b2ff46e95e22df906274ab568b9d35577439221ce988753ae8", 0x1d, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x2000641f) (async, rerun: 32) r3 = semget(0x1, 0x1, 0x500) (rerun: 32) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) getgroups(0x3, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fstat(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000a40)={{r4, r5, r6, r7, 0x101, 0x5bca, 0x0, 0x0, 0x7}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1}) (async) ioctl$BIOCPROMISC(r0, 0x20004269) ioctl$TIOCSBRK(0xffffffffffffff9c, 0x2000747b) (async) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1, 0x0) ioctl$DIOCRGETTSTATS(r8, 0xc4504440, &(0x7f0000002000)={{'./file1\x00', './file1\x00', 0x8, 0x4}, &(0x7f0000000b00)=[{'./file1\x00', './file0\x00', 0x2, 0x5}, {'./file0\x00', './file1\x00', 0x44, 0x7}, {'./file0/file0\x00', '\x00', 0x20, 0x40}, {'./file0\x00', './file0\x00', 0x5c, 0x5}, {'./file0\x00', './file0\x00', 0x6b, 0x6}], 0x5, 0x5, 0xfffffffe, 0x6, 0xd54, 0x9, 0x3a, 0x1}) closefrom(r8) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) 386.787µs ago: executing program 6 (id=225): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_pts() syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x2, 0x1, 0x5, 0x9, "590113d2200010000000fcc398b384fbdfc91000", 0x7, 0xfffffffe}) chmod(&(0x7f00000003c0)='./file0/file0\x00', 0x3ea) 0s ago: executing program 7 (id=226): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="57c100167f", 0x5}], 0x1) shmctl$SHM_LOCK(0x0, 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6, 0x65, 0x0, 0x4, 0x1, 0x0, @multicast1, @rand_addr=0x1e}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x3, 0x3, 0x41, 0x1, 0xfffe}}}}}) r0 = socket(0x2, 0x4001, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000ccc000/0x1000)=nil, &(0x7f0000685000/0x3000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fa3000/0x2000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x100000001}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x4}, {&(0x7f0000def000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x6}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d84000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000e82000/0x2000)=nil, 0x2fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x3bf87730}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x1}, {&(0x7f0000d1d000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0x20000}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc038694e, &(0x7f00000001c0)) sysctl$kern(&(0x7f0000000340)={0x1, 0x49}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000080)={0x6, 0x9, 0x5, 0x2, "1e82510e95116689f9d3dfba41cd16248fc46c76", 0xd1b, 0x9}) sendto(r0, &(0x7f0000000040)="43ab41", 0x2, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="ac25d32716b0cbfd951f86eb079d1a7e83d8de2e19138e82bfe01cbc546c76454a0b20aea88e901667bd7564d6be1310189163e33470ff197f0df854c3234fbffdcdab4fc35b44197b9ab171f5444ed15094f9cf53465c49d7928e65046eb990ace7", 0xfffffeb3, 0x0, 0x0, 0xffffffffffffff44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. Data modified on freelist: word -35183616860148 of object 0xffff800000c43cb0 size 0x3 previous type (null) (invalid addr 0x286b65551cd0be5b) panic: unhandled af 0 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 481031 29848 0 0x800 0x2000 1 syz-executor * 24242 85203 0 0x2 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834e09b2) at panic+0x1e5 unhandled_af(0) at unhandled_af+0x1a if_output_tso(ffff80000004e858,ffff80002a288720,ffff800000c43df0,fffff00070e31bb0,5dc) at if_output_tso+0x22b ip_output(fffff00067665700,0,fffff0006fd2b070,800,0,fffff0006fd2b108,5cff7b9129de5ecc) at ip_output+0x1043 tcp_output(ffff8000015b8e60) at tcp_output+0x36e3 tcp_send(ffff8000015a25f0,fffff00060885500,0,0) at tcp_send+0x191 sosend(ffff8000015a25f0,0,ffff80002a288b68,0,0,80) at sosend+0x804 dofilewritev(ffff800045ffc008,3,ffff80002a288b68,0,ffff80002a288c20) at dofilewritev+0x2bd sys_write(ffff800045ffc008,ffff80002a288cd0,ffff80002a288c20) at sys_write+0xa2 syscall(ffff80002a288cd0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a3358b552b0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: unhandled af 0 ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834e09b2) at panic+0x1e5 unhandled_af(0) at unhandled_af+0x1a if_output_tso(ffff80000004e858,ffff80002a288720,ffff800000c43df0,fffff00070e31bb0,5dc) at if_output_tso+0x22b ip_output(fffff00067665700,0,fffff0006fd2b070,800,0,fffff0006fd2b108,5cff7b9129de5ecc) at ip_output+0x1043 tcp_output(ffff8000015b8e60) at tcp_output+0x36e3 tcp_send(ffff8000015a25f0,fffff00060885500,0,0) at tcp_send+0x191 sosend(ffff8000015a25f0,0,ffff80002a288b68,0,0,80) at sosend+0x804 dofilewritev(ffff800045ffc008,3,ffff80002a288b68,0,ffff80002a288c20) at dofilewritev+0x2bd sys_write(ffff800045ffc008,ffff80002a288cd0,ffff80002a288c20) at sys_write+0xa2 syscall(ffff80002a288cd0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a3358b552b0, count: -12 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a288500 rbx 0xffffffff8392ee07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff800045ffc008 rax 0xffffffff8392dff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x531357196620b3f0 r11 0x9d70e6f423936dda r12 0xffffffff8392ec08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff8143ba05 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a2884f0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=24242 pid=85203 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=74, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffd4c8,0xffff800045ffdca0 process=0xffff800045ff5348 user=0xffff80002a283000, vmspace=0xfffff0000b1f7988 estcpu=24, cpticks=41, pctcpu=0.18, user=0, sys=22, intr=18 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 29848 481031 85203 0 7 0x800 0x2000 syz-executor 9774 519404 60171 32767 3 0x10 0x80 piperd syz-executor 37562 503567 35682 32767 3 0x10 0x80 piperd syz-executor 33883 494051 30271 32767 3 0x10 0x80 piperd syz-executor 32463 220140 79496 32767 3 0x10 0x80 piperd syz-executor 93600 173817 13517 32767 3 0x10 0x80 piperd syz-executor 79849 276425 90519 32767 3 0x10 0x80 piperd syz-executor 16184 459461 27400 32767 3 0x10 0x80 piperd syz-executor 13517 163165 85203 0 3 0x2 0x80 wait syz-executor 27400 236081 85203 0 3 0x2 0x80 wait syz-executor 35682 168654 85203 0 3 0x2 0x80 wait syz-executor 79496 273759 85203 0 3 0x2 0x80 wait syz-executor 90519 452747 85203 0 3 0x2 0x80 wait syz-executor 30271 26618 85203 0 3 0x2 0x80 wait syz-executor 60171 265199 85203 0 3 0x2 0x80 wait syz-executor *85203 24242 7079 0 7 0x2 0 syz-executor 7079 225314 5247 0 3 0x100002 0x88 sigsusp ksh 5247 291931 35245 0 3 0x10 0x88 kqread sshd-session 35245 219901 3013 0 3 0x12 0x80 kqread sshd-session 1443 128343 1 0 3 0x100003 0x80 ttyin getty 3013 131736 1 0 3 0 0x88 kqread sshd 95047 114179 58153 73 3 0x1100010 0x80 kqread syslogd 58153 341098 1 0 3 0x100002 0x80 sbwait syslogd 19718 299085 1 0 3 0x100000 0x80 kqread resolvd 5442 489512 36141 77 3 0x100012 0x80 kqread dhcpleased 9749 89609 36141 77 3 0x100012 0x80 kqread dhcpleased 36141 359012 1 0 3 0 0x80 kqread dhcpleased 30382 27636 0 0 3 0x14000 0x200 bored smr 28248 17863 0 0 3 0x14000 0x200 pgzero zerothread 8836 259724 0 0 3 0x14000 0x200 aiodoned aiodoned 80556 255894 0 0 3 0x14000 0x200 syncer update 26281 326615 0 0 3 0x14000 0x200 cleaner cleaner 46064 451349 0 0 3 0x14000 0x200 reaper reaper 30113 238094 0 0 3 0x14000 0x200 pgdaemon pagedaemon 26729 88144 0 0 3 0x14000 0x200 bored viomb 88509 9464 0 0 3 0x14000 0x40000200 acpi0 acpi0 982 361418 0 0 3 0x14000 0x40000200 idle1 12398 309951 0 0 3 0x14000 0x200 bored softnet1 32406 74714 0 0 3 0x14000 0x200 bored softnet0 28484 172197 0 0 3 0x14000 0x200 bored systqmp 70042 219923 0 0 3 0x14000 0x200 bored systq 29524 138899 0 0 3 0x14000 0x200 tmoslp softclockmp 9825 200692 0 0 3 0x14000 0x40000200 tmoslp softclock 55917 26718 0 0 3 0x14000 0x40000200 idle0 1 257155 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 29848 (syz-executor) thread 0xffff800045fe74e0 (481031) exclusive rrwlock inode r = 0 (0xfffff0007442dc60) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_create+0x4e #9 VOP_CREATE+0xfe #10 vn_open+0x50d #11 coredump+0x44b #12 sigexit+0xd7 #13 trapsignal+0x87e #14 usertrap+0x500 #15 recall_trap+0x8 exclusive rrwlock inode r = 0 (0xfffff0007126a7c8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 vn_open+0x22e #8 coredump+0x44b #9 sigexit+0xd7 #10 trapsignal+0x87e #11 usertrap+0x500 #12 recall_trap+0x8 Process 85203 (syz-executor) thread 0xffff800045ffc008 (24242) exclusive rwlock inet46 r = 0 (0xffff8000015a2610) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sosend+0x78e #3 dofilewritev+0x2bd #4 sys_write+0xa2 #5 syscall+0xbd4 #6 Xsyscall+0x128 shared rwlock netlock r = 0 (0xffffffff8395c000) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 solock_shared+0x6e #3 sosend+0x78e #4 dofilewritev+0x2bd #5 sys_write+0xa2 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff8000015a27d8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 dofilewritev+0x2bd #5 sys_write+0xa2 #6 syscall+0xbd4 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11049 12016K 12034K 166960K 12143 0 pcb 17 14K 16K 166960K 19 0 rtable 215 6K 7K 166960K 360 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 7 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 36 0 iov 0 0K 8K 166960K 9 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1288 81K 81K 166960K 1523 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 15 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 17 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 58K 121K 166960K 427 0 sigio 0 0K 0K 166960K 2 0 proc 58 99K 147K 166960K 530 0 subproc 63 3K 4K 166960K 216 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 61 0 in_multi 88 6K 7K 166960K 109 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 16 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 398 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 187 166K 201K 166960K 5331 0 UVM aobj 9 2K 2K 166960K 11 0 pinsyscall 38 76K 110K 166960K 1527 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 18 0 NDP 10 0K 2K 166960K 27 0 temp 39 9120K 9135K 166960K 4464 0 kqueue 13 20K 28K 166960K 72 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 45 0 42 1 0 1 1 0 8 0 rtentry 176 114 0 15 6 1 5 6 0 8 0 unpcb 144 390 0 375 6 5 1 6 0 8 0 syncache 336 10 0 10 1 0 1 1 0 8 1 tcpcb 736 115 0 111 4 0 4 4 0 8 3 arp 136 18 0 2 1 0 1 1 0 8 0 ipq 40 1 0 1 1 1 0 1 0 8 0 ipqe 40 2 0 2 1 1 0 1 0 8 0 inpcb 328 425 0 418 12 8 4 12 0 8 3 ip6q 72 2 0 0 1 0 1 1 0 8 0 ip6af 40 2 0 0 1 0 1 1 0 8 0 nd6 152 27 0 6 2 0 2 2 0 8 1 kcovpl 48 24 0 17 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 472 0 63 30 3 27 30 0 8 0 art_table 40 473 0 63 5 0 5 5 0 8 0 art_node 32 114 0 24 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 6 2 1 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 72 13 0 3 1 0 1 1 0 8 0 shmpl 112 8 0 2 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1931 0 448 93 0 93 93 0 8 0 ffsino 296 1931 0 448 115 0 115 115 0 8 0 nchpl 144 2444 0 746 64 0 64 64 0 8 0 vnodes 216 2156 0 0 120 0 120 120 0 8 0 namei 1024 7785 0 7783 2 1 1 2 0 8 0 percpumem 16 51 0 1 1 0 1 1 0 8 0 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scxspl 216 8490 0 8490 7 6 1 6 1 8 1 plimitpl 152 103 0 81 2 0 2 2 0 8 1 sigapl 424 690 0 645 7 1 6 7 0 8 0 knotepl 120 268 0 0 9 0 9 9 0 8 1 kqueuepl 224 116 0 107 3 0 3 3 0 8 2 pipepl 344 293 0 263 9 3 6 9 0 8 3 fdescpl 528 674 0 645 3 0 3 3 0 8 0 filepl 160 3677 0 3481 18 5 13 18 0 8 3 lockfpl 104 67 0 65 1 0 1 1 0 8 0 lockfspl 48 25 0 23 1 0 1 1 0 8 0 sessionpl 144 89 0 74 1 0 1 1 0 8 0 pgrppl 48 118 0 96 1 0 1 1 0 8 0 ucredpl 104 450 0 431 1 0 1 1 0 8 0 zombiepl 144 645 0 645 1 0 1 1 0 8 1 processpl 1232 690 0 645 5 0 5 5 0 8 0 procpl 664 1091 0 1046 7 1 6 7 0 8 1 sosppl 176 2 0 2 1 1 0 1 0 8 0 sockpl 752 869 0 844 23 17 6 23 0 8 3 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 0 15 15 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mextrefs 64 19 0 0 1 0 1 1 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 253 0 0 16 0 16 16 0 8 0 bufpl 272 2698 0 99 174 0 174 174 0 8 0 anonpl 32 7682 0 0 63 1 62 63 0 247 0 amapchunkpl 152 15995 0 15655 32 6 26 31 0 158 7 amappl16 200 1677 0 1663 14 12 2 14 0 8 0 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 402 0 401 1 0 1 1 0 8 0 amappl13 176 124 0 114 1 0 1 1 0 8 0 amappl12 168 904 0 876 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 1 0 1 0 8 0 amappl10 152 58 0 48 1 0 1 1 0 8 0 amappl9 144 272 0 272 1 1 0 1 0 8 0 amappl8 136 89 0 88 1 0 1 1 0 8 0 amappl7 128 146 0 134 1 0 1 1 0 8 0 amappl6 120 151 0 150 1 0 1 1 0 8 0 amappl5 112 97 0 90 1 0 1 1 0 8 0 amappl4 104 286 0 269 1 0 1 1 0 8 0 amappl3 96 2998 0 2918 5 1 4 4 0 8 0 amappl2 88 569 0 514 2 0 2 2 0 8 0 amappl1 80 12534 0 11993 16 1 15 16 0 8 2 amappl 88 4567 0 4443 5 0 5 5 0 92 0 uvmvnodes 80 108 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 10 0 2 1 0 1 1 0 8 0 uaddrrnd 24 674 0 645 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 674 0 645 1 0 1 1 0 8 0 vmmpekpl 168 8527 0 8478 3 0 3 3 0 8 0 vmmpepl 168 52908 0 51262 108 8 100 108 0 357 11 vmsppl 488 673 0 645 7 2 5 6 0 8 0 rwobjpl 80 17903 0 17033 28 4 24 27 0 8 1 pdppl 4096 1355 0 1290 119 38 81 95 0 8 16 pvpl 32 15850 0 0 128 0 128 128 0 265 0 pmappl 256 673 0 645 4 1 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 471 0 45 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834e09b2) at panic+0x1e5 unhandled_af(0) at unhandled_af+0x1a if_output_tso(ffff80000004e858,ffff80002a288720,ffff800000c43df0,fffff00070e31bb0,5dc) at if_output_tso+0x22b ip_output(fffff00067665700,0,fffff0006fd2b070,800,0,fffff0006fd2b108,5cff7b9129de5ecc) at ip_output+0x1043 tcp_output(ffff8000015b8e60) at tcp_output+0x36e3 tcp_send(ffff8000015a25f0,fffff00060885500,0,0) at tcp_send+0x191 sosend(ffff8000015a25f0,0,ffff80002a288b68,0,0,80) at sosend+0x804 dofilewritev(ffff800045ffc008,3,ffff80002a288b68,0,ffff80002a288c20) at dofilewritev+0x2bd sys_write(ffff800045ffc008,ffff80002a288cd0,ffff80002a288c20) at sys_write+0xa2 syscall(ffff80002a288cd0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a3358b552b0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aa75c0) at __mp_lock+0x192 __mp_acquire_count(ffffffff83aa75c0,1) at __mp_acquire_count+0x58 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 biowait(fffff0006d77cde0) at biowait+0xc6 bwrite(fffff0006d77cde0) at bwrite+0x359 ffs_update(fffff0007442dbc0,1) at ffs_update+0x2fe ufs_makeinode(8180,fffff000701b8538,ffff80002a301d50,ffff80002a301d80) at ufs_makeinode+0x4b0 ufs_create(ffff80002a301b60) at ufs_create+0x4e VOP_CREATE(fffff000701b8538,ffff80002a301d50,ffff80002a301d80,ffff80002a301be0) at VOP_CREATE+0xfe vn_open(ffff80002a301d20,306,180) at vn_open+0x50d coredump(ffff800045fe74e0) at coredump+0x44b end trace frame: 0xffff80002a301f20, count: 0 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aa75c0) at __mp_lock+0x192 __mp_acquire_count(ffffffff83aa75c0,1) at __mp_acquire_count+0x58 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 biowait(fffff0006d77cde0) at biowait+0xc6 bwrite(fffff0006d77cde0) at bwrite+0x359 ffs_update(fffff0007442dbc0,1) at ffs_update+0x2fe ufs_makeinode(8180,fffff000701b8538,ffff80002a301d50,ffff80002a301d80) at ufs_makeinode+0x4b0 ufs_create(ffff80002a301b60) at ufs_create+0x4e VOP_CREATE(fffff000701b8538,ffff80002a301d50,ffff80002a301d80,ffff80002a301be0) at VOP_CREATE+0xfe vn_open(ffff80002a301d20,306,180) at vn_open+0x50d coredump(ffff800045fe74e0) at coredump+0x44b sigexit(ffff800045fe74e0,5) at sigexit+0xd7 trapsignal(ffff800045fe74e0,5,1,1,bdd14a3067c) at trapsignal+0x87e usertrap(ffff80002a3020e0) at usertrap+0x500 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7a3358b55330, count: -18