last executing test programs:

20.919604227s ago: executing program 7 (id=168):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, 0x0, 0x0)
syz_open_pts()
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
write(r0, 0x0, 0x0) (async)
syz_open_pts() (async)
socket$inet6(0x18, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0) (async)

19.328985815s ago: executing program 4 (id=159):
syz_open_pts() (async)
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
write(r0, &(0x7f0000000300)="4295", 0x2)
closefrom(r1) (async)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f}) (async)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0) (async)
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1) (async)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1)
unveil(0x0, &(0x7f0000000500)='r\x00') (async)
unveil(0x0, &(0x7f0000000500)='r\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2050, 0x672)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000ac0)={0x5, &(0x7f0000000580)=[{0x0, ""/16, [{[@v4=@local, @v4=@remote]}, {[@v6, @v4=@loopback]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v4=@local, @v4=@rand_addr]}, {[@v4=@loopback, @v6=@loopback]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v6=@empty, @v6=@ipv4={""/10, ""/2, @multicast1}]}, {[@v6=@empty, @v4=@loopback]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v6=@remote, @v6=@remote]}, {[@v4=@local]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v4=@loopback, @v4=@multicast1]}, {[@v4, @v4=@loopback]}], {}, {}, @v6=@remote}]})
r3 = socket$inet6(0x18, 0xd003, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b00), 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000b40)={0x2, &(0x7f0000000b80)=[{0x1c, 0xdd, 0xe, 0x4000000a}, {0x6, 0x8d, 0x8, 0x92}]})
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000bc0)={'tap', 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000c00)={@random="1d1339dcb61c", @empty, [], {@ipv6={0x86dd, {0xf, 0x6, "ff0700", 0x18, 0x37, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x400, 0x24, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}})
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x80, 0x8)
ioctl$TIOCSETA(r5, 0x80047466, &(0x7f00000003c0)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4})
ioctl$TIOCCBRK(r5, 0x2000747a)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000000180)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r8, r9)
setreuid(r7, r7)
socket$inet(0x2, 0x3, 0x2) (async)
r10 = socket$inet(0x2, 0x3, 0x2)
bind(r10, &(0x7f0000000240)=@in={0x10, 0x2, 0x0, 0x1}, 0x10)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r9)

19.31044264s ago: executing program 5 (id=49):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
sysctl$net_inet6_icmp6(&(0x7f0000000280)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f00000002c0)="3e6f0104", &(0x7f0000000300)=0xffffffca, 0x0, 0xfffffffffffffcf0) (async)
r0 = kqueue1(0x0)
kevent(r0, &(0x7f0000000340), 0x3ff, &(0x7f0000000380), 0xb592, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000000440)={0x0, 0x7ff, 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x4}, 0x10) (async)
r3 = syz_open_pts()
r4 = dup2(r3, r3)
openat(r4, &(0x7f0000000100)='./file0\x00', 0x4828a, 0x80) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x43) (async, rerun: 32)
mkdir(0x0, 0xe1) (async, rerun: 32)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x5d42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x8, 0x4)
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64)
unveil(0x0, &(0x7f0000000200)='x\x00') (rerun: 64)
closefrom(r5) (async)
msgctl$IPC_SET(0x0, 0xfe, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
pselect(0x2b, 0x0, &(0x7f0000000340)={0x81, 0x100000000000cb, 0x7fd, 0x5f1, 0x3, 0xf, 0x3, 0x10000}, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000380)='w\x00') (async)
open(&(0x7f0000000240)='./file0\x00', 0x200, 0xc2) (async)
seteuid(0xffffffffffffffff) (async, rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind(r6, &(0x7f0000000000)=@un=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 32)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (rerun: 32)

19.310353837s ago: executing program 7 (id=168):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, 0x0, 0x0)
syz_open_pts()
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
write(r0, 0x0, 0x0) (async)
syz_open_pts() (async)
socket$inet6(0x18, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0) (async)

16.461117112s ago: executing program 5 (id=49):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
sysctl$net_inet6_icmp6(&(0x7f0000000280)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f00000002c0)="3e6f0104", &(0x7f0000000300)=0xffffffca, 0x0, 0xfffffffffffffcf0) (async)
r0 = kqueue1(0x0)
kevent(r0, &(0x7f0000000340), 0x3ff, &(0x7f0000000380), 0xb592, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000000440)={0x0, 0x7ff, 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x4}, 0x10) (async)
r3 = syz_open_pts()
r4 = dup2(r3, r3)
openat(r4, &(0x7f0000000100)='./file0\x00', 0x4828a, 0x80) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x43) (async, rerun: 32)
mkdir(0x0, 0xe1) (async, rerun: 32)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x5d42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x8, 0x4)
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64)
unveil(0x0, &(0x7f0000000200)='x\x00') (rerun: 64)
closefrom(r5) (async)
msgctl$IPC_SET(0x0, 0xfe, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
pselect(0x2b, 0x0, &(0x7f0000000340)={0x81, 0x100000000000cb, 0x7fd, 0x5f1, 0x3, 0xf, 0x3, 0x10000}, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000380)='w\x00') (async)
open(&(0x7f0000000240)='./file0\x00', 0x200, 0xc2) (async)
seteuid(0xffffffffffffffff) (async, rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind(r6, &(0x7f0000000000)=@un=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 32)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (rerun: 32)

16.460849913s ago: executing program 6 (id=138):
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02)
mprotect(&(0x7f000016d000/0x2000)=nil, 0x2000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="7f5b92b0", &(0x7f00000000c0)=0x4, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000180)})
socket$inet(0x2, 0x3, 0x14) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f00000001c0)=0x3005)
r2 = kqueue1(0x10000)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0) (async)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0) (async)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383)
open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3) (async)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3)
r4 = kqueue1(0x10000)
r5 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
closefrom(r6)
setrlimit(0x8, &(0x7f0000000200)={0x9, 0x37e1790c})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
syz_open_pts() (async)
r7 = syz_open_pts()
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0)
ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f00000004c0)={0x100d, 0x9, 0xfff, 0x100094b, "01000000000700000000001300ff53d508aa00", 0x2800, 0x412})
write(r5, &(0x7f0000000500)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d18802000000000000003ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe8d)
socket$inet6(0x18, 0x1, 0x6) (async)
r8 = socket$inet6(0x18, 0x1, 0x6)
listen(r8, 0x0)
kevent(r4, &(0x7f0000000180)=[{{r8}, 0xffffffffffffffff, 0x1, 0x80000022, 0x6, 0x7}], 0x7d, 0x0, 0x7, 0x0)
ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000340)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
closefrom(r9)
socket$inet6(0x18, 0x2, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x7c6, 0xea)

16.460739703s ago: executing program 7 (id=168):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, 0x0, 0x0)
syz_open_pts()
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
write(r0, 0x0, 0x0) (async)
syz_open_pts() (async)
socket$inet6(0x18, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0) (async)

15.731860642s ago: executing program 0 (id=216):
mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0x39b) (async)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0])
setresgid(r1, r0, 0x0) (async)
setgroups(0x0, 0x0) (async)
chmod(&(0x7f0000000140)='./file0\x00', 0x39b) (async)
seteuid(0xffffffffffffffff) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x8f) (async)
rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00')

14.688388249s ago: executing program 1 (id=224):
open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x208, 0x0)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0xa5b, 0x5, 0x16, 0x9, &(0x7f0000000180)="eb6832940f444b0b3b827abc6ecde979cf17e360", 0x14, 0xf})
ktrace(0x0, 0x4, 0x4000101a, 0x0)
getgroups(0x7, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0])
setresgid(r2, r1, 0x0)
setresgid(0x0, 0x0, 0xffffffffffffffff)
sysctl$hw(&(0x7f0000000440)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000480), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$hw(&(0x7f0000000500)={0x6, 0x8}, 0x2, &(0x7f0000000580)="17868bb66f66fa80de9e8a82efc386e1136529", &(0x7f00000005c0)=0x13, &(0x7f0000000600)="09a5ab02336a644d46a916f057c0bea6ff2ee97b5171ee5e856ef6578b980bc074eaa7ed78ef9d69ca1ffb307753c6101fad43d5043635585a6e44b7da4b80b60a4d462260aaed8c860950c8ecfa0435a4ab25db46ada0e110e75ccba13374a13af8b4cc55ecf1190cf22134da4c1595c4aee69dd2057971e2e44bea719921f6549d97509e8089365cde8aa51d67a78c8c02f33f56d32939ff339e833c4948f3dc4b5fd98a7d3abd2403288e687e3cebe80569759b3c205354721dcc14925dcf1bc5329e073cb2b42c4420c2d5", 0xcd)
sysctl$hw(&(0x7f00000004c0)={0x6, 0x12}, 0x2, &(0x7f0000000500), &(0x7f0000000540), 0x0, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000700)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r4 = socket$inet6(0x18, 0x2, 0x0)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000740)=0x7)
ioctl$TIOCSETA(r3, 0x80047466, &(0x7f0000000040)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4})
ioctl$DIOCGETQUEUES(r3, 0xc148445e, &(0x7f0000000200)={0x7b8, 0xff, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x3, 0xd3ac}, {0x9, 0x7}, 0x3ff}, {{0x4, 0x795}, {0x3, 0x2}, 0x7}, {{0x1000000, 0x3d}, {0x1, 0x6}, 0x2}, {0xa6, 0x6, 0x200, 0x7fff}, 0x0, 0xfffff6a1, 0x6, 0xd, 0xfffffffb}})
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
ioctl$DIOCSETHOSTID(r5, 0xc0044456, &(0x7f00000003c0)=0x6)
read(r5, 0x0, 0x0)
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0)
ioctl$DIOCGETSYNFLWATS(r5, 0xc0084463, &(0x7f0000000400))

14.687925503s ago: executing program 4 (id=159):
syz_open_pts() (async)
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
write(r0, &(0x7f0000000300)="4295", 0x2)
closefrom(r1) (async)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f}) (async)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0) (async)
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1) (async)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1)
unveil(0x0, &(0x7f0000000500)='r\x00') (async)
unveil(0x0, &(0x7f0000000500)='r\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2050, 0x672)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000ac0)={0x5, &(0x7f0000000580)=[{0x0, ""/16, [{[@v4=@local, @v4=@remote]}, {[@v6, @v4=@loopback]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v4=@local, @v4=@rand_addr]}, {[@v4=@loopback, @v6=@loopback]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v6=@empty, @v6=@ipv4={""/10, ""/2, @multicast1}]}, {[@v6=@empty, @v4=@loopback]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v6=@remote, @v6=@remote]}, {[@v4=@local]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v4=@loopback, @v4=@multicast1]}, {[@v4, @v4=@loopback]}], {}, {}, @v6=@remote}]})
r3 = socket$inet6(0x18, 0xd003, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b00), 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000b40)={0x2, &(0x7f0000000b80)=[{0x1c, 0xdd, 0xe, 0x4000000a}, {0x6, 0x8d, 0x8, 0x92}]})
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000bc0)={'tap', 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000c00)={@random="1d1339dcb61c", @empty, [], {@ipv6={0x86dd, {0xf, 0x6, "ff0700", 0x18, 0x37, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x400, 0x24, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}})
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x80, 0x8)
ioctl$TIOCSETA(r5, 0x80047466, &(0x7f00000003c0)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4})
ioctl$TIOCCBRK(r5, 0x2000747a)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000000180)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r8, r9)
setreuid(r7, r7)
socket$inet(0x2, 0x3, 0x2) (async)
r10 = socket$inet(0x2, 0x3, 0x2)
bind(r10, &(0x7f0000000240)=@in={0x10, 0x2, 0x0, 0x1}, 0x10)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r9)

14.687701593s ago: executing program 6 (id=138):
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02)
mprotect(&(0x7f000016d000/0x2000)=nil, 0x2000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="7f5b92b0", &(0x7f00000000c0)=0x4, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000180)})
socket$inet(0x2, 0x3, 0x14) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f00000001c0)=0x3005)
r2 = kqueue1(0x10000)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0) (async)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0) (async)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383)
open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3) (async)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3)
r4 = kqueue1(0x10000)
r5 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
closefrom(r6)
setrlimit(0x8, &(0x7f0000000200)={0x9, 0x37e1790c})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
syz_open_pts() (async)
r7 = syz_open_pts()
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0)
ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f00000004c0)={0x100d, 0x9, 0xfff, 0x100094b, "01000000000700000000001300ff53d508aa00", 0x2800, 0x412})
write(r5, &(0x7f0000000500)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d18802000000000000003ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe8d)
socket$inet6(0x18, 0x1, 0x6) (async)
r8 = socket$inet6(0x18, 0x1, 0x6)
listen(r8, 0x0)
kevent(r4, &(0x7f0000000180)=[{{r8}, 0xffffffffffffffff, 0x1, 0x80000022, 0x6, 0x7}], 0x7d, 0x0, 0x7, 0x0)
ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000340)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
closefrom(r9)
socket$inet6(0x18, 0x2, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x7c6, 0xea)

14.687572003s ago: executing program 5 (id=49):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
sysctl$net_inet6_icmp6(&(0x7f0000000280)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f00000002c0)="3e6f0104", &(0x7f0000000300)=0xffffffca, 0x0, 0xfffffffffffffcf0) (async)
r0 = kqueue1(0x0)
kevent(r0, &(0x7f0000000340), 0x3ff, &(0x7f0000000380), 0xb592, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000000440)={0x0, 0x7ff, 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x4}, 0x10) (async)
r3 = syz_open_pts()
r4 = dup2(r3, r3)
openat(r4, &(0x7f0000000100)='./file0\x00', 0x4828a, 0x80) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x43) (async, rerun: 32)
mkdir(0x0, 0xe1) (async, rerun: 32)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x5d42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x8, 0x4)
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64)
unveil(0x0, &(0x7f0000000200)='x\x00') (rerun: 64)
closefrom(r5) (async)
msgctl$IPC_SET(0x0, 0xfe, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
pselect(0x2b, 0x0, &(0x7f0000000340)={0x81, 0x100000000000cb, 0x7fd, 0x5f1, 0x3, 0xf, 0x3, 0x10000}, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000380)='w\x00') (async)
open(&(0x7f0000000240)='./file0\x00', 0x200, 0xc2) (async)
seteuid(0xffffffffffffffff) (async, rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind(r6, &(0x7f0000000000)=@un=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 32)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (rerun: 32)

14.26457808s ago: executing program 0 (id=216):
mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0x39b) (async)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0])
setresgid(r1, r0, 0x0) (async)
setgroups(0x0, 0x0) (async)
chmod(&(0x7f0000000140)='./file0\x00', 0x39b) (async)
seteuid(0xffffffffffffffff) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x8f) (async)
rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00')

14.049965868s ago: executing program 1 (id=225):
seteuid(0xffffffffffffffff)
r0 = syz_open_pts()
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
closefrom(r2)
setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1790c})
r3 = setsid()
r4 = syz_open_pts()
r5 = dup2(r4, r4)
lstat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)={<r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000001680)={0x0, <r9=>0x0}, &(0x7f00000016c0)=0xc)
setreuid(r9, 0x0)
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000001700)={<r10=>0x0}, &(0x7f0000001740)=0xc)
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000001780)={0x0, <r11=>0x0}, &(0x7f00000017c0)=0xc)
r12 = getsid(r3)
r13 = geteuid()
setuid(r13)
r14 = getgid()
sendmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000100)=@file={0x0, 0x1, './file0\x00'}, 0xa, &(0x7f0000001480)=[{&(0x7f0000000140)="bc30ea5dd72a0695ab6ee798c04e528268f4838d", 0x14}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="f95a35e5b2014005a522f454e7adf7e344e884a39e6a12b7fa175795d8431317e219aac6712302c270a6864dd085771f86b20d4df9c3d1ff6509ce95c557acf1353d4383d8e1eb174efdd74774a52ccd845bcba38f96c1879e2a44bcc7bbe7faabf366db3329f5c1402b5cbbbd995a943b602224618f84e8b2bf5af8f52ae996df", 0x81}, {&(0x7f0000001240)="b73eb5dc3f7b801eaa08ee0b7b7c343ccb2f9ed72d0f5ab7b73cbef1d0bd3d1a2366af2e77f53af9f4a698f99c5710", 0x2f}, {&(0x7f0000001280)="4c7306fed88a9f0289b2b129e8f712fc86cdc936a6345f7e435689a0e2a5df63a551cd3b44924bda77bc191f83c35c68de928ce7941a82bf21f9a1ede7fb826cb75f3b7833766bf3bc73fc80e8ef12bd3791517ddb0f23b9b17f5ef921b951ad83d4a1590e032ae9d579ab34072d7c4589ac4cdc29309ffb69fdfd6a07abc2da8102076bb1fdeaef5b60e4", 0x8b}, {&(0x7f0000001340)="4362a26fed0e3c6b9aa1851c50a8d4f99e695c1040fceaac87baa89bfa22f9b1d47791afc6d5178e51d394e1c454d9c7d86ea9bef01fab57cd5fdfc860a5bad909ff47d6b0a09f0955015f76dd6bbe95db5b93ec85477f1ddd6a9caad531bf7974338c29f9a24561f32312ea921c340fd5d9a54fb5ccda9234ea756e0c207e5d72e7599a", 0x84}, {&(0x7f0000001400)="74c26703052c8d718a87f5ae6c6fc87cbf538f08f94071ca93087d008d32e478fbce93638ca929381717f215a7d2113d3a4e84e08a0f94172f18d1fdfbdff6cca5ed2486246164b981a53ef830ffb7de00c67d0a37c7c0844f8ec1f587446b85af", 0x61}], 0x7, &(0x7f0000001800)=[@cred={0x18, 0xffff, 0x0, r3, r6, r7}, @cred={0x18, 0xffff, 0x0, r3, 0xffffffffffffffff, r9}, @cred={0x18, 0xffff, 0x0, r3, r10, r11}, @cred={0x18, 0xffff, 0x0, r12, r13, r14}, @rights={0x24, 0xffff, 0x1, [r2, r2, 0xffffffffffffffff, r4, r1, r5]}], 0x84, 0x3}, 0x8)
ioctl$TIOCSCTTY(r5, 0x20007461)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x9, 0x3, 0x4f, 0x7dc2, "aa10f6766af60f81000000000000008d5f50da45", 0xfffffeff, 0x5})
write(r0, &(0x7f00000000c0)="000000720c1cda", 0x7)
kill(0xffffffffffffffff, 0xe)

14.039938228s ago: executing program 7 (id=168):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, 0x0, 0x0)
syz_open_pts()
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
write(r0, 0x0, 0x0) (async)
syz_open_pts() (async)
socket$inet6(0x18, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0) (async)

12.589469531s ago: executing program 0 (id=216):
mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0x39b) (async)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0])
setresgid(r1, r0, 0x0) (async)
setgroups(0x0, 0x0) (async)
chmod(&(0x7f0000000140)='./file0\x00', 0x39b) (async)
seteuid(0xffffffffffffffff) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x8f) (async)
rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00')

12.380240601s ago: executing program 4 (id=159):
syz_open_pts() (async)
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
write(r0, &(0x7f0000000300)="4295", 0x2)
closefrom(r1) (async)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f}) (async)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0) (async)
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1) (async)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1)
unveil(0x0, &(0x7f0000000500)='r\x00') (async)
unveil(0x0, &(0x7f0000000500)='r\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2050, 0x672)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000ac0)={0x5, &(0x7f0000000580)=[{0x0, ""/16, [{[@v4=@local, @v4=@remote]}, {[@v6, @v4=@loopback]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v4=@local, @v4=@rand_addr]}, {[@v4=@loopback, @v6=@loopback]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v6=@empty, @v6=@ipv4={""/10, ""/2, @multicast1}]}, {[@v6=@empty, @v4=@loopback]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v6=@remote, @v6=@remote]}, {[@v4=@local]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v4=@loopback, @v4=@multicast1]}, {[@v4, @v4=@loopback]}], {}, {}, @v6=@remote}]})
r3 = socket$inet6(0x18, 0xd003, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b00), 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000b40)={0x2, &(0x7f0000000b80)=[{0x1c, 0xdd, 0xe, 0x4000000a}, {0x6, 0x8d, 0x8, 0x92}]})
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000bc0)={'tap', 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000c00)={@random="1d1339dcb61c", @empty, [], {@ipv6={0x86dd, {0xf, 0x6, "ff0700", 0x18, 0x37, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x400, 0x24, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}})
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x80, 0x8)
ioctl$TIOCSETA(r5, 0x80047466, &(0x7f00000003c0)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4})
ioctl$TIOCCBRK(r5, 0x2000747a)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000000180)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r8, r9)
setreuid(r7, r7)
socket$inet(0x2, 0x3, 0x2) (async)
r10 = socket$inet(0x2, 0x3, 0x2)
bind(r10, &(0x7f0000000240)=@in={0x10, 0x2, 0x0, 0x1}, 0x10)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r9)

12.380106951s ago: executing program 5 (id=49):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
sysctl$net_inet6_icmp6(&(0x7f0000000280)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f00000002c0)="3e6f0104", &(0x7f0000000300)=0xffffffca, 0x0, 0xfffffffffffffcf0) (async)
r0 = kqueue1(0x0)
kevent(r0, &(0x7f0000000340), 0x3ff, &(0x7f0000000380), 0xb592, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000000440)={0x0, 0x7ff, 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x4}, 0x10) (async)
r3 = syz_open_pts()
r4 = dup2(r3, r3)
openat(r4, &(0x7f0000000100)='./file0\x00', 0x4828a, 0x80) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x43) (async, rerun: 32)
mkdir(0x0, 0xe1) (async, rerun: 32)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x5d42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x8, 0x4)
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64)
unveil(0x0, &(0x7f0000000200)='x\x00') (rerun: 64)
closefrom(r5) (async)
msgctl$IPC_SET(0x0, 0xfe, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
pselect(0x2b, 0x0, &(0x7f0000000340)={0x81, 0x100000000000cb, 0x7fd, 0x5f1, 0x3, 0xf, 0x3, 0x10000}, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000380)='w\x00') (async)
open(&(0x7f0000000240)='./file0\x00', 0x200, 0xc2) (async)
seteuid(0xffffffffffffffff) (async, rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind(r6, &(0x7f0000000000)=@un=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 32)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (rerun: 32)

12.379815638s ago: executing program 6 (id=138):
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02)
mprotect(&(0x7f000016d000/0x2000)=nil, 0x2000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="7f5b92b0", &(0x7f00000000c0)=0x4, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000180)})
socket$inet(0x2, 0x3, 0x14) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f00000001c0)=0x3005)
r2 = kqueue1(0x10000)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0) (async)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0) (async)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383)
open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3) (async)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3)
r4 = kqueue1(0x10000)
r5 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
closefrom(r6)
setrlimit(0x8, &(0x7f0000000200)={0x9, 0x37e1790c})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
syz_open_pts() (async)
r7 = syz_open_pts()
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0)
ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f00000004c0)={0x100d, 0x9, 0xfff, 0x100094b, "01000000000700000000001300ff53d508aa00", 0x2800, 0x412})
write(r5, &(0x7f0000000500)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d18802000000000000003ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe8d)
socket$inet6(0x18, 0x1, 0x6) (async)
r8 = socket$inet6(0x18, 0x1, 0x6)
listen(r8, 0x0)
kevent(r4, &(0x7f0000000180)=[{{r8}, 0xffffffffffffffff, 0x1, 0x80000022, 0x6, 0x7}], 0x7d, 0x0, 0x7, 0x0)
ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000340)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
closefrom(r9)
socket$inet6(0x18, 0x2, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x7c6, 0xea)

10.963777123s ago: executing program 7 (id=168):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, 0x0, 0x0)
syz_open_pts()
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
write(r0, 0x0, 0x0) (async)
syz_open_pts() (async)
socket$inet6(0x18, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0) (async)

9.530216341s ago: executing program 0 (id=216):
mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0x39b) (async)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0])
setresgid(r1, r0, 0x0) (async)
setgroups(0x0, 0x0) (async)
chmod(&(0x7f0000000140)='./file0\x00', 0x39b) (async)
seteuid(0xffffffffffffffff) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x8f) (async)
rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00')

9.320760145s ago: executing program 2 (id=221):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x9c, 0x2, 0x5, 0xfffffffc}]}) (async)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x2) (async)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x7) (async)
mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x28dd) (async)
open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0xf1) (async)
open(0x0, 0x80, 0xc3) (async)
open(0x0, 0x80, 0x12) (async)
open(0x0, 0xa60, 0x17)
pselect(0x40, &(0x7f0000000180)={0xdc, 0x0, 0x2, 0x5, 0x2, 0x6, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
setuid(0xffffffffffffffff) (async)
ioctl$FIOASYNC(r1, 0x8020699d, &(0x7f0000000400)=0xa) (async)
kqueue1(0x10000)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0xc3)
ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000240)=0x3) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x2d28)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x8010, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0x80047308, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, <r4=>0xffffffffffffffff})
r5 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000340), 0x10, 0x0)
ioctl$AUDIO_MIXER_READ(r5, 0xc0144d00, &(0x7f0000000380)=@set_ctrl={0x5, 0x2, 0x7})
closefrom(r4) (async)
sysctl$ddb(&(0x7f0000005c00)={0x9, 0x6}, 0x2, &(0x7f0000005c40), 0x0, 0x0, 0x0)

9.320464233s ago: executing program 4 (id=159):
syz_open_pts() (async)
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
write(r0, &(0x7f0000000300)="4295", 0x2)
closefrom(r1) (async)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f}) (async)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0) (async)
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1) (async)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1)
unveil(0x0, &(0x7f0000000500)='r\x00') (async)
unveil(0x0, &(0x7f0000000500)='r\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2050, 0x672)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000ac0)={0x5, &(0x7f0000000580)=[{0x0, ""/16, [{[@v4=@local, @v4=@remote]}, {[@v6, @v4=@loopback]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v4=@local, @v4=@rand_addr]}, {[@v4=@loopback, @v6=@loopback]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v6=@empty, @v6=@ipv4={""/10, ""/2, @multicast1}]}, {[@v6=@empty, @v4=@loopback]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v6=@remote, @v6=@remote]}, {[@v4=@local]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v4=@loopback, @v4=@multicast1]}, {[@v4, @v4=@loopback]}], {}, {}, @v6=@remote}]})
r3 = socket$inet6(0x18, 0xd003, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b00), 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000b40)={0x2, &(0x7f0000000b80)=[{0x1c, 0xdd, 0xe, 0x4000000a}, {0x6, 0x8d, 0x8, 0x92}]})
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000bc0)={'tap', 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000c00)={@random="1d1339dcb61c", @empty, [], {@ipv6={0x86dd, {0xf, 0x6, "ff0700", 0x18, 0x37, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x400, 0x24, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}})
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x80, 0x8)
ioctl$TIOCSETA(r5, 0x80047466, &(0x7f00000003c0)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4})
ioctl$TIOCCBRK(r5, 0x2000747a)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000000180)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r8, r9)
setreuid(r7, r7)
socket$inet(0x2, 0x3, 0x2) (async)
r10 = socket$inet(0x2, 0x3, 0x2)
bind(r10, &(0x7f0000000240)=@in={0x10, 0x2, 0x0, 0x1}, 0x10)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r9)

9.320349189s ago: executing program 5 (id=49):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
sysctl$net_inet6_icmp6(&(0x7f0000000280)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f00000002c0)="3e6f0104", &(0x7f0000000300)=0xffffffca, 0x0, 0xfffffffffffffcf0) (async)
r0 = kqueue1(0x0)
kevent(r0, &(0x7f0000000340), 0x3ff, &(0x7f0000000380), 0xb592, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000000440)={0x0, 0x7ff, 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x4}, 0x10) (async)
r3 = syz_open_pts()
r4 = dup2(r3, r3)
openat(r4, &(0x7f0000000100)='./file0\x00', 0x4828a, 0x80) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x43) (async, rerun: 32)
mkdir(0x0, 0xe1) (async, rerun: 32)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x5d42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x8, 0x4)
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64)
unveil(0x0, &(0x7f0000000200)='x\x00') (rerun: 64)
closefrom(r5) (async)
msgctl$IPC_SET(0x0, 0xfe, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
pselect(0x2b, 0x0, &(0x7f0000000340)={0x81, 0x100000000000cb, 0x7fd, 0x5f1, 0x3, 0xf, 0x3, 0x10000}, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000380)='w\x00') (async)
open(&(0x7f0000000240)='./file0\x00', 0x200, 0xc2) (async)
seteuid(0xffffffffffffffff) (async, rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind(r6, &(0x7f0000000000)=@un=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 32)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (rerun: 32)

9.32008181s ago: executing program 6 (id=138):
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02)
mprotect(&(0x7f000016d000/0x2000)=nil, 0x2000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="7f5b92b0", &(0x7f00000000c0)=0x4, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000180)})
socket$inet(0x2, 0x3, 0x14) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f00000001c0)=0x3005)
r2 = kqueue1(0x10000)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0) (async)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0) (async)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383)
open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3) (async)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3)
r4 = kqueue1(0x10000)
r5 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
closefrom(r6)
setrlimit(0x8, &(0x7f0000000200)={0x9, 0x37e1790c})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
syz_open_pts() (async)
r7 = syz_open_pts()
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0)
ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f00000004c0)={0x100d, 0x9, 0xfff, 0x100094b, "01000000000700000000001300ff53d508aa00", 0x2800, 0x412})
write(r5, &(0x7f0000000500)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d18802000000000000003ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe8d)
socket$inet6(0x18, 0x1, 0x6) (async)
r8 = socket$inet6(0x18, 0x1, 0x6)
listen(r8, 0x0)
kevent(r4, &(0x7f0000000180)=[{{r8}, 0xffffffffffffffff, 0x1, 0x80000022, 0x6, 0x7}], 0x7d, 0x0, 0x7, 0x0)
ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000340)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
closefrom(r9)
socket$inet6(0x18, 0x2, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x7c6, 0xea)

8.79448434s ago: executing program 1 (id=226):
r0 = socket$inet6(0x18, 0x3, 0x3a)
getsockopt(r0, 0x3a, 0x12, 0x0, 0x0) (async)
syz_emit_ethernet(0x1fc0, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESHEX=0x0]) (async)
pselect(0x40, &(0x7f0000000280)={0x4, 0x0, 0xfffffffffffffff7, 0xa, 0xbec, 0x7ffd, 0x3e0c, 0x6}, 0x0, 0x0, 0x0, 0x0) (async)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x80)
r2 = kqueue1(0x0)
kevent(r2, &(0x7f0000000240)=[{{r1}, 0xffffffffffffffff, 0x5, 0x4, 0x8, 0x9}], 0x40, 0x0, 0xffffffff, 0x0) (async)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0xc3)
ioctl$TIOCCONS(r3, 0xc0a86b02, &(0x7f0000000080)=0x1)
ioctl$PCIOCWRITE(r3, 0xc0107003, &(0x7f00000000c0)={{0x0, 0x2, 0x4}, 0xd, 0x7, 0x7}) (async)
sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x2, &(0x7f00000001c0)="ee8f409198157e3b0d482cd811439e57ce1040071664853368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000100)=0x64, 0x0, 0x0)

8.794094814s ago: executing program 2 (id=227):
sysctl$kern(&(0x7f0000000000)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x148)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x54)
getgroups(0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0])
setresgid(r2, r1, 0x0)
setgroups(0x0, 0x0)
seteuid(0xffffffffffffffff)
fchdir(r0)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2)
sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x7}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0)

8.564608245s ago: executing program 2 (id=228):
sysctl$kern(&(0x7f0000000080)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000040)=0xfffffffc)
lchown(0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000040)=0xfffffffc) (async)
lchown(0x0, 0x0, 0x0) (async)

6.635737027s ago: executing program 0 (id=216):
mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0x39b) (async)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0])
setresgid(r1, r0, 0x0) (async)
setgroups(0x0, 0x0) (async)
chmod(&(0x7f0000000140)='./file0\x00', 0x39b) (async)
seteuid(0xffffffffffffffff) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x8f) (async)
rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00')

6.563616847s ago: executing program 1 (id=229):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f00000000c0)=0xa6c40)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "d6c7c3", 0x0, 0x1, 0x5, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}}}}})
syz_extract_tcp_res(&(0x7f0000000000), 0x2cb2, 0x1)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async)
ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f00000000c0)=0xa6c40) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "d6c7c3", 0x0, 0x1, 0x5, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}}}}}) (async)
syz_extract_tcp_res(&(0x7f0000000000), 0x2cb2, 0x1) (async)

6.563208196s ago: executing program 2 (id=230):
r0 = socket$inet6(0x18, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x5, "ff51b967c6293c6705a3900442d37d64", 0x9}, 0x1c) (async)
dup(r0)
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x881)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x7c6, 0xea)
writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) (async)
sendto$inet6(r0, &(0x7f0000000280)="402b94981df9b994e7e72f0ef8f72b9399e93a12a79c1da87774fb610583798f70192a9148ba25e492de73d767428d146283cd664eefaa0501115c3ad5cb7d4615862ad30ce3287851dde24623b7df4891399ad31246df06fb62ab09f638efa3d78b5b072d6b37f72012a464cd63953c6836a8b97067fa1a768f7ae3da014cda699cbc89808bbc200b3bdf797f44db9d28e1e949273e0f32c118806259cad5dcb52caf661bc8a90b722ae297397e7870", 0xb0, 0x6, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0xfffffffd, "d791f719cf60bd0b94507f5c224f85f7", 0xb}, 0x1c)

6.56256449s ago: executing program 4 (id=159):
syz_open_pts() (async)
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
write(r0, &(0x7f0000000300)="4295", 0x2)
closefrom(r1) (async)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f}) (async)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0) (async)
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1) (async)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1)
unveil(0x0, &(0x7f0000000500)='r\x00') (async)
unveil(0x0, &(0x7f0000000500)='r\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2050, 0x672)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000ac0)={0x5, &(0x7f0000000580)=[{0x0, ""/16, [{[@v4=@local, @v4=@remote]}, {[@v6, @v4=@loopback]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v4=@local, @v4=@rand_addr]}, {[@v4=@loopback, @v6=@loopback]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v6=@empty, @v6=@ipv4={""/10, ""/2, @multicast1}]}, {[@v6=@empty, @v4=@loopback]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v6=@remote, @v6=@remote]}, {[@v4=@local]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v4=@loopback, @v4=@multicast1]}, {[@v4, @v4=@loopback]}], {}, {}, @v6=@remote}]})
r3 = socket$inet6(0x18, 0xd003, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b00), 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000b40)={0x2, &(0x7f0000000b80)=[{0x1c, 0xdd, 0xe, 0x4000000a}, {0x6, 0x8d, 0x8, 0x92}]})
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000bc0)={'tap', 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000c00)={@random="1d1339dcb61c", @empty, [], {@ipv6={0x86dd, {0xf, 0x6, "ff0700", 0x18, 0x37, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x400, 0x24, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}})
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x80, 0x8)
ioctl$TIOCSETA(r5, 0x80047466, &(0x7f00000003c0)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4})
ioctl$TIOCCBRK(r5, 0x2000747a)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000000180)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r8, r9)
setreuid(r7, r7)
socket$inet(0x2, 0x3, 0x2) (async)
r10 = socket$inet(0x2, 0x3, 0x2)
bind(r10, &(0x7f0000000240)=@in={0x10, 0x2, 0x0, 0x1}, 0x10)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r9)

6.562294318s ago: executing program 6 (id=138):
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02)
mprotect(&(0x7f000016d000/0x2000)=nil, 0x2000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="7f5b92b0", &(0x7f00000000c0)=0x4, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000180)})
socket$inet(0x2, 0x3, 0x14) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f00000001c0)=0x3005)
r2 = kqueue1(0x10000)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0) (async)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0) (async)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383)
open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3) (async)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3)
r4 = kqueue1(0x10000)
r5 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
closefrom(r6)
setrlimit(0x8, &(0x7f0000000200)={0x9, 0x37e1790c})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
syz_open_pts() (async)
r7 = syz_open_pts()
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0)
ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f00000004c0)={0x100d, 0x9, 0xfff, 0x100094b, "01000000000700000000001300ff53d508aa00", 0x2800, 0x412})
write(r5, &(0x7f0000000500)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d18802000000000000003ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe8d)
socket$inet6(0x18, 0x1, 0x6) (async)
r8 = socket$inet6(0x18, 0x1, 0x6)
listen(r8, 0x0)
kevent(r4, &(0x7f0000000180)=[{{r8}, 0xffffffffffffffff, 0x1, 0x80000022, 0x6, 0x7}], 0x7d, 0x0, 0x7, 0x0)
ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000340)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
closefrom(r9)
socket$inet6(0x18, 0x2, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x7c6, 0xea)

6.562134875s ago: executing program 7 (id=168):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, 0x0, 0x0)
syz_open_pts()
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
write(r0, 0x0, 0x0) (async)
syz_open_pts() (async)
socket$inet6(0x18, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x400, "00000000000000000600", 0xfffffff1}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x9954, "000000000020200000000000000600", 0xc}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, 0x0, 0xfee1}, 0x6}, 0x38, 0x800, 0x0) (async)

5.674937347s ago: executing program 2 (id=231):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
r0 = syz_open_pts()
socket$unix(0x1, 0x5, 0x0)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000980)={0x2})
setrlimit(0x8, &(0x7f0000000080)={0x9, 0x37e1690f})
sysctl$net_inet_divert(0x0, 0x0, &(0x7f0000000200)="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", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r2 = syz_open_pts()
r3 = socket$unix(0x1, 0x5, 0x0)
closefrom(r3)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
r4 = syz_open_pts()
ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000680)=0x9)
write(r2, &(0x7f00000006c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc18f35cc96d4c20644011ebd4ed712cded188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4e48b0c9c89a1e99d85e5a6865abd1df2bed0dcc32676b30e95899f3b7832668feb78b297aec2e84d621cebccad7c3ab99da6112ceb8ac3ea84b89b600c7e0002d3ea330aa23ad2608bcc8a99ec0d7940360bbeafca7bf7a5cc106343a90661e2dc28708726f2bf0c911d38c89f0b17089b5fd85d62b9c90a4ebd4047e5222e27287d13008ed44d1216a90a", 0xcb)
r5 = socket$inet6(0x18, 0x2, 0x0)
syz_open_pts()
write(r0, &(0x7f00000005c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76)
r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
setsockopt$sock_timeval(r5, 0xffff, 0x1006, &(0x7f0000000140)={0x5, 0x68f5}, 0x10)
ioctl$WSKBDIO_GETBACKLIGHT(r6, 0x400c5711, 0x0)
open(&(0x7f00000007c0)='./file0\x00', 0x19083084ca9cf73d, 0x2)
chmod(&(0x7f0000000800)='./file0\x00', 0x19a)
r7 = geteuid()
setuid(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={<r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000880)={0x0, 0x0, <r9=>0x0}, &(0x7f00000008c0)=0xc)
ktrace(&(0x7f0000000900)='./file0\x00', 0x0, 0x100, r9)
ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000100)=0x1)

1.319585372s ago: executing program 0 (id=216):
mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0x39b) (async)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0])
setresgid(r1, r0, 0x0) (async)
setgroups(0x0, 0x0) (async)
chmod(&(0x7f0000000140)='./file0\x00', 0x39b) (async)
seteuid(0xffffffffffffffff) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x8f) (async)
rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00')

219.519583ms ago: executing program 1 (id=229):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f00000000c0)=0xa6c40)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "d6c7c3", 0x0, 0x1, 0x5, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}}}}})
syz_extract_tcp_res(&(0x7f0000000000), 0x2cb2, 0x1)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async)
ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f00000000c0)=0xa6c40) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "d6c7c3", 0x0, 0x1, 0x5, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}}}}}) (async)
syz_extract_tcp_res(&(0x7f0000000000), 0x2cb2, 0x1) (async)

218.962057ms ago: executing program 2 (id=232):
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
fcntl$lock(r0, 0x8, 0xfffffffffffffffe)
ioctl$WSDISPLAYIO_GTYPE(r0, 0x40045740, &(0x7f0000000300))
sysctl$vm(&(0x7f0000000240)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$kern(&(0x7f0000000280)={0x1, 0xa}, 0x2, &(0x7f0000000340)="d6313d1a3566fb44574d6193a90b392cd962c48d437208c4de596ba2ef7494310cd290b27e9799abbe6e7c070002ece41ab20d8f9e643d15a87d7b7b3a73ad6ff07c67ba839d6ea953ca6c965314dd5c3ce253c9fa17ceb4", 0x0, 0x0, 0x0)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
read$audio(r1, &(0x7f0000000040)=""/190, 0xbe)
ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000100)={0x4, [{0x1, 0x5}, {0x3, 0xa61}, {0x1, 0x3}, {0x2, 0x40}, {0x0, 0x6}, {0x0, 0xc38}, {0x1, 0x10001}, {0x3, 0xfffffffd}, {0x3, 0x2}, {0x0, 0x800}, {0x3}, {0x60a17106c02f141c, 0x9}, {0x1, 0x7f}, {0x3, 0x2}, {0x3, 0x6be}, {0x2, 0x7}, {0x1, 0x478}, {0x1, 0x3}, {0x3, 0x27}, {0x0, 0xc0}, {0x2, 0xf}, {0x2, 0x3}, {0x3, 0x81}, {0x2, 0x8}, {0x1, 0x1}, {0x575bffbb1c82d7, 0x5}, {0x1, 0x10003}, {0x1, 0x3}, {0x1, 0x5d5c}, {0x1, 0x8001}, {0x1, 0x8}, {0x1, 0x1}]})

208.035491ms ago: executing program 4 (id=159):
syz_open_pts() (async)
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
write(r0, &(0x7f0000000300)="4295", 0x2)
closefrom(r1) (async)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f}) (async)
setrlimit(0x8, &(0x7f0000000380)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0) (async)
ioctl$TIOCSETAW(r0, 0x802c7415, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1) (async)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1)
unveil(0x0, &(0x7f0000000500)='r\x00') (async)
unveil(0x0, &(0x7f0000000500)='r\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2050, 0x672)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000ac0)={0x5, &(0x7f0000000580)=[{0x0, ""/16, [{[@v4=@local, @v4=@remote]}, {[@v6, @v4=@loopback]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v4=@local, @v4=@rand_addr]}, {[@v4=@loopback, @v6=@loopback]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v6=@empty, @v6=@ipv4={""/10, ""/2, @multicast1}]}, {[@v6=@empty, @v4=@loopback]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v6=@remote, @v6=@remote]}, {[@v4=@local]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v4=@loopback, @v4=@multicast1]}, {[@v4, @v4=@loopback]}], {}, {}, @v6=@remote}]})
r3 = socket$inet6(0x18, 0xd003, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b00), 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000b40)={0x2, &(0x7f0000000b80)=[{0x1c, 0xdd, 0xe, 0x4000000a}, {0x6, 0x8d, 0x8, 0x92}]})
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000bc0)={'tap', 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000c00)={@random="1d1339dcb61c", @empty, [], {@ipv6={0x86dd, {0xf, 0x6, "ff0700", 0x18, 0x37, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x400, 0x24, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}})
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x80, 0x8)
ioctl$TIOCSETA(r5, 0x80047466, &(0x7f00000003c0)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4})
ioctl$TIOCCBRK(r5, 0x2000747a)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000000180)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r8, r9)
setreuid(r7, r7)
socket$inet(0x2, 0x3, 0x2) (async)
r10 = socket$inet(0x2, 0x3, 0x2)
bind(r10, &(0x7f0000000240)=@in={0x10, 0x2, 0x0, 0x1}, 0x10)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r9)

499.912µs ago: executing program 5 (id=49):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
sysctl$net_inet6_icmp6(&(0x7f0000000280)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f00000002c0)="3e6f0104", &(0x7f0000000300)=0xffffffca, 0x0, 0xfffffffffffffcf0) (async)
r0 = kqueue1(0x0)
kevent(r0, &(0x7f0000000340), 0x3ff, &(0x7f0000000380), 0xb592, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000000440)={0x0, 0x7ff, 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x4}, 0x10) (async)
r3 = syz_open_pts()
r4 = dup2(r3, r3)
openat(r4, &(0x7f0000000100)='./file0\x00', 0x4828a, 0x80) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x43) (async, rerun: 32)
mkdir(0x0, 0xe1) (async, rerun: 32)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x5d42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x8, 0x4)
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64)
unveil(0x0, &(0x7f0000000200)='x\x00') (rerun: 64)
closefrom(r5) (async)
msgctl$IPC_SET(0x0, 0xfe, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
pselect(0x2b, 0x0, &(0x7f0000000340)={0x81, 0x100000000000cb, 0x7fd, 0x5f1, 0x3, 0xf, 0x3, 0x10000}, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000380)='w\x00') (async)
open(&(0x7f0000000240)='./file0\x00', 0x200, 0xc2) (async)
seteuid(0xffffffffffffffff) (async, rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind(r6, &(0x7f0000000000)=@un=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 32)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (rerun: 32)

235.061µs ago: executing program 6 (id=138):
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0xd02)
mprotect(&(0x7f000016d000/0x2000)=nil, 0x2000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="7f5b92b0", &(0x7f00000000c0)=0x4, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000180)})
socket$inet(0x2, 0x3, 0x14) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f00000001c0)=0x3005)
r2 = kqueue1(0x10000)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0) (async)
kevent(r2, &(0x7f0000000200), 0x3ff, &(0x7f0000000240), 0xb592, 0x0)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0) (async)
pselect(0x0, 0x0, &(0x7f0000000280)={0xc50b, 0x400000000000008, 0x3, 0x2, 0x6, 0x10f, 0x4, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0xffff6383)
open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3) (async)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x20, 0xd3)
r4 = kqueue1(0x10000)
r5 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
closefrom(r6)
setrlimit(0x8, &(0x7f0000000200)={0x9, 0x37e1790c})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
syz_open_pts() (async)
r7 = syz_open_pts()
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r5}, 0xffffffffffffffff, 0x81, 0x4, 0x200000000000200, 0x5c}], 0x2, 0x0, 0xa, 0x0)
ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f00000004c0)={0x100d, 0x9, 0xfff, 0x100094b, "01000000000700000000001300ff53d508aa00", 0x2800, 0x412})
write(r5, &(0x7f0000000500)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d18802000000000000003ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe8d)
socket$inet6(0x18, 0x1, 0x6) (async)
r8 = socket$inet6(0x18, 0x1, 0x6)
listen(r8, 0x0)
kevent(r4, &(0x7f0000000180)=[{{r8}, 0xffffffffffffffff, 0x1, 0x80000022, 0x6, 0x7}], 0x7d, 0x0, 0x7, 0x0)
ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000340)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
closefrom(r9)
socket$inet6(0x18, 0x2, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x7c6, 0xea)

0s ago: executing program 1 (id=233):
munmap(&(0x7f0000000000/0x9000)=nil, 0x9000)
shmget$private(0x0, 0x4000, 0x16, &(0x7f000053e000/0x4000)=nil)
getgroups(0x40000000000001f6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0])
setresgid(r1, r0, 0x0)
setregid(0x0, r1)
madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2)
syz_emit_ethernet(0x1fc0, &(0x7f00000018c0)=ANY=[])
chown(&(0x7f0000002180)='./file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
Connection to 10.128.0.161 closed by remote host.
init: getty repeating too quickly on port /dev/tty00, sleeping
witness: lock order reversal:
 1st 0xffff8000110c1680 sbufsnd (&so->so_snd.sb_lock)
 2nd 0xffff800001afb350 inode (&ip->i_lock)
lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff8483b2c0 -> 0xffffffff848cb0e0 is missing
lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_do_enter_write+0xb8
#1  sblock+0xbf
#2  soreceive+0x291
#3  fifo_read+0x1ed
#4  VOP_READ+0x1f1
#5  vn_rdwr+0x1db
#6  vndsetcred+0xc7
#7  vndioctl+0x1451
#8  VOP_IOCTL+0x163
#9  vn_ioctl+0x1d6
#10 sys_ioctl+0x873
#11 syscall+0x118e
#12 Xsyscall+0x128
lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock)
#0  rw_do_enter_write+0xb8
#1  sblock+0xbf
#2  sosplice+0x514
#3  sosetopt+0xf1c
#4  sys_setsockopt+0x44b
#5  syscall+0x118e
#6  Xsyscall+0x128
Stopped at      db_enter+0x17:  popq    %rbp
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> show kasan
kasan: no report recorded this boot
ddb{0}>