last executing test programs:

501.021028ms ago: executing program 2 (id=3):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
r2 = socket$inet6(0x18, 0x1, 0x6) (async)
ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000100)=0x3) (async)
r3 = socket(0x2, 0x2, 0x0) (async)
setreuid(0x0, 0xee01) (async)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r4 = socket(0x18, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x81406944, &(0x7f00000001c0))
connect$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async)
syz_emit_ethernet(0x0, 0x0) (async)
getpeername(r3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, 0x0}, 0x3840)
sendmmsg(r5, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe)
connect$inet6(r2, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x8d, "ff00000400000021000000000000fdff"}, 0x1c)
bind$inet6(r3, &(0x7f0000000200)={0x1c, 0x18, 0x1, 0x3, "8d8e0bc1f717b92c75c0a9ce421359e8", 0xfffffff8}, 0x1c)
ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000140)) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0xe, 0x7, 0x1}, {0x0, 0xf0, 0xff}, {0x6, 0x5, 0xb6, 0xf}]})
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])

496.35598ms ago: executing program 3 (id=4):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x3, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x29, 0x9, 0x10004, 0x1, 0x0, 0x3, 0x7, 0x2, 0x0, 0x2000004, 0x6})
shutdown(0xffffffffffffffff, 0x1)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
r3 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x209, 0x40009, 0x4, 0x0, 0x8000000a, 0x2, 0x8, 0x2, 0x0, 0x2000004, 0x2})
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
dup(r2)
closefrom(r1)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f00000014c0)={0x1, &(0x7f0000001480)=[{0x5, 0xd8, 0x5, 0xef2}]})
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000000)="5ab7776a", 0x4)

495.991038ms ago: executing program 5 (id=6):
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x18, 0x1, 0x6, "ff0100e88400000002ec00020100", 0xc}, 0x1c)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111)
ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0})
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x7fff)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0xe}, 0x4, &(0x7f0000000140)="9b2209fffffffffffeff7f47020000e5f2fbf220ef0100000034fe42021588b2531f07c8aeafd7e7c1ca53608c8ae5c02e2adc8ff44f4b76c76d41859d85ea800dabe467badf35", &(0x7f0000000040)=0x47, 0x0, 0x0)
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000200)="5f21813caa7565903a2a5b4d47e034e5ec0d49a5a81d395118f0fe1e14154fee3d4af178aa8b9844fc616daf518896832f835b833ae301d7c0ce3610531be0104519f9f2756532f305554739bb57b7a565478fb7ed1bd88c3356f1300348721d594c5fbc95261863", 0x68}], 0x1, 0x8)
execve(0x0, 0x0, 0x0)

495.706687ms ago: executing program 7 (id=8):
readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2)
r0 = socket(0x11, 0x3, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
writev(r1, 0x0, 0x0)
ioctl$TIOCSETA(r1, 0xcd604404, 0x0)
ioctl$DIOCGETQUEUE(r1, 0xc148445f, 0x0)
openat$pf(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x7, 0x28, 0x64, 0x3ff, 0x8b, 0x2f, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44, 0x3, 0x0, 0x81}}}}}})
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$WSKBDIO_SETENCODING(r2, 0x80047476, &(0x7f00000000c0)=0x1300)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x40047477, &(0x7f0000000000))
recvmmsg(r0, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x38, 0x40, 0x0)

492.434854ms ago: executing program 5 (id=11):
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="964b2e8c33c6b9184c54128f975fecf28b35a6b4fe6c2c7decb370e1ded56c32941e0b88ddd1b408c2570ee069d4b5d9fe2d8c0e0e6fcae82f887c519aef0e4f551a8da94ec5e94e8cc86014dcae87ce36ccfa7db954ba0ac2262672aa4264b2ec6ad65c12edb84ce1def64f79b40d76e2c7318805285dcb26b2adfb8bdfa599fa5d155b68e34a92a4e96829325b7b8acd8cb6c66aa407b4ff97282541ca92edef6fc0382c47bd1c63e463375341590f6a327092643b98a174e443c056da46158047e0b068975ba714199a52b4034fa4364e7304b31dd9dcaced366eb800389ecb0e1c41c6058bb7fa03702e8a03363bc593818269f64a0be94d29087369babc60ce10bc4c561f687122c1b20dd9f10518", 0x111) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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", 0x111)
r0 = socket$inet6(0x18, 0x1, 0x6)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) (async)
bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c)
getsockname$inet6(r0, 0x0, &(0x7f0000000100))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffff9c, 0xc00864bf, &(0x7f0000000200)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000040)={r1, 0x2, 0xffffffffffffffff, 0x0, 0x9}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000040)={r1, 0x2, <r2=>0xffffffffffffffff, 0x0, 0x9})
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0xc00000000000, 0xfffffffffffffffc, 0x0, 0x200023})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
recvmsg(0xffffffffffffffff, 0x0, 0x1042)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DIOCGETSTATES(r3, 0xc0104419, &(0x7f0000000040)={0x0, 0x0})
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x1e, 0x3, 0x0)
r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0)
ioctl$FIONREAD(r4, 0x801169ac, &(0x7f00000001c0)) (async)
ioctl$FIONREAD(r4, 0x801169ac, &(0x7f00000001c0))
ioctl$VT_RELDISP(r4, 0x20007604, &(0x7f0000000240))

491.980446ms ago: executing program 7 (id=12):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$WSDISPLAYIO_GETPARAM(r0, 0xc0205759, &(0x7f0000000300)={0x1, 0x7, 0xb, 0x4})
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000280)={0x3, 0x4, 0x7, 0x74, &(0x7f0000000080)=""/116, 0x48, &(0x7f0000000100)=""/72, 0xd0, &(0x7f0000000180)=""/208})
syz_emit_ethernet(0x50, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x1a, 0x11, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, {[], @udp={{0x3, 0x2, 0x8}, {"d9207aacf0ab0d1c509f823a005306004469"}}}}}}})

488.380542ms ago: executing program 7 (id=13):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0xfffffffe, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x100000000000000}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}})
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
close(r0)
r2 = socket$inet(0x2, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x2950, 0x13d4)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000000)="b1c7c8c71a8843a9e1d49378e90c09", 0xf)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x48)
ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x6, 0x10, [{0x10000000, 0x40, 0x3, 0x2}, {0xffffeff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x18000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x3, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x40, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x7, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0xfffffffd, 0x800bd3d, 0xf778, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000000080)={0x0, 0xfffffffffffffffd, 0x0})
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
close(r6)
r7 = socket$inet(0x2, 0x1, 0x0)
listen(r7, 0x5)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0)=0x200, 0x4)
sysctl$kern(&(0x7f0000000100)={0x1, 0x58}, 0x2, &(0x7f0000000280), 0x0, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x9, 0xb, 0x0, 0x101, 0x4, 0x1001, 0x3, 0x10, [{0x5, 0x0, 0xffffff26, 0x71800}, {0x1, 0x10037fe, 0x800002, 0x7}, {0xfffffff7, 0x0, 0x8, 0x3}, {0x6, 0x0, 0x200, 0xfffffffe}, {0x4, 0x3, 0x80000000, 0x7}, {0x5, 0x48000, 0x14000009, 0xc}, {0x8, 0xbffffff1, 0x20007, 0x6d}, {0xb3a, 0x7, 0x41, 0x6}, {0x0, 0xfc, 0x8008ceb}, {0xfffffc07, 0xffffffff, 0x401, 0x1}, {0xa44f, 0xfff9, 0xa38c000}, {0x4, 0x6, 0x8, 0x8}, {0x2000df, 0x9, 0x1, 0x4}, {0x10008, 0x20000e2, 0xfffefff5, 0xfffffff8}, {0x5, 0x1b, 0x24, 0x51d}, {0x81, 0xd654, 0x0, 0x6}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r8 = socket$inet(0x2, 0x2, 0x0)
getpeername(r8, 0x0, 0x0)
socket(0x18, 0x2, 0x0)

475.891463ms ago: executing program 5 (id=14):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8, 0x24)
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x800, 0x0)
preadv(r1, &(0x7f00000018c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/195, 0xc3}, {&(0x7f0000001880)=""/63, 0x3f}], 0x4, 0xffffffffffffffff)
ioctl$TIOCSETA(r1, 0xc0205601, &(0x7f0000000040)={0x4, 0x3, 0x3, 0x8, "97a66256da4500000008000000000000e1ffff03", 0x0, 0x5})
sysctl$hw(&(0x7f0000000180)={0x6, 0x10}, 0x2, &(0x7f0000000240)="b86386e77c00e6a8658744367a1d868f17730b0c8f36c304c656de6b46282666230def9b6b13f02e69380eccae331eeda971556d1cafecb528c833aab75754dc72e0bff525ef228ef9b3d58cab7ccc8c640fcd4d4d2922f282ab72ce53", &(0x7f00000002c0)=0x5d, &(0x7f0000000300)="dc60", 0x2)
mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0)
r2 = open(&(0x7f0000002600)='./file0\x00', 0x78e, 0x0)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000140)=0xc)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4ddecbffe8bfc5b6, 0x2420, r3)
pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000040)="bee69b3d3c1427bcf477d7806f76d71825eba8e4367ab044060b8d7b6b7e555d6bd128c556c401a8060b0120c85f2cc76c11845864bbdc9eee398ee5e5a246ff215ac6fd20899f0a731ba8df347f959d0abec11f4db0a5a5b7df3d4268f24d8c4de476d2cca69e883b826c1de5", 0x6d}], 0x1, 0x88bd2)

441.172771ms ago: executing program 5 (id=18):
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x8009, 0x0)
setuid(0xffffffffffffffff)
ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f0000000000)={0x7fffffff, 0x101, 0x8001, 0x1})
mkdir(&(0x7f0000000000)='./file0\x00', 0x178)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='x\x00')
fcntl$lock(r0, 0x9, &(0x7f0000000300)={0x0, 0x2, 0xd9, 0x20001fffffffd})
r2 = socket(0x11, 0x3, 0x0)
setsockopt(r2, 0x11, 0x3, &(0x7f0000000340)='!\x00\x00\x00', 0x4)
sendto$unix(r2, &(0x7f0000000100)="b10005010000009f0500070007000000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500002002fbfe0c2300008abfba0900000008e37193f8343712051eeab71dc000266c05080000fca65361ba84913f0100"/177, 0xb1, 0x0, 0x0, 0x0)

439.818578ms ago: executing program 7 (id=20):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r0 = open(&(0x7f0000000480)='./bus\x00', 0x10000, 0xd6)
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd})
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x104401)
open$dir(&(0x7f0000000000)='./file0\x00', 0x10, 0x0)
r1 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x28, 0x5}, 0x0)
rename(0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
pwritev(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0xd3d)
open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, &(0x7f00000001c0)="71f91e3471ac0058bc3991501ded35421feca8f0b81abed32ae384cb94a34b8e5f84cf71b57c7afec37082", &(0x7f0000000080)=0x2b, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x0)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e)
setrlimit(0x7, &(0x7f0000000980)={0x42, 0x62})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9})
writev(r5, &(0x7f0000000100)=[{&(0x7f0000001440)="d4e4ca63ef8a63ebb64e0f029d25708e30b48e098cd75250346ab630d98b0ee300da018e304a36682e3c47821405d3c7e7aa1a81566240b69a24ba39b27bd85491705c000000000000000000008f3cba9121721afd42d9c9408a0904c55ecb5ded38cc380a2443a57c446ec614e8d4b5edd236813183fe5ff4f3bcb1851d90aeca7835a911c8d992c55a7a7d715327b8d9a1a56723dd6c00a631e569ada710a1be60059e46ea1d1349020e5ef103dc4517297453670e7b3d302d04f2cc", 0xbd}], 0x1)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="3ce93f21", 0x4}], 0x1)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
mmap(&(0x7f00001b4000/0x1000)=nil, 0x1000, 0x0, 0xa812, r8, 0x100000000)
ioctl$VNDIOCSET(r8, 0xc0384600, &(0x7f0000000400)={&(0x7f0000000380)='./file0\x00', 0x7dc, &(0x7f00000003c0)='./file1\x00', 0x8})
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000080))

364.565849ms ago: executing program 4 (id=22):
r0 = socket(0x11, 0x3, 0x3) (async)
r1 = socket$inet(0x2, 0x3, 0x0) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) (async)
open$dir(&(0x7f0000000200)='./bus\x00', 0x2, 0x180) (async)
open$dir(&(0x7f0000000140)='./file0\x00', 0x20000, 0xa0)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc)
getsockopt(r1, 0x0, 0x24, 0x0, 0x0) (async)
sendto$unix(r0, &(0x7f0000000080)="b10005040000010100000eb107000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896466a421020000ed710fd18bfbb670baf5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfdf82300008abfba0900000008e371a3f8343732051ed6b71d89e0000405f8fffff0e0000000", 0xb1, 0x0, 0x0, 0x0)

364.194227ms ago: executing program 0 (id=23):
r0 = getpid()
setpgid(r0, 0xffffffffffffffff) (async)
setpgid(r0, 0xffffffffffffffff)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
r1 = fcntl$getown(0xffffffffffffff9c, 0x5)
setpgid(r1, r0) (async)
setpgid(r1, r0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x20)
readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/212, 0xd4)

363.362873ms ago: executing program 4 (id=24):
sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x3, 0xa, 0x7}, {0x4c, 0xf0, 0xfb}, {0x6, 0x80, 0xb6, 0xfffff802}]}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x3, 0xa, 0x7}, {0x4c, 0xf0, 0xfb}, {0x6, 0x80, 0xb6, 0xfffff802}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r1, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
semget(0x0, 0x1, 0x281) (async)
r2 = semget(0x0, 0x1, 0x281)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0) (async)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
setresgid(0x0, 0x0, 0x0)
semop(r2, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x3)

359.244426ms ago: executing program 0 (id=25):
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2}, {0x5330, 0x8}}, &(0x7f0000000080))
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000000f80)={{'./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0\x00', 0x28, 0x2a}, 0x0, 0x428, 0x0, 0x3, 0x80000001, 0x9, 0x73d, 0x0, 0x20003})
sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x27358aab664a94b0)
sysctl$vfs_ffs(&(0x7f00000000c0)={0xa, 0x1, 0x13}, 0x3, &(0x7f0000000100)="382f26a39c257b4a19386870d4e5b5d2d40d7bffd04d541cf886b7bf64a11b2da2b4456518479eda92ffee673bdf53af014a993028f695c4914bad744a57a473d1ce9724925d89849c676569c27fa272af20a1cb0f2ec2152aede95530704b3669c7fda6deedf10484b7b23a4d69e85d6ae73df74aee2b60e191b7bfd796e1b724b618eeb1aaf5478e1775b6c830", &(0x7f00000001c0)=0x8e, &(0x7f0000000200)="34acfc6fd7b543c9719d07c18b670013dd050c4c49329fa63f6f5047ceca4c4fe102cc12126811a8da2d545814eec5d849babb67b261bc9647f427e533cf573ebc449ecc7fe49fb9b6f7cf4ce75cae4dd99e6d0e5736a703d87d40c3c8e6e7c68fb7be725e2f7b2d443e41274362184f5923d05a82caba1f47a37f9649037bdfaaee6c478815ae77042f1327181c15fd6b82fc52a5f05ef2f13c467dcdb1e2f147985ad3ca738344e7c1ffa23faf250a138a18be62aa8df94e5aaa3f4e18130987d8a8ff306aa857fb12eb96a08cb983", 0xd0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2}, {0x5330, 0x8}}, &(0x7f0000000080)) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async)
ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000000f80)={{'./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0\x00', 0x28, 0x2a}, 0x0, 0x428, 0x0, 0x3, 0x80000001, 0x9, 0x73d, 0x0, 0x20003}) (async)
sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x27358aab664a94b0) (async)
sysctl$vfs_ffs(&(0x7f00000000c0)={0xa, 0x1, 0x13}, 0x3, &(0x7f0000000100)="382f26a39c257b4a19386870d4e5b5d2d40d7bffd04d541cf886b7bf64a11b2da2b4456518479eda92ffee673bdf53af014a993028f695c4914bad744a57a473d1ce9724925d89849c676569c27fa272af20a1cb0f2ec2152aede95530704b3669c7fda6deedf10484b7b23a4d69e85d6ae73df74aee2b60e191b7bfd796e1b724b618eeb1aaf5478e1775b6c830", &(0x7f00000001c0)=0x8e, &(0x7f0000000200)="34acfc6fd7b543c9719d07c18b670013dd050c4c49329fa63f6f5047ceca4c4fe102cc12126811a8da2d545814eec5d849babb67b261bc9647f427e533cf573ebc449ecc7fe49fb9b6f7cf4ce75cae4dd99e6d0e5736a703d87d40c3c8e6e7c68fb7be725e2f7b2d443e41274362184f5923d05a82caba1f47a37f9649037bdfaaee6c478815ae77042f1327181c15fd6b82fc52a5f05ef2f13c467dcdb1e2f147985ad3ca738344e7c1ffa23faf250a138a18be62aa8df94e5aaa3f4e18130987d8a8ff306aa857fb12eb96a08cb983", 0xd0) (async)

214.366449ms ago: executing program 4 (id=26):
setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x280, 0xcf, 0x11, 0x203519, "1bb7e60ab87aa57800000000d0d200000000fd00"})
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x6c7}], 0x1)
r1 = open(&(0x7f0000000940)='./file0\x00', 0x10, 0x0)
ioctl$VMM_IOC_CREATE(r1, 0xca605601, &(0x7f00000009c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xf4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x7}, {&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e20000/0x3000)=nil, 0x8}, {&(0x7f0000cde000/0x2000)=nil, &(0x7f0000e3b000/0x3000)=nil, 0xc5e5}, {&(0x7f0000d53000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7}, {&(0x7f0000c90000/0x1000)=nil, &(0x7f0000fd6000/0x4000)=nil, 0x200}, {&(0x7f0000d4b000/0x3000)=nil, &(0x7f0000fae000/0x4000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ef1000/0x1000)=nil, 0x1ff}, {&(0x7f0000d30000/0x4000)=nil, &(0x7f0000c24000/0x4000)=nil, 0x5}, {&(0x7f0000ef7000/0x1000)=nil, &(0x7f0000da4000/0x2000)=nil}, {&(0x7f0000e85000/0x2000)=nil, &(0x7f0000f08000/0x2000)=nil, 0x7ff}, {&(0x7f0000e43000/0x3000)=nil, &(0x7f0000cd0000/0x3000)=nil, 0x1}], './file1\x00', 0x8, 0x5, 0x80000001, 0xc, [0xffffffff, 0x8, 0x4, 0x8000, 0x100, 0x1, 0x2, 0x5, 0x8, 0x9, 0x7, 0xc56, 0x2, 0x6, 0xa2, 0x6, 0x5, 0x2, 0x4c78, 0xfa, 0x81, 0x4, 0x2, 0xc33c, 0x0, 0x8, 0x7e, 0x81, 0x7, 0x80000001, 0x0, 0x30, 0x131a, 0x8, 0xff, 0x4, 0x1, 0x2, 0x0, 0x3, 0xffffffff, 0x65, 0x9, 0x7, 0x1, 0x20200000, 0x5, 0x5, 0x200, 0xfa0, 0x480, 0x6, 0x4, 0x5, 0x26, 0x4, 0x64800000, 0x7, 0x1, 0x3, 0xfe8, 0x4e0a, 0x1, 0xff1, 0x6137, 0x6, 0x8, 0xffffffff, 0x59, 0x10, 0x7, 0x845, 0x3, 0xfffffffb, 0x0, 0x4, 0x2, 0xfffffffa, 0x0, 0x6, 0x200, 0x3, 0x5, 0x9, 0x9, 0x3, 0x3, 0x3, 0x9, 0x0, 0x0, 0x5, 0x9, 0x6fe, 0x2, 0x3, 0xd, 0x8000, 0x0, 0x4, 0xffffdf6a, 0x71098914, 0x8, 0x3, 0x3, 0xe, 0x6, 0xe75e, 0x105, 0x4, 0x5, 0x7, 0x9, 0x8, 0x9, 0x86bf, 0xf, 0x10007ff, 0x4, 0x2, 0x9, 0x5, 0x2, 0xfff, 0x6, 0x7ff, 0x200, 0x8, 0x9, 0x0, 0x8, 0xc, 0x8, 0x4, 0x4, 0xc5f, 0x3, 0x9b, 0x8, 0xfffffffe, 0x10000, 0xfffffff7, 0x8001, 0xf8, 0x5, 0xfffffff3, 0x8, 0x4, 0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x1000, 0xb716, 0x4, 0x4, 0x5, 0x2, 0xf6, 0x7, 0x66f, 0x9, 0x9, 0xffffffff, 0x5, 0x6, 0x7, 0x8, 0x1, 0xe, 0x2, 0x1, 0x80000001, 0x9, 0x1, 0x8, 0x80800000, 0x1, 0xfffffffe, 0xfffffff8, 0x1, 0x300000, 0xfffffffb, 0x0, 0x7, 0x1ee, 0xffffffff, 0x800, 0xe, 0x0, 0x7, 0x5, 0xbf, 0x3, 0xf48, 0x4, 0x7, 0x4e1, 0x0, 0x411, 0x80000000, 0x0, 0x8, 0x3, 0xfd, 0x5, 0x8, 0x9, 0xffffff01, 0x1, 0xfa87, 0x9, 0x9, 0x9, 0x6, 0x7ff, 0x5, 0x5, 0x5406cad2, 0x6, 0x10001, 0x10001, 0x8, 0xa, 0x8, 0x2, 0x4, 0x9658, 0xa, 0x6, 0x0, 0xfe20, 0x0, 0x4e, 0xff, 0x8, 0xb3, 0x7, 0xd73, 0x3, 0x10000, 0xa, 0x8001, 0x9, 0x81, 0x7fffffff, 0xfffffffd, 0x5, 0x5, 0x200, 0x517, 0x7, 0x9, 0x2fa0, 0x4, 0x8, 0x6, 0x12, 0x3, 0x2, 0x50b, 0x3, 0x1, 0x0, 0x0, 0x9, 0x5, 0x2, 0x2, 0xfffffffa, 0x800, 0x8, 0x7f, 0x2, 0x3, 0x8, 0x9, 0xda9, 0x81, 0x5, 0x10000, 0x5, 0x3, 0x7ff, 0x1ff, 0x80, 0x7f, 0x400, 0x5, 0xe, 0x8, 0x787, 0x1c, 0x6, 0x3, 0xfffffff9, 0x2, 0x1, 0x9, 0x33, 0x9, 0x5, 0x5, 0x1, 0x1f3, 0xe09, 0x2, 0x400, 0xfffffffa, 0xce7, 0x7f, 0x1000, 0xc, 0x7f, 0x10, 0x2, 0x6, 0x1, 0x9, 0x0, 0x2d2644dc, 0x8, 0x200, 0xffff51f3, 0x9, 0x5, 0x2, 0x9c, 0xa, 0x6, 0x7, 0xd, 0xef6, 0xb8ff, 0x80000000, 0x8, 0x9, 0xd263, 0x1000, 0x1, 0x4, 0x3, 0x4, 0x2, 0x3, 0x1, 0x8, 0xbf, 0x7, 0x7, 0x81, 0xad, 0x51, 0x7, 0xa, 0x1, 0xc7d6, 0x5, 0x9, 0xf5, 0x3, 0x0, 0x80000001, 0x7, 0x7, 0x7, 0xfff, 0x0, 0xeff0, 0x1ff, 0x81, 0x9, 0x1, 0x40, 0x1fffe0, 0x4, 0x1, 0x40, 0x2, 0x8000, 0x9, 0xe6b, 0x600000, 0x3, 0x6, 0x8e7, 0x10000, 0x4, 0x3032, 0x9, 0x2, 0x3, 0x2, 0x1526bd58, 0x5, 0x101, 0x6, 0x9, 0x8, 0x1, 0x101, 0x8, 0xffff, 0x7, 0xff, 0x9c, 0x2, 0x5, 0x7d3, 0x4, 0x3, 0x8, 0x0, 0x8, 0xff, 0x2, 0x1, 0x3f9, 0x3, 0x800, 0x5, 0x8000, 0x7fff, 0x400, 0x5, 0x3, 0x6, 0xc, 0x3, 0x0, 0xc8c, 0x8, 0x698b, 0x3, 0x9, 0x5, 0x8, 0x8, 0x9, 0x81, 0x4, 0xffffffff, 0xf474, 0xc, 0x9, 0x401, 0x9, 0x0, 0x999, 0x8, 0x1184a7c0, 0x9, 0x2, 0x8, 0x7f, 0xc8, 0x4, 0x6, 0x200, 0x3, 0x8, 0x4, 0xfff, 0x7a, 0x3ff, 0xb07, 0x800, 0x8, 0x4, 0x0, 0x1, 0x4, 0x7, 0x10000, 0x0, 0x8001, 0xd, 0x5, 0x101, 0x30000000, 0x8, 0xfffffffb, 0x4, 0x6, 0x3, 0x8, 0xafe5, 0x1ff, 0x8000, 0x2fc, 0xfffffff9, 0x0, 0x7fffffff, 0x3e2, 0x5, 0x1, 0x9, 0x1, 0x0, 0x9, 0x8000, 0x1, 0x36, 0x101, 0x1, 0x7, 0xffff, 0x2, 0x4, 0xfa6, 0x800]})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$TIOCSCTTY(r1, 0x20007461)
ioctl$DIOCGETSTATE(r2, 0xc1084413, &(0x7f0000000100)={{0x0, './file0\x00', [{[@v4, @v4=@multicast2], [0x8, 0x7], 0x0, 0x2}, {[@v6=@rand_addr="360d821fef2dd8079686e0b19a462d03", @v6=@mcast2], [0x400, 0x2], 0x8, 0x1a}], {{0x9, 0x4, 0x5e, 0x3}, 0x0, 0x2, 0x75, 0xd, 0x0, 0x7, 0x40}, {{0x3, 0x6, 0x2, 0x3}, 0x80, 0x5, 0x1006, 0x2, 0xe, 0xc3, 0x84}, @v4=@multicast1, 0x7, 0x9, 0x12, 0x8001, 0x81, [[0xfff, 0x9], [0x4ed, 0x8001]], [[0x2, 0x5], [0x1, 0x7ba]], 0x5f, [0x2, 0x5599], 0x7, 0x1a, 0x1, 0x3, 0x2, 0x0, 0x8, 0x8, 0x42, 0x6, 0x3, 0x0, "96b0"}})
syz_emit_ethernet(0xc6, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x90, 0x3c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@dstopts={0x33, 0x10, '\x00', [@generic={0x0, 0x83, "6d89f8b4ed7a1350f6b9231eb4b45c7a9c4613db3d28ccefaeb9c4e8fd7ce5ca51419d328c7d13bdef5f3b340fa91390d107e65b59331284ae7e580577eb96a6dae181caad726e4394c0270a2be8ce7055e68ee861ec5077bbed2ff8a6e9e0f726277438bf2f7c94f8e5d73e7688472cee7af8ca1e6a3b4ff53d9c3e6c2390533b136f"}]}]}}}}})

210.226888ms ago: executing program 5 (id=27):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x5, 0x3, 0x0, 0x8, "ae0000200000010400006ed6b91600", 0x101, 0xfffffffa})
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0xfffffffc, 0xf8f, 0x8}, {0x0, 0x800bd3d, 0xf778, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[@ANYBLOB="b905f0ffffff00000000000008004500001c0000000100009078ac1400bbffffffff4e214e0300089078"])
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x200, &(0x7f0000000040)=0x9, 0x4)
bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
r5 = fcntl$dupfd(r3, 0x3, r3)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x20000, 0xe1)
syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffff36c9ec748ab8dd6076520300300003fe8000000000000000000000000000bbfe8000000000000000000000934200000067dbe37101e00804ff020000000000000000850000000001478af89d014279ae97480d1de6496bd3"])
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETMAP(r6, 0x80047476, &(0x7f00000000c0)={0x0, 0x0})
ioctl$FIONREAD(r5, 0x400474c4, 0x0)
ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000000)={0x8, 0x7fff})

209.59109ms ago: executing program 0 (id=28):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlinkat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
readlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001180)={0x1ff, 0x434f4222, 0x2, 0x7, "fc793f3aff20d8f501c93a7688f098a486385621", 0xb078, 0x9})
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x27ffe, 0x80000000, 0x7fff, 0xfffffffa, "102e2618007bf533e2941d6e3ceb00", 0x1ff, 0x7ff})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$DIOCSETSYNFLWATS(r2, 0xc0084461, &(0x7f0000000240)={0xb, 0x8})

209.029617ms ago: executing program 0 (id=29):
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x1, 0x23, 0x0, {[0x5, 0x802, 0xffffffffffffffd, 0x1, 0xc, 0x0, 0x0, 0x7, 0x9, 0x0, 0x22, 0xffffffffffff7ffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1], [0x55, 0x5, 0x4, 0x11020, 0x1, 0x0, 0x5, 0x10000, 0x80000000, 0x830e], [0x7fffffffffffffff, 0x8, 0x0, 0x40, 0x100000, 0xfffffffffffffffc], [0xdb9d, 0x0, 0x0, 0x165, 0x0, 0x8], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x7}, {0x1000, 0x3a, 0x0, 0x1}, {0x0, 0x1000, 0xfffd, 0x1}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x9, 0x1, 0x0, 0x1}, {0x0, 0x0, 0xaa, 0xfffffffffffffff9}, {0x0, 0xfffffff5, 0xc00000}], {0x6, 0xfffffffd, 0x20000003, 0xf5a752c}, {0x0, 0x6, 0x10000000}}})
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f00000000c0)="01000000", 0x4)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)
r2 = socket(0x18, 0x3, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0))

207.291567ms ago: executing program 6 (id=7):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4fcf668246c0900e1937c727a4bdb8d000008e371a3f834371205", 0xb1, 0x0, 0x0, 0x0)
shutdown(r0, 0x2) (async)
shutdown(r0, 0x2)
r2 = socket(0x11, 0x8003, 0x8)
getsockopt(r2, 0x11, 0x4, 0x0, 0x0) (async)
getsockopt(r2, 0x11, 0x4, 0x0, 0x0)
ioctl$FIONREAD(r0, 0xc0207534, &(0x7f0000000440))

199.824793ms ago: executing program 1 (id=2):
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r0, 0x20007461)
r1 = syz_open_pts()
closefrom(r1)
syz_open_pts()
openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
pwrite(r0, &(0x7f00000003c0)="941f57f777b417cc24b8aa702f1047aec23ee636333b03fe3926282fa838040397d57f92de6b8fa6e770a029a600b4d91d2afde616bbf5b47eef5d62b282145da9eebb783d22a5cf5c", 0x49, 0x8)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x24, &(0x7f0000000340)="2823822ab917c5c00200", 0xa)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37)
openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
setuid(0xffffffffffffffff)
r4 = socket(0x18, 0x2, 0x0)
bind(r4, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, "ff3fbea81026df4e3be0a26b68c44f09", 0x80000001}, 0x1c)
sendmsg(r3, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xe)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x510, 0x0)
sendto(r4, &(0x7f00000001c0)="fbaae602904344e987225fa8f5fcf5904a6ee3ac672a421567dc461b0a99c435f6ad3e20014d97a66c91404bcce57fa7d7fb08ae7a079ac795b9ee0694a26784c823bf54e78ffdcdcd4c7cf2f9ab5bddd483dd14039e34566c5c94e968702b1e809903640320d3d0d9098a3adb59bb208d7f71f030bf069673b9117f6024fef8c0367cc7406214bffe318891d4ac52a0620e36fe534067875463289e5e41d47686b4278f31a51b31b80a23251b3fb8c7567caba10819340ff6808e8526f6a75b756ba358f3cfc04a4fb2b38e3c22", 0xce, 0x402, &(0x7f00000002c0)=@in6={0x1c, 0x18, 0x2, 0xd, "58998c9e97080518ad6642881d1a07d5", 0x17}, 0x1c)
poll(&(0x7f0000000380)=[{r2, 0xcb}], 0x1, 0x487)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000440)={0x3, &(0x7f0000000300)=[{0x68, 0x51, 0x7, 0x7}, {0x40, 0xf0, 0xff, 0x3}, {0x6, 0x5, 0xb6, 0xfffff802}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]})
unveil(0x0, &(0x7f0000000180)='x\x00')
sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})

199.27187ms ago: executing program 6 (id=30):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x4, 0x0, 0xc14}, {0x0, 0x7, 0x0, 0x1}, {0x6, 0x0, 0x45, 0x10000}]}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x9, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) (async)
mlock(&(0x7f0000045000/0x4000)=nil, 0x4000) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) (async)
socket(0x1, 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) (async)
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x1000f66c, 0x57e, 0x7, 0x3, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xffffffff, 0x9})
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="f284547ec87ae3ad1aad0ee27ee88eacb67a08038280f2", 0x17}], 0x1) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
kqueue() (async)
ioctl$TIOCSETA(r2, 0xc4504442, &(0x7f0000000200)={0xffffffff, 0x0, 0x2000000b, 0x228c4ae2, "6aff000047000000f8ff00", 0x4e9, 0x4}) (async)
sysctl$hw(&(0x7f0000000140)={0x6, 0xb}, 0x2, &(0x7f0000000180)="2cf1aa9221403f4b78fa2e938ebf37cec33000e7361725edba9daf4db28f6f0678946d0a841061f9ad8430406600bdc5", &(0x7f0000000240)=0x30, &(0x7f0000000280)="71cc964dcf15e87eace7c09fc2b9e1fc8534a3d5", 0x14) (async)
ioctl$FIONREAD(r2, 0x8020691f, &(0x7f0000000080))

14.798544ms ago: executing program 1 (id=31):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000040)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x2, 0x0, 0x9], [0x52e375c0, 0x8000, 0x3ffffffe, 0x1, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x4, 0x0, 0x6}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xf7fffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x4, 0x6d5, 0x4}}})
r0 = kqueue()
r1 = socket$inet(0x2, 0x3, 0x2)
kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r3 = kqueue1(0x8bd2d3963670f77e)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x2b, 0xe, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
listen(r4, 0x0)
kevent(r3, &(0x7f00000003c0)=[{{r2}, 0xfffffffffffffff6, 0x18, 0x2, 0x6, 0x1}, {{r2}, 0xfffffffffffffff9, 0x9f, 0x4, 0x10, 0x4}, {{r0}, 0xfffffffffffffffe, 0x18, 0x20000000, 0x9, 0xfff}, {{r1}, 0xfffffffffffffffe, 0x21, 0x1, 0x2, 0x1}, {{r4}, 0xfffffffffffffffd, 0x1, 0xf0000000, 0xb7, 0x3}, {{r2}, 0xfffffffffffffffa, 0x13, 0x10, 0x301, 0xffffffff}, {{r1}, 0xfffffffffffffffe, 0x4, 0x20, 0xfff, 0x2}], 0x4, &(0x7f00000004c0)=[{{r2}, 0xfffffffffffffffc, 0x25, 0xfffff, 0xff, 0x8001}, {{r1}, 0xfffffffffffffff8, 0x89, 0x80000000, 0x5, 0x4}, {{r1}, 0xfffffffffffffff7, 0x9a, 0x2, 0x5, 0x100000001}, {{r0}, 0xc, 0x40, 0x4, 0x0, 0x3}, {{r0}, 0xfffffffffffffff9, 0x1, 0x20, 0x3, 0x7f}, {{r1}, 0xfffffffffffffffc, 0x4d, 0x10, 0x4, 0x7}], 0x4aab, &(0x7f0000000580)={0xc})
ioctl$WSKBDIO_GETMODE(r1, 0x40045714, &(0x7f00000005c0))
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000300)={'./file0\x00', 0x9, 0x7, 0x7ff, 0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x945e, 0x1000})
connect$unix(r2, &(0x7f0000000380)=@file={0xad, 0x1, './file0\x00'}, 0xa)
dup(r4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000000)=[0x5, 0x6], 0x2, 0x4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r5, 0xc01864c2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x7})

7.660895ms ago: executing program 4 (id=32):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
closefrom(r0)
r1 = socket(0x1e, 0x3, 0x0)
write(r1, &(0x7f00000002c0)="3f5f52936a5893db2e5a2077d759a5e79072be54ab030f8783b47515c0d2cd355445bd406b4c5b86b83e0d1b9c26392bbda8d3ba549bc6e4b798f29d36b7560e06637b7ce8ded5842ed1f08a5deb6fd825f910abff744e7eb90772238b092dc8075b19a8ca9e34c1fcab5eb4c72a8a3ac6dc9bda49bd2d4f0c2da361d666ec4e4401c80a1a728c11167553c17d041929987ad3", 0x93)
fchflags(r0, 0x0)

3.190062ms ago: executing program 4 (id=33):
setuid(0xffffffffffffffff)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4)
r1 = dup2(r0, r0)
sendmmsg(r1, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8)
ioctl$DIOCGETSTATUS(r1, 0xc2084415, &(0x7f0000000300))
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

2.794179ms ago: executing program 4 (id=34):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0)
r0 = syz_open_pts()
r1 = syz_open_pts()
poll(&(0x7f00000007c0)=[{r0, 0x2}, {r0, 0x10}, {r0, 0x40}, {r1, 0x2}, {r0, 0x22}, {r0, 0x40}, {r0, 0x7}], 0x7, 0xffffffff)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, "0100012d29fb000700000000098002005e00"})
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
pwritev(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x40000)
syz_open_pts()
sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000000)=0xa1, &(0x7f0000000180)="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", 0x12b)
setreuid(0x0, 0xee01)
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f0000000040)="b1000501000000ae05000701070000000008000000000500fef96ecfc72fd3357ae30200004e30ffecb92819f20bf404be01000000f7c8cf5f882b297de1aa050400ce9462f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00000000000000003da6fbb79cff92eec4332ffdf900000000", 0xb1, 0x4, 0x0, 0x0)
kill(0xffffffffffffffff, 0xa)

2.489363ms ago: executing program 0 (id=35):
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x615, 0x1)
flock(r0, 0x1)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x8}, 0x4, &(0x7f0000000600), 0x0, 0x0, 0x0)

1.885299ms ago: executing program 0 (id=36):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf78e4)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000001200)='#', 0x1}, {&(0x7f0000000080)='!u', 0x2}], 0x2)
sysctl$vfs_ffs(&(0x7f0000000fc0)={0xa, 0x1, 0xe}, 0x3, 0x0, 0x0, 0x0, 0x0)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0xa7, 0x2, 0xfffffffffffffffd, 0x13fff}], 0x4, 0x0, 0x8, 0x0)
kevent(r1, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x0, 0xf27ff779bbbc9c2d, 0x5, 0x100000000}], 0x13e4, 0x0, 0x9b68, 0x0)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)=0x80)

0s ago: executing program 6 (id=37):
r0 = socket(0x18, 0x3, 0x3a) (async)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f00000001c0)="05000000", 0x4) (async)
setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)="88cc2ba1", 0x4)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="19", 0x1}], 0x56) (async)
ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000000b40)={{'./file0\x00', '\x00', 0x2, 0x80}, &(0x7f00000002c0)=[{'./file0\x00', './file0\x00', 0x4, 0x80}, {'./file0\x00', './file0\x00', 0x4}], 0xd8, 0x2, 0xffffe956, 0x6, 0xcaea, 0x8bc, 0x70, 0x3})
sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7fffffff, "feff00000001002000000000000100", 0x101}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="4ffcff6072c564832f853394b6e2937603bd752f80dc34808be258adb5e1acc41947e68b6d8b95c4797d6d7dacee8a5c0a73bb", 0x33}], 0x1, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
SYZFAIL: SIGBUS
pc-offset:0xa907a630fa1 pc:0xdeadbeef addr:0x0 code=0 (errno 35: Resource temporarily unavailable)
uvn_flush: obj=0xfffff6006eef29b8, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!

OpenBSD/amd64 (ci-openbsd-main-9.us-central1-b.c.syzkaller.internal) (tty00)

login: show panic
Password:
Login incorrect
login: show registers
Password:
Login incorrect
login: ps
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
machine ddbcpu 0
login: Password:
Login incorrect
machine ddbcpu 1
login: Password:
Login incorrect
login: