last executing test programs:

8.440226614s ago: executing program 1 (id=2):
r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0xd92, 0xa2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0)
sysctl$kern(&(0x7f0000000100)={0x1, 0xbe21c4638e834c69}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000805102bfbfe80000000000000000000000000bb0000000000000000000027"])
r1 = setsid()
ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x22, r1)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x150)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000002c0)=@file={0x1}, 0x2, 0x0, 0x0, 0x0, 0x20, 0x401}, 0x402)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000040)='./file2\x00', 0x1c1)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$DIOCGETQUEUE(r2, 0xc148445f, &(0x7f0000000100)={0x6, 0xd8, {'\x00', '\x00', './file0\x00', './file0\x00', {{0x2000000000000100, 0x9}, {0x2e3, 0x3}, 0xfffffff8}, {{0x7fffffffffffffff, 0x8}, {0x4, 0x4}, 0xaab}, {{0xfdca, 0x8}, {0xffffffff, 0x93f5}, 0x101}, {0x1, 0x8, 0x2b, 0x3ff}, 0x0, 0x10000, 0x401, 0x9, 0x4}})

8.400195221s ago: executing program 2 (id=3):
setitimer(0x0, &(0x7f0000001280)={{0x1}, {0x0, 0x10003}}, 0x0)
setitimer(0x0, &(0x7f0000000080)={{0x3, 0x8}, {0x0, 0x3}}, 0x0)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r0 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x0}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x9}, 0x10)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102)
ioctl$FIONREAD(r1, 0xc0206917, &(0x7f0000000100))
r2 = socket(0x2, 0x4001, 0x0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
mkdir(&(0x7f00000000c0)='./file2/file0\x00', 0x2e)
unveil(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000000)='r\x00')
mkdir(&(0x7f00000001c0)='./file2/file0\x00', 0x48)

7.395932724s ago: executing program 2 (id=13):
sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
gettimeofday(&(0x7f0000000040), 0x0)

7.329783008s ago: executing program 2 (id=16):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
r2 = dup(r1)
sysctl$net_inet_tcp(&(0x7f0000003800)={0x4, 0x2, 0x6, 0x3}, 0x4, &(0x7f0000000140)="9b1809ffff", &(0x7f0000000300)=0x5, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000100)="cdf3d784c1d4", &(0x7f0000000180)=0x6, &(0x7f00000001c0)="e0e87313a9dd7b4f7b3c24ff2d17789ce56c6e6e82437f37824347f3195b1d499a4bad1eb21e0c98186031b5218fd8e141a813f021aa47ebae89188f4699656305ab855cd022acd744f690a7ecd2d3a443b0a04f77f2715826510f5571a8f28ce4ba433a0c1eab673bd915f8f6ca5870c91a346e0ce09abfa58b7f7291f24dec6b94b27fbd1d15390a6f8abdf6e5fa2ec384924c2a96ecad16bd864335bc355332906f3720bd05e6f0a55af5a176a843724826083cf3cb5dd9d5c065cd976239572b80ab247f44d90178f1523671a748530cffccdae6db92", 0xd8)
socket(0x11, 0x3, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000003c0)={0x0, 0x9, {[0x3, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xffffffffffffffff, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x8, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x20100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x411000, 0xffffffff02000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x5, 0x90000000], [{0x0, 0x4000, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffeffff, 0x280}, {0x3, 0x4, 0x2, 0xffffffffffffffff}, {0x0, 0x400, 0x7f, 0x8}, {0x1, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xe}], {0x1, 0x8, 0x80200006, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}})
r3 = semget(0x2, 0x1, 0x3c1)
semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000080)=""/101)
r4 = kqueue()
kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000000c0)={0x5, 0x5, 0x9, 0xffffff86, "ffa0a8000063267be8793b8539d9ae91001000", 0xbc, 0x8})
readv(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/205, 0xcd}], 0x1)
sysctl$hw(&(0x7f0000000040)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0)
r7 = msgget$private(0x0, 0x3d2)
msgsnd(r7, &(0x7f0000001180)=ANY=[@ANYBLOB="03"], 0x8, 0x800)
msgrcv(r7, &(0x7f0000000500)={0x0, ""/122}, 0x0, 0x0, 0x1800)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
syz_emit_ethernet(0xe0, &(0x7f0000000600)=ANY=[@ANYBLOB="04aaaaaaaaaaaaaaaaaaaabb3c0b1f8223cfd7b1229e70957fab0d41ce4cd630f8e9215a71ac69ecbd45600bb75e7c0b493f3af768107e58d23b63e067ac94250fa13f42587f635dd7e26b51f795c7d1b917ccf17dc70cc97923f8df61bbc04ad41faa7b18ed900169d4a78a8fcf8d4b2885bd4be60e9e8de46c7debacf8d53b4d54264b94d1db467634e144647d031cff26c2c0c1edcf0237873702b277ed5b2436ebf35c9ad9466947cf8f220b1f4547f5ef138c9575cf546649c9f4810039982d44425db403e4c9542870dee45cc180a0915b57f0f98de1384778e1891c61"])
utimensat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x7, 0xff}, {0x1ff, 0x1}}, 0x2)

7.32929741s ago: executing program 32 (id=16):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
r2 = dup(r1)
sysctl$net_inet_tcp(&(0x7f0000003800)={0x4, 0x2, 0x6, 0x3}, 0x4, &(0x7f0000000140)="9b1809ffff", &(0x7f0000000300)=0x5, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000100)="cdf3d784c1d4", &(0x7f0000000180)=0x6, &(0x7f00000001c0)="e0e87313a9dd7b4f7b3c24ff2d17789ce56c6e6e82437f37824347f3195b1d499a4bad1eb21e0c98186031b5218fd8e141a813f021aa47ebae89188f4699656305ab855cd022acd744f690a7ecd2d3a443b0a04f77f2715826510f5571a8f28ce4ba433a0c1eab673bd915f8f6ca5870c91a346e0ce09abfa58b7f7291f24dec6b94b27fbd1d15390a6f8abdf6e5fa2ec384924c2a96ecad16bd864335bc355332906f3720bd05e6f0a55af5a176a843724826083cf3cb5dd9d5c065cd976239572b80ab247f44d90178f1523671a748530cffccdae6db92", 0xd8)
socket(0x11, 0x3, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000003c0)={0x0, 0x9, {[0x3, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xffffffffffffffff, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x8, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x20100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x411000, 0xffffffff02000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x5, 0x90000000], [{0x0, 0x4000, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffeffff, 0x280}, {0x3, 0x4, 0x2, 0xffffffffffffffff}, {0x0, 0x400, 0x7f, 0x8}, {0x1, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xe}], {0x1, 0x8, 0x80200006, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}})
r3 = semget(0x2, 0x1, 0x3c1)
semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000080)=""/101)
r4 = kqueue()
kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000000c0)={0x5, 0x5, 0x9, 0xffffff86, "ffa0a8000063267be8793b8539d9ae91001000", 0xbc, 0x8})
readv(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/205, 0xcd}], 0x1)
sysctl$hw(&(0x7f0000000040)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0)
r7 = msgget$private(0x0, 0x3d2)
msgsnd(r7, &(0x7f0000001180)=ANY=[@ANYBLOB="03"], 0x8, 0x800)
msgrcv(r7, &(0x7f0000000500)={0x0, ""/122}, 0x0, 0x0, 0x1800)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
syz_emit_ethernet(0xe0, &(0x7f0000000600)=ANY=[@ANYBLOB="04aaaaaaaaaaaaaaaaaaaabb3c0b1f8223cfd7b1229e70957fab0d41ce4cd630f8e9215a71ac69ecbd45600bb75e7c0b493f3af768107e58d23b63e067ac94250fa13f42587f635dd7e26b51f795c7d1b917ccf17dc70cc97923f8df61bbc04ad41faa7b18ed900169d4a78a8fcf8d4b2885bd4be60e9e8de46c7debacf8d53b4d54264b94d1db467634e144647d031cff26c2c0c1edcf0237873702b277ed5b2436ebf35c9ad9466947cf8f220b1f4547f5ef138c9575cf546649c9f4810039982d44425db403e4c9542870dee45cc180a0915b57f0f98de1384778e1891c61"])
utimensat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x7, 0xff}, {0x1ff, 0x1}}, 0x2)

7.314352226s ago: executing program 1 (id=18):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53})
r0 = syz_open_pts()
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000940)={0x9, 0xfffffffffffffff7, 0x9, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, 0x0, 0x0)
sysctl$net_inet_ipip(&(0x7f0000000000)={0x4, 0x22, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x1000f66c, 0xc, 0x5, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xffffff7e, 0x8000a})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0x692}], 0x1)

6.338341718s ago: executing program 1 (id=26):
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x0, 0x0) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x3, 0x2, 0x1, 0x3, 0x8003e, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0x6}, {0x1, 0x0, 0x6, 0x1}, {0x7, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x803, 0xffff, 0xc}, {0x1, 0x4, 0x0, 0x2}, {0x7, 0x10000, 0x4, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x6, 0x5, 0x338}, {0xfffff001, 0x8000000, 0x7, 0x6}, {0x4, 0xc7cb, 0x800000}, {0x40000405, 0x10a, 0x5, 0xec29}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x69}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
r1 = socket(0x2, 0x8002, 0x0) (async)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r3)

6.327362722s ago: executing program 1 (id=29):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x80, "4b06a6bcff0300dba800000000000800", 0x0, 0xd})
r1 = socket(0x18, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000013c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/144, 0x90}, 0xfec}, 0x38, 0x2800, 0x0)
bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c)
setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}})
ioctl$TIOCSTOP(r0, 0x2000746f)
write(r0, &(0x7f0000000200)="a636fba650ad5ac4fee6da1a218df60b1bad4d1da3e9270e35f5d7df165ae28fbf42e0afb96547efd71a6838f7bd495bc70ca31d53c27afe10bc96bb2f184f39482d798acbfebef37501d43f9aac25f540826c20acce3bb3a5fe0ea37990ee4a2100000000f6", 0x66)

6.163189441s ago: executing program 8 (id=17):
setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x1920e, 0x8, 0xffffdf7f, 0xffffffd0, "e90300d045aaff0658e1fcbe0300ff0300009a10", 0x4000000, 0x3}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffb7b1c9e5c53686dd"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64)
fsync(r1) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x2, "bfe74995b7c19c000000000384b70816033bf400", 0x101, 0x8}) (async, rerun: 64)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="aad4436b4f82", @local={0xac, 0x14, 0x0}, @local, @multicast1}}}})

5.502891468s ago: executing program 8 (id=17):
setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x1920e, 0x8, 0xffffdf7f, 0xffffffd0, "e90300d045aaff0658e1fcbe0300ff0300009a10", 0x4000000, 0x3}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffb7b1c9e5c53686dd"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64)
fsync(r1) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x2, "bfe74995b7c19c000000000384b70816033bf400", 0x101, 0x8}) (async, rerun: 64)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="aad4436b4f82", @local={0xac, 0x14, 0x0}, @local, @multicast1}}}})

4.732447937s ago: executing program 8 (id=17):
setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x1920e, 0x8, 0xffffdf7f, 0xffffffd0, "e90300d045aaff0658e1fcbe0300ff0300009a10", 0x4000000, 0x3}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffb7b1c9e5c53686dd"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64)
fsync(r1) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x2, "bfe74995b7c19c000000000384b70816033bf400", 0x101, 0x8}) (async, rerun: 64)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="aad4436b4f82", @local={0xac, 0x14, 0x0}, @local, @multicast1}}}})

4.249966259s ago: executing program 7 (id=60):
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x28}, 0x4, &(0x7f0000000080)="00a2fca7", &(0x7f00000006c0)=0x4, 0x0, 0x0)
r0 = socket(0x11, 0x3, 0x0)
setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040)={0xffffff21, 0x7}, 0x8)
setitimer(0x2, &(0x7f00000000c0)={{0x5, 0x2000000000000004}, {0x93, 0x76}}, 0x0)
r1 = socket(0x2, 0x8002, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)

4.202636361s ago: executing program 8 (id=17):
setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x1920e, 0x8, 0xffffdf7f, 0xffffffd0, "e90300d045aaff0658e1fcbe0300ff0300009a10", 0x4000000, 0x3}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffb7b1c9e5c53686dd"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64)
fsync(r1) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x2, "bfe74995b7c19c000000000384b70816033bf400", 0x101, 0x8}) (async, rerun: 64)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="aad4436b4f82", @local={0xac, 0x14, 0x0}, @local, @multicast1}}}})

3.485503023s ago: executing program 7 (id=64):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DIOCGETRULE(r0, 0xcd604407, &(0x7f0000000100)={0x8, 0x2, 0x400, './file0\x00', './file0\x00', 0x0, "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"})
r2 = dup2(r1, r0)
readv(r2, &(0x7f0000002400)=[{&(0x7f0000000e80)=""/4096}, {&(0x7f0000001e80)=""/187}, {&(0x7f0000001f40)=""/236}, {&(0x7f0000002040)=""/244}, {&(0x7f0000002140)=""/93}, {&(0x7f00000021c0)=""/161}, {&(0x7f0000002280)=""/199}, {&(0x7f0000002380)=""/109}], 0x1)
writev(r1, &(0x7f0000000080), 0x21)
r3 = semget$private(0x0, 0x3, 0x0)
semop(r3, 0x0, 0x0)
semctl$GETZCNT(r3, 0x0, 0x7, &(0x7f0000000180))
r4 = socket(0x2, 0x1, 0x0)
r5 = socket$inet6(0x18, 0x8000, 0x9)
setsockopt(r5, 0x7, 0x6, &(0x7f0000000040)="9f737c3429c1862cbdb39b6c4959d85814b5f3df401170bec32a5f9f0d98b88dd1605bdc68e59446a6099211cd72f35d6953126c4ed17eb53af76a1624c91f87536618d8183fcf95a041af88fb8858d091268a6d35196c1c4de2ca8a8cb07f40e0616f8e6f67913f2556b32d1c6140593a495163f3d3493f5b4096cd7baceb00b591159ca2e935aea7e5545c422985c1b1d86382267cc4dc51c52c68ce4d6f314972845af1155071b07f6f211126f66020469287bb7703ba8a4b16874768670449187d6d981b058082bb4b9f8eee6303a65fa377879cba35898059", 0xdb)
r6 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r6, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x4, '\x00', 0x8007}, 0x1c)
listen(r6, 0x401)
connect(r6, &(0x7f0000000140)=@un=@file={0x4, 0x0, './file0\x00'}, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r4, &(0x7f0000000000), 0x10)

3.367596134s ago: executing program 0 (id=68):
sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="d71c4aa33752f8f01168c065f11d23ca520f000cd85b9bcd0e925b269009470bb6a1d827ac332a2209faa4ac5d858eb6b05d5df335fa999d1f5970137641a6ea9ddcec6df8", 0x45}], 0x1, 0x0, 0x4d0}, 0x402) (async)
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) (async)
flock(r0, 0x1) (async)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) (async)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = getpgid(0x0)
fcntl$dupfd(r2, 0xa, 0xffffffffffffffff) (async)
fcntl$setstatus(r3, 0x4, 0x40) (async)
fcntl$setown(r3, 0x6, r4) (async)
fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x2, 0x1, 0x9, 0x40, r4})

3.355233248s ago: executing program 7 (id=69):
setrlimit(0x3, &(0x7f0000000980)={0x100000, 0x100000})
r0 = syz_open_pts()
close(r0) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000"]) (async, rerun: 64)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async, rerun: 64)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x6, 0x401, {[0xfffefbfffffffffb, 0x21, 0x7, 0x1, 0x0, 0xc3, 0x8, 0x100, 0x0, 0x1000000000002f01, 0x4, 0x3, 0x8, 0xa8a, 0x8000007, 0xa8, 0x7fffffff, 0xfffffffffffffffd], [0x1, 0x9, 0x58, 0xffffffffffffff2e, 0x8, 0x7b97, 0x1fe, 0x2000406, 0xa], [0x41, 0xfffffffffffffffe, 0x400000000, 0x4, 0xffffffffffffffff, 0x40005, 0xffffffffffffffff], [0x200000000000ff, 0x8, 0x100000401, 0x100000000, 0xffffffffffefffff, 0x5e3f8722], [{0x0, 0x2, 0x101, 0x7d06}, {0xf7fc, 0xfffffffa, 0x5, 0x3}, {0x6, 0xb, 0x5bea, 0x200000000814}, {0x3, 0x9, 0x8, 0x8000080000001}, {0xe, 0xfffdfffe, 0xfffffffd, 0x32da87de}, {0x4, 0x2003, 0xcc, 0x4}, {0x1, 0xf, 0x9, 0x8}, {0x0, 0x200965, 0x0, 0x1}], {0x2001, 0xd, 0x10002, 0x9}, {0x1, 0x8004009, 0x5, 0x8000000000000000}}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket(0x2, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10) (async, rerun: 64)
sysctl$hw(&(0x7f0000000680)={0x6, 0xa}, 0x2, &(0x7f00000006c0)="f52e2736a6ca8ba23fb70897bba1200e95e288b8f36340dc", &(0x7f0000000740)=0x18, &(0x7f0000000780)="0ab4fb89cfc2fee8bd9b655cd929d12e7494282cb5e6107e25820b30237aa2f0f86eb9ac61ed514d3259ce61192693cfd7b1c98e11a82be27d30fe38130c6321ff71949e07bebd81b4bd7c0575edda86562614c1ff32c75d2bba537fefc069a02436ebc643e26350950943c7e3ea40a2d8a132ff8e7a619640", 0x79) (rerun: 64)
getsockname(r1, &(0x7f0000000600)=@in, &(0x7f0000000640)=0x10) (async)
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) (async, rerun: 64)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) (rerun: 64)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x3, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x803, 0xffff, 0x80cf}, {0x1, 0x4, 0x0, 0x2}, {0x7, 0x1, 0xfffffff8, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x6}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x6, 0x40}, {0x200003, 0xee2, 0x80000, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x6}, {0xffffffff, 0x8003, 0x6, 0x69}]}) (async)
r2 = syz_open_pts()
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x4, 0x1009a, 0x80005, 0x20000004, "e20788000010000000000000000400", 0x1, 0xfff})
poll(&(0x7f0000000800)=[{r1, 0x10}, {r1, 0x40}, {r2, 0x100}], 0x3, 0x10000) (async)
sendto$inet(r1, &(0x7f0000000140)="457a798326d4b81e45eeb97b91c9bd5b4d8d54545b3f5300094faa3c1fc28d6579d0e448c4a6bb3bc0774b118f6c1640c7b11a6a22d59e9fef52013e8b0fd969e3f55ebc4647ae3cc39c3bc73ae59770940bd2f75f8d604ecd9d8c31255634fedf1613477df6bad5ed80ebc5a01311fa05ecf950e70c2f79efce4e621a3e3fd18bfdd727eff87e586f0981eb1cb887ba21", 0xd5, 0x402, 0x0, 0x0) (async)
ioctl$TIOCNOTTY(r0, 0x20007471)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$BIOCGHDRCMPLT(r3, 0x40044274, &(0x7f0000000400))
r4 = syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x40978b, 0x5, 0x3e01, 0x80a1a4, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xfffeffff}) (async)
ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000440)={0x7fff, 0x14, 0x5170, 0xb48, "d01c113c923b7c36d5bceae49628a3624e25fa01", 0x1, 0xffff4e11})
r5 = open$dir(&(0x7f0000000480)='./file0\x00', 0x40000, 0x102)
readlinkat(r5, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)=""/132, 0x84)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async)
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0xa)
readv(r4, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/210, 0xd2}], 0x1)

3.34962971s ago: executing program 0 (id=71):
sysctl$hw(&(0x7f0000000000)={0x6, 0x15}, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async)
socket(0x2, 0x2, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async)
getitimer(0x0, 0xfffffffffffffffe) (async, rerun: 64)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @random="10ff8b4d7762", [], {@ipv6={0x86dd, {0x8, 0x6, "9d507a", 0x8, 0xf0, 0x3, @empty, @loopback, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) (rerun: 64)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x10, 0x2, 0x1, 0x3}, 0x10) (async, rerun: 32)
fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x1, 0x200}) (rerun: 32)

2.461489635s ago: executing program 0 (id=75):
r0 = getthrid()
kill(r0, 0x10)
setpgid(r0, r0)

2.460182629s ago: executing program 4 (id=76):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x3, &(0x7f00000003c0), 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x481, 0x0)
ioctl$DIOCGETQUEUES(r1, 0xc148445e, &(0x7f0000000140)={0x6, 0x1000, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x4c2, 0x9}, {0x8, 0x5}, 0xffffffff}, {{0x9, 0x7}, {0x80dd, 0x3}, 0xfffffff4}, {{0x3, 0x7fffffff}, {0x2}, 0x5}, {0x5a7d6f59, 0x61dbf93e, 0xffffff83, 0x955}, 0x0, 0x3, 0x0, 0x5, 0xfff}})

2.458166575s ago: executing program 5 (id=77):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = socket(0x18, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0x1c, 0x18, 0x2, 0x9, "00000000000000000000000000000001", 0xc}, 0x1c)
connect$inet6(r1, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0xfffffffe, '\x00\x00\x00\x00\x00\x00ab\x00', 0x4}, 0x1c)
sendmsg$unix(r1, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[@cred={0x18}], 0x18, 0x400}, 0x408)
ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x5})
openat$dri(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dri/renderD128\x00', 0x40000, 0x0)
issetugid()
ppoll(&(0x7f0000000140)=[{r1, 0x4}], 0x1, &(0x7f0000000180)={0x4, 0x8}, 0x0)
issetugid()
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x400000000000000c, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)

2.457538007s ago: executing program 7 (id=79):
getdents(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x1, 0x5}, {0xfffffffffffffffb, 0x8}}, 0x2) (async, rerun: 32)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (rerun: 32)
ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0x2, 0x7}) (async, rerun: 64)
r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x100, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}], 0x0, 0x0, ""/32, 0x2, 0x1}) (async)
ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000240)=0x7) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x8010, r0, 0x4) (async, rerun: 32)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) (rerun: 32)
ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f00000002c0)={0x9, 0x3, {[0x7, 0x0, 0x5, 0xfffffffffffffff7, 0x9, 0x633, 0x1, 0x6, 0x9, 0x8fd, 0xffffffffffffffff, 0x7, 0x56, 0x0, 0x401, 0x1, 0x0, 0x9], [0x8, 0x800, 0x6, 0x8, 0x40, 0xe75c, 0xfffffffffffffffb, 0x1000, 0xfffffffffffffffb, 0x800], [0x7fffffff, 0x9, 0x3, 0x7, 0x0, 0xf, 0x400000000000000], [0xff, 0x200, 0x0, 0x8, 0x80000001, 0x7], [{0x40, 0x8000, 0xffff6428, 0x4}, {0x8, 0x0, 0x9, 0x9}, {0x9, 0x8, 0x9, 0x4}, {0x0, 0x27, 0xffffff01, 0x3}, {0x3, 0xb, 0x3, 0x7}, {0xf489, 0xd, 0x3, 0x1}, {0xd7, 0x6, 0x4, 0x3}, {0x1075, 0xe02e, 0x1, 0x30a}], {0x101, 0x0, 0x101, 0x9}, {0x355, 0x5, 0xa, 0x7ff}}}) (async)
connect$inet6(r2, &(0x7f0000000500)={0x1c, 0x18, 0x2, 0x5, "2fcc3199a5e73dd8f46116819d0bfefe", 0x987}, 0x1c)
semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000540)=[0x3, 0x119, 0x202a, 0x7]) (async)
connect(r2, &(0x7f0000000580)=@un=@abs={0x2, 0x0, 0x0, 0x2}, 0x8) (async)
accept(r2, 0x0, &(0x7f00000005c0))
getpeername$unix(r2, &(0x7f0000000600)=@file={0x0, 0x0, ""/4087}, &(0x7f0000001600)=0xff9) (async)
ioctl$DIOCNATLOOK(r2, 0xc0504417, &(0x7f0000001640)={@v4=@local={0xac, 0x14, 0x0}, @v4=@loopback, @v6=@mcast2, @v4=@rand_addr=0x1, 0x800, 0x5, 0x7ff, 0xf, 0x99a, 0x9, 0x2, 0xf3, 0x2})
r3 = open(&(0x7f00000016c0)='./file0\x00', 0x4c5c8, 0x120) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
accept4(r5, &(0x7f0000001740)=@in6, &(0x7f0000001780)=0x1c, 0x4000) (async)
r6 = dup2(r4, r2)
fcntl$dupfd(r5, 0x0, r6) (async, rerun: 32)
ioctl$KDGETLED(r3, 0x40044b41, &(0x7f00000017c0)) (async, rerun: 32)
r7 = semget$private(0x0, 0x6, 0x22)
semop(r7, &(0x7f0000001800)=[{0x0, 0x1, 0x800}], 0x1) (async, rerun: 32)
write(r5, &(0x7f0000001840)="2af4f04ee8326596cb6b4575311fe8d64e2880cbc4f249103b4f2dca868335a2dc5de4570c37147c0d6fb257917f282f132e5e61e67c1ffcb94d0ef98cf5b4498a62748e7f7374b219e14e2f1502e7195161dc12c1fd28a005efd7189fb0fe524d99845fd197357a676ed19785f2eb446d8fcabfdf2cd63f3d470ef4ec996bac2b4effb8fb8443", 0x87) (rerun: 32)
connect$inet6(r2, &(0x7f0000001900)={0x1c, 0x18, 0x0, 0x1, "ea2189b823d8721ef511eeb21e3eedfb", 0x1}, 0x1c)
ioctl$DIOCGETRULESETS(r2, 0xc444443a, &(0x7f0000001940)={0x4, './file0\x00', './file0\x00'})
ioctl$VT_SETMODE(r2, 0x80087602, &(0x7f0000001dc0)={0x0, 0x1, 0x1, 0x90, 0x6}) (async)
semctl$SETALL(r7, 0x0, 0x9, &(0x7f0000001e00)=[0x9]) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e40))

2.23491083s ago: executing program 4 (id=80):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
select(0x40, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x2, 0x4, 0x8000000000000000, 0xb}, 0x0, 0x0, 0x0)
sysctl$net_inet_tcp(&(0x7f0000001140)={0x4, 0x2, 0x6, 0x16}, 0x4, 0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffea3, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0)
ioctl$VMM_IOC_CREATE(r1, 0xca605601, &(0x7f0000001300)={0x10, 0x6, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b2000/0x2000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6}, {&(0x7f000064c000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x10001}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000037b000/0x2000)=nil, 0x101}, {&(0x7f00001c8000/0x1000)=nil, &(0x7f0000274000/0x3000)=nil, 0x9076}, {&(0x7f0000740000/0x2000)=nil, &(0x7f0000285000/0x2000)=nil, 0x4}, {&(0x7f0000264000/0x3000)=nil, &(0x7f000013c000/0x4000)=nil, 0x1}, {&(0x7f0000594000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7}, {&(0x7f00001d1000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f000021f000/0x3000)=nil, &(0x7f000011b000/0x4000)=nil, 0x6}, {&(0x7f0000688000/0x4000)=nil, &(0x7f000010b000/0x4000)=nil, 0x7ff}, {&(0x7f000058e000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7ff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000435000/0x2000)=nil, 0x7}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000513000/0x1000)=nil, 0x7}, {&(0x7f00006f4000/0x4000)=nil, &(0x7f0000576000/0x3000)=nil, 0x9}], './file0\x00', 0x5, 0xb, 0x4, 0x7fff, [0xf9, 0x8, 0x504628c3, 0x7, 0x9, 0x1, 0x1, 0x0, 0x80000001, 0x87e, 0x6, 0x1, 0x3, 0x6, 0x800, 0x2, 0x5, 0xfffffffc, 0x2c, 0x6, 0x7, 0x4, 0x8001, 0x6, 0x6, 0x1, 0x0, 0xfffff570, 0x5, 0x8dc, 0x853, 0x5, 0x7, 0x2, 0x9, 0x80, 0x7, 0x8, 0x2, 0xbe8f, 0x95, 0x3, 0x3, 0x0, 0x6, 0x0, 0x40, 0x80, 0x7fffffff, 0x4, 0x0, 0x8799, 0x6, 0x10, 0x8, 0x6, 0x50, 0x9, 0xf, 0x0, 0xf9b, 0x9, 0xc, 0xb, 0x1, 0x6, 0x5, 0xffff, 0x5, 0x5, 0x40, 0x3, 0x4, 0x8, 0x1, 0x8, 0x2, 0x6, 0x5, 0x40, 0x6, 0x2, 0x7e, 0x2, 0x2, 0x3, 0xc13, 0xffffffc0, 0x8, 0x6, 0x0, 0x401, 0x4, 0x2, 0x5, 0xfffffff8, 0x8, 0x0, 0x6, 0xd1, 0x5, 0x6, 0x7f, 0x4, 0x7, 0x6, 0xa15, 0xd0e, 0xffffffff, 0x6, 0x4, 0x2, 0x8, 0x3, 0x11e188ec, 0x2, 0xcd6e, 0x100, 0x5, 0xe590, 0x6, 0x4000000, 0x0, 0x2c63, 0x0, 0x10, 0xe3d, 0x6, 0x3, 0xd600, 0x7, 0xd, 0xf9, 0x5, 0x80, 0xcc, 0x3, 0x7, 0x401, 0x1004000, 0xffffffff, 0x7, 0x8, 0x8001, 0x5, 0x80000001, 0x2, 0x975, 0x2, 0x8, 0x461, 0x567, 0x4, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0xd, 0x5f2, 0x0, 0x5, 0x0, 0x7e9884ba, 0x2, 0x8, 0xf7a8, 0x578, 0x606f70c3, 0xd832, 0x9, 0xffff848c, 0x0, 0x9, 0x4, 0x7, 0x101, 0xffff, 0x9, 0x272, 0x4, 0x6, 0x7fff, 0xf98, 0x30000, 0x9, 0x200, 0x6, 0x0, 0xfff, 0x4, 0x100, 0x7, 0xd, 0x2, 0x8001, 0x3, 0x7, 0x6, 0x3ff, 0x5, 0x7, 0x3, 0x7, 0x508c0594, 0x7, 0x8000, 0x9, 0x5, 0x8, 0x2, 0x3, 0xd70, 0x2, 0x6, 0x10, 0x6, 0xffffffff, 0x8, 0x1200000, 0x7fff, 0xae, 0x6, 0xa, 0xffffffff, 0x7fffffff, 0xc000000, 0x3, 0xfffffc07, 0xffffffff, 0x54, 0x9b, 0xfffff000, 0x2, 0x9, 0x3, 0x3, 0x7ff, 0x4, 0x91, 0x8, 0x8, 0x1, 0x7, 0x5e8, 0x4, 0x3, 0x6, 0x3, 0xcf2, 0x200, 0x0, 0xa, 0x9, 0x915, 0x5, 0x4, 0x101, 0x2c, 0x0, 0x5, 0x0, 0x3, 0x3ff, 0x2, 0x5, 0x0, 0x1, 0x0, 0xff800000, 0x9, 0x4, 0x5, 0xa, 0x5, 0x80, 0xb1, 0x6, 0x3, 0x8, 0x7f, 0x14f5, 0x1, 0x6, 0x4, 0x9, 0x0, 0x800, 0xffff9ec6, 0x5f74, 0x7ff, 0x6, 0x8001, 0x81, 0xe5, 0x0, 0x6, 0x48, 0x928, 0x80000000, 0x7fff, 0x8, 0x6, 0x5, 0xd, 0x2222900c, 0x53, 0x80000000, 0x5, 0x401, 0x3, 0x8, 0x9, 0x6, 0x5, 0xffffff0a, 0x259, 0x10001, 0xbbd3, 0x13d4, 0x0, 0x2, 0x842, 0x7f, 0x1dc0, 0x6, 0x3, 0x3, 0x7, 0xf31, 0xfffffffd, 0x0, 0x9, 0x4, 0x69e0, 0x9, 0x101, 0x1, 0x10000, 0xe, 0x8, 0x1, 0x7ff, 0x7, 0xd05, 0x2, 0x7fff, 0x4, 0x2, 0x90000000, 0x6, 0x3, 0x6, 0x1, 0x799, 0x8, 0x8001, 0x80000001, 0x8, 0x86c0, 0x8001, 0x4, 0x3ff, 0x8, 0x4, 0x100, 0x6, 0x0, 0x1, 0x2, 0x6ac6, 0x0, 0x8001, 0x3, 0xfff, 0x0, 0xcd1b, 0x6, 0x1, 0x6, 0xfffffffa, 0x0, 0xfff, 0x101, 0x8, 0x10, 0x5, 0x5, 0x9, 0x1, 0x2, 0x4, 0x8, 0x8, 0x893, 0x1, 0x9, 0x6, 0xda4, 0x3f, 0x3, 0x4, 0xf4e, 0x8, 0x6, 0x8001, 0xfffff001, 0x592, 0x2, 0x1b5497b0, 0x8, 0x6, 0x3, 0x6, 0x5, 0x5, 0x7b2, 0xf0dc, 0x9, 0x7, 0x7ff000, 0xd, 0x2, 0x9, 0x1, 0x7, 0x9, 0x9, 0xfffffff9, 0x6, 0x8001, 0x8, 0xc6, 0x0, 0x1, 0xa12, 0xfffffffa, 0x2, 0x6, 0x4, 0x8, 0x5, 0x8, 0x3, 0x7132, 0x0, 0x9, 0x8, 0x80, 0x3, 0x4f, 0x2, 0x8, 0x3, 0x9, 0x2, 0x36, 0x2, 0x2, 0xd3f, 0x0, 0x3, 0x0, 0x8, 0x9, 0xfffffffa, 0x5, 0xefe7, 0x4, 0x4, 0x1ff, 0x0, 0x5, 0x2, 0x6, 0x9, 0x0, 0x7, 0x1, 0x200, 0x5, 0x191, 0x4e8, 0x5a4e, 0xffffff81, 0x0, 0xb92, 0x10, 0x7, 0x10001, 0x8001, 0x9, 0x4, 0xa, 0x1000, 0x80000001, 0xfff00000, 0x4, 0x7, 0x9cb8, 0xffff, 0x1, 0x6, 0x5, 0x81, 0x9, 0x9, 0x10001, 0xc372, 0x2, 0x7]})
ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f0000000180)={0x5, 0x1, 0x8, './file0\x00', './file0\x00', 0x0, "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"})
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x86)
pwritev(r2, &(0x7f00000003c0), 0x0, 0x100000ba03)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r3 = socket(0x2, 0x4001, 0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
r5 = socket(0x2, 0x4001, 0x0)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
close(r6)
r7 = socket$inet(0x2, 0x1, 0x0)
listen(r7, 0x7fff)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0)
r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x196)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
pwritev(r8, &(0x7f0000000000)=[{0x0}], 0x1, 0x440000)
ftruncate(r0, 0x79c8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x800, "fe80000400000000fdff00"}, 0x1c)
unveil(0x0, &(0x7f00000012c0)='x\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
shmget$private(0x0, 0x4000, 0x140, &(0x7f0000002000/0x4000)=nil)
minherit(&(0x7f00004b9000/0x2000)=nil, 0x2000, 0x0)

2.233046507s ago: executing program 8 (id=17):
setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x1920e, 0x8, 0xffffdf7f, 0xffffffd0, "e90300d045aaff0658e1fcbe0300ff0300009a10", 0x4000000, 0x3}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffb7b1c9e5c53686dd"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64)
fsync(r1) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x2, "bfe74995b7c19c000000000384b70816033bf400", 0x101, 0x8}) (async, rerun: 64)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="aad4436b4f82", @local={0xac, 0x14, 0x0}, @local, @multicast1}}}})

1.490429948s ago: executing program 0 (id=81):
setitimer(0x0, &(0x7f00000000c0)={{0x80, 0x2}, {0xffffffff, 0x401}}, 0x0) (async)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000004c0)='w\x00') (async)
r0 = open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0xd)
poll(&(0x7f0000000080)=[{r0, 0x8}, {r0, 0x20}], 0x2, 0xa)

1.489640385s ago: executing program 3 (id=82):
open(&(0x7f0000000040)='./file0\x00', 0x8, 0x2)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)='#!', 0x2}], 0x1)
write(r1, &(0x7f0000000040)="89202009095c2a415642000000005624b77b6a0a", 0x14)
pwrite(r1, &(0x7f00000000c0)='\x00', 0x1, 0x8)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
pselect(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(r0, 0x7fff)
syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045ec002c0067000000069078ffffff1bad1400aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002a2029078fffc12020000"])

1.488487368s ago: executing program 4 (id=83):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794d)
open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa, 0x6, 0x0, 0xffffffffffffffff}, 0x80000000, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4})
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000280)=0x3, 0x4)
connect$unix(r0, &(0x7f0000000000), 0x10)
setrlimit(0x8, &(0x7f0000000980)={0x47, 0x62})
r1 = syz_open_pts()
close(r1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x7f0, 0x32578cd5, 0x9, 0x160350d, "cc14ee0d2100caa26a364fa8a325850d1ec100", 0x200003, 0xa})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r0])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
socket(0x2, 0x4001, 0x0)
r2 = fcntl$dupfd(r0, 0xc, r0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002e40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000005e69e742000000000000000000bf362c86a78e9751f5dbdbd6b917def7c260f3f9196237ba2d0488afe4ad91ece5742ff31b6523595c903139d1f4f588b1986135f320db235640c4fb7d246d21536836248ae7860a3d84db88162e600de6fa952fbee8b72b90a641cbee37aff22c77809e5b401405b1c954c6f1dc63f13e37b4019484cb586646168ddacc5a4f400911a79af8cf042ef35ef71a481a7734d52228e58f961b4a0a11470f8091cf9c760931a756d6001bae7d2e1e1472933447610a3c776b14aa767d8ef731959c2ad28c61e3f1461ee8c9f843c0beaab260a25d8b9f7c8462937a49c6c7deaa46e4", @ANYRES32], 0x10, 0x5}, 0x406)
sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4}, 0x38, 0x2000, 0x0)
ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f00000009c0)={0x10, 0x9, [{&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000701000/0x1000)=nil, 0x8001}, {&(0x7f0000399000/0x3000)=nil, &(0x7f00004f1000/0x3000)=nil, 0x2}, {&(0x7f000072d000/0x1000)=nil, &(0x7f000061a000/0x4000)=nil, 0x4}, {&(0x7f00004d0000/0x2000)=nil, &(0x7f00001ac000/0x4000)=nil, 0x8}, {&(0x7f0000763000/0x4000)=nil, &(0x7f00003bb000/0x4000)=nil, 0x9a}, {&(0x7f00004ec000/0x1000)=nil, &(0x7f0000380000/0x1000)=nil, 0x101}, {&(0x7f0000359000/0x7000)=nil, &(0x7f0000486000/0x1000)=nil, 0x3}, {&(0x7f0000001000/0x1000)=nil, &(0x7f000001c000/0x1000)=nil, 0x200}, {&(0x7f000017d000/0x1000)=nil, &(0x7f0000545000/0x4000)=nil, 0xa}, {&(0x7f000006c000/0x4000)=nil, &(0x7f00002c0000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f00005f8000/0x4000)=nil, &(0x7f000028d000/0x1000)=nil, 0x9}, {&(0x7f000000a000/0x1000)=nil, &(0x7f0000720000/0x1000)=nil, 0x7fff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000037f000/0x4000)=nil, 0x5f}, {&(0x7f0000179000/0x4000)=nil, &(0x7f0000208000/0x800000)=nil, 0x3}, {&(0x7f0000910000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5}, {&(0x7f0000796000/0x3000)=nil, &(0x7f000046d000/0x3000)=nil, 0x3}], './file0/file0/file0\x00', 0xffffffff, 0x784a1cff, 0x1, 0x1, [0x10da, 0x9, 0x6, 0x3, 0x3, 0x9, 0x2, 0xa, 0x2, 0x4, 0x1, 0xfff, 0x81, 0x10001, 0x9, 0x3, 0x1200000, 0x81, 0xa, 0xffffffff, 0x3, 0x7fffffff, 0x101, 0x194, 0xfffffc80, 0x3, 0x5, 0xfe, 0x33442aef, 0xc628, 0xd, 0xffffff81, 0x962b, 0x3, 0x2, 0x0, 0x6, 0x721, 0xe000000, 0x80000001, 0x5, 0x80000001, 0x401, 0x8000000, 0x0, 0x3, 0x9, 0xe9, 0x18f3, 0x8001, 0x5, 0x9, 0xffffffff, 0x1, 0x81, 0x8, 0x8, 0x7, 0xa, 0x7, 0x7ff, 0x400, 0xdd, 0xfffffff3, 0x7, 0x4, 0xfe, 0x3, 0xfffff001, 0x1ff, 0x2, 0x2, 0x6, 0x81, 0x7ff, 0xefd0, 0x0, 0xfffffff7, 0xe7, 0x10000, 0x3, 0xf, 0xf4f9, 0xe, 0xf2, 0x8, 0x4, 0x40, 0x200, 0x6568da48, 0x4, 0x6, 0x800, 0x8, 0x1a5e981a, 0x3ff, 0x7fffffff, 0x9, 0x0, 0x7fff, 0x6, 0x4, 0x6, 0x0, 0x100000, 0xfefe, 0x1, 0x9, 0xffffff80, 0xffff, 0x5, 0x91f7, 0x3e, 0x10, 0x6, 0x7, 0x1, 0x4, 0xf0, 0x6, 0x1, 0x9, 0x9, 0x2, 0x5, 0x1, 0x0, 0x1ce0, 0x4, 0xc8b, 0x4, 0x6, 0x4, 0x80, 0x5, 0x40, 0x7, 0x5, 0x2, 0x6713325, 0x32a2, 0x5, 0x6, 0x6, 0xdd, 0x800, 0x1c, 0x1, 0x179, 0x200, 0x5, 0x1ff, 0x10001, 0xfffffff7, 0x9, 0x8bb, 0xa223, 0xefc5, 0x4, 0xd5, 0x3ff, 0x6, 0x7, 0x1, 0x7, 0xfffffff5, 0x9, 0x80, 0xb2cb, 0x19, 0x6, 0x6, 0x8, 0x8, 0xfffffd2c, 0x7, 0x3, 0x6a6, 0xf, 0x4, 0x1, 0x1eb, 0x43, 0x4, 0xd, 0x80000000, 0x70000000, 0x4, 0xffffff74, 0x8, 0x5, 0xec0, 0x3, 0x8, 0x8, 0x101, 0x2, 0x1, 0x10000, 0x75c4e954, 0x81, 0x3, 0x9, 0x6, 0x5, 0x6, 0x2, 0x4, 0x1, 0x6, 0x9, 0x341, 0x6, 0xfffffe01, 0x5, 0xfff, 0x3, 0xa7c0, 0xb1, 0x4af9fdb6, 0x9, 0x2, 0x7f, 0x2, 0x9, 0xffff, 0x100, 0x2, 0x5, 0x80000001, 0x80000000, 0xfffffff7, 0x400, 0x5, 0x5, 0x3, 0x7a, 0x8, 0x6, 0x8, 0x2, 0xb7c, 0x47, 0xfffffffb, 0x200, 0xb, 0x9, 0xfffffff8, 0x10001, 0x8, 0x60a, 0x0, 0x8, 0x3, 0x2, 0x8, 0x7ed4, 0x1, 0x9, 0xfffffffa, 0x6, 0x8, 0x4, 0x9, 0x5, 0x1, 0xf, 0x8, 0x10, 0x8, 0x6f, 0x5, 0xfffffffa, 0x0, 0xfffffff7, 0x7, 0x3, 0xb, 0x7, 0xfffffff0, 0x3, 0x1, 0x3d61, 0x25, 0x1000, 0x7, 0x5, 0x2, 0x9, 0xa, 0x4, 0x5, 0x5, 0x1, 0x5077652e, 0x294, 0x3, 0x952, 0xb, 0x4af, 0x7, 0x8000, 0xfffffff9, 0x0, 0xff, 0x5, 0x1e0, 0xd15, 0x3, 0x5, 0x2, 0x7, 0x3, 0xfffffffd, 0xd, 0xffffffff, 0xea, 0x8, 0x7, 0x5, 0x608, 0x9, 0x1000, 0x6, 0xfffffff3, 0x200, 0xffffffb5, 0xf, 0x2b, 0x2, 0x4420, 0xe, 0x4, 0x4, 0x3, 0x5, 0x5, 0x3, 0x1, 0x8001, 0x9, 0x8, 0x3, 0xb, 0x128a, 0x3, 0xa65, 0x8, 0x7, 0x80000001, 0x8, 0x8, 0x1ff, 0xfffffff7, 0x9, 0x8, 0xd, 0xa6e0, 0x167f, 0x70b7b05c, 0x1, 0xffffffff, 0x4, 0x4, 0x6, 0x6eae, 0xe1b, 0x0, 0x9, 0x6, 0x1, 0x7fff, 0x2, 0xfffffffc, 0x4, 0x103, 0x4, 0xb, 0x3, 0xffffffff, 0xfffffff7, 0x6, 0x6, 0x24000, 0xb, 0x6, 0x0, 0xffff4102, 0x10, 0x5, 0x4, 0x8, 0x8, 0xa, 0x1, 0x6, 0x1f57, 0x2f, 0x2, 0x3, 0x1, 0x3, 0x7, 0x1, 0xc00000, 0x3, 0x3, 0x5, 0x7ff, 0x2, 0xd, 0x7, 0x2, 0x3e5f, 0xb, 0xa8, 0x8001, 0x92, 0xf0000000, 0x401, 0x2, 0xa4, 0x9, 0x1c613653, 0x0, 0x1, 0xa, 0x7, 0x5, 0x22e1, 0x400, 0xdb, 0x99, 0x2, 0x599c, 0x0, 0x8, 0x529, 0x3e, 0xffffff81, 0xfffffffd, 0x6, 0x1, 0xfffffff9, 0x6, 0x4, 0xd, 0x1, 0x2, 0x0, 0x3, 0x1, 0x0, 0x8, 0x4, 0x0, 0x4, 0x2, 0x80000000, 0x6, 0x7, 0x5, 0x5, 0xfffffffa, 0xa4, 0xc0000000, 0x2, 0xb, 0x8, 0xd, 0x3, 0x6, 0x1, 0xe, 0x7, 0x3, 0x0, 0x2, 0x1, 0x1, 0xa, 0x8001, 0x101, 0x2, 0x7, 0xd, 0x1, 0x80000000, 0x7fff, 0x8, 0xf, 0xe7, 0x0, 0x8, 0x5, 0x8, 0x2, 0x6, 0x7, 0x9, 0x8, 0x9, 0x80000000, 0x9, 0x7, 0x2, 0x9, 0x10001, 0x3ff, 0x7c, 0xe2, 0x5]})
r5 = syz_open_pts()
syz_open_pts()
flock(r5, 0x2)
syz_open_pts()
socket$inet(0x2, 0x4, 0x8)
close(0x3)
socket$inet(0x2, 0x2, 0x0)

1.487792719s ago: executing program 5 (id=84):
r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x80086409, &(0x7f00000000c0)={0x0, 0x2e6b})
r1 = socket(0x18, 0x2, 0x0)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async)
getentropy(&(0x7f0000000000)=""/43, 0x2b) (async)
sysctl$kern(&(0x7f0000000100)={0x1, 0x4b}, 0x2, &(0x7f00000011c0)="71f91e5a", &(0x7f0000000000)=0x4, 0x0, 0x0) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101, 0x44, 0x6, 0x0, 0xffffffffffffffff}, 0x80000000, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}) (async)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x9, &(0x7f00000002c0)="03000000", 0x4)
setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000600)="9c8cccb829a9aa2af8d2b79b44360f28a8358cb935770e9ea5469aebd1cbe611147b925fb0e55bec7f3c9ed65c600e2b96c8d05a967b5d45adb1ee70d1c7cf7a8241610bd865bdd133fbb58c2c2dcc7b1a074b60fc49073587ed6425e273e8f4ad46986b6140ad482dc207cc9de89b0baa4ff20c6520e5a95517d996be39eba37a2383b28c73357f3941b4e9d73ac28067fffad92234931c3a6d547f7405c1bce872a5235559d067ae31ee", 0xab)
r3 = getthrid()
kill(r3, 0x12) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x1c0, 0x43}, 0x6205, 0x2a3, 0x4, 0x10, 0x1, 0x0, 0x0, 0x401, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffe})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, &(0x7f00000002c0)="71f91ece", &(0x7f0000000080)=0x4, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x52}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async)
bind(r1, &(0x7f0000000240)=@un=@file={0x6, 0x0, './file0\x00'}, 0xa)
setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000040)=0x7, 0x4) (async)
r4 = msgget$private(0x0, 0x4) (async)
wait4(r3, &(0x7f0000000200), 0x1, &(0x7f00000004c0))
fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}) (async)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x2000641e) (async)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000280)=0xc)
r7 = geteuid()
fstatat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0}, 0x2)
r10 = semget$private(0x0, 0x4, 0x650)
semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000440)={{r8, 0x0, 0x0, r9, 0x8c, 0xf6, 0x0, 0x0, 0x6}, 0x0, 0x556, 0x0, 0x0, 0x4, 0x0, 0x4}) (async)
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{r5, r6, r7, r9, 0x40, 0x1000, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0x3, 0xf7d, 0xeef, r3, r3, 0x0, 0x0, 0x6, 0x0, 0xffffffff00000001})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x5810, r0, 0x10)
semget(0x2, 0x4, 0x200)

1.487452807s ago: executing program 6 (id=85):
r0 = socket(0x2, 0x1, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="57c100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r1 = socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
shutdown(r1, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
sendto(r1, &(0x7f0000000180)="ac25d32716b0cbfd951f86eb079d1a7e83d8de2e19138e82bfe01cbc546c76454a0b20aea88e901667bd7564d6be1310189163e33470ff197f0df854c3234fbffdcdab4fc35b44197b9ab171f5444ed15094f9cf53465c49d7928e65046eb990ace7", 0xfffffeb3, 0x0, 0x0, 0xffffffffffffff44)
syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r0])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0x4ac, "ff010000000000000000000000000001", 0x9}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x4)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = socket(0x18, 0x2, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
r4 = socket(0x18, 0x2, 0x0)
bind(r4, &(0x7f00000000c0)=@in={0x10, 0x2, 0x0}, 0x1c)
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd61}, 0x200)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0xffffffff, 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r0, &(0x7f0000000000), 0x10)
r5 = socket(0x2, 0x4001, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4)
recvmmsg(r5, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7}, 0x38, 0x2801, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x200000000000b, &(0x7f0000000080)="f8", 0x1)

1.486286067s ago: executing program 7 (id=86):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') (async)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00')
unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='c\x00')
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') (async)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00')
kqueue1(0xc)

1.313316071s ago: executing program 3 (id=87):
setrlimit(0x1, &(0x7f00000000c0)={0xffff})
r0 = syz_open_pts()
syz_emit_ethernet(0x43, &(0x7f0000000440)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x35, 0x67, 0x0, 0x0, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @generic="d0c04eb4551146a7fa4d657d2ae6bc10094a1883651739b942e2dd9a1eba8973fa"}}}})
close(r0)
r1 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)=0x94ae)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0xffffff86, "ffa0a8000063267be8793b8539d9ae91001000", 0x8, 0x8})
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/39, 0x27}], 0x1)
r2 = socket(0x2, 0x8002, 0x0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
closefrom(r3)
r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x80, 0x128)
mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x14e)
ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000000040))
r5 = socket(0x18, 0x1, 0x0)
getsockopt(r5, 0x29, 0xa, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="0079a009", 0x4}], 0x1)

1.312977569s ago: executing program 6 (id=88):
r0 = socket$inet(0x2, 0x2, 0x0)
close(0x3)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f00000000c0), 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0)

1.311687561s ago: executing program 6 (id=89):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x5}, {0xdad, 0x0, 0x0, 0x10000}, {0x2, 0x0, 0x0, 0x3}]})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x3, 0x401, {[0xfffefbfffffffffb, 0x21, 0x7, 0x1, 0x0, 0xc3, 0x8, 0x100, 0x0, 0x1000000000002f01, 0x9, 0x3, 0x8, 0xa8a, 0x8000007, 0xa8, 0x7fffffff, 0xfffffffffffffffd], [0x1, 0x9, 0x58, 0xffffffffffffff2e, 0x8, 0x7b97, 0x1fe, 0x2000406, 0xa], [0x41, 0xfffffffffffffffe, 0x400000000, 0x4, 0xffffffffffffffff, 0x40004, 0xffffffffffffffff], [0x200000000000fd, 0x8, 0x100000401, 0x100000000, 0xfffeffffffefffff, 0x5e3f8722], [{0x0, 0x2, 0x101, 0x7d06}, {0xf7fc, 0xfffffffa, 0x5, 0x3}, {0x6, 0xb, 0x5bea, 0x200000000814}, {0x3, 0x9, 0x8, 0x8000080000001}, {0xe, 0xfffdfffe, 0xfffffffd, 0x32da87de}, {0x4, 0x2003, 0xcc, 0x4}, {0x1, 0xf, 0x9, 0x8}, {0x0, 0x200965, 0x0, 0x1}], {0x2001, 0xd, 0x10002, 0x9}, {0x1, 0x8004009, 0x3, 0x8000000000000000}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x1, 0x0)
connect$unix(r0, &(0x7f0000000000), 0x10)
r1 = syz_open_pts()
ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000140)={0x7, 0x4aa})
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14)
sendto$inet(r0, &(0x7f0000000140)="457a798326d4b81e45eeb97b91c9bd5b4d8d54545b3f5300094faa3c1fc28d6579d0e448c4a6bb3bc0774b118f6c1640c7b11a6a22d59e9fef52013e8b0fd969e3f55ebc4647ae3cc39c3bc73ae59770940bd2f75f8d604ecd9d8c31255634fedf1613477df6bad5ed80ebc5a01311fa05ecf950e70c2f79efce4e621a3e3fd18bfdd727eff87e586f0981eb1cb887ba21", 0xd5, 0x402, 0x0, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @local, [], {@generic={0x3c00}}})
dup(r0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = socket(0x18, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x1, 0x3, "000000ffffffff0000000000ff00", 0x4}, 0x1c)
connect$unix(r2, &(0x7f0000000b00)=@abs={0x4e, 0xe7acb8a8e3d7a412, 0x0, 0x2}, 0x8)
getpeername$unix(r2, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0)

1.161379626s ago: executing program 5 (id=90):
r0 = syz_open_pts()
ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000000)) (async)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x40)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x66, 0x8, <r2=>r1}) (async)
ioctl$TIOCSBRK(r0, 0x2000747b) (async)
r3 = syz_open_pts() (async)
closefrom(r0) (async, rerun: 32)
fstatat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0) (rerun: 32)
setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0xffffffffffffffff, r4, 0xffffffffffffffff}, 0xc)
ioctl$TIOCSCTTY(r2, 0x20007461)
ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000001f00)={{'./file0\x00', './file0\x00', 0xc, 0x7}, &(0x7f00000001c0)=[{'./file0\x00', './file0\x00', 0x60, 0x6}, {'./file0\x00', './file0\x00', 0x20, 0x5e}, {'./file0/../file0\x00', './file0\x00', 0x8, 0x6}, {'./file0\x00', './file0\x00', 0x1a, 0xa5}, {'./file0\x00', './file0\x00', 0xe, 0x1}, {'./file0\x00', './file0\x00', 0x20, 0xd}, {'./file0\x00', './file0\x00', 0x6}], 0x1, 0x7, 0x1ac, 0x8, 0x48000, 0x9, 0x0, 0x7}) (async)
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000002380)=0xd) (async)
r5 = openat$pci(0xffffffffffffff9c, &(0x7f00000023c0), 0x8008, 0x0)
r6 = fcntl$dupfd(r1, 0xa, r5)
sendto(r6, &(0x7f0000002400)="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", 0xfc, 0x400, &(0x7f0000002500)=@in6={0x1c, 0x18, 0x0, 0x2, "937e58437ae38be2f578f06e40bd25db", 0x2}, 0x1c) (async)
ioctl$TIOCSTART(r0, 0x2000746e) (async)
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000002540)=0x8)
ioctl$DIOCRGETASTATS(r2, 0xc4504447, &(0x7f00000025c0)={{'./file0/../file0\x00', './file0\x00', 0xf6, 0x6}, &(0x7f0000002580)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x3, 0x1000, 0x1a, 0x7, 0x74, 0x32, 0x7}], 0x88d, 0x1, 0x2, 0xffffb033, 0x9, 0x8000, 0x4}) (async, rerun: 32)
pipe2(&(0x7f0000002a40)={<r7=>0xffffffffffffffff}, 0x4) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000002ac0)={0x6, 0x0, &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, <r8=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000002b00)={r8}) (async, rerun: 32)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000002b40), 0x802, 0x0) (rerun: 32)
write$audio(r9, &(0x7f0000002b80)="c2f0f357dcccf28a3231fe1b8bbc8bb8a8b2fee2d8bc347a7f657851b347026673dadfe658542783f2a63e4d2d7e713f63634fbf6441f29282077a808662a6979c5b7b58970b2b4b0d77e0e1ad0db6cc1f442131056c513967dd9ae3f87ce2a814d56d5485642c3e651f90c1745284aa01341a295de7f9d77d46f5f453f7c8460ac9340f4c42a41938bc7d7c70f2f4cc593da33e96889a09b3d7cd8115189d4cd90df91f4c3e495638ad739c1f6311cb5dc971ff8068e866478463", 0xbb)
ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000002c40)=0xf) (async)
ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000002c80)=0x186a) (async)
r10 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002d00), 0x10, 0x0)
kevent(r6, &(0x7f0000002cc0)=[{{}, 0xfffffffffffffff6, 0x5c, 0x40000000, 0x1ff, 0x5}], 0x3ff, &(0x7f0000002d40)=[{{r2}, 0xfffffffffffffff9, 0x1, 0x4, 0x7, 0x5}, {{r1}, 0xfffffffffffffffa, 0x97, 0x40000000, 0x6, 0x2}, {{r3}, 0xfffffffffffffffa, 0xc, 0x1, 0xfffffffffffffffb, 0x7f}, {{r1}, 0xfffffffffffffff6, 0x0, 0xf0000000, 0xfffffffffffffff9, 0x81}, {{r0}, 0xfffffffffffffffc, 0x20, 0x2, 0x1d8, 0x3}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x0, 0xf0000000, 0xfffffffffffffffe, 0x4}, {{r10}, 0xffffffffffffffff, 0x90, 0x40, 0x5, 0x3}], 0x1, &(0x7f0000002e40)={0x7fffffffffffffff, 0xd}) (async)
r11 = getsid(0x0)
fcntl$setown(r10, 0x6, r11)
getsockname(r2, &(0x7f0000002e80)=@un=@abs, &(0x7f0000002ec0)=0x8)

1.160904039s ago: executing program 6 (id=91):
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x18, 0x8000, 0x0)
r2 = socket(0x2, 0x2, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x800, "fe80000400000000fdff00"}, 0x1c)
r5 = fcntl$dupfd(r0, 0xa, r1)
setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
select(0x40, &(0x7f0000000940)={0x9, 0xfffffffffffffff7, 0x9, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, &(0x7f00000009c0)={0xff, 0x0, 0x7, 0x7fffffffffffffff, 0x1, 0x9, 0x3, 0x8}, 0x0)
mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000e00001c2b03acc01a773e26c5f751151ba28e340679fe80000000000001"])

1.160482758s ago: executing program 0 (id=92):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000080)="e3d34addacfa6cd83ffbecdad61a3a4ebbd83810b16787", 0x17)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x37}, 0x2, &(0x7f0000000400)="7d7cf95746d8ebd63ce457581c25f87384bfe67ee9b0529acf2e0b4b2fb41ab2c5ffa2b805785ff8cafb25c04cd94a720104034296e476638a8a6913983f8d1f0a87e88c988bf05ebacf2415430e6d5fbb362617038b4d934bbf7610142e0a07bba13761dc95c4868f7c2cc33df46e6e930cf7b6cf5ed5bbf7f24e59693a0acfe384f207048d7fd5e38e4735585c7050f719cfdad5cac929c653235db33ac0fbc8c5d1e007", &(0x7f0000000200)=0xa5, &(0x7f0000000240)="dce75aab4a24a8ab69d790ba5279305cc8c454bae060920beee44123cdc1bcf89fda93c54dcf0cf6355a6894c90dcdaf608fa374fb3ad62bb2b526a87515926f62e292f8f7305434d19c6b9a1b5665000c1d0d", 0x53)
r2 = socket(0x18, 0x1, 0x0)
r3 = socket(0x2, 0x1, 0x0)
getsockopt(r3, 0x6, 0x1, 0x0, 0x0)
setsockopt(r2, 0x1000000000029, 0x3b, &(0x7f0000000040)="00fb534f", 0x4)
recvmmsg(r1, &(0x7f0000000c80)={{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/23, 0x17}], 0x1, 0x0}, 0x201f9}, 0x38, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000080)="b6240624", 0x4)
setsockopt$inet_opts(r4, 0x0, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32=r0])

1.159892302s ago: executing program 6 (id=93):
select(0xfffffffffffffd3d, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000010062000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0)

1.159252469s ago: executing program 5 (id=94):
r0 = socket(0x18, 0x2, 0x0)
getsockopt(r0, 0x29, 0x27, 0x0, 0x0)
sysctl$hw(&(0x7f00000000c0)={0x7, 0xf}, 0x2, &(0x7f0000000100)="a30a69b2", &(0x7f0000000080)=0x4, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, r0, 0x3)
socket(0x18, 0x2, 0x0) (async)
getsockopt(r0, 0x29, 0x27, 0x0, 0x0) (async)
sysctl$hw(&(0x7f00000000c0)={0x7, 0xf}, 0x2, &(0x7f0000000100)="a30a69b2", &(0x7f0000000080)=0x4, 0x0, 0x0) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, r0, 0x3) (async)

1.086124276s ago: executing program 3 (id=95):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
shutdown(r0, 0x1)
listen(r0, 0x7fff)

1.085444787s ago: executing program 5 (id=96):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000004c0)='w\x00')
writev(0xffffffffffffffff, 0x0, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
unveil(0x0, 0x0)
r0 = semget$private(0x0, 0x3, 0x25d)
fstatat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x0)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{r1, 0x0, 0x0, r2, 0x1c4, 0x7e, 0x0, 0x0, 0x5}, 0x0, 0x103, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffa})
r3 = msgget$private(0x0, 0x80)
msgsnd(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000049d2288d4131ca8a4df7b9d1d238814ade97a35f4456b47d78a129d3dd06aaf4b1bbde672105d4b209b2f45d198eee4d7a6eb393fc328d35586518ee"], 0x8, 0x800) (async)
msgsnd(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000049d2288d4131ca8a4df7b9d1d238814ade97a35f4456b47d78a129d3dd06aaf4b1bbde672105d4b209b2f45d198eee4d7a6eb393fc328d35586518ee"], 0x8, 0x800)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0xfffc, 0x1000}], 0x1)
r4 = syz_open_pts()
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f00000004c0)={0x7, 0xcf5a, 0x100000, 0x6, "560ce8a4d64fe9b5e7c2a25b906b078925adfc07", 0x4, 0xfffffff4}) (async)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f00000004c0)={0x7, 0xcf5a, 0x100000, 0x6, "560ce8a4d64fe9b5e7c2a25b906b078925adfc07", 0x4, 0xfffffff4})
closefrom(r4) (async)
closefrom(r4)
setrlimit(0x3, &(0x7f0000000980)={0xb, 0x8054}) (async)
setrlimit(0x3, &(0x7f0000000980)={0xb, 0x8054})
r5 = syz_open_pts()
close(r5) (async)
close(r5)
r6 = syz_open_pts()
ioctl$FIOASYNC(r5, 0x80047469, &(0x7f00000000c0)=0x7) (async)
ioctl$FIOASYNC(r5, 0x80047469, &(0x7f00000000c0)=0x7)
readv(r6, &(0x7f00000019c0)=[{&(0x7f0000000300)=""/240, 0xf0}], 0x1)
execve(0x0, 0x0, 0x0)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BIOCSDLT(r7, 0x8004427a, &(0x7f00000001c0)=0x9)
open$dir(&(0x7f0000000100)='./file0/file0/..\x00', 0x80, 0x2d)
ioctl$SPKRTUNE(0xffffffffffffffff, 0x20005302, &(0x7f0000000080)={0x6, 0x3}) (async)
ioctl$SPKRTUNE(0xffffffffffffffff, 0x20005302, &(0x7f0000000080)={0x6, 0x3})

1.084857323s ago: executing program 3 (id=97):
r0 = syz_open_pts()
r1 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0xfff, 0x9, 0x8, 0x3000, "bf7ea55bc09eb3f620282d670c887681892b30f0", 0x4})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x8, 0x8, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20000}, {0x5, 0xdf, 0xf}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80cf, 0x1}, {0x3, 0x800, 0x100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x44d2, 0x2}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]})
poll(&(0x7f0000000000), 0x35, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0x6, 0xd, {[0x3, 0x5, 0x6, 0x6, 0x3, 0x8000, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x9, 0x91c, 0xa, 0x100180, 0xfffe, 0xb8, 0x74, 0xffffffffffdffff7], [0x5438b950, 0x3, 0x1005, 0xf14, 0x6f1a683a, 0x8000001, 0x8, 0x7, 0x1, 0x3], [0x6, 0x9, 0x10000, 0x800000000a, 0x10000, 0x8, 0x100000000002], [0x100000000, 0x10803, 0x0, 0x10000000000005, 0x6, 0x200000000008], [{0x5ad, 0x7, 0x5, 0x7}, {0x2, 0x926, 0x8002}, {0x1000, 0x40, 0x1, 0x5}, {0x3, 0x8, 0x1003, 0x8000}, {0x4, 0x3, 0x2, 0x10000}, {0xeff8, 0x4, 0x5, 0xfffffffffffffffe}, {0x5f, 0xffffff7e, 0x1fb, 0x9}, {0x3, 0x10000, 0x6, 0x4}], {0x52f, 0x4, 0xfffffffc, 0x8}, {0x690, 0x3, 0x40000048, 0x80000001}}})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vfs_ffs(&(0x7f00000000c0)={0x4, 0x1, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x1a)
r2 = open(&(0x7f0000000000)='.\x00', 0x40, 0x2)
read(r2, 0x0, 0x0)
setitimer(0x0, &(0x7f00000000c0)={{0xffffffff, 0x2}, {0xeb, 0x8}}, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37)
r3 = semget(0x0, 0x1, 0x281)
r4 = syz_open_pts()
fcntl$lock(r4, 0x9, 0x0)
poll(&(0x7f0000000300)=[{r4, 0x100}, {r1, 0x2}, {r0, 0x2}, {r1, 0x4}, {r4, 0x10}, {r4, 0x80}, {0xffffffffffffffff, 0x8}], 0x7, 0x3)
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYRES16])
sysctl$net_inet6_ip6(&(0x7f00000000c0)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x4, &(0x7f0000000200)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370823f4dc9562c038a6eee77ead68ec80199fea385f35c62aa35fd51a36189858bfa1bb9b6ca1308137ef5196c1231deee9976ba6f2e990a5f38f2ecf849e21304d396fac7be44476859df2d7a77a10ac3ef7e62c0d0e7f74c28b51a6218c1f23a99dc99d71d6e6e913636d6ff46b613556215d090a4fc998400c1c0eb7e845c8b95", &(0x7f0000000080)=0x3, 0x0, 0x84)
kqueue()
semctl$SETVAL(r3, 0x1, 0x8, 0x0)
r5 = semget$private(0x0, 0x4, 0x114)
semctl$GETNCNT(r5, 0x2, 0x3, &(0x7f0000000000)=""/202)

1.077951791s ago: executing program 8 (id=17):
setrlimit(0x8, &(0x7f0000000000)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x1920e, 0x8, 0xffffdf7f, 0xffffffd0, "e90300d045aaff0658e1fcbe0300ff0300009a10", 0x4000000, 0x3}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffb7b1c9e5c53686dd"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64)
fsync(r1) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x2, "bfe74995b7c19c000000000384b70816033bf400", 0x101, 0x8}) (async, rerun: 64)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="aad4436b4f82", @local={0xac, 0x14, 0x0}, @local, @multicast1}}}})

62.803664ms ago: executing program 0 (id=98):
r0 = socket(0x18, 0x2, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0x8000, 0x6, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x4, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x3, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8004, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0xfffb, 0xffffbfc0, 0x808}}}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37)
sendto(r0, 0x0, 0x0, 0xe, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, 0x2}, 0x10)

58.617166ms ago: executing program 1 (id=99):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f00000000c0)={0x2f06, 0x81})
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x2, 0x8012, r1, 0x0)
futimes(r1, &(0x7f0000000040)=[{0x7, 0x9}, {0x2, 0x3}])

54.01905ms ago: executing program 3 (id=100):
getrusage(0x1, &(0x7f0000000cc0))
r0 = getpgid(0x0)
wait4(r0, 0x0, 0xb, &(0x7f0000000000))

53.322467ms ago: executing program 4 (id=101):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async)
r0 = syz_open_pts()
close(r0) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) (async)
open(&(0x7f0000000080)='./file0\x00', 0x1, 0x90) (async)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) (async)
r1 = syz_open_pts()
close(r1)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000600)={0xfffc, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xe7b, 0xfff}, {0x5, 0xfffffffe, 0x6, 0x3}, {0x2, 0xdf, 0xf, 0x3b}, {0x1, 0x7, 0x8, 0x7}, {0x800, 0xffff, 0x80cf}, {0x0, 0x8000003, 0xc5, 0x9}, {0x9, 0x1, 0xfffffff8, 0xf3ffe2eb}, {0x9, 0xfff, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x800007}, {0x4, 0xc7ce, 0x820000, 0x5}, {0x401, 0x10a, 0x9, 0x3e}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0xd54a, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x869}]}) (async)
poll(&(0x7f0000000000), 0x35, 0x0) (async)
sysctl$vfs_ffs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)="898700747868112bd54b221db0db6e843abf5aa7c1c8232389376ead09d811c09bf400953affa4592ad7f0007d7b6d3735149b1e04142331b62e4630642b3f6cf63e306e81da9ce53dd6ddfcd595c9cc978370164c1b50041347b5763a57a5", 0x5f)
setrlimit(0x8, &(0x7f0000000180)={0x48, 0x8000000000000000}) (async)
r2 = syz_open_pts()
close(r2)
syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x7f0, 0x9, 0x9, 0x160350d, "cc14ee0d2100caa26a364fa8a325850d1ec100", 0x200003, 0xa})
writev(r2, &(0x7f0000000440)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x200, 0xffff63de, 0xffff, 0x0, 0x1000008, 0x3, 0x42, 0x10, [{0x25, 0xd51, 0x6, 0x80000201}, {0x7, 0x8, 0x6, 0xffd}, {0x7, 0xfdfffffe, 0x7, 0x20001}, {0x2, 0xdc, 0x800005}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80cf, 0x4}, {0x3, 0x800, 0x100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffeae9}, {0x9b, 0xffe, 0xa, 0x7fff}, {0x3, 0xfffffff7, 0x20000005, 0x8bfd}, {0x0, 0x8000000, 0x0, 0x800007}, {0x4, 0xc7ce, 0x8, 0x5}, {0x401, 0x106, 0x92f9, 0x42}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x101, 0x1003, 0x5}, {0x9be2, 0x8001, 0x6, 0x8000069}]})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10b, 0xffff, 0x0, 0x0, 0x9}, 0xfffffffffffffff9, 0x8000000000001, 0x6, 0x5, 0xffffffffffffffff, 0x0, 0x400000000000a8, 0xffffffffffff0000, 0x0, 0x2, 0x0, 0x2})
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004604002000650000fd019078ac1400aa000000f682037f0000009078000a0001"]) (async)
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372802", 0x62, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
poll(&(0x7f0000000000), 0x35, 0x0) (async)
syz_open_pts()
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000340)="0a09a680a8951d64e4e41573f7950dee0493b969758a4951eabf4c5efd7a190e1b7f2edd8abc7ab251eae1636e92cee8e137516535fea057726e6b1d8c4080cd1178bd2ba5695e7a59765273a34542fb695f20ce17", 0x55}], 0x1)
r4 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c)
connect$inet6(r4, &(0x7f0000000280)={0x1c, 0x18, 0x2, 0x20000e92, "00000000000004f100", 0x7}, 0x1c)

51.109878ms ago: executing program 5 (id=102):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
fstatat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
connect$unix(r1, &(0x7f0000000000), 0x10) (async)
sendto$unix(r1, &(0x7f0000000040)="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", 0xffffffca, 0x0, 0x0, 0xffffffffffffff01)
closefrom(r0)

50.482521ms ago: executing program 6 (id=103):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x40a}, 0x406)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1)
write(r0, &(0x7f00000009c0)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a72f47315", 0x2c)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

49.987627ms ago: executing program 7 (id=104):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000380)='./file1\x00', 0x40, 0x4ebfac6bbaf784a)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x10000, 0x88)
lseek(r0, 0x81, 0x3d2ec6da965c54c9)
r1 = getthrid()
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x100, 0xb9624abca8c6461a)
ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x22, 0x0)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x41, &(0x7f0000000000), 0x14)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x200007, 0x7, 0x101, 0x7, 0x1, 0xffffff00, 0x10, [{0x0, 0x7, 0x4, 0x32}, {0x7, 0xfffffffc, 0x8, 0xfffffff8}, {0x9, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x8, 0x400}, {0x401, 0xffffffff, 0xe, 0x80000000}, {0x2, 0x4, 0x3, 0x99}, {0xde1, 0x1, 0x9, 0x101}, {0x7, 0x7ff, 0x14, 0x8}, {0x5, 0x7fffffff, 0x1, 0x7}, {0xfffffffe, 0x7, 0xb5, 0x88}, {0x0, 0x50001, 0x7, 0xaec}, {0x7ff, 0x9, 0x3, 0x4}, {0xb8c, 0x4, 0x5, 0x2}, {0x29a71717, 0xfffffffa, 0x2, 0x6}, {0x4, 0x80000004, 0x6}, {0x0, 0x132e, 0x2, 0xfe}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000002940)={{'./file1\x00', './file0\x00', 0x0, 0x58}, &(0x7f00000003c0)=[{'./file0\x00', './file1\x00', 0x20, 0x83}, {'./file0\x00', './file1\x00', 0x64, 0x9}, {'./file0\x00', './file0\x00', 0x41, 0x1}, {'./file1\x00', './file0\x00', 0x8, 0x81}, {'./file0\x00', './file2\x00', 0x5, 0x1}, {'./file0\x00', './file1\x00', 0x40, 0x6}, {'./file1\x00', './file1\x00', 0x40, 0xb}, {'./file2\x00', './file1\x00', 0x46, 0x2}, {'./file0\x00', './file0/file0\x00', 0x0, 0x1}], 0x4b10, 0x9, 0x7, 0x7, 0x6, 0xff, 0x20, 0x6})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
kill(r1, 0x10)

10.255099ms ago: executing program 3 (id=105):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x5, 0x8, 0x1, 0x5], 0x5, 0x4, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x8010640d, &(0x7f0000000100)={0x2, 0x7ff})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1})
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @random="eb01300eaaf8", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3b, 0x20, 0xfffd, 0x0, 0x7, 0x1, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x4, 0x4, 0x1}]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x1, 0x9}}}}})
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4)
connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x7, "fe8234022c23bdae30dd00", 0x3}, 0x1c)
connect$inet6(r3, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0xf, "6b828a583ed613e0e4369fcafaac01b1"}, 0x1c)
sysctl$hw(&(0x7f0000000280)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0)

9.902541ms ago: executing program 4 (id=106):
r0 = socket$inet(0x2, 0x2, 0x0)
close(0x3)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1)
setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0)

0s ago: executing program 4 (id=107):
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x10004)
r1 = socket(0x18, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0xfffffffe, "000000003a972a6287033a3daf616200", 0x4}, 0x1c)
r2 = socket(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "fffe0000000000000000000000000001", 0xc}, 0x1c)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts.
Data modified on freelist: word -35183672631920 of object 0xffff800000c437b0 size 0x6 previous type free (invalid addr 0xdd2d095236ed9abd)
kernel: protection fault trap, code=0
Stopped at      malloc+0x855:   movq    0x8(%rbx),%r14
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> show kasan
No such command
ddb{1}> trace
malloc(10,62,2) at malloc+0x855
amap_alloc1(20,2,0) at amap_alloc1+0x291
amap_alloc(20000,2,0) at amap_alloc+0xad
amap_copy(ffffef006d1b0b90,ffffef006d09c108,2,0,d0730f5000,d0730f5001) at amap_copy+0x6ac
uvm_fault_check(ffff80002a2d40f0,ffff80002a2d4128,ffff80002a2d4160,0) at uvm_fault_check+0x473
uvm_fault(ffffef006d1b0b90,d0730f5000,0,2) at uvm_fault+0x106
upageflttrap(ffff80002a2d4290,d0730f5888) at upageflttrap+0xa9
usertrap(ffff80002a2d4290) at usertrap+0x430
recall_trap() at recall_trap+0x8
end trace frame: 0x0, count: -9
ddb{1}> show registers
rdi               0xdd2d095236ed8abd
rsi                           0x1000    __ALIGN_SIZE
rbp               0xffff80002a2d3d90
rbx               0xdd2d095236ed9abd
rdx                                0
rcx               0xffff800045fe7a10
rax               0xffff80002999dff0
r8                      0xd0730f5000
r9                      0xd0730f5001
r10                                0
r11               0xb595721d4aa1c5d2
r12                           0x1000    __ALIGN_SIZE
r13               0xffffffff83b3e630    kmemstats+0x1880
r14                        0xa30c333    __kernel_phys_end+0x670c333
r15               0xdd2d095236ed8abd
rip               0xffffffff8310c835    malloc+0x855
cs                               0x8
rflags                       0x10286    __ALIGN_SIZE+0xf286
rsp               0xffff80002a2d3cd0
ss                                 0
malloc+0x855:   movq    0x8(%rbx),%r14
ddb{1}> show proc
PROC (syz-executor) tid=446690 pid=51200 tcnt=3 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=53, usrpri=53, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800045fe62b8,0xffffffff83a49428
    process=0xffff800045fe21d0 user=0xffff80002a2cf000, vmspace=0xffffef006d1b0b90
    estcpu=3, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 51200  212109  47303 32767  2        0x10          0           syz-executor
 51200  375830  47303 32767  3        0x10  0x4000080 netcon    syz-executor
*51200  446690  47303 32767  7        0x10  0x4000000           syz-executor
 50031   28267  24314 32767  2        0x10          0           syz-executor
 61164  166244  83991 32767  2        0x10          0           syz-executor
 23260  131218  52612 32767  2        0x10          0           syz-executor
 26181  163231  31125 32767  2        0x10          0           syz-executor
 17160  334412  55172 32767  2        0x10          0           syz-executor
 79089  308719  53794     0  2           0          0           syz-executor
 83991  197267  30041 32767  3        0x10       0x80 nanoslp   syz-executor
 55172  422834  69508 32767  3        0x10       0x80 nanoslp   syz-executor
 52612  178488  80644 32767  3        0x10       0x80 nanoslp   syz-executor
 47303  349520  38455 32767  3        0x10       0x80 nanoslp   syz-executor
 24314  331703  30235 32767  3        0x10       0x80 nanoslp   syz-executor
 78136  228604  62483 32767  2        0x10          0           syz-executor
 31125     577  33083 32767  3        0x10       0x80 nanoslp   syz-executor
 30235   41958  53794     0  3         0x2       0x80 wait      syz-executor
 30041  476105  53794     0  3         0x2       0x80 wait      syz-executor
 80644  383831  53794     0  3         0x2       0x80 wait      syz-executor
 62483  171149  53794     0  3         0x2       0x80 wait      syz-executor
 38455  454741  53794     0  3         0x2       0x80 wait      syz-executor
 33083   97908  53794     0  3         0x2       0x80 wait      syz-executor
 69508  362252  53794     0  3         0x2       0x80 wait      syz-executor
 53794  273168  73635     0  3         0x2       0x80 kqread    syz-executor
 73635  114667  95526     0  3    0x100002       0x88 sigsusp   ksh
 95526  353721  23324     0  3        0x10       0x88 kqread    sshd-session
 23324  397323  24198     0  3        0x12       0x80 kqread    sshd-session
 36517  338486      1     0  3    0x100003       0x80 ttyin     getty
 24198   47177      1     0  3           0       0x88 kqread    sshd
  1742  191446  68838    73  3   0x1100010       0x80 kqread    syslogd
 68838   80183      1     0  3    0x100002       0x80 sbwait    syslogd
 82244   43658      1     0  3    0x100000       0x80 kqread    resolvd
 93538   73164  50474    77  3    0x100012       0x80 kqread    dhcpleased
 77598   79604  50474    77  3    0x100012       0x80 kqread    dhcpleased
 50474  489574      1     0  3           0       0x80 kqread    dhcpleased
 19680  318880      0     0  3     0x14000      0x200 bored     smr
 30379  304257      0     0  2     0x14000      0x200           zerothread
 57631  220429      0     0  3     0x14000      0x200 aiodoned  aiodoned
 84001  361662      0     0  3     0x14000      0x200 syncer    update
 90934  132063      0     0  3     0x14000      0x200 cleaner   cleaner
 35708  121461      0     0  3     0x14000      0x200 reaper    reaper
 71218  289137      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
  2483     553      0     0  3     0x14000      0x200 bored     viomb
 67670  370475      0     0  3     0x14000 0x40000200 acpi0     acpi0
 12101  224855      0     0  3     0x14000 0x40000200           idle1
 47715  229736      0     0  3     0x14000      0x200 bored     softnet1
 76975  204381      0     0  3     0x14000      0x200 bored     softnet0
 67817  282009      0     0  3     0x14000      0x200 bored     systqmp
 54078  185062      0     0  3     0x14000      0x200 bored     systq
 44678  495939      0     0  3     0x14000      0x200 tmoslp    softclockmp
 63869  487250      0     0  2     0x14000 0x40000200           softclock
 58133  264047      0     0  3     0x14000 0x40000200           idle0
     1  498363      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex /syzkaller/managers/setuid/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff839c4fd8)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  malloc+0x2ef
#3  amap_alloc1+0x291
#4  amap_alloc+0xad
#5  amap_copy+0x6ac
#6  uvm_fault_check+0x473
#7  uvm_fault+0x106
#8  upageflttrap+0xa9
#9  usertrap+0x430
#10 recall_trap+0x8
Process 51200 (syz-executor) thread 0xffff800045fe7a10 (446690)
exclusive rwlock vmmaplk r = 0 (0xffffef006d1b0c90)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x430
#7  recall_trap+0x8
exclusive mutex /syzkaller/managers/setuid/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff839c4fd8)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  malloc+0x2ef
#3  amap_alloc1+0x291
#4  amap_alloc+0xad
#5  amap_copy+0x6ac
#6  uvm_fault_check+0x473
#7  uvm_fault+0x106
#8  upageflttrap+0xa9
#9  usertrap+0x430
#10 recall_trap+0x8
Process 78136 (syz-executor) thread 0xffff800045fee7e0 (228604)
exclusive rrwlock inode r = 0 (0xffffef006b4f7ea0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vget+0x2a2
#6  ufs_ihashget+0x185
#7  ffs_vget+0x8c
#8  ufs_lookup+0x1a36
#9  VOP_LOOKUP+0x6e
#10 vfs_lookup+0x963
#11 namei+0x7c5
#12 dounlinkat+0xc1
#13 syscall+0xb17
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xffffef0071044b18)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vfs_lookup+0x12b
#6  namei+0x7c5
#7  dounlinkat+0xc1
#8  syscall+0xb17
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11048  12016K   12034K 166960K     12142        0
            pcb    17     12K      12K 166960K        17        0
         rtable   217      6K       7K 166960K       359        0
             pf    29     16K      16K 166960K        31        0
         ifaddr    38      6K       7K 166960K        44        0
        ifgroup    46      2K       2K 166960K        50        0
         sysctl     3      1K       9K 166960K         8        0
       counters    68     36K      37K 166960K        70        0
       ioctlops     0      0K       4K 166960K        34        0
            iov     0      0K       2K 166960K         5        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1287     81K      81K 166960K      1450        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         3        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        15        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    23     82K     129K 166960K       285        0
           proc    58     99K     163K 166960K       509        0
        subproc    63      3K       4K 166960K       162        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        29        0
       in_multi    88      6K       7K 166960K       103        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     0      0K       0K 166960K         9        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    67    307K     307K 166960K        67        0
           exec     0      0K       1K 166960K       390        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   204    159K     186K 166960K      4030        0
       UVM aobj     5      2K       2K 166960K         6        0
     pinsyscall    44     88K     114K 166960K      1415        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         9        0
            NDP    10      0K       2K 166960K        27        0
           temp    35   9118K    9122K 166960K      4180        0
         kqueue    13     20K      27K 166960K        42        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       47    0       44     1     0     1     1     0     8    0
rtentry    176      113    0       13     6     0     6     6     0     8    1
unpcb      144      105    0       90     1     0     1     1     0     8    0
syncache   336        7    0        7     2     1     1     1     0     8    1
tcpcb      736       57    0       52     1     0     1     1     0     8    0
arp        136       18    0        2     1     0     1     1     0     8    0
inpcb      328      246    0      238     7     0     7     7     0     8    6
nd6        152       26    0        4     1     0     1     1     0     8    0
kcovpl      48       18    0       11     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      470    0       47    29     0    29    29     0     8    1
art_table   40      471    0       47     5     0     5     5     0     8    0
art_node    32      113    0       22     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        1     1     0     1     1     0     8    0
semapl      72       13    0        3     1     0     1     1     0     8    0
shmpl      112        3    0        1     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1709    0      236    93     0    93    93     0     8    0
ffsino     296     1709    0      236   114     0   114   114     0     8    0
nchpl      144     2052    0      356    64     0    64    64     0     8    0
vnodes     216     1880    0        0   105     0   105   105     0     8    0
namei      1024    6510    0     6510     2     1     1     2     0     8    1
percpumem   16       51    0        1     1     0     1     1     0     8    0
kstatmem   264       25    0        2     2     0     2     2     0     8    0
scxspl     216     7032    0     7032     3     2     1     2     1     8    1
plimitpl   152       71    0       49     2     0     2     2     0     8    1
sigapl     424      569    0      517     7     0     7     7     0     8    1
knotepl    120      289    0        0     9     0     9     9     0     8    0
kqueuepl   224       49    0       40     1     0     1     1     0     8    0
pipepl     344      198    0      168     6     0     6     6     0     8    3
fdescpl    528      553    0      518     4     0     4     4     0     8    1
filepl     160     2519    0     2322    12     0    12    12     0     8    2
lockfpl    104       20    0       18     1     0     1     1     0     8    0
lockfspl    48       10    0        8     1     0     1     1     0     8    0
sessionpl  144       38    0       22     1     0     1     1     0     8    0
pgrppl      48       63    0       40     1     0     1     1     0     8    0
ucredpl    104      266    0      248     1     0     1     1     0     8    0
zombiepl   144      518    0      517     1     0     1     1     0     8    0
processpl  1232     569    0      517     5     0     5     5     0     8    0
procpl     664      730    0      676     6     0     6     6     0     8    1
sockpl     752      399    0      373    10     0    10    10     0     8    7
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     105    0        0    14     0    14    14     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      15    0        0     2     0     2     2     0     8    0
mextrefs    64       18    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      267    0        0    17     0    17    17     0     8    0
bufpl      272     2498    0      102   160     0   160   160     0     8    0
anonpl      32     5293    0        0    43     0    43    43     0   247    0
amapchunkpl 152   11876    0    11502    33     0    33    33     0   158   13
amappl16   200     2019    0     2003     5     3     2     5     0     8    0
amappl15   192        7    0        6     1     0     1     1     0     8    0
amappl14   184      412    0      411     1     0     1     1     0     8    0
amappl13   176      128    0      117     1     0     1     1     0     8    0
amappl12   168      795    0      765     2     0     2     2     0     8    0
amappl11   160        5    0        5     1     1     0     1     0     8    0
amappl10   152       55    0       45     1     0     1     1     0     8    0
amappl9    144      272    0      272     1     1     0     1     0     8    0
amappl8    136      102    0      101     1     0     1     1     0     8    0
amappl7    128      156    0      144     1     0     1     1     0     8    0
amappl6    120      163    0      161     1     0     1     1     0     8    0
amappl5    112      105    0       98     1     0     1     1     0     8    0
amappl4    104      278    0      263     1     0     1     1     0     8    0
amappl3     96     2131    0     2043     5     1     4     4     0     8    0
amappl2     88      574    0      513     2     0     2     2     0     8    0
amappl1     80    12297    0    11665    17     0    17    17     0     8    0
amappl      88     3278    0     3141     5     0     5     5     0    92    0
uvmvnodes   80       99    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        5    0        1     1     0     1     1     0     8    0
uaddrrnd    24      553    0      518     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      553    0      518     1     0     1     1     0     8    0
vmmpekpl   168     7137    0     7089     3     0     3     3     0     8    0
vmmpepl    168    46708    0    44711   107     0   107   107     0   357    3
vmsppl     488      552    0      517     7     1     6     6     0     8    1
rwobjpl     80    17016    0    16066    26     0    26    26     0     8    0
pdppl      4096    1113    0     1034   117    32    85    99     0     8    6
pvpl        32    13574    0        0   111     1   110   111     0   265    0
pmappl     256      552    0      517     4     1     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      451    0       37    12     0    12    12     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff8392eff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
amap_pp_adjref(ffffef006e734740,1,1,ffffffff) at amap_pp_adjref+0x105
amap_adjref_anons(ffffef006e734740,1,1,ffffffff,0) at amap_adjref_anons+0x22d
uvm_unmap_detach(ffff80002a7b27e0,0) at uvm_unmap_detach+0x8a
uvm_map_teardown(ffffef006cff2210) at uvm_map_teardown+0x360
exit1(ffff800045fefca0,ff,0,1) at exit1+0x71b
sys_exit(ffff800045fefca0,ffff80002a7b29b0,ffff80002a7b2900) at sys_exit+0x1a
syscall(ffff80002a7b29b0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x79f2ed1ae8d0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      malloc+0x855:   movq    0x8(%rbx),%r14
ddb{1}> trace
malloc(10,62,2) at malloc+0x855
amap_alloc1(20,2,0) at amap_alloc1+0x291
amap_alloc(20000,2,0) at amap_alloc+0xad
amap_copy(ffffef006d1b0b90,ffffef006d09c108,2,0,d0730f5000,d0730f5001) at amap_copy+0x6ac
uvm_fault_check(ffff80002a2d40f0,ffff80002a2d4128,ffff80002a2d4160,0) at uvm_fault_check+0x473
uvm_fault(ffffef006d1b0b90,d0730f5000,0,2) at uvm_fault+0x106
upageflttrap(ffff80002a2d4290,d0730f5888) at upageflttrap+0xa9
usertrap(ffff80002a2d4290) at usertrap+0x430
recall_trap() at recall_trap+0x8
end trace frame: 0x0, count: -9