last executing test programs:

1.582931602s ago: executing program 2 (id=186):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='n', 0x1}], 0x1)

1.481663027s ago: executing program 6 (id=188):
sysctl$vm(&(0x7f0000000080)={0x2, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0)
r0 = kqueue()
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000080)={0x2, 0x10001})
kevent(r0, &(0x7f00000000c0)=[{{r0}, 0xffffffffffffffff, 0x2, 0x80000000, 0x7, 0xb9e}, {{r0}, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x2004}], 0x40, 0x0, 0xa, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc80})
kevent(r0, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0)
sysctl$vm(&(0x7f0000000080)={0x2, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) (async)
kqueue() (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) (async)
ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000080)={0x2, 0x10001}) (async)
kevent(r0, &(0x7f00000000c0)=[{{r0}, 0xffffffffffffffff, 0x2, 0x80000000, 0x7, 0xb9e}, {{r0}, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x2004}], 0x40, 0x0, 0xa, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc80}) (async)
kevent(r0, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) (async)

1.480648097s ago: executing program 1 (id=190):
mknod(&(0x7f0000000280)='./file0\x00', 0x8, 0x1)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x9, 0x45}, {0x40, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x0, 0xfffff, 0x200000000000001, 0xfffffffffffffffd}], 0x200, 0x0, 0xd6, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
close(r2)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455c00300066000000019078ac1400348db49d51a54145a44148bbe00000010c00907800080000456cfffc0000000008"])
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r4 = syz_open_pts()
close(r4)
r5 = syz_open_pts()
ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000000)=0x1)
ioctl$FIOASYNC(r5, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000040)={0xfffffff8, 0xfb4, 0x200, 0x6080, "1796462d305b71870d635a15bb37738a1ddead5b", 0xe, 0x4})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x407, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0)

1.45455617s ago: executing program 6 (id=191):
getitimer(0x0, &(0x7f00000000c0))
syz_emit_ethernet(0x5e, &(0x7f0000000700)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x28, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @empty}}}}}})

1.4250362s ago: executing program 1 (id=193):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x180)
pipe2(&(0x7f0000001a80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10000)
poll(&(0x7f0000001b40)=[{r2, 0x80}], 0x1, 0x7)
write(r1, &(0x7f0000001e00)="977818", 0x3)
ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000140)={0x0, 0x0, {0x9, 0x9}})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r3 = socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x2}, 0x8)
connect$unix(r3, &(0x7f0000000000), 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
accept(0xffffffffffffffff, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc)
r4 = socket$inet(0x2, 0x3, 0x0)
unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='W\x00')
getsockopt(r4, 0x0, 0x5, 0x0, 0x0)

1.416067001s ago: executing program 6 (id=194):
socket$inet(0x2, 0x2, 0x0)

1.402105498s ago: executing program 6 (id=197):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0xfffffffe) (async)
r0 = syz_open_pts() (async)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x0, 0xb0f, 0xfff}, {0x18, 0x2, 0x8, 0x6}, 0x5, [0x101, 0x7, 0x9, 0xb, 0x5eb, 0x7, 0x2, 0xc80]}, 0x3c)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x10000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x400003, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00', 0x11, 0x1000a}) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket(0x2, 0x3, 0x1)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
write(r2, &(0x7f0000000140)="33e8fb9dfa5a94cfa943e7662f41f28418d35c4598de390d8f3d62fb", 0x1c) (async)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000540)=0x8)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x10)
bind$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8)

1.400715188s ago: executing program 4 (id=198):
r0 = semget(0x0, 0x1, 0x281)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
semctl$GETVAL(r0, 0x1, 0x5, &(0x7f0000000000)=""/9)
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))
setrlimit(0x3, &(0x7f0000000040)={0x7, 0x5c})
r3 = syz_open_pts()
close(r3)
syz_open_pts()
writev(r3, &(0x7f00000005c0)=[{&(0x7f0000002d40)="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", 0x877}], 0x1)
ioctl$FIONREAD(r3, 0x4004667f, 0x0)
getpid()
semop(r0, &(0x7f00000002c0)=[{0x0, 0x7, 0x1800}, {0x0, 0xfff9, 0x1000}], 0x2)

1.388972386s ago: executing program 1 (id=199):
setegid(0xffffffffffffffff)
r0 = getegid()
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x8)
r2 = semget(0x0, 0x4, 0x180)
mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={<r3=>0x0}, &(0x7f0000000280)=0xc)
ktrace(&(0x7f0000000200)='./file0\x00', 0x2, 0x5e1270d9d1b87c8f, r3)
r4 = getegid()
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000000c0)={{0x8, 0x0, r0, 0xffffffffffffffff, r4, 0x10, 0x3}, 0x0, 0x81, 0x7})
r5 = getuid()
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r6 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r6, 0x802069b4, &(0x7f00000001c0))
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
close(r6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r8, 0x0, 0x0, 0xc1}, 0x0, 0x0, 0xf})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27)
fchownat(r1, &(0x7f0000000080)='./file0\x00', r5, r0, 0x2)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r9=>0x0}, 0xffffffffffffff77)
setregid(r0, r9)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sysctl$vm(&(0x7f0000002e40), 0x2, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])

1.365588571s ago: executing program 1 (id=200):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) (async)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) (async, rerun: 64)
r1 = kqueue() (rerun: 64)
kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async)
kevent(r1, 0x0, 0x0, 0x0, 0x2, 0x0) (async)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x2) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0xfffffffffffffead}, 0xc) (async)
sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000100), 0x0) (async)
r2 = getpgrp() (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x20, 0x0)
ioctl$TIOCSETA(r3, 0xc0284414, &(0x7f0000000040)={0xfffffffc, 0xff, 0xffff7ffe, 0x5, "250d0e00008734f3b96b800000000040218005f1", 0x2000002, 0x3}) (async, rerun: 64)
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x200, r2) (rerun: 64)

1.363678511s ago: executing program 4 (id=202):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x4287e)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0))
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
close(r1)
unveil(0x0, &(0x7f00000000c0)='r\x00')
preadv(0xffffffffffffff9c, &(0x7f0000000880), 0x1071, 0x100)

1.137538441s ago: executing program 6 (id=203):
setrlimit(0x8, &(0x7f0000000000)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
setuid(0xffffffffffffffff)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4)
setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x9789, 0xfffffffb, 0x3, 0x80a19e, "bb081aa9000800f7beae58beff0f00", 0x71, 0x4})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)

1.072238374s ago: executing program 6 (id=206):
r0 = kqueue()
r1 = syz_open_pts()
ioctl$TIOCSTAT(r1, 0x20007465, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r2 = syz_open_pts()
r3 = semget(0x0, 0x1, 0x281)
semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000200)=""/173) (async)
semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000200)=""/173)
semop(r3, &(0x7f0000000100)=[{0x2, 0x762, 0x1400}, {0x3, 0x1, 0x800}, {0x1, 0x9, 0x800}, {0x1, 0x3, 0x800}, {0x3, 0x1000, 0x1800}, {0x3, 0x0, 0x800}, {0x2, 0x6, 0x800}, {0x4, 0x77}], 0x8)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000005c0)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x9, 0x45}, {0xc0, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0xa, 0xfffff7fe}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="452417d45410916bd5813a4df657d22dd12cc56000", 0x2e}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="452417d45410916bd5813a4df657d22dd12cc56000", 0x2e}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00231b000f407061035c2532d7a0ea9200001f00385c24fc3be7d5c1a5db0c8043846b45c6888320424dca5d2c044a51f48cef4008b3b6aea789af305a16b33e3f9ee1f24abe2d475001665eaf211d925f4a4da6a00c37eb3b391c9dadb971164283597b9e2db7f4ed949237f4c9a1739a99ba17381ec85b09675f8f3f121db6322485ba15ec432c0c4484ef388253cb298a0c8577709fcc9324f5ee78c7d6fa35da741e5691f397e0473dec", &(0x7f0000000000)=0xac, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r4, &(0x7f00000003c0)="f81ad3010006000000010000f500", 0xe)
close(r2)
r5 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0x5, 0xe000000, 0x10db, 0x0, "3749c7a40dea0000170000000000000000ff0100", 0x2, 0x5})
readv(r5, &(0x7f0000000140)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1) (async)
readv(r5, &(0x7f0000000140)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1)
close(r5)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)="b9", 0x1}], 0x1)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x9) (async)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x9)
execve(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="39f29fff56576a8d", 0x8)
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x3}, 0x8) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x3}, 0x8)
kevent(r0, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x8b, 0x0, 0x1000000000000000}], 0x56, 0x0, 0x7fff, 0x0) (async)
kevent(r0, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x8b, 0x0, 0x1000000000000000}], 0x56, 0x0, 0x7fff, 0x0)
socket(0x18, 0x1, 0x0) (async)
r6 = socket(0x18, 0x1, 0x0)
sysctl$net_inet_carp(&(0x7f0000000180)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f00000002c0)="b48e9be148a15e85634eead78450b2a2fab2a339b29ac7bac66756faf412eb748c3470ce2d1824196bf2d1bb691b2866c07062fa818dcb6e7fb8deba04793262e9c809618a8da31251a755784bf5f266bfca61677356bd2880801698dc0192c1e8a71d858fbfe8c1c2b7d0", &(0x7f00000001c0)=0x6b, &(0x7f0000000480)="c2a2faf0a56482fd2739484cef728d707abd649c625d7b033572c2eb069e40897b4ff9ef27d4e501a511f75428391d3aca2de1beb3bf2f59b42fbc8e46c78a8cb5a2998169effd39d024a80e6c8e670433853762608c58b736a5ac3161af9979159784f91d232f4191a67db83902c93dd87a9ff6f4bef385cafad33e8f43397e8af4aef3a0907b018ca5a5616667deb914300533903cb3c26b416018908e9d45f4be7ae93eaac0ac050f26632e97a1cee08c48db977cf103380ecb", 0xbb) (async)
sysctl$net_inet_carp(&(0x7f0000000180)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f00000002c0)="b48e9be148a15e85634eead78450b2a2fab2a339b29ac7bac66756faf412eb748c3470ce2d1824196bf2d1bb691b2866c07062fa818dcb6e7fb8deba04793262e9c809618a8da31251a755784bf5f266bfca61677356bd2880801698dc0192c1e8a71d858fbfe8c1c2b7d0", &(0x7f00000001c0)=0x6b, &(0x7f0000000480)="c2a2faf0a56482fd2739484cef728d707abd649c625d7b033572c2eb069e40897b4ff9ef27d4e501a511f75428391d3aca2de1beb3bf2f59b42fbc8e46c78a8cb5a2998169effd39d024a80e6c8e670433853762608c58b736a5ac3161af9979159784f91d232f4191a67db83902c93dd87a9ff6f4bef385cafad33e8f43397e8af4aef3a0907b018ca5a5616667deb914300533903cb3c26b416018908e9d45f4be7ae93eaac0ac050f26632e97a1cee08c48db977cf103380ecb", 0xbb)
setsockopt(r6, 0x1000000000029, 0x8, &(0x7f0000000740)="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", 0x116)

976.333629ms ago: executing program 2 (id=210):
setuid(0xffffffffffffffff)
sendmsg(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000000c0)="ab2774dbe95f9df5227263a7ea430d29b52dbd85b8f4f092262e60d0b31b9f1537d599554f8c587954c4068dec768f2d328d2119d4d700f46a7fd6fdee31580ebaa67d43ae2d7d7ec789d69ca14ce27d8f39c47ab20847370c7a4f13f0d46deb90f7914fc1b9e6cc77d0eb50b68899f1bb680393d91ef1f79f47c4ddbb085940021b695bdfb2962a4ec7a9309b020847bc0f", 0x92}], 0x1, 0x0, 0xd8}, 0x409)
r0 = socket(0x18, 0x400000002, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x4a, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x9, 0x0, 0x20000}, {0x4, 0x0, 0x3}, {0x46, 0x0, 0x0, 0xfffffff1}, {0xf, 0x5, 0x8, 0x6}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac)

965.732732ms ago: executing program 2 (id=212):
sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x70, 0x3}, 0x4, &(0x7f0000000200)="954a4667b2d05ae4b57ead7cff54d063367438bdb0bdf14024d0a52c59f269dd4bf588d42e0965195c44d53fbfff1ff0d840cf7aeaa433e77dfa0644a08007f3084f1ab20db8b4a5702d2e720eaffe5eb807b5aa1e4030503c07871c993ff394d9966ee95fefeb1b4eeb4648a4f340ca2502ee6516444d1272", &(0x7f0000000180)=0x79, &(0x7f00000003c0)="19d50e62c63f0f0678af0bc22f9eaea11a4fc16fe1e2f585bfd6fe71ab0feb3a28aad3acba44b4dd927b8d5d38d08093fb2ef7cf77f28afee35ab166a65a42035c06130848dc46a1078a4435cc33206b2c2292bfd51f7f785e9814dd156bb584d54a07493c0fd3c2a169e58f4f4b6df541f3a3eb8581ae53e133e37f43c5c84b010ae7b4b561edb482f6ba4e35cb36bad8ef573574488bf689966d4d44b2f5ebac649aee8078656da95299729276062c", 0xb0)
semget(0x0, 0x1, 0x281)
r0 = semget(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000280)=[{0x0, 0x8, 0x1000}, {0x4, 0xad7b, 0x1000}, {0x1, 0x4, 0x1000}, {0x2, 0x68fd, 0x800}, {0x0, 0x3}, {0x7, 0x8, 0x1000}], 0x6) (async)
semop(r0, &(0x7f0000000280)=[{0x0, 0x8, 0x1000}, {0x4, 0xad7b, 0x1000}, {0x1, 0x4, 0x1000}, {0x2, 0x68fd, 0x800}, {0x0, 0x3}, {0x7, 0x8, 0x1000}], 0x6)
semop(r0, &(0x7f0000000000), 0x23)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x4}, {0x4}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x2, 0xd}, {0xffffffffffffffff}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
ioctl$FIONREAD(0xffffffffffffffff, 0x80206979, &(0x7f00000001c0)) (async)
ioctl$FIONREAD(0xffffffffffffffff, 0x80206979, &(0x7f00000001c0))
unveil(0x0, &(0x7f0000000640)='x\x00')
semget(0x0, 0x1, 0x281) (async)
r2 = semget(0x0, 0x1, 0x281)
semctl$GETALL(r2, 0x0, 0x1d, 0x0)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

960.832232ms ago: executing program 2 (id=215):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x85)
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = accept$unix(r1, &(0x7f00000000c0)=@file={0x0, ""/4101}, &(0x7f0000001100)=0x1007)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001140), 0x80, 0x0)
ioctl$WSDISPLAYIO_ADDSCREEN(r3, 0x80245753, &(0x7f0000001180)={0x9, './file0\x00', './file0\x00'})
getsockname(r1, &(0x7f00000011c0)=@un=@file={0x0, ""/10}, &(0x7f0000001200)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r2, r4)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000001280), 0x8, 0x0)
readv(r4, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/219, 0xdb}, {&(0x7f00000013c0)=""/64, 0x40}, {&(0x7f0000001400)=""/255, 0xff}, {&(0x7f0000001500)=""/39, 0x27}], 0x4)
r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001580), 0x8, 0x0)
ioctl$WSKBDIO_BELL(r5, 0x20005701)
r8 = accept$inet(r6, &(0x7f00000015c0), &(0x7f0000001600)=0xc)
r9 = semget$private(0x0, 0x2, 0x188)
semop(r9, &(0x7f0000001640)=[{0x1, 0x8, 0x1000}, {0x0, 0xc6}, {0x4, 0x4, 0x1800}], 0x3)
openat(r0, &(0x7f0000001680)='./file0\x00', 0x400, 0x99)
r10 = openat$vmm(0xffffffffffffff9c, &(0x7f00000016c0), 0x20, 0x0)
ioctl$VMM_IOC_RESETCPU(r10, 0x82405605, &(0x7f0000001700)={0xbe9, 0xffff, {[0x7, 0xfffffffffffffff7, 0x6, 0x7, 0x0, 0x8000000000000001, 0x6, 0x4, 0x5c, 0x36, 0x10, 0x6, 0x10000, 0x3, 0x3, 0x7ff, 0x4, 0x5], [0x1, 0x0, 0x80000000, 0x79, 0x5c, 0xd5, 0x0, 0x41, 0xfffffffffffff9c5, 0x6], [0x531, 0x800, 0xa6dc, 0x0, 0x1, 0x1, 0x1400000000], [0x3, 0x401, 0x9, 0x4, 0x1, 0x20000000000], [{0x8001, 0xf, 0xa0d, 0x5}, {0x4, 0x10, 0x0, 0x6}, {0xd, 0x4, 0x2, 0xec}, {0x9, 0x6, 0x0, 0x2}, {0x1, 0x2, 0x8}, {0xb, 0x5, 0x2, 0xf0d}, {0xf, 0x3, 0x40, 0x9}, {0x9, 0x6, 0x1, 0x5}], {0xe87, 0x4, 0x3, 0xfffffffffffffff7}, {0x5, 0x3, 0x401, 0x8}}})
ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f0000001940)={0x33d4, 0x1, 0x0, 0x3, 0x3, 0x5, 0x147, 0x10, [{0x1, 0xffffffff, 0x80000001, 0x9}, {0x4, 0xc3c, 0x8, 0xfffffffb}, {0x5, 0x3, 0x4, 0x4}, {0x0, 0x4, 0x756, 0xfffffffb}, {0x432, 0x3e92, 0xffffff0e, 0x3}, {0xcbd, 0x6, 0x5, 0x5}, {0x2, 0x1, 0xa, 0x7de3}, {0x0, 0x0, 0xeba, 0xbc21}, {0x4, 0x401, 0x24000000, 0xfffffffc}, {0xd478, 0x3, 0x1, 0x1}, {0xfc6, 0x5, 0x3, 0x3}, {0x8000, 0xfffffff6, 0x2b, 0x8}, {0x9, 0x0, 0x8, 0x132}, {0x9, 0xed1, 0x1, 0x7fff}, {0x8000, 0x2, 0x3}, {0xc4, 0x4, 0x1, 0x8}]})
ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000001a80)={0x400, 0x1, 0xfffffffc, 0x1, "55ce9688c381dd44980bb3bcccd82476518179d4", 0x5, 0x1})
syz_open_pts()
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000001ac0)={0x0, 0x3, './file0\x00', 0x8, 0x0, 0x401, 0x1})
ioctl$VMM_IOC_READREGS(r7, 0xc2485607, &(0x7f0000001b00))
rmdir(&(0x7f0000001d80)='./file0\x00')
semctl$GETALL(r9, 0x0, 0x6, &(0x7f0000001dc0)=""/85)
getpeername$inet(r8, &(0x7f0000001e40), &(0x7f0000001e80)=0xc)
fsync(r10)
r11 = open$dir(&(0x7f0000001ec0)='./file0\x00', 0x208c0, 0x140)
openat(r11, &(0x7f0000001f00)='./file1\x00', 0x100, 0x102)

858.024198ms ago: executing program 4 (id=220):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff)
ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0})
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8)
preadv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000240)=""/20, 0x14}], 0x4, 0x0)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0404469, &(0x7f0000000000)={0xc635, 0x40b, 0x7ffc, 0x2000, "0000100000fb1fffe70000d3b04d45f0388a19a0", 0x33c3300e, 0x2})
ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000000))

854.759031ms ago: executing program 4 (id=223):
r0 = semget(0x0, 0x1, 0x281)
semop(r0, &(0x7f0000000040)=[{0x0, 0xfff9, 0x1000}], 0x1) (async)
r1 = semget(0x0, 0x1, 0x281)
semop(r1, &(0x7f0000000180)=[{0x0, 0x7, 0x1000}], 0x1)
setuid(0xffffffffffffffff)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x9, 0x9, 0x80000004}, {0x30, 0xfa, 0x6, 0xfff}, {0xfffe, 0x5, 0xdd, 0x80}]}) (async)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async)
r3 = getpid()
ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r3) (async)
r4 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x101, 0x0, r4, r4, 0x0, 0x100000, 0x0, 0xeea}) (async)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async)
r6 = fcntl$getown(r5, 0x5)
ktrace(0x0, 0x5, 0x40001904, r6) (async)
syz_emit_ethernet(0x212, &(0x7f0000000300)=ANY=[]) (async)
r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="02380c0d15c641b885b3c526c296f663e562bf3ebf83fb10aee3927e5d99ea56f743a651a04f4e0ac977a32b5a622378", 0x30}], 0x1, 0x10002eb5) (async)
unveil(0x0, &(0x7f0000000140)='r\x00') (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc444443a, 0x0) (async)
open$dir(0x0, 0x0, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r8 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r8, 0x8020699b, &(0x7f0000000000))

777.689917ms ago: executing program 4 (id=226):
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x8, 0x60) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) (async)
connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
getpeername$unix(r1, 0x0, &(0x7f0000000280))
r2 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x4, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000080)=@in, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000100)=""/109, 0x6d}], 0x2, &(0x7f0000000200)=""/213, 0xd5}, 0xffff0001}, 0x10, 0x0, &(0x7f0000000380)={0x4a0b5112, 0x1}) (async)
fchmodat(r0, 0x0, 0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r3) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x80, 0x205318) (async)
open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) (async)
r5 = syz_open_pts()
ioctl$TIOCSTSTAMP(r5, 0x8008745a, &(0x7f0000000040)={0x85d, 0x1}) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0)
poll(&(0x7f0000000080), 0x0, 0x2)
r6 = syz_open_pts()
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
mprotect(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x2) (async)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r7, 0x0) (async)
ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000000)=0x4)

567.229883ms ago: executing program 4 (id=231):
sysctl$vm(&(0x7f0000000140)={0x2, 0x6}, 0x2, &(0x7f0000000180)="37f75234", &(0x7f0000000240)=0x4, &(0x7f0000000280), 0x0)
syz_emit_ethernet(0x10004, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60078344ff8c0600fe000000010000ff80d1440000200000fe7dc9000000000000000000000000aa4e204e220800", @ANYBLOB])
write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
syz_emit_ethernet(0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff81008f000806000f86db060b00080000000000006f7702044c1167f33e492cfffffffff99bbd5cd3c938ce316a89fb3b1a5faeb118675d7590cf96f7131e6f7495324754f48f09ec553647b9ae4eb00170007d0000000000000000"])
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setgid(0xffffffffffffffff)
syz_emit_ethernet(0x34c, &(0x7f0000000500)={@empty, @random="954626cb8df5", [{[], {0x8100, 0x0, 0x0, 0x4}}], {@ipv6={0x86dd, {0x1, 0x6, "baf3a0", 0x312, 0x2b, 0xc, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast2, {[@dstopts={0x1, 0x31, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x50, 0xda, "793d7b8b96628303eaac3d5b135a1af233df6d072d37ed0e3b7b060703ceb9e2b36c87c456604b3484984f2a1265838c677a540a8c85db57ad568dcaae55b733e5fea1bfea89e933faef158809633e6c84474a8c6ed74df4db98189efe76d523e923fcff2524f04e03300368c037b4ee57d8fc4044639c755d863b431466e4561eea55a3ca508f6a434b539fd0a4bc6591ba08f3d5f13e4155671ab71aec71106571dc144041066964ab0734b40cce035726214e961d0403f4a2d19cfbb95cb88c0348d6996dc9728cee0b856f496a7cdd744d1408a9a136a288"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xff, 0xa1, "5a0e62d4a6645ba6a42f3932b1bee2fd42e67a77d644e5b0d53bf40471547d3ac9112ee8bb5af926e023b4e7f7adf28d9bae946addea8787e01f16355847adc8bc57195153ba845362bc3878a4b28c5a440e8ec9c7db415ece1a02b7de514b042842382b768f5bd53acf07d58eda75781cf4732f36097536bb7ba5c9fad71a2365eb6c63502d4be5536a642dd6793247dfd23ffe04a11d7f599285233555489ad4"}, @padn={0x1, 0x1, [0x0]}, @padn]}, @fragment={0x2f, 0x0, 0x9, 0x1, 0x0, 0x1, 0x65}, @dstopts={0x3b, 0xd, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x95, 0x5e, "83edf64f4e2c3c7ca7338ea8139e10d6663d6f3afefaa2e05a86e50debdd1483113630576dc4a25f506d503966866420e0ad9b60b178940b84aa2b31e25167111df1bb7ca3738efb0339a775a21dd5e27d23a885c54221fb0b8a4b97200b"}, @ra={0x5, 0x2, 0x9}]}, @fragment={0x70, 0x0, 0x0, 0x0, 0x0, 0x6, 0x64}, @hopopts={0xf0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @generic="ee43ea7a86ac6399c9474eff3ae54c633c61b81a160d2615154845511970d7fb1fde1f6c911ccf50adae8537020551107326e7695831199f351dd1b49acf93921356d84d2eb38303e6fa007740e2ce752cc384aa7388b7c6e6942e6d9aebe3c8e2ac2ca8a389670f91f8c5033e5aa28dab410c81c495ab741412f5dff54320c2f361b4f15e0f86e12bd37f30cfec763b8633ed78b24e64dff9ff44dc88d83c6d7ec75c8ad027128107f10b75440e57c5a57547c8537a9ee9a470f6863f722358d076c8f9ef30af4192532a5bf50cc021d9d61ff544807f9fda87"}}}}})
setgroups(0x0, 0x0)
r0 = open(0x0, 0x78e, 0x8)
r1 = getpid()
r2 = dup2(r0, 0xffffffffffffffff)
sendto$unix(r2, &(0x7f0000000380)="1f31c34be1743527d12f19e6d63b60d390ab1fbd641d7d8491a446f8876fd8303781f1507ab862397b982c5ea726fdce5909a3067a1548c3a468613f3216e5f073c518725c763e76f9d79ea647e20f0102c1", 0x52, 0x400, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r5, 0x4)
r6 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r6, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
accept$unix(r5, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8)
close(r3)
writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)
setuid(0xffffffffffffffff)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r7, 0x80085761, &(0x7f0000000040)={0x1, 0x81})
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x11, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}})
rename(&(0x7f0000000200)='.\x00', 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x30000)

507.380634ms ago: executing program 1 (id=241):
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='c\x00')
unlink(&(0x7f0000000000)='./file0\x00')
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setuid(0xee01) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$inet(0x2, 0x3, 0x2) (async)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000300)="01e63c94e06ff7dad40018217cba3de24c12b81da50000000000000000", 0xe) (async)
close(r0) (async)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket(0x18, 0x1, 0x0)
getsockname(r2, 0x0, &(0x7f0000000140))
sysctl$kern(&(0x7f0000001d80)={0x1, 0x4b}, 0x2, &(0x7f0000001dc0)="8e5b3f242c", &(0x7f0000001ec0)=0x5, &(0x7f0000001f00), 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) (async)
r3 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r3) (async)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x8e)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x2012, r4, 0x0) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x800}, {0x2}, {0x0, 0x7fff}, {0x3}, {0x0, 0x800}, {0x1, 0x8}, {0x1}, {0x0, 0x80000000}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x6}, {0x3, 0x1}, {}, {0x2}, {0x0, 0xa77c}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {}, {0x0, 0x8}, {0x3, 0x9}, {}, {0x3, 0x200}, {0x1}, {0x3, 0x8}, {0x3}, {0x3}, {0x2, 0x8001}, {0x0, 0x7}]}) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000003f00)={0x0, 0xfdc7})

399.415649ms ago: executing program 0 (id=243):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x80000000, [{&(0x7f0000597000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0x100007}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f00006a7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xd2bb}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x80004bb6}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x40000000000000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {&(0x7f0000107000/0x4000)=nil, 0x0, 0xfffffffffffffffc}, {&(0x7f000014d000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x400000000000000}, {&(0x7f00002e4000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000826000/0x2000)=nil}, {&(0x7f000058b000/0x4000)=nil, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000192000/0x1000)=nil, &(0x7f0000197000/0x4000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f00004a7000/0x1000)=nil}, {&(0x7f000004f000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4000000000}], '.\x00', 0xfffffffe})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
socketpair(0x1e, 0x3, 0x2, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xa4, 0xc, 0xf7, 0x80004005}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x56}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = dup(r3)
setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
r5 = socket(0x2, 0x3, 0x20)
r6 = dup(r4)
dup2(r6, r5)
connect$unix(r5, &(0x7f0000000000), 0x10)
sendto(r4, &(0x7f0000000080)="e7ff520000000000", 0x90, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000380)=[{0x0}], 0x1)

389.57815ms ago: executing program 1 (id=245):
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xb6) (async)
r0 = getpid() (async)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x300000001})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0) (async)
mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) (async)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='c\x00')
r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r1, 0x1000000000029, 0x9, 0x0, 0x0) (async)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000340)={&(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f0000000300)='./file1\x00', 0x8})
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) (async)
select(0x40, &(0x7f0000001400)={0x3, 0x110, 0x400000000000a, 0xfffffffffffffffc, 0x2, 0x6, 0xa3a4, 0x1}, 0x0, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000080)="00000400", 0x4) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) (async)
setuid(0xffffffffffffffff) (async)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280))

388.194449ms ago: executing program 0 (id=247):
sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x82, 0x11, 0x9, 0x45}, {0x3f, 0xf0, 0xbf, 0x4}, {0x6, 0x81, 0x8, 0x9}]})
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f0000000740)="00231b000f407061035c2532d7a09a3462c0483f5f7355d118afb78faf525622de0922751e43cbb59d2e076fc95f5eacb552eb839398f7a7afb591d7edf82feaf786a2028c4e0dbfa58ca6f3b7af68aeb5170ac1bba584e4432731d5d6c6b69b650d70a989e61c95038b95f87029fde9985c7a8f32", &(0x7f0000000180)=0x75, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f00000003c0)="f81ad3010006000000010000f500", 0xe)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x6, &(0x7f0000000300)=[{0x200, 0x5, 0xd, 0x8}, {0x8, 0xc7, 0x8, 0x2}, {0x4, 0x5, 0x7, 0x5}, {0x200, 0xc, 0x9, 0x9}, {0x38, 0x2e, 0x9, 0xfffffffa}, {0x401, 0x1, 0x7, 0x6ab7}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x0, 0x1, 0x20)
bind(r1, &(0x7f0000000000), 0x10)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x8a)
chflags(&(0x7f0000000280)='./file0\x00', 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f00000004c0)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0xe962696d5ecfc7e2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg(r2, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404)
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(r2)
r3 = socket(0x2, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000000), 0x10)

332.337343ms ago: executing program 0 (id=250):
r0 = socket(0x2, 0x1, 0x0)
r1 = dup(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r0, 0x2)
r3 = dup(r2)
fcntl$setstatus(r2, 0x4, 0xcc)
sysctl$net_inet_ip(&(0x7f0000000600)={0x4, 0x2, 0x0, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000740)="6a394d88", 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bind$unix(r5, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
getpeername$unix(r7, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x8)
connect$unix(r8, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x400006d4)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
connect$unix(r9, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
r10 = dup(r4)
r11 = socket(0x11, 0x3, 0x0)
sendto$unix(r11, &(0x7f0000000000)="b10005136000009f050000b10010000000000000cea10500fef96ee6d1efd3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6e3211800040000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8345012051eeab71d89e000040381ecb664000000fdf7b6ecd27afd2e081f60cb197fc02927507b1273a34896d0a6309a7330a06525ced5eb8c7bfcb8e3fa67bea17921c1a929cfdb2dbd1c14df461bf9276e2007653619335918c11821feae", 0xb1, 0x2, 0x0, 0xffffffffffffff3a)
fchflags(r10, 0x0)
close(r5)
recvmmsg(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0)
dup2(r1, r3)
execve(0x0, 0x0, 0x0)
getsockname(r1, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0xc)

277.086391ms ago: executing program 0 (id=252):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000240)={0x7, 0x80000001, 0xffff87f0, 0x2, "033ecb398bef95f4972d4841d3242724e34d41db", 0x4, 0xd})
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4)
sysctl$kern(&(0x7f0000000100)={0x0}, 0x0, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb", 0x2}], 0x1)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000005c0), 0x8, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500303af9fe800000bbfe8000000000000000000000000000aa0102907800000000605f7f0000002c0000000000000000000000000000000001fe8000000000000000000000000000bb00"/102])
syz_emit_ethernet(0x1000e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000014fffc000000849078ffffffffac1600aaaa454bfed383a235cdd79d081d74174ca724f4bf48155eed6b10efc0eb3be0d73c"])
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
syz_emit_ethernet(0x2c5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"])
chmod(&(0x7f0000000040)='.\x00', 0xfc)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc)
rmdir(&(0x7f0000000000)='./file0\x00')
sysctl$kern(&(0x7f0000000580)={0x1, 0x34}, 0x2, &(0x7f00000009c0)="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", &(0x7f0000000180)=0x133, 0x0, 0x0)
mmap(&(0x7f00000b0000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x8000000000000000)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1002, 0x17, 0x5, 0x101, 0x80000004, 0x6, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x200008, 0x5, 0x9}, {0x8, 0xd86, 0x6d, 0x5}, {0x2000000, 0x1800, 0x8007}, {0x401, 0x200726, 0xa800, 0x5}, {0x2, 0x6, 0x1003, 0x99}, {0xcdf, 0x7, 0x6, 0x3}, {0x6, 0x6, 0x80000014, 0x8}, {0x80000003, 0x1082, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x8a}, {0x1ce, 0xf7ff, 0x8, 0x3}, {0x7ff, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0xf, 0x3}, {0x29a71717, 0xfffffffa, 0x985, 0x6}, {0xfffffff9, 0x3, 0x5}, {0x0, 0x1, 0x7fffffff, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

265.371356ms ago: executing program 7 (id=255):
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000000)={0xfffff234, 0x1000, 0x9, 0xfffffffd, "23030003be0a00817dd8910bb864d3c3a3c900", 0xa, 0xffffeffd})
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"])
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r1, 0xc0206917, &(0x7f00000001c0))
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
sysctl$hw(&(0x7f0000005380)={0x6, 0x14}, 0x2, &(0x7f00000053c0)="b4278e66ac411eb4", &(0x7f0000005480)=0x8, &(0x7f00000054c0), 0x0) (async)
sysctl$hw(&(0x7f0000005380)={0x6, 0x14}, 0x2, &(0x7f00000053c0)="b4278e66ac411eb4", &(0x7f0000005480)=0x8, &(0x7f00000054c0), 0x0)

237.329054ms ago: executing program 0 (id=257):
unveil(0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d", &(0x7f0000000080)=0x30, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x24, 0x3, 0x6)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x6, 0x0})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b)
ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
ioctl$BIOCSETIF(r1, 0x40384900, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0x80184901, &(0x7f00000000c0)={0x3, '.\x00'})
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
mmap(&(0x7f0000327000/0x2000)=nil, 0x2000, 0x3, 0x7811, r2, 0x6)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)

193.114795ms ago: executing program 7 (id=259):
sysctl$hw(&(0x7f0000000100)={0x6, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaccb5ee87435486dd6603816a00280630fe0400000000000800000000000000bbff8000000000000000000000000000aa4e234e238443bcda211f2d9791f9"])
r0 = msgget$private(0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x48, 0xf3, 0xff, 0x6}, {0x6, 0x80, 0x9, 0xfffff800}]})
sysctl$kern(0x0, 0x0, &(0x7f00000005c0)="0084", &(0x7f0000000000)=0x2, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a)
open(&(0x7f0000000300)='./file0/file0\x00', 0x2, 0x2)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x8, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x8}, 0x0, 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
r3 = getegid()
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x9, 0x45}, {0x40, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="6d1d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef83729dc6b2864fe751a9547308b2", 0x28}], 0x1)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$hw(0x0, 0x0, &(0x7f0000000480)="00231b000f407061035c2532d7a0ea9200001f00385c24fc3be7d5c1a5db0c8043846b45c6888320424dca5d2c044a51f48cef4008b3b6aea789af305a16b33e3f9ee1f24abe2d476bbac054", &(0x7f0000000000)=0x4c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r4, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r5=>0x0}, 0xc)
r6 = getpgrp()
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={<r7=>0x0}, &(0x7f00000001c0)=0xc)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xfffffffe)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x800, r2, r3, 0x0, r5, 0xa, 0x6}, 0x4, 0x7, r6, r7, 0xffffffffffff4060, 0x800, 0xdfba, 0x7fffffffffffffff})

188.440266ms ago: executing program 0 (id=260):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xf66d, 0xe6fb, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff197})
writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x693}], 0x1) (async)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x6, 0x2, &(0x7f0000000100), 0x0)

187.121747ms ago: executing program 7 (id=262):
mknod(&(0x7f00000000c0)='./bus\x00', 0x80, 0x10000d02)
r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
pread(r0, &(0x7f0000000000)="2beba8c5bfaaff44b437dfbb000000", 0xf, 0x80000000)

186.103216ms ago: executing program 5 (id=263):
r0 = getegid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x200}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendto$unix(r1, 0x0, 0x0, 0x404, 0x0, 0x0)

154.146542ms ago: executing program 7 (id=264):
r0 = syz_open_pts()
r1 = open$dir(&(0x7f00000002c0)='./file1\x00', 0xf02, 0x183)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = open(0x0, 0x80, 0x2a)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x3a0914c44f7b202d, 0x504)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x2d, 0x2, 0x8}, {0x40, 0x6, 0x3, 0x8}, {0x6, 0x42, 0x9, 0xcfa}]})
close(r1)
sysctl$hw(0x0, 0x0, &(0x7f0000000240)="00231b000f4070638a40b7b758385c24fc3b58cec9e46c15af2fc1e15416f698b949e8476020000000007160d1e03f5b87b200800100006130701ca706ee5fac777900000000c99a687f7f8742bae373a66efcffffff001b7d93714ba23a82f2", &(0x7f0000000000)=0x60, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x14f6, &(0x7f0000001c00)=ANY=[])
pread(r0, 0x0, 0x0, 0xfffffffffffff8f4)

149.406145ms ago: executing program 5 (id=265):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x10e}, 0x2, 0x8, 0x1})
semop(0x0, &(0x7f00000000c0)=[{0x0, 0xfffd}, {0x0, 0x2ff}], 0x2)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
r0 = semget$private(0x0, 0xae73f9b9d9b866c5, 0x411)
semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000100)=""/4096)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

149.08737ms ago: executing program 7 (id=266):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440))
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
write(r0, &(0x7f0000000040)="06294fb38793dfc9ed7806987e96605862055c1ca1885064e2bf3d83087206a1790fe5feaec9f289666d081592080f2c1a1c05f408cbc36997ed4465dbb9e8c3c0e92641a2c2a1ce6927411104149e090d03bd2e89a13601d653f50bedc57df52efc27228c1f0098a55fcc93f56ad47f2ca6a036efded1d92f0cc214eacfa0e62353445034f3b39c28e82dcfb271b2540c068f7b0b6350f9d37f4eac4adf795b7cc43a738a54ec3c9d58f68b9b9b9f3406c607bf5954c8", 0xb7)

146.935675ms ago: executing program 5 (id=267):
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setuid(0xee01)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x18, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0206937, &(0x7f0000000100))
r2 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
openat(r2, &(0x7f0000000000)='./file0/../file0\x00', 0x80, 0x88)
socket(0x2, 0x1, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x2, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@un=@file={0x1}, 0x2)
r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000001f80), 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f00000001c0)={0x3})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x3, 0x1001}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x8, 0x84}, {0x7890, 0xffff, 0xcb, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0x888}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0xffff, 0x1, 0x2, 0x400}]})
poll(&(0x7f0000000000), 0x35, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r5, 0x0)
clock_gettime(0x2, &(0x7f0000000000))
setuid(0xffffffffffffffff)

97.674142ms ago: executing program 7 (id=268):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0)
execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000100)='./file0\x00', 0x100)
syz_emit_ethernet(0x2e, &(0x7f0000001ec0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x1, 0x20, 0x64, 0x2, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@noop, @noop, @noop, @noop]}}, @udp={{0x1, 0x0, 0x8}}}}}})
poll(&(0x7f0000000180)=[{r0, 0x91cbd8417f6167d9}], 0x1, 0x8)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x2)
r2 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r3 = fcntl$dupfd(r1, 0xa, r1)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
poll(&(0x7f00000001c0)=[{r2, 0x40}, {r0, 0x1}, {r3, 0x40}, {r0, 0x8b467fdea9f7f710}, {r0, 0x4}, {r0, 0x50}, {r0, 0x1}, {r1, 0x2}, {r4, 0xe1}], 0x9, 0xe06d)
dup2(r1, r0)
kqueue() (async)
kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) (async)
execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async)
syz_emit_ethernet(0x2e, &(0x7f0000001ec0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x1, 0x20, 0x64, 0x2, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@noop, @noop, @noop, @noop]}}, @udp={{0x1, 0x0, 0x8}}}}}}) (async)
poll(&(0x7f0000000180)=[{r0, 0x91cbd8417f6167d9}], 0x1, 0x8) (async)
socket(0x2, 0x2, 0x0) (async)
connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x2) (async)
openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
fcntl$dupfd(r1, 0xa, r1) (async)
socket(0x18, 0x2, 0x0) (async)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
poll(&(0x7f00000001c0)=[{r2, 0x40}, {r0, 0x1}, {r3, 0x40}, {r0, 0x8b467fdea9f7f710}, {r0, 0x4}, {r0, 0x50}, {r0, 0x1}, {r1, 0x2}, {r4, 0xe1}], 0x9, 0xe06d) (async)
dup2(r1, r0) (async)

96.946265ms ago: executing program 5 (id=269):
socket$inet6(0x18, 0x3, 0x0) (async)
r0 = socket$inet6(0x18, 0x3, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000000), &(0x7f0000000080)=0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)=@in={0x2, 0x2}, 0xc, &(0x7f0000000780)=[{&(0x7f00000003c0)="0a957fe22806b913ca8f54c441b84fe3d118fae8c4622904b32e9783a47b1ac1b9a2a1ee6a97ae42030c2473b0f63f2f3f9f08b2ac6d227e580be6b941c0cc9c598b1b8cd979773865868dba8dc254871092a0d0204bff43c92d71744f94c7569d05a0f77d956a539bf0e7d37ffe37aa832fdebb2736cb8f407145c50d53ad8404acb04c33fe4730102214d4cc8334d1a3a9f5fd51ab9cfb6bfffb3129f6d9f9395c263daca240a2ef11f5e7dbfd4e793c74ffb76864d7e3d676aee603efb84d3c69cc2b2a75", 0xc6}, {&(0x7f00000004c0)="9c253acf617a3994bdfdfb9a9cd455c169a2b1293a116d44f578f739b7ddd788a60fc0c9cb9d7cca66b09bc65858ba713245488b3b1f992f608c8b3f3c0800ce48a4099f355b566a6b3669a614bbf03a58a50adcb6de7239cdaf577d897a4737494be3752814835eae2a191e899ab06bd61b07f60dff4ff3d1753444c113ca549f82ab79a017f8852a30800cb009610c19b1772ae0e3bebad81de6372b23dbe03faabb894bb3797dd639b0", 0xab}, {&(0x7f00000000c0)="d8a8dcf7423ca5576e0358cd908ae681a17b1ff16b676f26c0d89078f984951424c7d02b2dea031e4487c3a0739277a49daef8d6e287642c71e40f317ea3421f4cf5ffeddb49adebc5c5b2c5a9ab5b8c629e13f289aaeaa579bf719d512639ced5c29afa4a22ff3f911adf78cf5ad2f3b0f1e9c4", 0x74}, {&(0x7f0000000580)="414187d7be6a35fdc3a9dfc22a6f5b9fcc5cfb6b1f919cdfc26ea192cb171c5fa7dd235b201ea513623dfeb9c877e97cc18a230b0888444e00538ab60f1e186100aa4e5d3d336889a21b347ee9fe78d83ede7ebdf3609d0cb692c1ced413b71985a473eac31f0fb00b4e74ac0a67067466218d050d5986c6c3d4f061def22f79c3b5d7b4c0e148612fd70a78c34e36a40d6c1c1ec4a448a29b78e5cc50a8397bd4970e0b0b7afdad64daac61d9332b340c804cf31d5173fccd79ab548bb9f03f8a2ed62894c0be91bb6dca206c25764fbac9768407ae140e96bb3cdcd26dda81", 0xe0}, {&(0x7f0000000680)="a36eeddf77eaccd3e3d900dc586faa256fbdd14f6d6adef8d76fc6cd57d1e23b10dcc97af7cd5eafec1beddf1bd97b9eae146b0c76a0b2bad4a9066caa1909d1fa2387f573c299e54f79cf07d4ace346ef874b93494c0eda23f497d863b555482006a32518a4c2bc2c67395829ce45a0c75476eb45602ac2443eb2c9155508442e59bab8f5c727c406165f4ed7b3b5040076035c18b1da9619b6aa9c62cbd18dc46eb46e42b7fd2d966bbaa90eecfd83860b3d6bc2a86621555b39774a276c1b4738e32ee352074e01d446b538cac868843f503b1177b9792f0c52d3422d91aa7c732a017d5ed9935dccb599d3fd4406f40ecbec", 0xf4}], 0x5, &(0x7f0000000800)=[{0x48, 0xffff, 0x7ff, "fa0788e63e97341f0e1232ef5ac7c134f8d3611866ecc54f416f0218473b9e694266649232af24055acaeb9b59a6db836f401e95"}, {0xa0, 0xffff, 0x0, "cf2cb8ad2cc296b1a8b0f3b3586fdfbb96a3cee282d561acd8d823baac4d6c55e441ad85621f0fa8d46e169717f5d035c0f0617518c996ac8014a9199a6b561c5e318a74aeee3fedecb39a529672507363bff5997b6469ba901d33bef6b4d711251e1c17be56af935e909f275eeceedc954db3026e9541b43cb5841ba9b93b5ac0ba73c60ededde50a53d4"}], 0xe8}, 0x40b) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)=@in={0x2, 0x2}, 0xc, &(0x7f0000000780)=[{&(0x7f00000003c0)="0a957fe22806b913ca8f54c441b84fe3d118fae8c4622904b32e9783a47b1ac1b9a2a1ee6a97ae42030c2473b0f63f2f3f9f08b2ac6d227e580be6b941c0cc9c598b1b8cd979773865868dba8dc254871092a0d0204bff43c92d71744f94c7569d05a0f77d956a539bf0e7d37ffe37aa832fdebb2736cb8f407145c50d53ad8404acb04c33fe4730102214d4cc8334d1a3a9f5fd51ab9cfb6bfffb3129f6d9f9395c263daca240a2ef11f5e7dbfd4e793c74ffb76864d7e3d676aee603efb84d3c69cc2b2a75", 0xc6}, {&(0x7f00000004c0)="9c253acf617a3994bdfdfb9a9cd455c169a2b1293a116d44f578f739b7ddd788a60fc0c9cb9d7cca66b09bc65858ba713245488b3b1f992f608c8b3f3c0800ce48a4099f355b566a6b3669a614bbf03a58a50adcb6de7239cdaf577d897a4737494be3752814835eae2a191e899ab06bd61b07f60dff4ff3d1753444c113ca549f82ab79a017f8852a30800cb009610c19b1772ae0e3bebad81de6372b23dbe03faabb894bb3797dd639b0", 0xab}, {&(0x7f00000000c0)="d8a8dcf7423ca5576e0358cd908ae681a17b1ff16b676f26c0d89078f984951424c7d02b2dea031e4487c3a0739277a49daef8d6e287642c71e40f317ea3421f4cf5ffeddb49adebc5c5b2c5a9ab5b8c629e13f289aaeaa579bf719d512639ced5c29afa4a22ff3f911adf78cf5ad2f3b0f1e9c4", 0x74}, {&(0x7f0000000580)="414187d7be6a35fdc3a9dfc22a6f5b9fcc5cfb6b1f919cdfc26ea192cb171c5fa7dd235b201ea513623dfeb9c877e97cc18a230b0888444e00538ab60f1e186100aa4e5d3d336889a21b347ee9fe78d83ede7ebdf3609d0cb692c1ced413b71985a473eac31f0fb00b4e74ac0a67067466218d050d5986c6c3d4f061def22f79c3b5d7b4c0e148612fd70a78c34e36a40d6c1c1ec4a448a29b78e5cc50a8397bd4970e0b0b7afdad64daac61d9332b340c804cf31d5173fccd79ab548bb9f03f8a2ed62894c0be91bb6dca206c25764fbac9768407ae140e96bb3cdcd26dda81", 0xe0}, {&(0x7f0000000680)="a36eeddf77eaccd3e3d900dc586faa256fbdd14f6d6adef8d76fc6cd57d1e23b10dcc97af7cd5eafec1beddf1bd97b9eae146b0c76a0b2bad4a9066caa1909d1fa2387f573c299e54f79cf07d4ace346ef874b93494c0eda23f497d863b555482006a32518a4c2bc2c67395829ce45a0c75476eb45602ac2443eb2c9155508442e59bab8f5c727c406165f4ed7b3b5040076035c18b1da9619b6aa9c62cbd18dc46eb46e42b7fd2d966bbaa90eecfd83860b3d6bc2a86621555b39774a276c1b4738e32ee352074e01d446b538cac868843f503b1177b9792f0c52d3422d91aa7c732a017d5ed9935dccb599d3fd4406f40ecbec", 0xf4}], 0x5, &(0x7f0000000800)=[{0x48, 0xffff, 0x7ff, "fa0788e63e97341f0e1232ef5ac7c134f8d3611866ecc54f416f0218473b9e694266649232af24055acaeb9b59a6db836f401e95"}, {0xa0, 0xffff, 0x0, "cf2cb8ad2cc296b1a8b0f3b3586fdfbb96a3cee282d561acd8d823baac4d6c55e441ad85621f0fa8d46e169717f5d035c0f0617518c996ac8014a9199a6b561c5e318a74aeee3fedecb39a529672507363bff5997b6469ba901d33bef6b4d711251e1c17be56af935e909f275eeceedc954db3026e9541b43cb5841ba9b93b5ac0ba73c60ededde50a53d4"}], 0xe8}, 0x40b)
syz_extract_tcp_res(&(0x7f0000000080), 0xc, 0xb)
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xffffffff) (async)
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xffffffff)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1})
close(r1)
syz_emit_ethernet(0x306, &(0x7f0000000140)={@empty, @broadcast, [], {@ipv6={0x86dd, {0xd, 0x6, "3dc315", 0x2d0, 0x3, 0xfc, @loopback, @mcast2, {[@routing={0xc, 0xa, 0x0, 0x47, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr="dd43a5b4f0d21c13fe7c98dcf9648743", @ipv4, @loopback]}, @hopopts={0x2a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x5d5}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xfe}, @ra={0x5, 0x2, 0xf2ec}, @pad1]}, @dstopts={0x11, 0x0, '\x00', [@pad1]}, @hopopts={0x3a, 0x35, '\x00', [@generic={0x4, 0x154, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x72}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0x200}, @pad1, @generic={0x0, 0xf, "fbdbde6e5440075b6825583758d59e"}]}, @fragment={0x3c, 0x0, 0x3, 0x1, 0x0, 0x3, 0x64}, @fragment={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x65}, @fragment={0x37, 0x0, 0x58, 0x0, 0x0, 0x4, 0x68}, @routing={0x2f, 0xa, 0x0, 0x5, 0x0, [@rand_addr="4bbad25f3856dc9b275b4690b6072f1a", @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}]}, @dstopts={0xf0, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x8}]}]}}}}})

95.796403ms ago: executing program 2 (id=270):
setuid(0xee01)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941)
ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000134, 0x0)
r0 = getpgrp()
ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x51d73188af82c29b, r0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000180)={0x0, 0x0, {0x3, 0xffffffffffffffff}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
r1 = socket(0x10, 0x2, 0x0)
close(r1)
socket(0x18, 0x3, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r1, &(0x7f0000000240)='\x00\b', 0x2)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
sysctl$hw(0x0, 0x0, &(0x7f0000000240)="0060054d3d000000002dec30c221c04ca1e6904c2ffd0bc16049a26808c2000000000000000098237a51666d56a9836fa781c711aa35f39a00d73ec82fe5c2fa159c3ec32a8daff0078d1d9a0d09cbd309a6d49cc22b5e2233134e17a281b794", &(0x7f0000000000)=0x60, 0x0, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x3, 0x0)
sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x2)
ioctl$TIOCSETA(r3, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x9, 0x20001fffffffd})
r4 = socket(0x18, 0x2, 0x0)
close(r4)
socket(0x800000018, 0x2, 0x0)

2.677062ms ago: executing program 5 (id=271):
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
r0 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r0, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4)
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
socket$inet(0x2, 0x0, 0x1) (async)
socket(0x11, 0x3, 0x0)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000040)={0xa2e5, 0x401}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0xfd04, 0x6d5, 0x6}}}) (async, rerun: 64)
r3 = kqueue() (rerun: 64)
kevent(r3, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) (async, rerun: 32)
kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async, rerun: 32)
ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000040)={0x8f6c, 0x6}) (async)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x8, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async, rerun: 32)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (rerun: 32)
write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) (async)
r6 = syz_open_pts()
fcntl$lock(r6, 0x9, 0x0) (async)
select(0x0, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
pipe2(&(0x7f0000000080), 0x10004)

384.809µs ago: executing program 2 (id=272):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
socket(0x18, 0xc003, 0x3a) (async)
r0 = socket(0x18, 0xc003, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca)
r1 = msgget$private(0x0, 0x127)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x6, "0100012d29fb000700000000098002005e00"})
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0)
poll(&(0x7f0000000680)=[{r2, 0x1}], 0x1, 0x1)
poll(0x0, 0x0, 0x8001) (async)
poll(0x0, 0x0, 0x8001)
close(r2)
sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f00000005c0), 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x3000)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r3 = syz_open_pts()
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
close(r3) (async)
close(r3)
syz_open_pts() (async)
syz_open_pts()
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="cff5c05664da486cda974a82388ef359025250129bdb3b8c172b8359eb32d4103cbb3b553a30352e3b0b2e4247b103", 0x2f}], 0x1)
socket$inet(0x2, 0x2, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0)
getrlimit(0x8, &(0x7f00000000c0)) (async)
getrlimit(0x8, &(0x7f00000000c0))
ktrace(0x0, 0x4, 0x51d73188af82c397, 0xffffffffffffffff)
setuid(0xee01)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
getpgrp()

0s ago: executing program 5 (id=273):
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00')
r0 = socket(0x1, 0x2, 0x0)
fcntl$lock(r0, 0x4fee08159a9d2be4, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000440)={'./file0\x00', 0x8, 0x1, 0x8})
r2 = accept$unix(r0, &(0x7f0000000340)=@abs, &(0x7f0000000380)=0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x2}, 0xc)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9)
setuid(0xee01)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x142)
ioctl$WSMOUSEIO_GCALIBCOORDS(r4, 0x41205725, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = syz_open_pts()
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x2}, 0x8)
fcntl$lock(r5, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000})
munlock(&(0x7f0000fef000/0x11000)=nil, 0x11000)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
witness: shared lock of (rwlock) maddr while exclusively locked
panic: excl->share
Starting stack trace...
panic(ffffffff833b4a35) at panic+0x1d0
witness_checkorder(ffff80000158f878,1,0) at witness_checkorder+0x122c
rw_do_enter_read(ffff80000158f860,0) at rw_do_enter_read+0x99
in6_hasmulti(fffffd8068c80df0,ffff80000158f800) at in6_hasmulti+0x41
ip6_output(fffffd8068c80d00,ffffffff839eee58,0,0,ffff80002a1fdf60,0) at ip6_output+0x13bd
mld6_sendpkt(ffff8000015a8000,83,0) at mld6_sendpkt+0x385
mld6_fasttimo() at mld6_fasttimo+0x16d
pffasttimo(ffffffff83a15020) at pffasttimo+0x184
timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159
softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7
softclock_thread_mp(ffff8000ffffef90) at softclock_thread_mp+0x86
end trace frame: 0x0, count: 246
End of stack trace.