last executing test programs:

4.45706549s ago: executing program 0 (id=119):
r0 = syz_open_pts()
fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd})
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000})
closefrom(r0)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001})
r1 = syz_open_pts()
r2 = syz_open_pts()
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7, 0x3, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0x7f}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0xfffffffe}, {0x401, 0x6a, 0x2800, 0x7}, {0x10102, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0xa1, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1d, 0x88}, {0x1ce, 0x10001, 0x8001, 0x3}, {0x7fe, 0x3, 0x3c, 0x5}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x9}, {0xc, 0x407, 0x5}, {0x8006, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r4 = dup2(r1, r2)
ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x5)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
ioctl$VNDIOCCLR(r6, 0x80384601, &(0x7f0000000040)={&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xff})
ioctl$WSKBDIO_GETMAP(r5, 0xc010570d, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x9, 0x5, 0x9, 0x0, 0x8001}, {0x1400, 0xfff9, 0x3, 0xd58, 0x5}, {0x53c, 0x7e, 0x6, 0x2, 0x40}, {0x7, 0xa4b, 0x8, 0x3, 0xfff4}]})
ioctl$TIOCNXCL(r4, 0x2000740e)
openat$pci(0xffffffffffffff9c, &(0x7f0000000280), 0x58328, 0x0)

4.233688517s ago: executing program 0 (id=146):
setsockopt(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) (async)
readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) (async)
syz_emit_ethernet(0x5c, &(0x7f0000000300)={@random="051a30c99739", @broadcast, [], {@ipv6={0x86dd, {0x6, 0x6, "24cabb", 0x26, 0x70, 0x6, @mcast1, @empty, {[@fragment={0x3, 0x0, 0xfe, 0x0, 0x0, 0x3, 0x67}], @udp={{0x3, 0x0, 0x8}, {"2b64485eb29d30168fbc1be53e2d99c75c57c024965c"}}}}}}}) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r0, 0x2})
write(r0, &(0x7f0000000080)="ed", 0x1) (async)
recvmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x38, 0x2003, 0x0) (async)
r3 = socket(0x0, 0x2, 0x0)
ioctl$FIONREAD(r3, 0x80146940, &(0x7f00000001c0))
close(r0) (async)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
write$audio(r4, &(0x7f0000000200)="7a419549bf5ccf8934d35a981380ae50bf5808fa6c47cbac3b3d2e08432320125da68539987c1119eb12ba1a41270f7a0b0fe5d798f5a36a502872bcc0a9314e4fe16b204e0e2606008270cbe3fd3842594348455d24da2339de59f0ebec958ff9bb7fecd0addb7b59a1ab26c17cfebb59e7d205b987a1389af34ac9e090fc7df98026b2a7402fb66ba50a894ebdac257026598ba4f744ec7e5dfd87391237b503870ab2458015102867ce25940aeef678935b766e08256d2620f51bc7496eb2a28f37ced52e07e7699aa6155b6a3c08e088a9dd6a4b36105b194868d0d11376c1d0de59b39e7cfa71615a3dac1205eb56280f", 0xf3)

4.229235757s ago: executing program 0 (id=149):
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000040)="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", &(0x7f00000002c0)=0x21c, 0x0, 0x0)

4.203302799s ago: executing program 0 (id=152):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1c, 0x7, 0x3, 0x48}, {0x3c, 0xf0, 0xff, 0x4000000}, {0x6, 0x80, 0x79, 0xfffff87f}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}})
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)

4.190632418s ago: executing program 0 (id=154):
r0 = socket(0x800000018, 0x1, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0)
ioctl$FIONREAD(r1, 0x4004667f, 0x0)
listen(r0, 0x1)
accept$unix(r0, 0x0, 0x0)
r2 = socket(0x2, 0x1001, 0x0)
recvfrom$unix(r2, &(0x7f0000000040)=""/105, 0x69, 0x2040, &(0x7f0000000180)=@file={0xf, 0x1, './file0\x00'}, 0xa)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
r3 = socket(0x1, 0x1, 0x1)
setsockopt$sock_int(r3, 0xffff, 0x4, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000)={0x4, 0x7fffffff}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = socket(0x11, 0x3, 0x0)
r6 = socket(0x18, 0x3, 0x0)
setsockopt(r6, 0x1000000029, 0x3e, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
setsockopt(r5, 0x11, 0x3, 0x0, 0x0)
closefrom(r5)
bind$unix(r4, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa)
getsockname(r4, 0x0, &(0x7f0000001900))
close(0x3)
execve(0x0, 0x0, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000200)='$\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000400)=[&(0x7f00000002c0)='\'p\'(^%%\x00', &(0x7f0000000300)='-\x00', &(0x7f0000000340)='!)\x00', &(0x7f0000000380)='%$}d:-\\A[%-:(-{^:$\x00', &(0x7f00000003c0)='\x00'])

4.190004815s ago: executing program 2 (id=156):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async)
r0 = syz_open_pts()
close(r0) (async)
r1 = syz_open_pts()
ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000480)={0x2df57366, 0x8, 0x2005, 0xfffffff4, "1a6400b728607c47e77c00d49846840082e100", 0xfffffffe, 0x100000c})
writev(r0, &(0x7f00000005c0)=[{&(0x7f00000009c0)="e425385d5802d51ffc945801567f17f61757bef056761cecc2a3b72e1b5a879a9e0691d17b3879a97c9c09a51e529c34486c043d2da1f40e34c79ac6847609876270eb6e4b768f36be75f36a253dab70e52aa8d878a292e635ada9e644a12336affe511eba6d058518c2334ccf2122aff6dd23a5d7166e0ee4379513b60cac3533a6a864eb8bfe6e53016b184bd83a8efe043b2202fd97b401d0f3a3072cee35dfdaec2a8ed1b996dc5f344dae86e880babb9cc62264d8493070396dbe56608da3024cfb03d68ded62d1a120bd068a5b8eccde398170e3866240ebc825315a44f598eed23cbc426e7ae0e36a7c343b275fee17ebbfa2738c856596bcb0c44c60f830ae83f5a5ff1482115aaf064638f8fd61850a8be1dc056b4dcf9a467ce8dde92ccd742c0f2853f46b12b8c2cf22882c736b2b20dd67cecacb433866b27bb710efbac70b4f8295662616eebb9b5097d0d84e0730b675e925a7609f8ec3ff4bc65733ba3f2c2d34f0d8abfe2392f991f839442b61c9201dd5918791df8b3c8e7c5eb0911bc1e445af44407e1ad8e402c42dcec93fa3a026fc7c6c1e64af69371d6045bfbd0c0254a5cc2f60f1b903caa4547aa6f1e46aa9f975e6188990846bba80d4061ed084e0eafb5a8ea12762062b1603b152862432c35a8cc8ee10f5060b4260ee8d334d6d10098d0e03f86b2d02b703d5eafa5be01c41ada7adbaba249a9e18a10ba9929833d03140775bdc6be728011c8a1727cd9dcdd7413270bcf4b92129de0225ad69b09ba3daf567d3a5dd9387e02561f76e4d6a67a5453d8c66022f91b5c6a83cea29188da1284cf71814a1ee6b8082fa349f1f89156431b835bc0835a70906d5727e7da9b71fa6ba17a384488a315c18f0d8a706c658ab2c98988a0bc063db739db9de36a5e37bbf84fa819cde3210d0180c490ac5f4245f4673af9b1a3fced95e9bf0e6925c10204e62c538bd6150f337014eb2730115efb3c8f6733414f66a826c2dc2b539ac3f7a49dd25ab1d8dde6918800f109b4d5d95acd47bef3c51f578332f72d7a1299ff30b466463ec24e84e3d04ad953af12e4a07eee192a7a390383f518f5c2d953a75df37653a05e3f3c2096c3df096d7e9806e342304f31705899f3fed9447bccc4bc1975baa4fe5ab10a99b63c80c50abc83ecb66c39d68d0714f30d5e4d98165ec54191a50573a35c24fc0d53e6574adf049c224e41180977d46facf8f5b9d2ab5974213c188e60c41bf4d18ef330883a44371f9759a5aaf0c5beb60c9967b34580c03b62b9dcba93e68fc179c585f33d073b449a72eb5a6363f2337c56145bb301ec2b6cbd0b5b8ff05fc8f75555c5ce6a6958078e98f85e30fac4dd605fba7e8ec0d21d5fe35133f13f4bfa140753abcd9fa6f416d01d28dad59fe29e97f5021c37b9dba92dc77f1f4a04ed7870a60bc5451062270ee798d1a6c649f4e3ebcd39f8295d277114d8aad266919ecb101f5f5b43d830a8ac3ddbe63fbdf18f9dd149771e5768a174ac9e42c08dca53dc3d78e2285e9de9c53bc1937a966c1777eae8042a150bdf848ecb3fdd7829e94a6ff8a6dba26fae9d2689281004c9a42e095184adeaffc394e344a1d3c01001891e3d7c02016e6364fbcdd62280e5707ae6038cb521fd691c9fd76c390a60622e236889db87cd4dab6d356f69d40e94f7847716120c92929ea4656c8389cf71a7b78395469c0d2a627367daeb3af1c1074006bef1fb2d5017f5d8b1673a68232933f73f7cd85b072d2cc1e4a99a31d00fa343d75d9a2523d1adfd7b71ef34d49c6c3d15e95dd896c3b13e1db32aae8a859c2828d0e687264257adccce066b53ef185c912b6aac9e194b9b86fdba3c52c2c4bd31b5f5a11e9f3dc5ecd74962d758e8ae8126021c77f907ef85604a9054431ce1df385720dc6eb90c0c7cce358efc2859d61d448f34e30883d43590418d9098537efa7c009eeabdbd4d071972383c34ec93c4ed1c601c2ed7437b283becc63537a336a70fc9146f957402a345f03cfec2c9e8fef88a702182d4ba76a286b0e3650a3ee10b7099d06932c3403b5973fc10a9646324ac0a630402558933922cf12ba4d16f1a6dee7e684969ee7b79fb4b7716564ba0c850edb48ecdf0a21b68b9f422a226b505ab03bc836e7f10351d16de9861d0757f87459020f7d7f39097ae585872a6592416c410f71518806448e00580206f8f7f847352729a3e6615c27dd92ebe7b5dfdc21", 0x637}], 0x1)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) (async)
rename(&(0x7f0000000100)='./file2/file0\x00', &(0x7f00000000c0)='./file2\x00')

4.189120962s ago: executing program 7 (id=158):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2d87)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x7, 0x101, 0x80000003, 0x1, 0x80000000, 0x10, [{0x4, 0x9, 0x0, 0xfffffffb}, {0x7, 0x6, 0x6, 0xfffffffc}, {0x8, 0xf86, 0x0, 0xaf9}, {0x2000004, 0x800, 0x7, 0x40}, {0x3, 0x7fffffff, 0x0, 0x7}, {0x2, 0x6, 0x3, 0x101}, {0xcdf, 0x1, 0x1, 0x6c}, {0x200a, 0x80803, 0x17, 0x8}, {0x0, 0x4, 0x7, 0x9}, {0x6, 0x8002, 0x100000c7, 0x4088}, {0x4, 0xffffaac5, 0x34, 0x10000aeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffff9, 0x6, 0x6}, {0x4, 0x7, 0x4}, {0x0, 0x1, 0x0, 0x30000}]})
open(&(0x7f0000000480)='./file1\x00', 0x200, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

4.118046985s ago: executing program 7 (id=162):
r0 = socket(0x18, 0x1, 0x0)
r1 = accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8)
setsockopt(r1, 0x2c, 0x8, 0x0, 0x0)
getsockopt(r0, 0x29, 0x2e, 0x0, 0x0)

4.111049852s ago: executing program 7 (id=165):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x2, 0x1, 0x0, 0x0, 0xdf5a, 0x0, 0x0, 0x2eff, 0x5, 0x3, 0xfffffdffffffffff, 0x0, 0x8000000, 0xa8, 0x2, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0x100, 0x7b9c, 0x1fe, 0x9, 0x1, 0x100], [0x100000001, 0x0, 0x40000000, 0x4, 0xfffffffffffffffe, 0x11003, 0xfffffffffffffffe], [0x100, 0x1be, 0x0, 0x100000000, 0x0, 0x6], [{0x8, 0x7, 0x1, 0x7d06}, {0xfffc, 0x7, 0x5, 0x2}, {0x10, 0x1, 0x5bea, 0x101}, {0x3, 0x5, 0x7, 0x80000001}, {0x10, 0x2, 0x0, 0x808}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0x20000, 0x4, 0x400000008}, {0x0, 0x965, 0x3, 0x4}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x2}}})
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="eaef125c00000000", 0xc)
recvfrom(r0, &(0x7f0000000000)=""/39, 0x27, 0x2000, 0x0, 0x0)

4.109316692s ago: executing program 5 (id=167):
select(0x0, 0x0, &(0x7f0000000040)={0x600000000, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x33, 0x4}, &(0x7f0000000080)={0x3, 0x9, 0x0, 0x8, 0x5b0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x1, 0x7ffe})

4.091553513s ago: executing program 1 (id=169):
sysctl$kern(&(0x7f0000000000)={0x1, 0x2a}, 0x40000000000000ef, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) (async)
sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000001580)='+P){', &(0x7f0000000140)=0x4, 0x0, 0x0) (async)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cf7a09ea8453109b036a756", 0x11) (async, rerun: 32)
truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async, rerun: 32)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0)
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) (async)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa142}, 0x400, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x5}) (async, rerun: 64)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x23) (rerun: 64)
faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x3e, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) (async, rerun: 32)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r2, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) (async, rerun: 32)
sendmmsg(0xffffffffffffffff, &(0x7f00000024c0)={{&(0x7f0000000000)=@in={0x10, 0x2, 0x3, 0x9}, 0x10, &(0x7f0000002340)=[{0x0}], 0x18, 0x0}}, 0x38, 0x402) (async, rerun: 32)
mprotect(&(0x7f00005e7000/0x1000)=nil, 0x1000, 0x4) (async)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) (async, rerun: 64)
socket$unix(0x1, 0x5, 0x0) (rerun: 64)

4.09005351s ago: executing program 1 (id=170):
setuid(0xffffffffffffffff)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
syz_emit_ethernet(0xaa, &(0x7f0000001ac0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520800050000000000b10000000000000000000000bbff020000000000000000000000000001"])
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sysctl$kern(&(0x7f0000000140)={0x1, 0x39}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)

4.089703036s ago: executing program 1 (id=171):
symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') (async)
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00')
r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
stat(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f0000000100)) (async, rerun: 32)
ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f00000001c0)={{0xeb59, './file0\x00', [{[@v6=@empty, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x1, 0x27], 0xd}, {[@v6=@rand_addr="e839f860c01b81068cd5387e8e2de3ae", @v4=@local={0xac, 0x14, 0x0}], [0xfffd, 0x5], 0x40, 0x18}], {{0x2, 0x61, 0x5, 0x7}, 0x2, 0x7, 0x7, 0xe8d, 0xbdf, 0x6, 0x2}, {{0x0, 0x6e, 0xa0, 0x8000}, 0x2, 0x1, 0x6, 0x3ff, 0x1, 0x8e, 0x2}, @v4=@loopback, 0x14, 0xfffffffe, 0xfff, 0x1, 0x3552, [[0x1, 0x3f], [0x7, 0x7]], [[0x73b90116, 0x6], [0xe, 0x5]], 0x3cb, [0x0, 0x7ff], 0x3, 0x6b424f0b2901262f, 0x7, 0x1, 0x4, 0x0, 0x0, 0x0, 0xf, 0x7, 0x4, 0x6, "f84b"}}) (rerun: 32)

3.886498502s ago: executing program 1 (id=172):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000})
flock(r0, 0x1)
r1 = socket$inet6(0x18, 0x1, 0x6)
flock(r1, 0xc)
flock(r0, 0x2)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x3e, &(0x7f0000000200), 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$DIOCSETHOSTID(r3, 0xc0044456, &(0x7f00000000c0)=0x8)
syz_open_pts() (async)
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) (async)
flock(r0, 0x1) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
flock(r1, 0xc) (async)
flock(r0, 0x2) (async)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async)
socket(0x18, 0x1, 0x0) (async)
setsockopt(r2, 0x1000000029, 0x3e, &(0x7f0000000200), 0x0) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
ioctl$DIOCSETHOSTID(r3, 0xc0044456, &(0x7f00000000c0)=0x8) (async)

3.885073271s ago: executing program 2 (id=173):
mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x180)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
ftruncate(r0, 0x8531)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x10000, 0x4)
lseek(r1, 0x8, 0x1)
getdents(r1, &(0x7f0000000800)=""/4096, 0x1000)
rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/../../file0\x00')
unveil(&(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000400)='r\x00')
sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="01", 0x1)
sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="574eb4642a", 0x5)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
setuid(0xee01)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
r3 = socket(0x24, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0x1c, 0x18, 0x2, 0xb, "4f19f4bd1d9e912754cb38fa330fe787"}, 0x1c)
ioctl$TIOCEXCL(r2, 0x2000740d)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x3c)

3.883977561s ago: executing program 2 (id=174):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x2, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x4000008, 0x95}, {0x81, 0x800, 0x9d29, 0x400006d}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x82, 0x4, 0xaf}, {0x5, 0x7ffffffe, 0xd1b, 0x88}, {0x1d0, 0xa, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x2, 0x2, 0x7fff}]})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffff7fffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0)
r4 = syz_open_pts()
read(r4, &(0x7f00000001c0)=""/159, 0x9f)
close(r3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async)
setuid(0xee01) (async)
socket$unix(0x1, 0x1, 0x0) (async)
connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x2, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x4000008, 0x95}, {0x81, 0x800, 0x9d29, 0x400006d}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x82, 0x4, 0xaf}, {0x5, 0x7ffffffe, 0xd1b, 0x88}, {0x1d0, 0xa, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x2, 0x2, 0x7fff}]}) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffff7fffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) (async)
syz_open_pts() (async)
read(r4, &(0x7f00000001c0)=""/159, 0x9f) (async)
close(r3) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async)

2.033803805s ago: executing program 5 (id=175):
getgroups(0x9, &(0x7f0000000380)=[0xffffffffffffffff, <r0=>0x0, <r1=>0x0, 0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0])
setresgid(0x0, r0, r1) (async)
semget(0x2, 0x4, 0x40b)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}) (async)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffff9c, 0x80085762, &(0x7f0000000040)={0x1, 0x6})
r4 = socket(0x18, 0xc003, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) (async)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0xb, "759f5a01005ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x2, '\x00', 0x5}, 0x0, [0x3efa, 0x9f72, 0x80000001, 0x9, 0x4, 0x7f, 0x800, 0x4]}, 0x5c)
r5 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r5, 0xffffffffffffffff) (async)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0xc0, 0x0, 0x8}, {0x18, 0x0, 0x6, 0xe3}, {0xe, 0xfd, 0xe, 0x2}]}) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@file={0x63, 0x1, './file0\x00'}, 0xa, 0x0}, 0x0) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000340)="3fbc53c6f14113fa83d91c5dd0c2a6d6000000800f00ecfe746fc654acf82b3c6605ab508444fdcbb7b6f369", &(0x7f0000000000)=0x2c, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r6, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
setreuid(0xee00, r3) (async)
sendmsg$unix(r4, &(0x7f0000001700)={&(0x7f00000000c0)=@file={0x0, 0x1}, 0x2, 0x0}, 0x0) (async)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r7 = socket(0x18, 0x1, 0x0) (async)
close(0xffffffffffffffff)
socket(0x18, 0x2, 0x0) (async)
sendmsg$unix(r7, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406}, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{r3, r2, r5, r0, 0x1b9, 0x3, 0x0, 0x0, 0x822}, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x5})

2.033418345s ago: executing program 5 (id=176):
r0 = syz_open_pts()
syz_open_pts()
syz_open_pts()
fstat(r0, 0x0) (async)
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async)
getdents(r1, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async)
r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000000)=0x210)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
sysctl$net_inet_tcp(0xfffffffffffffffe, 0x4, &(0x7f00000000c0)="e96d6b7ba7624f2b57677072a58ed9ef82b1f6eeba6a4c277acc767bb2c05f72a9e1a43dc4c86ad33a149c099e9f2aa166a26302e455a054ee55ab9782ba1336b0114e225fa4d2ad7d8e874543493559d45410257422f5374306fcbc79d580b9050000000c2c7515a314d1fc0287142d6196768e000000000000c0e37a2db7aa573034598bca1a88decc20b0b6668332ef6329b37d56a0949711882e3f6769723397453f0a4eb35d88817b65f702072b43776637137a3ecfaffc0b7f6a0a28dd341a7ece45f1b604b8e79c680df60d49e8ac8893ed782bdd6371ca7b76f3eec022752419b1939c", &(0x7f0000000080)=0xffffffffffffff6d, 0x0, 0x0)

2.032289145s ago: executing program 5 (id=177):
r0 = socket$inet6(0x18, 0x3, 0x0)
r1 = kqueue()
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000))
r2 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10)
getsockopt(r0, 0x29, 0x39, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r3 = syz_open_pts()
close(r3)
syz_open_pts()
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000140)={0x7fffffff, 0xf, 0x7b, 0xffffff8d, "0d2628040200c2a6d2fe6eedb2e0ff7f0d000004", 0x8005, 0x8000})
writev(r3, &(0x7f0000000900)=[{&(0x7f0000000400)="d5331519794b5ddcfc86590035059bb4dc6f40b98297988d6776dae8e3e6be65f2487705444dbe51af0ae7e20db6270475cad914f1293a37afa53c0e8fbbb17c8d9a05e994c57a39329fd18f97498031ba47989f3c50677f619f12493f22a43c245e1f303fc118e2c4a22c21cdb16d5868993e7e91c0a9192ed4f4249a2900372fe825569fe98a3776278c4e7e1ac6d079a294d6d87d9458bfec0a0e8a", 0x9d}], 0x1)
r4 = syz_open_pts()
mknod(0x0, 0x6000, 0xe02)
syz_open_pts()
r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
r6 = kqueue()
kevent(r6, 0x0, 0x96, 0x0, 0xfffb4961, 0x0)
ioctl$DIOCGETRULESET(r5, 0xc444443b, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$DIOCSETHOSTID(r5, 0xc0044456, &(0x7f0000000000)=0x9ee3)
setsid()
ioctl$TIOCSCTTY(r4, 0x20007461)
r7 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSCTTY(r7, 0x20007461)
ioctl$TIOCSTSTAMP(r7, 0x8008745a, &(0x7f0000000040)={0x2, 0x1})

1.945743593s ago: executing program 5 (id=178):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x11, 0x3, 0xfffffff5}, {0x54, 0xf0, 0x9}, {0x6, 0x80, 0xf8, 0xfffff802}]}) (async, rerun: 64)
sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="83d91c5dd0c2a6d60000eaf7661ac0ec00800f00ecfe746fc6543c66057d12131152f18233f6f66267ead098626e0bafe0484f78e609e830c58ab3c55b4ca00949a6c2c2595c65c1d3a7d0293bd5b49bb4b77d0d48b6fc686a9d4604921060e51dd4caa2c32fd8a32a50e0e1c10ca5ceb4a9e1c3d3289f7055d527ca98817752c5", &(0x7f0000000000)=0x81, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async, rerun: 64)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 64)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0xcf, 0x0, 0x8}, {0x9, 0x9, 0x7, 0x75a}, {0x6c, 0xff, 0x6, 0x5}]})
fchflags(r1, 0x10000)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0xa4, 0x3, 0x11, 0x10000006}, {0x7, 0x70, 0x2, 0x40040003}, {0x3c56, 0x5, 0x6}]})
syz_emit_ethernet(0x69, &(0x7f0000000100)=ANY=[]) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}})

1.944984196s ago: executing program 5 (id=179):
r0 = msgget$private(0x0, 0xe3)
socket(0x2, 0x1, 0x7) (async)
r1 = socket(0x2, 0x1, 0x7)
close(r1)
listen(r1, 0x10001)
msgrcv(r0, 0x0, 0x0, 0x2, 0x1000)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$DIOCADDQUEUE(0xffffffffffffff9c, 0xc148445d, &(0x7f00000002c0)={0xf, 0x7, {'\x00', './bus\x00', './file1\x00', './file0\x00', {{0x6, 0xf}, {0x400, 0xbd1}, 0x6}, {{0x10001, 0xa3}, {0x7ff, 0x80}}, {{0xffffffffffffffff, 0xbb}, {0x4, 0x6}}, {0xc, 0x80000000, 0x5, 0x10}, 0x0, 0x1, 0x2, 0x1}})
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='c\x00') (async)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='c\x00')
syz_open_pts()
msgctl$IPC_RMID(r0, 0x0)
sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f0000000140)="d5bd0d1d2d9ffe090000000000000079439e7ba8e913fa00002c4d", &(0x7f0000000040)=0x1b, 0x0, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea)
chdir(&(0x7f0000000100)='./file0\x00') (async)
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27)
msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000580441c5044007c897a76e2e124beb620daa7eda5da29564453d9acf3ed0fcf9add53df685f13fb45a1b9157a57b5b34de40bcc9b12258b52ef04f34ddff0126a167d517c1eb6881d0d09bfababbb60286e9ebe4ae1ca9b8ec1403cb2e74e199701c5cd12ae0ebc68b24d950f2a0cdde7786887916e801a46a61e7d6d714f623c242d1e1a802a6e21a091f03649d59ccdb223ec7aa30a88d86101567ded6ab1eff94d692dae5859f37d1d229d6f4ee91d707d1b6ff25c410"], 0xb7, 0x0)

1.50175279s ago: executing program 6 (id=201):
sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa00886341e5ec511a45f655"])
r0 = socket$inet(0x2, 0x3, 0x5)
ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000001c40)=0x400)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="673b08f1b8d24e2217f981aa6a78ef1d337eda482e328d93bd3aa24deb3a6c382526b1", 0x23}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x18, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20, 0x2}, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)

1.500664419s ago: executing program 6 (id=202):
setrlimit(0x8, &(0x7f0000000980)={0x2, 0x2})
r0 = syz_open_pts()
close(r0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000002740)={0x0, 0x7, 0x0})
r2 = syz_open_pts()
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x7)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r3 = syz_open_pts()
close(r3)
syz_open_pts()
ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x2df57366, 0xf67, 0xd, 0xffff7dfc, "0a6400b728022400060000d4620300", 0x8001, 0xff})
writev(r3, &(0x7f00000003c0)=[{&(0x7f00000009c0)="3a62395f52ca39ebb428ab374b8b24476f635a668335c1f35bbcbe1879e457c0cd52509469ddb2a491a5e3bc100abcb0bec31655e5ea8f75e58c2e42324caf2af4e99a44db026b78def9b2cd42929ab8e4cd8684cba789aafec54a2b07d5089a929ee4da37fde90029c06f99975b1952e955d2ea457e2e890d44a1e144e70c38623a8296afaaa2782706fe810a04d3f761662da4fb2e1b88ce6361d6a0ead5a920dd965381cd1df46418693ca12c8724a3594bfa8e6479de4f3e4dd29168e19026c95a5f4c5ee5639bdce2aa51e52d35a93992d8b76e7dcb2db7e042cf003776019df2ece194b2b738633f0cae1cead6c60a6c9b3e0d5220a548836175602df525f4e16199a0e6b99d2a9d7d6da340bec3156c8963b5f028818ee36a6a44c4f99e8642544cfdf002179dce1329db99184e3a41668284ac68cc560efb695b735827a983990457a862b8ac0d85f70d7a81b86ed75bfad74a055b6e52666d0862f8504f2f1e0dc7b0293d422677021d53255f2befecb2ee126e59d4ee576762597f40b7ed3cae8c9adcfc0bc40f5f78e21fab1d4b040e7781f2e46fe8eeff983c9d00e4662e9ed65c18e588dfd61e0ce5aa3f0edb4b53b64e658e6856f81e101eec2e6fd961c5643f3adca17c706240932fd387c95e57acb4a53f792b8584fb95386edfcae81a1d0a7101094263d2bb4c9ade15cc5522c008b1874e81446780e5f6896bd5aff25c3ccfc5477d8c44dc1e0b87663947fa843e71dd60cdce645bcfc3b2bd730b5db28c6d70236299666f149eab2d95ef509d2438ee14071158973d0f338df0e5219835f52890a1cab0fdda671091494175320d0877673a6ad83c12b5e3f1cd292634c3ff2d07a69df19250d15babb6b354cfbb0be6fb5ba05b59de2077b0bf59c96593a3143d91fe6123131743570cd2263e0280692a4ef65b0fa2d6094662260779f05feb963c2a809950216b866832d527805bde2fb4e7ab26a7774924e812483db67725fd01ed543763084201591fe0f4ed4c7f7d83c1576e78f66a561e7909f925dbab3dfb368a57f3f79f9b83c61635a5d9d463dfe24da7646d7775694d233fb56dcaf18b2271efa58850d56663146c3a8c0e131a0ff4256c44d4e1c586a6dfe8da4ebf0a1eb3929079fd45962b79db7dba24516631999de6163b9e1a778403545c9c2d20b52e426e031a9f292ff373b9db3dacf2172bdef3ff5bf2f3e2e25cecab3315e4a80e18fbd5ca507a30de165c448d117110e1b68bee579d0002b145d2d2a8b50e857bf5722d5bb91742dd76cd5ffa2238fb59d47c3ac0c6f11129cea0ba2d76b04504d5905a44e0a15cfe517e4cce3dfdaa33e392a1709aa576fa8650be9e05a6b604fe4c06a338109b005bab104c13556950adb7a4c02f3d08ab7bd1ea58438ce33a398e2413b55a2cf18aec094b942cfacec6f4f3db05ca219c734d8b62b439feef3252a47b53c0bc0471a443d520e9a93390dbd4f829372cc854a7162e8b837c4f885540cc9e3f1d335a8527537a448e1a49cafe58c72db049844c7fc467b438ece637c42b08f33c378cb4dcaa1d7187361339f76ff04f1b8b30437e23bb3837f449e97a66953aed6720cec90c00e44803dddcae933e5bd8e36b84cd67efaad880f655371bed8d509fd57ec0e6b0c6661cb805a5ba4b9e38da136bf6f09cede9f8333b8dcb0a07664437d7182168e18882", 0x4bd}], 0x1)
close(r2)
writev(r0, &(0x7f0000000440)=[{0x0}], 0x1)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000400)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x81, 0x5, 0x0, 0x56}, {0x40, 0x26, 0x6, 0x7fc1}, {0x9b1e, 0x1, 0xf6, 0x40007fb}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000300)=ANY=[])

1.174274673s ago: executing program 3 (id=207):
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x50, 0x0)
kqueue1(0x4)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket(0x18, 0x2, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
kqueue()
r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x8, 0xff, 0xffef, 0x1, 0x7, 0x2, 0x8, 0x0, 0x2, 0x1, 0xa})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
close(r0)
ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f00000000c0)={0x7, 0x25})
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)

1.173296868s ago: executing program 6 (id=209):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1ff, 0x7, 0x4000009, 0x0, 0x0, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xffbffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x0, 0x200800f, 0x20007}, {0x401, 0xffff, 0x5, 0x7}, {0x1, 0x650, 0x6be, 0x9b}, {0xce1, 0xffffffff, 0x4d4}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x4, 0x6}, {0x3, 0x8009, 0x1000, 0x2}, {0x1c1, 0x802, 0xdaa1, 0x3}, {0xc, 0xa, 0x9, 0xfffffffe}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x7e5b}, {0x0, 0x1, 0xfff, 0x30003}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x7fc0000000000, 0x0, 0x10})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r2 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0))
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="db00", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0xfffd, 0x0, 0xb9, 0x1, 0x0, @multicast1, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x3, 0x7f}}}}})
sysctl$kern(&(0x7f0000001b40)={0x1, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001c40)="3042928a", 0x4)
socket(0x20, 0x2, 0x4)

1.172293727s ago: executing program 0 (id=210):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000240)={{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/163, 0xa3}], 0xa3, 0x0}, 0x2}, 0x38, 0x2042, 0x0)
unveil(0x0, &(0x7f0000000040)='w\x00')
close(0x3)

1.171460889s ago: executing program 6 (id=212):
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000800)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0x0)
ioctl$TIOCSDTR(r0, 0x20007479)
mkdir(&(0x7f0000000000)='./file0\x00', 0x5d) (async)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80046478, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x18a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x40020009) (async, rerun: 64)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (rerun: 64)

1.157508993s ago: executing program 3 (id=213):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000580)="5a2d0b21c13839caf96b4fd731d00d8a2773a7f095e1466fb02e084902795179999f890ea1c4d961de85f85e4248", 0x2e}, {&(0x7f0000000200)="5f21813caa7565903a2a5b4d47e034e5ec0d49a5a81d395118f0fe1e14154fee3d4af178aa8b9844fc616daf518896832f835b833ae301d7c0ce3610531be0104519f9f2756532f305554739bb57b7a565478fb7ed1bd88c3356f1300348721d594c5fbc952618632e", 0x69}], 0x2, 0x8) (async)
setrlimit(0x3, &(0x7f0000000180)={0x7, 0x100000}) (async)
fcntl$setflags(r0, 0x2, 0x9)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x10000, 0x4)
lseek(r1, 0x4, 0x1)
setitimer(0x0, &(0x7f0000000100)={{0x1, 0x3}, {0x0, 0xfff}}, 0x0) (async)
setitimer(0x0, 0x0, 0xffffffffffffffff) (async)
getdents(r1, &(0x7f0000000800)=""/4096, 0x1000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
r2 = socket(0x3b, 0x4000, 0x0) (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$DIOCGETRULES(r3, 0xcd604406, &(0x7f00000005c0)={0x0, 0x80000000, 0xfff, './file0\x00', './file0\x00', 0x0, "8c9d5935779b6a78a7e3a60a4532a30017f35fc2a7ef5b71e260db2f81bb5169cc66a6e4903898580d084e3366d2b9279c2a3175bf965c823a5142713acdc187917d177bf5178aee3415b63ca4d6d0b2ec68720d980ba894897815ae02014ce2db8ca3c357e9645909a20a68de9f5fa425c60e832615e900a0630c110ccacbb628e37a4df7bfd9847f088192d3a4c438ffe11f6c44560eeec78e5b78dc51dbc063f4b33949ebedaf0cbea6e1b6584eb40ad781d07b56580afc6b8b77eaa96e807b6728beb63e5c6f4a46a95c5d32c4c6fad07b7d73eb2da0558e02e34e3ed0d86b5ac1e7bcb61037e8af5b45f0933d545d45114084f56973c01e90559061431a54cdc937de83065328aeb086c52af6d4dbea65553a0c5592d70ff5cb2bde487bdf3548c12da515206d3ac0ff809922307dfc3495e50ea19ce2651dbe32483503969f88a346927fd1e8fd169e92e7c38f1a73b7103fe4832bcf672c3691864c4e57cafbd5d878e10db704d8cca6f5968598cddadc734d4c334a7c639a62cf9066bb38bd3f109fccd2adda7a5fc5b4d173e3376af6b781d7f3ce839aa045be71730bc2d6d7325b0e83e789d8ef6ef6bfe8d85c706031835ecd1275bc32b72834a6e6bd93a318c382e5cda16402b3c3901280c3ed5aa5b7308a2d3ee805b75df5584e122a4840c26c51092b0d9a0b6aab42915e571a6f62d072537f84e807d858cdc320d2f710bada82c0e6ba022f5bc4021cb04d813463aa5ab692dd79d8847de19fe75d2e85e3b795c06416f6ef2ba62399a8aba4d4248526e14de0a45bfd617f29de30cf6f325b7e3c05dc8b22d16f65d6a82c47b01116ce3c9ed028bb53d3502d74a92eaca95d2a0f7572726934876341b68da3c533e9c46e93335988f85f62eb3eb16b150ba55a3b99afca6c1cf62d91ecad7cd66c210724f04bb42d873c62f0fab25f0e416f0c0884bf3e7616705ddc7ed06ee3dbf098fbfd38dbf0bbd99b757c1fc74995dd686f1cde9ad216cc596df440b9b802c32348d9b371cd7f79b8f6fb10e51a7f3bb093afd1bba97b95f5396d7f6f9f4fb133df64a3e9ebe62b0e374497a1065c11dd30f9613a40558c62a545f04e4e68c5d6ed4c5da5ab9edc4069446e03bf91d2f4a05fee3bab9c4a78b11b64d119b2840d23c2476535c004127e5a90685be45c6ed63d93d0379952bfc43a1eb4c4d8a61b9dcd5a6ded65ebc4339fe00bcab6653f7ded249552b228ae3a92c9e33b023c343904419d51b1b067998a77bb48db5456fe2e93b4f3aa29dd5f1fd49779b6a788c05857e113a21f8dcc1a90f30e553e09053b8edd9cf01657d6a70bf244916d3f7435ba50c4c364c727d853a8e7c5e9a89cd3c9dfd0864071684f59921596c927e4d3b64169637d88912a34505885d571fdc23879269ef35df060f2c866f2720a332d4f16791aefa1b71045b1caadd298bdb85411e0aacf036ba7a5c82464292453ec2b186374fc721f38e80911d14d9278524f11693cb05d03579f14bbf01c00328964a598a1f5988bdc63a59385048d38315c53cfe0029671d575ffcb2b57afed5a259ba88f6616df97322e6f9f5b670258cf8ac9b16708748021146f74111bd15a66fd1acf93c79597c04fc6f397fc9950fb31c9f8d5490f452f4cdfce0236a4dfd3eeb1552a52bb8fee43cad435e48e9de479b38207f636f961410525247ba8d56349316f4044cb7fd6b89ca1bb7cb4e6a723854c26a67eb57b19dcd089573bd02d52d730e92cb01abb6e9ebbf104c0949e235d60900f753ea60abd7a8cf962487766006201e458a2bf0009d6ff7b8ef36cc62cea77cb1f877f288dba46cd95f59344ccb94544808b6fee5e02cc99403187fe2f2fce69665ff1a10cd5f4956b2cc41c90e2f5a658143cba93f6a0afb003440e212d962f"})
sendmsg$unix(r2, &(0x7f0000001780)={&(0x7f0000000000)=@file={0x63, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18003a7d44813fbb00002900842e978f3b79f35f96fc5561a50b0d00cf654a488b99bb7371f6902afc733a633b9f92a68d", @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684498fb00082c0bfe8000000000000000000000000000aaff0200000000000000000000000000012b004000"]) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000280)={@broadcast, @broadcast, [{[], {0x8100, 0x0, 0x1, 0x2}}], {@ipv4={0x800, {{0xe, 0x4, 0x3, 0x9, 0x5c, 0x68, 0x1c, 0x4, 0x3b, 0x0, @multicast2, @loopback, {[@end, @ssrr={0x89, 0xb, 0x7f, [@rand_addr=0x9, @empty]}, @lsrr={0x83, 0x17, 0x4, [@remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @multicast2, @loopback, @broadcast]}]}}, @generic="ababf43c13ed51e91181e4abe9bd1a1bdeb05848ff590a896f33b4e9cb997c1bcc95ddc0"}}}})
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="6350247bd7450e33af5e1fe8377d75ffffffff680d615fbe0b3779d13c8fb6dc92b457c2f2700d7e915acd13f3e60a21cd00f95743b20cef0081f5b4a90b77207c1fc0f8efeb733dd2c42202be79e92ef3d99f5832b7859e6232eb683f5e1983717539f55c3cee9e3508557e3372d378067fa865a8aab570b05a121ba5cfb6374f4c0000000000", 0x95}], 0x160) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {}, {0x2}]}) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)

1.156054591s ago: executing program 3 (id=215):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0)
socket$inet(0x18, 0x3, 0x102)
sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in={0x10, 0x2, 0x2, 0x787}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000180)="638802000000119a8c51f6f2efa24a85abdd612dd68e59ad4ecf9323100084410a8591426ee03e53", 0x28}], 0x100000000000008c, 0x0}, 0x402)
clock_gettime(0x7, &(0x7f0000000140))
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01864c1, &(0x7f0000000080)={0x0, 0x1, <r2=>0xffffffffffffffff, 0x0, 0x7})
r3 = kqueue()
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000001c0)={r4})
close(r3)
fchown(r3, 0x0, 0x0)
ioctl$TIOCSFLAGS(r2, 0x8004745c, &(0x7f0000000100)=0x9)
openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BIOCPROMISC(r0, 0x20004269)

1.132394388s ago: executing program 6 (id=216):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x7fff) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x7e, 0x3, 0x48}, {0x48, 0x8, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a6100000fcbb7aed94075fca09a12bd3fe5a156fb81100000000f7793296ac0029948999e6e89716b77e1f5d4c4a4cb0d371e602b511538b04ed01d6c83dbd1c000000f070ae0d20ca01b2ddb2887b12f3f0c24f11d03f656d56a638047e07934c3a9a5ee93f2d592ce2240d9f97484879b8df366ba914817c781986f937119f1e415bfd61fb6eaa704e8a8d3cc018e44195924526bff90d7b434cf8044af2b3994aeda8129c9e55c4d49b7b2bc2119e8afb13c6add673ae09d5e68f982a4f", &(0x7f0000000000)=0xc0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x11, 0x4000, 0x0) (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
read(r2, &(0x7f0000000140)=""/79, 0x4f)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
close(r3)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[]) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f4002c00670000ff069078e0000001ac1400aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600282fa432ea8ee28827303"])

1.131436033s ago: executing program 4 (id=217):
open$dir(&(0x7f0000000700)='./file0\x00', 0xae828e137847fa0, 0x2)
r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r0, 0xf3)
setuid(0xffffffffffffffff)
unlink(&(0x7f0000001040)='./file0\x00')

1.126039968s ago: executing program 3 (id=218):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x80, 0x0)
ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000000e00)={{'./bus\x00', './file1\x00', 0x0, 0x4}, &(0x7f0000000180)=[{'./bus\x00', './bus\x00', 0x20, 0xc}, {'./file0\x00', './file0\x00', 0x43, 0x93}, {'./file0\x00', './file0\x00', 0x1d, 0x9}], 0x0, 0x3, 0xffffff7f, 0xd, 0x7f, 0x6, 0x40, 0x2})
open$dir(&(0x7f0000000080)='./bus\x00', 0x40, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
unveil(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='w\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)

1.122868769s ago: executing program 7 (id=219):
r0 = syz_open_pts()
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x18, 0x1, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, &(0x7f0000000600), &(0x7f0000000000), &(0x7f0000001640)='\x00\x00\x00\x00', 0x4)
setsockopt(r1, 0x1000000029, 0x35, &(0x7f0000000040), 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7)
write(r2, &(0x7f0000000700)="d929", 0x2)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(r2, 0xc1045763, &(0x7f0000000180)={0x1, [{0x2, 0x2}, {0x0, 0x8001}, {0x1, 0x7ff}, {0x0, 0x1}, {0x2, 0x81}, {0x1, 0x6}, {0x2, 0xffffff7f}, {0x2, 0x215}, {0x1, 0x5532}, {0x3, 0x2}, {0x2, 0x8000}, {0x1, 0x9}, {0x3, 0x5000000}, {0x3, 0x4}, {0x2, 0x100}, {0x3, 0x3}, {0x2, 0x9}, {0x1}, {0x2, 0x401}, {0x3, 0x2}, {0x1, 0x80000000}, {0x2, 0x5}, {0x3}, {0x1, 0x2}, {0x2, 0xfffffff7}, {0x2, 0x8}, {0x3, 0x455}, {0x3, 0x1000}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x401}, {0x1, 0x1}]})
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x2011, r0, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0xcdc, 0x7}, {0xfffffffffffffffb, 0x11}}, 0x0)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x2, 0x5}, {0x3, 0xd76}})

1.121310524s ago: executing program 6 (id=220):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0})
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3})
ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4)
sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0)
execve(0x0, 0x0, 0x0)

1.120638638s ago: executing program 4 (id=221):
r0 = syz_open_pts()
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
open$dir(&(0x7f0000000080)='./bus\x00', 0x80, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
dup3(r1, r0, 0x10000)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xf66c, 0x3, 0x7, 0x5ffbfb59, "7ad58fdbe07c0000000000e1ffffff00", 0x743c8c17, 0xd9e})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x2015, 0xffffffffffffffff, 0xfffffffffffffffc)

1.120375108s ago: executing program 7 (id=222):
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8, 0x80)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000000c0)={'./bus\x00', 0x81, 0x8000, 0x1, 0x0, 0x8000, 0x5, 0x6, 0x0, 0x5414ae92a5d5a7b6, 0x400, 0x1000})
ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x20000b)
socket(0x2, 0x1, 0x0)
pselect(0x40, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x7, 0x3, 0x3ff, 0x917, 0x5}, 0x0, &(0x7f0000000080)={0xfff, 0x5, 0x8, 0x9cb3, 0x5, 0x4, 0x8000000000000201}, 0x0, 0x0)

1.092207368s ago: executing program 3 (id=223):
r0 = syz_open_pts()
setreuid(0x0, 0xee01)
setuid(0x0)
setrlimit(0x8, &(0x7f0000000040)={0xa, 0x52})
r1 = syz_open_pts()
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r1)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e)
open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815)
ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000003c0))
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="7048f525f063f567ff39d6d0", 0xc}], 0x1)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000000)=0x1)

1.091647387s ago: executing program 4 (id=224):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
r0 = socket$inet6(0x18, 0x4000, 0xc1)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x6e}], 0x1, 0x0) (async)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x6e}], 0x1, 0x0)
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r1, 0x0, 0x0)
pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="9dbfed520042c9a9ce306dc106426b5fe41af6c37b78671df598431ab13d68126bb121787d347887eff8576f31", 0x2d}], 0x1, 0x3)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x80}, {r1, 0x10}, {r2}, {r3, 0x4}, {0xffffffffffffff9c, 0x10}], 0x5, 0x5)
pipe(0x0) (async)
pipe(0x0)

1.091182373s ago: executing program 7 (id=225):
mkdir(&(0x7f0000000080)='./file2\x00', 0xc1)
munmap(&(0x7f0000015000/0x3000)=nil, 0x3000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffffe, 0x0, {0x100000000000000, 0x2}}) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffffe, 0x0, {0x100000000000000, 0x2}})
r0 = socket(0x18, 0x1, 0x0)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) (async)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(r0)
socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
open(&(0x7f0000000040)='./file2/file0/file0\x00', 0x1, 0x18)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0x300b7fe, 0x800002, 0x7}, {0x100006, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x3, 0x80000001, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xe1}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x10008, 0xe2, 0xfffffff5, 0xfffffff8}, {0x5, 0x5, 0x24, 0x4}, {0x5, 0xd655, 0x3, 0x6}]}) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0x300b7fe, 0x800002, 0x7}, {0x100006, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x3, 0x80000001, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xe1}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x10008, 0xe2, 0xfffffff5, 0xfffffff8}, {0x5, 0x5, 0x24, 0x4}, {0x5, 0xd655, 0x3, 0x6}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async)
ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100))
sysctl$kern(&(0x7f0000000280)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0)
pipe2(&(0x7f0000000100), 0x0)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
read(r0, &(0x7f0000000300)=""/180, 0xb4) (async)
read(r0, &(0x7f0000000300)=""/180, 0xb4)
execve(&(0x7f0000000000)='./file2/file0/file0\x00', 0x0, 0x0)

1.091000225s ago: executing program 4 (id=226):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x400000000009, 0x5, 0x8000000000000001})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9)
setrlimit(0x8, &(0x7f0000000080)={0x0, 0x100003}) (async)
setrlimit(0x8, &(0x7f0000000080)={0x0, 0x100003})
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) (async)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x1ff, 0x43b9, 0x1, 0xfc23, "f3a8821bfa34b478b3d4633b1fed645e4e28e9cd", 0x6, 0x792})

1.090728655s ago: executing program 4 (id=227):
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed0898e17c03ce480135a128250801a22ed2b1ad6a78ef1d47e6abbbdabb26a5a12af0f460032b34b77a", 0x31}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec17082", &(0x7f0000000080)=0x1c, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed0898e17c03ce480135a128250801a22ed2b1ad6a78ef1d47e6abbbdabb26a5a12af0f460032b34b77a", 0x31}], 0x1) (async)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec17082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async)

31.186507ms ago: executing program 4 (id=228):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0)
unlink(0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0}, 0x2a61a7b530888b09) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0}, 0x2a61a7b530888b09)
socket(0x2, 0x2, 0x0) (async)
r1 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x608)
ioctl$TIOCSETA(r0, 0xc0104454, &(0x7f0000000100)={0xd, 0x6, 0x0, 0x9, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0x1bf, 0x80000000})
r2 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x2, 0x4, 0xfd)
sendto(r2, &(0x7f0000000040)="49a2b5501c1daca9e783695a43db61be0c4c73cb36b87b9716127549f4e6ba1c9c36e2a2c65c2f85d0e3ca4c12172dc4ed76f963c6192030c2bdb62029d564dc8c", 0x41, 0x1, &(0x7f00000000c0)=@un=@abs={0x5b, 0x0, 0x0, 0x3}, 0x8)
connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2}, 0x10)
sendmmsg(r2, &(0x7f0000000500)={{0x0, 0xfffffffffffffdc4, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00'], 0x20}}, 0x38, 0x0)
setuid(0xee01) (async)
setuid(0xee01)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0x8060693d, &(0x7f0000000100)) (async)
ioctl$FIONREAD(r3, 0x8060693d, &(0x7f0000000100))
open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) (async)
r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0)
kqueue() (async)
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) (async)
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1)
close(r6)
mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x2010, r4, 0x8001)

30.368787ms ago: executing program 1 (id=229):
r0 = open$dir(&(0x7f0000000000)='\x00', 0x1, 0x72) (async)
fstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2) (async)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r4, 0x1) (async)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
flock(r5, 0x3) (async)
r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r6, 0x800c5709, &(0x7f0000000280)={0x1, 0x969}) (async)
unveil(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='x\x00') (async)
ioctl$VT_GETACTIVE(r5, 0x40047607, &(0x7f0000000340)) (async)
chroot(&(0x7f0000000380)='./file0\x00') (async)
r7 = semget(0x3, 0x0, 0x3)
semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f00000003c0)={{r3, r2, r1, r4, 0x84, 0x58, 0x0, 0x0, 0xb3}, 0x0, 0xff, 0x0, 0x0, 0x6, 0x0, 0xf}) (async)
ioctl$WSKBDIO_SETENCODING(r6, 0x80045710, &(0x7f0000000440)=0x9) (async)
ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x2000641e)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$BIOCSHDRCMPLT(r8, 0x80044275, &(0x7f00000004c0)) (async)
ioctl$FIOSETOWN(r8, 0x8004667c, &(0x7f0000000500)=0xd8b0323) (async)
ioctl$WSDISPLAYIO_DELSCREEN(r5, 0x80085754, &(0x7f0000000540)={0x0, 0x3}) (async)
faccessat(r0, &(0x7f0000000580)='./file0\x00', 0xc2, 0x2) (async)
mkdir(&(0x7f00000005c0)='./file0\x00', 0x41) (async)
getitimer(0x0, &(0x7f0000000600))
chown(&(0x7f0000000640)='./file0\x00', r3, r2) (async)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000680)={<r9=>0x0}, 0xc)
fcntl$lock(r8, 0x9, &(0x7f00000006c0)={0x1, 0x0, 0xa6, 0xffffffffffffbfef, r9}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000700)={0x0, 0x1, <r10=>0xffffffffffffffff, 0x0, 0x9})
getsockname(r10, &(0x7f0000000740)=@in6, &(0x7f0000000780)=0x1c) (async)
fchflags(r6, 0x10001) (async)
socket(0x1, 0x5, 0x5)

10.655159ms ago: executing program 2 (id=230):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$KDSETMODE(r0, 0x20004b0a, &(0x7f0000000040)=0x1)
r1 = socket$inet(0x2, 0x4000, 0x9)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000080)="89aef7171ebad12cc49e692f8769e9ef12c527457e99e0efc2d8e5da87a14be989f14b937abb81c92f7682a8f5", 0x2d)
ioctl$KDSETRAD(r0, 0x20004b43)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4)
ioctl$WSDISPLAYIO_GETPARAM(r0, 0xc0205759, &(0x7f00000000c0)={0x1, 0x3, 0x3ff, 0x7})
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$WSDISPLAYIO_SETPARAM(r2, 0xc020575a, &(0x7f0000000140)={0x1, 0xbd4b, 0x40, 0xffff79bd})
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$WSDISPLAYIO_SETSCREEN(r3, 0x80045756, &(0x7f00000001c0)=0xd)
getsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000200), &(0x7f0000000240)=0x10)
mknod(&(0x7f0000000280)='./file0\x00', 0x100, 0x800)
ioctl$VT_GETMODE(r3, 0x40087603, &(0x7f00000002c0))
getitimer(0x2, &(0x7f0000000300))
ioctl$WSDISPLAYIO_SMODE(r3, 0x8004574c, &(0x7f0000000340)=0x2)
ioctl$WSDISPLAYIO_SETSCREEN(r3, 0x80045756, &(0x7f0000000380)=0x4)
ioctl$KDGKBMODE(r0, 0x40044b06, &(0x7f00000003c0))
r4 = socket(0x6, 0x1, 0x80)
ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000400))
r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000480)={0x3e, 0xce3b, 0x0, 0x8, "10c5c7a2fc7d7b9140ec457ab06879972eabab12", 0x7})
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000004c0)="939a211cfc2c71be32edb781f9c8f3058a0cc2b269a283be85683f8b502c2593c1d4014e42317ee8a883b024f9ba8f33dae18a6cd0bf14af4373bc1e663abd2509ac862483fd5532123f86131de38919442ac65df420aa78d08253d741942a9dc48e178e3252e4415b11fa261ecb743a90f5d0c10c89348c1fb388a7417c8ff0f8363967629a87d601126a9f48f46d13687525f5df2fe151d3d51cb00f424b563d47716e4fd97391eb456a1e16d1a9dc9c0688", 0xb3)
ioctl$DIOCXROLLBACK(r5, 0xc0104453, &(0x7f00000021c0)={0x7, 0x3, &(0x7f0000000580)=[{0x0, './file0\x00', 0x8}, {0x1, './file0\x00', 0x5}, {0x1, './file1\x00', 0x5}, {0x0, './file0\x00'}, {0x0, './file0\x00', 0x9ba4}, {0x0, './file0\x00', 0x800}, {0x0, './file1\x00', 0x1}]})
r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002200), 0x400, 0x0)
ioctl$WSKBDIO_GETKEYREPEAT(r6, 0x400c5708, &(0x7f0000002240))
ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000002280)={0x5b834b0b9eaeda3f, 0x8})
ioctl$VT_GETMODE(r2, 0x40087603, &(0x7f00000022c0))
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000002300)={0x8, 0x7, 0xc, 0x3c, "07c3530b8e70df1c14b0fb958e53c84270aefdb1", 0x3, 0x8})
fchmod(r4, 0x2)

9.63037ms ago: executing program 3 (id=231):
r0 = socket(0x11, 0x3, 0x0)
recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000180)=@in, 0x10, 0x0, 0x0, &(0x7f00000014c0)=""/137, 0x89}, 0x3840)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
chroot(&(0x7f0000000080)='./file0\x00')
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x4, 0x100001, 0x8, 0x549, "225e8e00008000000000000013dd0000f40900", 0xfffffffc, 0x3ff})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x637d}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f0000209000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f0000625000/0x3000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdf7fffffffff7fa}, {&(0x7f00004c0000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f0000786000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000056a000/0x2000)=nil, &(0x7f0000688000/0x2000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f00001d2000/0x3000)=nil, 0x5}, {&(0x7f0000242000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7fffdffffffffff9}, {&(0x7f0000476000/0x4000)=nil, &(0x7f00007ce000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x5}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000108000/0x3000)=nil, 0x238}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff7}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fd}, {&(0x7f00007ce000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x3}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5]})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
r2 = semget$private(0x0, 0x3, 0x40)
getresuid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=<r3=>0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000c40)={0x0, 0x0, <r5=>0x0}, 0xc)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000c80)={{r3, r4, 0xffffffffffffffff, r5, 0x8, 0x100, 0x0, 0x0, 0x58ecbaba}, 0x0, 0x2, 0x0, 0x0, 0x5})
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000080)={0x10000000, 0x2, 0x86a, 0x7, "2800180000020002000000000068ab5ade800600", 0x6, 0x106})
semctl$GETNCNT(r2, 0x4, 0x3, &(0x7f0000000d00)=""/222)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x3, 0x0, 0xf05}}}}}})
r6 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r6, 0x8020697a, &(0x7f0000000100))
r7 = socket(0x11, 0x3, 0x0)
sendto$unix(r7, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x2d)

8.846456ms ago: executing program 1 (id=232):
r0 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f00000002c0)="315c04faba3dd9d9a0f0b012dba2728adf15760ff73071902b267de56e8f83cbc23d7946b460cacda3505fd7728058d0d9244b54353d2dab004710de88c67f81749ec276a3b6c96839ba25ef1c73eea344bd5928d011fe5644781ed47884ba9f879f3b1b039b466fd5d2a598c5474c866333d204a9998e3e6c55f26e21307908c3c73668e0af1b9ad2664068", 0x8c, 0xe, &(0x7f0000000380)={0x10, 0x2, 0x1, 0xae5}, 0x10)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x2, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x4000008, 0x95}, {0x81, 0x800, 0x9d29, 0x400006d}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x82, 0x4, 0xaf}, {0x5, 0x7ffffffe, 0xd1b, 0x88}, {0x1d0, 0xa, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x2, 0x2, 0x7fff}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000000029, 0x3d, &(0x7f0000000040)="00000080", 0x4)
setsockopt(r2, 0x1, 0xd, &(0x7f0000000080)="4401c66f42f613c9d17703c68db1c5ccf5b45f87f045866edeaafae65de9ba001bf20b445f0031ca9fc913f3b4203a1090392745a110723b3aecb16c52fab4cdb306488240a23fe952bfdd182ec921bd103a06b096e1e371bb050218df35e37b5aa24ee507c7954baebb3a972246523f46ecf40c71bf1f7c77d7aa95c96f502650", 0x81)
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff9)
getsockopt(r2, 0x29, 0x3e, 0x0, 0x0)

8.344946ms ago: executing program 2 (id=233):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e})
r0 = syz_open_pts()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0xff45, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x40a)
sendto$unix(r2, 0x0, 0x0, 0x400, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
recvmsg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000280)={0x3, 0xffffff67, 0x5, 0x3, 0x6, 0x7fff, 0xdbe, 0x10, [{0x2d, 0x2, 0x2, 0x6}, {0x8000, 0x43, 0x3, 0x20006}, {0x5, 0x2, 0x4, 0x1}, {0x3ff, 0x2, 0xad56, 0xe7d}, {0xc, 0x200, 0x6, 0xa}, {0xb9d9, 0xfff80000, 0x3, 0x800}, {0x1, 0x9, 0xaf0d, 0x83}, {0x8, 0x7, 0x3fe0000, 0x1}, {0x8, 0x4, 0x1, 0x3}, {0xae, 0x5, 0x0, 0x80000000}, {0x8, 0x4, 0x0, 0x4}, {0xb, 0x71, 0x1, 0x728}, {0x13800, 0x5, 0x7}, {0x6, 0x80, 0x6, 0x7}, {0x5, 0x100, 0x1b, 0x6}, {0x1e, 0x1000000, 0x8001, 0x6}]})
close(r0)
r4 = syz_open_pts()
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r5, 0x3})
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="3901639b6174aaaaaaaaaabb86dd60062e0b"])
execve(0x0, 0x0, 0x0)
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47)
readv(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/94, 0x5e}], 0x2)
write(r0, 0x0, 0x0)
r6 = socket(0x24, 0x2, 0x0)
ioctl$TIOCCBRK(r0, 0x2000747a)
setsockopt(r6, 0x6, 0x46, 0x0, 0x0)

0s ago: executing program 2 (id=234):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async)
r1 = kqueue()
kevent(r1, &(0x7f0000000340)=[{{r1}, 0xffffffffffffffff, 0x1b, 0x1, 0x8, 0x6}, {{r1}, 0xffffffffffffffff, 0x18, 0x80000000, 0x10001, 0x4}], 0x138, 0x0, 0xffffffff, 0x0) (async)
listen(r0, 0x10) (async)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
fchmod(r2, 0x100) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f00006dc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f00000c6000/0x3000)=nil, 0x16}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xffffffffffffffff}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3751]}) (async)
r3 = open$dir(&(0x7f0000000ac0)='./file0\x00', 0x8000, 0x101)
ioctl$FIONREAD(r3, 0xc0106978, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x44000802) (async)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) (async)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000000c0)={0x101, 0x0, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) (async)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x4) (async)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f400280067000000069078e0000001ac1400aa4e224e238fa2d9bad1dfdb045258088f4653cfcb6150482866a68c40163cf33d70a69e71e1bc940f530f39278b06e92f9f149d1ec0e9027d50ab89b77e324cb19cfbc67af0f4e49d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500282009078fffc"]) (async)
syz_emit_ethernet(0xb2, &(0x7f0000000200)={@local, @broadcast, [{[], {0x8100, 0x6, 0x0, 0x3}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0xa0, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x64, 0xfffe, "ba32ece1c09e890823f32910c48f2937026da2378fa1e9e416cc76a75483b322d4d0e272c509c1b139032f006d2ab35d0f99858d5c3e52dfc2077a1e17afee0778ceee2ef4fa979ad8276f16e0e0d843bededd009eeb3cdf26d58cd02ef81d2abb91d55a298b7eb2b376c73c225e5cef8c2018bfdfd55f041ee4f4fab32de9884dc84fa3"}}}}})
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
accept$inet(r5, &(0x7f0000000b00), &(0x7f0000000b40)=0x10) (async)
write(r1, &(0x7f0000000a00)="48f0c9b5a967e98b1b6cfc9f3871ea9eeb5f9e458a488f5f0c77fc3971a0f3bc986d439677120dea9060d8b4cd3ed93fb660a06a99957abf49b7c7396cafe819d375b2d978a0c5370ab3268ef7eca702d8f72e1183c0417dbd8fa73ce8101b51c4987241bf67cfa035c3cbd6e144bbd93b1bb55a734cd84959c9dfcac0020ab021c3d295", 0x84) (async)
ioctl$BIOCIMMEDIATE(r6, 0x80044270, &(0x7f0000000000)=0x2)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
syz_extract_tcp_res(0x0, 0x8, 0xf2) (async)
poll(&(0x7f0000000040)=[{r6, 0x40}], 0x1, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$VNDIOCCLR(0xffffffffffffff9c, 0x80384601, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', 0x116, &(0x7f0000000100)='./file0\x00', 0x8})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e
    SENSE KEY: Illegal Request
     ASC/ASCQ: Invalid Command Operation Code
pckbd_enable: command error
kernel: protection fault trap, code=0
Stopped at      sys_semop+0x3d5:        movzwl  0(%rax),%r15d
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
sys_semop(ffff80002a78d770,ffff80003c909050,ffff80003c908fa0) at sys_semop+0x3d5
syscall(ffff80003c909050) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc3143d4a730, count: -3
ddb> show registers
rdi                                0
rsi                                0
rbp               0xffff80003c908f80
rbx               0xdead4110dead4110
rdx                                0
rcx                                0
rax               0xdead4110dead4110
r8                    0x7f7fffffc000
r9                                 0
r10               0x6c440e34c6b8d8d9
r11               0xfb61dfe0b0997348
r12                                0
r13               0xfffffd8069a7aa80
r14               0xffff80003c909050
r15                                0
rip               0xffffffff8120f685    sys_semop+0x3d5
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80003c908e90
ss                              0x10
sys_semop+0x3d5:        movzwl  0(%rax),%r15d
ddb> show proc
PROC (syz-executor) tid=190190 pid=45472 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=50, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a78d4d8,0xffff80002a78da18
    process=0xffff8000338ead18 user=0xffff80003c904000, vmspace=0xfffffd806c9185d8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 45472  244756  49523      0  2           0                syz-executor
*45472  190190  49523      0  7   0x4000000                syz-executor
 45472  235858  49523      0  3   0x4000080  fsleep        syz-executor
 45472  183426  49523      0  3   0x4000080  fsleep        syz-executor
 66034  334925  19112      0  3        0x80  fsleep        syz-executor
 66034  276755  19112      0  3   0x4000080  kqread        syz-executor
 71570  222276  14098      0  3        0x80  fsleep        syz-executor
 71570  254104  14098      0  3   0x4000080  sbwait        syz-executor
 31365  138094   1007  60929  3        0x90  fsleep        syz-executor
 31365  464130   1007  60929  3   0x4000090  kqsel         syz-executor
 31365  347522   1007  60929  3   0x4000090  fsleep        syz-executor
 31365  131843   1007  60929  3   0x4000090  fsleep        syz-executor
 77878  413490  41186      0  3        0x80  fsleep        syz-executor
 77878  362307  41186      0  3   0x4000080  sbwait        syz-executor
 77878  354388  41186      0  3   0x4000080  sbwait        syz-executor
 43806  113947  27917      0  3        0x80  fsleep        syz-executor
 43806  147083  27917      0  3   0x4000080  fifor         syz-executor
 72160   84911  45856      0  3        0x80  fsleep        syz-executor
 72160  502969  45856      0  3   0x4000080  sbwait        syz-executor
 97897   88968  47280      0  3        0x80  fsleep        syz-executor
 97897  285262  47280      0  3   0x4000080  msgwait       syz-executor
 97897  153058  47280      0  3   0x4000080  fsleep        syz-executor
 79505  492761      0      0  3     0x14200  acct          acct
 41186  503630  15741      0  3        0x82  nanoslp       syz-executor
 27917  149528  15741      0  3        0x82  nanoslp       syz-executor
 47280    8927  15741      0  3        0x82  nanoslp       syz-executor
  1007  277545  15741      0  3        0x82  nanoslp       syz-executor
 14098  103537  15741      0  2       0xc82                syz-executor
 49523   45263  15741      0  3        0x82  nanoslp       syz-executor
 19112  130053  15741      0  2       0xc82                syz-executor
 45856   46987  15741      0  3        0x82  nanoslp       syz-executor
 15741  469390  65512      0  3        0x82  kqread        syz-executor
 65512  260248  97813      0  3    0x10008a  sigsusp       ksh
 97813   47492  46163      0  3        0x98  kqread        sshd-session
 46163  176491  36644      0  3        0x92  kqread        sshd-session
 12029  160201      1      0  3    0x100083  ttyopn        getty
 36644     644      1      0  3        0x88  kqread        sshd
 20139  163149  74213     73  3   0x1100090  kqread        syslogd
 74213   19566      1      0  3    0x100082  sbwait        syslogd
 96158   76117      1      0  3    0x100080  kqread        resolvd
 56647  205136  36247     77  3    0x100092  kqread        dhcpleased
 26868  304881  36247     77  3    0x100092  kqread        dhcpleased
 36247   36588      1      0  3        0x80  kqread        dhcpleased
  4161  464856      0      0  3     0x14200  bored         smr
 33611  125418      0      0  2     0x14200                zerothread
 60702  392311      0      0  3     0x14200  aiodoned      aiodoned
 63534   62307      0      0  3     0x14200  syncer        update
 82865  256421      0      0  3     0x14200  cleaner       cleaner
 42376  178228      0      0  3     0x14200  reaper        reaper
  9700  515208      0      0  3     0x14200  pgdaemon      pagedaemon
 47521  405160      0      0  3     0x14200  bored         viomb
 32927  254926      0      0  3  0x40014200  acpi0         acpi0
 12006  195420      0      0  3     0x14200  bored         softnet0
 49400  205581      0      0  3     0x14200  smrbar        systqmp
 82234  197153      0      0  3     0x14200  bored         systq
 17632   83877      0      0  3  0x40014200  tmoslp        softclock
 22661  499554      0      0  3  0x40014200                idle0
     1  374241      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11036  12106K   12442K 166960K     12369        0
            pcb    20     12K      12K 166960K        56        0
         rtable   244      7K       9K 166960K       392        0
             pf    32     13K      17K 166960K        56        0
         ifaddr    42      7K       7K 166960K        46        0
        ifgroup    50      2K       2K 166960K        57        0
         sysctl     3      1K       9K 166960K         7        0
       counters    33     17K      17K 166960K        35        0
       ioctlops     0      0K       4K 166960K       109        0
            iov     1      4K      12K 166960K        10        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1298     82K      82K 166960K      1543        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem     7      0K       0K 166960K         9        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      85K 166960K       366        0
          sigio     0      0K       0K 166960K         1        0
           proc    60     59K      91K 166960K       518        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        29        0
       in_multi    99      7K       7K 166960K       106        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     1      0K       0K 166960K        24        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    67    307K     307K 166960K        67        0
           exec     0      0K       1K 166960K       384        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   236    151K     166K 166960K      5147        0
       UVM aobj    74      3K       4K 166960K        76        0
     pinsyscall    39     78K      90K 166960K      1447        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K         7        0
            NDP    11      0K       1K 166960K        29        0
           temp    45   9068K    9149K 166960K     11368        0
         kqueue    14     22K      30K 166960K        72        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120       43    0       39     1     0     1     1     0     8    0
rtentry    136      119    0        6     4     0     4     4     0     8    0
unpcb      144      280    0      261     7     1     6     6     0     8    5
syncache   336        3    0        3     1     1     0     1     0     8    0
tcpcb      736       77    0       73     1     0     1     1     0     8    0
arp         96       18    0        0     1     0     1     1     0     8    0
ipq         40        2    0        0     1     0     1     1     0     8    0
ipqe        40        3    0        1     1     0     1     1     0     8    0
inpcb      328      228    0      214     2     0     2     2     0     8    0
ip6q        72        2    0        0     1     0     1     1     0     8    0
ip6af       40        1    0        0     1     0     1     1     0     8    0
nd6        112       30    0        3     1     0     1     1     0     8    0
pkpcb       40        2    0        2     1     1     0     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1072       1    0        1     1     0     1     1     0     8    1
pfstscr     40        4    0        0     1     0     1     1     0     8    0
pfrktable  1344      10    0       10     1     0     1     1     0     8    1
pfanchor   1288       2    0        2     1     0     1     1     0     8    1
pftag       88        1    0        1     1     0     1     1     0     8    1
pfstitem    24        8    0        2     1     0     1     1     0     8    0
pfstkey    128       10    0        3     1     0     1     1     0     8    0
pfstate    384        5    0        1     1     0     1     1     0     8    0
pfrule     1360       3    0        3     2     1     1     1     0     8    1
rttmr      136        2    0        2     2     1     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      464    0        6    29     0    29    29     0     8    0
art_table   40      465    0        6     5     0     5     5     0     8    0
art_node    32      119    0       15     1     0     1     1     0     8    0
sysvmsgpl   40        4    0        1     1     0     1     1     0     8    0
semapl     112        6    0        2     1     0     1     1     0     8    0
shmpl      112       73    0        2     3     0     3     3     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1993    0      539    92     0    92    92     0     8    0
ffsino     256     1993    0      539    92     0    92    92     0     8    0
nchpl      144     2517    0      828    64     0    64    64     0     8    0
vnodes     216     2174    0        0   121     0   121   121     0     8    0
namei      1024    7421    0     7421     2     1     1     2     0     8    1
pfiaddrpl  120        4    0        4     1     0     1     1     0     8    1
kstatmem   264       26    0        4     2     0     2     2     0     8    0
scsiplug    72        1    0        1     1     0     1     1     0     8    1
scxspl     216     8465    0     8465    10     2     8     8     1     8    8
plimitpl   152       65    0       49     1     0     1     1     0     8    0
sigapl     424      657    0      613     6     1     5     6     0     8    0
knotepl    120    11158    0    11110    17     7    10    10     0     8    7
kqueuepl   184       94    0       83     1     0     1     1     0     8    0
pipepl     304      134    0      107     3     0     3     3     0     8    0
fdescpl    448      643    0      613     4     0     4     4     0     8    0
filepl     120     2826    0     2611    11     0    11    11     0     8    4
lockfpl    104      177    0      174     1     0     1     1     0     8    0
lockfspl    48       48    0       45     1     0     1     1     0     8    0
sessionpl  144       28    0       20     1     0     1     1     0     8    0
pgrppl      48       40    0       24     1     0     1     1     0     8    0
ucredpl    104      272    0      260     1     0     1     1     0     8    0
zombiepl   144      725    0      725     2     1     1     1     0     8    1
processpl  1152     657    0      613     4     0     4     4     0     8    0
procpl     664     1074    0     1016     6     0     6     6     0     8    1
sockpl     552      566    0      529    13     2    11    12     0     8    8
mcl64k     65536     57    0       56     2     1     1     1     0     8    0
mcl16k     16384      6    0        6     2     1     1     1     0     8    1
mcl12k     12288      1    0        1     1     0     1     1     0     8    1
mcl8k      8192       6    0        5     2     1     1     1     0     8    0
mcl4k      4096    2811    0     2761    14     6     8    14     0     8    1
mcl2k      2048     361    0      355     2     0     2     2     0     8    1
mtagpl      96       10    0        7     2     1     1     1     0     8    0
mbufpl     256     6642    0     6435    16     0    16    16     0     8    2
bufpl      280     2823    0      103   195     0   195   195     0     8    0
anonpl      24   112885    0   109645    50    24    26    45     0   187    4
amapchunkpl 152   15975    0    15456    34     2    32    32     0   158   11
amappl16   200     1981    0     1957    15    12     3    14     0     8    0
amappl15   192        4    0        4     1     1     0     1     0     8    0
amappl14   184      412    0      411     1     0     1     1     0     8    0
amappl13   176      126    0      116     1     0     1     1     0     8    0
amappl12   168      879    0      850     2     0     2     2     0     8    0
amappl11   160        7    0        7     1     1     0     1     0     8    0
amappl10   152       58    0       48     1     0     1     1     0     8    0
amappl9    144      260    0      260     1     1     0     1     0     8    0
amappl8    136      144    0      143     1     0     1     1     0     8    0
amappl7    128      138    0      127     1     0     1     1     0     8    0
amappl6    120      156    0      155     1     0     1     1     0     8    0
amappl5    112       86    0       78     1     0     1     1     0     8    0
amappl4    104      262    0      245     1     0     1     1     0     8    0
amappl3     96     2997    0     2878     4     0     4     4     0     8    1
amappl2     88      504    0      448     2     0     2     2     0     8    0
amappl1     80     9949    0     9395    13     1    12    13     0     8    0
amappl      88     4429    0     4255     4     0     4     4     0    92    0
uvmvnodes   80      100    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       75    0        2     2     0     2     2     0     8    0
uaddrrnd    24      643    0      613     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      643    0      613     1     0     1     1     0     8    0
vmmpekpl   168     6745    0     6720     2     0     2     2     0     8    0
vmmpepl    168    47905    0    46070    93    12    81    90     0   357    0
vmsppl     368      642    0      613     4     1     3     4     0     8    0
rwobjpl     40    15927    0    14895    13     2    11    13     0     8    0
pdppl      4096    1292    0     1226    92    26    66    76     0     8    0
pvpl        32   292147    0   283418   124    36    88   111     0   265   12
pmappl     216      642    0      613     2     0     2     2     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      364    0       41    10     0    10    10     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
sys_semop(ffff80002a78d770,ffff80003c909050,ffff80003c908fa0) at sys_semop+0x3d5
syscall(ffff80003c909050) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc3143d4a730, count: -3
ddb> machine ddbcpu 1
No such command
ddb> trace
sys_semop(ffff80002a78d770,ffff80003c909050,ffff80003c908fa0) at sys_semop+0x3d5
syscall(ffff80003c909050) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc3143d4a730, count: -3