last executing test programs:

33.569742314s ago: executing program 7 (id=148):
open(&(0x7f0000000140)='./file0\x00', 0x200, 0x1ca)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
r0 = socket$inet6(0x18, 0x3, 0x3a)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
open(&(0x7f0000001640)='./file0\x00', 0x200, 0x42) (async)
mkfifo(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) (async)
utimes(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)={{0x7, 0x3}, {0x0, 0x4}})
semget$private(0x0, 0x2, 0xe0c81bf28d5bb341)
open(&(0x7f0000001680)='./file0\x00', 0x7c6, 0xea) (async)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
r1 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
write(r1, &(0x7f0000000100)='B', 0x1)
closefrom(r0)
mkfifo(&(0x7f0000000180)='./file0\x00', 0x8) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x128)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="19", 0x1}], 0x1) (async)
write(r2, &(0x7f0000000600)="56cba089995412f28c6a9d088afd2b207cd4bd3793368980da1aecbfab4bda092f0290f2f164d2e0c5aca41a5e3b3194b02e97cfde", 0x35) (async)
write(r1, &(0x7f0000000300)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3a63bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async)
unveil(0x0, &(0x7f0000000380)='c\x00') (async)
pipe(&(0x7f0000001700))
r3 = socket$inet6(0x18, 0x1, 0x6)
fcntl$getown(r3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}) (async)
r5 = kqueue()
pipe(&(0x7f0000000640)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
kevent(r5, &(0x7f0000000680)=[{{r6}, 0xfffffffffffffffe, 0x9, 0x40, 0x600000000000000, 0x85}, {{r6}, 0xfffffffffffffffe, 0x2, 0x2, 0xd, 0x400}], 0x6, 0x0, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001780)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/197, 0xc5}, 0x101}, 0x38, 0x0, 0x0)

26.999316757s ago: executing program 6 (id=27):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pselect(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x5, 0x3, 0x400000000000005, 0x10000, 0x0, 0xc, 0x8}, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0) (async)
closefrom(r2)
poll(0x0, 0x0, 0xffffffff) (async)
unveil(0x0, &(0x7f0000000080)='w\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
closefrom(r1) (async)
readv(r0, &(0x7f0000000100), 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r3, 0x0, 0xa, &(0x7f0000000200)='\x00', 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
closefrom(r5)
r6 = kqueue()
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
kevent(r6, &(0x7f0000000440), 0x56, &(0x7f0000000480), 0x202, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000004c0)={0x8, &(0x7f0000000500)=[{0xf, 0x20, 0x3, 0x59}, {0x800, 0x1, 0x5}, {0x2, 0x3, 0x9}, {0xfff8, 0x8, 0x6, 0x4}, {0x9, 0x0, 0x7, 0x7}, {0x9, 0x98, 0xe9, 0x62b9}, {0x9, 0x9, 0x7, 0x3ff}, {0xc183, 0x2, 0xc7, 0x7}]}) (async)
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$DIOCGETLIMIT(r7, 0xc0084427, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCSETLIMIT(r7, 0xc0084428, 0x0) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
syz_emit_ethernet(0x6e, 0x0)
ioctl$DIOCCLRSTATUS(r8, 0xc1084425, &(0x7f0000000580)={'./file0\x00', 0x0, 0x20009, 0x5, 0xb6a3, 0x5})

26.182261662s ago: executing program 7 (id=148):
open(&(0x7f0000000140)='./file0\x00', 0x200, 0x1ca)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
r0 = socket$inet6(0x18, 0x3, 0x3a)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
open(&(0x7f0000001640)='./file0\x00', 0x200, 0x42) (async)
mkfifo(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) (async)
utimes(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)={{0x7, 0x3}, {0x0, 0x4}})
semget$private(0x0, 0x2, 0xe0c81bf28d5bb341)
open(&(0x7f0000001680)='./file0\x00', 0x7c6, 0xea) (async)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
r1 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
write(r1, &(0x7f0000000100)='B', 0x1)
closefrom(r0)
mkfifo(&(0x7f0000000180)='./file0\x00', 0x8) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x128)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="19", 0x1}], 0x1) (async)
write(r2, &(0x7f0000000600)="56cba089995412f28c6a9d088afd2b207cd4bd3793368980da1aecbfab4bda092f0290f2f164d2e0c5aca41a5e3b3194b02e97cfde", 0x35) (async)
write(r1, &(0x7f0000000300)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3a63bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async)
unveil(0x0, &(0x7f0000000380)='c\x00') (async)
pipe(&(0x7f0000001700))
r3 = socket$inet6(0x18, 0x1, 0x6)
fcntl$getown(r3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}) (async)
r5 = kqueue()
pipe(&(0x7f0000000640)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
kevent(r5, &(0x7f0000000680)=[{{r6}, 0xfffffffffffffffe, 0x9, 0x40, 0x600000000000000, 0x85}, {{r6}, 0xfffffffffffffffe, 0x2, 0x2, 0xd, 0x400}], 0x6, 0x0, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001780)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/197, 0xc5}, 0x101}, 0x38, 0x0, 0x0)

25.525523651s ago: executing program 5 (id=133):
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) (async, rerun: 32)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (rerun: 32)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x223e, 0x0) (async, rerun: 64)
sysctl$vm_swapencrypt(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0xfffffcd8) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000480)='./file0\x00', 0x7c6, 0x0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x8000, 0x88)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x9}, {0xbe81, 0x4b0}}, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) (async)
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = syz_open_pts()
write(r5, &(0x7f0000000200)='B', 0x1) (async)
r6 = socket$inet6(0x18, 0x1, 0x6)
closefrom(r6) (async, rerun: 32)
setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (rerun: 32)
unveil(0x0, &(0x7f0000000280)='w\x00') (async)
recvmmsg(r3, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) (async)
sendmmsg(r4, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xa, 0x0, 0x0) (async, rerun: 64)
getgroups(0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={<r7=>0x0}, 0xc)
setreuid(0x0, r7)
r8 = semget$private(0x0, 0x1, 0x5fa)
semctl$IPC_SET(r8, 0x0, 0x1, 0x0)
seteuid(0xffffffffffffffff)

24.108605079s ago: executing program 6 (id=27):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pselect(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x5, 0x3, 0x400000000000005, 0x10000, 0x0, 0xc, 0x8}, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0) (async)
closefrom(r2)
poll(0x0, 0x0, 0xffffffff) (async)
unveil(0x0, &(0x7f0000000080)='w\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
closefrom(r1) (async)
readv(r0, &(0x7f0000000100), 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r3, 0x0, 0xa, &(0x7f0000000200)='\x00', 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
closefrom(r5)
r6 = kqueue()
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
kevent(r6, &(0x7f0000000440), 0x56, &(0x7f0000000480), 0x202, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000004c0)={0x8, &(0x7f0000000500)=[{0xf, 0x20, 0x3, 0x59}, {0x800, 0x1, 0x5}, {0x2, 0x3, 0x9}, {0xfff8, 0x8, 0x6, 0x4}, {0x9, 0x0, 0x7, 0x7}, {0x9, 0x98, 0xe9, 0x62b9}, {0x9, 0x9, 0x7, 0x3ff}, {0xc183, 0x2, 0xc7, 0x7}]}) (async)
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$DIOCGETLIMIT(r7, 0xc0084427, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCSETLIMIT(r7, 0xc0084428, 0x0) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
syz_emit_ethernet(0x6e, 0x0)
ioctl$DIOCCLRSTATUS(r8, 0xc1084425, &(0x7f0000000580)={'./file0\x00', 0x0, 0x20009, 0x5, 0xb6a3, 0x5})

24.108445395s ago: executing program 7 (id=148):
open(&(0x7f0000000140)='./file0\x00', 0x200, 0x1ca)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
r0 = socket$inet6(0x18, 0x3, 0x3a)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
open(&(0x7f0000001640)='./file0\x00', 0x200, 0x42) (async)
mkfifo(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) (async)
utimes(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)={{0x7, 0x3}, {0x0, 0x4}})
semget$private(0x0, 0x2, 0xe0c81bf28d5bb341)
open(&(0x7f0000001680)='./file0\x00', 0x7c6, 0xea) (async)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
r1 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
write(r1, &(0x7f0000000100)='B', 0x1)
closefrom(r0)
mkfifo(&(0x7f0000000180)='./file0\x00', 0x8) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x128)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="19", 0x1}], 0x1) (async)
write(r2, &(0x7f0000000600)="56cba089995412f28c6a9d088afd2b207cd4bd3793368980da1aecbfab4bda092f0290f2f164d2e0c5aca41a5e3b3194b02e97cfde", 0x35) (async)
write(r1, &(0x7f0000000300)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3a63bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async)
unveil(0x0, &(0x7f0000000380)='c\x00') (async)
pipe(&(0x7f0000001700))
r3 = socket$inet6(0x18, 0x1, 0x6)
fcntl$getown(r3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}) (async)
r5 = kqueue()
pipe(&(0x7f0000000640)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
kevent(r5, &(0x7f0000000680)=[{{r6}, 0xfffffffffffffffe, 0x9, 0x40, 0x600000000000000, 0x85}, {{r6}, 0xfffffffffffffffe, 0x2, 0x2, 0xd, 0x400}], 0x6, 0x0, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001780)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/197, 0xc5}, 0x101}, 0x38, 0x0, 0x0)

21.135768692s ago: executing program 0 (id=130):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, <r1=>0xffffffffffffffff})
closefrom(r1) (async)
closefrom(r1)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1) (async)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
sysctl$net_inet_ip(&(0x7f00000006c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0xef) (async)
r2 = socket$inet(0x2, 0x3, 0xef)
pledge(0x0, &(0x7f0000000700)='\x1a~\b\xb7\xae\xcb\xc4\xac\xa7S\x11\x92\xd3\x1c\x06\x17n\x97q\x9cR/\x8f\xb4J\xc4\\^hk\xcc\xed\xff\x15\xe4\xb7\x80\xcd\xab\xe1\x7f\x9f\xc9\xa9N\xe6\f\x1bS5:g\x8dG\x82\x8fa\xe2\xfa\xd8\x95)\xf6\xe0\xc6\xca\x94,\x9a\x88 \xec\xbf\x11\xfc\x8d\xd7^\x15\x87\xb7\xb1\x96OW<\xfc}q\xdd\xd0\b\xc5\r\xb2\x9dH\xe5TKx\\\xcb\x88r\x18\x81{\xc9\xaf_D\xc9c^\x94\"\xeb\xe6@\xb1X+\xe7s\xed\xaf\x1b\x0e@R\x9d-\xc5\x84\xde[\xf0\x91\xa6\x9b\xbc\xf3\x1em\xabj)\xd4s\xab\x8c\n\xb6\xbb\x81*\x99.7\xba\xd0\r`\x9a\x876\xccxSH`\xcf\xb1\xd8\x1c\xb4k\xfb\xc8\xa2\xb3%\xc43\xa8w,B\xd0\x99\x1e\xe9\xa2l\x13k\xf5\xd8\xdf\xfb\xbd\xa9NcN\xad\xd3\x97&\x9e\xab\xb8\fh\xddv\xf6K\xe9\xc9\xd7^\x88P\xb1p+s7+>\x8d\x95\x95\x11\x9f6\x8c4\xde\xdb\x1e')
getsockopt(r2, 0x0, 0x2, 0x0, 0x0) (async)
getsockopt(r2, 0x0, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
openat$tty(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x40100, 0x0)
ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000880)=0x2)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0})
syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[])
r4 = socket$inet6(0x18, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x6c, &(0x7f00000005c0)={0x9, 0x0, 0xff}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000600)={0x4, 0x0, 0xf}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x67, &(0x7f0000000640)={{0x1c, 0x18, 0x0, 0x9, "62c35b2fc8bac05f7a5e1e18e9c9eb59", 0x6}, {0x1c, 0x18, 0x1, 0x3, "ece242192a500fdfaa242674f6fdeeba", 0xfffffffe}, 0x2, [0x0, 0x8, 0x80000001, 0x9, 0xc6c5, 0x3, 0x4, 0x6]}, 0x5c)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_pts() (async)
r5 = syz_open_pts()
write(r5, &(0x7f0000000940)='B', 0x1)
closefrom(r5)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b) (async)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b)
r6 = open(&(0x7f00000009c0)='./file0\x00', 0x2, 0x81)
r7 = syz_open_pts()
dup2(r6, r7)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1}) (async)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1})
unveil(0x0, &(0x7f0000000a40)='x\x00') (async)
unveil(0x0, &(0x7f0000000a40)='x\x00')

20.930734736s ago: executing program 1 (id=52):
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0])
setresgid(r1, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0)={<r5=>0x0, <r6=>0x0}, &(0x7f0000000700)=0x37)
setresuid(0x0, r6, 0x0)
r7 = geteuid()
setreuid(r7, 0x0)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, r5, r7)
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async)
setresgid(r1, r0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
socket$inet6(0x18, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000700)=0x37) (async)
setresuid(0x0, r6, 0x0) (async)
geteuid() (async)
setreuid(r7, 0x0) (async)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
setresuid(0x0, r5, r7) (async)

20.929534946s ago: executing program 3 (id=4):
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @random="38f8537384fc", [], {@ipv6={0x86dd, {0xf, 0x6, 'u\x00J', 0x38, 0x3a, 0x0, @rand_addr="2a3b1ae57db8883fa6958273532df404", @rand_addr="b6584ac86e879d34949bad1e5fa7433f", {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "a69fb6", 0x86f, 0x37, 0x7, @empty, @empty, [@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}}})
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000100)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='{\x00', &(0x7f0000000340)='/:*${&!\x00', &(0x7f0000000380)='\x02\x00)(\x1c>\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='/dev/bpf\x00', &(0x7f0000000440)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa'])
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000180)={0x1807, 0x7fff, 0xffffffc0, 0x8059b, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0x401})
write(r0, &(0x7f00000001c0)="7ef5b69389691e24966a3ddf3d32c748fcdc1293054eed350098644011ebd472a8369432248be44290d233feaa3de7cc925771aca5cb8d5b79fac405b664e6e11a3210ed928a7cc25f6d632fe44500d1b744d02f34c2e90e129c594e0000000008492908891562516d58e36378ff561e26b1c5b8df6d35fdcece846e194c59dbf83d3018630f9855f002e5212c76a8526a86d5c119953f35dba52a0f00ecb9d2e02a76acf1dd6589159751f0455ccd4abcde058b98b2d427fde72627ab034ddf1b04b9d5c441c8f2c940c9569aa71d7929d4", 0xd2)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="b3dea8d14cc6", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @multicast2, @empty, @remote={0xac, 0x14, 0x0}}}}})

20.929322384s ago: executing program 4 (id=160):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0)
socket$inet(0x2, 0x8003, 0x1)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000)
socket$unix(0x1, 0x1, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}})
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0) (async)
socket$inet(0x2, 0x8003, 0x1) (async)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea) (async)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async)
open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}}) (async)
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0) (async)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)

20.929158172s ago: executing program 5 (id=133):
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) (async, rerun: 32)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (rerun: 32)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x223e, 0x0) (async, rerun: 64)
sysctl$vm_swapencrypt(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0xfffffcd8) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000480)='./file0\x00', 0x7c6, 0x0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x8000, 0x88)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x9}, {0xbe81, 0x4b0}}, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) (async)
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = syz_open_pts()
write(r5, &(0x7f0000000200)='B', 0x1) (async)
r6 = socket$inet6(0x18, 0x1, 0x6)
closefrom(r6) (async, rerun: 32)
setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (rerun: 32)
unveil(0x0, &(0x7f0000000280)='w\x00') (async)
recvmmsg(r3, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) (async)
sendmmsg(r4, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xa, 0x0, 0x0) (async, rerun: 64)
getgroups(0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={<r7=>0x0}, 0xc)
setreuid(0x0, r7)
r8 = semget$private(0x0, 0x1, 0x5fa)
semctl$IPC_SET(r8, 0x0, 0x1, 0x0)
seteuid(0xffffffffffffffff)

20.9289724s ago: executing program 6 (id=27):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pselect(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x5, 0x3, 0x400000000000005, 0x10000, 0x0, 0xc, 0x8}, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0) (async)
closefrom(r2)
poll(0x0, 0x0, 0xffffffff) (async)
unveil(0x0, &(0x7f0000000080)='w\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
closefrom(r1) (async)
readv(r0, &(0x7f0000000100), 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r3, 0x0, 0xa, &(0x7f0000000200)='\x00', 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
closefrom(r5)
r6 = kqueue()
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
kevent(r6, &(0x7f0000000440), 0x56, &(0x7f0000000480), 0x202, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000004c0)={0x8, &(0x7f0000000500)=[{0xf, 0x20, 0x3, 0x59}, {0x800, 0x1, 0x5}, {0x2, 0x3, 0x9}, {0xfff8, 0x8, 0x6, 0x4}, {0x9, 0x0, 0x7, 0x7}, {0x9, 0x98, 0xe9, 0x62b9}, {0x9, 0x9, 0x7, 0x3ff}, {0xc183, 0x2, 0xc7, 0x7}]}) (async)
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$DIOCGETLIMIT(r7, 0xc0084427, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCSETLIMIT(r7, 0xc0084428, 0x0) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
syz_emit_ethernet(0x6e, 0x0)
ioctl$DIOCCLRSTATUS(r8, 0xc1084425, &(0x7f0000000580)={'./file0\x00', 0x0, 0x20009, 0x5, 0xb6a3, 0x5})

17.267238928s ago: executing program 0 (id=130):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, <r1=>0xffffffffffffffff})
closefrom(r1) (async)
closefrom(r1)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1) (async)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
sysctl$net_inet_ip(&(0x7f00000006c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0xef) (async)
r2 = socket$inet(0x2, 0x3, 0xef)
pledge(0x0, &(0x7f0000000700)='\x1a~\b\xb7\xae\xcb\xc4\xac\xa7S\x11\x92\xd3\x1c\x06\x17n\x97q\x9cR/\x8f\xb4J\xc4\\^hk\xcc\xed\xff\x15\xe4\xb7\x80\xcd\xab\xe1\x7f\x9f\xc9\xa9N\xe6\f\x1bS5:g\x8dG\x82\x8fa\xe2\xfa\xd8\x95)\xf6\xe0\xc6\xca\x94,\x9a\x88 \xec\xbf\x11\xfc\x8d\xd7^\x15\x87\xb7\xb1\x96OW<\xfc}q\xdd\xd0\b\xc5\r\xb2\x9dH\xe5TKx\\\xcb\x88r\x18\x81{\xc9\xaf_D\xc9c^\x94\"\xeb\xe6@\xb1X+\xe7s\xed\xaf\x1b\x0e@R\x9d-\xc5\x84\xde[\xf0\x91\xa6\x9b\xbc\xf3\x1em\xabj)\xd4s\xab\x8c\n\xb6\xbb\x81*\x99.7\xba\xd0\r`\x9a\x876\xccxSH`\xcf\xb1\xd8\x1c\xb4k\xfb\xc8\xa2\xb3%\xc43\xa8w,B\xd0\x99\x1e\xe9\xa2l\x13k\xf5\xd8\xdf\xfb\xbd\xa9NcN\xad\xd3\x97&\x9e\xab\xb8\fh\xddv\xf6K\xe9\xc9\xd7^\x88P\xb1p+s7+>\x8d\x95\x95\x11\x9f6\x8c4\xde\xdb\x1e')
getsockopt(r2, 0x0, 0x2, 0x0, 0x0) (async)
getsockopt(r2, 0x0, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
openat$tty(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x40100, 0x0)
ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000880)=0x2)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0})
syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[])
r4 = socket$inet6(0x18, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x6c, &(0x7f00000005c0)={0x9, 0x0, 0xff}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000600)={0x4, 0x0, 0xf}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x67, &(0x7f0000000640)={{0x1c, 0x18, 0x0, 0x9, "62c35b2fc8bac05f7a5e1e18e9c9eb59", 0x6}, {0x1c, 0x18, 0x1, 0x3, "ece242192a500fdfaa242674f6fdeeba", 0xfffffffe}, 0x2, [0x0, 0x8, 0x80000001, 0x9, 0xc6c5, 0x3, 0x4, 0x6]}, 0x5c)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_pts() (async)
r5 = syz_open_pts()
write(r5, &(0x7f0000000940)='B', 0x1)
closefrom(r5)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b) (async)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b)
r6 = open(&(0x7f00000009c0)='./file0\x00', 0x2, 0x81)
r7 = syz_open_pts()
dup2(r6, r7)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1}) (async)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1})
unveil(0x0, &(0x7f0000000a40)='x\x00') (async)
unveil(0x0, &(0x7f0000000a40)='x\x00')

17.061052543s ago: executing program 1 (id=52):
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0])
setresgid(r1, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0)={<r5=>0x0, <r6=>0x0}, &(0x7f0000000700)=0x37)
setresuid(0x0, r6, 0x0)
r7 = geteuid()
setreuid(r7, 0x0)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, r5, r7)
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async)
setresgid(r1, r0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
socket$inet6(0x18, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000700)=0x37) (async)
setresuid(0x0, r6, 0x0) (async)
geteuid() (async)
setreuid(r7, 0x0) (async)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
setresuid(0x0, r5, r7) (async)

17.060612768s ago: executing program 3 (id=4):
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @random="38f8537384fc", [], {@ipv6={0x86dd, {0xf, 0x6, 'u\x00J', 0x38, 0x3a, 0x0, @rand_addr="2a3b1ae57db8883fa6958273532df404", @rand_addr="b6584ac86e879d34949bad1e5fa7433f", {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "a69fb6", 0x86f, 0x37, 0x7, @empty, @empty, [@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}}})
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000100)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='{\x00', &(0x7f0000000340)='/:*${&!\x00', &(0x7f0000000380)='\x02\x00)(\x1c>\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='/dev/bpf\x00', &(0x7f0000000440)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa'])
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000180)={0x1807, 0x7fff, 0xffffffc0, 0x8059b, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0x401})
write(r0, &(0x7f00000001c0)="7ef5b69389691e24966a3ddf3d32c748fcdc1293054eed350098644011ebd472a8369432248be44290d233feaa3de7cc925771aca5cb8d5b79fac405b664e6e11a3210ed928a7cc25f6d632fe44500d1b744d02f34c2e90e129c594e0000000008492908891562516d58e36378ff561e26b1c5b8df6d35fdcece846e194c59dbf83d3018630f9855f002e5212c76a8526a86d5c119953f35dba52a0f00ecb9d2e02a76acf1dd6589159751f0455ccd4abcde058b98b2d427fde72627ab034ddf1b04b9d5c441c8f2c940c9569aa71d7929d4", 0xd2)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="b3dea8d14cc6", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @multicast2, @empty, @remote={0xac, 0x14, 0x0}}}}})

17.060462236s ago: executing program 4 (id=160):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0)
socket$inet(0x2, 0x8003, 0x1)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000)
socket$unix(0x1, 0x1, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}})
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0) (async)
socket$inet(0x2, 0x8003, 0x1) (async)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea) (async)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async)
open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}}) (async)
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0) (async)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)

17.060308524s ago: executing program 5 (id=133):
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) (async, rerun: 32)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (rerun: 32)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x223e, 0x0) (async, rerun: 64)
sysctl$vm_swapencrypt(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0xfffffcd8) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000480)='./file0\x00', 0x7c6, 0x0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x8000, 0x88)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x9}, {0xbe81, 0x4b0}}, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) (async)
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = syz_open_pts()
write(r5, &(0x7f0000000200)='B', 0x1) (async)
r6 = socket$inet6(0x18, 0x1, 0x6)
closefrom(r6) (async, rerun: 32)
setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (rerun: 32)
unveil(0x0, &(0x7f0000000280)='w\x00') (async)
recvmmsg(r3, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) (async)
sendmmsg(r4, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xa, 0x0, 0x0) (async, rerun: 64)
getgroups(0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={<r7=>0x0}, 0xc)
setreuid(0x0, r7)
r8 = semget$private(0x0, 0x1, 0x5fa)
semctl$IPC_SET(r8, 0x0, 0x1, 0x0)
seteuid(0xffffffffffffffff)

17.060181686s ago: executing program 7 (id=148):
open(&(0x7f0000000140)='./file0\x00', 0x200, 0x1ca)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
r0 = socket$inet6(0x18, 0x3, 0x3a)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
open(&(0x7f0000001640)='./file0\x00', 0x200, 0x42) (async)
mkfifo(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) (async)
utimes(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)={{0x7, 0x3}, {0x0, 0x4}})
semget$private(0x0, 0x2, 0xe0c81bf28d5bb341)
open(&(0x7f0000001680)='./file0\x00', 0x7c6, 0xea) (async)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
r1 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
write(r1, &(0x7f0000000100)='B', 0x1)
closefrom(r0)
mkfifo(&(0x7f0000000180)='./file0\x00', 0x8) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x128)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="19", 0x1}], 0x1) (async)
write(r2, &(0x7f0000000600)="56cba089995412f28c6a9d088afd2b207cd4bd3793368980da1aecbfab4bda092f0290f2f164d2e0c5aca41a5e3b3194b02e97cfde", 0x35) (async)
write(r1, &(0x7f0000000300)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3a63bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async)
unveil(0x0, &(0x7f0000000380)='c\x00') (async)
pipe(&(0x7f0000001700))
r3 = socket$inet6(0x18, 0x1, 0x6)
fcntl$getown(r3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}) (async)
r5 = kqueue()
pipe(&(0x7f0000000640)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
kevent(r5, &(0x7f0000000680)=[{{r6}, 0xfffffffffffffffe, 0x9, 0x40, 0x600000000000000, 0x85}, {{r6}, 0xfffffffffffffffe, 0x2, 0x2, 0xd, 0x400}], 0x6, 0x0, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001780)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/197, 0xc5}, 0x101}, 0x38, 0x0, 0x0)

12.097046342s ago: executing program 0 (id=130):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, <r1=>0xffffffffffffffff})
closefrom(r1) (async)
closefrom(r1)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1) (async)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
sysctl$net_inet_ip(&(0x7f00000006c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0xef) (async)
r2 = socket$inet(0x2, 0x3, 0xef)
pledge(0x0, &(0x7f0000000700)='\x1a~\b\xb7\xae\xcb\xc4\xac\xa7S\x11\x92\xd3\x1c\x06\x17n\x97q\x9cR/\x8f\xb4J\xc4\\^hk\xcc\xed\xff\x15\xe4\xb7\x80\xcd\xab\xe1\x7f\x9f\xc9\xa9N\xe6\f\x1bS5:g\x8dG\x82\x8fa\xe2\xfa\xd8\x95)\xf6\xe0\xc6\xca\x94,\x9a\x88 \xec\xbf\x11\xfc\x8d\xd7^\x15\x87\xb7\xb1\x96OW<\xfc}q\xdd\xd0\b\xc5\r\xb2\x9dH\xe5TKx\\\xcb\x88r\x18\x81{\xc9\xaf_D\xc9c^\x94\"\xeb\xe6@\xb1X+\xe7s\xed\xaf\x1b\x0e@R\x9d-\xc5\x84\xde[\xf0\x91\xa6\x9b\xbc\xf3\x1em\xabj)\xd4s\xab\x8c\n\xb6\xbb\x81*\x99.7\xba\xd0\r`\x9a\x876\xccxSH`\xcf\xb1\xd8\x1c\xb4k\xfb\xc8\xa2\xb3%\xc43\xa8w,B\xd0\x99\x1e\xe9\xa2l\x13k\xf5\xd8\xdf\xfb\xbd\xa9NcN\xad\xd3\x97&\x9e\xab\xb8\fh\xddv\xf6K\xe9\xc9\xd7^\x88P\xb1p+s7+>\x8d\x95\x95\x11\x9f6\x8c4\xde\xdb\x1e')
getsockopt(r2, 0x0, 0x2, 0x0, 0x0) (async)
getsockopt(r2, 0x0, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
openat$tty(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x40100, 0x0)
ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000880)=0x2)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0})
syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[])
r4 = socket$inet6(0x18, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x6c, &(0x7f00000005c0)={0x9, 0x0, 0xff}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000600)={0x4, 0x0, 0xf}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x67, &(0x7f0000000640)={{0x1c, 0x18, 0x0, 0x9, "62c35b2fc8bac05f7a5e1e18e9c9eb59", 0x6}, {0x1c, 0x18, 0x1, 0x3, "ece242192a500fdfaa242674f6fdeeba", 0xfffffffe}, 0x2, [0x0, 0x8, 0x80000001, 0x9, 0xc6c5, 0x3, 0x4, 0x6]}, 0x5c)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_pts() (async)
r5 = syz_open_pts()
write(r5, &(0x7f0000000940)='B', 0x1)
closefrom(r5)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b) (async)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b)
r6 = open(&(0x7f00000009c0)='./file0\x00', 0x2, 0x81)
r7 = syz_open_pts()
dup2(r6, r7)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1}) (async)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1})
unveil(0x0, &(0x7f0000000a40)='x\x00') (async)
unveil(0x0, &(0x7f0000000a40)='x\x00')

11.891057568s ago: executing program 1 (id=52):
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0])
setresgid(r1, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0)={<r5=>0x0, <r6=>0x0}, &(0x7f0000000700)=0x37)
setresuid(0x0, r6, 0x0)
r7 = geteuid()
setreuid(r7, 0x0)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, r5, r7)
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async)
setresgid(r1, r0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
socket$inet6(0x18, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000700)=0x37) (async)
setresuid(0x0, r6, 0x0) (async)
geteuid() (async)
setreuid(r7, 0x0) (async)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
setresuid(0x0, r5, r7) (async)

11.890661162s ago: executing program 3 (id=4):
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @random="38f8537384fc", [], {@ipv6={0x86dd, {0xf, 0x6, 'u\x00J', 0x38, 0x3a, 0x0, @rand_addr="2a3b1ae57db8883fa6958273532df404", @rand_addr="b6584ac86e879d34949bad1e5fa7433f", {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "a69fb6", 0x86f, 0x37, 0x7, @empty, @empty, [@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}}})
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000100)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='{\x00', &(0x7f0000000340)='/:*${&!\x00', &(0x7f0000000380)='\x02\x00)(\x1c>\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='/dev/bpf\x00', &(0x7f0000000440)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa'])
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000180)={0x1807, 0x7fff, 0xffffffc0, 0x8059b, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0x401})
write(r0, &(0x7f00000001c0)="7ef5b69389691e24966a3ddf3d32c748fcdc1293054eed350098644011ebd472a8369432248be44290d233feaa3de7cc925771aca5cb8d5b79fac405b664e6e11a3210ed928a7cc25f6d632fe44500d1b744d02f34c2e90e129c594e0000000008492908891562516d58e36378ff561e26b1c5b8df6d35fdcece846e194c59dbf83d3018630f9855f002e5212c76a8526a86d5c119953f35dba52a0f00ecb9d2e02a76acf1dd6589159751f0455ccd4abcde058b98b2d427fde72627ab034ddf1b04b9d5c441c8f2c940c9569aa71d7929d4", 0xd2)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="b3dea8d14cc6", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @multicast2, @empty, @remote={0xac, 0x14, 0x0}}}}})

11.890459665s ago: executing program 4 (id=160):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0)
socket$inet(0x2, 0x8003, 0x1)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000)
socket$unix(0x1, 0x1, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}})
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0) (async)
socket$inet(0x2, 0x8003, 0x1) (async)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea) (async)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async)
open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}}) (async)
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0) (async)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)

11.89032678s ago: executing program 5 (id=133):
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) (async, rerun: 32)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (rerun: 32)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x223e, 0x0) (async, rerun: 64)
sysctl$vm_swapencrypt(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0xfffffcd8) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000480)='./file0\x00', 0x7c6, 0x0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x8000, 0x88)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x9}, {0xbe81, 0x4b0}}, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) (async)
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = syz_open_pts()
write(r5, &(0x7f0000000200)='B', 0x1) (async)
r6 = socket$inet6(0x18, 0x1, 0x6)
closefrom(r6) (async, rerun: 32)
setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (rerun: 32)
unveil(0x0, &(0x7f0000000280)='w\x00') (async)
recvmmsg(r3, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) (async)
sendmmsg(r4, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xa, 0x0, 0x0) (async, rerun: 64)
getgroups(0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={<r7=>0x0}, 0xc)
setreuid(0x0, r7)
r8 = semget$private(0x0, 0x1, 0x5fa)
semctl$IPC_SET(r8, 0x0, 0x1, 0x0)
seteuid(0xffffffffffffffff)

11.89017072s ago: executing program 6 (id=27):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pselect(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x5, 0x3, 0x400000000000005, 0x10000, 0x0, 0xc, 0x8}, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0) (async)
closefrom(r2)
poll(0x0, 0x0, 0xffffffff) (async)
unveil(0x0, &(0x7f0000000080)='w\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
closefrom(r1) (async)
readv(r0, &(0x7f0000000100), 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r3, 0x0, 0xa, &(0x7f0000000200)='\x00', 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
closefrom(r5)
r6 = kqueue()
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
kevent(r6, &(0x7f0000000440), 0x56, &(0x7f0000000480), 0x202, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000004c0)={0x8, &(0x7f0000000500)=[{0xf, 0x20, 0x3, 0x59}, {0x800, 0x1, 0x5}, {0x2, 0x3, 0x9}, {0xfff8, 0x8, 0x6, 0x4}, {0x9, 0x0, 0x7, 0x7}, {0x9, 0x98, 0xe9, 0x62b9}, {0x9, 0x9, 0x7, 0x3ff}, {0xc183, 0x2, 0xc7, 0x7}]}) (async)
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$DIOCGETLIMIT(r7, 0xc0084427, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCSETLIMIT(r7, 0xc0084428, 0x0) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
syz_emit_ethernet(0x6e, 0x0)
ioctl$DIOCCLRSTATUS(r8, 0xc1084425, &(0x7f0000000580)={'./file0\x00', 0x0, 0x20009, 0x5, 0xb6a3, 0x5})

7.945953782s ago: executing program 0 (id=130):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, <r1=>0xffffffffffffffff})
closefrom(r1) (async)
closefrom(r1)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1) (async)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
sysctl$net_inet_ip(&(0x7f00000006c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0xef) (async)
r2 = socket$inet(0x2, 0x3, 0xef)
pledge(0x0, &(0x7f0000000700)='\x1a~\b\xb7\xae\xcb\xc4\xac\xa7S\x11\x92\xd3\x1c\x06\x17n\x97q\x9cR/\x8f\xb4J\xc4\\^hk\xcc\xed\xff\x15\xe4\xb7\x80\xcd\xab\xe1\x7f\x9f\xc9\xa9N\xe6\f\x1bS5:g\x8dG\x82\x8fa\xe2\xfa\xd8\x95)\xf6\xe0\xc6\xca\x94,\x9a\x88 \xec\xbf\x11\xfc\x8d\xd7^\x15\x87\xb7\xb1\x96OW<\xfc}q\xdd\xd0\b\xc5\r\xb2\x9dH\xe5TKx\\\xcb\x88r\x18\x81{\xc9\xaf_D\xc9c^\x94\"\xeb\xe6@\xb1X+\xe7s\xed\xaf\x1b\x0e@R\x9d-\xc5\x84\xde[\xf0\x91\xa6\x9b\xbc\xf3\x1em\xabj)\xd4s\xab\x8c\n\xb6\xbb\x81*\x99.7\xba\xd0\r`\x9a\x876\xccxSH`\xcf\xb1\xd8\x1c\xb4k\xfb\xc8\xa2\xb3%\xc43\xa8w,B\xd0\x99\x1e\xe9\xa2l\x13k\xf5\xd8\xdf\xfb\xbd\xa9NcN\xad\xd3\x97&\x9e\xab\xb8\fh\xddv\xf6K\xe9\xc9\xd7^\x88P\xb1p+s7+>\x8d\x95\x95\x11\x9f6\x8c4\xde\xdb\x1e')
getsockopt(r2, 0x0, 0x2, 0x0, 0x0) (async)
getsockopt(r2, 0x0, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
openat$tty(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x40100, 0x0)
ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000880)=0x2)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0})
syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[])
r4 = socket$inet6(0x18, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x6c, &(0x7f00000005c0)={0x9, 0x0, 0xff}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000600)={0x4, 0x0, 0xf}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x67, &(0x7f0000000640)={{0x1c, 0x18, 0x0, 0x9, "62c35b2fc8bac05f7a5e1e18e9c9eb59", 0x6}, {0x1c, 0x18, 0x1, 0x3, "ece242192a500fdfaa242674f6fdeeba", 0xfffffffe}, 0x2, [0x0, 0x8, 0x80000001, 0x9, 0xc6c5, 0x3, 0x4, 0x6]}, 0x5c)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_pts() (async)
r5 = syz_open_pts()
write(r5, &(0x7f0000000940)='B', 0x1)
closefrom(r5)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b) (async)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b)
r6 = open(&(0x7f00000009c0)='./file0\x00', 0x2, 0x81)
r7 = syz_open_pts()
dup2(r6, r7)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1}) (async)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1})
unveil(0x0, &(0x7f0000000a40)='x\x00') (async)
unveil(0x0, &(0x7f0000000a40)='x\x00')

7.740943466s ago: executing program 1 (id=52):
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0])
setresgid(r1, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0)={<r5=>0x0, <r6=>0x0}, &(0x7f0000000700)=0x37)
setresuid(0x0, r6, 0x0)
r7 = geteuid()
setreuid(r7, 0x0)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, r5, r7)
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async)
setresgid(r1, r0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
socket$inet6(0x18, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000700)=0x37) (async)
setresuid(0x0, r6, 0x0) (async)
geteuid() (async)
setreuid(r7, 0x0) (async)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
setresuid(0x0, r5, r7) (async)

7.739771618s ago: executing program 3 (id=4):
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @random="38f8537384fc", [], {@ipv6={0x86dd, {0xf, 0x6, 'u\x00J', 0x38, 0x3a, 0x0, @rand_addr="2a3b1ae57db8883fa6958273532df404", @rand_addr="b6584ac86e879d34949bad1e5fa7433f", {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "a69fb6", 0x86f, 0x37, 0x7, @empty, @empty, [@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}}})
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000100)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='{\x00', &(0x7f0000000340)='/:*${&!\x00', &(0x7f0000000380)='\x02\x00)(\x1c>\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='/dev/bpf\x00', &(0x7f0000000440)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa'])
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000180)={0x1807, 0x7fff, 0xffffffc0, 0x8059b, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0x401})
write(r0, &(0x7f00000001c0)="7ef5b69389691e24966a3ddf3d32c748fcdc1293054eed350098644011ebd472a8369432248be44290d233feaa3de7cc925771aca5cb8d5b79fac405b664e6e11a3210ed928a7cc25f6d632fe44500d1b744d02f34c2e90e129c594e0000000008492908891562516d58e36378ff561e26b1c5b8df6d35fdcece846e194c59dbf83d3018630f9855f002e5212c76a8526a86d5c119953f35dba52a0f00ecb9d2e02a76acf1dd6589159751f0455ccd4abcde058b98b2d427fde72627ab034ddf1b04b9d5c441c8f2c940c9569aa71d7929d4", 0xd2)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="b3dea8d14cc6", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @multicast2, @empty, @remote={0xac, 0x14, 0x0}}}}})

7.739551651s ago: executing program 4 (id=160):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0)
socket$inet(0x2, 0x8003, 0x1)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000)
socket$unix(0x1, 0x1, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}})
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0) (async)
socket$inet(0x2, 0x8003, 0x1) (async)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea) (async)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async)
open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}}) (async)
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0) (async)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)

7.739419275s ago: executing program 6 (id=27):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pselect(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x5, 0x3, 0x400000000000005, 0x10000, 0x0, 0xc, 0x8}, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0) (async)
closefrom(r2)
poll(0x0, 0x0, 0xffffffff) (async)
unveil(0x0, &(0x7f0000000080)='w\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
closefrom(r1) (async)
readv(r0, &(0x7f0000000100), 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r3, 0x0, 0xa, &(0x7f0000000200)='\x00', 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
closefrom(r5)
r6 = kqueue()
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
kevent(r6, &(0x7f0000000440), 0x56, &(0x7f0000000480), 0x202, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000004c0)={0x8, &(0x7f0000000500)=[{0xf, 0x20, 0x3, 0x59}, {0x800, 0x1, 0x5}, {0x2, 0x3, 0x9}, {0xfff8, 0x8, 0x6, 0x4}, {0x9, 0x0, 0x7, 0x7}, {0x9, 0x98, 0xe9, 0x62b9}, {0x9, 0x9, 0x7, 0x3ff}, {0xc183, 0x2, 0xc7, 0x7}]}) (async)
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$DIOCGETLIMIT(r7, 0xc0084427, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCSETLIMIT(r7, 0xc0084428, 0x0) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
syz_emit_ethernet(0x6e, 0x0)
ioctl$DIOCCLRSTATUS(r8, 0xc1084425, &(0x7f0000000580)={'./file0\x00', 0x0, 0x20009, 0x5, 0xb6a3, 0x5})

7.739228635s ago: executing program 7 (id=148):
open(&(0x7f0000000140)='./file0\x00', 0x200, 0x1ca)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
r0 = socket$inet6(0x18, 0x3, 0x3a)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
open(&(0x7f0000001640)='./file0\x00', 0x200, 0x42) (async)
mkfifo(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) (async)
utimes(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)={{0x7, 0x3}, {0x0, 0x4}})
semget$private(0x0, 0x2, 0xe0c81bf28d5bb341)
open(&(0x7f0000001680)='./file0\x00', 0x7c6, 0xea) (async)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
r1 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
write(r1, &(0x7f0000000100)='B', 0x1)
closefrom(r0)
mkfifo(&(0x7f0000000180)='./file0\x00', 0x8) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x128)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="19", 0x1}], 0x1) (async)
write(r2, &(0x7f0000000600)="56cba089995412f28c6a9d088afd2b207cd4bd3793368980da1aecbfab4bda092f0290f2f164d2e0c5aca41a5e3b3194b02e97cfde", 0x35) (async)
write(r1, &(0x7f0000000300)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3a63bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async)
unveil(0x0, &(0x7f0000000380)='c\x00') (async)
pipe(&(0x7f0000001700))
r3 = socket$inet6(0x18, 0x1, 0x6)
fcntl$getown(r3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}) (async)
r5 = kqueue()
pipe(&(0x7f0000000640)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
kevent(r5, &(0x7f0000000680)=[{{r6}, 0xfffffffffffffffe, 0x9, 0x40, 0x600000000000000, 0x85}, {{r6}, 0xfffffffffffffffe, 0x2, 0x2, 0xd, 0x400}], 0x6, 0x0, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001780)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/197, 0xc5}, 0x101}, 0x38, 0x0, 0x0)

6.801413752s ago: executing program 2 (id=171):
r0 = socket(0x11, 0x3, 0x9)
setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0)
sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0x12, 0x3}, 0x3, &(0x7f0000000040)="f24b3d4f102e9ff79fb571d4f9b582f40c5e3fbf0fb04aec0c81e16cf001a4f78d3c5b1c11086250561127380685c603df7eb7b35f99a42f24", &(0x7f0000000080)=0x39, &(0x7f00000000c0)="6463102e1881b10f60e26a1859758af64dfcd8a94229858e7d3233d5e6c8c014a7dba891b6e48d80a0fb3344bca2e66b3b9fe97ddd67b912a0f1f95ccff1f6c362c24bbcb8be5c8617b204171b371889f292c567a325cce4d4c91001ed59a008ba4275e04d95e37e5403febb164b6a32b4d1f0455c648ee62eb5edcb22ef64ae536c38f93beb675a487ba900ce380e585be05910275ba0b1c74e949912", 0x9d)
sysctl$vfs_fuse(&(0x7f0000000380)={0xa, 0x12, 0x1}, 0x3, &(0x7f00000001c0)="3b7aa9625fa51601f219e7ac7cf15cff7f08f03d91781d989062340d39fb56803ddb98288b3973a42929b490975232d9f285d52a043274f94a7e701e5491726412d5ea35dad5657f57e407ac0e30ce5c9909d8fd99a34cb9e6b353c93124800b5159cdaf0aa4736a4faa141c166b2a20c48d641b15ade88f3199be944964d8e84d955e6f3094aa4297ee429074dd9efde00028f5e9c171175cb06b18", &(0x7f0000000280)=0xb5, &(0x7f00000002c0)="db9aba2c1e1b069d2e51661ab30b71f5d1258ccb287e42c893428c39f535934dea63773bcb78e765da88ab9d771fe07829ae1e4104974b0419364c6a237e7f3739bd14127f8fd42f115c709b55f30c516e1972e199264fc2def5721c7e4b62e66588e05e16f13bad11416242314f2f752940e2bce0c459fcb3d3c2f5b41060d7011bb1ad0cded754827ccb2079bc0463", 0x90)

4.33605956s ago: executing program 0 (id=130):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, <r1=>0xffffffffffffffff})
closefrom(r1) (async)
closefrom(r1)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1) (async)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
sysctl$net_inet_ip(&(0x7f00000006c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0xef) (async)
r2 = socket$inet(0x2, 0x3, 0xef)
pledge(0x0, &(0x7f0000000700)='\x1a~\b\xb7\xae\xcb\xc4\xac\xa7S\x11\x92\xd3\x1c\x06\x17n\x97q\x9cR/\x8f\xb4J\xc4\\^hk\xcc\xed\xff\x15\xe4\xb7\x80\xcd\xab\xe1\x7f\x9f\xc9\xa9N\xe6\f\x1bS5:g\x8dG\x82\x8fa\xe2\xfa\xd8\x95)\xf6\xe0\xc6\xca\x94,\x9a\x88 \xec\xbf\x11\xfc\x8d\xd7^\x15\x87\xb7\xb1\x96OW<\xfc}q\xdd\xd0\b\xc5\r\xb2\x9dH\xe5TKx\\\xcb\x88r\x18\x81{\xc9\xaf_D\xc9c^\x94\"\xeb\xe6@\xb1X+\xe7s\xed\xaf\x1b\x0e@R\x9d-\xc5\x84\xde[\xf0\x91\xa6\x9b\xbc\xf3\x1em\xabj)\xd4s\xab\x8c\n\xb6\xbb\x81*\x99.7\xba\xd0\r`\x9a\x876\xccxSH`\xcf\xb1\xd8\x1c\xb4k\xfb\xc8\xa2\xb3%\xc43\xa8w,B\xd0\x99\x1e\xe9\xa2l\x13k\xf5\xd8\xdf\xfb\xbd\xa9NcN\xad\xd3\x97&\x9e\xab\xb8\fh\xddv\xf6K\xe9\xc9\xd7^\x88P\xb1p+s7+>\x8d\x95\x95\x11\x9f6\x8c4\xde\xdb\x1e')
getsockopt(r2, 0x0, 0x2, 0x0, 0x0) (async)
getsockopt(r2, 0x0, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
openat$tty(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x40100, 0x0)
ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000880)=0x2)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0})
syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[])
r4 = socket$inet6(0x18, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x6c, &(0x7f00000005c0)={0x9, 0x0, 0xff}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000600)={0x4, 0x0, 0xf}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x67, &(0x7f0000000640)={{0x1c, 0x18, 0x0, 0x9, "62c35b2fc8bac05f7a5e1e18e9c9eb59", 0x6}, {0x1c, 0x18, 0x1, 0x3, "ece242192a500fdfaa242674f6fdeeba", 0xfffffffe}, 0x2, [0x0, 0x8, 0x80000001, 0x9, 0xc6c5, 0x3, 0x4, 0x6]}, 0x5c)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_pts() (async)
r5 = syz_open_pts()
write(r5, &(0x7f0000000940)='B', 0x1)
closefrom(r5)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b) (async)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b)
r6 = open(&(0x7f00000009c0)='./file0\x00', 0x2, 0x81)
r7 = syz_open_pts()
dup2(r6, r7)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1}) (async)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1})
unveil(0x0, &(0x7f0000000a40)='x\x00') (async)
unveil(0x0, &(0x7f0000000a40)='x\x00')

4.129416514s ago: executing program 1 (id=52):
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0])
setresgid(r1, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0)={<r5=>0x0, <r6=>0x0}, &(0x7f0000000700)=0x37)
setresuid(0x0, r6, 0x0)
r7 = geteuid()
setreuid(r7, 0x0)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, r5, r7)
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async)
setresgid(r1, r0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
socket$inet6(0x18, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000700)=0x37) (async)
setresuid(0x0, r6, 0x0) (async)
geteuid() (async)
setreuid(r7, 0x0) (async)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
setresuid(0x0, r5, r7) (async)

4.12924904s ago: executing program 2 (id=172):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000080))
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0)

4.127461448s ago: executing program 3 (id=4):
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @random="38f8537384fc", [], {@ipv6={0x86dd, {0xf, 0x6, 'u\x00J', 0x38, 0x3a, 0x0, @rand_addr="2a3b1ae57db8883fa6958273532df404", @rand_addr="b6584ac86e879d34949bad1e5fa7433f", {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "a69fb6", 0x86f, 0x37, 0x7, @empty, @empty, [@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}}})
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000100)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='{\x00', &(0x7f0000000340)='/:*${&!\x00', &(0x7f0000000380)='\x02\x00)(\x1c>\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='/dev/bpf\x00', &(0x7f0000000440)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa'])
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000180)={0x1807, 0x7fff, 0xffffffc0, 0x8059b, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0x401})
write(r0, &(0x7f00000001c0)="7ef5b69389691e24966a3ddf3d32c748fcdc1293054eed350098644011ebd472a8369432248be44290d233feaa3de7cc925771aca5cb8d5b79fac405b664e6e11a3210ed928a7cc25f6d632fe44500d1b744d02f34c2e90e129c594e0000000008492908891562516d58e36378ff561e26b1c5b8df6d35fdcece846e194c59dbf83d3018630f9855f002e5212c76a8526a86d5c119953f35dba52a0f00ecb9d2e02a76acf1dd6589159751f0455ccd4abcde058b98b2d427fde72627ab034ddf1b04b9d5c441c8f2c940c9569aa71d7929d4", 0xd2)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="b3dea8d14cc6", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @multicast2, @empty, @remote={0xac, 0x14, 0x0}}}}})

4.127264454s ago: executing program 4 (id=160):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0)
socket$inet(0x2, 0x8003, 0x1)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000)
socket$unix(0x1, 0x1, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}})
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0) (async)
socket$inet(0x2, 0x8003, 0x1) (async)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea) (async)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async)
open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}}) (async)
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0) (async)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)

4.127154274s ago: executing program 5 (id=133):
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) (async, rerun: 32)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (rerun: 32)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x223e, 0x0) (async, rerun: 64)
sysctl$vm_swapencrypt(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0xfffffcd8) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000480)='./file0\x00', 0x7c6, 0x0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x8000, 0x88)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x9}, {0xbe81, 0x4b0}}, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) (async)
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = syz_open_pts()
write(r5, &(0x7f0000000200)='B', 0x1) (async)
r6 = socket$inet6(0x18, 0x1, 0x6)
closefrom(r6) (async, rerun: 32)
setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (rerun: 32)
unveil(0x0, &(0x7f0000000280)='w\x00') (async)
recvmmsg(r3, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) (async)
sendmmsg(r4, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xa, 0x0, 0x0) (async, rerun: 64)
getgroups(0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={<r7=>0x0}, 0xc)
setreuid(0x0, r7)
r8 = semget$private(0x0, 0x1, 0x5fa)
semctl$IPC_SET(r8, 0x0, 0x1, 0x0)
seteuid(0xffffffffffffffff)

4.127026561s ago: executing program 6 (id=27):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pselect(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x5, 0x3, 0x400000000000005, 0x10000, 0x0, 0xc, 0x8}, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0) (async)
closefrom(r2)
poll(0x0, 0x0, 0xffffffff) (async)
unveil(0x0, &(0x7f0000000080)='w\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
closefrom(r1) (async)
readv(r0, &(0x7f0000000100), 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r3, 0x0, 0xa, &(0x7f0000000200)='\x00', 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
closefrom(r5)
r6 = kqueue()
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
kevent(r6, &(0x7f0000000440), 0x56, &(0x7f0000000480), 0x202, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000004c0)={0x8, &(0x7f0000000500)=[{0xf, 0x20, 0x3, 0x59}, {0x800, 0x1, 0x5}, {0x2, 0x3, 0x9}, {0xfff8, 0x8, 0x6, 0x4}, {0x9, 0x0, 0x7, 0x7}, {0x9, 0x98, 0xe9, 0x62b9}, {0x9, 0x9, 0x7, 0x3ff}, {0xc183, 0x2, 0xc7, 0x7}]}) (async)
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$DIOCGETLIMIT(r7, 0xc0084427, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCSETLIMIT(r7, 0xc0084428, 0x0) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
syz_emit_ethernet(0x6e, 0x0)
ioctl$DIOCCLRSTATUS(r8, 0xc1084425, &(0x7f0000000580)={'./file0\x00', 0x0, 0x20009, 0x5, 0xb6a3, 0x5})

3.157752984s ago: executing program 2 (id=173):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
futimes(r0, &(0x7f00000001c0)=[{0x6, 0xffffffffffffffff}, {0x8000000000000000, 0x8a8}])
listen(r0, 0x2)
syz_emit_ethernet(0x190, &(0x7f0000000000)={@local, @broadcast, [{[], {0x8100, 0x1, 0x1, 0x2}}], {@ipv6={0x86dd, {0xa, 0x6, "107260", 0x156, 0x89, 0x80, @rand_addr="1f833f971e9d323d4267825eb565bc2d", @loopback, {[@dstopts={0x2b, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xad}]}, @hopopts={0x62, 0x11, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @generic={0x7, 0x6d, "8161ceefdc52411a96cff84ef309d65d85e03031e4e511ebc718bae3dcfd35b96276c80cf9710fc4b9f515ab47cd6512a2c7d8ebf2ba2407a01a32240afd90cbcba39401dd8dfd2da6c571d3c0ac3c86168b06dbf4291005b264156fe31ab4ac8e4f6e7c7e0114c4afa8fdc1d7"}, @jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0x3}, @generic, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xb}]}, @fragment={0x88, 0x0, 0x8, 0x1, 0x0, 0x1, 0x64}, @dstopts={0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}], @udp={{0x0, 0x1, 0x8}, {"00bc542962a8346424dd948ab756f57a53feb45a8c60a19c00a63727a7209054e3e36f774eab66130ea9c3ce69ffa3e39c5038c4f0ec43dc8cdf6734534501ddca01c398a3ec68fa3a18e27a31e539b25b33450722fb5748787cf4557cd776fa62f015da35a229b4a7c983f9e9c9f6e7667bce776938"}}}}}}})

2.938576831s ago: executing program 2 (id=174):
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000380)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
r1 = socket$inet(0x2, 0x3, 0x14)
r2 = open(&(0x7f00000004c0)='./file0\x00', 0x19083084ca9cf73d, 0x2)
truncate(&(0x7f0000000500)='./file0\x00', 0x100000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, r2, 0x0)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
ioctl$FIOASYNC(r1, 0x802069b4, &(0x7f00000003c0)=0x7)
open$dir(&(0x7f0000000280)='./file0\x00', 0x200, 0x80)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000440)={0x3, 0x2})
ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, &(0x7f0000000480)={0x3, 0x2})
ktrace(&(0x7f00000002c0)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x10f2, 0x9})
socketpair(0x20, 0x5, 0x0, &(0x7f0000000340))
getdents(r0, 0x0, 0x0)
symlink(&(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file1\x00')
readlink(&(0x7f0000000240)='./file1\x00', 0x0, 0x0)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0x2b, 0x5b5, 0x3, 0x7, "27abec47518b039c4b942a9343540a7e037f1fae", 0x7, 0x59c})

205.739739ms ago: executing program 0 (id=130):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x0, <r1=>0xffffffffffffffff})
closefrom(r1) (async)
closefrom(r1)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1) (async)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f0000000540)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
sysctl$net_inet_ip(&(0x7f00000006c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0xef) (async)
r2 = socket$inet(0x2, 0x3, 0xef)
pledge(0x0, &(0x7f0000000700)='\x1a~\b\xb7\xae\xcb\xc4\xac\xa7S\x11\x92\xd3\x1c\x06\x17n\x97q\x9cR/\x8f\xb4J\xc4\\^hk\xcc\xed\xff\x15\xe4\xb7\x80\xcd\xab\xe1\x7f\x9f\xc9\xa9N\xe6\f\x1bS5:g\x8dG\x82\x8fa\xe2\xfa\xd8\x95)\xf6\xe0\xc6\xca\x94,\x9a\x88 \xec\xbf\x11\xfc\x8d\xd7^\x15\x87\xb7\xb1\x96OW<\xfc}q\xdd\xd0\b\xc5\r\xb2\x9dH\xe5TKx\\\xcb\x88r\x18\x81{\xc9\xaf_D\xc9c^\x94\"\xeb\xe6@\xb1X+\xe7s\xed\xaf\x1b\x0e@R\x9d-\xc5\x84\xde[\xf0\x91\xa6\x9b\xbc\xf3\x1em\xabj)\xd4s\xab\x8c\n\xb6\xbb\x81*\x99.7\xba\xd0\r`\x9a\x876\xccxSH`\xcf\xb1\xd8\x1c\xb4k\xfb\xc8\xa2\xb3%\xc43\xa8w,B\xd0\x99\x1e\xe9\xa2l\x13k\xf5\xd8\xdf\xfb\xbd\xa9NcN\xad\xd3\x97&\x9e\xab\xb8\fh\xddv\xf6K\xe9\xc9\xd7^\x88P\xb1p+s7+>\x8d\x95\x95\x11\x9f6\x8c4\xde\xdb\x1e')
getsockopt(r2, 0x0, 0x2, 0x0, 0x0) (async)
getsockopt(r2, 0x0, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
openat$tty(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x40100, 0x0)
ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000880)=0x2)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0})
syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[])
r4 = socket$inet6(0x18, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x6c, &(0x7f00000005c0)={0x9, 0x0, 0xff}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000600)={0x4, 0x0, 0xf}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x67, &(0x7f0000000640)={{0x1c, 0x18, 0x0, 0x9, "62c35b2fc8bac05f7a5e1e18e9c9eb59", 0x6}, {0x1c, 0x18, 0x1, 0x3, "ece242192a500fdfaa242674f6fdeeba", 0xfffffffe}, 0x2, [0x0, 0x8, 0x80000001, 0x9, 0xc6c5, 0x3, 0x4, 0x6]}, 0x5c)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_pts() (async)
r5 = syz_open_pts()
write(r5, &(0x7f0000000940)='B', 0x1)
closefrom(r5)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b) (async)
mkfifo(&(0x7f0000000980)='./file0\x00', 0x6b)
r6 = open(&(0x7f00000009c0)='./file0\x00', 0x2, 0x81)
r7 = syz_open_pts()
dup2(r6, r7)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1}) (async)
fcntl$lock(r7, 0x7, &(0x7f0000000a00)={0x3, 0xfffffffffffffff7, 0x0, 0x1})
unveil(0x0, &(0x7f0000000a40)='x\x00') (async)
unveil(0x0, &(0x7f0000000a40)='x\x00')

1.085672ms ago: executing program 1 (id=52):
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0])
setresgid(r1, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0)={<r5=>0x0, <r6=>0x0}, &(0x7f0000000700)=0x37)
setresuid(0x0, r6, 0x0)
r7 = geteuid()
setreuid(r7, 0x0)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, r5, r7)
getgroups(0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async)
setresgid(r1, r0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
socket$inet6(0x18, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x29, 0x2f, "801b"}], 0x10}, 0x402) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000040)="b66408ab6183f93112ac91008ae4d94bea0e5044bc94d925a41c05ca84e4af63f296ff3a614d643f9675fe969f6e898816ba603e2697c665cbef809dd7c2da16509a554303948ebdcca7cdfce1a8e832a3ee3f22c0b748c6dfa9773be337556c7576f6b64d4827af650d85f47cf6a050c9b428680f19fe6960a9ebc6103218b9650eb728754e2af8", &(0x7f0000000100)=0x88, &(0x7f0000000140), 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x7, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)="3319c1f5246a270888d0422dcc7e296ccdf6cd304078e3fd9e487a6745bd05b516151ea9299c28aa24e6122ca568e0", 0x2f}, {&(0x7f0000000240)="f0f4c27737a87630e465d4a350ef7f8d93b790f332981eb15d6d06bb01116a47575b9d11bc04d12c45d067c13d6cffd60d4d00421840a15c9cf2fbda2c317045e8aa0fb60cbeb1b0599b2c178dd218d6df8d7320a970a47c4dac181e77c27d3622476c21949610560cbbdd2099b9dd05616a04a0f9a3e9", 0x77}], 0x2, 0x0, 0x0, 0x20e}, 0x5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000700)=0x37) (async)
setresuid(0x0, r6, 0x0) (async)
geteuid() (async)
setreuid(r7, 0x0) (async)
sysctl$net_pipex(&(0x7f0000000140)={0x4, 0x1f, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
setresuid(0x0, r5, r7) (async)

822.647µs ago: executing program 2 (id=175):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x8) (async)
syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@broadcast, @random="1a614393aeb6", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3a, 0x2c, 0x6a, 0xc, 0x1, 0x2, 0x0, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@end]}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x7f, 0x0, 0xf}}}}}})

520.23µs ago: executing program 3 (id=4):
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @random="38f8537384fc", [], {@ipv6={0x86dd, {0xf, 0x6, 'u\x00J', 0x38, 0x3a, 0x0, @rand_addr="2a3b1ae57db8883fa6958273532df404", @rand_addr="b6584ac86e879d34949bad1e5fa7433f", {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "a69fb6", 0x86f, 0x37, 0x7, @empty, @empty, [@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}}})
r0 = syz_open_pts()
r1 = socket$unix(0x1, 0x5, 0x0)
closefrom(r1)
setrlimit(0x8, &(0x7f0000000100)={0x9, 0x37e1690f})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='{\x00', &(0x7f0000000340)='/:*${&!\x00', &(0x7f0000000380)='\x02\x00)(\x1c>\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='/dev/bpf\x00', &(0x7f0000000440)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa'])
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000180)={0x1807, 0x7fff, 0xffffffc0, 0x8059b, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0x401})
write(r0, &(0x7f00000001c0)="7ef5b69389691e24966a3ddf3d32c748fcdc1293054eed350098644011ebd472a8369432248be44290d233feaa3de7cc925771aca5cb8d5b79fac405b664e6e11a3210ed928a7cc25f6d632fe44500d1b744d02f34c2e90e129c594e0000000008492908891562516d58e36378ff561e26b1c5b8df6d35fdcece846e194c59dbf83d3018630f9855f002e5212c76a8526a86d5c119953f35dba52a0f00ecb9d2e02a76acf1dd6589159751f0455ccd4abcde058b98b2d427fde72627ab034ddf1b04b9d5c441c8f2c940c9569aa71d7929d4", 0xd2)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="b3dea8d14cc6", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @multicast2, @empty, @remote={0xac, 0x14, 0x0}}}}})

358.109µs ago: executing program 4 (id=160):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0)
socket$inet(0x2, 0x8003, 0x1)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000)
socket$unix(0x1, 0x1, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}})
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async)
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0) (async)
socket$inet(0x2, 0x8003, 0x1) (async)
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea) (async)
open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x6a) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async)
open(&(0x7f0000000200)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async)
mmap(&(0x7f0000134000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x400000000000) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000300)={0x8, 0x1, {[0x80, 0x1, 0x7, 0xaf0, 0x0, 0x5, 0x5, 0x0, 0x3, 0xa, 0x5d4, 0x0, 0x2, 0x14e9, 0x7fff, 0x8, 0x95ce, 0x4], [0x2, 0x3c, 0x9, 0x6911, 0x1, 0x4, 0x6, 0x8000000000000000, 0x40000, 0xb3ab], [0x2cc, 0x3, 0x1, 0x69b, 0x1, 0x7fffffffffffffff, 0x9], [0x5, 0xf0e, 0x99bb, 0x9, 0x800, 0x9], [{0x2, 0x8, 0x4, 0x9}, {0x4, 0x9bc, 0xa, 0x8}, {0x2, 0x7, 0x9, 0x4}, {0x0, 0x7fffffff, 0xcd, 0x1000}, {0x7, 0x7, 0x8, 0x8}, {0xbc08, 0x83, 0x7, 0xfffffffffffffffb}, {0xb3, 0x8, 0xe5, 0x7}, {0x1ff, 0x49bdf5c0, 0x7ff, 0x5338}], {0x2, 0x4, 0x9, 0x7fff}, {0x5, 0x8, 0xfff, 0x5}}}) (async)
poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x2000000000000042, 0x0) (async)
pselect(0x40, &(0x7f00000001c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)

243.013µs ago: executing program 5 (id=133):
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) (async, rerun: 32)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) (rerun: 32)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x223e, 0x0) (async, rerun: 64)
sysctl$vm_swapencrypt(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0xfffffcd8) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000480)='./file0\x00', 0x7c6, 0x0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x8000, 0x88)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x9}, {0xbe81, 0x4b0}}, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) (async)
r2 = socket$inet6(0x18, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = syz_open_pts()
write(r5, &(0x7f0000000200)='B', 0x1) (async)
r6 = socket$inet6(0x18, 0x1, 0x6)
closefrom(r6) (async, rerun: 32)
setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (rerun: 32)
unveil(0x0, &(0x7f0000000280)='w\x00') (async)
recvmmsg(r3, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) (async)
sendmmsg(r4, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xa, 0x0, 0x0) (async, rerun: 64)
getgroups(0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000)={<r7=>0x0}, 0xc)
setreuid(0x0, r7)
r8 = semget$private(0x0, 0x1, 0x5fa)
semctl$IPC_SET(r8, 0x0, 0x1, 0x0)
seteuid(0xffffffffffffffff)

97.669µs ago: executing program 7 (id=148):
open(&(0x7f0000000140)='./file0\x00', 0x200, 0x1ca)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
r0 = socket$inet6(0x18, 0x3, 0x3a)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
open(&(0x7f0000001640)='./file0\x00', 0x200, 0x42) (async)
mkfifo(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) (async)
utimes(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)={{0x7, 0x3}, {0x0, 0x4}})
semget$private(0x0, 0x2, 0xe0c81bf28d5bb341)
open(&(0x7f0000001680)='./file0\x00', 0x7c6, 0xea) (async)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
r1 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0) (async)
write(r1, &(0x7f0000000100)='B', 0x1)
closefrom(r0)
mkfifo(&(0x7f0000000180)='./file0\x00', 0x8) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x128)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="19", 0x1}], 0x1) (async)
write(r2, &(0x7f0000000600)="56cba089995412f28c6a9d088afd2b207cd4bd3793368980da1aecbfab4bda092f0290f2f164d2e0c5aca41a5e3b3194b02e97cfde", 0x35) (async)
write(r1, &(0x7f0000000300)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3a63bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async)
unveil(0x0, &(0x7f0000000380)='c\x00') (async)
pipe(&(0x7f0000001700))
r3 = socket$inet6(0x18, 0x1, 0x6)
fcntl$getown(r3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}) (async)
r5 = kqueue()
pipe(&(0x7f0000000640)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
kevent(r5, &(0x7f0000000680)=[{{r6}, 0xfffffffffffffffe, 0x9, 0x40, 0x600000000000000, 0x85}, {{r6}, 0xfffffffffffffffe, 0x2, 0x2, 0xd, 0x400}], 0x6, 0x0, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001780)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/197, 0xc5}, 0x101}, 0x38, 0x0, 0x0)

0s ago: executing program 2 (id=176):
sysctl$net_inet_ip(&(0x7f0000001040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
getpeername$unix(r0, &(0x7f0000000000)=@file={0x0, 0x0, ""/4087}, &(0x7f0000001000)=0xff9)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async)
mquery(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: tun: read failed
 (errno 9: Bad file descriptor)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: tun: read failed
 (errno 9: Bad file descriptor)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: tun: read failed
 (errno 9: Bad file descriptor)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: tun: read failed
 (errno 9: Bad file descriptor)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
SYZFAIL: repeatedly failed to execute the program
proc=3 req=4 state=3 status=67 (errno 4: Interrupted system call)


OpenBSD/amd64 (ci-openbsd-kasan-4.us-central1-b.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xffff800001910c88, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
Password:
Login incorrect
login: show panic
Password:
Login incorrect
login: trace
Password:
Login incorrect
login: show proc
Password:
Login incorrect
show all locks
login: Password:
Login incorrect
show all pools
login: Password:
Login incorrect
trace
login: Password:
Login incorrect
trace
login: Password: