last executing test programs:

7.191289542s ago: executing program 6 (id=616):
r0 = syz_open_pts()
ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000180))
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = getpgrp()
fcntl$setown(r1, 0x6, r2)
fcntl$setown(r1, 0x6, 0x0)
mknod(&(0x7f0000002380)='./file0\x00', 0x2000, 0x4270)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xb5219f1000b913f1, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000580)=0xc)
setregid(0x0, r5)
setrlimit(0x1, &(0x7f0000000980)={0xff, 0xd21})
r6 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r6)
setreuid(0xee00, 0x0)
r7 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x108)
fcntl$getown(r7, 0x5)
sysctl$kern(&(0x7f0000000100)={0x1, 0x16}, 0x2, &(0x7f0000000140)="b91c", &(0x7f0000000180)=0x2, &(0x7f00000001c0)="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", 0x100)
select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0)
select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff}, 0x0, 0x0)
pwrite(r3, &(0x7f00000000c0)="a7", 0x1, 0x40007)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r8, 0x0)
pipe(&(0x7f00000001c0)={<r9=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r9, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
fcntl$getown(r9, 0x5)
ioctl$SPKRTONE(r9, 0x80085301, &(0x7f0000000000)={0xca46, 0x1})
fcntl$dupfd(r9, 0x3, 0xffffffffffffffff)

5.24471465s ago: executing program 6 (id=632):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r1 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
syz_open_pts()
syz_open_pts()
open(0x0, 0x205, 0x0)
r2 = socket(0x18, 0x2, 0x0)
dup(r2)
r3 = socket(0x2, 0x3, 0x0)
dup(r3)
accept$inet6(r3, 0x0, 0x0)
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r4 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r6 = socket$inet(0x2, 0x8000, 0x14)
r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x44)
r8 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8, 0x104)
poll(&(0x7f0000000140)=[{r0, 0x40}, {r0, 0x80}, {r4, 0x1}, {r5, 0x4}, {0xffffffffffffff9c, 0x20}, {r6, 0x1}, {r7, 0x100}, {r8, 0x10}], 0x8, 0x3ff)
sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0)

4.295833707s ago: executing program 6 (id=647):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7fffffffffffffff)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe)

4.194837738s ago: executing program 3 (id=651):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x5}) (async, rerun: 32)
r0 = socket(0x18, 0x3, 0x0) (rerun: 32)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async)
ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0x8020560b, &(0x7f00000000c0)={0x0, 0x0, 0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
r1 = socket(0x18, 0x1, 0x0)
close(r1) (async)
r2 = semget(0x0, 0x4, 0x4)
semop(r2, &(0x7f0000000080)=[{0x0, 0xf99d, 0x1000}], 0x1) (async)
semctl$SETVAL(r2, 0x0, 0x8, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e02100d16d624883aa8926e7be8199ac8ca7e083b89ba91e7b50cdfbc5d7c6baffa1589c8ff595b3341fb25ee9f506a1b667896b0b252a10fc7d20b1266220aac6c206f80", &(0x7f0000000080)=0x1d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (rerun: 32)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/86, 0x56}], 0x1, 0x0) (async)
chflagsat(r5, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2) (async, rerun: 32)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) (rerun: 32)
r6 = socket(0x18, 0x2, 0x0)
setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$VMM_IOC_TERM(r7, 0x80045604, &(0x7f0000000180)={0x10000})
sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

4.152184006s ago: executing program 6 (id=653):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x406}, 0x0)
r0 = open(&(0x7f00000002c0)='./bus\x00', 0x800, 0x0)
pread(r0, &(0x7f0000000180)="b4d5cb2f9501c822ac8f31bf54e637886125fd4b549195df9dcc019c833d3f0129bbd4e944613730d2503744917677b12c17e4186890e4616e0ef4dc4b7fc8f547623d2451bf3149daf9c05597e1d4093ac9fe468a8bb5cefb2e010e854328b7014b498f", 0x64, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/148, 0x94}], 0x1, 0x3c8)
ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000140)={0xfffffffe, 0x101, {0x3}})
ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000000)={0x6, 0x4, {0x9, 0x10ffff}})
ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000040)='./file0\x00', 0x8})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x3, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x5356})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
shmget$private(0x0, 0x2000, 0x4, &(0x7f00003f3000/0x2000)=nil)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r1, 0x1000000029, 0x3c, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4)

3.839593186s ago: executing program 6 (id=659):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="d014b7df", 0x4}], 0x1, 0x800)
r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000140)='\x00\x00\x00\x00\x00', &(0x7f0000000080)=0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

3.839356279s ago: executing program 3 (id=660):
open(&(0x7f0000000180)='./file0\x00', 0x74e, 0x120)
r0 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
setuid(0xffffffffffffffff)
setrlimit(0x1, &(0x7f0000000980)={0xff, 0xd21})
select(0x40, &(0x7f00000000c0)={0x8, 0x3, 0x4008, 0x5, 0x1, 0x9, 0x4c}, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x3)
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0xe02)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x2011, r1, 0x0)
sysctl$hw(&(0x7f0000000000)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x3c, &(0x7f0000000140)={@random="d1df1f180d59", @random="00e0300eaaf8", [], {@arp={0x806, @generic={0x6, 0x8809, 0x6, 0xa, 0x2, @local, "865e345730ace3eea1ce", @remote, "649ad0c175e199ae551ad29ba9437be6"}}}})

3.670304544s ago: executing program 6 (id=663):
r0 = syz_open_pts()
poll(&(0x7f00000011c0)=[{r0}, {r0, 0x2}, {r0, 0x4}], 0x3, 0xb) (async)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) (async)
mkdir(&(0x7f0000000280)='./file1\x00', 0x0)
setitimer(0x2, 0x0, 0x0) (async)
r2 = syz_open_pts()
ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000000)=0x3) (async, rerun: 32)
r3 = dup(0xffffffffffffffff) (rerun: 32)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000140)={&(0x7f0000000180)=[{0x0, 0x3}, {0x4}], 0x2}) (async)
ioctl$WSDISPLAYIO_LSFONT(r3, 0xc0107002, &(0x7f0000000180)) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001380)='\x00\x00\x00\x00', 0x4) (async)
syz_open_pts() (async, rerun: 64)
syz_open_pts() (async, rerun: 64)
r4 = socket(0x18, 0x2, 0x0)
close(r4)
socket(0x10, 0x3, 0x2) (async, rerun: 64)
sendto$inet6(r4, 0x0, 0x0, 0x4, &(0x7f0000000100)={0x18, 0x3, 0x4, 0x9fdeb58}, 0xc) (async, rerun: 64)
r5 = socket(0x18, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ff}) (async, rerun: 32)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32)
setsockopt(r5, 0x1000000029, 0x3f, &(0x7f0000000000)="6f44d6cd", 0x4) (async, rerun: 64)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f00000000c0)={0x7, 0xfffffffb, 0x0, 0x0, "468355f93f25cde9000000000000075a6b47c0d1", 0x1}) (async, rerun: 64)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000000)="8d6b2cc8435119cf4c071cc95989acb3d100007234180600000000000000de05a8978b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a0000000000000000000000000000000000e3ff070000", 0x62}, {&(0x7f00000002c0)="c889f1c6de003f4bbf1e0d502fcbdb59c0b782a9e3125a3d43d70fce1e4c0b604e8ecfc27fd8053e1e4b331a3e4caba4aa103600e57a6921b14b8db04e6177db4a8e766cdaa73a1fc1e867bc0b0dbf0d66670818b4b78165b6494d444c2d3fdd4f7524493b63f00d3c41ef947e7cb5f99ee102da7bc071a2c2da01886673b37070cecc3e8a0b8f3378cba397ba428ee9bc9da3f8c699f69fed1a51e1c3aeb1f83a05fa32f0436c1a4b4a34e7d51abc06b8a5d358535202", 0xb7}], 0x3) (async)
clock_getres(0x4, &(0x7f0000000000))
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x10, r1, 0x3)
clock_gettime(0x4, &(0x7f0000000000)) (async, rerun: 32)
munmap(&(0x7f00007a8000/0x1000)=nil, 0x1000) (rerun: 32)

3.475407433s ago: executing program 3 (id=668):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)="c5ea0f010000000100000056200257970a82800900389bcdc75d2268be9bcecd74ce8b829937c26edd01876e46257b2eb3237c5667a0be5b3b8501a1e3", 0x3d}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a616165d000000009b6ef46d06e8775492d82f8a89dbb5", &(0x7f0000000080)=0x17, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe)

3.236503637s ago: executing program 3 (id=670):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e", &(0x7f0000000080)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, 0x0)

3.045908315s ago: executing program 3 (id=676):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) (async)
writev(r1, &(0x7f0000000080)=[{0x0}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000480)="71f91e3c71ac0058bc5ab2501ddc32bd720294a34b8e5f84cf2ceb2171b59c7afec37082dcb9c25e5e0f7ed6c95cddea134662ae76b34302798df1d159a9a738d3a50000", &(0x7f0000000080)=0x44, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r1, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) (async, rerun: 64)
mlock(&(0x7f0000152000/0x2000)=nil, 0x2000) (async, rerun: 64)
ioctl$TIOCSETA(r0, 0xc4504440, &(0x7f0000000740)={0x20, 0x200001, 0x0, 0x100003, "005708e103990000000000000000053800", 0x0, 0xffffff90})

2.842562545s ago: executing program 3 (id=679):
mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0)
open(&(0x7f00000014c0)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1002)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = syz_open_pts()
recvfrom$inet(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x802, &(0x7f0000001500)={0x2, 0x1}, 0xc)
ioctl$TIOCSTAT(r1, 0x20007465, 0x0)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000000c0)=0x6)
socket(0x800000018, 0x3, 0x0)
r2 = syz_open_pts()
read(r2, &(0x7f0000000200)=""/243, 0xf3)
execve(0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d942400b5e1a0757cb9af769c7afec37082", &(0x7f0000000080)=0x7, 0x0, 0x2e)

2.512668347s ago: executing program 4 (id=689):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e02100d16d624883aa892", &(0x7f0000000080)=0x4f, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

2.314753122s ago: executing program 4 (id=695):
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="7696e5f343008c37cea861", 0xb)
socket(0x2, 0x2, 0xfc)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000", 0xa, 0x400, 0x0, 0x0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
fchflags(r0, 0x1)
r2 = dup(r1)
setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000000), 0x0)
socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x80606941, &(0x7f00000001c0))
r3 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sysctl$hw(&(0x7f0000000180)={0x6, 0x16}, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0)

2.123957412s ago: executing program 7 (id=696):
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0x0, 0x2, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
r3 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r3, 0xc0206921, &(0x7f00000001c0))
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0))

2.122921359s ago: executing program 1 (id=698):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)='j', 0x1}], 0x1, 0x800)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000140)='\x00\x00', &(0x7f0000000080)=0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="5917c5b8f9b2", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @broadcast, @rand_addr=0x101, @empty, @remote={0xac, 0x14, 0x0}}}}})

1.925180497s ago: executing program 7 (id=700):
setuid(0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
r0 = syz_open_pts()
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x1, 0x0, 0xfbfffffe, 0x0, "d76c1f46000000ef1f0160fbff2000404b00"})
sysctl$hw(&(0x7f0000000080)={0x7, 0x5}, 0x2, 0x0, &(0x7f0000000180), 0x0, 0x0)
syz_emit_ethernet(0x50, &(0x7f00000003c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x42, 0x0, 0x2000}, @udp={{0x3, 0x2, 0x8}, {"bd794d0f6a9d0b02b57c0d75520653b6c57395e6da9e9ad78c9930f020f968510a412d343f6b"}}}}}})
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x5ad, 0x2, 0x5, 0x8001, "0067b400000b00006a00000000000000000200", 0x9, 0x8})

1.924921987s ago: executing program 4 (id=701):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="d014b7df", 0x4}], 0x1, 0x800)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)='\x00\x00\x00\x00\x00', &(0x7f0000000080)=0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

1.87134787s ago: executing program 1 (id=702):
r0 = kqueue()
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
kevent(r0, &(0x7f0000000000)=[{{r1}, 0xfff7, 0x83, 0x1, 0x23f, 0x9}], 0x1ff, 0x0, 0x56f, 0x0)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x615, 0x1)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="6a87c35fa9fd00a249b41a69b8559c4650ea787c859fe96ce065cd05", 0x1c}], 0x1, 0x800)
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="00e0ae0b08c93f8a567eb1800082fb35f07a7c3431e34e5b7e0d0000bc", &(0x7f0000000080)=0x1d, 0x0, 0xffffffffffffff62)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffff0aff00000000000008004500001c000000000011907800000000bfffffff4e204e2200089078"])
flock(r2, 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)="8215c9ec3d1e6ed7cb5d2be98f58e510e27c51f78b06ccff3521197295aa5607a734c7cb790df479857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xa}, 0x40c)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r4, 0x0)
r5 = kqueue()
r6 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
kevent(r5, &(0x7f0000000040)=[{{r4}, 0xffffffffffffffff, 0x5, 0x10, 0x6f9, 0x9}], 0x962, 0x0, 0xffffffff, 0x0)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$TIOCSETA(r7, 0xc4504449, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "434703000000000000000000000000003000"})
r8 = socket$unix(0x1, 0x1, 0x0)
readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/91, 0x5b}], 0x2)
setrlimit(0x8, &(0x7f0000000980))
socket$inet(0x18, 0x3, 0x102)

1.869417862s ago: executing program 4 (id=704):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c", &(0x7f0000000080)=0x34, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

1.665118309s ago: executing program 4 (id=707):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e02100d16d624883aa8926e7be8199ac8ca7e083b89ba91e7b50cdfbc5d7c6baffa1589c8ff595b3341fb25ee9f506a1b667896b0b252a10fc7d20b12", &(0x7f0000000080)=0x81, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

1.664763497s ago: executing program 4 (id=708):
mknod(&(0x7f0000000100)='./file0\x00', 0x1100, 0x0)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0})
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xe02)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000080)='./file2/file0/file0\x00')
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe1463a52077dc0d00003ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xe, &(0x7f0000000040)='\x00\x00', 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
execve(0x0, 0x0, 0x0)

1.653328602s ago: executing program 1 (id=711):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e02100d16d624883aa892", &(0x7f0000000080)=0x4f, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

1.65247627s ago: executing program 7 (id=712):
mkdir(&(0x7f0000000180)='./file0\x00', 0x1)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/file0\x00')
rename(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000080)='./file0\x00')

1.278541616s ago: executing program 7 (id=715):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x1d, 0x0, 0x81}, {0x3, 0x0, 0x0, 0x49}, {0x81, 0x0, 0x0, 0x10000001}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1934, 0x0, 0x94e88e483d20a485)
openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @empty, [{[{0x88a8, 0x0, 0x1, 0x4}], {0x8100, 0x3, 0x0, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x3, @multicast1}}}}}})

1.111897691s ago: executing program 5 (id=717):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x84)
chflagsat(r0, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1)
ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0x80047476, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x1, 0x0, {0xa7f5}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000340)="ebffcbff13b9fd812e8f4e713048e6993192964818054d9ea6e08fc9326d69306be18cacf77d7503fee66b3ba17f4511f7bc55ee30a666887e1296e8ce4c574adc6f898a24d9f3c2f54134756f7055dc97f0eaa1ad618a7aee4be536e940cbc0bc537cc8db04ccaf6b9963dfbe98cc0d53e87bcc95441408863e774fb228237b9c2856950397a3f8265456e7df578250fa39aadf3eecd564a074d62acf65a9076aef30e7f54f7b0cde03af28ce", 0xad)
setsockopt(r1, 0x2d, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]})
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
ioctl$TIOCSETA(r4, 0xc028445a, &(0x7f0000000740)={0x6, 0x2, 0x0, 0x0, "97a200", 0x4})
ioctl$WSKBDIO_GETENCODINGS(r4, 0xc0105715, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]})
writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be00", 0x15}], 0x1)
preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000480)=""/239, 0xef}], 0x1, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
preadv(r5, &(0x7f0000000300)=[{0x0}], 0x1, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000480)="71f91e3c71ac0058bc5ab2501ddc32bd720294a34b8e5f84cf2ceb2171b59c7afec37082dcb9c25e5e0f7ed6c95cddea134662ae76b34302798df1d159a9a738d3a50000", &(0x7f0000000080)=0x44, 0x0, 0x0)

1.111625455s ago: executing program 1 (id=718):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a616165d000000009b6ef46d06e8775492d82f8a89dbb53bd806a6e0cc9166f07b7d9ecd95becc3555fd76f7ba", &(0x7f0000000080)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(0xffffffffffffffff, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe)

845.492116ms ago: executing program 1 (id=719):
mknod(&(0x7f0000000100)='./file0\x00', 0x1100, 0x0)
kqueue() (async)
r0 = kqueue()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
kevent(r0, &(0x7f0000000600)=[{{r1}, 0xfffffffffffffffe, 0x2c5d36d679bbffef, 0x1, 0x400, 0x20000000008}, {{r1}, 0xfffffffffffffffe, 0xe5b728808adb3361, 0xffffb, 0x800000000005a, 0x6}], 0x5, 0x0, 0x1ff, 0x0)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0})
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xe02) (async)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xe02)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x28}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x5}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0)
syz_emit_ethernet(0x40, &(0x7f0000000300)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0xa, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts], @generic='3\t'}}}}}) (async)
syz_emit_ethernet(0x40, &(0x7f0000000300)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0xa, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts], @generic='3\t'}}}}})
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe1463a52077dc0d00003ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
r3 = socket(0x18, 0x2, 0x0)
socket(0x11, 0x3, 0x0) (async)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000240)="b100051300000000000000400220000000000000ceb65a33f2398ba99fc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0540000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032b0c8a6443a42118000000720fd38bfbb770c1f5a872b906b63ef23a03ba0000000c0000348a1b1257aea8c500002002fbfe0c2300008abfba0900afb7515871a3f8343712051eeab7196fcb050407000000c011200000", 0xb1, 0x0, 0x0, 0x0)
setsockopt(r3, 0x1000000000029, 0xe, &(0x7f0000000040)='\x00\x00', 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
kqueue() (async)
r6 = kqueue()
close(r6)
kevent(r6, 0x0, 0x203, 0x0, 0x1, 0x0) (async)
kevent(r6, 0x0, 0x203, 0x0, 0x1, 0x0)
kevent(r5, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffb, 0x121, 0x1e0000005, 0x81, 0xc}, {{r2}, 0xfffffffffffffffa, 0x8, 0x80, 0x200, 0x1000}, {{r2}, 0xfffffffffffffffe, 0x20, 0x4, 0x80000001, 0x10}], 0x100, &(0x7f0000000240)=[{{r6}, 0xfffffffffffffffc, 0x48, 0x2, 0x2d, 0x5}, {{r5}, 0xfffffffffffffffd, 0x3, 0x80000002, 0x7, 0xd597}, {{r2}, 0xfffffffffffffffc, 0x20, 0xfffff, 0x29ea, 0x4}], 0x0, &(0x7f0000000000)={0x6, 0xff}) (async)
kevent(r5, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffb, 0x121, 0x1e0000005, 0x81, 0xc}, {{r2}, 0xfffffffffffffffa, 0x8, 0x80, 0x200, 0x1000}, {{r2}, 0xfffffffffffffffe, 0x20, 0x4, 0x80000001, 0x10}], 0x100, &(0x7f0000000240)=[{{r6}, 0xfffffffffffffffc, 0x48, 0x2, 0x2d, 0x5}, {{r5}, 0xfffffffffffffffd, 0x3, 0x80000002, 0x7, 0xd597}, {{r2}, 0xfffffffffffffffc, 0x20, 0xfffff, 0x29ea, 0x4}], 0x0, &(0x7f0000000000)={0x6, 0xff})
execve(0x0, 0x0, 0x0)
ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f0000000640)={'./file0\x00', 0x6, 0x5})

845.25303ms ago: executing program 2 (id=720):
setuid(0xee01)
r0 = getpgrp()
r1 = msgget(0x3, 0x240)
r2 = msgget(0x3, 0x240)
msgrcv(r2, &(0x7f0000000240)={0x0, ""/164}, 0xac, 0x3, 0x0)
r3 = geteuid()
r4 = getgid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000580)=0xc)
setregid(0x0, r6)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000040)={{0x5, r3, r4, 0xffffffffffffffff, r6, 0x100}, 0x1ff, 0xfffffffffffffff7, r0, r0, 0x9, 0x9, 0xffffffffffffffff, 0x3})
msgrcv(r1, &(0x7f0000000240)={0x0, ""/164}, 0xac, 0x3, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x21)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x9b8e13a30b28a7aa, 0x0)
ioctl$TIOCSETA(r7, 0xc2084415, &(0x7f0000000180)={0x6, 0x5, 0x7, 0xb, "a2a400000000c48f5db960716cc1795a6b47c1d1"})
socket$unix(0x1, 0x1, 0x0)
msgget(0x3, 0x280)

794.14209ms ago: executing program 2 (id=722):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)="c5ea0f010000000100000056200257970a82800900389bcdc75d2268be9bcecd74ce8b829937c26edd01876e46257b2eb3237c5667a0be5b3b8501a1e3", 0x3d}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a616165d000000009b6ef46d06e8775492d82f8a89dbb53bd806a6e0cc9166f07b7d", &(0x7f0000000080)=0x22, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe)

793.94111ms ago: executing program 5 (id=723):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
r1 = dup(r0)
setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000)="ffdaf64c000000004f052700000005", 0xf)

793.734602ms ago: executing program 0 (id=724):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e02100d16d624883aa8926e7be8199ac8ca7e083b89ba91e7b50cdfbc5d7c6baffa1589c8ff595b3341fb25ee9f506a1b667896b0b252a10fc7d20b12", &(0x7f0000000080)=0x81, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

704.366269ms ago: executing program 2 (id=725):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
writev(r0, &(0x7f0000002900)=[{&(0x7f0000000140)="d6a5603845a0641534cbe5b5abcc66c1adf6bd2afb1265b243e135ee3f5708cd4ed98efb11b5d7c311036cf21419e4730deeefb7e7df8b47558308975d2d2af26d8dfb406b891b1ac005e485e1ca45ab2567360ed026e274cf7f6495af598b70cc51bc2db4b482fad582922c782a3d576e1d77e57472c707517cd43423cb470d661a354331894b8b5625983f4ff1458bd1ad9cd0a3932ea66863025b6cabfb1dec22e4b5d0e693464e58b305d22e14a15921421a6f0b815ff464fa05b242540c287d6d16c159305cff131161322e2b7a", 0xd0}], 0x1)
execve(0x0, 0x0, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x10, 0x125)
setuid(0xee01)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

704.082946ms ago: executing program 5 (id=726):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)='#!', 0x2}], 0x1)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
write(r0, &(0x7f0000000000)="24a608d334f68b1f26da3fb9a1e5e89f23bf136473c01cf9efec93275e090909400000000000006745b653695b5e8e0010000000000000413fb5df308cefae50ffca562eb77b6a0a", 0x48)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000100)="b10005010000", 0x6, 0x0, 0x0, 0x0)
mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x8, 0xc)

505.64676ms ago: executing program 0 (id=727):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x5}, 0x126c, 0x3, 0x0, 0x0, 0x8, 0x9, 0x401, 0x8000000000000e65})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket(0x11, 0x3, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000100)={0x10, 0x0, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000b65000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000b64000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000433000/0x3000)=nil}, {&(0x7f0000626000/0x2000)=nil, &(0x7f000093c000/0x2000)=nil}, {&(0x7f0000da9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000e0a000/0x2000)=nil, &(0x7f0000c17000/0x3000)=nil}, {&(0x7f0000b64000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f000062b000/0xf000)=nil, &(0x7f00008bf000/0x1000)=nil}, {&(0x7f00008bf000/0x3000)=nil, &(0x7f0000af4000/0x13000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000601000/0x4000)=nil}, {&(0x7f0000601000/0x3000)=nil, &(0x7f0000b08000/0x1000)=nil}, {&(0x7f000064c000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000633000/0x3000)=nil, &(0x7f0000518000/0x3000)=nil}], './file0\x00'})
r1 = socket(0x1, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0))
sendto$inet(r0, &(0x7f0000000100)="43996beaf6c016df3e20f7768c87a412d565502968fa18", 0x17, 0x2, &(0x7f0000000140)={0x2, 0x2}, 0xc)
connect$unix(0xffffffffffffff9c, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa)
r2 = socket$inet(0x2, 0x3, 0x2)
getsockopt(r2, 0x0, 0x2, 0x0, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)

505.451569ms ago: executing program 1 (id=728):
setuid(0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
r0 = syz_open_pts()
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x1, 0x0, 0xfbfffffe, 0x0, "d76c1f46000000ef1f0160fbff2000404b00"})
sysctl$hw(&(0x7f0000000080)={0x7, 0x5}, 0x2, 0x0, &(0x7f0000000180), 0x0, 0x0)
syz_emit_ethernet(0x50, &(0x7f00000003c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x42, 0x0, 0x2000}, @udp={{0x3, 0x2, 0x8}, {"bd794d0f6a9d0b02b57c0d75520653b6c57395e6da9e9ad78c9930f020f968510a412d343f6b"}}}}}})
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x5ad, 0x2, 0x5, 0x8001, "0067b400000b00006a00000000000000000200", 0x9, 0x8})

494.099391ms ago: executing program 5 (id=729):
syz_emit_ethernet(0xf6, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa43f", 0xc0, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts, @dstopts={0x2e, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0x12, 0x0, 0x1, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @empty, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @mcast1]}, @fragment={0x67, 0x0, 0x10, 0x0, 0x0, 0x7, 0x47}]}}}}})
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)

285.78406ms ago: executing program 5 (id=730):
sysctl$kern(&(0x7f0000000040)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x3, 0x3a)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
setreuid(0xee00, 0x0)
r2 = getuid()
chown(&(0x7f0000000180)='./file0\x00', r2, 0x0)
chmod(&(0x7f0000000200)='./file0\x00', 0xa5)
r3 = getuid()
seteuid(r3)
r4 = open$dir(&(0x7f0000000580)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x3}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x67, &(0x7f0000000000)={0x0, 0x0, 0x32, 0xd5aa, 0x4}, 0xc)

285.341006ms ago: executing program 0 (id=731):
r0 = open(&(0x7f00000011c0)='./file0\x00', 0x282, 0x0)
r1 = open(&(0x7f0000001700)='./file0\x00', 0x70e, 0x0)
pwrite(r0, &(0x7f0000000180)="4a5e6023ff", 0x5, 0x7)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x810, r1, 0x0)
setitimer(0x1, &(0x7f0000000080)={{0x9, 0x4}, {0x0, 0x6}}, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="f3", 0x1}], 0x1, 0x48081)

285.094522ms ago: executing program 2 (id=732):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e", &(0x7f0000000080)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) (fail_nth: 1)

153.71398ms ago: executing program 7 (id=733):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a616165d000000009b6ef46d06e8775492d82f8a89dbb53bd806a6e0cc9166f07b7d9ecd95becc3555fd76f7ba", &(0x7f0000000080)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe)

152.963629ms ago: executing program 2 (id=734):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffffffffffff)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe)

152.107718ms ago: executing program 0 (id=735):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e", &(0x7f0000000080)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

151.674749ms ago: executing program 7 (id=736):
r0 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x20, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]})
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be003fb9f7c1615513b5392c076b163afd44f0a0b24799fc29", 0x2c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000480)="71f91e3c71ac0058bc5ab2501ddc32bd720294a34b8e5f84cf2ceb2171b59c7afec37082dcb9c25e5e0f7ed6", &(0x7f0000000080)=0x2c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r2, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe)
preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000400)=""/243, 0xf3}, {0x0}], 0x2, 0xfffffffffffffffe)
unveil(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='c\x00')
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x54e}], 0x1)
writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x57e9, 0xffffffff, 0xfffffffd, 0x1000, "ffffff00000000f4ffffff060000000000008000", 0x133653f6, 0x2})
poll(&(0x7f0000000b80)=[{0xffffffffffffffff, 0x10}, {r2, 0x1}], 0x2, 0x200)
syz_emit_ethernet(0x0, 0x0)
clock_gettime(0x0, 0xfffffffffffffffe)

115.763853ms ago: executing program 0 (id=737):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x10, 0x0, 0x1, 0x444}, {0x81, 0x77, 0xa, 0xfffffffc}, {0x6, 0xfe, 0x0, 0x401}, {0x8, 0x1, 0x2, 0x8}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207a71f95cd2079758c8793c315921ced3d395056fe3a9f99271e", &(0x7f0000000080)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x9, 0x8000000000000000})
r2 = syz_open_pts()
close(r2)
syz_open_pts()
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x7ff, 0xffffff80, 0xfffbfc02, 0x280a1a0, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0x2})
syz_emit_ethernet(0x35, &(0x7f00000003c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x2000}, @udp={{0x3, 0x2, 0x8}, {"bd794d0f6a9d0b02b57c0d"}}}}}})
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x7fffffff, 0x200, 0x100000000, 0x6, 0x4, 0x8001}, &(0x7f0000000080)={0xfff, 0x100, 0x100000000000, 0x8000000000000000, 0x400, 0x1003, 0xd3, 0x100000001}, 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

483.475µs ago: executing program 2 (id=738):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="d014b7", 0x3}], 0x1, 0x800)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[])

182.847µs ago: executing program 5 (id=739):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x120, 0x0)
r0 = open(&(0x7f00000011c0)='./file0\x00', 0x282, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="f3", 0x1}], 0x1, 0x8001) (async)
fsync(0xffffffffffffffff)

0s ago: executing program 0 (id=740):
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20a00, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x34, 0x2, 0xff, 0x802}, {0x40, 0x3, 0x7}, {0x96, 0xf0, 0x80}]})
syz_emit_ethernet(0x1a2, &(0x7f0000000000)=ANY=[])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
panic: ufs_rename: lost dir entry
Starting stack trace...
panic(ffffffff8330bca9) at panic+0x1ba
ufs_rename(ffff80003c98b548) at ufs_rename+0x18b2
VOP_RENAME(fffffd8066f17cc8,fffffd806a85ece8,ffff80003c98b718,fffffd800846b1b0,0,ffff80003c98b668) at VOP_RENAME+0x13c
dorenameat(ffff80002a7aa030,ffffff9c,200000000080,ffffff9c,2000000000c0) at dorenameat+0x3f8
syscall(ffff80003c98b8b0) at syscall+0x97e
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1ed67bf4c60, count: 251
End of stack trace.