last executing test programs:

11.20949152s ago: executing program 4 (id=1078):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0)
ioctl$BIOCLOCK(r0, 0x20004276)
socket(0x2, 0x2, 0x0)
select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7fffffff}, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x100000001})
r3 = open(&(0x7f0000000400)='./file0\x00', 0x200, 0x0)
fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x269000000, 0xffffffffffffffff})
poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x40}], 0x4b, 0x0)
seteuid(0xffffffffffffffff)
ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000000))

11.209093816s ago: executing program 4 (id=1079):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60})
r0 = syz_open_pts()
close(r0)
mkdir(&(0x7f0000000000)='./file0\x00', 0xea25a159aaa362e3)
chmod(&(0x7f00000000c0)='./file0\x00', 0x21e)
chdir(&(0x7f0000000140)='./file0\x00')
mkdir(&(0x7f0000000500)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)
renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000240)='./file0\x00')
syz_open_pts()
fcntl$setstatus(r0, 0x4, 0x4)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x7ffffffc, 0x8, 0xfffffffd, 0x3a, "ff0107002015caa32d00000065c0bdf9c6f04aaf", 0x406})
ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="20c92c", 0xfd39}], 0x1)

11.207118336s ago: executing program 4 (id=1081):
sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x25, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x28, 0x8, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x5, 0x1, 0x400f}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="582383ba32ce44e08e23b16f3aec414afaadc2068e1e2ea661696efb258f1a1b5db3c0d445c79c447f6b78f206c774efcf04017ae1445254d236d2c3d6cb3022878831760371d77a36f978fd9ff0d617dbe80ad1a4dbd8decf0e231281afcac5cbc00d2dbf708886a865e86e280515e6594af32e34c5bbb47e1d889d", 0x7c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="f94daf59787758312091501d94a34b71000000005c4fd13194245ebbd0a768f9", &(0x7f0000000080)=0xffffffffffffff27, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[])
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002240)="582383ba32ce44e08e23b16f3aec414a7aadc2068e1e2ea661696efb258f1a1b7f6b6ef206c774efcf04017ae1445254d236d2c3d6cb3022878831760371d77a36f978fd", 0x44}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000000)="f90c73aadacc73312091507b159a379dd29ffa1d94a34b71000000005c6fd13194245ebbd0a75af9", &(0x7f0000000080)=0x28, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[])
r2 = socket(0x800000018, 0x2, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x400001ff}, 0xc)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r3 = socket(0x18, 0x3, 0x3a)
setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x3, 0xd5}, 0xc)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140)="3998a035daa227d1ce40394f044ed95480393e74f486aff61a92312cb952b89c09f24ddb00000000008fb1463d8635bf0f8e2f68a22421d45dcf5b7f5bdf7b47", &(0x7f0000000100)=0x40, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

11.178747755s ago: executing program 4 (id=1083):
r0 = syz_open_pts()
write(r0, &(0x7f00000003c0)="78bf2f", 0x3) (async)
write(r0, &(0x7f00000003c0)="78bf2f", 0x3)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x5) (async)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x5)
execve(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1, 0x0}, 0x0) (async)
recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendto$unix(r1, &(0x7f00000002c0)="b100050400000400000000002101000000000000cea18500fef96ec0050000007ae30200004e3039d2d236acf20b7804be38164991f7aacf5f882b295dbdaa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfb695564b6700000008000361b1257aea8c500002002fbfe0c2300008abfba65c08f4d08e371a3f8343732051eeab71d89e000040502000000140000003e4b45a827dde6d6be812292692c592a628f52d469f566fb252e6378", 0xc2, 0x406, 0x0, 0x0)
socket(0x18, 0x3, 0x3a)

9.050431151s ago: executing program 0 (id=1140):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0xeffffffffffffffb, 0x10002efffffff, 0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88)
lchown(&(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffffff, 0xffffffffffffffff)

8.984344789s ago: executing program 0 (id=1142):
pledge(0x0, &(0x7f00000000c0)='\x00')
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffffff9}, {0x3}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x4, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d942400b5e1a0757cb9af769c7afec37082", &(0x7f0000000080)=0x306, 0x0, 0x2e)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0x6)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaac536222e1a114080f2"])
syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[])
pledge(&(0x7f0000000000)='tty   \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=<l\x8c\x01\xe3\x05$\x1c\x04B\x00\xa4P\x04\xcf\x87\xaa\x96iP\x14{4\xe6\x87\x9d\x8f\bz9$\x10_\xd8E\x93\x92\xf5\x8au\xab\xf9)\xf5\xa6\xc7\xc8\xed\xb9\x1f:\x03K\xa2\xdbUshx\xbe\\\x19\xdax\xeb_W\xbb\'\x00G\xbb\xfd\xe2\xd58\xf4:)\x10|r\x1e\x06p>\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', &(0x7f0000002840)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=<l\x8c\x01\xe3\x05$\x1c\x04B\x00\xa4P\x04\xcf\x87\xaa\x96iP\x14{4\xe6\x87\x9d\x8f\bz9$\x10_\xd8E\x93\x92\xf5\x8au\xab\xf9)\xf5\xa6\xc7\xc8\xed\xb9\x1f:\x03K\xa2\xdbUshx\xbe\\\x19\xdax\xeb_\x10|r\x1e\x06p>\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00')
sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x57, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4)

8.983926421s ago: executing program 0 (id=1143):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
fsync(r0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f00000000c0))
ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000100)=0x8)
ioctl$TIOCSTOP(r1, 0x2000746f)
ioctl$TIOCSTART(r1, 0x2000746e)
syz_emit_ethernet(0x7c, &(0x7f0000000140)={@empty, @broadcast, [], {@ipv4={0x800, {{0xe, 0x4, 0x2, 0xc, 0x6e, 0x66, 0x0, 0xb, 0x6c, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x6, 0x1}, @generic={0x44, 0xf, "c90b28a2a030ec14d51d5988d1"}, @end, @timestamp={0x44, 0xc, 0xff, 0x990cfa816b633d96, 0x1, [{[], 0xb}, {[], 0x2dcd}]}, @end]}}, @udp={{0x1, 0x3, 0x8}, {"109f80edf6f108311da5039e746104096817f49ccea8f6329689da2096a78c02f1fad99edc84734b3fb4ddc4369d"}}}}}})
ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f00000001c0))
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000200), &(0x7f0000000240)=0xc)
syz_extract_tcp_res(&(0x7f0000000280), 0x7, 0x6)
ioctl$TIOCSBRK(r1, 0x2000747b)
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x10090, 0x0)
poll(&(0x7f0000000300)=[{r0, 0x20}, {r1, 0x2}, {r1, 0x2}, {r1, 0x4}, {r2, 0x1}, {r0, 0x2}], 0x6, 0x6)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
ioctl$KDSETMODE(r3, 0x20004b0a, &(0x7f0000000380)=0x1)
r4 = accept$inet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000440)=0xfffffffd)
ioctl$TIOCCDTR(r1, 0x20007478)
readv(r4, &(0x7f0000002740)=[{&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/140, 0x8c}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/114, 0x72}, {&(0x7f0000002600)=""/2, 0x2}, {&(0x7f0000002640)=""/45, 0x2d}, {&(0x7f0000002680)=""/158, 0x9e}], 0x8)
sendto(r4, &(0x7f00000027c0)="fb34f597e2ff4d4218b2f87020d79c05f9ad65dbc91a9d24cc485d3c6ca1279b857163854dea28e84da920e8292a55b50897662330f6d37af121270e7c5f0e31be6099a296ce7f6fb7a8ac87c0bc53905d215613ffc08535907c16e81db9766c9ba3b4b5104fd6f11bcc1c9074d45a048839a60d31dadd34327fdee5845ba076dcad", 0x82, 0x8, &(0x7f0000002880)=@in={0x2, 0x1}, 0xc)
ioctl$VT_SETMODE(r3, 0x80087602, &(0x7f00000028c0)={0x0, 0xfd, 0x6, 0x1ff, 0x101})
ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000002900)=0xb)
r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000002940), 0x8000, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2012, r5, 0x3)
ioctl$KDSETRAD(r2, 0x20004b43)
utimes(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={{0x0, 0x8}, {0xffff, 0x80000000}})
ioctl$PCIOCWRITE(r1, 0xc0107003, &(0x7f0000002a00)={{0xcb}, 0x3e3, 0x10001, 0x7})
bind$inet(0xffffffffffffffff, &(0x7f0000002a40)={0x2, 0x0}, 0xc)

8.983092119s ago: executing program 0 (id=1144):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002240)="582383ba32ce44e08e23b16f3aec414a7aadc2068e1e2ea661696efb258f1a1b7f6b6ef206c774efcf04017ae1445254d236d2c3d6cb3022878831760371d77a36f978fd9ff0d617dbe80ad1", 0x4c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="f969afaadacc73312091501d94a34b71000000005c4fd13194245ebbd0a768f987565625f7169b9d609e0b4927d702bbc2731dc9bc83066118b251d2c5379a42d38e20207fa56adde125a87b8af68a39c14a90687be58e6e1a1eb9ac451400a3badc93020093bc9afff740bd", &(0x7f0000000080)=0x6c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[])
sysctl$net_inet6_ip6(0x0, 0x0, &(0x7f00000000c0)="fb", &(0x7f0000000080)=0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000080)='./file1\x00', 0x2)
r1 = semget(0x1, 0x0, 0x60c)
semctl$GETNCNT(r1, 0x2, 0x3, &(0x7f0000000100)=""/4096)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00')

8.856591173s ago: executing program 0 (id=1145):
mprotect(&(0x7f000022b000/0x3000)=nil, 0x3000, 0x0)
socket(0x2, 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
syz_open_pts() (async)
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts() (async)
r1 = syz_open_pts()
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(&(0x7f0000000180)=[{r1, 0x4}], 0x1, 0x3)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x84000000000000}) (async)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x84000000000000})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/229, 0xe5}], 0x1) (async)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/229, 0xe5}], 0x1)
r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r5, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
write(r1, &(0x7f00000002c0)="ad", 0x1)
syz_open_pts()
kqueue()
select(0x40, &(0x7f0000000140)={0x400, 0x0, 0xfffffffffffffffe, 0x9, 0x11e215b, 0x8, 0xfffffffffffffff7, 0x73}, &(0x7f00000001c0)={0x0, 0x200000, 0xbf7b, 0x9, 0x8, 0xfffffffffffffffa, 0x5, 0x97}, &(0x7f0000000200)={0xa1e, 0x44, 0xffffffffffff7fff, 0x8, 0x4, 0x7fffffff, 0x6, 0x4}, &(0x7f0000000240)={0x4, 0x2}) (async)
select(0x40, &(0x7f0000000140)={0x400, 0x0, 0xfffffffffffffffe, 0x9, 0x11e215b, 0x8, 0xfffffffffffffff7, 0x73}, &(0x7f00000001c0)={0x0, 0x200000, 0xbf7b, 0x9, 0x8, 0xfffffffffffffffa, 0x5, 0x97}, &(0x7f0000000200)={0xa1e, 0x44, 0xffffffffffff7fff, 0x8, 0x4, 0x7fffffff, 0x6, 0x4}, &(0x7f0000000240)={0x4, 0x2})

5.415847507s ago: executing program 2 (id=1186):
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x49)
setreuid(0xee00, 0x0)
r0 = getuid()
chown(&(0x7f0000000040)='./file0/file0\x00', r0, 0x0)
setreuid(0xee00, r0)
open(&(0x7f0000000000)='./file0\x00', 0x205, 0x118)
sysctl$net_inet_divert(&(0x7f0000000080), 0x4, &(0x7f00000001c0)="47108195a12d74f63c950ef734cf5ef82ad9571db36eeb630480af568a9e5bc9fbc5e0d96ddb82f77cccc26184e888ce380335683d892b83df5cec185a2744a060faa6938a440f1410f5ce75a9e4486827bdb880de34a6f71bdfffe0c624e387f3167d06ef13b12d883804e7774412f460bf5ac1e820ff936af9d2254d8a644ec8d509a1d791a0c082136961d44de4f7ffd8833126ae04b163ac", &(0x7f0000000280)=0x9a, &(0x7f00000003c0)="8137c1e0cd20a87a065883a60b647d9b7f4c10f393baea2e8e41a0372f146e5286848ecc156a9d8e", 0x28)
select(0x40, &(0x7f0000000180)={0x4e, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000440)=[{{r1}, 0xfffffffffffffffc, 0x80, 0x1, 0x3, 0x3}], 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x1b4)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
close(r2)
r3 = socket(0x2, 0x1, 0x0)
setsockopt(r3, 0x6, 0x2, 0x0, 0x0)
r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
kevent(0xffffffffffffffff, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x5}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x8000000000000001, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0xf0000000, 0x1, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x10, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x40, 0x40000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x2, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000001}, {{}, 0xfffffffffffffffe, 0x80, 0x8, 0x100, 0xfffffffffffffffb}], 0xb19, 0x0)
sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0)
ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1)
getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000400), 0xc)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
setreuid(r0, 0x0)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')

5.415374317s ago: executing program 1 (id=1187):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10002fffffffe})
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1002) (async)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async)
flock(r0, 0x1) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x0, r1) (async)
flock(r0, 0x2) (async)
syz_open_pts()
syz_open_pts()

5.384426389s ago: executing program 0 (id=1188):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2000, 0x2d87)
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8) (async)
connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8)
socket(0x18, 0x3, 0x3a) (async)
r1 = socket(0x18, 0x3, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x3}, 0xc)
socket$inet6(0x18, 0x2, 0x0)
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f0000000780)) (async)
ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f0000000780))
r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x13}) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x13})
r4 = socket(0x18, 0x1, 0x0)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = syz_open_pts()
write(r6, &(0x7f00000003c0)="78bf2f", 0x3)
ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000140)=0x5) (async)
ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000140)=0x5)
execve(0x0, 0x0, 0x0)
socket(0x18, 0x3, 0x3a) (async)
socket(0x18, 0x3, 0x3a)
ioctl$VNDIOCSET(r5, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
socket$unix(0x1, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = kqueue()
poll(&(0x7f0000000000)=[{}, {r7}, {r8}], 0x3, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff}, 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r3, 0x6e}], 0x1, 0x0)

5.380418834s ago: executing program 1 (id=1189):
sysctl$hw(&(0x7f0000000780)={0x6, 0x1}, 0x2, &(0x7f00000007c0)="36641fbe4198", &(0x7f0000000880)=0x6, 0x0, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x42)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000240))

5.379302663s ago: executing program 2 (id=1192):
mlockall(0x0)
execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000240)='\'&[!\x00'], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000240), 0x4)
shutdown(r1, 0x1)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000000029, 0xb, 0x0, 0x0)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r5, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0})
bind(r3, &(0x7f0000000080)=@in={0x2, 0x0}, 0xc)
mlockall(0x1)

5.3778527s ago: executing program 1 (id=1193):
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1)
sysctl$hw(&(0x7f0000000040)={0x6, 0xc}, 0x2, &(0x7f0000000240)="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", &(0x7f0000000080)=0xdc1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x800000018, 0x3, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r1 = socket(0x18, 0x5, 0x7)
recvmsg(r1, &(0x7f0000002480)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f0000002380)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000100)=""/77, 0x4d}, {&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/220, 0xdc}, {&(0x7f0000002140)=""/204, 0xcc}, {&(0x7f0000002240)=""/62, 0x3e}, {&(0x7f0000002280)=""/233, 0xe9}], 0x8, &(0x7f0000002400)=""/69, 0x45}, 0x40)

5.351549202s ago: executing program 1 (id=1195):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r0 = socket(0x18, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x104) (async)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x104)
chmod(&(0x7f00000000c0)='./file1\x00', 0x13) (async)
chmod(&(0x7f00000000c0)='./file1\x00', 0x13)
setreuid(0x0, 0xee01) (async)
setreuid(0x0, 0xee01)
chdir(&(0x7f0000000080)='./file1\x00') (async)
chdir(&(0x7f0000000080)='./file1\x00')
unveil(&(0x7f0000000300)='./file1\x00', &(0x7f0000000240)='r\x00')
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setrlimit(0xb4fe99e0a1b11cfe, &(0x7f0000000980)={0xe, 0x1000})
getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
semop(0x0, &(0x7f00000000c0)=[{0x0, 0xfff8}, {0x1, 0x2ff}], 0x2)
r1 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
write(r1, &(0x7f0000000040)="0441345d1d286fe4157300"/41, 0x29)

5.351382309s ago: executing program 2 (id=1196):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000)
ioctl$BIOCGRSIG(0xffffffffffffffff, 0x40044273, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
syz_emit_ethernet(0xe8, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a80c008100250086dd6e98087e00aa04dcfe8000000000000000000000000000aa00000000000000000000ffff0200"])
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = kqueue()
kevent(r1, 0x0, 0x9, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r2, 0x0, 0x1f, &(0x7f0000000180)="b1f5d915", 0x4)
select(0x40, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
select(0x40, &(0x7f0000000000)={0x7, 0x5, 0x3ff, 0x482, 0xb7, 0x7, 0x3, 0x8a9}, &(0x7f0000000040)={0x4, 0x7fffffffffffffff, 0x4, 0x9, 0x0, 0x80000001, 0x800, 0x2d88}, 0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x5, "52c9795a6b476ed1fffffffffffffff000000008", 0x2000000, 0x271})

5.219467212s ago: executing program 1 (id=1201):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async, rerun: 32)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (rerun: 32)
preadv(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001140)=""/4109, 0x100d}], 0x2, 0x7fffffffffffffff) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="6aab0d39f90c8b6a98e11e043dbc6d043cbb6da87b25b6ec509a073806a022e28f967918781b9013ea053ef5a5cf4bdb217a21e9995128685e0711d272f5078dbb3f59410bac7e23", 0x48}], 0x1, 0xb9) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="740502491c050420590629c56ac700537ac2bc83bd49e75000a31775c0", &(0x7f0000000080)=0x1d, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r0, &(0x7f0000000700)="d80b00"/14, 0xe)

2.943695767s ago: executing program 4 (id=1212):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000})
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
select(0x40, &(0x7f00000000c0)={0x9, 0x3, 0x401, 0x1, 0x3, 0x5, 0x8001, 0x8}, &(0x7f0000000240)={0x7, 0x6, 0x7, 0x3, 0xc, 0x0, 0x9c, 0x1ff}, &(0x7f0000000280)={0x4, 0x8000000080, 0x0, 0x6, 0xfffffffffffffffa, 0x8, 0x2, 0x9}, &(0x7f00000002c0)={0xfffffffffffffff6, 0x1})
flock(r0, 0x6)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
ioctl$WSKBDIO_GETMAP(r2, 0x80047476, 0x0)
mprotect(&(0x7f0000469000/0x4000)=nil, 0x4000, 0x1)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
shutdown(r1, 0x0)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$VMM_IOC_WRITEREGS(r3, 0x82485608, &(0x7f00000004c0)={0x2, 0x0, 0xa, {[0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0xa, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x3, 0x0, 0x3ff, 0x7, 0x8, 0x1000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x7, 0x803d, 0x5, 0x0, 0x4], [0x0, 0x0, 0x80, 0x0, 0x7fffffff], [{}, {0xfffc}, {0x81, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x4, 0x400000000000}, {0x5, 0x5}, {0x0, 0x0, 0xffffffff, 0x5}, {0x0, 0x0, 0x0, 0x2}], {0x800, 0x0, 0x1, 0x1000}, {0x0, 0x0, 0xc95e13d}}})
syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffff0800fb3800240000000000019008000000000000000007030607030000000f00907800f03e"])
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504", 0x4, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
syz_open_pts()
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
read(r2, &(0x7f0000000200)=""/33, 0x21)
flock(r0, 0x2)
syz_open_pts()
ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504444, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a21571419", 0x0, 0x28d})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x2}]})
mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x205b99)
open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

2.305914624s ago: executing program 2 (id=1213):
r0 = semget$private(0x0, 0x1, 0x69)
semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000000)=""/192)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x3f, &(0x7f0000000200), 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@in6, 0x0)

2.305699172s ago: executing program 2 (id=1214):
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x18, 0x3, 0x3a)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt(r0, 0x4, 0x5, &(0x7f0000000000)="188aed30242a67b22a6c87399c4ec801c15dea31d82ad519e001b8a2d20e1957d3009bca85e1df1251af4eff23b03569d2410c633a2940cb50fd91008312fd4d14fc626c0c5b6924450846f2f22cc42d56de0c73d5a8eb880555ae89671a", 0x5e)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
ioctl$FIONREAD(r2, 0x800474c4, &(0x7f00000001c0))
ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000340)={0x10, 0xb26, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x527}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8001}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff6d04}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8000000000000001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xffffffff80000001}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7fffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x100000001}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fee000/0xe000)=nil, 0x8}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xc60}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}], './file0\x00', 0x2})
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000000000000000000000000002"], 0x10}, 0x0)

2.303783448s ago: executing program 1 (id=1217):
r0 = socket(0x2, 0x3, 0x0)
bind(r0, &(0x7f0000000000), 0x10)
r1 = socket(0x2, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2)
socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/239, 0xef}, 0x840)
sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0xf)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000100))
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]})
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="00e0ae5b7e0d0000bc5adfe18aa4ebf664be8527c64328526eba0d33eb7a46dea7b4e1e883b763ddd574304af163f347619d2aa6e7d97f7385e2cd5caa94", &(0x7f0000000080)=0x4d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r5, &(0x7f0000000700)="d80b00"/14, 0xe)
kqueue()
sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x800, 0x101)
r6 = socket$inet(0x2, 0x3, 0x1)
setsockopt(r6, 0x0, 0x3, 0x0, 0x0)

2.133026955s ago: executing program 3 (id=1229):
sysctl$net_inet6_ip6(&(0x7f00000000c0)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000500), 0x0)
clock_gettime(0x33563686ec971794, 0x0)

2.112817146s ago: executing program 3 (id=1230):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000819000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000fc0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000c3f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000932000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000c3f000/0x3000)=nil, &(0x7f0000e53000/0x2000)=nil}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xe8af}, {&(0x7f0000f56000/0x1000)=nil, &(0x7f00008fb000/0x2000)=nil}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000ff2000/0xb000)=nil}, {&(0x7f0000cd3000/0x1000)=nil, &(0x7f0000fb7000/0x4000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil}, {&(0x7f00008e6000/0x3000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000da1000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x2}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x80000000000}, {&(0x7f0000abb000/0x4000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x4}, {&(0x7f0000b29000/0x2000)=nil, &(0x7f0000bd7000/0x4000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x67})
r0 = socket(0x2, 0x3, 0x0)
getsockopt(r0, 0x0, 0x66, 0x0, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = socket(0x2, 0x3, 0x0)
r3 = socket(0x2, 0x2, 0x0)
getsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000280)=0x10)
r4 = dup(r3)
setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
r5 = dup2(r4, r2)
sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x1}, 0x8)
ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000001c0))

2.112439224s ago: executing program 3 (id=1231):
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
r0 = syz_open_pts()
close(r0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munmap(&(0x7f0000363000/0x2000)=nil, 0x20001)
shutdown(0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r1, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1", 0x77}, {&(0x7f0000001200)="b389e5aeb7b42eab8dd0017236f060f918503740799f35d7e2e733fc1ce9e45cfb279a7aeb65ad9859d427a701bb4c25", 0x30}, {0x0}], 0x3)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008", 0x88, 0x0, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x5, "52c9795a6b476ed1000000000000000000000008", 0x2000000, 0x5})
syz_open_pts()
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="e9e1a3bce8f6a3529db050ecdfd2749f29e88696124f80a7bf44f45f49", 0x1d}], 0x1)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x29f57365, 0x7fff, 0x1f, 0xffffffff, "8b02000300090a7848b13e13355f4fa7c2f4e300", 0x1})
writev(r0, &(0x7f0000003680)=[{&(0x7f0000000180)="286c8490cd", 0x5}], 0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0)

2.067364545s ago: executing program 3 (id=1233):
socket(0x18, 0x1, 0x0) (async)
socketpair(0x10, 0x4, 0x45, 0x0) (async)
getrusage(0xffffffffffffffff, &(0x7f0000000000))

2.063565541s ago: executing program 3 (id=1235):
r0 = open(&(0x7f0000000180)='./file0\x00', 0x7d, 0xbedc0ecb543661a3)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x9cab835cfdc52675, 0x83)
r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x100, 0x0)
writev(r2, &(0x7f0000001680)=[{&(0x7f00000001c0)="ff0f50199c00000000f28583a1af2dbadcc5f5ed725dd3b883c56df8ba5db1b1f9f47925d7a97941b4e73c9f34d87d26e831173e347d2897695a65a3e14e47df92a35dba6b18ad0d", 0x48}], 0x1)
sysctl$net_inet_ipip(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x10)
chmod(&(0x7f00000000c0)='./file2\x00', 0x319)
chdir(&(0x7f0000000140)='./file0\x00')
symlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000180)='./file0\x00', 0x6d84b028b6b26ff2, 0x0)
rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='\x00\x00\x00\x00', 0x4)
mmap(&(0x7f00002d0000/0x3000)=nil, 0x3000, 0x2, 0x8812, r1, 0x0)
ftruncate(r2, 0x8)
setrlimit(0x3, &(0x7f00000002c0)={0x8, 0x100000})
r3 = syz_open_pts()
close(r3)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
read(r4, &(0x7f0000000340)=""/249, 0xf9)
r5 = syz_open_pts()
poll(&(0x7f0000000080)=[{r3, 0x4}, {r5, 0x20}, {r4, 0x6}], 0x3, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="915bdfadf22e28e2efefff458377b33f208cb4b3b53b941cd1567bb7ea", 0x1d}], 0x1)
r6 = getpgrp()
fcntl$setown(r0, 0x6, r6)
r7 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x2, 0x10, r5, 0x4000000001)
recvfrom$inet6(r7, &(0x7f0000002700)=""/4106, 0x100a, 0x1000, &(0x7f0000000000)={0x18, 0x2, 0x9, 0x401}, 0x6)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b7cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499669e6e77257a2aa148e005e43c15d12a78cb8c57ddde8709cceb685507fd3e0652f35e45bdaa3afd86c4fe55758741cb5c27dd9433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefab00043ebe806fdb4f6a", &(0x7f0000000280)=0xa1, &(0x7f0000001440)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccfebad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381a55110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xef)

2.063120106s ago: executing program 3 (id=1237):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$pf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b761eaf1616bf6932da7386d53", 0x2f}, {0x0}], 0x2)
open$dir(&(0x7f0000000200)='./file0\x00', 0x10000, 0x108)
kqueue()
getsockopt(0xffffffffffffffff, 0x29, 0xa, 0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x2a)
mkdir(0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = shmget$private(0x0, 0x2000, 0x9e, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x1000)
syz_extract_tcp_res(&(0x7f0000000100), 0x8, 0x7fffffff)
syz_emit_ethernet(0x33, &(0x7f0000000280)={@empty, @local, [], {@generic={0x8145, "0e1420391d333f20b8e16e821db064843859e63101ec4d764bd9c05945bd9e478652366b74"}}})
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x23, &(0x7f00000000c0)="a7", 0x1)
setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4)
setsockopt(r1, 0x0, 0x6e, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
open(&(0x7f00000000c0)='./file0\x00', 0x20, 0x14)
execve(0x0, 0x0, 0x0)
r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x10100, 0x1c)
utimensat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{0x0, 0xd}, {0x10001, 0x800}}, 0x0)

1.670678872s ago: executing program 7 (id=1251):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
chown(&(0x7f0000000180)='./file0\x00', r0, 0xffffffffffffffff)
r1 = getuid()
setreuid(0x0, r1)
chmod(&(0x7f00000000c0)='./file0\x00', 0x3ea)
chdir(&(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfa)
readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=""/250, 0xfa)
r2 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18c)
renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.670310403s ago: executing program 7 (id=1252):
sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="00000000c5", 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0xfd17)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4)
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$WSKBDIO_GETMAP(r0, 0xc0105715, &(0x7f0000000000)={0x0, &(0x7f00000014c0)})

1.669420594s ago: executing program 7 (id=1253):
syz_emit_ethernet(0x7bf, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64])

1.669109209s ago: executing program 7 (id=1254):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
poll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x40}, {0xffffffffffffff9c, 0x10}, {r0, 0x4}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10}, {r0, 0x10}, {0xffffffffffffff9c, 0x1}], 0xa, 0x7) (async)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={<r2=>0xffffffffffffffff}) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x30}, {0x30, 0xfc, 0x0, 0x43f}, {0x6, 0x0, 0xfe, 0xfffffffe}]}) (async)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="8c7b6ec5bf4809b60d81a43c", &(0x7f0000000080)=0xc, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 64)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async)
write(r3, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000580)=0xc)
setregid(0x0, r4) (async, rerun: 64)
setrlimit(0x1, &(0x7f0000000980)={0xff, 0xd21}) (rerun: 64)
r5 = getpid() (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) (async, rerun: 32)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) (rerun: 32)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002240)="582383ba32ce44e08e23b16f3aec414a7aadc2068e1e2ea661696efb258f1a1b", 0x20}], 0x1) (async, rerun: 32)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async, rerun: 32)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="fb69abaadacc73352091501d94a34b9a73af13cac5a41708000000000000004835518591917ccc8cf6040000000000008020e1e6e43e2e8a906627a7fbc86cfd00"/77, &(0x7f0000000080)=0x4d, 0x0, 0xffffff61)
ioctl$BIOCGDIRFILT(r2, 0x4004427c, &(0x7f0000000240))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64)
syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}}) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r5)
setreuid(0xee00, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x615, 0x0) (async, rerun: 32)
select(0xd, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x2, 0x4, 0x8000000000000000, 0xb}, &(0x7f0000000140)={0x1, 0xffffffffffffcca3, 0x101, 0x40000000003, 0x5, 0x7, 0x0, 0x6}, &(0x7f0000000300)={0x4, 0x8000000000000000, 0x3d, 0x100, 0x9, 0xda0, 0x5, 0xe}, 0x0) (rerun: 32)

1.668370277s ago: executing program 7 (id=1255):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
r0 = socket(0x6, 0x3, 0x6)
r1 = socket(0x2, 0x2, 0x0) (async, rerun: 64)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (rerun: 64)
r2 = socket(0x10, 0x4000, 0xfd)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async)
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async)
r4 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r4, 0xc0206921, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0x80206916, &(0x7f00000001c0)) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
bind(r0, &(0x7f0000000000), 0x10)
r5 = getppid()
fcntl$setown(0xffffffffffffffff, 0x6, r5) (async, rerun: 64)
geteuid() (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
setregid(0x0, 0x0) (async)
setregid(0x0, 0x0) (async)
setreuid(0x0, 0xee01) (async)
r6 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x1000, 0x0, 0x0) (async)
r7 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r7) (async)
r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r8, 0x80045710, &(0x7f00000000c0)=0x200) (async)
bind(r0, &(0x7f0000001480)=@in={0x2, 0x1}, 0xc) (async)
getuid()

1.463829542s ago: executing program 7 (id=1256):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000580)=0xc)
setregid(0x0, r2)
setrlimit(0x1, &(0x7f0000000980)={0xff, 0xd21})
r3 = getpid()
ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x500, r3)
setreuid(0xee00, 0x0)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r4, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
select(0x40, &(0x7f0000000080)={0x16, 0x0, 0x2, 0x4d1, 0x7, 0x4, 0x10000000000000}, 0x0, 0x0, 0x0)
truncate(&(0x7f00000001c0)='./file0\x00', 0x1)
setpgid(r3, r3)
fchownat(r0, 0x0, 0x0, 0x0, 0x6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x40, &(0x7f0000000100)={0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x75, 0x5, 0x100000000, 0xfff}, 0x0, &(0x7f00000002c0)={0x4, 0x40e33, 0x8, 0x100000001, 0x406, 0x9, 0x5, 0x3}, &(0x7f0000000300)={0x6, 0x1})
sysctl$kern(&(0x7f0000000240)={0x1, 0x5b}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$net_inet_etherip(&(0x7f0000000640)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000740), 0x0)

1.167767998s ago: executing program 6 (id=1264):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xf9)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
sysctl$hw(&(0x7f00000001c0)={0x6, 0x18}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x7, 0x0})
dup(r0)

1.167142419s ago: executing program 6 (id=1265):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x9, 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000380)=[@rights={0x10}, @cred={0x20}], 0x30, 0x404}, 0x8)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"})
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0xd466152bd0ed567, 0x0)
ioctl$TIOCNOTTY(r1, 0x20007471)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x2f)

963.805908ms ago: executing program 6 (id=1266):
setuid(0xffffffffffffffff)
socketpair(0x1e, 0x3, 0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xb0, 0x3, 0x8, 0x7}]})
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x3, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000000140))
ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
ioctl$BIOCSETIF(r1, 0x40384900, 0x0)
close(r1)
socket(0x18, 0x5, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='r\x00')
unveil(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)='W\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x0)

963.519148ms ago: executing program 6 (id=1267):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r0 = open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x101)
kevent(r0, 0x0, 0x1, 0x0, 0x3, &(0x7f0000000100)={0x3})
r1 = kqueue()
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000000c0), 0xc)
kevent(r1, &(0x7f0000000080), 0x6, 0x0, 0x8000800, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x7, &(0x7f0000000080)=[{0xe, 0xc4, 0x5, 0x1}, {0x3, 0x6, 0xc3, 0xffff}, {0x5, 0x1, 0x3, 0x2}, {0x81, 0x3, 0x7, 0xd6}, {0x100, 0x4, 0x1, 0x9}, {0xfff8, 0x7f, 0xff, 0x4}, {0x8, 0xa, 0x2, 0x5}]})
close(r1)

962.948251ms ago: executing program 6 (id=1268):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x800000018, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)

962.69616ms ago: executing program 6 (id=1269):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x8)
kevent(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff})
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r2 = syz_open_pts()
writev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="c943af62", 0x4}], 0x1)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000002c0)=0x8)
unveil(0x0, &(0x7f0000000040)='x\x00')
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r3, 0x40384900, 0x0)
close(r1)
getsockopt(r3, 0x4c, 0x4, &(0x7f0000000300)=""/170, &(0x7f0000000080)=0xaa)

43.773236ms ago: executing program 4 (id=1272):
setreuid(0x0, 0xee01)
stat(&(0x7f0000000100)='.\x00', &(0x7f0000000340))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000280)='./file0\x00', 0x3b)
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
setreuid(0x0, 0xee01)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00')
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000000000000ea8331a27288c347ecefe8ec57959b6ba2b8dfcef83875f96cb5d719ecee64ad2de2a671319330d81e114896561c54aa156fe2c1e13a91edcb3b13ace6aba82991c5b4083b057088eee9da9a61ae0829dfcb20df89ac2ed65fd8014b231fddec3fb531045015e0424ca6e32c6dc6133901fbff6bf404ace8b99771882bbc395ab24373190d951c7523c2bccc8ea9350d6b7a0eb88f9e26018c42e5ba5c50ced14ee2c18652b82839a67ba1a58f601af15d3ae75d224e8fed673009ceb4907240fe255690ba6ed9f05d4cfd690212"], 0xf0, 0x800)
msgrcv(r1, &(0x7f0000000e40)={0x0, ""/163}, 0xab, 0x2, 0x800)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000300)=[{0x30, 0xfc, 0x2, 0x1}, {0x1, 0x40, 0x0, 0x5}, {0xd846, 0x20, 0x1, 0x8000af}]})
write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r5 = kqueue()
r6 = dup(r5)
kevent(r5, &(0x7f0000000280)=[{{r6}, 0xfffffffffffffffa, 0x65, 0x40000080}], 0x6, 0x0, 0x0, 0x0)
r7 = kqueue()
kevent(r7, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
kevent(r7, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0)
close(r3)
writev(r4, &(0x7f0000000200)=[{0x0}], 0x1)
ioctl$TIOCSETA(r2, 0xc4504442, &(0x7f0000000740)={0x2f, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})

43.505832ms ago: executing program 5 (id=1273):
r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r1 = socket(0x18, 0x3, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000001c0)=0x10000000, 0x4)
getpeername$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
sysctl$hw(&(0x7f0000000000)={0x6, 0x17}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0)
r2 = semget$private(0x0, 0x4, 0x140)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000100)=""/148)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async)
socket(0x18, 0x3, 0x0) (async)
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000001c0)=0x10000000, 0x4) (async)
getpeername$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async)
sysctl$hw(&(0x7f0000000000)={0x6, 0x17}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
semget$private(0x0, 0x4, 0x140) (async)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000100)=""/148) (async)

43.246471ms ago: executing program 2 (id=1274):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000200)={&(0x7f00000002c0)='./file0\x00', r0})
close(r0)
acct(&(0x7f0000000040)='./file0\x00')

41.839845ms ago: executing program 5 (id=1275):
open(&(0x7f0000000000)='./file0\x00', 0x200, 0x104)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

41.438138ms ago: executing program 5 (id=1276):
mkdir(&(0x7f0000000180)='./file0\x00', 0x58)
setuid(0xffffffffffffffff)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002240)="582383ba32ce44e08e23b16f3aec414a7aadc2068e1e2ea661696efb258f1a1b7f6b6ef206c774efcf04017ae1445254d236d2c3d6cb3022878831760371d77a36f978fd", 0x44}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000240)="f969afaadacc73312091501dd6050000000000005c6fd13794245f28450c5d8fdc2c5b9bffffecffffffffff", &(0x7f0000000080)=0x2c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[])
chdir(&(0x7f0000000580)='./file0\x00')

1.253829ms ago: executing program 5 (id=1277):
r0 = msgget(0x2, 0x221)
msgsnd(r0, &(0x7f0000000000)={0x1, "30f7134d6ecc77a1cf56e9c354d04b583dc017157f70f50fe1c6914d6bc4c3c224e1242a80d02665c3643542c7582b7f6a1a388ec8d701f40dfdd76da653005c72fe40224df84c0419204d0121ba359ca3226b79f08bba5b24e5eff3a02bff64712a3cc25bd88b019f10ebe330f244740e1aaf87420439e2ea035da96cdc36d2cbf6ad45aac1b29b5139209a232eefbd46"}, 0x99, 0x0)
r1 = msgget$private(0x0, 0x410)
msgsnd(r1, &(0x7f00000000c0)={0x0, "2126ac"}, 0xb, 0x0) (async)
r2 = syz_open_pts()
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000100)={0x0, 0xc, 0x0, 0xffffffff, "fa75e287eacb10980d2f037b39fb8d30a44ac149", 0x80, 0x3}) (async)
msgctl$IPC_RMID(r1, 0x0) (async)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x20018, 0x0) (async)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0xff, 0x3, 0x3, 0x0, "1d462f7074762adb805de5cb803ea1b6ca924da3", 0x1000, 0x5})
msgctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/105)
msgctl$IPC_RMID(r0, 0x0) (async)
r3 = msgget(0x3, 0x6)
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000240)=""/85)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
setuid(r4)
msgrcv(r3, &(0x7f0000000340)={0x0, ""/4096}, 0x1008, 0x2, 0x800) (async)
setuid(r4)
getsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000001380), &(0x7f00000013c0)=0x8) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={<r6=>0xffffffffffffffff}) (async)
msgctl$IPC_RMID(r0, 0x0) (async)
msgget(0x0, 0x100)
msgrcv(r3, &(0x7f0000001440)={0x0, ""/84}, 0x5c, 0x1, 0x400) (async)
r7 = accept$unix(r6, &(0x7f00000014c0)=@file={0x0, ""/62}, &(0x7f0000001500)=0x40)
connect$unix(r7, &(0x7f0000001540)=@abs={0x0, 0x0, 0x1}, 0x8) (async)
socket(0x18, 0x4000, 0x7) (async)
setsockopt(r7, 0xfffffff2, 0x3, &(0x7f0000001580)="e678fdf989a9ce2264fc277cc59c802d5e9448cb80b571263e3819863aa0af8fa2f87fad2f2cf16f8fb0dbc1d871c5f7043190c948ff7e680a2614eb95828b685cd06dba4ca6ebff56326a66d4673ae2833b5f1239ee15536afe", 0x5a)
socket(0xf, 0x4000, 0x7)
r8 = open$dir(&(0x7f0000001600)='./file0\x00', 0x10000, 0x108)
readlinkat(r8, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)=""/146, 0x92)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001740)={{0x6, r4, r5, r4, r5, 0x102, 0x1}, 0x2, 0x3, 0x9})

726.029µs ago: executing program 5 (id=1278):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x140)
renameat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') (async)
renameat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00')
openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$WSKBDIO_SETBACKLIGHT(r1, 0x800c5712, &(0x7f0000000100)={0x1ff, 0x2, 0x4})
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f0000000180)={0x2, 0x440af735})
bind$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa)
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, ""/43}, &(0x7f0000000240)=0x2d) (async)
r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, ""/43}, &(0x7f0000000240)=0x2d)
bind$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x3}, 0x8) (async)
bind$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x3}, 0x8)
r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$WSDISPLAYIO_ADDSCREEN(r4, 0x80245753, &(0x7f0000000300)={0x4, './file0\x00', './file0\x00'})
r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xc)
setsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f00000003c0)={0x9, 0x1}, 0x8)
ioctl$WSDISPLAYIO_SBURNER(r2, 0x800c5751, &(0x7f0000000400)={0xfffffffa, 0xfffffffe, 0x1}) (async)
ioctl$WSDISPLAYIO_SBURNER(r2, 0x800c5751, &(0x7f0000000400)={0xfffffffa, 0xfffffffe, 0x1})
r6 = syz_open_pts()
ioctl$TIOCCLRVERAUTH(r6, 0x2000741d)
syz_open_pts() (async)
r7 = syz_open_pts()
ioctl$TIOCGWINSZ(r7, 0x40087468, &(0x7f0000000440))
renameat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', r0, &(0x7f00000004c0)='./file0\x00')
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0)
r9 = getuid()
setuid(r9)
ioctl$TIOCSETD(r8, 0x8004741b, &(0x7f0000000540)=0x80000000) (async)
ioctl$TIOCSETD(r8, 0x8004741b, &(0x7f0000000540)=0x80000000)
mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x8) (async)
mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x8)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000005c0), &(0x7f0000000600)=0xc) (async)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000600)=0xc)
chown(&(0x7f0000000580)='./file0\x00', r9, r10) (async)
chown(&(0x7f0000000580)='./file0\x00', r9, r10)
chmod(&(0x7f0000000640)='./file0\x00', 0x10)
open(&(0x7f0000000680)='./file0\x00', 0x0, 0x50)
socketpair(0x20, 0x8000, 0xc, &(0x7f00000006c0)={<r11=>0xffffffffffffffff})
close(r11)

0s ago: executing program 5 (id=1279):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f00000004c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f00005f5000/0x9000)=nil, 0x0, 0x401}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00000de000/0x1000)=nil, 0xfffffffffffffffb}, {&(0x7f000067f000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xd17}, {&(0x7f0000275000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x2}, {&(0x7f00002d8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8}, {0x0, 0x0, 0x5}, {&(0x7f00004d8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffff343}, {&(0x7f00005b7000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x7}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x3000)=nil, 0x0, 0x3}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000244000/0x2000)=nil}, {0x0, &(0x7f00005b5000/0x2000)=nil, 0x6}], './file0\x00'})
r0 = open(&(0x7f0000000280)='./bus\x00', 0x200, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0xf0000000, 0x0, 0x0, "bfab00", 0x0, 0x3}) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async)
sysctl$kern(&(0x7f0000000080)={0x1, 0x8}, 0x2, &(0x7f00000000c0)="755b044dd942e7e85148", &(0x7f0000000140)=0xa, &(0x7f0000000180)="7bdd618d9efcfd280a10776c953d83a878be24df1173ef7139c9401a4d457f663c0318020d0924a9140a02bc6b06cd5c61c97082d50da1e77528fc2f5ad170a31b6468b4e5f2f4d19a4a5ac07ec6912b7a24d22448c03ddc54052a77bee382d2f9ff4c9c08d4a1f04517e689d9fab913fdb6cffc7ca7b3291cd5a6db52f6e41b504cd34731c26b96827208a1ebd0f316f5091574fb9d82dda278701cd10a2d1a8734853e9db4e39d74ccdbb55f47ad6027749db34a400d0d34454689cb2ec4e833a7d72e3e3d144d280f96c6b06587497189000a32f13134a20a80c0990897c11f7097a030039d8e0dbbdab0cc8e7ffa1258bb11a238", 0xf6) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000200)={0xa, &(0x7f00000002c0)=[{0x6, 0x3, 0x97}, {0x1, 0x8, 0xfb}, {0x4, 0x5, 0x9, 0x1}, {0x6, 0x6, 0xc, 0x3ff}, {0x9, 0x60, 0x9, 0x1}, {0x0, 0x7a, 0x4, 0x6}, {0xc, 0x4, 0x9, 0x5}, {0x7, 0x2, 0xf0, 0x4}, {0x8, 0x6, 0x40, 0x4}, {0xc, 0x81, 0xdf, 0x75}]})
syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[]) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) (async)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x287e) (async)
mknod(0x0, 0x1ffa, 0x0)
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x77)
r5 = getpgrp()
r6 = getpgid(r5)
fcntl$setown(r1, 0x6, r6) (async)
close(r4) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x1, 0x0, 0xf7, 0x1}, {0xfffe, 0x4, 0x3, 0x5}]})
r7 = semget(0x0, 0x1, 0x281)
semctl$IPC_RMID(r7, 0x0, 0x0) (async)
semop(r7, &(0x7f0000000080), 0x26) (async)
semctl$SETALL(r7, 0x0, 0x9, &(0x7f0000000000)) (async)
mprotect(&(0x7f00006c1000/0x3000)=nil, 0x3000, 0x4)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
dup(0xffffffffffffffff) (async)
clock_settime(0x100000000000000, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
load: 3.96  cmd: getty 87179 [ttyin] 0.00u 0.00s 0% 326k
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pmap_unwire: wiring for pmap 0xfffffd806b339a30 va 0x400000001000 didn't change!
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
fatal protection fault in supervisor mode
trap type 4 code 0 rip ffffffff81c5284b cs 8 rflags 10246 cr2 40000000048c cpl 0 rsp ffff80003c997570
gsbase 0xffffffff837cdff0  kgsbase 0x0
panic: trap type 4, code=0, pc=ffffffff81c5284b
Starting stack trace...
panic(ffffffff832dfc53) at panic+0x1ba
kerntrap(ffff80003c9974c0) at kerntrap+0x28b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
sys_semop(ffff80002a807c48,ffff80003c997770,ffff80003c9976c0) at sys_semop+0x45b
syscall(ffff80003c997770) at syscall+0x97e
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x348d37e1510, count: 251
End of stack trace.