last executing test programs:

1.287001788s ago: executing program 0 (id=137):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000740)={0x0, 0xb3f, {[0x1, 0x8000000000000000, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0x5b, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x8000, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x80], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x44, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x4, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) (async, rerun: 32)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (rerun: 32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x101, 0x0, 0x1, "00000000000004004000", 0x11, 0x6}) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
fstat(r1, &(0x7f0000001100))
ioctl$TIOCSETA(r1, 0xc0404469, &(0x7f0000000740)={0x0, 0x0, 0x4, 0xfffffffd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x0, 0xfffffffc}) (async)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x400, 0x180) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0xfffffffe, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x100000000000000}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) (async)
r3 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7900) (async, rerun: 32)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCCLR(r3, 0xc0a86b02, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async)
getdents(r2, &(0x7f0000000100)=""/4091, 0xff55)

1.247663135s ago: executing program 0 (id=138):
r0 = syz_open_pts()
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000200)=0x3) (async)
r1 = socket(0x11, 0x3, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async)
syz_open_pts() (async)
syz_open_pts()

1.247030126s ago: executing program 0 (id=139):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x129)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x10007, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8008, 0x7}, {0x101, 0x1000008, 0x1}, {0x9, 0x900, 0xe}, {0x401, 0xa, 0x10002800, 0x7}, {0x2, 0x27d3, 0x3, 0x4}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x801, 0xc, 0x18b}, {0x2, 0x85, 0x5, 0x9}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0xfffe, 0x1, 0x6}, {0x800, 0x9, 0x8, 0xb}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x41, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0)
ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x4, 0x2, 0x43, 0x3, 0xa6}, {0x4, 0x7, 0xfffb, 0x4, 0xfff4}]})
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x47, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x0, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x4, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x2}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)
r3 = socket(0x18, 0x1, 0x0)
r4 = socket(0x10, 0x2, 0x0)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSKBDIO_GETBACKLIGHT(r5, 0x40045700, 0x0)
setsockopt(r3, 0x1000000000029, 0x3b, &(0x7f0000000100), 0x0)
socket$inet(0x18, 0x3, 0x102)
sendto$inet(r3, &(0x7f0000000040)="affb2bafce68398568307a88fd05284d857a4eff6bea7c66510e9cfda5c17d81a464230a883110aae4e70c17e1a358bd16080d", 0x33, 0x2, &(0x7f0000000140)={0x10, 0x2, 0x1, 0x2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x10, 0x2, 0x1, 0x2}, 0x10)
r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
ioctl$VNDIOCGET(r6, 0xc4104603, &(0x7f0000000340)={'./file0\x00', 0xffffffff, 0x1, 0x422})
socket$inet(0x18, 0x3, 0x102)

1.24201652s ago: executing program 4 (id=141):
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r0, 0x0, 0xf)

1.237088504s ago: executing program 4 (id=143):
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x43}, {0x3, 0x0, 0x0, 0x45}]})
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0000000000000800491e0038006403ff042f9078ac1400bbac1400bb94040000440c0713ffffffff000000074e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70f90a8f81f1a97cc57cccf668d9fe067bde5162f611b57bf37799d480c4355792073a2c0bef6c7eadbe331e3f7a8b5e3e2f620a934319092a91d2115ef2a4db6cb3f38dde313759bca0aa0e854106ebbf5f85a4c2c01a456fbb42c003b684de4643e244d55f26b225d66bc3985ffa4ca9689caf2f3edad428d2e84e0e5f84ba73880c90b63d75ea379c3c4db36f954984f284e67fbd92d5f8ceb3a8cc1f7c73796955eeedb6e52b570d2bb8c5dbbd352b8ca6aea7d601ca07ef3c31bd6a70edf1ea3ce31cb371b7f8a5dc1df3a35963481471013dd07b726ebe0ed6cd49a1c41f1e51ffa9b6c7f5e86bcdfa5a8e0adb1806cf03"])
sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802)
ktrace(&(0x7f00000000c0)='./bus\x00', 0x1, 0xa2c, 0x0)

1.01131251s ago: executing program 0 (id=161):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x7, 0x0, 0x6, 0xffffffff}, {0x4, 0xf0, 0xff, 0x4002}, {0xe, 0x81, 0x15, 0xe}]})
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[])
setrlimit(0x0, &(0x7f0000000980)={0x0, 0x9})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = shmat(0xffffffffffffffff, &(0x7f0000200000/0x2000)=nil, 0x1000)
shmdt(r1)

1.009136996s ago: executing program 4 (id=163):
r0 = syz_open_pts()
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="fbaf8aa0961db74c0aa96d1b4e73f56171d97ff17cadea72a948922334df5566d534301270a8f2953baa355fff48427387b531808def3634030f5f02738470e1e1", 0x41)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r1, 0x80047476, &(0x7f00000000c0)=0x1300)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x0, 0xffffffff}, {0x16, 0x7e, 0x0, 0xff}]}) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="3b2a8cb993ce86e0da60ffffffffac8a531fa790ac", 0x15}], 0x1) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 64)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 64)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async)
ioctl$VNDIOCSET(r3, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x3, 0x8}}}}}}) (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) (async, rerun: 64)
execve(0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) (async, rerun: 32)
ioctl$TIOCDRAIN(r0, 0x2000745e) (rerun: 32)
syz_open_pts() (async)
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7)

1.007789671s ago: executing program 5 (id=165):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, 0x0, &(0x7f00000002c0)="c107426aaded08237a8358a894af7864b397d4ab83eb770da400c9b05943d461cb1245155a365f9bc5b7eecfaf3c48742b988beed6a7f5321282a6b5fdc937bc20af5ba89741ac13d010e43e752193146a6cfd1c3deba7c6620ceb30006995996d81", 0x62)

999.056485ms ago: executing program 0 (id=167):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
socket(0x18, 0x3, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x3)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
pipe(&(0x7f0000000100))
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
pipe(&(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r2 = socket(0x11, 0x3, 0x7)
sendto$unix(r2, &(0x7f0000000000)="b10005016000000416000b005626b955dc803518bdf262bf00070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca00bbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1e0a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de500000000000002000"/177, 0xb1, 0x3a3ae0e0de5f5dd2, 0x0, 0x0)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
read(r0, 0x0, 0x0)
select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x3, 0x0, 0xb1, 0x1}, 0x0, 0x0)

862.830371ms ago: executing program 5 (id=169):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff})
writev(r0, &(0x7f0000000300)=[{&(0x7f00000007c0)='y', 0x1}], 0x1)
syz_open_pts()
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x8)
sysctl$net_inet6_ip6(&(0x7f0000000300)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000000080)="01000000", 0x4)

858.98769ms ago: executing program 4 (id=172):
sysctl$kern(&(0x7f0000001080)={0x1, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x3, 0x0)
getsockopt(r0, 0x0, 0x2, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x6000)
setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000040)=0x10001, 0x1)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
unveil(&(0x7f0000000000)='./file2/file0/file0\x00', &(0x7f0000000080)='c\x00')
msgsnd(0x0, 0x0, 0x4b3, 0x0)

836.694187ms ago: executing program 4 (id=173):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040))
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e7a6d61de4210909926243003b4778034682182e810031b900000000000000000000280002de833384627bfadf2211ff986a1193e1243a5de9dce59ac47f1ef44372d34e98bb33888b647e326a9433f6293bf118ca899e578784dd633efa8469de31a519c4a6be9f810577548024044a078518c1c6e9b6b0b50df6ed6661021d", &(0x7f0000000000)=0x80, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)

769.032659ms ago: executing program 4 (id=180):
r0 = socket(0x2, 0x1, 0x0)
select(0x40, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x1}, &(0x7f00000024c0)={0x8, 0x20008000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x4, 0x40)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000003c0)=0x400)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504447, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000000a40)={{'./file0\x00', './file0\x00', 0x10, 0x3}, 0x0, 0x428, 0x0, 0x8, 0x10001, 0x400, 0xd, 0x0, 0xf})
shutdown(r0, 0x2)

628.422789ms ago: executing program 3 (id=192):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$WSMOUSEIO_GTYPE(r0, 0x80047476, &(0x7f0000000080))
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318)
open$dir(&(0x7f0000000200)='./bus\x00', 0x2, 0x180)
ktrace(&(0x7f00000000c0)='./bus\x00', 0x1, 0xa2c, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000029, 0x1a, &(0x7f0000000000)="00000100", 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "99ffff", 0x4, 0x16, 0x81, @rand_addr="cb697a653c336f0068707f6b00009992", @mcast2, {[], @generic="a4d1b234"}}}}})
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184)
sysctl$kern(&(0x7f0000000040)={0x1, 0x56}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0)
ftruncate(r3, 0xfffffffffffffffe)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7, 0x0, 0x8, 0x4}, {0x80, 0x2, 0x5, 0x10000}, {0x6, 0x1, 0x6, 0x1}]})
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[])
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x40047473, &(0x7f0000000040))

624.194938ms ago: executing program 3 (id=193):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x6, 0x3, 0xfffffff5}, {0x4, 0xf0, 0x4}, {0x6, 0x80, 0x12, 0xfffff802}]})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000380)={0x2, &(0x7f0000000000)=[{0x9, 0x7f, 0xfe, 0x7}, {0x64, 0x1, 0x87}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e7a6d61de4210909926243003b4778034682182e810031b900000000000000000000280002de833384627bfadf2211ff986a1193e1243a5de9dce59ac47f1ef44372d34e98bb33888b647e326a9433f6293bf118ca899e578784dd633efa8469de31a519c4a6be9f810577548024044a078518c1c6e9b6b0b50df6ed6661021d98c318e3ba2d939619a280fdded7e4059942c026a47af48f3fec5b14f7cd0650b6ff5e0b1b131f8ba435cb5defe1149461", &(0x7f0000000000)=0xb1, 0x0, 0xfffffffffffffd13)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)

602.700239ms ago: executing program 3 (id=195):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0)
ioctl$WSDISPLAYIO_WSMOUSED(r0, 0x80185758, &(0x7f0000000080)={0x40, 0x400, {0x100000000, 0x5}})
r1 = getegid()
setresgid(r1, r1, r1)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x4, r1, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x6}, 0x5, 0x2000008002, 0x24b83c97})
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000001}})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$VT_GETACTIVE(r0, 0x40047607, &(0x7f00000001c0))
ioctl$DIOCSETHOSTID(r2, 0xc0044456, &(0x7f0000000280))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a29", 0x91)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = shmget$private(0x0, 0x2000, 0x175, &(0x7f0000412000/0x2000)=nil)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x3fd}, 0x4, 0x9, 0x0, 0x0, 0x5, 0xa, 0x9})
shmat(r4, &(0x7f0000499000/0x4000)=nil, 0x3000)
r5 = socket(0x2, 0x3, 0x2f)
setuid(0xffffffffffffffff)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x22, 0x84, 0x3ff}, 0x400, 0xfffffffffffffff9, 0x0, 0x0, 0x200000041, 0x800000000000108, 0x24, 0x4})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r6 = dup(r5)
setsockopt$inet_opts(r6, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$unix(r5, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0)
setuid(0xee01)
shmat(r4, &(0x7f000000a000/0x3000)=nil, 0x1000)

547.199394ms ago: executing program 7 (id=201):
syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e0300eaaf8080046000020fffd000007019078ffffffffe000000189f50000000044570601100090780007004d"])
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x16e)
ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000100)=0x1ff)
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="fc076e08efc351e12af643ee9f33fc2ab0e40de018af669ee37b4f15edb5477d2eb2ff70f1ab6be7c51f45fc751b3a3220c9ece88b6819fe557d9693f5c576b614208179b602a1e350ab89685815373dddfeceb529e0f001f05e678bccea1ceef632754d24ab", 0x66, 0xa, &(0x7f0000000080)=@abs={0x9, 0x1, 0x0, 0x1}, 0x8)

526.315566ms ago: executing program 5 (id=202):
r0 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
connect$unix(r0, &(0x7f0000000000), 0x10)
connect$unix(r1, &(0x7f0000000040)=@file={0x7f, 0x1, './file0\x00'}, 0xa)
write(r0, 0x0, 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1)
sysctl$vm(&(0x7f0000000200)={0x2, 0x3}, 0x2, &(0x7f0000000140)="08640ca52185740a19b3146dc615e8c0246a318db79757bedbcb9a08c1e11867d8b37c4d43744961e3c2f2eac7a08cf34afac378051110da9819440f4657a80b65ae0000a44a1851404a71515d4b2bc742a30db6376f0652f6df42eebca23a9b3efe235205e9b17dd0d3ad6d1327d64035a59bcb8623e99ccf5ee3bae631206567e3bd02ecc2dee243f1398c8129b79aa6192f313961f7b68a000000000000000000", &(0x7f0000000000)=0xa2, 0x0, 0x0)

520.950337ms ago: executing program 7 (id=203):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, &(0x7f0000000240)={0x3fc, 0x3}, 0x0)

515.823103ms ago: executing program 7 (id=208):
r0 = socket(0x11, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000005c0)="0323af753ac32725c08f8213345bc7", 0xf}], 0x1)
recvmmsg(r0, &(0x7f0000000440)={{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/189, 0xbd}], 0x1, 0x0}, 0x9}, 0x38, 0x2042, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000385000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f00005ef000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x5, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})
open(&(0x7f0000000200)='./file0\x00', 0x800, 0x62)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x2f9})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/139, 0x8b}], 0x1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x80027ffb, 0x2, 0x1, 0x21d8b789, "07000200", 0x5})
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="648c667393a368cc8b469c9ecf9cd6a8853580b610be0b390ec4bfda9e1ec00d6a8aebcbc3812242e165d94337b21ff9b53c7c5b5975b69dba75f45f2fb2ef2df0fce79145a86a09a48cb973fab68075329ce1d02b1dc7c64b2c57387a00cab256965af576a86990fd682446d7199025567d126761b9e41282", 0x79}], 0x1)
r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x4, 0x80, 0x5, 0xffff7ffa, "0100dd25fa7f0000008400003f9400000000ae08", 0x10001})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f0000000040)={0x0, 0x0})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
sysctl$kern(&(0x7f0000000e40)={0x1, 0x12}, 0x2, &(0x7f0000000e80)="f18e9d793e3f61672ec1d5805def22a5e9419ab0dcdb0c1f77b844b3479ef1c9b25d0a1a9d17025fbaecd036e6be06f0ff2e96ecbf08af30ac74a768bf408980968ab230d4d72b433014e6342b56a9e4b51a299ba2d1a56548952fc20d3aabc6acb87436cc19c6df701c27c4f8f0ebe5174b7cfd0f153a626ab51b37277d0f754e37391535b32eee48ed2a9099482cea247e5d8dcd45b739fbbab07c3006876c7e7c28e6b5f77e308760daf9d550c03c704947c7263542629e01ddfb0fbb7321d0ae6d32e4245b28853d284d94448beee3b9ec24f5781730b68df8282f81", &(0x7f0000000f80)=0xde, &(0x7f0000000fc0)="2b02bd897f2d751b229d8a0e5c5a4f761c4da4bf4539c2ee0cdeb7c4202db93a937cc603828f0710e49a444ffcd9e095cc652a6c786a6dfb0be5b5c7167f692a664868a18d6831d2be65ec97cd6dd7436d2ed0edca6fea33ed9d6c457cfcddc3a8c86866052ba6fd199ad583cc6f9bd6216d676f31ce2bb5ca357f84b542bb1f06", 0x81)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000040)="ee28c956ddd56a1508666019ac14d569407c6ed20600618420aef617be000500d4b38311001b000000000000", 0x2c)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0)
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
madvise(&(0x7f00006ab000/0x2000)=nil, 0x2000, 0x5)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
dup2(r5, r0)

425.649391ms ago: executing program 6 (id=215):
rename(&(0x7f0000000280)='./file0\x00', 0x0)
madvise(&(0x7f00001d8000/0x1000)=nil, 0x1000, 0x2)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0xc003, 0x3a)
setsockopt(r0, 0x90, 0x7, &(0x7f00000001c0), 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0xf, 0x1, 0x10, 0x1}, 0x66)
close(r0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
connect(r0, &(0x7f00000001c0)=@in={0x10, 0x2, 0x2, 0x9}, 0x10)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x3c)
socket(0x1, 0x8000, 0x9)
r3 = syz_open_pts()
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
rename(0x0, 0x0)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = socket(0x11, 0x3, 0x0)
sendto$unix(r5, &(0x7f0000000000)="b10005036000009f0000000000070000001c130500000000fef96ecfc72fd3357ae380337b673039d2d236acf60b7804be78164991f7c8cf5f882b297be1aaf0ac3ebbc215000000feffffff74b0da4f59dd028ea8af630031282102000000720fd38bfbb770c1f572c881ea772ec592040000000000ff0c2300008abfba0900000008e371a3f8343712070000000d89f1442c5e52000080042000000000010100"/177, 0xb1, 0xe, 0x0, 0x0)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unveil(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='x\x00')
ioctl$TIOCCONS(r3, 0x80047462, &(0x7f00000000c0)=0x6091)
read(r2, &(0x7f0000000040)=""/56, 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000400)={0x9, 0x1, 0x7, 0xe954, 0xc0000}, 0xc)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='c\x00')
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

416.15615ms ago: executing program 2 (id=217):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async, rerun: 64)
syz_open_pts() (async, rerun: 64)
r0 = syz_open_pts() (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, <r1=>0xffffffffffffffff, 0x0, 0x101})
semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1800}, {0x4, 0x2ff, 0x800}], 0x2aaaaaaaaaaaaad7)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0)
sendmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)=@file={0xaf, 0x1, './file0\x00'}, 0xa, &(0x7f0000000d00)=[{&(0x7f0000000b00)="312ce9a8edb16df8302ff249cdb83ddbdbe4abd51e", 0x15}, {&(0x7f0000000b40)="c5b1a9b9169fbd71ea2bc030e9d61def40cc38731ba01dcbcb316e1e0b4c87274ddf737cf3fb4b671ffd535023b2835b1e03b90bbe84aea6384216f5b3f97339b5237f31321949cd0bf983a5f3e2e16606d143af948a004f41ae27977ae55f0e16ee7a165122b1646639ef", 0x6b}, {&(0x7f0000000bc0)="9cc03b31b407e4716d619bda45bc380e040080915c14b76695cb88e1bfd5df565c7a25a394a5ca346ce08ee18161f3", 0x2f}, {&(0x7f0000000c00)="49ff82efefe168861b9e713475a6bf34c5f6c3ae69c391266198d5333e53277dc0bedb3c3f5e828caac9053dab65f99e30c8a290d47c687181d62f47c6db15f9e19c8a7fae6a691be1ce0d338fbb895ddacd16267475df7c43de7fab847885c30fabb119aa63d9dce4b907c166957c345278a69a22899c0b2718d47becaaf2e0433aa27703e18b2965196d09f63f2628c8fb8b36883f71eb10a8d28b5f89409bcf5751e31cb81c100831cba9cf5298b812691964e731265603d960ee5f6943261bbd058a81746c1aba621811ee9673eb40f54450e73289a8fa408d2506f55588454cb6c8ac133bab780f958c94", 0xed}], 0x4, 0x0, 0x0, 0x8}, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket(0x18, 0x1, 0x0)
close(r2) (async, rerun: 64)
socket(0x18, 0x0, 0x3e) (async, rerun: 64)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
write(r2, &(0x7f0000000240)="98bf512057b7be08", 0x14) (async, rerun: 64)
sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x12, 0x2}, 0x40000000000001bf, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa43029cb73dbf1a1f7a2065ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031faef03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fbde0652f35e45bdaa3afd86c4fe557d3d069433e9890b017ceefabee7e3ebe806fdb4f6af569ae9448677cc2fb7f6443f259859ce3763cc529071cda7a4b61a7b639e519f422a7be0c5da0f0eae59d00"/202, &(0x7f0000000080)=0x5a, &(0x7f0000000280)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496852a9ad15fa4b0bc2c6ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b5", 0xfffffffffffffe19) (async)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async, rerun: 32)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x3, 0x6}, {0x2}, {0x3}, {}, {0x2}, {0x1, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) (async, rerun: 32)
ioctl$TIOCSDTR(r1, 0x20007479)
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)) (async, rerun: 64)
ioctl$TIOCSCTTY(r1, 0x20007461) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
ioctl$VMM_IOC_CREATE(r3, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x3ff, 0x2, 0x8, 0xfff, 0x3, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0xd, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa094, 0x2, 0x100, 0xffffffff, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0x0, 0x81, 0xa, 0x6, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x9, 0x2, 0x2, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x6, 0x7, 0x2, 0x7, 0x6, 0x7, 0xfffffff4, 0x4, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x7, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x0, 0x1, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x6, 0x7063, 0xa, 0x6, 0x7, 0xa23d, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x2, 0x2, 0xfff, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x2, 0x2, 0x5, 0x5, 0xd, 0x9, 0x8001, 0x80000000, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xea3c, 0x5, 0x8, 0x4, 0x0, 0x7, 0xffffffff, 0x2, 0x9, 0x4, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x800, 0x7, 0x6, 0x7fff, 0x6, 0x800, 0x21, 0x9, 0x5, 0x8, 0x8, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x0, 0x8, 0x1, 0x1, 0x800, 0x9, 0x75a1, 0x0, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0x8, 0x100, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0xc, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x6, 0x7, 0x9, 0x7fffffff, 0x5, 0x0, 0x1, 0xfffffff7, 0xc74c, 0xff, 0x8, 0x6, 0x1, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x3, 0x7, 0x81, 0x3, 0x8, 0x1, 0x2, 0xb, 0x8e6, 0x5, 0x6, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x8, 0x81, 0x4c1, 0x0, 0xb, 0x4, 0xffffffff, 0x12000, 0x10001, 0x99, 0xba8, 0x1, 0xfffffffb, 0xa, 0x1, 0x200, 0x6b73, 0x0, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd6, 0x80, 0x1b, 0xe2, 0x0, 0x0, 0x4000001, 0x100, 0x7, 0xffff, 0x99, 0x8, 0x8, 0x8, 0xfff, 0x3, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x8c0, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x0, 0x4, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x6, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffffffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x7fc, 0x2, 0x100, 0x3, 0x2, 0x1, 0x10000, 0x9, 0x51, 0x8, 0x0, 0x1, 0x5ed, 0x2, 0x9, 0x22, 0x2, 0x8001, 0xdf, 0x5, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x9, 0x7ff, 0x101, 0x8, 0x93, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x5, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x1, 0x9, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x827, 0x8, 0x81, 0x80000000, 0x5, 0x0, 0x4, 0xd, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0xe, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0xa53d, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x3, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fffffff, 0x9, 0x4, 0x8, 0x4, 0x3, 0xffffffff, 0x7f, 0x7fffffff, 0x4, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x7, 0x132, 0x80000001, 0x5, 0xa, 0x2, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xcf71, 0x1e46c000, 0x9, 0xe, 0xb, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x5, 0x80000001]}) (rerun: 64)
ioctl$TIOCSTAT(r0, 0x20007465) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0xdc8, 0x7ffff7fb, 0x9, 0x160350d, "cc14ee0d2100caa26a364fa8a325850d1ec100", 0x4, 0x4}) (async)
syz_open_pts()
syz_open_pts()

401.786003ms ago: executing program 2 (id=219):
mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000140)={0xc, [{0x1, 0x3}, {0x1, 0x7fffffff}, {0x2, 0x8}, {0x1, 0x2}, {0x3}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x174}, {0x2, 0xd4}, {0x3, 0xd}, {}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0xf8}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x2, 0x9}, {0x3, 0x450f}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0xcf7d}, {0x2, 0x5}, {0x2, 0xffff}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0xffff}, {0x3, 0x3}, {0x2, 0x80}]})
ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000580)={0x2, 0x100, 0x4, 0x10000, "000800000a00000f000000aff0338a6b4fc6d780", 0x4, 0x7})
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='x\x00')

390.182092ms ago: executing program 2 (id=221):
r0 = socket(0x18, 0x2, 0x0) (async)
r1 = socket(0x18, 0x2, 0x0)
r2 = dup2(r0, r1)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, &(0x7f0000000240)={0x3fc}, 0x0)
sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x1, 0x1, "ff010000000000018000", 0x4}, 0x1c, 0x0, 0x0, 0x0}}, 0x1, 0x8) (async)
ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000080)=0x998a) (async)
sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@in6={0x1c, 0x18, 0x3, 0xfffffffc, "0d6df2932999fce02fa3e0b4b2152264", 0x10001}, 0x1c, 0x0, 0x0, 0x0}, 0x406) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000007}) (async)
socket$inet(0x2, 0x4000, 0xb) (async)
munmap(&(0x7f00004e5000/0x1000)=nil, 0x1000)

384.142258ms ago: executing program 5 (id=223):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$WSKBDIO_GETMAP(r0, 0x8020690c, &(0x7f0000000000)={0x0, 0x0})

366.740307ms ago: executing program 3 (id=224):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000000)="4ba784", &(0x7f0000000040)=0x3, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, 0x0, &(0x7f00000002c0)="c107426aaded08237a8358a894af7864b397d4ab83eb770da400c9b05943d461cb1245155a365f9bc5b7eecfaf3c48742b988beed6a7f5321282a6b5fdc937bc20af5ba89741ac13d010e43e752193146a6cfd1c3deba7c6620ceb30006995996d81", 0x62)

362.95842ms ago: executing program 2 (id=226):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0)
ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f00000019c0)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0x2}, &(0x7f0000001140)=[{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0\x00', 0xcf, 0xc}, {'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x30}], 0xc, 0x2, 0x7fff, 0x8, 0xefd, 0x7f, 0x2, 0x6})
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
r1 = syz_open_pts()
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x6e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1f}, 0x7297, 0x80003d0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x4})
sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4)
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000600)=0x4)
close(r1)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
socket$inet(0x2, 0x1000, 0x12)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = socket(0x18, 0x3, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x8001, 0x100800000000008}, {0x0, 0x9}}, 0x0)
ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100))
r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

337.720016ms ago: executing program 3 (id=228):
r0 = socket$inet6(0x18, 0x5, 0x9)
getsockname$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0x1c)
setuid(0xee01)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000000)={0x0, 0x2, <r1=>0xffffffffffffffff, 0x0, 0x4})
ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000540)=[{0x0, './file0\x00', 0x5}, {0x0, './file1\x00', 0x3ff}, {0x1, './file0\x00'}, {0x0, './file1\x00', 0x8}, {0x0, './file0\x00', 0x10cf5120}, {0x1, './file0\x00', 0x5}, {0x0, './file0\x00'}, {0x1, './file0\x00', 0x8}]})
mkdir(&(0x7f0000000500)='./file0\x00', 0x0)
setuid(0xee01)
chdir(&(0x7f0000000100)='./file0\x00')

336.907328ms ago: executing program 3 (id=230):
r0 = socket(0x800000018, 0x3, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x40)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000ccc000/0x1000)=nil, &(0x7f0000685000/0x3000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fa3000/0x2000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100000001}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x4}, {&(0x7f0000def000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x6}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d84000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000e82000/0x2000)=nil, 0x2fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x3bf87730}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x1}, {&(0x7f0000d1d000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0x20000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b]})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
read(r2, &(0x7f0000000ac0)=""/4096, 0x1000)
r3 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r3, 0xc038694e, &(0x7f00000001c0))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
pwrite(r1, &(0x7f0000001ac0)="fcfd7a0789a5d6ee31b5092ccd413817624005491753a43f3e457a620dca05c1a44cb6391afb07b6f93813a57fea", 0x2e, 0x8)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
dup2(r0, r1)
execve(0x0, 0x0, 0x0)

270.435187ms ago: executing program 1 (id=231):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x80, 0xd, 0x3, 0x4008001, 0x10, [{0x8, 0x8000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0xfe, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffe, 0x88, 0x5}, {0x10000, 0xa00, 0x20003, 0xffffffff}, {0x607, 0xfbffffff, 0x1, 0xffffe2e8}, {0x9, 0x1000, 0x4, 0x7fff}, {0x3, 0x1, 0x1, 0x10}, {0x82, 0x0, 0x8a3a0001, 0xfffffff7}, {0x10000, 0xffeffffe, 0x1, 0x4}, {0xf6, 0x3, 0x10001, 0xa1}, {0x3, 0xfffffffd, 0x2, 0x4}, {0x1, 0x101, 0x8000003, 0x3}, {0x489be2, 0x10001, 0x2, 0x400}]})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107", 0xd, 0x404, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@generic={0x82, 0x2}, @timestamp={0x44, 0xc, 0xfd, 0x3, 0x6, [{[], 0xfffffff8}, {}]}]}}, @udp={{0x1, 0x2, 0x8}}}}}})

270.186118ms ago: executing program 1 (id=232):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x6, 0x3, 0xfffffff5}, {0x4, 0xf0, 0x4}, {0x6, 0x80, 0x12, 0xfffff802}]})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000380)={0x2, &(0x7f0000000000)=[{0x9, 0x7f, 0xfe, 0x7}, {0x64, 0x1, 0x87}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e7a6d61de4210909926243003b4778034682182e810031b900000000000000000000280002de833384627bfadf2211ff986a1193e1243a5de9dce59ac47f1ef44372d34e98bb33888b647e326a9433f6293bf118ca899e578784dd633efa8469de31a519c4a6be9f810577548024044a078518c1c6e9b6b0b50df6ed6661021d98c318e3ba2d939619a280fdded7e4059942c026a47af48f3fec5b14f7cd0650b6ff5e0b1b131f8ba435cb5defe1149461", &(0x7f0000000000)=0xb1, 0x0, 0xfffffffffffffd13)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)

262.011444ms ago: executing program 1 (id=233):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r1)
ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000040)={&(0x7f0000000000)=[{0x5, 0x5}, {0x7, 0x100}, {0x0, 0x5954}], 0x3})
syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffdfffffff00000000000086dd6097520305000000fe8000000000000000000000000000bbff0200000000000000000000000000010001c2", @ANYRES32=r0])

260.477595ms ago: executing program 1 (id=234):
r0 = semget$private(0x0, 0x0, 0x4)
semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000080)=""/50) (async)
r1 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000100)=0xc)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x2, 0x7, 0x9, r2}) (async)
open(0x0, 0x611, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b79b92", 0x18, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x33, 0x0, 0x0, 0x2f}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x7, 0x9, 0x5, 0x8}}}}}}) (async)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) (async)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x20, 0x1e0) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x1}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r4)
r5 = socket(0x2, 0x2, 0x0) (async)
r6 = socket(0x18, 0x3, 0x0)
setsockopt(r6, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) (async)
syz_emit_ethernet(0x8e, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "765203", 0x58, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts, @hopopts={0x2b}], @icmpv6=@dest_unreach={0x1, 0x7, 0x0, 0x40, '\x00', {0x7, 0x6, "dbe371", 0x160, 0x8, 0x4, @mcast2, @rand_addr="478af89d014279ae97480d1de6496bd3", [@routing={0x3b, 0x2, 0x0, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}}}) (async)
connect$unix(r5, &(0x7f0000000000), 0x10) (async)
r7 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) (async)
close(r7) (async)
r8 = socket(0x18, 0x1, 0x0)
setsockopt(r8, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
execve(0x0, 0x0, 0x0)

260.298401ms ago: executing program 1 (id=235):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6c, 0x6, 0x3, 0xfffffff5}, {0x4, 0xf0, 0x4}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e7a6d61de4210909926243003b4778034682182e810031b900000000000000000000280002de833384627bfadf2211ff986a1193e1243a5de9dce59ac47f1ef44372d34e98bb33888b647e326a9433f6293bf118ca899e578784dd633efa8469de31a519c4a6be9f810577548024044a078518c1c6e9b6b0b50df6ed6661021d", &(0x7f0000000000)=0x80, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)

256.947349ms ago: executing program 6 (id=236):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x5, 0x80, 0x89}, {0x0, 0xf, 0x5, 0x9}, {0xe, 0xfb, 0xe}]})
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[])
close(r0) (async)
close(r0)
getdents(r0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
r2 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x608) (async)
sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x608)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sysctl$kern(&(0x7f0000000100)={0x1, 0x23}, 0x2, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @broadcast, [{[], {0x8100, 0x4, 0x0, 0x2}}], {@ipv6={0x86dd, {0x8, 0x6, "2a9814", 0x18, 0x1, 0xb, @local={0xfe, 0x80, '\x00', 0x0}, @empty, {[@hopopts, @hopopts={0x2b}, @hopopts={0x16}]}}}}})
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x2) (async)
shutdown(r3, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x2e) (async)
open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x2e)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3a) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3a)
unveil(0x0, &(0x7f0000000300)='r\x00')
sysctl$hw(&(0x7f0000000000)={0x6, 0xc}, 0x2, &(0x7f00000001c0)="1d6306b4e63a945997c8d7a84f36", &(0x7f0000000180)=0xe, 0x0, 0x0)

256.285596ms ago: executing program 2 (id=237):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x74, 0xf, 0x6, 0x1}, {0x4c, 0x14, 0xd, 0x7c}, {0x3c46, 0x3, 0x0, 0xffffffff}]}) (async)
syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async)
mkdir(&(0x7f0000000180)='./bus/\x00', 0x0)

230.199038ms ago: executing program 2 (id=238):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
ftruncate(r0, 0x8531)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="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", 0x143}], 0x1, 0x0, 0x0, 0xd}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x287e)
r1 = socket(0x2, 0x4000, 0x6)
fcntl$dupfd(r1, 0x0, r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r1, &(0x7f0000000000), 0x10)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x81, 0xd, 0x5, 0x10}, {0x3c, 0xa, 0x4, 0x3}, {0x6, 0x1, 0x4, 0x8000009}]})
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000100)="54e7a3fd76e92cf2c0b3387b2ee69fa8de04ccfcce42de7861e3e95dc622d3ed2cb5fad56352de3124961905630e62f8e3ed88377c7fe98c0b37cfbba1daa63c8c7adc6adc13e1a18419480ef87934e073b473847dd9232384c13a34e60409a0889d0f4a720d375b04994fcac030ecd3d164ac8f4643f78d13d00ebacdb9c4402864600af198e3c966e9d08a3a56579365250af0e0c5ba1c62b89b16b943b2cd2d58a6e18c105d882641ac", 0xab}, {&(0x7f0000000040)="c602f02f2ffbbe236222329079b1fe53e8942013db61027cee67154341d30540969ac4b54361165159b37e1860afe3790d09c23c4a02fc7099", 0x39}, {&(0x7f0000000080)="853af1bf3bc16a8fa2f5", 0xa}, {&(0x7f0000000280)="365cc93bd9ba2dd1f1f26728da977e79c2fbdf463e065dd8d5a165ac5fafa5eea98426b25d3e570fe51e9a5d532d94890c4daab9", 0x34}, {&(0x7f00000002c0)="e6564e1077834d3d34937e842536d521728347dcb647f167c234ab71c0334dafb51f92c1fd96b8e78cf9ca2d5b7dc3b2a13d9520ca7d38a5270fefe041c99267e826ee85aa075a70da827c8bb1005f704fbabd2a5b031c11bc0fccbb81263ce04722b1048fbd6f0859a6779f92f272028daedb991bf78ddf6436006b48b490fd35b2c6339092a9101be381c67c1b57f09f8ece68e99ac3ac8fc23e9d8db967406e47ffb12adaaaded2ee77730711aebbdf6e3cbe5c12ea5a9ce0a6a071cd033e917515e834fa377dc64fbb07", 0xcc}, {&(0x7f00000003c0)="ef9306565886850b07d64cf7c6849423fa9ecc5cd4645969e4a87fdbb35346bc8aa68a564c406a25a9c70628ba2fc1a21b716df6b36e59872776359caef673da083cbfd39a57f185d2d86d406b882f6ec3ee20c0f48c6c2503d0f6d28518fb95d25b0a0736bf7380e4da4cad02a98a63635a7f41611d98bf171d88f3d93e08ec665415dbe95b0e5a39a1ff199590150ec26933a74662d782059dc8479b772200e21cd49d8d6e6cd150a9ddbfbfad8b6ca6e301634e1d99d0b102e9f83b9f2fb9999ebe50d57d029fe06b1f7dd1913c4b43c471f27bf730ddba3aa2924c575b722c80", 0xe2}, {&(0x7f00000004c0)="bb1b738ea838d747fd4268064e459447ae3dd8a476ff9842b62b11b50bbecdbbc9c10a9506ed9067ec7cd6a9f18336865444a86d2a08dc717783e70c8fbedf383566d6574bbdc21c86588652256a3f9aad56bb7f5c461f886a123bb02534aa40", 0x60}, {&(0x7f0000000540)="206de94022e9e73215c9a74f76900ba9b90835377c45435c3fb4e087e9cf24eb9fc6ccd519c41e596ea8fc70b3956e186e8e5f735f60e8e27349791a9eb54b2c49236b32acd6b7d4d3bca225526ca84b8fcc1f843fcc66368145b00f5e8d533e453a493908cec5d2b602ae959a2427535d4a730b1b3d713d0de479222dcc553ef7c0f1c93a053296a1bf8c43faddd7727a63e8ab2fd1f0ad9bfe819c4e7e14419aca065e1372933bba4f319b3b1d2b23cc341fd76a396f45f5b52adeaf3e3c1c3cdb776ae1f7462846", 0xc9}], 0x8)
sendto$unix(r1, &(0x7f00000001c0)="478f98d6655d5ef0c53164c8497af01f40b12923609d8dd4ba855ac3e0deab8663f447013adf3d60177515216af856efd496194f7af696d4218d35214213facdca4f28912ded4f5007a2a8f2a9d628d74b06224a525f0abe4039ad78928dd43c73acacbd81ce45d21c42e5a4abc82cbbb6aacb30a7ae122196a3ca6ffc52c1183851be1673800293b48441920b14444efbdbfe690458d71e85780056b365ba00718c5bb14f5b0b8aa67597805552b7b8aa04c64869a9c996", 0xfffffc70, 0x7, 0x0, 0x0)

229.551445ms ago: executing program 6 (id=239):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="b10005160000009f050007000701000033", 0x11, 0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r1 = syz_open_pts()
close(r1)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700)
open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x80, 0x1e5f)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fd, 0xffff, 0xfffffffe, 0xfd4, 0x3, 0x80000001, 0x17ffe, 0x10, [{0x4, 0x1ff, 0x3, 0xa24}, {0xc5c, 0xffffffff, 0x5, 0x40}, {0x800008, 0x20f05, 0xfffffc01, 0xfffffff2}, {0x7ffe, 0x3, 0x3, 0x7849}, {0x3fa, 0xd, 0x401, 0x4d8d}, {0x8, 0xff, 0x3, 0xb}, {0x8000008, 0xffff, 0x85ea, 0x2d}, {0x2, 0x9, 0x17, 0x9}, {0x2, 0x40087e, 0x4, 0x200007}, {0x810005, 0xa74d925a, 0xffff, 0x7f}, {0x1d8, 0x4, 0x4, 0x412ca38f}, {0x200003, 0xa, 0x20007, 0x7}, {0xb8d, 0x4, 0x7, 0x1}, {0x20002, 0x91, 0x9, 0x6}, {0x400002, 0x407, 0x9, 0x102}, {0x7, 0x209, 0x801002, 0xc}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f0000000240)={0x0, 0x6, 0x0})
r3 = socket(0x2, 0x8002, 0x0)
r4 = fcntl$dupfd(r3, 0x4, 0xffffffffffffffff)
closefrom(r4)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f0000000140)=0x6)
readv(r0, &(0x7f0000000680)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/130, 0x82}, {0xfffffffffffffffe}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/244, 0xf4}], 0x6)
r6 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000000))
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)="090004bf", 0x4)
r7 = open(0x0, 0x400, 0x3)
accept$inet6(r7, &(0x7f00000000c0), &(0x7f0000000080)=0x1c)
dup2(r7, r3)

180.597682ms ago: executing program 7 (id=240):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = dup(r0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000004c0)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x1}, {0x83, 0x0, 0x0, 0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async)
setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000500), 0x0)

110.913262ms ago: executing program 6 (id=241):
clock_getres(0xbfa26c0dcd5ab4b4, 0x0)
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000500), 0x20, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000a40)={0x10001, [{0x1, 0x1}, {0x1, 0x41}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x80000001}, {0x1, 0x6}, {0x1, 0x49a}, {0x1, 0x8000}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x7}, {0x1, 0x80000000}, {0x1, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x2}, {0x1, 0x7fff}, {0x1, 0x81}, {0x0, 0x6}, {0x3, 0xfffffc00}, {0x1, 0x2}, {0x2, 0x7}, {0x3}, {0x2, 0x6}, {0xf3f9e9168128adf0, 0xc}, {0x2, 0xb}, {0x1, 0x5}, {0x2}, {0x3, 0x401}, {0x3, 0x10000}, {0x2, 0xffffffff}]})
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
socket(0x1, 0x2, 0x0)
r2 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000019c0)={0x3, 0xfffff501, {[0xfffffffffffffffc, 0xa, 0x5, 0x10000, 0xffffffffffffffff, 0x80008000, 0x21a5d806, 0xe8b5, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x40000002, 0x4, 0x2, 0xfffffffffffffff5, 0x100], [0x9, 0x5, 0xfffffffbfffffff8, 0x0, 0x87c3, 0x80000000, 0x800ee4, 0x0, 0xfffffffffffffffc, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffefffffc, 0x189], [{0x0, 0xc, 0x4, 0x7d08}, {0x4, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x80, 0x0, 0x3, 0xfffffffffffffffe}, {0x9, 0xb0, 0x11, 0x40}, {0x7ffe, 0x50000, 0x40003, 0x1}, {0x6, 0x1, 0x7, 0x9}, {0x9, 0x1095b, 0x200, 0xf}], {0x9b8f, 0x5, 0x20000, 0x6d1c}, {0x203, 0x12, 0x1, 0x1}}})
kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
r3 = open(0x0, 0x611, 0x0)
mknodat(r0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@generic={0x82, 0x6, "90c1f374"}, @timestamp={0x44, 0xc, 0xfd, 0x3, 0x6, [{[], 0xfffffff8}, {}]}]}}, @udp={{0x1, 0x2, 0x8}}}}}})
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}})
syz_emit_ethernet(0x2a, &(0x7f0000000b80)={@random="b905f0ffffff", @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @multicast1, @remote}}}})
symlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x2015, 0xffffffffffffffff, 0xfffffffffffffffc)
accept$unix(r3, &(0x7f0000000480)=@file={0x0, 0x0, ""/23}, &(0x7f00000004c0)=0x19)

77.464401ms ago: executing program 7 (id=242):
open(&(0x7f0000000080)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async)
ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0xa9bd282c19d055a9, 0x0)
pselect(0x40, &(0x7f0000000000)={0x2, 0x6, 0x5, 0x4a, 0xfff, 0x1, 0x80000000, 0x7f}, &(0x7f0000000040)={0x9, 0x4, 0xaa8, 0x7, 0x2, 0x4, 0x2, 0xffffffffffffffff}, &(0x7f0000000100)={0x7fffffffffffffff, 0x9, 0x401, 0xc9, 0x4, 0x2, 0xfffffffffffffffb, 0x400}, &(0x7f0000000140)={0x401, 0x7}, &(0x7f0000000180))
kill(0x0, 0x20)

74.427737ms ago: executing program 7 (id=243):
setgid(0xffffffffffffffff)
symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00')
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
r0 = socket(0x1, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="01000000", 0x4)
connect(r1, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040)=0x20000, 0x4)
write(r0, &(0x7f0000000140)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e650876593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2cce0d51b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f62414871", 0x19855)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000100)=0x8191)
syz_emit_ethernet(0x26, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x39, 0x18, 0xfffd, 0x0, 0x4, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @icmp=@generic={0xa, 0xdf}}}}})
chdir(&(0x7f0000000100)='./file0\x00')

66.377163ms ago: executing program 5 (id=244):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000000)="4ba784", &(0x7f0000000040)=0x3, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, 0x0, &(0x7f00000002c0)="c107426aaded08237a8358a894af7864b397d4ab83eb770da400c9b05943d461cb1245155a365f9bc5b7eecfaf3c48742b988beed6a7f5321282a6b5fdc937bc20af5ba89741ac13d010e43e752193146a6cfd1c3deba7c6620ceb30006995996d81", 0x62)

63.145246ms ago: executing program 0 (id=245):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x8)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8, 0x9bf2d3725864749b)
ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
ioctl$BIOCSETIF(r2, 0x40384900, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x80184902, &(0x7f00000000c0)={0x3, '.\x00'})
select(0x0, 0x0, 0x0, 0x0, 0x0)
pwrite(r0, &(0x7f00000000c0)="a7", 0x1, 0x40007)

33.587031ms ago: executing program 5 (id=246):
mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0x0)
msgrcv(r0, &(0x7f0000000480)={0x0, ""/190}, 0x7, 0x0, 0x1000)
r1 = open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8188, 0x88)
mknod(&(0x7f00000005c0)='./file0\x00', 0x6000, 0xe02)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x8, 0x30)
readv(r2, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/236, 0xec}], 0x1)
r3 = syz_open_pts()
ioctl$TIOCCONS(r3, 0x80047462, &(0x7f00000000c0)=0x6091)
poll(&(0x7f0000000240)=[{r1, 0x1}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
utimes(0x0, &(0x7f0000001380)={{0x10001, 0x1}, {0x8, 0x4}})
sysctl$vfs_nfs(&(0x7f0000000080), 0x3, &(0x7f0000000100)="e68bcdc1", &(0x7f00000000c0)=0x4, 0x0, 0x0)

1.600297ms ago: executing program 6 (id=247):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = socket(0x18, 0x3, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0xf32b46f, 0x100800080000009}, {0xaf0, 0xbd}}, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100))
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))

642.766µs ago: executing program 6 (id=248):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x3, 0x1)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc)
connect$unix(r1, &(0x7f0000000000), 0x10)
sendto(r1, &(0x7f0000000440)="019613ec0c6f8bf8bafc66e328181cf14e7323d99f173637434f6cb5", 0x1c, 0x404, 0x0, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000b80)={0xff, 0x0, {[0xfffefbfffffffff6, 0x1, 0x2, 0x1, 0x0, 0x0, 0x8, 0x800000000000000, 0xfffffffffffffffc, 0x2f01, 0x7, 0xa10a, 0xffffffffffffffff, 0x4, 0x8000000, 0xa8, 0x2, 0xce7], [0x1, 0x80000001, 0xfffffffffffffffb, 0x8000fffffffd, 0x100, 0x7b97, 0x1fe, 0x2000404, 0x1], [0x100000001, 0x2, 0x40000000, 0x4, 0xffffffffffffffff, 0x11007, 0xfffffffffffffffe], [0x100, 0x8, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x2, 0x0, 0x7d06}, {0xfffc, 0x0, 0x5, 0x3}, {0x10, 0x10000, 0x8, 0x814}, {0xffff, 0x5, 0x8, 0x80000001}, {0xd, 0xfffffffe, 0x400000, 0xa000000}, {0x400b, 0x2003, 0x40000, 0xfffffffffffffffb}, {0x1, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x0, 0x4}], {0x2000, 0x1000001, 0x10000}, {0x0, 0x9, 0x3, 0x8000000000000002}}})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"])
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x1, 0x0)
bind(r2, &(0x7f0000000000), 0x10)
listen(r2, 0x0)
r3 = socket(0x2, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4)
sendto$inet(r3, &(0x7f0000000400)="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", 0xfffffe21, 0x4, 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f00000001c0)=[{0x1, 0xf0, 0xff, 0x804008}, {0xa4, 0x10, 0x1, 0x6}, {0x6, 0x4, 0x2, 0xfffff802}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x8}]})
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
pipe2(&(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x4)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}], 0x5, 0x0, ""/32, 0x8, 0x2})
ioctl$DIOCRGETTSTATS(r4, 0xc4504440, &(0x7f0000000700)={{'./file1\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x28, 0x7}, 0x0, 0x4d0, 0x0, 0x0, 0xb60, 0x4180, 0x400, 0x0, 0xf})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)

0s ago: executing program 1 (id=249):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x38, 0x1042, 0x0)
shutdown(r0, 0x0)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800)
read(r0, 0x0, 0x0)
r1 = syz_open_pts()
close(r1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0x7fffffff, 0xf, 0x7b, 0xffffff8d, "0d2628040200c2a6d2fe6eedb2e0ff7f0d000004", 0x8005, 0x8000})
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="4c1b5570798a40a1b7de088ed5e9b9da22d92efa7725d1dc66d7a6df3c6f43de8634f439c1fb2b3a92812cd358739ad281d32a06b0fc98cfefaaa96d336f4ae09ac3485e0655a59e3e9efc4a3fe96fada4baf9bb042ba1e14292df26d33ac0d3d3c1b792ef38accec19c896adece3228b1f6212fcca356dfca64a8ea1bf890e8e4786f976003aef6c17107d15ec56688b16103a7981ac851c53eb7022c1c6b80", 0xa0}], 0x1)
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000040)={&(0x7f0000000180)=[{0x8, 0x1000000}], 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000000)={0x0, 0x2, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x6, 0x9, <r4=>0xffffffffffffff9c})
poll(&(0x7f0000000080)=[{r0, 0x1}, {r1, 0x40}, {0xffffffffffffff9c, 0x80}, {r2, 0x4}, {r3, 0x80}, {r4, 0x4}], 0x6, 0x5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
Connection to 10.128.0.238 closed by remote host.
denied attempt to set clock forward to 13622315181289262
uvm_fault(0xffffffff83a78870, 0xffff80000160108a, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      arp_rtrequest+0x6a4:    movzwl  0xc(%rcx,%rbx,1),%ecx
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*503096  52244      0           0  0x4000000    0  syz-executor
arp_rtrequest(ffff8000002a2058,1,fffffd806b03d1b0) at arp_rtrequest+0x6a4
rtrequest(1,ffff8000314c7290,0,ffff8000314c7200,16) at rtrequest+0xdc1
rtm_output(ffff800000c5c500,ffff8000314c7338,ffff8000314c7290,0,16) at rtm_output+0x91a
route_output(fffffd807a41af00,ffff8000015f4d00) at route_output+0xa2b
route_send(ffff8000015f4d00,fffffd807a41af00,0,0) at route_send+0xd7
sosend(ffff8000015f4d00,0,ffff8000314c74e8,0,0,808) at sosend+0x804
sendit(ffff800031ccc2b8,7,ffff8000314c75e0,808,ffff8000314c7680) at sendit+0x5a5
sys_sendto(ffff800031ccc2b8,ffff8000314c7730,ffff8000314c7680) at sys_sendto+0x8d
syscall(ffff8000314c7730) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x21ad06e7930, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff83a78870, 0xffff80000160108a, 0, 1) -> e
ddb> trace
arp_rtrequest(ffff8000002a2058,1,fffffd806b03d1b0) at arp_rtrequest+0x6a4
rtrequest(1,ffff8000314c7290,0,ffff8000314c7200,16) at rtrequest+0xdc1
rtm_output(ffff800000c5c500,ffff8000314c7338,ffff8000314c7290,0,16) at rtm_output+0x91a
route_output(fffffd807a41af00,ffff8000015f4d00) at route_output+0xa2b
route_send(ffff8000015f4d00,fffffd807a41af00,0,0) at route_send+0xd7
sosend(ffff8000015f4d00,0,ffff8000314c74e8,0,0,808) at sosend+0x804
sendit(ffff800031ccc2b8,7,ffff8000314c75e0,808,ffff8000314c7680) at sendit+0x5a5
sys_sendto(ffff800031ccc2b8,ffff8000314c7730,ffff8000314c7680) at sys_sendto+0x8d
syscall(ffff8000314c7730) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x21ad06e7930, count: -10
ddb> show registers
rdi               0xffff8000380ec000
rsi                            0x643
rbp               0xffff8000314c70e0
rbx                             0xde
rdx               0xffff8000380ec000
rcx               0xffff800001600fa0
rax               0xfffffd806f6423e0
r8                            0x1000    __ALIGN_SIZE
r9                                 0
r10               0x78b5d03c33921caa
r11               0x4631828b4037ca0d
r12                             0x1f
r13               0xfffffd806f642300
r14               0xfffffd806b03d1b0
r15               0xffff8000002a2058
rip               0xffffffff829b3cb4    arp_rtrequest+0x6a4
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff8000314c7060
ss                              0x10
arp_rtrequest+0x6a4:    movzwl  0xc(%rcx,%rbx,1),%ecx
ddb> show proc
PROC (syz-executor) tid=503096 pid=52244 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=76, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800031ccc7e8,0xffff800031ccdcb8
    process=0xffff800031cc9218 user=0xffff8000314c2000, vmspace=0xfffffd806ccca8b0
    estcpu=26, cpticks=2, pctcpu=0.2, user=0, sys=2, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 48444  434598  74244      0  2           0                syz-executor
 48444  148644  74244      0  3   0x4000080  fsleep        syz-executor
 52244  364678  26898      0  2           0                syz-executor
*52244  503096  26898      0  7   0x4000000                syz-executor
 55619  214560  14982      0  2           0                syz-executor
 55619  521721  14982      0  3   0x4000080  msgwait       syz-executor
 12507  227106  72381      0  2           0                syz-executor
 12507  131720  72381      0  3   0x4000080  kqsel         syz-executor
 12507  396803  72381      0  2   0x4000000                syz-executor
 83941  135500    276     -1  2        0x10                syz-executor
 83941  276874    276     -1  3   0x4000090  fsleep        syz-executor
 24759  427769  43806      0  2           0                syz-executor
 24759  191696  43806      0  3   0x4000080  fsleep        syz-executor
 24759   73456  43806      0  3   0x4000080  fsleep        syz-executor
 80195  366277  51635      0  2           0                syz-executor
 80195  498887  51635      0  3   0x4000080  ttyopn        syz-executor
 80195  227185  51635      0  3   0x4000080  ttyopn        syz-executor
 80195  398044  51635      0  3   0x4000080  fsleep        syz-executor
  2527  517609  47278      0  2       0xc80                syz-executor
  2527  214778  47278      0  3   0x4000080  fsleep        syz-executor
  2527  385749  47278      0  3   0x4000080  kqsel         syz-executor
  2527  117780  47278      0  3   0x4000080  fsleep        syz-executor
  7938  485918      1      0  3        0x82  nanoslp       getty
   276    6177  37770      0  2       0xc82                syz-executor
 26898  416821  37770      0  2       0xc82                syz-executor
 14982   74237  37770      0  3        0x82  nanoslp       syz-executor
 47278  329507  37770      0  2       0xc82                syz-executor
 51635  196688  37770      0  3        0x82  nanoslp       syz-executor
 43806  212400  37770      0  2       0xc82                syz-executor
 74244  250836  37770      0  2       0xc82                syz-executor
 72381  478467  37770      0  3        0x82  nanoslp       syz-executor
 37770  114420      1      0  2         0x2                syz-executor
 70470  189851      1     73  3   0x1100090  kqread        syslogd
 55203  509608      0      0  3     0x14200  bored         smr
 37713  380510      0      0  2     0x14200                zerothread
 41588   21595      0      0  3     0x14200  aiodoned      aiodoned
 75202  200727      0      0  3     0x14200  syncer        update
 39021    2553      0      0  3     0x14200  cleaner       cleaner
 57223   61629      0      0  3     0x14200  reaper        reaper
  2836  431777      0      0  3     0x14200  pgdaemon      pagedaemon
 25409  103745      0      0  3     0x14200  bored         viomb
 42531  363653      0      0  3  0x40014200  acpi0         acpi0
 63739  438779      0      0  3     0x14200  bored         softnet0
 71183  317960      0      0  3     0x14200  smrbar        systqmp
 29117  185111      0      0  3     0x14200  bored         systq
 13308   81252      0      0  3  0x40014200  tmoslp        softclock
  4136  477650      0      0  3  0x40014200                idle0
     1  325181      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb> show all locks
No such command
ddb>