last executing test programs:

11.242126074s ago: executing program 1 (id=390):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c, 0x2b, 0x14, 0x40000002}, {0x16, 0xfa, 0xb3}]})
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[]) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async)
r2 = socket(0x18, 0xc003, 0x3a)
setsockopt(r2, 0x29, 0x6c, &(0x7f0000000000), 0x0)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$VMM_IOC_RESETCPU(r3, 0x82405605, &(0x7f0000000a80)={0x8, 0x3, {[0x0, 0x200000000000006, 0xa, 0x6, 0x4, 0x7, 0x6, 0x2, 0x5, 0x81, 0xec, 0x7fff, 0x8, 0x1, 0x4, 0x7, 0x5, 0x1fe0000000000000], [0x7, 0x0, 0x4, 0x1, 0x40, 0x6, 0x4, 0x7fff, 0x47c], [0x7, 0xc23b, 0x8000000000000000, 0x6, 0xf1, 0x1], [0x2, 0x6, 0x1, 0x7, 0xbf, 0x429], [{0xff, 0x3ff, 0x4, 0x4}, {0x1, 0x400, 0x4, 0x80}, {0x5, 0x1, 0x5, 0x800}, {0x400, 0x4132, 0x7fff, 0x81}, {0x1, 0x3, 0x7, 0x6}, {0x0, 0x8, 0x2, 0x7}, {0x8, 0x10004, 0x6, 0x7132}, {0xed, 0x8, 0x8, 0x2a}], {0x6, 0x4, 0x0, 0xfffffffffffffff8}, {0x1, 0x3, 0x1, 0xfffffffffffffffc}}})
ioctl$DIOCRSETTFLAGS(r1, 0xc450444a, &(0x7f0000000600)={{'./file0\x00', './file0\x00', 0x41, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x7, 0xfff, 0x6, 0x10, 0xffffffff}) (async)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f00000016c0)={0x9, 0x52, 0x10, {[0xab, 0x2, 0x4f, 0x8, 0x1, 0xaeaa, 0x0, 0x0, 0x1, 0x0, 0x2, 0xffffffffffffffff, 0x1a04, 0x6, 0x1, 0x6188, 0x8000000000000001, 0x8], [0x7fff, 0xffffffff, 0x4, 0x8, 0x2, 0x1, 0xfffffffffffffffd, 0x7, 0x805, 0xf], [0x6, 0x1, 0x9, 0x8, 0x29c3, 0x80000000, 0x5], [0xa, 0xfffffffffffffffb, 0xaf, 0x44, 0x8001, 0x2], [{0x101, 0xffffffa3, 0x90c, 0x7fffffff}, {0x8, 0xffffffff, 0xffffffff, 0x2}, {0x4, 0x40, 0xeb50, 0xc00000000000}, {0x7, 0x6, 0x9, 0x2}, {0x5, 0x100, 0x4, 0x2}, {0x4, 0x40, 0x8, 0x1ff}, {0xb, 0x8, 0x9, 0x6}, {0x0, 0xa1, 0x3, 0x73a4a76a}], {0x8, 0x3, 0x1b3, 0x2b62eb9a}, {0x3, 0x8, 0x80000001, 0x401}}}) (async)
writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)="a535", 0x2}], 0x1) (async)
r4 = socket$inet(0x2, 0x3, 0x0) (async)
sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, &(0x7f0000000340), 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r5, 0xc01864c2, &(0x7f0000000180)={0x0, 0x3, r4, 0x0, 0x6}) (async)
r6 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x20)
pwritev(r6, &(0x7f00000005c0)=[{&(0x7f0000000480)="49f25f18", 0x4}], 0x1, 0xbe) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) (async)
ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x2, 0x26}, {0x3, 0x0, 0x0, 0x7}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async)
ioctl$VMM_IOC_RUN(r5, 0xc0285602, &(0x7f0000001bc0)={0x56, 0x9, {0x8, 0x3, 0x8}, 0x9, &(0x7f0000001940)={{0xd3, 0x3, 0x10, 0x9, 0x1, 0x401, 0x1, 0x9}, {[0x8000000000000001, 0x8, 0x4, 0x3, 0x4, 0x29, 0x6, 0x483c602b, 0x6, 0xff, 0xb, 0x3, 0x6, 0xfffffffffffffffc, 0x5, 0x7, 0x5, 0x8d58], [0x8, 0x1ff, 0x1, 0xe, 0x1, 0x3, 0x8, 0x8, 0x6, 0x3], [0x4, 0x5, 0xf, 0x9, 0x9, 0x5, 0x10000], [0xfffffffffffffffc, 0x1b, 0x0, 0xfff, 0x1, 0x9], [{0x6, 0xfffffffe, 0x78e86e3b, 0x1}, {0x5, 0x4, 0x100, 0xfff}, {0xb8f, 0x0, 0x3, 0x3}, {0x4ef, 0x9, 0x6, 0x91}, {0x4, 0x8, 0x200, 0x5}, {0x6, 0x80000001, 0xfffffff7, 0x7}, {0xffff, 0x3, 0x8, 0x9}, {0x2b, 0x2, 0x7, 0x964f}], {0x0, 0xfce00, 0xe, 0x1}, {0xd, 0xaa, 0xffff, 0x40}}, 0x4}, 0x2, 0x2})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x3}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x3, 0x2000002}, {0x2}, {0x3}, {0x2}, {0x2}, {0x1, 0xb4}, {0x1}, {}, {}, {0x3, 0x4}, {0x3}, {0x2}, {0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10002}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}, {0x1}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VMM_IOC_CREATE(r7, 0xca605601, &(0x7f0000000cc0)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000010000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x8, 0x2, 0x8, 0xfff, 0x3, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0xd, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa094, 0x2, 0x100, 0xffffffff, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0x0, 0x81, 0xa, 0x6, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x4, 0x2, 0x2, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x4, 0x7, 0x0, 0x7, 0x1006, 0x7, 0xfffffff4, 0x2, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x7, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x4, 0x401, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x6, 0x7063, 0xa, 0x6, 0x7, 0xa23d, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x2, 0x2, 0xfff, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x2, 0x2, 0x5, 0x5, 0xd, 0x9, 0x8001, 0x80000000, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xea3c, 0x85, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x2, 0x9, 0x4, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x800, 0x7, 0x6, 0x7fff, 0x6, 0x800, 0x21, 0x9, 0x5, 0x8, 0x8, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x80000000, 0x8, 0x1, 0x1, 0x800, 0x9, 0x75a1, 0x1, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0x8, 0x100, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0xc, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x6, 0x7, 0x9, 0x7ffffffd, 0x5, 0x0, 0x1, 0x2, 0xc74c, 0xff, 0x8, 0x6, 0x4, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x6, 0x7, 0x81, 0x3, 0x8, 0x800001, 0x2, 0xb, 0x8e6, 0x5, 0x6, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x8, 0x81, 0x4c1, 0x0, 0xb, 0x4, 0xffffffff, 0x12000, 0x10001, 0x99, 0x5, 0x1, 0xfffffffb, 0xa, 0x1, 0x200, 0x6b73, 0x2, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd6, 0x80, 0x1b, 0xe2, 0x0, 0x7, 0x1, 0x1, 0x7, 0xffff, 0x99, 0x8, 0x8, 0xe, 0xfff, 0x3, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x5, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x0, 0x4, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x6, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffffffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x800, 0x2, 0x300, 0x3, 0x2, 0x5, 0x10000, 0x3, 0x51, 0x8, 0x0, 0x1, 0x5ed, 0x2, 0x9, 0x22, 0x2, 0x8001, 0xdf, 0x5, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x9, 0x7ff, 0x101, 0x8, 0x93, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x7, 0x8001, 0x181, 0x0, 0x4, 0x4, 0x1, 0x9, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x827, 0x8, 0x81, 0x80000000, 0x9, 0x0, 0x4, 0x5, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0xe, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0x2, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x3, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fffffff, 0x9, 0x4, 0x8, 0x4, 0x8, 0xffffffff, 0x7f, 0x7fffffff, 0x4, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x7, 0x132, 0x80000001, 0x5, 0xa, 0x2, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xcf71, 0x1e46c000, 0x9, 0xe, 0xb, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x3, 0x80000801]}) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x25, 0x510, 0x0)

11.241217167s ago: executing program 1 (id=391):
setuid(0xee01)
setreuid(0xee00, 0xffffffffffffffff)
setrlimit(0x4, &(0x7f0000000180)={0xb, 0x59})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
writev(r0, &(0x7f0000000080)=[{&(0x7f0000001480)="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", 0x9b4}], 0x1)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_emit_ethernet(0x4de, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520304a83c03062c37515fcaebae1edf860e8f9c9704ff020000000000000000000000000001000f00000000000084724cc4ba35ddb58345c92b9196f09ba87cac7484f807c2f09f559efa3d6f8db7b149f8798aa74f83b63aa223097e8d6d4b9a91b77e3b138344701e6cfa97cf05596c3dbd778527a743f9c8"])
sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0)
mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0xe709)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000100)={0x4, 0xfffffffc, 0xfff6, 0x21d8b788, "2707a40000000000000600", 0x89, 0x7})
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)="dd98fbdd757b2dba8d3ed1deb445ed334961f24f0a1ec7a17025a55e83a55b0ca46d50f48dd9bf0b0541cb1d2505882fa9dbf4ddc9ed3d785881cb4585f88a7dc751229d71accabbe3d062b10b94b123dd2b6bc4a56f2b4a9d6bf381a4fddd7efa1c1579f38301fbaadfa93b7a866898a65a774d083c264dd3b97dcce0c32c651875939c6d4502994d585ab06b6abc3ddf0c2a3bef5b84fd1473c91dbd370161e9c28a973c4816ddb51deed11947f6504c6cc7a199ac97083f5a14d34d267b47f7b3626917a8edf99aef30aa44267e1fa3c689b4610900", 0xd7}], 0x1)

6.42660033s ago: executing program 1 (id=479):
r0 = syz_open_pts()
r1 = setsid()
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000029, 0x1a, &(0x7f0000000000)='@\x00\x00\x00', 0x4)
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{0x3, 0xffffffffffff0001}, {0x2, 0x3ff}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
syz_open_pts()
ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, 0x0)
poll(&(0x7f0000000000), 0x35, 0x0)
sendsyslog(&(0x7f0000000100), 0x0, 0x24)
r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105727, &(0x7f00000001c0)={&(0x7f0000000300)=[{0x23}], 0x1})
ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x800, r1)
r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$WSMOUSEIO_SETMODE(r4, 0x80045726, &(0x7f0000000040))
r5 = socket(0x1e, 0x3, 0x0)
shutdown(r5, 0x1)
mprotect(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x2)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$TIOCSETA(r7, 0xcd604406, &(0x7f0000000040)={0x0, 0x7c, 0x5, 0xffc04000, "d6a249e1b078927c79486b46c1d100", 0x4, 0x8})
ioctl$TIOCSETA(r7, 0xcd604406, &(0x7f0000000000)={0x7fffffff, 0x101, 0x1, 0x0, "d3a2496b000000000000000000000000002000", 0x5, 0x6})
r8 = openat$vmm(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(r8, r7, 0x10000)
ioctl$BIOCSETIF(r6, 0x8020426c, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x78, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "99ffff", 0x42, 0x16, 0x81, @rand_addr="cb697a653c336f0068707f6b00009992", @mcast2, {[@fragment={0x2c, 0x0, 0xc, 0x0, 0x0, 0x11, 0x67}, @routing={0x6, 0x6, 0x0, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x80000000}, @mcast1, @loopback]}], @generic="a4d1"}}}}})
ioctl$TIOCSCTTY(r0, 0x20007461)
ioctl$TIOCSTAT(r0, 0x20007465)

3.229289663s ago: executing program 3 (id=634):
openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40000, 0x0) (async)
r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40000, 0x0)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x100, 0xffff2bb4, 0xfffffff7, 0x1f, &(0x7f0000000040)=""/31, 0x78, &(0x7f0000000080)=""/120, 0x38, &(0x7f0000000100)=""/56})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0xb6], 0x1, 0x10000, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000300)={0x202, 0xa, &(0x7f0000000200)=[0x80000000, 0x1000, 0x0, 0x10, 0x5, 0x9, 0x6, 0xaf90, 0xa, 0x3c], &(0x7f0000000240)=[0x6, 0x10001, 0xc0f5], &(0x7f0000000280)=[0x9, 0x7c3f], &(0x7f00000002c0)=[0x5, 0x9, 0x3b0, 0x7ff, 0x5, 0x2], 0x0, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000300)={0x202, 0xa, &(0x7f0000000200)=[0x80000000, 0x1000, 0x0, 0x10, 0x5, 0x9, 0x6, 0xaf90, 0xa, 0x3c], &(0x7f0000000240)=[0x6, 0x10001, 0xc0f5], &(0x7f0000000280)=[0x9, 0x7c3f], &(0x7f00000002c0)=[0x5, 0x9, 0x3b0, 0x7ff, 0x5, 0x2], 0x0, 0x4})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000340)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000340)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000380)={<r3=>r2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={&(0x7f00000003c0)=[<r4=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x6, 0x5, 0x5, 0x0, 0x0, 0x7, 0xb, 0x22, 0x7, 0x78a, 0x8000})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000006c0)={r4, 0xeb2d, 0x0, 0x5d66, 0x1000})
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000900)={0x6, 0x0, 0x0, 0xc3, &(0x7f0000000700)=""/195, 0xb2, &(0x7f0000000800)=""/178, 0x2c, &(0x7f00000008c0)=""/44}) (async)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000900)={0x6, 0x0, 0x0, 0xc3, &(0x7f0000000700)=""/195, 0xb2, &(0x7f0000000800)=""/178, 0x2c, &(0x7f00000008c0)=""/44})
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x40046402, &(0x7f0000000940)={<r5=>0x0})
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x30012, 0x0)
ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000a00)={0x3, &(0x7f00000009c0)=[{0x2, 0x1, 0x8, 0x5f}, {0x3, 0x4, 0xf7, 0x7}, {0xc, 0x2, 0x40, 0x5}]}) (async)
ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000a00)={0x3, &(0x7f00000009c0)=[{0x2, 0x1, 0x8, 0x5f}, {0x3, 0x4, 0xf7, 0x7}, {0xc, 0x2, 0x40, 0x5}]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000a80)={&(0x7f0000000a40)=[0x8, 0x2, 0xfffffff8, 0x40], 0x4, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000a80)={&(0x7f0000000a40)=[0x8, 0x2, 0xfffffff8, 0x40], 0x4, 0x4, 0x0, <r7=>0xffffffffffffffff})
mquery(&(0x7f0000feb000/0x12000)=nil, 0x12000, 0x1, 0x10, r6, 0x7fffffff)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f0000000b00)={0x9, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x80046411, &(0x7f0000000b40)={r5})
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000b80), 0x100, 0x0) (async)
r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000b80), 0x100, 0x0)
ioctl$WSDISPLAYIO_LINEBYTES(r8, 0x4004575f, &(0x7f0000000bc0))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000c00)={<r9=>0x0, 0x2, r7, 0x0, 0x80000000})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r6, 0xc01864c2, &(0x7f0000000c40)={0x0, 0x1, r7, 0x0, 0x2}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r6, 0xc01864c2, &(0x7f0000000c40)={<r10=>0x0, 0x1, r7, 0x0, 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000cc0)={&(0x7f0000000c80)=[r9, r2, r3, r10, r3, r3, r3, r2, r2, r3], 0x8001, 0xa, 0xc, 0x0, 0x0, 0x100})
flock(r0, 0x8)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x8010640d, &(0x7f0000000d00)={0x5, 0x8}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x8010640d, &(0x7f0000000d00)={0x5, 0x8})
ioctl$WSMUXIO_REMOVE_DEVICE(r8, 0x80085762, &(0x7f0000000d40)={0x0, 0x7f})
ioctl$DRM_IOCTL_MODE_CLOSEFB(r7, 0xc00864d0, &(0x7f0000000d80)) (async)
ioctl$DRM_IOCTL_MODE_CLOSEFB(r7, 0xc00864d0, &(0x7f0000000d80))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
getsockopt$sock_timeval(r12, 0xffff, 0x1006, &(0x7f0000000e00), &(0x7f0000000e40)=0x10)
r13 = kqueue()
kevent(r13, &(0x7f0000000e80)=[{{}, 0xfffffffffffffffe, 0x80, 0x40, 0x8, 0x6d3}, {{r0}, 0xfffffffffffffffb, 0x1, 0x48d7df1d6c0d5fbe, 0x3242, 0x9}, {{r6}, 0xfffffffffffffffc, 0xc9, 0x2, 0x1}, {{r8}, 0xfffffffffffffffe, 0x0, 0x4, 0x1, 0x7fff}], 0x6, &(0x7f0000000f00)=[{{r0}, 0x7ffffffffffffffe, 0x40, 0x40000000, 0x5, 0x49b4}, {{r11}, 0xfffffffffffffff6, 0x42, 0x4, 0x1, 0x2}, {{r12}, 0xfffffffffffffffc, 0x4, 0x1, 0x6, 0xd}], 0x2, &(0x7f0000000f80)={0xdbda, 0x10001})
openat$dri(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/dri/renderD128\x00', 0x20, 0x0)

3.227452611s ago: executing program 3 (id=637):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000080)={0x1, 0x408, &(0x7f0000004300)=[{0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5}]}) (async)
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000080)={0x1, 0x408, &(0x7f0000004300)=[{0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5}]})
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000)
truncate(&(0x7f00000000c0)='./file0\x00', 0x30000)

3.193457451s ago: executing program 3 (id=638):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x80, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0}, &(0x7f00000005c0)=0xc)
setresgid(r2, r2, 0x0)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0xffffaf35, 0x7f, 0x3, 0x84000001, 0x7fbefffd, 0x3, 0x10, [{0x10000000, 0x5, 0x3, 0x3f}, {0xffffff73, 0xfffffffa, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0x7, 0x46, 0xfffffff6, 0x200}, {0xac2, 0xa, 0x1002, 0x5}, {0x24020002, 0x8, 0x7, 0x89}, {0x9, 0xdf61, 0x9, 0x14}, {0x6, 0x11, 0x5, 0x6b}, {0xd1, 0x10, 0x40000003, 0xb}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x500fff9, 0x10927c, 0x4}, {0x3, 0x25, 0x19, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x0, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfffffffd, 0xfffffffd, 0x0, 0x8}]})
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x9, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x1c, 0x18, 0x2, 0x5, "ffeb14ed8f5a010500", 0x5}, 0x1c)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000140)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0xaaac, 0x0, 0x0)

3.174986964s ago: executing program 3 (id=639):
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x64, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4fc, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8041, 0xd1b, 0x100}, {0x1c7, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0xfffffff5}, {0x8000, 0x1, 0x101002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getpgrp()
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
msgget(0x3, 0x280)
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) (async)
open(&(0x7f0000000240)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x64, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4fc, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8041, 0xd1b, 0x100}, {0x1c7, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0xfffffff5}, {0x8000, 0x1, 0x101002, 0x30004}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
getpgrp() (async)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async)
msgget(0x3, 0x280) (async)

3.092839935s ago: executing program 3 (id=647):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f7)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xc}, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
r2 = open$dir(&(0x7f0000000080)='./bus\x00', 0x40, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1e0)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='c\x00')
unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='w\x00')
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
close(r2)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
unveil(0x0, &(0x7f0000001900)='c\x00')
bind$unix(r1, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x2, 0x3, 0x8}, {"93dc711489f63d88fdb1df667252963798f667da6c51c1900a3a950db4454b58f3cbbc6e9975bbb5ca327596186ee132"}}}}}})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

2.342005649s ago: executing program 7 (id=709):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x3, 0x6, 0x6, 0x8}, {0x5c, 0x12, 0x2, 0xfffffffe}, {0x9b1e, 0x7, 0xff, 0x200000}]})
r1 = socket(0x2, 0x8002, 0x0)
r2 = fcntl$dupfd(r1, 0xa, r1)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000d40)={0x10, 0x2, 0x1}, 0x10)
listen(r3, 0xadc)
r4 = socket(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r5 = open(&(0x7f0000000440)='./file0\x00', 0x80, 0x48)
ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f0000000100)={0x2, 0x8, 0x7f, 0x4, 0x84000001, 0x7fbefffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x3f}, {0xffffff73, 0xfffffffe, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0x7, 0x6, 0xfffffff6, 0x200}, {0xac2, 0x8, 0x1002, 0x800007}, {0x4020002, 0x8, 0x7, 0x9}, {0x9, 0xdf61, 0x200004f8, 0x14}, {0x6, 0x11, 0x2013, 0x6f}, {0xfffffffd, 0x10, 0x40000003, 0xa}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x10927c, 0x4}, {0x401, 0x25, 0x9, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x0, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfe3, 0xfffffffd, 0xf779, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
shutdown(r4, 0x1)
closefrom(r2)
syz_emit_ethernet(0x1000e, &(0x7f0000000600)=ANY=[])
r6 = socket(0x6, 0x1, 0x80)
sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "00000000000000000000000000000001", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))

2.203804272s ago: executing program 7 (id=723):
socket$inet(0x2, 0x8003, 0x0) (async)
open(&(0x7f0000000140)='./file0\x00', 0x80000000018a26, 0x80) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0)
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4085, 0xff5}], 0x1) (async)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) (async)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) (async)
accept$inet(r0, 0x0, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000001400)={&(0x7f0000001340)="f691d125cc29e78eddb88ba75d82b274200deda9bb3846171c8e346d277166663ab981ac9b6aaf89a2ae648e270bbadc30ed176294a69f36dac0c97cbad6e46e4af739ee5a1801702d7042e604bb6d5d19b2298697f2c4244f0f1f07c42b51e2d45e9cc093ad41a6172a008eb8153e2673cb7f1a36e108c79ee6df7917550487df3979cd8663", 0x86})

2.201709862s ago: executing program 2 (id=724):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x22)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x0, 0x4, 0x1, {[0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x5f2aba80, 0x3, 0x800a, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffc, 0x8], [0x0, 0x6, 0x0, 0xffff, 0x3, 0x0, 0x1], [0x1, 0x0, 0x401, 0x0, 0x1, 0x80000], [{0x0, 0x1}, {0xfffd, 0xffffffff, 0x3ac6}, {0xfffe, 0x0, 0x5, 0xffffffffffdffffd}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xc8, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x10000, 0x0, 0xf}, {0x0, 0x20000, 0x1000}], {}, {0x0, 0x40000, 0x5}}})
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kevent(r0, &(0x7f0000000380)=[{{r0}, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x7fffffffffffffff}], 0x9, 0x0, 0x101, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
clock_getres(0x2, &(0x7f00000000c0))
kevent(r0, 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

1.033626699s ago: executing program 2 (id=727):
setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0xe9db}}, 0x0)
openat$vmm(0xffffffffffffff9c, 0x0, 0x10, 0x0)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0xc000, 0x20016)
open(&(0x7f0000000040)='./file0\x00', 0x10028, 0x0)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
closefrom(r0)
kevent(r1, 0x0, 0xfffffffd, 0x0, 0x7, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0)
mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a)
open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
close(0x3)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="820466386f0de412398e24485f0a37cf650094bcf4a6cb3b2e8edc5888d0a426692706fd6215cd346a806a24579ed89cc6cd76b65f7be65f6aa8ef4ba3dd37e85afe6dd2895c16123384f900c8c89003203bf9fb985a8affcc73ff8016c56657bffa43b7df409d1cd734ff174520cafae417a3d02804c559ed629a791c838322af621e1856afd241e7df10b61b74d6c4eb8eed6a4e7b6eac23c440f43fe21510", 0xa0}], 0x1)
sched_yield()

1.033381545s ago: executing program 1 (id=728):
socket(0x11, 0x3, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5)
fcntl$setown(r1, 0x6, 0x0) (async)
select(0x40, &(0x7f0000000140)={0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x800, 0x0, 0x0, 0x11}, &(0x7f00000001c0)={0xff, 0x0, 0x9, 0x5, 0xfffffffffffffff7, 0x3, 0x6}, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0xa, 0x40}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x22) (async)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0x49}], 0x1)
close(r0) (async)
r2 = socket(0x6, 0x3, 0x6)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
closefrom(r3)

939.448223ms ago: executing program 7 (id=729):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
truncate(&(0x7f00000002c0)='./file0\x00', 0xafffa)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$DIOCADDQUEUE(r2, 0xc148445d, &(0x7f0000000100)={0x6, 0x8001, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x7, 0x7}, {0x2, 0xeb}, 0x7ff}, {{0x9, 0xffffff72}, {0x0, 0x101}, 0x4}, {{0xc73, 0xfffffffe}, {0x3}, 0x1}, {0x8000, 0x3, 0x8, 0x3}, 0x0, 0x1, 0x8, 0x80000001, 0x3ff}})
truncate(&(0x7f0000000000)='./file0\x00', 0xafffe)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x4, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0x101, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x1, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x6}, {0x4, 0x0, 0xfffffffe, 0x20000080}, {0x3, 0x5, 0x6, 0x2}, {0x0, 0x2000002, 0x3, 0x8}, {0x0, 0x401, 0x3, 0x1000}, {}, {0x2, 0x100, 0x31, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x1002}}})
socket(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0)
ioctl$KDSETLED(r1, 0x20004b42, &(0x7f0000000080)=0x3)
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0x68}], 0x1, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4000000000, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x200007bffffffffe}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f0000701000/0x2000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x44}, {&(0x7f00000a9000/0x1000)=nil, &(0x7f000072c000/0x3000)=nil, 0x1000}, {&(0x7f000025b000/0x1000)=nil, &(0x7f0000704000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000401000/0x1000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x20a}, {&(0x7f000021f000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf978}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f000031b000/0x1000)=nil, 0xd}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x1000009}, {&(0x7f0000108000/0x11000)=nil, &(0x7f0000714000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000051d000/0x3000)=nil, 0x1000039f7}, {&(0x7f00001e1000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x400000000005}], './file0/file0\x00', 0x1, 0x0, 0x0, 0x0, [0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})
execve(0x0, 0x0, 0x0)
r4 = kqueue()
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r6, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa)
connect(r6, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa)
connect(r7, &(0x7f0000000040)=@un=@file={0x6, 0x1, './file0\x00'}, 0xa)
ioctl$DIOCRSETADDRS(r4, 0xc4504445, &(0x7f00000006c0)={{'./bus\x00', './bus\x00', 0x4, 0x3}, &(0x7f0000000300)=[{@multicast1, '\x00', './bus\x00', 0x5, 0x4, 0x18, 0xd, 0x84, 0x80}, {@multicast2, '\x00', './bus\x00', 0x8000, 0x1, 0x1a, 0x1, 0x7, 0x3, 0x9}, {@broadcast, '\x00', './bus\x00', 0x4c, 0x0, 0x18, 0x1, 0x0, 0x7, 0x2}], 0x2, 0x3, 0x81, 0x4, 0x22ab725a, 0x7, 0x0, 0x9})
sysctl$kern(&(0x7f0000000040)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r5, 0x80086476, &(0x7f0000000040)={0x0, 0xffffffffffffffba, 0x0})
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x9b1c, 0x80, 0xff, 0x9}]})

879.747838ms ago: executing program 4 (id=736):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000005c0)=[{0x84, 0xf, 0x5, 0x240004}, {0x14, 0x9, 0x6, 0x8}, {0xe, 0x4, 0x4, 0xffffbfff}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])

878.825066ms ago: executing program 4 (id=737):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x8, 0x21)
ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000040)=0x6)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x3, 0xffffffff, 0xffffffc0, 0x8623, "0100012d29fb000700000000098002005e00"})
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dee2ebb83bdabb1a482a434cb226982b61251875ea9f8e163607cd9028623c57c3bbc52fe4f81316b8b8755cef4e4e912eb503dc2228e788dd2dbd04bd5ed71ab13d7f6f79c5c413165778144c7e4e262a62458a76d2b9c9e85925d5dc7d4fc91bce47ad6346d3b25d14db3432fa96810273b7670a", 0x75}], 0x1)

877.520739ms ago: executing program 4 (id=738):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
select(0x40, &(0x7f0000000180)={0x9, 0x3, 0x2, 0xfffffffffffffffd, 0x2800000000000001, 0x100000001, 0x4, 0x80000000}, 0x0, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xef, 0x9, 0x3, 0x101, 0x4, 0x55eafbd1, 0x3, 0x10, [{0x5, 0x1000, 0x8, 0xc}, {0x8, 0x300b7fe, 0x7, 0x7}, {0x100006, 0x0, 0xa, 0x22}, {0xe0, 0x0, 0x201, 0xffffeffe}, {0x7, 0x1, 0x80000001, 0xffff}, {0x2, 0x6, 0x7fff, 0xc}, {0x1, 0x8, 0x7, 0xfffffffb}, {0x5, 0x3, 0xfdf2, 0x1}, {0x401, 0x5, 0x34, 0x6}, {0xfefffc04, 0x5, 0x6}, {0x8, 0x2, 0x5, 0xe1}, {0xcb, 0x6, 0x200, 0x8}, {0x2100df, 0x6, 0x5, 0xfffffc00}, {0xffff7fff, 0xe2, 0xfffffff5, 0x33}, {0x5, 0x8, 0x28, 0x7}, {0x8, 0xd655, 0x6, 0x2}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x80000065})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$FIOASYNC(r2, 0x80047469, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f0000003d00)=[{&(0x7f00000019c0)="e8", 0x1}], 0x1)
clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f})
r4 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100))
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r6 = socket$inet6(0x18, 0x1, 0x6)
setsockopt$sock_int(r6, 0xffff, 0x1, &(0x7f0000000080)=0x1f, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x3, "00000000000000000000000000001700", 0x80000000}, 0x1c)
kevent(r5, &(0x7f0000000240)=[{{r2}, 0xfffffffffffffff8, 0x6, 0xf0000000, 0x8, 0x800}, {{r2}, 0xfffffffffffffffb, 0x4, 0x1, 0x6, 0x3ff}, {{r1}, 0xfffffffffffffff6, 0x40, 0x20000000, 0x5, 0x401}, {{r6}, 0xfffffffffffffff8, 0x28, 0x4, 0xb, 0x1b}, {{r3}, 0x94fbd47560603bd7, 0x22, 0xf0000000, 0x7fff, 0x1}], 0x1ff, &(0x7f0000000340)=[{{r3}, 0xfffffffffffffffb, 0x14, 0x1, 0x9, 0x9}, {{r5}, 0xfffffffffffffff7, 0x41, 0x2, 0x3, 0x40}, {{r5}, 0xfffffffffffffffa, 0x42, 0x4, 0x59, 0x8}, {{r2}, 0xfffffffffffffffa, 0x85, 0x20000000, 0x1, 0x1}], 0xffff, &(0x7f0000000400)={0x2, 0x1ff})
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d)
r7 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0x2b)
ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x1)
close(r0)
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$DIOCGETLIMIT(r8, 0xc0084427, &(0x7f00000003c0)={0x0, 0xd})
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)

840.009874ms ago: executing program 2 (id=740):
syz_emit_ethernet(0x3e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00080630fe800005c15d6fb073cb97ae000000000000000000000000bb"])
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, 0x0, ""/508}, &(0x7f0000000240)=0x1fe)
closefrom(r0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000025c0), 0x80, 0x0)
ioctl$DIOCRCLRTABLES(r1, 0xc450443c, &(0x7f0000002600)={{'./file0\x00', './file1/file0\x00', 0x40, 0xe5}, 0x0, 0x0, 0x0, 0x81, 0x52d, 0xfff, 0x6, 0x6a, 0x3})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$DIOCGETLIMIT(r2, 0xc0084427, &(0x7f00000003c0)={0x0, 0xd})
fchmod(0xffffffffffffffff, 0xa4b68ccbcb05970e)

837.30483ms ago: executing program 2 (id=742):
sysctl$hw(&(0x7f0000000040)={0x6, 0x9}, 0x2, &(0x7f0000000100)="304f95fd070db0fe4a7aaa4005193fa35553c88f450573388a938a74d9ec24415423b985dc7e8481b6ebd7e996b31041cc38ab31fd5eb5e9402661510a08b7cdf9e2e6ca48cacae7a1230863d079e9ec74da01d3af7b8f04e61f82c20ff390b1608161a5af9c0c440647dd6986c784fe", &(0x7f0000000080)=0x70, &(0x7f0000000080), 0x0)

833.526422ms ago: executing program 2 (id=743):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
select(0x40, &(0x7f0000000000)={0x1b, 0x4, 0x204, 0x3, 0x0, 0xfffffffffffffff9, 0x3ffffffffffff9, 0xffffffffffffffff}, 0x0, 0x0, 0x0)
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x0, 0x90}, 0x0, 0x0, 0x0, 0x7c17, 0x0, 0xf0, 0x7fffffff})

811.654716ms ago: executing program 7 (id=747):
r0 = socket(0x2, 0x3, 0x15)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, 0xffffffff}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
connect$unix(r0, &(0x7f0000000000), 0x10)
sendmmsg(r0, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}, 0x38, 0x4)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0xa0000204}, 0x4, 0x0, 0x0, 0x0, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x0, 0x1, './file0\x00'}, 0xa)
write(r0, &(0x7f0000000100)="24a8b6417fda1e2818f88628a166d5953cb605e099302b1a898f98f0fb0fd57c88ad49c866cc0c1ba8f94cab55d7fb8e04f64a5403624f9b8b3d51a17958868c49f099ffc02eeba049cc157018455fcf593d80f2ae86adcb79799d8aac1badd5d12f6d5bddc00adc136f4e10e976", 0x1f)

737.885992ms ago: executing program 7 (id=749):
r0 = msgget(0x3, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0}, &(0x7f00000005c0)=0xc)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async)
setresgid(r2, r2, 0x0) (async)
fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000340)={<r5=>0x0}, 0xc)
r6 = socket$inet(0x2, 0x2, 0x0)
fcntl$setstatus(r6, 0x4, 0x7b8f91c5333d655e)
r7 = getpgrp()
r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="6532da3d09ffba803c07ae4ccb4b5feccd7bf20215bbfc892edcbad14adc6e7876c72ad7c8947be7095c4952f73ed3f08e1ceb26f71b03605c6fc0f2dcd930adaad224d766797bdb84793f010e0d93baa317be246e2e", 0x56}, {&(0x7f0000000080)="a9afbcd8dd928858f78923", 0xb}], 0x2)
execve(0x0, 0x0, 0x0) (async, rerun: 32)
fcntl$setown(r6, 0x6, r7) (async, rerun: 32)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x0, r2, r3, r4, 0x81, 0x401, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x5, 0x1, 0x0, r5, r7, 0x8dc, 0x0, 0x80, 0x0, 0x8})
getrusage(0x1, &(0x7f00000001c0)) (async)
sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, &(0x7f0000000040)="0e00000000000000", &(0x7f0000000080)=0x8, &(0x7f00000000c0)="3cb1e8d79ec135fd2a18e3e94a56093baf4db335abf650961cec97ce6404bc5ce2d3152713fe3bf07e8534a3ad10e4177c88fe0cc092d075c0b8be65c62c04dc14b82c9da0c2f9e8cd762bb67bac6d358e952f2c3ba1905625baa1884a9d8161b10e73125db9a092f612242276bd8d141312cd3a822919933c73edb3c62a2695b38b6483c6e7f9aaa4de4df6cf4e92dfbcee43d7a287ee8e5ced89a4dc206bb9098e02bc4b7967844cd6feae6898296f1f5e47a14e0d738bd1bc9837a07e897e717ab0fd1179d2651ccf041c0d51", 0xce) (async)
sysctl$kern(&(0x7f0000000300)={0x1, 0x21}, 0x2, 0x0, 0x0, 0x0, 0x0)

737.157142ms ago: executing program 5 (id=750):
chroot(&(0x7f0000000740)='.\x00')
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x78) (async, rerun: 32)
unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='w\x00') (async, rerun: 32)
unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00')

736.80979ms ago: executing program 5 (id=751):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xb, 0x2}, 0xc) (async)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xb, 0x2}, 0xc)
shmctl$IPC_STAT(0x0, 0x2, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000280)={{0x1c, 0x18, 0x1, 0x9, "cb61a1f7fedf77855212dfdd5f9ff99d", 0xfd}, {0x1c, 0x18, 0x0, 0xfff, "c8bc709ba20c90e4f55158b17f6430cb", 0x7ff}, 0x7, [0x80000000, 0x6, 0x7, 0x3, 0x5, 0x11e6b421, 0xfffffff1, 0x1]}, 0x5c) (async)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000280)={{0x1c, 0x18, 0x1, 0x9, "cb61a1f7fedf77855212dfdd5f9ff99d", 0xfd}, {0x1c, 0x18, 0x0, 0xfff, "c8bc709ba20c90e4f55158b17f6430cb", 0x7ff}, 0x7, [0x80000000, 0x6, 0x7, 0x3, 0x5, 0x11e6b421, 0xfffffff1, 0x1]}, 0x5c)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, 0x0)
r1 = socket(0x2, 0x2, 0x3a)
setsockopt(r1, 0x29, 0x6c, 0x0, 0x0) (async)
setsockopt(r1, 0x29, 0x6c, 0x0, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000580)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)
setresuid(0x0, 0xee00, 0x0)
r4 = shmget$private(0x0, 0x1000, 0x82, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x182, 0xd181, 0x0, 0x0, 0x9}, 0x4, 0x0, 0x0, 0x5, 0x0, 0x42, 0xb, 0xffffffff, 0x0, 0xc, 0x3})
shmat(r4, &(0x7f0000ff9000/0x2000)=nil, 0x2000)
write(r3, &(0x7f00000002c0)="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", 0xfffffdaf)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
getresuid(0x0, &(0x7f0000000180), 0x0)
closefrom(r2) (async)
closefrom(r2)
syz_open_pts() (async)
syz_open_pts()
r5 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
write(r5, &(0x7f0000000280)="8920200909", 0x5) (async)
write(r5, &(0x7f0000000280)="8920200909", 0x5)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async)
r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r7 = socket$inet(0x2, 0x3, 0x20)
setsockopt$inet_opts(r7, 0x0, 0x69, &(0x7f0000000240), 0x0) (async)
setsockopt$inet_opts(r7, 0x0, 0x69, &(0x7f0000000240), 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x8015, r6, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x8015, r6, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

663.216669ms ago: executing program 2 (id=754):
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r0 = syz_open_pts()
close(r0)
getsockname$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x1c)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x7, 0x43, 0x7, 0x160350d, "a6fce00a42700907efdd00003700", 0x2, 0xd})
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xffffffffffffffff, 0x4)
getresgid(0x0, &(0x7f0000000380), &(0x7f00000003c0))
writev(0xffffffffffffffff, &(0x7f0000002a40)=[{&(0x7f00000009c0)="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", 0x3f9}], 0x1)
setsid()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

621.085936ms ago: executing program 0 (id=759):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)
mkdir(&(0x7f0000000240)='./file1\x00', 0xc0)
rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00')

539.263428ms ago: executing program 5 (id=764):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000340)={'./file0\x00', &(0x7f00000000c0)=""/57, 0x4, 0x80000000, 0x7, 0x3})
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x6, 0x0, 0x8, 0x100200000, 0x8, 0x8, 0x7fff, 0x3ff, 0x0, 0x2f41, 0x101, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0x8, 0xdd07, 0x1, 0x525, 0x800000000006, 0xa6e, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000002, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffd, 0x1], [{0x0, 0x0, 0x0, 0x80}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x100009, 0xe7, 0x2000000000000002}, {0x7f, 0x100, 0xfffffff7}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x100005, 0x2, 0x3}, {0xfbfe, 0x6811, 0x6d9, 0x4}}})
r1 = kqueue()
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x23}, 0x4, &(0x7f0000000140)="e33745e84d5e", &(0x7f0000000000)=0xff67, 0x0, 0x0)
sysctl$hw(&(0x7f0000000040)={0x6, 0x1d}, 0x2, 0x0, 0x0, &(0x7f0000000000)="538e", 0x2)
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)

538.491254ms ago: executing program 0 (id=765):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x10)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x101, 0x0, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7})
closefrom(r0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x6, &(0x7f0000000200)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x40, 0x4, 0x800}, {0x7f, 0x0, 0x0, 0xbc4}, {0x5, 0x4, 0xf, 0x4}, {0x4, 0x9, 0x5, 0xfd402bb9}, {0x7, 0x2b, 0xeb, 0xdb4f}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000001c0)={0x3, 0x7})
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x2}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {0x0, 0xffffffff}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]})
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x3, 0x2}, {0x0, 0xfffffffb}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xc8}, {0x5, 0xfffffffd}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x1, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x2000000}, {0x0, 0xffff}, {0x3, 0x4}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x2000}, {0x1, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xda}, {0x3, 0x3}, {0x1, 0x2}, {0x2, 0x257fd}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
write(r2, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe)
bind$inet(r1, &(0x7f0000000180)={0x10, 0x2, 0x1, 0x7}, 0x10)

382.654111ms ago: executing program 0 (id=766):
pledge(&(0x7f0000000000)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95  \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kG\x00\x00\x00\x00\x00@\x00\x01\x00\x00\xeb\x91vr)\\\x9el\x03(r\xd4\x9a\x0f\f\xdb<\xb4B\x95\x15\xb6\r', 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x78}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0)

382.169264ms ago: executing program 5 (id=767):
setgroups(0x0, 0x0)
r0 = syz_open_pts()
sysctl$kern(&(0x7f0000000000)={0x1, 0x2a}, 0x2, &(0x7f0000000040)="e1f914c2b1046181a8e6c13ce85b7bad6a7091dc3b3ba6aae78e1416a0a9286c0967b4ba5528a0d771c06f54c6ddacf2", &(0x7f00000000c0)=0x30, &(0x7f0000000100), 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(r0, r1, r2)
fchmod(r0, 0xc92)
r3 = socket(0x2, 0x3, 0x2f)
r4 = dup(r3)
setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
sendto$inet(r3, &(0x7f0000000080)="3101f8b7c7632e5f", 0x8, 0x400, &(0x7f0000000280)={0x10, 0x2, 0x0, 0x63e8}, 0x10)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000040), 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x5108, 0xbcbf, 0x0, 0x4, "a22df094a51b4ae1cebb985096cfd8a3f4c10893", 0x8, 0x80000001})

381.912123ms ago: executing program 0 (id=768):
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7d, 0x8200, 0x0, 0xfffc}}}}}})

381.518609ms ago: executing program 0 (id=769):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x43, 0x40, 0x6, 0x6, 0x20000000003, 0xd, 0x6, 0x40000004000, 0x6, 0x2, 0x1, 0x91c, 0x8, 0x2000180, 0x1ddba705, 0x1d3, 0x76, 0xfffffffffffffff9], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x2], [0x6, 0x7, 0xb, 0x8000000008, 0x10000, 0x400008000000210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x8, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x44, 0x335}, {0x2, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x3, 0x40}, {0x4, 0x4, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x0, 0x1}, {0x6, 0x10000, 0x0, 0x5}], {0x6123, 0x0, 0x401, 0x8}, {0xfffe, 0xffffbfc0, 0x5, 0x4}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000080)=@abs={0x3, 0x1, 0x0, 0x3}, 0x8) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
socket(0x18, 0x3, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
r1 = socket(0x18, 0x3, 0x0) (async)
setitimer(0x1, &(0x7f0000000140)={{0xf32b473, 0x100000000000009}, {0xffffffffffffff80, 0x80000000000000bc}}, 0x0)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))

380.957568ms ago: executing program 0 (id=770):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000580)}) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0xc0104401, &(0x7f0000000040)={'tap', 0x0}) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x7d) (async)
unveil(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='x\x00') (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x7, 0x0, 0x8, 0x100200000, 0x8, 0x8, 0xdf5f, 0xfffffffffffffffe, 0x0, 0x2f01, 0x101, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000005], [0xfffffe0000000002, 0x80000001, 0x1, 0x525, 0x4, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3feffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x2, 0x7ffffffffffffffb, 0x80, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x0, 0xcb9d}, {0x7, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x100009, 0xe7, 0x2000000000000005}, {0x7f, 0x0, 0xfffffffa}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x2, 0x3}, {0xfbfe, 0x6811, 0x8, 0x9}}})
getgroups(0x7, &(0x7f0000000000)=[0x0, <r2=>0x0, 0xffffffffffffffff, 0x0, <r3=>0x0, <r4=>0x0, 0x0])
setresgid(r4, 0xffffffffffffffff, r3) (async)
setresgid(r2, 0x0, r3)
r5 = socket(0x18, 0x3, 0x0) (async)
r6 = kqueue()
kevent(r6, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0xd3, 0x8, 0xfd, 0x10000}], 0xe, 0x0, 0x9b66, 0x0) (async, rerun: 64)
kevent(r6, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x8, 0x3fffffff, 0xfb, 0x13fff}], 0x1, 0x0, 0xfffffff7, 0x0) (async, rerun: 64)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) (async, rerun: 32)
ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (rerun: 32)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa43029cb73dbf1a1f7a2065ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031faef03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fbde0652f35e45bdaa3afd86c4fe557d3d069433e9890b017ceefabee7e3ebe806fdb4f6af569ae9448677cc2fb7f6443f259859ce3763cc529071cda7a4b61a7b639e519f422a7be0c5da0f0eae59d00"/202, &(0x7f0000000080)=0x5a, &(0x7f0000000280)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496852a9ad15fa4b0bc2c6ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b5", 0xfffffffffffffe19)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000140)="9b1809ff", &(0x7f0000000240)=0x4, 0x0, 0x0)

380.23888ms ago: executing program 3 (id=647):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f7)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xc}, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
r2 = open$dir(&(0x7f0000000080)='./bus\x00', 0x40, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1e0)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='c\x00')
unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='w\x00')
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
close(r2)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
unveil(0x0, &(0x7f0000001900)='c\x00')
bind$unix(r1, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x2, 0x3, 0x8}, {"93dc711489f63d88fdb1df667252963798f667da6c51c1900a3a950db4454b58f3cbbc6e9975bbb5ca327596186ee132"}}}}}})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

379.897956ms ago: executing program 7 (id=771):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x7, 0x101, 0x80000003, 0x1, 0x80000000, 0x10, [{0x4, 0x9, 0x0, 0xfffffffb}, {0x7, 0x6, 0x6, 0xfffffffc}, {0x8, 0xf86, 0x0, 0xaf9}, {0x2000004, 0x800, 0x7, 0x40}, {0x3, 0x7fffffff, 0x0, 0x7}, {0x2, 0x6, 0x3, 0x101}, {0xcdf, 0x1, 0x1, 0x6c}, {0x200a, 0x80803, 0x17, 0x8}, {0x0, 0x4, 0x7, 0x9}, {0x6, 0x8002, 0x100000c7, 0x4088}, {0x4, 0xffffaac5, 0x34, 0x10000aeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffff9, 0x6, 0x6}, {0x4, 0x7, 0x4}, {0x0, 0x1, 0x0, 0x30000}]})
r0 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0))
r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80, 0x104)
r2 = openat$dri(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/renderD128\x00', 0x10000, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000340)={<r3=>0x0, 0x4, &(0x7f0000000280)=[0x9, 0x5, 0x3, 0xb40], &(0x7f00000002c0), &(0x7f0000000300)=[0xffc0, 0xfff8, 0x6, 0x7, 0x2, 0x7]})
ioctl$DRM_IOCTL_MODE_CLOSEFB(0xffffffffffffff9c, 0xc00864d0, &(0x7f00000002c0)={<r4=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000003c0)={r3, r4, 0x841943c58d58e09f, 0x0, 0x4})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000040)={0x0, 0xfffffffc, {0x100000000000000, 0x1}})
r5 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x615, 0x0)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
fcntl$lock(r6, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
fcntl$lock(r5, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089})
r7 = semget(0x0, 0x1, 0x2c1)
semop(r7, &(0x7f0000000000), 0x23)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a})
r8 = syz_open_pts()
close(r8)
syz_open_pts()
readv(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1)
execve(0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100200086dd6603816a0000672e00f8ff00000000000000000000000000fe800000000065c60000000000000000"])
r9 = socket(0x2, 0x2, 0x0)
connect$unix(r9, &(0x7f0000000000), 0x10)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]})

291.237121ms ago: executing program 6 (id=774):
mkdir(&(0x7f0000000040)='./file0\x00', 0xb)
rmdir(&(0x7f0000000000)='./file0\x00')

288.222514ms ago: executing program 6 (id=775):
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x184)
mmap(&(0x7f0000283000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x190)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000005c0)=[{0x81, 0xf, 0x5, 0x240004}, {0x14, 0x9, 0x6, 0x6}, {0xe, 0x3, 0x4, 0xffffbfff}]}) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000005c0)=[{0x81, 0xf, 0x5, 0x240004}, {0x14, 0x9, 0x6, 0x6}, {0xe, 0x3, 0x4, 0xffffbfff}]})
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) (async)
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])
truncate(&(0x7f0000000140)='./file0\x00', 0x30001) (async)
truncate(&(0x7f0000000140)='./file0\x00', 0x30001)
sysctl$hw(&(0x7f0000000240)={0x7, 0x14}, 0x2, &(0x7f0000000380), 0x0, 0x0, 0x0) (async)
sysctl$hw(&(0x7f0000000240)={0x7, 0x14}, 0x2, &(0x7f0000000380), 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
kqueue() (async)
r4 = kqueue()
kevent(r4, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmmsg(r5, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe)

283.274021ms ago: executing program 4 (id=776):
mknod(&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x6)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
chmod(&(0x7f0000000080)='.\x00', 0x3db)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r0=>0x0, <r1=>0x0}, 0xc)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
chmod(&(0x7f0000000080)='.\x00', 0x3db)
setuid(0xffffffffffffffff)
mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20, 0xffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0}, &(0x7f00000005c0)=0xc)
r3 = socket$inet6(0x18, 0x3, 0x6)
connect$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x2000090, "fe80000400000000a81c09000000fdff", 0x2}, 0x1c)
r4 = fcntl$dupfd(r3, 0xa, r3)
getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200))
setresgid(0x0, r2, r2)
socket(0x11, 0x3, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x2285b9a)
msgget(0x3, 0x280)
r5 = getgid()
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000300)=0xc)
setgroups(0x9, &(0x7f0000000440)=[r2, r1, r2, r2, r2, r5, r2, r2, r6])
r7 = open$dir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x10)
mkdirat(r7, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
setuid(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)

196.761312ms ago: executing program 4 (id=777):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
sysctl$hw(&(0x7f00000000c0)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0x7, "759f5a01005ada388e47a1e7a5446cfe"}, {0x1c, 0x18, 0x3, 0x4, "00000000000000000000000000000001", 0x5}, 0x0, [0x3ef8, 0x9f72, 0x2000100, 0x5, 0x8, 0x7f, 0x800, 0x4]}, 0x5c)
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f00000000c0)={0x0, <r1=>0x0}, &(0x7f0000000100)=0xffffffffffffff79)
setresuid(r1, r1, r1)
sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, &(0x7f0000000100)="55ad73722cdde2567877affb8ff88ff31949dc37de1142f113e7fd42d80a31da2ce7547aa0f547fcd4fcac83b7bd95bfb3632abf2cb47bff6086afed86e98ce24c8c5f1ca3603f7ef415f56f896479fea86f443a077df527241261bdf5a0c301b0f268349dc164e569b63b08f5006c505cd3cee21ff479d734c61d4e16", &(0x7f0000000180)=0x7d, &(0x7f00000001c0)="c0f6d93513c4e3246492f15b", 0xc)
sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f0000000000), &(0x7f0000000080), 0x0, 0x0)

196.2237ms ago: executing program 4 (id=778):
setitimer(0x2, &(0x7f0000000000)={{0x8, 0x4}, {0x8000000000000001, 0x80}}, &(0x7f0000000040))
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x590, 0x9}, {0x8, 0xffffffffffffff76}})
r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CLOSEFB(0xffffffffffffff9c, 0xc00864d0, &(0x7f0000000140)={<r1=>0x0})
ioctl$DRM_IOCTL_MODE_CLOSEFB(r0, 0xc00864d0, &(0x7f0000000180)={r1})
pwrite(r0, &(0x7f00000001c0)="6460e30f7987dd0ca13148ec94b649f720ddafe8efbda6616c52f03f0a6d062215c84e30b6b18c158ededcbcabe2ae29dfa85bb0d85642b0ee7d306355b0ba4bf75571f6bdab3204a9cd512274c41bc57126c850bd4d20f61ef9b2e4ebb4f9e992165b8e3864de112f1b042404", 0x6d, 0x4)
r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x48100, 0x21)
utimensat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x5, 0xfff}, {0x7155, 0xd}}, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
ioctl$AUDIO_GETPAR_ctl(r0, 0x40404124, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000380)={r1, 0x3, 0x5, 0x4, &(0x7f0000000340)=[{0x1000, 0x7, 0x7}, {0x2, 0xbb, 0x5, 0x1}, {0x3, 0x1ff, 0x9}, {0x7b5, 0xc5c, 0x2, 0x2}]})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01864c1, &(0x7f0000000400)={r3, 0x2, <r4=>0xffffffffffffffff, 0x0, 0x400})
ioctl$DIOCGETRULES(r0, 0xcd604406, &(0x7f0000000440)={0x2, 0x3b, 0x2, './file1\x00', './file0\x00', 0x0, "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"})
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000011c0), 0x20000, 0x0)
minherit(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)
preadv(r4, &(0x7f0000001340)=[{&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/18, 0x12}], 0x2, 0x5)
renameat(r0, &(0x7f0000001380)='\x00', r4, &(0x7f00000013c0)='./file0\x00')
flock(r0, 0x2)
fcntl$getflags(r5, 0x3)
ioctl$DIOCRCLRTABLES(r4, 0xc450443c, &(0x7f0000001400)={{'./file0\x00', './file0\x00', 0x0, 0x40}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1, 0xc53, 0x5c, 0xac1})
fcntl$setown(r0, 0x6, 0x0)
ioctl$KDGETLED(r0, 0x40044b41, &(0x7f0000001880))
minherit(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2)
mknod(&(0x7f00000018c0)='./file1\x00', 0x1, 0x80000000)
pipe2(&(0x7f0000001900)={<r6=>0xffffffffffffffff}, 0x10000)
ioctl$TIOCCBRK(r6, 0x2000747a)
ioctl$FIOGETOWN(r4, 0x4004667b, &(0x7f0000001940))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000001a80)={&(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x4, 0x8, 0x0, 0x6, 0x6ba6483f, 0x3})

195.48275ms ago: executing program 5 (id=779):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x880, 0x0)
ioctl$DIOCRCLRADDRS(r0, 0xc040446c, &(0x7f00000000c0)={{'./file0\x00', './file1\x00', 0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x400, 0x22b6968c, 0x2, 0x94}) (async)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async)
r1 = syz_open_pts()
acct(&(0x7f0000000000)='./file0\x00') (async)
close(r1) (async)
syz_open_pts() (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0x9}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f0000692000/0x2000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x80000000000005}, {&(0x7f0000107000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000243000/0x1000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000693000/0x4000)=nil, 0x303}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfda1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x8, 0x0) (async)
setuid(0xffffffffffffffff)
setegid(0xffffffffffffffff) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async)
writev(r2, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="be23eec72ace9149e98025f57d1171f5b0a52bb52f6e2edab8c7db67c14831b4279b4321925149cf4f74bb672df9c4cb670dc9e90d66a9a9610330d946dd46a3ec699ed578b7dbc9fbc3d208c2b36fb8c4d329d82060370433cc698e4e5712062c7ea59b7ca86afe74a24e7a46fdc845c7094d73ad5dc22f0fb3069822721dbd011d9380147d7e67b17fcb4b3ce1665c8164a57215a913980b5c88802573c533aab0cc74d660bb47b3d12a276c4dc58623", 0xb1}, {&(0x7f0000000b80)="cc47343ce33443f073c69046c4dddb90d0585ac7207b5a78a9232a040ee97d3c80cb06df101dee4dee9e6aaa081c5b3a27ad572c9b281573c36de583cf6733a8eba3265a1b1a10af5c622cd8ce646a9b30fb678f23daed0ead3e542ad52ed960152d9036e1b4f1233fe0179ef9e7759ad222e005522edf684dc6631e5c4b99cac55a514a3a75760b0179e0780a0260fd0e31a20a173cc2958618c6174d5f0f0409155f630e049945f0f2130e12b990dd", 0xb0}], 0x2) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCGDLTLIST(r3, 0xc010427b, &(0x7f0000000140)={0x0, 0x0}) (async)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x7, 0x3, 0x7, 0x170350d, "04f0eb091a0004be1f0500e0ff22700d07ffdd00", 0x8, 0xd})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

190.442557ms ago: executing program 6 (id=780):
r0 = socket(0x2, 0x3, 0x2f)
r1 = socket$inet6(0x18, 0x5, 0x6)
setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x2, 0x4)
recvmmsg(r1, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x60000}, 0x38, 0x2043, 0x0)
r2 = dup(r0)
setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
sendto$inet(r0, &(0x7f0000000080)="3101f8b7c7632e5f", 0x8, 0x400, &(0x7f0000000280)={0x10, 0x2, 0x0, 0x63e8}, 0x10)
r3 = socket(0x18, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0x9, "00000000000000180c553fdbf094d700", 0x2}, 0x1c, 0x0, 0x45, &(0x7f00000002c0)=ANY=[@ANYBLOB="10eb91ef844e04eff204f0aa6a5328c34741", @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="f612eebe04eccf6840e3d0b1b0e67e7349841c5255ceb061aa65f95cce3c87634c76ba7dea3501db10d31aebe437350d66f248757150517615cb2ed9d17187d568fa3dcf9e19800bc139a30a6b976912e962cb99f3c15fa6306ded6fdb43ddb0174a4cd724af8ce1f696763d6ffb4e5bb488b3737c42396a0e72f61fa46ae0bb44c0cc3407e297cdcc0d88a4ba5781f8ed32a0a03c8abba55a2d7cc058fc7211ad463e625a187b6dba9f68fd1457f03aa06473c73b32cec2cb84e851b10853253dd7f32654348b"], 0x1c}}, 0x38, 0x8)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000a, &(0x7f0000000180)="83", 0x1)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, 0x0, 0x0)
r5 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r5, 0x808c694d, &(0x7f00000001c0))
open(&(0x7f0000000040)='./file0\x00', 0x20, 0x24)

188.745329ms ago: executing program 5 (id=781):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = kqueue()
openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000000)={0x80000ffffffff, 0x7f})
kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0x23, 0x2, 0x4, 0x6}], 0x1, 0x0, 0x1, 0x0)
closefrom(r0) (async)
closefrom(r0)

85.252783ms ago: executing program 1 (id=782):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x8, 0x80000000, 0x1, 0x5fffd657, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xfffffff8, 0x1})
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f284547ec87ae3ad1aad0ee27ee88eacb67a08038280f2a01ae7a48358ae16e2fba4ee0ddad57fa2b502658b5723516552c4349404b44e61906eb367dd016164244e321c3f3fa4a301cca907a63fe5682806e86f7b9ed732b01c843a7c13b71430810706a94f10d2cb6414e1fffa7b8cceb21a5bb7f7e286998196fa9ddbf1180a09fbdfb5fa39c5351cac68378d67e9655cdbf971126f853c896ee40a964e51b93e9f8cd2761da19460ae1277fee651ab0c75d0c5b1bf66cfd5838c158d811facece8dcef640f9c9e", 0xc9}], 0x1)

75.712895ms ago: executing program 6 (id=783):
syz_open_pts() (async, rerun: 64)
r0 = kqueue() (rerun: 64)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x1, 0x3, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x8, 0x5, 0xfffffffffffffff7, 0x100], [0x9, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80104000, 0xfffffffffffffffd, 0x0, 0x0, 0x48], [0x7, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x295dcbee, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xff9}, {0x1008, 0x0, 0x8, 0x3}, {0x8000, 0x400, 0x10, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x1fd, 0xc}], {0x0, 0x25, 0x1, 0x849}, {0x7, 0x40010, 0x4, 0x2}}})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async, rerun: 64)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f0000000600)=[{0x0, 0x7, 0xf8, 0x200007}, {0x2d, 0x0, 0x2, 0x9}, {0x7, 0x40, 0x7, 0x9}, {0x87, 0x0, 0x0, 0x800004}, {0x9b1e, 0x0, 0x0, 0xb}]}) (async, rerun: 64)
syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaab555a997aaaaaaaaaa86dd6603816a00080630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e214e2200089078"]) (async)
kevent(r0, &(0x7f00000000c0), 0xffffffff, 0x0, 0xffffffff, 0x0)
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x6, 0x6}, {0x5, 0x2}], 0x2}) (async)
syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x4)

71.143703ms ago: executing program 6 (id=784):
r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$TIOCEXCL(r0, 0x2000740d)
ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000040)=0x2)
ioctl$DIOCGETTIMEOUT(0xffffffffffffffff, 0xc008441e, &(0x7f0000000080)={0x9, 0x2})
r1 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x8, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=[{}], 0x3e, 0x0, ""/32, 0x0, 0x1})
ioctl$TIOCNOTTY(r0, 0x20007471)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
poll(&(0x7f0000000200)=[{r0, 0x8}, {r1, 0x41}, {r1, 0x8}, {r2, 0x80}], 0x4, 0x3)
semget$private(0x0, 0x2, 0x10)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x40046402, &(0x7f0000000240)={<r3=>0x0})
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x80046411, &(0x7f0000000280)={r3})
pread(r1, &(0x7f00000002c0)="8c3b61f3278d4504ea31bfbee119f87188f4ca886f5d95f575d49ce237e010dd761ce8c1b315e82e7bcd5fdf23a2b75e1a6903e3983c9673ba955974c4c27406081e639d3e28d88a8e50b30fd3179ba489bc294f6a26cf2010ab880389b7f0935d938a931fe48113140307", 0x6b, 0x7)
syz_open_pts()
fcntl$getflags(r1, 0x1)
ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000340)={0x2, 0x8, 0xfffff000, 0xee, 0xc0, 0x8, <r4=>0x0, 0x7fff})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000380)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000003c0)={0x0, 0x0, 0x67, 0x31315659, 0x1, [<r6=>0x0, 0x0, <r7=>0x0], [0xff, 0x6, 0x8, 0x72], [0x2, 0x0, 0x6, 0x4], [0x7, 0x101, 0x18f3e458, 0x7]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000440)={0x0, 0x8, 0xffffffff, 0x20203244, 0x3, [0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0], [0x1, 0x9, 0x6, 0x100], [0xffffffff, 0x0, 0x8, 0xf51], [0xe7, 0xff, 0x6767, 0x9a4]})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x1, 0x5, 0x20203243, 0x1, [r4, r5, r6, r8], [0x0, 0x1, 0x0, 0x6], [0x3, 0x5, 0x6, 0x3ff], [0x100, 0x1, 0x1, 0xf]})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={<r11=>r9})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000580)={0x0, 0xe, 0x90a0, 0x35315852, 0x0, [r4, r10, r7, r11], [0x42, 0x200, 0x3ed9d2bb, 0xfffff192], [0xcbbe584, 0x4, 0x6, 0xc], [0x10000, 0xb2b6, 0xe, 0xff]})
r12 = openat$dri(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dri/card0\x00', 0x80, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000640)={<r13=>0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000680)={<r14=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000006c0)={<r15=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000700)={<r16=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000740)={<r17=>0x0, 0x0, r2, 0x0, 0xd})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000780)={<r18=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r12, 0xc01064c4, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, r13, r14, r15, r16, r17, r18, 0x0, 0x0, 0x0], 0xa})

35.519393ms ago: executing program 6 (id=785):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x50, 0x10, 0x5, 0x4}, {0x6, 0x80, 0x3, 0xfffff802}]})
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x2, 0x3, 0x8}}}}}})
close(r0)

0s ago: executing program 1 (id=786):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x8)
r1 = syz_open_pts()
ioctl$TIOCSTART(r1, 0x2000746e)
getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8)
ioctl$DIOCKILLSTATES(r0, 0x0, &(0x7f00000000c0)={{0x2, 0x0, 0x3}, 0x14, '\x00', 0x9, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@loopback, 0x0, 0x0, 0x7}, [0xf606, 0x7], 0x4, 0x6, 0x2}, {@any={'\x00', 0x0, 0x0, 0xd5}, [0x6], 0xd6, 0x2, 0xfffb}, './file0\x00', './file1\x00', 0x7, 0x5})
ioctl$DIOCRCLRASTATS(r0, 0xc4504448, &(0x7f0000000200)={{'./file0\x00', './file1\x00', 0x10, 0x9}, &(0x7f00000001c0)=[{@empty, '\x00', './file0\x00', 0x4cf0, 0x8, 0x1a, 0xa, 0x8, 0x6, 0x80}], 0xd369, 0x1, 0x6, 0x8001, 0x0, 0x4, 0x40, 0x6})
ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000680))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xb1)
ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f00000006c0))
ioctl$WSKBDIO_GETMODE(r0, 0x40045714, &(0x7f0000000700))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000740)={0xa, 0x8, <r2=>r1})
ioctl$DIOCRCLRASTATS(r2, 0xc4504448, &(0x7f0000000980)={{'./file1\x00', './file1\x00', 0x49, 0x6}, &(0x7f0000000780)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file1\x00', 0x1, 0x9, 0x0, 0x7, 0xb, 0x6, 0x40}, {@loopback, '\x00', './file1\x00', 0xffff, 0x6, 0x18, 0x0, 0x4, 0x9, 0x4}, {@loopback, '\x00', './file0\x00', 0x1, 0x4, 0x2, 0x9, 0x51, 0x40, 0xb}, {@multicast1, '\x00', './file0\x00', 0x5, 0x0, 0x2, 0x1, 0x2, 0xc, 0x3b}, {@broadcast, '\x00', './file0\x00', 0x5, 0x2, 0x1a, 0xef, 0x80, 0xdb, 0x29}, {@multicast2, '\x00', './file0\x00', 0x3c, 0x1, 0x18, 0x6, 0x4, 0x1e, 0xa}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xfffffffd, 0x2, 0x30, 0xfb, 0x9, 0x9, 0x4}, {@broadcast, '\x00', './file1\x00', 0x3, 0x8, 0x18, 0x7, 0x77, 0x6, 0x3}, {@remote={0xac, 0x14, 0x0}, '\x00', './file1\x00', 0x400, 0x6, 0x18, 0xc, 0x3, 0x6, 0x3}], 0xed2, 0x9, 0x8, 0xfffffffd, 0xf, 0xf6, 0x1e, 0xff})
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000e00)={0x8, 0x3, 0x3, 0xfd, "35d1b7257bc148b3d915083c0922db17a999099a", 0xff, 0x1})
ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000002f80)={{'./file0\x00', './file0\x00', 0x0, 0x1}, &(0x7f0000000e40)=[{'./file1\x00', './file0\x00', 0x0, 0x61}, {'./file2\x00', './file0\x00', 0x0, 0x3}, {'./file1\x00', './file1\x00', 0x25, 0xa7}, {'./file0\x00', './file1\x00', 0x5, 0xf}, {'./file0\x00', './file1\x00', 0x1, 0x9}, {'./file0\x00', './file1\x00', 0x14, 0x2}, {'./file0\x00', './file1\x00'}, {'./file1\x00', './file0\x00', 0x35, 0x8}], 0x2, 0x8, 0x5, 0x5, 0x80000000, 0x9, 0x4, 0x40100000})
ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000003400)={{'./file0\x00', './file0\x00', 0x6f, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x8, 0x5993, 0x2, 0x66, 0xfffffffe})
ioctl$DIOCXEND(r2, 0xc0044464, &(0x7f0000003880)=0x10001)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f00000038c0)={'./file2\x00', 0x4, 0x1, 0x3, 0x0, 0x5, 0x6b, 0x7, 0x0, 0x2, 0x8, 0x9})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000003940), 0x20000, 0x0)
ioctl$BIOCSRTIMEOUT(r3, 0x8010426d, &(0x7f0000003980)={0xfffffffffffffffb, 0x5d})
ioctl$DIOCRCLRTABLES(r2, 0xc450443c, &(0x7f00000039c0)={{'./file1\x00', './file3\x00', 0x41, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x3f, 0x0, 0x28fe, 0x0, 0x7})
ioctl$TIOCCBRK(r0, 0x2000747a)
r4 = accept$unix(r2, &(0x7f0000003e40)=@file={0x0, 0x0, ""/14}, &(0x7f0000003e80)=0x10)
lseek(r4, 0x2000000000000000, 0x2)
ioctl$DIOCRTSTADDRS(r2, 0xc4504449, &(0x7f0000003f00)={{'./file3\x00', './file3\x00', 0x47, 0xf9}, &(0x7f0000003ec0)=[{@rand_addr=0x9, '\x00', './file0\x00', 0xffffffff, 0x28, 0x0, 0x8, 0x4, 0x2, 0x7d}], 0x7, 0x1, 0x100, 0x4, 0x6eaa, 0x0, 0x60, 0xb})
ioctl$DIOCSTART(r0, 0x20004401)
connect$unix(r2, &(0x7f0000004380)=@file={0xe, 0x1, './file1\x00'}, 0xa)
sendmsg(r2, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000043c0)="a588a2179d8c2549b225c7b5ea4a2fe3e3dc59ef61451f1cf8be7942f3f401d7655d2794f229ffe0c287d4", 0x2b}, {&(0x7f0000004400)="61b12ef9f81a549ba43b15d065637d159ea9cf32e569d8c266b1e076fa3cf4d0ae4a05b115d0ff5ab44da6c22fb1f2cb7842cef27b33e409d63bf81d6f2dc927e5044b911960b47ad871682673d3b5f89e2724898eb053df3da380686b5b5cfb73fde0fb8c06af31d28500a42d74daf197054e118c05b83ab176d8e4343749f5a62e6942b154a1d460d4a6f6685abf82a89a8f83ec1d46af2c3ef6af8dacebe3c14e22ac0bbe941a72cf01c3eb7a2f59100fec9a11a44ae1b5d6c9a288c25660ab9a3944", 0xc4}, {&(0x7f0000004500)="6960f104b99cc6c003fa95c4bd03d7ab58fa8ca180bc72e6629351d474c9f97b", 0x20}, {&(0x7f0000004540)="2cc98de9e7efef9d026dee069c99945b6900fe8963944341668730f7ac96efc2381ecaff0a2fee47390a21f73027cb857776cf5ab2183d0fd78bd9f0079817205e42a0acb20e2885b6f97c3d99f3875cea0f0675f98deab8db41d0e6cc1aeaa3f204e29619aa", 0x66}, {&(0x7f00000045c0)="684a6337e2909242ac89d38514e8c31f69c5d462ba2e3c5aa32bb554b16df63a317c0b568aaf1f57f5b56ce8aaf02a35f0021815a87cb83a44508578a407d5013ab065c361ca4a635f578507e40598b9f3a32886249c7b81a15941b96d466e6b16fd8dc76484a149e8877bbb3398c2138f1645476ec094369b1a4eef79cfb669d74c2132ae0ad052ba8fa4a2184708e182c09b2ddf05", 0x96}, {&(0x7f0000004680)="3094119902d406e0d8418a70079402d1e4e521d49ec6917a5f3e152ff9b9973bac9834837410131a882dc4090147e671953d408dc0360c292711", 0x3a}, {&(0x7f00000046c0)="443c0c3f6b3b8143e39879a3767d2de1ca4625f78af6e2f1", 0x18}], 0x7, &(0x7f0000004780)=[{0x78, 0x1, 0x5f, "fb654f1503d5c20fcbfbac2ac730825a7a5b0af78e839efedb1ea563a70f07e824beb8f505d39e97c86b0fb254e01f8602fc73a74f027b650ad855e187a6a73760edbf1cb124e621ebe375d6aa7119ac5ea953661a9b64e09bd23370d6330c7ea60c292147a3f707c4"}, {0xb8, 0x1, 0xe9e2, "bf9aea8445765c616c5239e6d3a095ce80f8e498796ad3644395a738f81b2cedf69382b0c7ba154e274bb3d78cce9f064b591efb1a15e61b78d3e82480129e6d5cfd400958ee4b133f32e38b60a21fa920cb06c35b1ffe02f8e01dad55da14a99624fa0600823856413b2385f41001d26ad6ecb9c5f87e26cecfd3185761721ea21b940d93d40fdf7ae57ff379501686761614788019edb48dad3dcbd646fa8259ff8d33caf5c63ab149c195"}, {0x40, 0xffff, 0x6, "02c21f25339643cff5db37aee9c9515200932dae87b26c248d9b6fed66c364e8fca0352119c800ec97f1010b8fd67ab9408ac3"}, {0x3c, 0xffff, 0x0, "15dffaa9b821676a2b93e71c05b1360122c10fa15167aa23a558e60473376eb94279fae3440c5d7c6fd7d6b8aa77"}, {0x78, 0xffff, 0x6, "a873a881ef4fc0dde6101e401d322ce36cca30f6262be8d59f9d7357a089bf41533b7d9f65d2e09e89f1df690647d7f4f71a77e76617e0603c5f756eed7cc8968784a2fc4658a1f54dc08f27db6e88440508b4ac2eb26f4174f3f58d90bfd0a3d9f930a3fd8faab097df"}, {0x9c, 0xffff, 0x8, "2cb570cfabb42cb1213802be50e65f73bf8c5b4674a5603207c8727fcebf3b2b6214de0f9ea25b9e3e436308cc0fe6457208187830ef49ddf7751fbae9c256020f547f6d8127b6e1669b9b712eccd6aea7bcfdb8b99daa3c9a041f9354cd3e507bae651692bdef0192dde01f5f316786b3ce1d45b377a22e2853641dcaf45a62697e0fc39bc920a21aa4f91c9920"}, {0xf0, 0xffff, 0x8, "9caab29ed1c30e0d618b22f34ebd432bbec33e5605b46d28feebf306b98b9a2a93cdf4e6ab4c582a5f00bc64e4004d41d65981bdc897af45685ffc79d9a732dab18223018fa2b08ff2dadb52bd08d6dd4e272260d1d3a7bbf888d06b5b8ada110664a7f523eb979dfffbcfb309852a8bf96397a40cb38e82aef7bc332bcbb22faa0255b0142afa090ae4866147f7deb67442ecf874dfc00e96380097d49620816c0d167c602d8204e88e9d250c04fe2957dcf5133439d8dc792669f7ed9a146b6f14d9674875c65808a74a3183ae64e5eee3c6b5a76e53f2164610fb33c5c0b121b710"}, {0x84, 0x1, 0x7, "355cd6db168aef81f6d157e5d32883c6c0d83cbdc21c85b8edbfe62431ec4009d8a62506f15a8240e155d2ba38d24867fc4d262d6aeaecd073da34ed15c7c82deb913ef0993e9150cc61cdb9fededee3914d33d6f0949f505abd65101a56a3977ee3fcedcc743723a0dfb2b8c262dc48f3107b0b8f2a01ca"}, {0xa8, 0xffff, 0x1, "c5a5fb30a18bfd6fe09a58a5e9ee31d2d0588fbf839bf59a8e58f992a1399fab7299dc35b6264162abd9d422d71eba25fc87f200298cefc0057a758bc924b1403db0f07690d18094933e340483be30dd708705820dc80492e9f615ac1a4c36a372d2294da7e886e463eebfd6e4e16bae61639575e399b506f455ae9d8e64fff585c0dd854974994bd6dbe7d6e1e46fab7c91c5d8e0f1914b50c467"}, {0x100, 0xffff, 0x2, "3460a9bc9edecf977da4ddc6b85abf99d2bc8fbae94cf6c14af9d92d468d9c51738441f779a18d69f7553ef65bbb8e98f4ba4a719154c8fe80fe36464f7010905d2aef18d797e4a4863428969abf8f8245852c01a5067fa50707b64fd210439829c8bad9e716fca2f975478fac514788cbeafd2c447e59f22ac58b548e21276fc90354960832a1c47beb22ce73287fe645191b3dfd97dcf8b46de1485c58c5a8e484779171d5ff65db2b15e832d4dc0e2dd17b634747b92f0fb793751594b9108f76fc4e1d21e15e49f638f822e75447b1f36a6bc435b6b59b55ae9b59d77435f22fed078c2945be10d00d0b02200a084e5c"}], 0x5dc}, 0x5)
r5 = dup(r1)
ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000004dc0)=0x6)
ioctl$WSDISPLAYIO_GTYPE(0xffffffffffffffff, 0x40045740, &(0x7f0000004e40))

kernel console output (not intermixed with test programs):


OpenBSD/amd64 (ci-openbsd-main-4.us-central1-b.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts.
login: pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
Connection to 10.128.0.191 closed by remote host.
88467150241969
ktrace write failed, errno 27, tracing stopped
���;ڻH*CL�&�+a%u꟎6͐(b<Wû�/����u\�NN�.��"(��-��^��=oy��WxL~N&*bE�vҹ��Y%��}O��G�cFӲ]denied attempt to set clock back 116659585 seconds
ktrace write failed, errno 27, tracing stopped
�kHW�ELƋuL��init: getty repeating too quickly on port /dev/tty00, sleeping
pckbd_enable: command error
denied attempt to set clock back 7 seconds
ktrace write failed, errno 27, tracing stopped
Data modified on freelist: word -35183606062028 of object 0xffff800001670e10 size 0x10 previous type (null) (invalid addr 0x2d99054df099e367)
fatal protection fault in supervisor mode
trap type 4 code 0 rip ffffffff82ad8835 cs 8 rflags 10202 cr2 cb11b131c28 cpl a rsp ffff80002a7b78e0
gsbase 0xffffffff83972ff0  kgsbase 0x0
panic: trap type 4, code=0, pc=ffffffff82ad8835
Starting stack trace...
panic(ffffffff834be1ec) at panic+0x1ba
kerntrap(ffff80002a7b7830) at kerntrap+0x2fb
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
malloc(10,62,2) at malloc+0x855
amap_alloc1(20,2,0) at amap_alloc1+0x291
amap_alloc(20000,2,0) at amap_alloc+0xad
amap_copy(fffff1806d86b8b8,fffff1807eee1358,2,0,cb11b131000,cb11b131001) at amap_copy+0x6a8
uvm_fault_check(ffff80002a7b7d00,ffff80002a7b7d38,ffff80002a7b7d70,0) at uvm_fault_check+0x457
uvm_fault(fffff1806d86b8b8,cb11b131000,0,2) at uvm_fault+0xe6
upageflttrap(ffff80002a7b7ea0,cb11b131c28) at upageflttrap+0xa0
usertrap(ffff80002a7b7ea0) at usertrap+0x413
recall_trap() at recall_trap+0x8
end trace frame: 0x0, count: 245
End of stack trace.
syncing disks...