last executing test programs:

19.678445336s ago: executing program 5 (id=70):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x5c6f, 0x0, <r0=>0xffffffffffffffff})
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x40, 0x2}, 0x0, 0x0, 0x0, 0xfd, 0xa9f, 0x9, 0x67, 0x2c, 0xfffffffc}) (async)
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)) (async)
clock_settime(0x2, &(0x7f0000000540)={0x1, 0x7fff}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1})
faccessat(r0, &(0x7f00000005c0)='./file0\x00', 0x2, 0x1) (async, rerun: 32)
readlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) (rerun: 32)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001780)={{'./file0\x00', './file0\x00', 0x20, 0x9}, &(0x7f0000001640)=[{@empty, '\x00', './file0\x00', 0xe, 0x8, 0x2, 0x5, 0xff, 0x3, 0xd4}, {@broadcast, '\x00', './file0\x00', 0x81, 0x6, 0x2, 0x6, 0x1, 0x9, 0x7}, {@loopback, '\x00', './file0\x00', 0x2d, 0xa, 0x2, 0x3, 0x8, 0x5, 0x81}, {@multicast2, '\x00', './file0\x00', 0x9, 0x66, 0x1a, 0x5, 0xfc, 0x7e, 0x8}, {@empty, '\x00', './file0\x00', 0x80, 0x2, 0x0, 0x7, 0x40, 0x7, 0x6}], 0x8, 0x5, 0xb7ff, 0xe4, 0x2, 0x8, 0x4, 0x3})
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001c00)={0x4, 0x7, 0x7ff, 0x259, "6b79cb5d806ed8abd7237748c68fab5452405073", 0x8001, 0x4}) (async)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001d40)={{'./file0\x00', './file0\x00', 0x12, 0x7}, &(0x7f0000001c40)=[{@multicast1, '\x00', './file0\x00', 0x1000, 0x3, 0x19, 0x7f, 0x5, 0x86, 0x5}, {@loopback, '\x00', './file0\x00', 0x4, 0x400, 0x2, 0x2, 0x26, 0x0, 0x52}, {@empty, '\x00', './file0\x00', 0x5, 0x3, 0x1a, 0x7, 0x9, 0x9e}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0xa31, 0x1a, 0x0, 0x7f, 0x81, 0xe4}], 0x4, 0x4, 0x800, 0x1, 0x6, 0xe4d4, 0x2, 0x200}) (async)
pselect(0x40, &(0x7f00000021c0)={0x43a0, 0x9, 0x8, 0x8, 0x401, 0xab, 0x4, 0x5}, &(0x7f0000002200)={0x5, 0x1, 0xfffffffffffffffd, 0x6, 0x0, 0xa, 0x2, 0x1}, &(0x7f0000002240)={0xff, 0x7fffffff, 0x3, 0x6, 0x3d, 0x8, 0x916, 0x7}, &(0x7f0000002280)={0xffffffffffffffff, 0xaf}, &(0x7f00000022c0)={0x105a}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002340)={&(0x7f0000002300)=[0x5b89968c], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x40046402, &(0x7f0000002380))
ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000003040)={{'./file0\x00', './file0\x00', 0x1, 0x9}, &(0x7f00000023c0)=[{'\x00', './file0\x00', 0x18, 0x7}, {'./file0\x00', './file0\x00', 0x0, 0x5}, {'./file0\x00', './file0\x00', 0x4d, 0x2}], 0x401, 0x3, 0x10000, 0x0, 0x5, 0x1000, 0x8, 0x80000000})
r3 = accept$unix(r0, 0x0, &(0x7f00000034c0))
closefrom(r3) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003600)={&(0x7f0000003500)=[0x0, 0x0], &(0x7f0000003540), &(0x7f0000003580), &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0x0, 0x5, 0xffff7f8a, 0xfffffffa, 0x5, 0x200})
r4 = semget(0x3, 0x2, 0x88)
semctl$GETPID(r4, 0x1, 0x4, &(0x7f0000003640)=""/229)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000003740), 0x8000, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000003780)={0x3, 0x6, './file0\x00', 0x3, 0x6, 0xe64f, 0x81})
unveil(&(0x7f00000037c0)='./file0/file0\x00', &(0x7f0000003800)='c\x00') (async, rerun: 64)
ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000003840)={0x8001, 0x3, 0x1}) (async, rerun: 64)
getitimer(0x1, &(0x7f0000003880)) (async)
symlinkat(&(0x7f00000038c0)='./file0/file0\x00', r0, &(0x7f0000003900)='./file0\x00') (async)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64)
ioctl$VT_GETSTATE(r5, 0x40067664, &(0x7f0000003940)) (async, rerun: 64)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000003980)={'./file0/file0\x00', 0x100, 0xff, 0x6, 0x0, 0x8, 0x4762, 0x7, 0x0, 0x1, 0x6, 0x9c01})

17.874307037s ago: executing program 0 (id=174):
setrlimit(0x8, &(0x7f0000000140)={0x3, 0x5a}) (async)
open(&(0x7f0000000200)='./file1/file0\x00', 0x0, 0x8a) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async)
r0 = syz_open_pts()
r1 = setsid()
kill(r1, 0x10) (async)
getrlimit(0x5, &(0x7f00000000c0))
getrlimit(0x1, &(0x7f00000001c0)) (async)
close(r0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x6b, [{&(0x7f0000cf9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f00009e0000/0x1000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x1}, {&(0x7f0000f6c000/0x1000)=nil, &(0x7f00007a4000/0x3000)=nil}, {&(0x7f0000038000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bee000/0x4000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c77000/0x1000)=nil, 0x8}, {&(0x7f00002fc000/0xd000)=nil, &(0x7f0000622000/0x1000)=nil, 0x9}, {&(0x7f0000bc5000/0x3000)=nil, &(0x7f0000e23000/0x4000)=nil, 0x3}, {&(0x7f0000208000/0x1000)=nil, &(0x7f00002de000/0x3000)=nil, 0x3}, {&(0x7f0000c91000/0x1000)=nil, &(0x7f0000402000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000025000/0x1000)=nil, &(0x7f0000b0b000/0x1000)=nil, 0x14c}, {&(0x7f00009ee000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfff}, {&(0x7f0000c71000/0x8000)=nil, &(0x7f0000ab6000/0x2000)=nil, 0x9}, {&(0x7f0000a97000/0x2000)=nil, &(0x7f000065f000/0x4000)=nil, 0x7}, {&(0x7f000034c000/0x4000)=nil, &(0x7f0000d60000/0x4000)=nil, 0x1}, {&(0x7f0000018000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0\x00', 0x299c, 0xfffffffa, 0x8b, 0x81, [0x7, 0x7, 0x7, 0x3, 0x6, 0x5, 0x33, 0x669, 0x7, 0x80000001, 0x4e00, 0x7f, 0xfffffc00, 0x9, 0x0, 0x9, 0x5, 0x787c5a33, 0x4, 0x4e, 0xd9, 0x6, 0x6, 0x4, 0x6, 0x4, 0x10, 0x0, 0x7839, 0x8, 0xfffffff8, 0x7fffffff, 0xffff, 0x80000000, 0x2, 0x5a, 0x2, 0x7, 0x200, 0x2, 0x9, 0x3, 0x0, 0x100, 0x3ff, 0xee, 0x4, 0x1, 0x81, 0x5, 0x30, 0x100, 0x4, 0x3, 0xcb, 0x6760, 0x2, 0x9, 0xa, 0x5, 0x6, 0x1, 0x800, 0xb31b, 0x8, 0x1250, 0x6, 0x9, 0x7, 0x1, 0x68b, 0x7, 0x5, 0x0, 0xf, 0x80, 0x1, 0x400, 0x0, 0x80, 0x3ff, 0xdd2f, 0x9ce, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x2, 0x401, 0xcd, 0x6, 0x5, 0xe3b, 0x401, 0x11f5, 0x8, 0x69e8, 0x24d5, 0x69, 0xfffffffe, 0x5, 0x7, 0x1, 0x2, 0x6, 0x200, 0x7, 0x80000000, 0x8, 0x10001, 0x632ffa74, 0x3ff, 0x6, 0xb510, 0x0, 0x3, 0xc, 0xa5, 0x0, 0x2, 0xfff, 0x5ec1, 0x7, 0x8, 0x0, 0xfffffba7, 0xff, 0x2, 0x1, 0x377, 0x9, 0x654, 0xe, 0x8, 0x2540000, 0x1f00, 0xc2, 0x8, 0xc, 0x5, 0x9, 0x3, 0x4, 0x0, 0x3ff, 0x8, 0xfffffff0, 0x3, 0x380, 0x3, 0x1, 0xffffffff, 0xdf, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x640, 0xfff, 0x0, 0x10, 0x4, 0x1000, 0x69db78bf, 0x321fc0, 0xfda, 0x5, 0x1, 0x7f, 0xfffffffb, 0x4ffc, 0xdba1, 0x7f, 0x10, 0x9, 0x4, 0xffff0000, 0xd8fe, 0x1, 0x7ff, 0x700000, 0x5, 0x81, 0x2, 0x6, 0x3ff, 0x1, 0x85cd, 0x5, 0xbaf, 0x26b, 0x80000000, 0x1, 0x8, 0x5ed, 0x10, 0x5, 0xf, 0x400, 0xffffff07, 0xfffffffa, 0x401, 0x7, 0x7, 0x101, 0x200, 0x8, 0x9, 0x1, 0x8000, 0x10000, 0x3, 0x2, 0x81, 0xc00000, 0x2, 0x6, 0x9, 0x10000, 0x80, 0x3, 0xd, 0x7, 0x5, 0x3, 0x7, 0x30, 0x9, 0x3de57e0b, 0x80, 0x7, 0x5, 0x97, 0x3, 0x2, 0x9, 0x7, 0x5, 0x10, 0x4, 0x7, 0x7f, 0x1, 0x8001, 0x0, 0x80, 0x1, 0x7ff, 0x10001, 0x9, 0x80000000, 0xfffff800, 0x8, 0x2, 0x9, 0x30, 0x0, 0x4, 0x7ff, 0x7, 0x10001, 0xbeb, 0xf73, 0x8, 0x7, 0x4, 0xa92, 0x5, 0x7c, 0x6, 0x7ff, 0x53f, 0x200, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x101, 0x9, 0x7, 0x10, 0x7fffffff, 0x0, 0xbf, 0x8000, 0xa, 0x8, 0x81, 0x80000000, 0x8, 0x101, 0x8, 0xad, 0x594, 0x3, 0xf31c, 0x1, 0x9, 0x9, 0x7, 0xfffffffc, 0x8, 0x0, 0x0, 0xfffffffa, 0x47, 0x8, 0x7, 0x800, 0x5, 0x101, 0xffffffff, 0x7fff, 0x74c, 0x79, 0x7, 0x9, 0xbebb, 0x448b, 0x401, 0x7, 0x32fe, 0xffffffff, 0x9, 0x2, 0x90, 0x7, 0x6df, 0x3, 0x9, 0xfffffff8, 0x8, 0x0, 0x8001, 0x3ff, 0x9e, 0x1, 0x7, 0x6, 0x9ff, 0x8, 0xb6b4, 0xa, 0x0, 0x4, 0x14400000, 0x8bbb, 0x6, 0x400, 0xc, 0x0, 0x2, 0x100, 0x4, 0x80000001, 0x6, 0x1000, 0x9f, 0xd7d, 0x7fffffff, 0x7f, 0x40, 0x2, 0x1f, 0xfbb, 0x6, 0x4, 0x0, 0x0, 0x0, 0x914, 0x5, 0x4, 0xfffffff9, 0x6, 0xdd0, 0x1, 0x4, 0xf, 0x6, 0x6, 0x7, 0x30bc, 0x8000, 0x100, 0x1, 0x7, 0x7, 0xf9, 0x5, 0x4, 0x6, 0xc, 0x5cb7, 0x6db, 0x2, 0x1, 0xf, 0x3, 0x9, 0x6, 0x6, 0x10000, 0xbe9, 0x0, 0x513f, 0x0, 0x3, 0x3, 0x400, 0xe, 0x0, 0x6, 0x4, 0x3, 0x10000000, 0x7fff, 0xfffffffb, 0x7, 0x9, 0x0, 0x43c, 0x9, 0x3c00000, 0x7fff, 0x4, 0xfff, 0x80000000, 0x800, 0x1, 0x1, 0xf7, 0x4, 0x81, 0x0, 0x8, 0x3, 0x1, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x10000, 0x27, 0x80000001, 0x1, 0x3, 0x9, 0x7, 0x7f, 0x2, 0x1, 0x9, 0x8f, 0x7, 0x5, 0x7, 0x3, 0xd25, 0x5, 0x2, 0xca86, 0x10000, 0x10, 0x0, 0x3ff, 0x1, 0x5, 0xfff, 0x10, 0x9518, 0x25c, 0x9, 0x8, 0xe9, 0x585, 0x5, 0x800, 0x7, 0x80000001, 0x58, 0x6, 0xffffffff, 0xfffffff9, 0x6, 0x8, 0x5b74ed42, 0xf, 0x8001, 0x3, 0x7fffffff, 0x7, 0xa623, 0x5, 0xa1c, 0x5, 0xa, 0xfffffff7, 0x1, 0x3ca29155, 0x1, 0x1, 0xb10, 0x9, 0x12991041]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
sysctl$net_inet_ipip(&(0x7f0000000100)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r3 = socket$inet(0x2, 0x8003, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

17.873343407s ago: executing program 4 (id=28):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x2000)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = getuid()
setresuid(0x0, r1, 0x0)
seteuid(r1)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000400)='./file0\x00', 0x153, 0x0})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r3 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) (async)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000600)='./file0\x00', 0xc354, 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111) (async)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="efac5298e19a3082145f29fec62a447d83156d3bddd874a2ca670c169a3b547ea2b836e5f67d328b592a0281a82e705a31248b15b1fbf67149039edf0a84150f62121c32a0d53307670840496ab763d0ac6ca538aaa94ddc9c6c7f562072fc0162a726af5ce533b59ce2fdc8c933a030902da072a8c3f81c5bf7e7b2534888f86d40aff5eb181fe8f79f7c8ab4b45a807ea0c0c8d93cb578d075d4c66aef1b0f5c07904b1767b429d6dc55ab55a534f2236f3a561339fa0009719d7ac287e626642f11577e7e535233326e3e666621f1197c800ad192a29f67e541ae22ee0c595fa516f63570b2dbbba788a50c5e72e60fc76954b0b955b807949dab0444bf93fbf3efa1f3a346f82ae302a2387c240f74", 0x111)
mprotect(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x1, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0x2, 0x1}, {0x6, 0x6, 0xd3, 0xfffff804}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r4, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe)
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='r\x00')
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x3, 0xe0000000}, 0x10)

15.921144827s ago: executing program 0 (id=174):
setrlimit(0x8, &(0x7f0000000140)={0x3, 0x5a}) (async)
open(&(0x7f0000000200)='./file1/file0\x00', 0x0, 0x8a) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async)
r0 = syz_open_pts()
r1 = setsid()
kill(r1, 0x10) (async)
getrlimit(0x5, &(0x7f00000000c0))
getrlimit(0x1, &(0x7f00000001c0)) (async)
close(r0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x6b, [{&(0x7f0000cf9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f00009e0000/0x1000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x1}, {&(0x7f0000f6c000/0x1000)=nil, &(0x7f00007a4000/0x3000)=nil}, {&(0x7f0000038000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bee000/0x4000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c77000/0x1000)=nil, 0x8}, {&(0x7f00002fc000/0xd000)=nil, &(0x7f0000622000/0x1000)=nil, 0x9}, {&(0x7f0000bc5000/0x3000)=nil, &(0x7f0000e23000/0x4000)=nil, 0x3}, {&(0x7f0000208000/0x1000)=nil, &(0x7f00002de000/0x3000)=nil, 0x3}, {&(0x7f0000c91000/0x1000)=nil, &(0x7f0000402000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000025000/0x1000)=nil, &(0x7f0000b0b000/0x1000)=nil, 0x14c}, {&(0x7f00009ee000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfff}, {&(0x7f0000c71000/0x8000)=nil, &(0x7f0000ab6000/0x2000)=nil, 0x9}, {&(0x7f0000a97000/0x2000)=nil, &(0x7f000065f000/0x4000)=nil, 0x7}, {&(0x7f000034c000/0x4000)=nil, &(0x7f0000d60000/0x4000)=nil, 0x1}, {&(0x7f0000018000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0\x00', 0x299c, 0xfffffffa, 0x8b, 0x81, [0x7, 0x7, 0x7, 0x3, 0x6, 0x5, 0x33, 0x669, 0x7, 0x80000001, 0x4e00, 0x7f, 0xfffffc00, 0x9, 0x0, 0x9, 0x5, 0x787c5a33, 0x4, 0x4e, 0xd9, 0x6, 0x6, 0x4, 0x6, 0x4, 0x10, 0x0, 0x7839, 0x8, 0xfffffff8, 0x7fffffff, 0xffff, 0x80000000, 0x2, 0x5a, 0x2, 0x7, 0x200, 0x2, 0x9, 0x3, 0x0, 0x100, 0x3ff, 0xee, 0x4, 0x1, 0x81, 0x5, 0x30, 0x100, 0x4, 0x3, 0xcb, 0x6760, 0x2, 0x9, 0xa, 0x5, 0x6, 0x1, 0x800, 0xb31b, 0x8, 0x1250, 0x6, 0x9, 0x7, 0x1, 0x68b, 0x7, 0x5, 0x0, 0xf, 0x80, 0x1, 0x400, 0x0, 0x80, 0x3ff, 0xdd2f, 0x9ce, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x2, 0x401, 0xcd, 0x6, 0x5, 0xe3b, 0x401, 0x11f5, 0x8, 0x69e8, 0x24d5, 0x69, 0xfffffffe, 0x5, 0x7, 0x1, 0x2, 0x6, 0x200, 0x7, 0x80000000, 0x8, 0x10001, 0x632ffa74, 0x3ff, 0x6, 0xb510, 0x0, 0x3, 0xc, 0xa5, 0x0, 0x2, 0xfff, 0x5ec1, 0x7, 0x8, 0x0, 0xfffffba7, 0xff, 0x2, 0x1, 0x377, 0x9, 0x654, 0xe, 0x8, 0x2540000, 0x1f00, 0xc2, 0x8, 0xc, 0x5, 0x9, 0x3, 0x4, 0x0, 0x3ff, 0x8, 0xfffffff0, 0x3, 0x380, 0x3, 0x1, 0xffffffff, 0xdf, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x640, 0xfff, 0x0, 0x10, 0x4, 0x1000, 0x69db78bf, 0x321fc0, 0xfda, 0x5, 0x1, 0x7f, 0xfffffffb, 0x4ffc, 0xdba1, 0x7f, 0x10, 0x9, 0x4, 0xffff0000, 0xd8fe, 0x1, 0x7ff, 0x700000, 0x5, 0x81, 0x2, 0x6, 0x3ff, 0x1, 0x85cd, 0x5, 0xbaf, 0x26b, 0x80000000, 0x1, 0x8, 0x5ed, 0x10, 0x5, 0xf, 0x400, 0xffffff07, 0xfffffffa, 0x401, 0x7, 0x7, 0x101, 0x200, 0x8, 0x9, 0x1, 0x8000, 0x10000, 0x3, 0x2, 0x81, 0xc00000, 0x2, 0x6, 0x9, 0x10000, 0x80, 0x3, 0xd, 0x7, 0x5, 0x3, 0x7, 0x30, 0x9, 0x3de57e0b, 0x80, 0x7, 0x5, 0x97, 0x3, 0x2, 0x9, 0x7, 0x5, 0x10, 0x4, 0x7, 0x7f, 0x1, 0x8001, 0x0, 0x80, 0x1, 0x7ff, 0x10001, 0x9, 0x80000000, 0xfffff800, 0x8, 0x2, 0x9, 0x30, 0x0, 0x4, 0x7ff, 0x7, 0x10001, 0xbeb, 0xf73, 0x8, 0x7, 0x4, 0xa92, 0x5, 0x7c, 0x6, 0x7ff, 0x53f, 0x200, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x101, 0x9, 0x7, 0x10, 0x7fffffff, 0x0, 0xbf, 0x8000, 0xa, 0x8, 0x81, 0x80000000, 0x8, 0x101, 0x8, 0xad, 0x594, 0x3, 0xf31c, 0x1, 0x9, 0x9, 0x7, 0xfffffffc, 0x8, 0x0, 0x0, 0xfffffffa, 0x47, 0x8, 0x7, 0x800, 0x5, 0x101, 0xffffffff, 0x7fff, 0x74c, 0x79, 0x7, 0x9, 0xbebb, 0x448b, 0x401, 0x7, 0x32fe, 0xffffffff, 0x9, 0x2, 0x90, 0x7, 0x6df, 0x3, 0x9, 0xfffffff8, 0x8, 0x0, 0x8001, 0x3ff, 0x9e, 0x1, 0x7, 0x6, 0x9ff, 0x8, 0xb6b4, 0xa, 0x0, 0x4, 0x14400000, 0x8bbb, 0x6, 0x400, 0xc, 0x0, 0x2, 0x100, 0x4, 0x80000001, 0x6, 0x1000, 0x9f, 0xd7d, 0x7fffffff, 0x7f, 0x40, 0x2, 0x1f, 0xfbb, 0x6, 0x4, 0x0, 0x0, 0x0, 0x914, 0x5, 0x4, 0xfffffff9, 0x6, 0xdd0, 0x1, 0x4, 0xf, 0x6, 0x6, 0x7, 0x30bc, 0x8000, 0x100, 0x1, 0x7, 0x7, 0xf9, 0x5, 0x4, 0x6, 0xc, 0x5cb7, 0x6db, 0x2, 0x1, 0xf, 0x3, 0x9, 0x6, 0x6, 0x10000, 0xbe9, 0x0, 0x513f, 0x0, 0x3, 0x3, 0x400, 0xe, 0x0, 0x6, 0x4, 0x3, 0x10000000, 0x7fff, 0xfffffffb, 0x7, 0x9, 0x0, 0x43c, 0x9, 0x3c00000, 0x7fff, 0x4, 0xfff, 0x80000000, 0x800, 0x1, 0x1, 0xf7, 0x4, 0x81, 0x0, 0x8, 0x3, 0x1, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x10000, 0x27, 0x80000001, 0x1, 0x3, 0x9, 0x7, 0x7f, 0x2, 0x1, 0x9, 0x8f, 0x7, 0x5, 0x7, 0x3, 0xd25, 0x5, 0x2, 0xca86, 0x10000, 0x10, 0x0, 0x3ff, 0x1, 0x5, 0xfff, 0x10, 0x9518, 0x25c, 0x9, 0x8, 0xe9, 0x585, 0x5, 0x800, 0x7, 0x80000001, 0x58, 0x6, 0xffffffff, 0xfffffff9, 0x6, 0x8, 0x5b74ed42, 0xf, 0x8001, 0x3, 0x7fffffff, 0x7, 0xa623, 0x5, 0xa1c, 0x5, 0xa, 0xfffffff7, 0x1, 0x3ca29155, 0x1, 0x1, 0xb10, 0x9, 0x12991041]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
sysctl$net_inet_ipip(&(0x7f0000000100)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r3 = socket$inet(0x2, 0x8003, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

15.903266793s ago: executing program 5 (id=70):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x5c6f, 0x0, <r0=>0xffffffffffffffff})
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x40, 0x2}, 0x0, 0x0, 0x0, 0xfd, 0xa9f, 0x9, 0x67, 0x2c, 0xfffffffc}) (async)
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)) (async)
clock_settime(0x2, &(0x7f0000000540)={0x1, 0x7fff}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1})
faccessat(r0, &(0x7f00000005c0)='./file0\x00', 0x2, 0x1) (async, rerun: 32)
readlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) (rerun: 32)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001780)={{'./file0\x00', './file0\x00', 0x20, 0x9}, &(0x7f0000001640)=[{@empty, '\x00', './file0\x00', 0xe, 0x8, 0x2, 0x5, 0xff, 0x3, 0xd4}, {@broadcast, '\x00', './file0\x00', 0x81, 0x6, 0x2, 0x6, 0x1, 0x9, 0x7}, {@loopback, '\x00', './file0\x00', 0x2d, 0xa, 0x2, 0x3, 0x8, 0x5, 0x81}, {@multicast2, '\x00', './file0\x00', 0x9, 0x66, 0x1a, 0x5, 0xfc, 0x7e, 0x8}, {@empty, '\x00', './file0\x00', 0x80, 0x2, 0x0, 0x7, 0x40, 0x7, 0x6}], 0x8, 0x5, 0xb7ff, 0xe4, 0x2, 0x8, 0x4, 0x3})
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001c00)={0x4, 0x7, 0x7ff, 0x259, "6b79cb5d806ed8abd7237748c68fab5452405073", 0x8001, 0x4}) (async)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001d40)={{'./file0\x00', './file0\x00', 0x12, 0x7}, &(0x7f0000001c40)=[{@multicast1, '\x00', './file0\x00', 0x1000, 0x3, 0x19, 0x7f, 0x5, 0x86, 0x5}, {@loopback, '\x00', './file0\x00', 0x4, 0x400, 0x2, 0x2, 0x26, 0x0, 0x52}, {@empty, '\x00', './file0\x00', 0x5, 0x3, 0x1a, 0x7, 0x9, 0x9e}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0xa31, 0x1a, 0x0, 0x7f, 0x81, 0xe4}], 0x4, 0x4, 0x800, 0x1, 0x6, 0xe4d4, 0x2, 0x200}) (async)
pselect(0x40, &(0x7f00000021c0)={0x43a0, 0x9, 0x8, 0x8, 0x401, 0xab, 0x4, 0x5}, &(0x7f0000002200)={0x5, 0x1, 0xfffffffffffffffd, 0x6, 0x0, 0xa, 0x2, 0x1}, &(0x7f0000002240)={0xff, 0x7fffffff, 0x3, 0x6, 0x3d, 0x8, 0x916, 0x7}, &(0x7f0000002280)={0xffffffffffffffff, 0xaf}, &(0x7f00000022c0)={0x105a}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002340)={&(0x7f0000002300)=[0x5b89968c], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x40046402, &(0x7f0000002380))
ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000003040)={{'./file0\x00', './file0\x00', 0x1, 0x9}, &(0x7f00000023c0)=[{'\x00', './file0\x00', 0x18, 0x7}, {'./file0\x00', './file0\x00', 0x0, 0x5}, {'./file0\x00', './file0\x00', 0x4d, 0x2}], 0x401, 0x3, 0x10000, 0x0, 0x5, 0x1000, 0x8, 0x80000000})
r3 = accept$unix(r0, 0x0, &(0x7f00000034c0))
closefrom(r3) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003600)={&(0x7f0000003500)=[0x0, 0x0], &(0x7f0000003540), &(0x7f0000003580), &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0x0, 0x5, 0xffff7f8a, 0xfffffffa, 0x5, 0x200})
r4 = semget(0x3, 0x2, 0x88)
semctl$GETPID(r4, 0x1, 0x4, &(0x7f0000003640)=""/229)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000003740), 0x8000, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000003780)={0x3, 0x6, './file0\x00', 0x3, 0x6, 0xe64f, 0x81})
unveil(&(0x7f00000037c0)='./file0/file0\x00', &(0x7f0000003800)='c\x00') (async, rerun: 64)
ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000003840)={0x8001, 0x3, 0x1}) (async, rerun: 64)
getitimer(0x1, &(0x7f0000003880)) (async)
symlinkat(&(0x7f00000038c0)='./file0/file0\x00', r0, &(0x7f0000003900)='./file0\x00') (async)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64)
ioctl$VT_GETSTATE(r5, 0x40067664, &(0x7f0000003940)) (async, rerun: 64)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000003980)={'./file0/file0\x00', 0x100, 0xff, 0x6, 0x0, 0x8, 0x4762, 0x7, 0x0, 0x1, 0x6, 0x9c01})

14.32215999s ago: executing program 0 (id=174):
setrlimit(0x8, &(0x7f0000000140)={0x3, 0x5a}) (async)
open(&(0x7f0000000200)='./file1/file0\x00', 0x0, 0x8a) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async)
r0 = syz_open_pts()
r1 = setsid()
kill(r1, 0x10) (async)
getrlimit(0x5, &(0x7f00000000c0))
getrlimit(0x1, &(0x7f00000001c0)) (async)
close(r0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x6b, [{&(0x7f0000cf9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f00009e0000/0x1000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x1}, {&(0x7f0000f6c000/0x1000)=nil, &(0x7f00007a4000/0x3000)=nil}, {&(0x7f0000038000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bee000/0x4000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c77000/0x1000)=nil, 0x8}, {&(0x7f00002fc000/0xd000)=nil, &(0x7f0000622000/0x1000)=nil, 0x9}, {&(0x7f0000bc5000/0x3000)=nil, &(0x7f0000e23000/0x4000)=nil, 0x3}, {&(0x7f0000208000/0x1000)=nil, &(0x7f00002de000/0x3000)=nil, 0x3}, {&(0x7f0000c91000/0x1000)=nil, &(0x7f0000402000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000025000/0x1000)=nil, &(0x7f0000b0b000/0x1000)=nil, 0x14c}, {&(0x7f00009ee000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfff}, {&(0x7f0000c71000/0x8000)=nil, &(0x7f0000ab6000/0x2000)=nil, 0x9}, {&(0x7f0000a97000/0x2000)=nil, &(0x7f000065f000/0x4000)=nil, 0x7}, {&(0x7f000034c000/0x4000)=nil, &(0x7f0000d60000/0x4000)=nil, 0x1}, {&(0x7f0000018000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0\x00', 0x299c, 0xfffffffa, 0x8b, 0x81, [0x7, 0x7, 0x7, 0x3, 0x6, 0x5, 0x33, 0x669, 0x7, 0x80000001, 0x4e00, 0x7f, 0xfffffc00, 0x9, 0x0, 0x9, 0x5, 0x787c5a33, 0x4, 0x4e, 0xd9, 0x6, 0x6, 0x4, 0x6, 0x4, 0x10, 0x0, 0x7839, 0x8, 0xfffffff8, 0x7fffffff, 0xffff, 0x80000000, 0x2, 0x5a, 0x2, 0x7, 0x200, 0x2, 0x9, 0x3, 0x0, 0x100, 0x3ff, 0xee, 0x4, 0x1, 0x81, 0x5, 0x30, 0x100, 0x4, 0x3, 0xcb, 0x6760, 0x2, 0x9, 0xa, 0x5, 0x6, 0x1, 0x800, 0xb31b, 0x8, 0x1250, 0x6, 0x9, 0x7, 0x1, 0x68b, 0x7, 0x5, 0x0, 0xf, 0x80, 0x1, 0x400, 0x0, 0x80, 0x3ff, 0xdd2f, 0x9ce, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x2, 0x401, 0xcd, 0x6, 0x5, 0xe3b, 0x401, 0x11f5, 0x8, 0x69e8, 0x24d5, 0x69, 0xfffffffe, 0x5, 0x7, 0x1, 0x2, 0x6, 0x200, 0x7, 0x80000000, 0x8, 0x10001, 0x632ffa74, 0x3ff, 0x6, 0xb510, 0x0, 0x3, 0xc, 0xa5, 0x0, 0x2, 0xfff, 0x5ec1, 0x7, 0x8, 0x0, 0xfffffba7, 0xff, 0x2, 0x1, 0x377, 0x9, 0x654, 0xe, 0x8, 0x2540000, 0x1f00, 0xc2, 0x8, 0xc, 0x5, 0x9, 0x3, 0x4, 0x0, 0x3ff, 0x8, 0xfffffff0, 0x3, 0x380, 0x3, 0x1, 0xffffffff, 0xdf, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x640, 0xfff, 0x0, 0x10, 0x4, 0x1000, 0x69db78bf, 0x321fc0, 0xfda, 0x5, 0x1, 0x7f, 0xfffffffb, 0x4ffc, 0xdba1, 0x7f, 0x10, 0x9, 0x4, 0xffff0000, 0xd8fe, 0x1, 0x7ff, 0x700000, 0x5, 0x81, 0x2, 0x6, 0x3ff, 0x1, 0x85cd, 0x5, 0xbaf, 0x26b, 0x80000000, 0x1, 0x8, 0x5ed, 0x10, 0x5, 0xf, 0x400, 0xffffff07, 0xfffffffa, 0x401, 0x7, 0x7, 0x101, 0x200, 0x8, 0x9, 0x1, 0x8000, 0x10000, 0x3, 0x2, 0x81, 0xc00000, 0x2, 0x6, 0x9, 0x10000, 0x80, 0x3, 0xd, 0x7, 0x5, 0x3, 0x7, 0x30, 0x9, 0x3de57e0b, 0x80, 0x7, 0x5, 0x97, 0x3, 0x2, 0x9, 0x7, 0x5, 0x10, 0x4, 0x7, 0x7f, 0x1, 0x8001, 0x0, 0x80, 0x1, 0x7ff, 0x10001, 0x9, 0x80000000, 0xfffff800, 0x8, 0x2, 0x9, 0x30, 0x0, 0x4, 0x7ff, 0x7, 0x10001, 0xbeb, 0xf73, 0x8, 0x7, 0x4, 0xa92, 0x5, 0x7c, 0x6, 0x7ff, 0x53f, 0x200, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x101, 0x9, 0x7, 0x10, 0x7fffffff, 0x0, 0xbf, 0x8000, 0xa, 0x8, 0x81, 0x80000000, 0x8, 0x101, 0x8, 0xad, 0x594, 0x3, 0xf31c, 0x1, 0x9, 0x9, 0x7, 0xfffffffc, 0x8, 0x0, 0x0, 0xfffffffa, 0x47, 0x8, 0x7, 0x800, 0x5, 0x101, 0xffffffff, 0x7fff, 0x74c, 0x79, 0x7, 0x9, 0xbebb, 0x448b, 0x401, 0x7, 0x32fe, 0xffffffff, 0x9, 0x2, 0x90, 0x7, 0x6df, 0x3, 0x9, 0xfffffff8, 0x8, 0x0, 0x8001, 0x3ff, 0x9e, 0x1, 0x7, 0x6, 0x9ff, 0x8, 0xb6b4, 0xa, 0x0, 0x4, 0x14400000, 0x8bbb, 0x6, 0x400, 0xc, 0x0, 0x2, 0x100, 0x4, 0x80000001, 0x6, 0x1000, 0x9f, 0xd7d, 0x7fffffff, 0x7f, 0x40, 0x2, 0x1f, 0xfbb, 0x6, 0x4, 0x0, 0x0, 0x0, 0x914, 0x5, 0x4, 0xfffffff9, 0x6, 0xdd0, 0x1, 0x4, 0xf, 0x6, 0x6, 0x7, 0x30bc, 0x8000, 0x100, 0x1, 0x7, 0x7, 0xf9, 0x5, 0x4, 0x6, 0xc, 0x5cb7, 0x6db, 0x2, 0x1, 0xf, 0x3, 0x9, 0x6, 0x6, 0x10000, 0xbe9, 0x0, 0x513f, 0x0, 0x3, 0x3, 0x400, 0xe, 0x0, 0x6, 0x4, 0x3, 0x10000000, 0x7fff, 0xfffffffb, 0x7, 0x9, 0x0, 0x43c, 0x9, 0x3c00000, 0x7fff, 0x4, 0xfff, 0x80000000, 0x800, 0x1, 0x1, 0xf7, 0x4, 0x81, 0x0, 0x8, 0x3, 0x1, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x10000, 0x27, 0x80000001, 0x1, 0x3, 0x9, 0x7, 0x7f, 0x2, 0x1, 0x9, 0x8f, 0x7, 0x5, 0x7, 0x3, 0xd25, 0x5, 0x2, 0xca86, 0x10000, 0x10, 0x0, 0x3ff, 0x1, 0x5, 0xfff, 0x10, 0x9518, 0x25c, 0x9, 0x8, 0xe9, 0x585, 0x5, 0x800, 0x7, 0x80000001, 0x58, 0x6, 0xffffffff, 0xfffffff9, 0x6, 0x8, 0x5b74ed42, 0xf, 0x8001, 0x3, 0x7fffffff, 0x7, 0xa623, 0x5, 0xa1c, 0x5, 0xa, 0xfffffff7, 0x1, 0x3ca29155, 0x1, 0x1, 0xb10, 0x9, 0x12991041]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
sysctl$net_inet_ipip(&(0x7f0000000100)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r3 = socket$inet(0x2, 0x8003, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

14.255962063s ago: executing program 4 (id=28):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x2000)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = getuid()
setresuid(0x0, r1, 0x0)
seteuid(r1)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000400)='./file0\x00', 0x153, 0x0})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r3 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) (async)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000600)='./file0\x00', 0xc354, 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="efac5298e19a3082145f29fec62a447d83156d3bddd874a2ca670c169a3b547ea2b836e5f67d328b592a0281a82e705a31248b15b1fbf67149039edf0a84150f62121c32a0d53307670840496ab763d0ac6ca538aaa94ddc9c6c7f562072fc0162a726af5ce533b59ce2fdc8c933a030902da072a8c3f81c5bf7e7b2534888f86d40aff5eb181fe8f79f7c8ab4b45a807ea0c0c8d93cb578d075d4c66aef1b0f5c07904b1767b429d6dc55ab55a534f2236f3a561339fa0009719d7ac287e626642f11577e7e535233326e3e666621f1197c800ad192a29f67e541ae22ee0c595fa516f63570b2dbbba788a50c5e72e60fc76954b0b955b807949dab0444bf93fbf3efa1f3a346f82ae302a2387c240f74", 0x111) (async)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111)
mprotect(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x1, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0x2, 0x1}, {0x6, 0x6, 0xd3, 0xfffff804}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r4, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe)
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='r\x00')
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x3, 0xe0000000}, 0x10)

13.558182984s ago: executing program 5 (id=70):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x5c6f, 0x0, <r0=>0xffffffffffffffff})
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x40, 0x2}, 0x0, 0x0, 0x0, 0xfd, 0xa9f, 0x9, 0x67, 0x2c, 0xfffffffc}) (async)
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)) (async)
clock_settime(0x2, &(0x7f0000000540)={0x1, 0x7fff}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1})
faccessat(r0, &(0x7f00000005c0)='./file0\x00', 0x2, 0x1) (async, rerun: 32)
readlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) (rerun: 32)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001780)={{'./file0\x00', './file0\x00', 0x20, 0x9}, &(0x7f0000001640)=[{@empty, '\x00', './file0\x00', 0xe, 0x8, 0x2, 0x5, 0xff, 0x3, 0xd4}, {@broadcast, '\x00', './file0\x00', 0x81, 0x6, 0x2, 0x6, 0x1, 0x9, 0x7}, {@loopback, '\x00', './file0\x00', 0x2d, 0xa, 0x2, 0x3, 0x8, 0x5, 0x81}, {@multicast2, '\x00', './file0\x00', 0x9, 0x66, 0x1a, 0x5, 0xfc, 0x7e, 0x8}, {@empty, '\x00', './file0\x00', 0x80, 0x2, 0x0, 0x7, 0x40, 0x7, 0x6}], 0x8, 0x5, 0xb7ff, 0xe4, 0x2, 0x8, 0x4, 0x3})
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001c00)={0x4, 0x7, 0x7ff, 0x259, "6b79cb5d806ed8abd7237748c68fab5452405073", 0x8001, 0x4}) (async)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001d40)={{'./file0\x00', './file0\x00', 0x12, 0x7}, &(0x7f0000001c40)=[{@multicast1, '\x00', './file0\x00', 0x1000, 0x3, 0x19, 0x7f, 0x5, 0x86, 0x5}, {@loopback, '\x00', './file0\x00', 0x4, 0x400, 0x2, 0x2, 0x26, 0x0, 0x52}, {@empty, '\x00', './file0\x00', 0x5, 0x3, 0x1a, 0x7, 0x9, 0x9e}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0xa31, 0x1a, 0x0, 0x7f, 0x81, 0xe4}], 0x4, 0x4, 0x800, 0x1, 0x6, 0xe4d4, 0x2, 0x200}) (async)
pselect(0x40, &(0x7f00000021c0)={0x43a0, 0x9, 0x8, 0x8, 0x401, 0xab, 0x4, 0x5}, &(0x7f0000002200)={0x5, 0x1, 0xfffffffffffffffd, 0x6, 0x0, 0xa, 0x2, 0x1}, &(0x7f0000002240)={0xff, 0x7fffffff, 0x3, 0x6, 0x3d, 0x8, 0x916, 0x7}, &(0x7f0000002280)={0xffffffffffffffff, 0xaf}, &(0x7f00000022c0)={0x105a}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002340)={&(0x7f0000002300)=[0x5b89968c], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x40046402, &(0x7f0000002380))
ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000003040)={{'./file0\x00', './file0\x00', 0x1, 0x9}, &(0x7f00000023c0)=[{'\x00', './file0\x00', 0x18, 0x7}, {'./file0\x00', './file0\x00', 0x0, 0x5}, {'./file0\x00', './file0\x00', 0x4d, 0x2}], 0x401, 0x3, 0x10000, 0x0, 0x5, 0x1000, 0x8, 0x80000000})
r3 = accept$unix(r0, 0x0, &(0x7f00000034c0))
closefrom(r3) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003600)={&(0x7f0000003500)=[0x0, 0x0], &(0x7f0000003540), &(0x7f0000003580), &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0x0, 0x5, 0xffff7f8a, 0xfffffffa, 0x5, 0x200})
r4 = semget(0x3, 0x2, 0x88)
semctl$GETPID(r4, 0x1, 0x4, &(0x7f0000003640)=""/229)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000003740), 0x8000, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000003780)={0x3, 0x6, './file0\x00', 0x3, 0x6, 0xe64f, 0x81})
unveil(&(0x7f00000037c0)='./file0/file0\x00', &(0x7f0000003800)='c\x00') (async, rerun: 64)
ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000003840)={0x8001, 0x3, 0x1}) (async, rerun: 64)
getitimer(0x1, &(0x7f0000003880)) (async)
symlinkat(&(0x7f00000038c0)='./file0/file0\x00', r0, &(0x7f0000003900)='./file0\x00') (async)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64)
ioctl$VT_GETSTATE(r5, 0x40067664, &(0x7f0000003940)) (async, rerun: 64)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000003980)={'./file0/file0\x00', 0x100, 0xff, 0x6, 0x0, 0x8, 0x4762, 0x7, 0x0, 0x1, 0x6, 0x9c01})

11.459566047s ago: executing program 0 (id=174):
setrlimit(0x8, &(0x7f0000000140)={0x3, 0x5a}) (async)
open(&(0x7f0000000200)='./file1/file0\x00', 0x0, 0x8a) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async)
r0 = syz_open_pts()
r1 = setsid()
kill(r1, 0x10) (async)
getrlimit(0x5, &(0x7f00000000c0))
getrlimit(0x1, &(0x7f00000001c0)) (async)
close(r0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x6b, [{&(0x7f0000cf9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f00009e0000/0x1000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x1}, {&(0x7f0000f6c000/0x1000)=nil, &(0x7f00007a4000/0x3000)=nil}, {&(0x7f0000038000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bee000/0x4000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c77000/0x1000)=nil, 0x8}, {&(0x7f00002fc000/0xd000)=nil, &(0x7f0000622000/0x1000)=nil, 0x9}, {&(0x7f0000bc5000/0x3000)=nil, &(0x7f0000e23000/0x4000)=nil, 0x3}, {&(0x7f0000208000/0x1000)=nil, &(0x7f00002de000/0x3000)=nil, 0x3}, {&(0x7f0000c91000/0x1000)=nil, &(0x7f0000402000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000025000/0x1000)=nil, &(0x7f0000b0b000/0x1000)=nil, 0x14c}, {&(0x7f00009ee000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfff}, {&(0x7f0000c71000/0x8000)=nil, &(0x7f0000ab6000/0x2000)=nil, 0x9}, {&(0x7f0000a97000/0x2000)=nil, &(0x7f000065f000/0x4000)=nil, 0x7}, {&(0x7f000034c000/0x4000)=nil, &(0x7f0000d60000/0x4000)=nil, 0x1}, {&(0x7f0000018000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0\x00', 0x299c, 0xfffffffa, 0x8b, 0x81, [0x7, 0x7, 0x7, 0x3, 0x6, 0x5, 0x33, 0x669, 0x7, 0x80000001, 0x4e00, 0x7f, 0xfffffc00, 0x9, 0x0, 0x9, 0x5, 0x787c5a33, 0x4, 0x4e, 0xd9, 0x6, 0x6, 0x4, 0x6, 0x4, 0x10, 0x0, 0x7839, 0x8, 0xfffffff8, 0x7fffffff, 0xffff, 0x80000000, 0x2, 0x5a, 0x2, 0x7, 0x200, 0x2, 0x9, 0x3, 0x0, 0x100, 0x3ff, 0xee, 0x4, 0x1, 0x81, 0x5, 0x30, 0x100, 0x4, 0x3, 0xcb, 0x6760, 0x2, 0x9, 0xa, 0x5, 0x6, 0x1, 0x800, 0xb31b, 0x8, 0x1250, 0x6, 0x9, 0x7, 0x1, 0x68b, 0x7, 0x5, 0x0, 0xf, 0x80, 0x1, 0x400, 0x0, 0x80, 0x3ff, 0xdd2f, 0x9ce, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x2, 0x401, 0xcd, 0x6, 0x5, 0xe3b, 0x401, 0x11f5, 0x8, 0x69e8, 0x24d5, 0x69, 0xfffffffe, 0x5, 0x7, 0x1, 0x2, 0x6, 0x200, 0x7, 0x80000000, 0x8, 0x10001, 0x632ffa74, 0x3ff, 0x6, 0xb510, 0x0, 0x3, 0xc, 0xa5, 0x0, 0x2, 0xfff, 0x5ec1, 0x7, 0x8, 0x0, 0xfffffba7, 0xff, 0x2, 0x1, 0x377, 0x9, 0x654, 0xe, 0x8, 0x2540000, 0x1f00, 0xc2, 0x8, 0xc, 0x5, 0x9, 0x3, 0x4, 0x0, 0x3ff, 0x8, 0xfffffff0, 0x3, 0x380, 0x3, 0x1, 0xffffffff, 0xdf, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x640, 0xfff, 0x0, 0x10, 0x4, 0x1000, 0x69db78bf, 0x321fc0, 0xfda, 0x5, 0x1, 0x7f, 0xfffffffb, 0x4ffc, 0xdba1, 0x7f, 0x10, 0x9, 0x4, 0xffff0000, 0xd8fe, 0x1, 0x7ff, 0x700000, 0x5, 0x81, 0x2, 0x6, 0x3ff, 0x1, 0x85cd, 0x5, 0xbaf, 0x26b, 0x80000000, 0x1, 0x8, 0x5ed, 0x10, 0x5, 0xf, 0x400, 0xffffff07, 0xfffffffa, 0x401, 0x7, 0x7, 0x101, 0x200, 0x8, 0x9, 0x1, 0x8000, 0x10000, 0x3, 0x2, 0x81, 0xc00000, 0x2, 0x6, 0x9, 0x10000, 0x80, 0x3, 0xd, 0x7, 0x5, 0x3, 0x7, 0x30, 0x9, 0x3de57e0b, 0x80, 0x7, 0x5, 0x97, 0x3, 0x2, 0x9, 0x7, 0x5, 0x10, 0x4, 0x7, 0x7f, 0x1, 0x8001, 0x0, 0x80, 0x1, 0x7ff, 0x10001, 0x9, 0x80000000, 0xfffff800, 0x8, 0x2, 0x9, 0x30, 0x0, 0x4, 0x7ff, 0x7, 0x10001, 0xbeb, 0xf73, 0x8, 0x7, 0x4, 0xa92, 0x5, 0x7c, 0x6, 0x7ff, 0x53f, 0x200, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x101, 0x9, 0x7, 0x10, 0x7fffffff, 0x0, 0xbf, 0x8000, 0xa, 0x8, 0x81, 0x80000000, 0x8, 0x101, 0x8, 0xad, 0x594, 0x3, 0xf31c, 0x1, 0x9, 0x9, 0x7, 0xfffffffc, 0x8, 0x0, 0x0, 0xfffffffa, 0x47, 0x8, 0x7, 0x800, 0x5, 0x101, 0xffffffff, 0x7fff, 0x74c, 0x79, 0x7, 0x9, 0xbebb, 0x448b, 0x401, 0x7, 0x32fe, 0xffffffff, 0x9, 0x2, 0x90, 0x7, 0x6df, 0x3, 0x9, 0xfffffff8, 0x8, 0x0, 0x8001, 0x3ff, 0x9e, 0x1, 0x7, 0x6, 0x9ff, 0x8, 0xb6b4, 0xa, 0x0, 0x4, 0x14400000, 0x8bbb, 0x6, 0x400, 0xc, 0x0, 0x2, 0x100, 0x4, 0x80000001, 0x6, 0x1000, 0x9f, 0xd7d, 0x7fffffff, 0x7f, 0x40, 0x2, 0x1f, 0xfbb, 0x6, 0x4, 0x0, 0x0, 0x0, 0x914, 0x5, 0x4, 0xfffffff9, 0x6, 0xdd0, 0x1, 0x4, 0xf, 0x6, 0x6, 0x7, 0x30bc, 0x8000, 0x100, 0x1, 0x7, 0x7, 0xf9, 0x5, 0x4, 0x6, 0xc, 0x5cb7, 0x6db, 0x2, 0x1, 0xf, 0x3, 0x9, 0x6, 0x6, 0x10000, 0xbe9, 0x0, 0x513f, 0x0, 0x3, 0x3, 0x400, 0xe, 0x0, 0x6, 0x4, 0x3, 0x10000000, 0x7fff, 0xfffffffb, 0x7, 0x9, 0x0, 0x43c, 0x9, 0x3c00000, 0x7fff, 0x4, 0xfff, 0x80000000, 0x800, 0x1, 0x1, 0xf7, 0x4, 0x81, 0x0, 0x8, 0x3, 0x1, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x10000, 0x27, 0x80000001, 0x1, 0x3, 0x9, 0x7, 0x7f, 0x2, 0x1, 0x9, 0x8f, 0x7, 0x5, 0x7, 0x3, 0xd25, 0x5, 0x2, 0xca86, 0x10000, 0x10, 0x0, 0x3ff, 0x1, 0x5, 0xfff, 0x10, 0x9518, 0x25c, 0x9, 0x8, 0xe9, 0x585, 0x5, 0x800, 0x7, 0x80000001, 0x58, 0x6, 0xffffffff, 0xfffffff9, 0x6, 0x8, 0x5b74ed42, 0xf, 0x8001, 0x3, 0x7fffffff, 0x7, 0xa623, 0x5, 0xa1c, 0x5, 0xa, 0xfffffff7, 0x1, 0x3ca29155, 0x1, 0x1, 0xb10, 0x9, 0x12991041]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
sysctl$net_inet_ipip(&(0x7f0000000100)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r3 = socket$inet(0x2, 0x8003, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

11.455777949s ago: executing program 1 (id=204):
r0 = syz_open_pts()
sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000000100)="688580be", 0x4)
madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x1)
ioctl$TIOCNXCL(r0, 0x2000740e)
r4 = kqueue1(0x10000)
r5 = accept$unix(r1, &(0x7f0000000580)=@file={0x0, 0x0, ""/521}, &(0x7f00000007c0)=0x20b)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b)
open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x24)
socket(0x6, 0xd2a2d4eb47bfed78, 0x3)
r7 = socket(0x18, 0x1, 0x0)
setsockopt(r7, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r7, 0x1000000000029, 0x9, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
connect$unix(r1, &(0x7f0000000180)=@abs={0xfd, 0x0, 0x0, 0x1}, 0x8)
ioctl$DIOCRCLRTSTATS(r6, 0xc4504441, &(0x7f0000001ac0)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0x3}, &(0x7f0000001240)=[{'./file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x10, 0x3}, {'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x20, 0x2}], 0x4, 0x2, 0x401, 0x6, 0x0, 0x794, 0x2, 0x8001})
r8 = syz_open_pts()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
write(r9, 0x0, 0x0)
kevent(r4, &(0x7f0000000800)=[{{r2}, 0x451f9f3e8c2b48ee, 0x1, 0x754915ed8ae135b4, 0x6, 0x3}, {{r5}, 0x8, 0x40, 0xfffff}, {{r1}, 0x0, 0x7, 0x40000000, 0x1, 0x6b91}, {{r7}, 0xfffffffffffffff9, 0x0, 0x8, 0xc, 0x1}, {{r8}, 0xfffffffffffffffc, 0xa, 0x1, 0x4, 0x2}], 0x6, &(0x7f00000008c0)=[{{r9}, 0xfffffffffffffffc, 0x0, 0x4, 0x2, 0x5}, {{}, 0xfffffffffffffff8, 0x40, 0x4, 0x8000000000000, 0x4}, {{r0}, 0xfffffffffffffff8, 0xba, 0x20, 0x7, 0x1}, {{r1}, 0xfffffffffffffffd, 0x80, 0xf0000000, 0x9, 0x4}], 0xfffffeff, &(0x7f0000000940))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r10 = open(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x19)
ioctl$TIOCSPGRP(r10, 0x40047477, &(0x7f0000000ec0))
sysctl$kern(&(0x7f0000000080)={0x1, 0xb}, 0x2, &(0x7f0000000140)="71929508", &(0x7f0000000000)=0x4, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11.454786893s ago: executing program 4 (id=28):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x2000)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = getuid()
setresuid(0x0, r1, 0x0)
seteuid(r1)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000400)='./file0\x00', 0x153, 0x0})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r3 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) (async)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000600)='./file0\x00', 0xc354, 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111) (async)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111)
mprotect(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x1, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0x2, 0x1}, {0x6, 0x6, 0xd3, 0xfffff804}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r4, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe)
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='r\x00')
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x3, 0xe0000000}, 0x10)

11.454331494s ago: executing program 6 (id=206):
r0 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
r1 = socket(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) (async)
setgid(0xffffffffffffffff)
setresgid(0x0, 0x0, 0xffffffffffffffff) (async)
setresgid(0x0, 0xffffffffffffffff, 0x0) (async)
r2 = syz_open_pts()
r3 = socket(0x18, 0x1, 0x0)
closefrom(r3)
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000100)={0x9f, 0x2, 0x77039cdd, 0x6, "307f42a358642e1ab93f88e7d0f297ca06d73e8f", 0xff, 0x9})
readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) (async)
dup(r0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5c, 0x9, 0x6b, 0x40000008}, {0x7c, 0x81, 0x6, 0x4}, {0x6, 0x80, 0x4, 0xc25}]}) (async)
syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[])

11.453339251s ago: executing program 7 (id=198):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000140)="23210a4fe020", 0x6}], 0x1) (async)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
listen(r0, 0x0) (async)
r2 = socket(0x2, 0x3, 0x0)
readv(r2, &(0x7f0000001340)=[{&(0x7f0000001180)=""/123, 0x7b}, {&(0x7f0000001200)=""/201, 0xc9}, {&(0x7f0000001300)=""/43, 0x2b}], 0x3) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x7, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xd154}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000040}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000079000/0x2000)=nil, 0x619}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0040}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3, 0x4, 0x1, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x5, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0xffff, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0xba, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x3, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x224, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0x6, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x6, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x40008c, 0x38, 0x6, 0x9, 0x9, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x55, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7ff, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0xe7, 0x101, 0x80000000, 0x2, 0x10, 0x9, 0x4, 0x5, 0xc140f05, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x6, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cd8, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x40000006, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0x6, 0x44cf, 0x6, 0xfffffff7, 0x2, 0xe877, 0x6, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0x400ef6, 0x2, 0x80719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0xfffeffff, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x681, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0x9, 0xf2e, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0x20cd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x4, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1fc, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x2, 0x4, 0x7, 0x7, 0x10, 0x8, 0x8001, 0x5b7, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x53, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x3, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x6, 0x4, 0xba]}) (async)
syz_emit_ethernet(0x76, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045f400680067000000069078e0000002ac1400aa890b4eac1400bbffffffff070b0900000001ac1400aa8927ffac1400bb7f000001e0000001e000000100000000ac1400bb7f00000100000800ffffffff0000004e204e2186e3d04a01c8c3a0c7198195dcf091a38308b7986248a8a17e39ac6708fc21c50077076ad39542524a8b5af51ae3efd37fd8003b50dfe46981b2bf007d999f5c90e27741455a20e79e5ee125", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000890780000"])
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
r4 = getpgid(0x0)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000b80)="680702d4aab08c9ec3ada85480c072a9e6bad97e2b08489a714ba355aae8c0ca669bdf107bca535488aeaa8cf860b4068bd979e940d9dfc6ecc4a53b7af351c391cecd0e3d3a220112f7968d6c78f12da2aa5f303e1740422d497bc3e1b406d27f5f6e682d125b0ead3c964628572fcd3a74733faa90c093aa28b9868a2800b16d2cffc18456d1398e71612f22bfd9826af2aedb54f30630440b7dc18f2eb1e43b50349bbee453", 0xa7) (async)
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (rerun: 64)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
kill(r4, 0x0)
ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000c40))
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000b40)={0x1, &(0x7f0000000b00)=[{0x2, 0x7, 0x29, 0x3}]}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async, rerun: 64)
ioctl$DIOCRDELADDRS(r1, 0xc4504444, &(0x7f0000000d00)={{'./file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x10, 0x7}, &(0x7f0000000c80)=[{@empty, '\x00', './file1\x00', 0x7, 0x8, 0x1a, 0x1, 0x0, 0xf1, 0x3}, {@loopback, '\x00', './file0\x00', 0x6, 0x7, 0x12, 0x48, 0x3, 0x45, 0x60}], 0x5, 0x2, 0x7ff, 0x10, 0x10001, 0x0, 0x10, 0x5f0f}) (rerun: 64)
syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000ac0000200000009078ac1400bbffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="610400039078000202040009"]) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}})
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async, rerun: 32)
getsockname$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) (rerun: 32)
listen(r0, 0x7fff) (async)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3, 0x34, 0x0, 0x0, 0x60, 0x6, 0x0, @rand_addr, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4f, 0x0, 0x29, {[@timestamp={0x8, 0xa, 0xa42f, 0x100}]}}}}}}})

9.410194538s ago: executing program 1 (id=208):
setuid(0xee01)
socket(0x18, 0x1, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000080, 0xffff63de, 0x8000005, 0x5, 0x8, 0x3, 0xf7, 0x10, [{0x8, 0xb, 0xfffff116, 0x80000001}, {0x3, 0xffffffff, 0x4, 0xfff}, {0x4, 0x4baa, 0x3, 0xa}, {0x16, 0xe2, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0x10fffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0x7e, 0x27ffc, 0xffffe2e9}, {0x9, 0x1000, 0x4, 0x7fff}, {0x3, 0x11, 0x0, 0x8bfd}, {0xfffffffd, 0x0, 0xc, 0x6}, {0x9, 0x4, 0x800000, 0x5}, {0x401, 0x4, 0x40000b, 0x2}, {0x0, 0x6e2, 0x1, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x8ff9, 0x1, 0x100000, 0x400}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37)

9.401132589s ago: executing program 5 (id=70):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x5c6f, 0x0, <r0=>0xffffffffffffffff})
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x40, 0x2}, 0x0, 0x0, 0x0, 0xfd, 0xa9f, 0x9, 0x67, 0x2c, 0xfffffffc}) (async)
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)) (async)
clock_settime(0x2, &(0x7f0000000540)={0x1, 0x7fff}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1})
faccessat(r0, &(0x7f00000005c0)='./file0\x00', 0x2, 0x1) (async, rerun: 32)
readlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) (rerun: 32)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001780)={{'./file0\x00', './file0\x00', 0x20, 0x9}, &(0x7f0000001640)=[{@empty, '\x00', './file0\x00', 0xe, 0x8, 0x2, 0x5, 0xff, 0x3, 0xd4}, {@broadcast, '\x00', './file0\x00', 0x81, 0x6, 0x2, 0x6, 0x1, 0x9, 0x7}, {@loopback, '\x00', './file0\x00', 0x2d, 0xa, 0x2, 0x3, 0x8, 0x5, 0x81}, {@multicast2, '\x00', './file0\x00', 0x9, 0x66, 0x1a, 0x5, 0xfc, 0x7e, 0x8}, {@empty, '\x00', './file0\x00', 0x80, 0x2, 0x0, 0x7, 0x40, 0x7, 0x6}], 0x8, 0x5, 0xb7ff, 0xe4, 0x2, 0x8, 0x4, 0x3})
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001c00)={0x4, 0x7, 0x7ff, 0x259, "6b79cb5d806ed8abd7237748c68fab5452405073", 0x8001, 0x4}) (async)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001d40)={{'./file0\x00', './file0\x00', 0x12, 0x7}, &(0x7f0000001c40)=[{@multicast1, '\x00', './file0\x00', 0x1000, 0x3, 0x19, 0x7f, 0x5, 0x86, 0x5}, {@loopback, '\x00', './file0\x00', 0x4, 0x400, 0x2, 0x2, 0x26, 0x0, 0x52}, {@empty, '\x00', './file0\x00', 0x5, 0x3, 0x1a, 0x7, 0x9, 0x9e}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0xa31, 0x1a, 0x0, 0x7f, 0x81, 0xe4}], 0x4, 0x4, 0x800, 0x1, 0x6, 0xe4d4, 0x2, 0x200}) (async)
pselect(0x40, &(0x7f00000021c0)={0x43a0, 0x9, 0x8, 0x8, 0x401, 0xab, 0x4, 0x5}, &(0x7f0000002200)={0x5, 0x1, 0xfffffffffffffffd, 0x6, 0x0, 0xa, 0x2, 0x1}, &(0x7f0000002240)={0xff, 0x7fffffff, 0x3, 0x6, 0x3d, 0x8, 0x916, 0x7}, &(0x7f0000002280)={0xffffffffffffffff, 0xaf}, &(0x7f00000022c0)={0x105a}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002340)={&(0x7f0000002300)=[0x5b89968c], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x40046402, &(0x7f0000002380))
ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000003040)={{'./file0\x00', './file0\x00', 0x1, 0x9}, &(0x7f00000023c0)=[{'\x00', './file0\x00', 0x18, 0x7}, {'./file0\x00', './file0\x00', 0x0, 0x5}, {'./file0\x00', './file0\x00', 0x4d, 0x2}], 0x401, 0x3, 0x10000, 0x0, 0x5, 0x1000, 0x8, 0x80000000})
r3 = accept$unix(r0, 0x0, &(0x7f00000034c0))
closefrom(r3) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003600)={&(0x7f0000003500)=[0x0, 0x0], &(0x7f0000003540), &(0x7f0000003580), &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0x0, 0x5, 0xffff7f8a, 0xfffffffa, 0x5, 0x200})
r4 = semget(0x3, 0x2, 0x88)
semctl$GETPID(r4, 0x1, 0x4, &(0x7f0000003640)=""/229)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000003740), 0x8000, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000003780)={0x3, 0x6, './file0\x00', 0x3, 0x6, 0xe64f, 0x81})
unveil(&(0x7f00000037c0)='./file0/file0\x00', &(0x7f0000003800)='c\x00') (async, rerun: 64)
ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000003840)={0x8001, 0x3, 0x1}) (async, rerun: 64)
getitimer(0x1, &(0x7f0000003880)) (async)
symlinkat(&(0x7f00000038c0)='./file0/file0\x00', r0, &(0x7f0000003900)='./file0\x00') (async)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64)
ioctl$VT_GETSTATE(r5, 0x40067664, &(0x7f0000003940)) (async, rerun: 64)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000003980)={'./file0/file0\x00', 0x100, 0xff, 0x6, 0x0, 0x8, 0x4762, 0x7, 0x0, 0x1, 0x6, 0x9c01})

9.401056613s ago: executing program 1 (id=210):
r0 = socket(0x2, 0x1, 0x0)
select(0x40, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x1, 0x0, 0x5}, &(0x7f00000024c0)={0x8, 0x20008000000000, 0x80000000, 0x2300000000000000, 0x0, 0x0, 0x1}, 0x0, 0x0)
shutdown(r0, 0x2)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000700)=[{0x0, 0x6, 0x5, 0xff}, {0x16, 0x2, 0x8, 0xffffffff}]})
write(r1, &(0x7f00000003c0)="d91ad30100060000000100000000", 0xe)
syz_open_pts()

7.869873771s ago: executing program 0 (id=174):
setrlimit(0x8, &(0x7f0000000140)={0x3, 0x5a}) (async)
open(&(0x7f0000000200)='./file1/file0\x00', 0x0, 0x8a) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async)
r0 = syz_open_pts()
r1 = setsid()
kill(r1, 0x10) (async)
getrlimit(0x5, &(0x7f00000000c0))
getrlimit(0x1, &(0x7f00000001c0)) (async)
close(r0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x6b, [{&(0x7f0000cf9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f00009e0000/0x1000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x1}, {&(0x7f0000f6c000/0x1000)=nil, &(0x7f00007a4000/0x3000)=nil}, {&(0x7f0000038000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bee000/0x4000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c77000/0x1000)=nil, 0x8}, {&(0x7f00002fc000/0xd000)=nil, &(0x7f0000622000/0x1000)=nil, 0x9}, {&(0x7f0000bc5000/0x3000)=nil, &(0x7f0000e23000/0x4000)=nil, 0x3}, {&(0x7f0000208000/0x1000)=nil, &(0x7f00002de000/0x3000)=nil, 0x3}, {&(0x7f0000c91000/0x1000)=nil, &(0x7f0000402000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000025000/0x1000)=nil, &(0x7f0000b0b000/0x1000)=nil, 0x14c}, {&(0x7f00009ee000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfff}, {&(0x7f0000c71000/0x8000)=nil, &(0x7f0000ab6000/0x2000)=nil, 0x9}, {&(0x7f0000a97000/0x2000)=nil, &(0x7f000065f000/0x4000)=nil, 0x7}, {&(0x7f000034c000/0x4000)=nil, &(0x7f0000d60000/0x4000)=nil, 0x1}, {&(0x7f0000018000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0\x00', 0x299c, 0xfffffffa, 0x8b, 0x81, [0x7, 0x7, 0x7, 0x3, 0x6, 0x5, 0x33, 0x669, 0x7, 0x80000001, 0x4e00, 0x7f, 0xfffffc00, 0x9, 0x0, 0x9, 0x5, 0x787c5a33, 0x4, 0x4e, 0xd9, 0x6, 0x6, 0x4, 0x6, 0x4, 0x10, 0x0, 0x7839, 0x8, 0xfffffff8, 0x7fffffff, 0xffff, 0x80000000, 0x2, 0x5a, 0x2, 0x7, 0x200, 0x2, 0x9, 0x3, 0x0, 0x100, 0x3ff, 0xee, 0x4, 0x1, 0x81, 0x5, 0x30, 0x100, 0x4, 0x3, 0xcb, 0x6760, 0x2, 0x9, 0xa, 0x5, 0x6, 0x1, 0x800, 0xb31b, 0x8, 0x1250, 0x6, 0x9, 0x7, 0x1, 0x68b, 0x7, 0x5, 0x0, 0xf, 0x80, 0x1, 0x400, 0x0, 0x80, 0x3ff, 0xdd2f, 0x9ce, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x2, 0x401, 0xcd, 0x6, 0x5, 0xe3b, 0x401, 0x11f5, 0x8, 0x69e8, 0x24d5, 0x69, 0xfffffffe, 0x5, 0x7, 0x1, 0x2, 0x6, 0x200, 0x7, 0x80000000, 0x8, 0x10001, 0x632ffa74, 0x3ff, 0x6, 0xb510, 0x0, 0x3, 0xc, 0xa5, 0x0, 0x2, 0xfff, 0x5ec1, 0x7, 0x8, 0x0, 0xfffffba7, 0xff, 0x2, 0x1, 0x377, 0x9, 0x654, 0xe, 0x8, 0x2540000, 0x1f00, 0xc2, 0x8, 0xc, 0x5, 0x9, 0x3, 0x4, 0x0, 0x3ff, 0x8, 0xfffffff0, 0x3, 0x380, 0x3, 0x1, 0xffffffff, 0xdf, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x640, 0xfff, 0x0, 0x10, 0x4, 0x1000, 0x69db78bf, 0x321fc0, 0xfda, 0x5, 0x1, 0x7f, 0xfffffffb, 0x4ffc, 0xdba1, 0x7f, 0x10, 0x9, 0x4, 0xffff0000, 0xd8fe, 0x1, 0x7ff, 0x700000, 0x5, 0x81, 0x2, 0x6, 0x3ff, 0x1, 0x85cd, 0x5, 0xbaf, 0x26b, 0x80000000, 0x1, 0x8, 0x5ed, 0x10, 0x5, 0xf, 0x400, 0xffffff07, 0xfffffffa, 0x401, 0x7, 0x7, 0x101, 0x200, 0x8, 0x9, 0x1, 0x8000, 0x10000, 0x3, 0x2, 0x81, 0xc00000, 0x2, 0x6, 0x9, 0x10000, 0x80, 0x3, 0xd, 0x7, 0x5, 0x3, 0x7, 0x30, 0x9, 0x3de57e0b, 0x80, 0x7, 0x5, 0x97, 0x3, 0x2, 0x9, 0x7, 0x5, 0x10, 0x4, 0x7, 0x7f, 0x1, 0x8001, 0x0, 0x80, 0x1, 0x7ff, 0x10001, 0x9, 0x80000000, 0xfffff800, 0x8, 0x2, 0x9, 0x30, 0x0, 0x4, 0x7ff, 0x7, 0x10001, 0xbeb, 0xf73, 0x8, 0x7, 0x4, 0xa92, 0x5, 0x7c, 0x6, 0x7ff, 0x53f, 0x200, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x101, 0x9, 0x7, 0x10, 0x7fffffff, 0x0, 0xbf, 0x8000, 0xa, 0x8, 0x81, 0x80000000, 0x8, 0x101, 0x8, 0xad, 0x594, 0x3, 0xf31c, 0x1, 0x9, 0x9, 0x7, 0xfffffffc, 0x8, 0x0, 0x0, 0xfffffffa, 0x47, 0x8, 0x7, 0x800, 0x5, 0x101, 0xffffffff, 0x7fff, 0x74c, 0x79, 0x7, 0x9, 0xbebb, 0x448b, 0x401, 0x7, 0x32fe, 0xffffffff, 0x9, 0x2, 0x90, 0x7, 0x6df, 0x3, 0x9, 0xfffffff8, 0x8, 0x0, 0x8001, 0x3ff, 0x9e, 0x1, 0x7, 0x6, 0x9ff, 0x8, 0xb6b4, 0xa, 0x0, 0x4, 0x14400000, 0x8bbb, 0x6, 0x400, 0xc, 0x0, 0x2, 0x100, 0x4, 0x80000001, 0x6, 0x1000, 0x9f, 0xd7d, 0x7fffffff, 0x7f, 0x40, 0x2, 0x1f, 0xfbb, 0x6, 0x4, 0x0, 0x0, 0x0, 0x914, 0x5, 0x4, 0xfffffff9, 0x6, 0xdd0, 0x1, 0x4, 0xf, 0x6, 0x6, 0x7, 0x30bc, 0x8000, 0x100, 0x1, 0x7, 0x7, 0xf9, 0x5, 0x4, 0x6, 0xc, 0x5cb7, 0x6db, 0x2, 0x1, 0xf, 0x3, 0x9, 0x6, 0x6, 0x10000, 0xbe9, 0x0, 0x513f, 0x0, 0x3, 0x3, 0x400, 0xe, 0x0, 0x6, 0x4, 0x3, 0x10000000, 0x7fff, 0xfffffffb, 0x7, 0x9, 0x0, 0x43c, 0x9, 0x3c00000, 0x7fff, 0x4, 0xfff, 0x80000000, 0x800, 0x1, 0x1, 0xf7, 0x4, 0x81, 0x0, 0x8, 0x3, 0x1, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x10000, 0x27, 0x80000001, 0x1, 0x3, 0x9, 0x7, 0x7f, 0x2, 0x1, 0x9, 0x8f, 0x7, 0x5, 0x7, 0x3, 0xd25, 0x5, 0x2, 0xca86, 0x10000, 0x10, 0x0, 0x3ff, 0x1, 0x5, 0xfff, 0x10, 0x9518, 0x25c, 0x9, 0x8, 0xe9, 0x585, 0x5, 0x800, 0x7, 0x80000001, 0x58, 0x6, 0xffffffff, 0xfffffff9, 0x6, 0x8, 0x5b74ed42, 0xf, 0x8001, 0x3, 0x7fffffff, 0x7, 0xa623, 0x5, 0xa1c, 0x5, 0xa, 0xfffffff7, 0x1, 0x3ca29155, 0x1, 0x1, 0xb10, 0x9, 0x12991041]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
sysctl$net_inet_ipip(&(0x7f0000000100)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r3 = socket$inet(0x2, 0x8003, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

7.86668817s ago: executing program 1 (id=211):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000000)=0x8001)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x8, 0x2d)
ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000000))
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="00000001", 0xffffff0a}], 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01864c1, &(0x7f0000000100)={0x0, 0x3, <r4=>0xffffffffffffffff, 0x0, 0xffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, <r5=>0x0, 0x0], 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x2, 0x5})
r6 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r6, 0x20007461)
r7 = openat$tty(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
r8 = dup2(r7, r6)
writev(r8, &(0x7f0000000040)=[{0x0}], 0x1)
r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$DIOCRCLRTABLES(r9, 0xc450443c, &(0x7f0000002840)={{'./file1\x00', './file1\x00', 0xc, 0x7}, 0x0, 0x0, 0x0, 0xc5e, 0x5, 0x80000001, 0x9, 0x32, 0xffffff67})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000940)=[0x0], &(0x7f0000000180)=[{}], &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0x0, <r10=>0x0, 0xd, 0x109, 0x0, 0x4, 0x1, 0x7f})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000c00)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0xa, r5, r10, 0x2, 0x2, 0x6d1a, 0x1, 0xa2a})
readv(r1, &(0x7f0000000d80)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000b00)=""/253, 0xfd}, {&(0x7f0000000cc0)=""/167, 0xa7}], 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000200000000000029078e0000002000000001100907802b8939fcd000000"])

7.865910007s ago: executing program 2 (id=212):
r0 = syz_open_pts()
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x3)
syz_open_pts()
r1 = open(0x0, 0x80000000000206, 0x4ebfac6bbaf79ed)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r2 = syz_open_pts()
fcntl$lock(r2, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd})
syz_open_pts()
r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TIOCMBIC(r3, 0x8004746b, &(0x7f0000000200)=0x3)
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)=""/140, 0x8c}], 0x1, 0x0}, 0x1840)
closefrom(r4)
r7 = socket(0x18, 0x3, 0x4)
ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0))
setitimer(0x1, &(0x7f0000000140)={{0x10001, 0x100900000000005}, {0x5fd, 0x6}}, 0x0)
r8 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIONREAD(r8, 0x8080691a, &(0x7f0000000100))
execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='\x00'], &(0x7f0000000140)=[&(0x7f0000000100)='\x00'])
syz_open_pts()

7.865002258s ago: executing program 4 (id=28):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x2000)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = getuid()
setresuid(0x0, r1, 0x0)
seteuid(r1)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000400)='./file0\x00', 0x153, 0x0})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r3 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) (async)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000600)='./file0\x00', 0xc354, 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111) (async)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="efac5298e19a3082145f29fec62a447d83156d3bddd874a2ca670c169a3b547ea2b836e5f67d328b592a0281a82e705a31248b15b1fbf67149039edf0a84150f62121c32a0d53307670840496ab763d0ac6ca538aaa94ddc9c6c7f562072fc0162a726af5ce533b59ce2fdc8c933a030902da072a8c3f81c5bf7e7b2534888f86d40aff5eb181fe8f79f7c8ab4b45a807ea0c0c8d93cb578d075d4c66aef1b0f5c07904b1767b429d6dc55ab55a534f2236f3a561339fa0009719d7ac287e626642f11577e7e535233326e3e666621f1197c800ad192a29f67e541ae22ee0c595fa516f63570b2dbbba788a50c5e72e60fc76954b0b955b807949dab0444bf93fbf3efa1f3a346f82ae302a2387c240f74", 0x111)
mprotect(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x1, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0x2, 0x1}, {0x6, 0x6, 0xd3, 0xfffff804}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r4, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe)
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='r\x00')
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x3, 0xe0000000}, 0x10)

7.855776303s ago: executing program 6 (id=206):
r0 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
r1 = socket(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) (async)
setgid(0xffffffffffffffff)
setresgid(0x0, 0x0, 0xffffffffffffffff) (async)
setresgid(0x0, 0xffffffffffffffff, 0x0) (async)
r2 = syz_open_pts()
r3 = socket(0x18, 0x1, 0x0)
closefrom(r3)
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000100)={0x9f, 0x2, 0x77039cdd, 0x6, "307f42a358642e1ab93f88e7d0f297ca06d73e8f", 0xff, 0x9})
readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) (async)
dup(r0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5c, 0x9, 0x6b, 0x40000008}, {0x7c, 0x81, 0x6, 0x4}, {0x6, 0x80, 0x4, 0xc25}]}) (async)
syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[])

6.697743765s ago: executing program 7 (id=214):
syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="369d9162185e", @local, [{[], {0x8100, 0x0, 0x0, 0x3}}], {@generic={0x88a8}}}) (async)
syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="369d9162185e", @local, [{[], {0x8100, 0x0, 0x0, 0x3}}], {@generic={0x88a8}}})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

5.548797055s ago: executing program 1 (id=216):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x782, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="61994f19a4a59b11b088a35a8bd8e5a3e2c3a473b8c3aac634aab703de8d5a1fcbffe704be06f16054cd57e2113b11ceeedca6da8b53467321ba863114682b47395601f32976486c922ff3a64119a23a9ef881b66da0128dc333435630c9ccddc8ce0e27bbbe39a4dda071bb1419881b7ba52260045f9d9b2ffa703ca869296e98381973b7ef4a5fe9dca4d5ede072ec859a3e0ce812311f79b671da8dbc0dc603103fc9e726346c75aedb2064db0af864202ef6bc9e94e1989e4e3d8e9c9d993b0862cc42050b717ba47a3372267d7e4d771fc917132e43a871b33b357ee14578f0094f28364c226b0f1688ff92329b56b0376e352ec9", 0xf7}], 0x1) (async)
execve(0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x4e, 0x0) (async)
seteuid(0xffffffffffffffff) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfffc, 0x1, 0x4b, 0xbbfffff9}, {0x4c, 0x85, 0xff, 0x7}, {0x6, 0x6, 0x1, 0xfffff803}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a645d3be05a9b9695e0acf8d1ba3ee29d441ab6077da8e0600001c700c5a1f3fd11b33fcdb00fcfbaf2142", &(0x7f0000000000)=0x2c, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x10004, &(0x7f0000000740)=ANY=[]) (async)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xde8, 0x0) (async)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5.547936939s ago: executing program 2 (id=217):
syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, <r0=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000080)={<r1=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @rand_addr=0x7fffffff, @empty, @remote={0xac, 0x14, 0x0}}}}})
syz_emit_ethernet(0x160, &(0x7f0000000200)={@random="11e41bd95b82", @broadcast, [], {@ipv4={0x800, {{0x19, 0x4, 0x0, 0x28, 0x152, 0x67, 0x4, 0xfd, 0x1d, 0x0, @multicast2, @multicast2, {[@noop, @rr={0x7, 0x1b, 0xff, [@empty, @loopback, @broadcast, @multicast2, @rand_addr, @broadcast]}, @generic={0x94, 0x3, 'v'}, @generic={0x89, 0xa, "cfc772363bcc4b58"}, @generic={0x44, 0xf, "214aa7904ec5939b97eb3962cc"}, @timestamp={0x44, 0xc, 0x3, 0x0, 0x8, [{[@rand_addr=0x9], 0x1}]}, @noop, @noop, @ssrr={0x89, 0x7, 0x1, [@broadcast]}]}}, @tcp={{0x2, 0x0, r0, r1, 0x1, 0x0, 0x14, 0x10, 0x41a, 0x0, 0x3, {[@nop, @md5sig={0x13, 0x12, "999c7f0fde014d6d62bd30f25bbcb010"}, @sack={0x5, 0x1a, [0x2a, 0x9, 0x9, 0x6, 0x88, 0x101]}, @nop, @timestamp={0x8, 0xa, 0x13ca8}, @sack_perm={0x4, 0x2}]}}, {"2972111c8ae38fd3f89390b251952a04105b7b25c08d8fd43562f3fbfd13d7e906d0048723bbc46d90339f29c53f63f2fa62e74acf0c23d2262ac0444b1e77219613267a9a82d04698e2cfe74ce9069957a93bd0cefee7824862f3cf67fdb84d746da651d161a61eedf6247848879b8a02d9bfbe04837acb9346848f5fdfa4411276440bda087aca2d0c932e53a1e80c3773abab50e66ff8ceaa9d1d7e46"}}}}}})
syz_extract_tcp_res(&(0x7f0000000000), 0x1, 0x401)

5.547540549s ago: executing program 3 (id=218):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f00000000c0)={0x0, 0xffff})
munmap(&(0x7f0000000000/0xf000)=nil, 0xf000)
munlock(&(0x7f0000007000/0x1000)=nil, 0x1000)
execve(0x0, 0x0, 0x0)

5.543051701s ago: executing program 6 (id=219):
mknod(&(0x7f0000000980)='./file0\x00', 0x2020, 0x4000) (async)
sysctl$vm(&(0x7f00000000c0)={0x2, 0x7}, 0x2, 0x0, 0x0, &(0x7f0000000240), 0x0) (async, rerun: 64)
open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) (rerun: 64)

5.542497158s ago: executing program 7 (id=220):
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)="06b65bc6a7d5c7c4c9", 0x9)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000b40)="00000000c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1}, 0x406)
ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x800, 0x3, 0x0, 0x0, "000001e3bb4e3447c1d100000000000000000a30", 0x1, 0xffff2bd9})
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0)
r1 = kqueue()
kevent(r1, 0x0, 0x2, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0x75, 0x40, 0x7, 0xa}], 0x7, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900103a0000000000001000000000000000000000fe8000000000000083802ff0000000aac9"])
kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)

5.506013498s ago: executing program 4 (id=28):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x2000)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = getuid()
setresuid(0x0, r1, 0x0)
seteuid(r1)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000400)='./file0\x00', 0x153, 0x0})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r3 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) (async)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000600)='./file0\x00', 0xc354, 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111) (async)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111)
mprotect(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x1, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0x2, 0x1}, {0x6, 0x6, 0xd3, 0xfffff804}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r4, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe)
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='r\x00')
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x3, 0xe0000000}, 0x10)

5.492865657s ago: executing program 5 (id=70):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x5c6f, 0x0, <r0=>0xffffffffffffffff})
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x40, 0x2}, 0x0, 0x0, 0x0, 0xfd, 0xa9f, 0x9, 0x67, 0x2c, 0xfffffffc}) (async)
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)) (async)
clock_settime(0x2, &(0x7f0000000540)={0x1, 0x7fff}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1})
faccessat(r0, &(0x7f00000005c0)='./file0\x00', 0x2, 0x1) (async, rerun: 32)
readlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) (rerun: 32)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001780)={{'./file0\x00', './file0\x00', 0x20, 0x9}, &(0x7f0000001640)=[{@empty, '\x00', './file0\x00', 0xe, 0x8, 0x2, 0x5, 0xff, 0x3, 0xd4}, {@broadcast, '\x00', './file0\x00', 0x81, 0x6, 0x2, 0x6, 0x1, 0x9, 0x7}, {@loopback, '\x00', './file0\x00', 0x2d, 0xa, 0x2, 0x3, 0x8, 0x5, 0x81}, {@multicast2, '\x00', './file0\x00', 0x9, 0x66, 0x1a, 0x5, 0xfc, 0x7e, 0x8}, {@empty, '\x00', './file0\x00', 0x80, 0x2, 0x0, 0x7, 0x40, 0x7, 0x6}], 0x8, 0x5, 0xb7ff, 0xe4, 0x2, 0x8, 0x4, 0x3})
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001c00)={0x4, 0x7, 0x7ff, 0x259, "6b79cb5d806ed8abd7237748c68fab5452405073", 0x8001, 0x4}) (async)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001d40)={{'./file0\x00', './file0\x00', 0x12, 0x7}, &(0x7f0000001c40)=[{@multicast1, '\x00', './file0\x00', 0x1000, 0x3, 0x19, 0x7f, 0x5, 0x86, 0x5}, {@loopback, '\x00', './file0\x00', 0x4, 0x400, 0x2, 0x2, 0x26, 0x0, 0x52}, {@empty, '\x00', './file0\x00', 0x5, 0x3, 0x1a, 0x7, 0x9, 0x9e}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0xa31, 0x1a, 0x0, 0x7f, 0x81, 0xe4}], 0x4, 0x4, 0x800, 0x1, 0x6, 0xe4d4, 0x2, 0x200}) (async)
pselect(0x40, &(0x7f00000021c0)={0x43a0, 0x9, 0x8, 0x8, 0x401, 0xab, 0x4, 0x5}, &(0x7f0000002200)={0x5, 0x1, 0xfffffffffffffffd, 0x6, 0x0, 0xa, 0x2, 0x1}, &(0x7f0000002240)={0xff, 0x7fffffff, 0x3, 0x6, 0x3d, 0x8, 0x916, 0x7}, &(0x7f0000002280)={0xffffffffffffffff, 0xaf}, &(0x7f00000022c0)={0x105a}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002340)={&(0x7f0000002300)=[0x5b89968c], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x40046402, &(0x7f0000002380))
ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000003040)={{'./file0\x00', './file0\x00', 0x1, 0x9}, &(0x7f00000023c0)=[{'\x00', './file0\x00', 0x18, 0x7}, {'./file0\x00', './file0\x00', 0x0, 0x5}, {'./file0\x00', './file0\x00', 0x4d, 0x2}], 0x401, 0x3, 0x10000, 0x0, 0x5, 0x1000, 0x8, 0x80000000})
r3 = accept$unix(r0, 0x0, &(0x7f00000034c0))
closefrom(r3) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003600)={&(0x7f0000003500)=[0x0, 0x0], &(0x7f0000003540), &(0x7f0000003580), &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0x0, 0x5, 0xffff7f8a, 0xfffffffa, 0x5, 0x200})
r4 = semget(0x3, 0x2, 0x88)
semctl$GETPID(r4, 0x1, 0x4, &(0x7f0000003640)=""/229)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000003740), 0x8000, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000003780)={0x3, 0x6, './file0\x00', 0x3, 0x6, 0xe64f, 0x81})
unveil(&(0x7f00000037c0)='./file0/file0\x00', &(0x7f0000003800)='c\x00') (async, rerun: 64)
ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000003840)={0x8001, 0x3, 0x1}) (async, rerun: 64)
getitimer(0x1, &(0x7f0000003880)) (async)
symlinkat(&(0x7f00000038c0)='./file0/file0\x00', r0, &(0x7f0000003900)='./file0\x00') (async)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64)
ioctl$VT_GETSTATE(r5, 0x40067664, &(0x7f0000003940)) (async, rerun: 64)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000003980)={'./file0/file0\x00', 0x100, 0xff, 0x6, 0x0, 0x8, 0x4762, 0x7, 0x0, 0x1, 0x6, 0x9c01})

5.49251376s ago: executing program 7 (id=221):
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffe, 0x5, 0x2, 0x100200000, 0x200100000004, 0x81, 0xa77, 0xffffffffffffffff, 0x7, 0x3, 0x2, 0xc, 0x3, 0x200000000002, 0xd, 0x4, 0x1, 0x400000000100], [0x8, 0x1, 0x7, 0xfffffffffffffffc, 0x5e, 0x100000000007b98, 0xa, 0x6, 0x2, 0x7fffffffffffffff], [0x20000fffffffe, 0x8000, 0x40000000, 0x9, 0xb, 0x11001, 0x128], [0xc, 0x800001fffffffffb, 0x9, 0x4000002, 0xbffffffffffffffa, 0x8], [{0x20, 0x10410000, 0x4, 0x7d06}, {0x402, 0x1e, 0x5, 0x20000000000004}, {0xd, 0xfffffffc, 0xfffefffb, 0x280}, {0xb, 0x80004, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0x4, 0xc}, {0x3, 0x2000008, 0x9, 0x2000000000000000}, {0x5, 0x2, 0xfffffff7, 0xb}, {0xa, 0x104, 0x1, 0xfffffffffffffffc}], {0x1, 0x800008, 0x80000006, 0x4}, {0xfbfe, 0x16, 0x6d1, 0x6}}})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x4)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0xc, 0x9, 0x2009, 0x214, 0x4, 0x3}, 0x0, 0x0, 0x0) (async)
r1 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async)
r2 = syz_open_pts()
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xa, 0x3, 0x1, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
mprotect(&(0x7f0000044000/0x1000)=nil, 0x1000, 0x4) (async, rerun: 32)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (rerun: 32)
getegid() (async, rerun: 32)
close(r2) (async, rerun: 32)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYRES64=r2]) (async)
r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x6, 0x0})

4.940150979s ago: executing program 2 (id=222):
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x200, 0x86)

4.93929634s ago: executing program 3 (id=223):
kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{}, 0xfffffffffffffff9, 0x5, 0x10, 0x7fffffffffffffff}], 0x0, 0x0, 0x0, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async)
kevent(0xffffffffffffffff, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async, rerun: 32)
utimes(0x0, 0x0) (rerun: 32)

4.938651079s ago: executing program 6 (id=224):
socket$inet(0x18, 0x3, 0x102) (async)
socket$inet(0x18, 0x3, 0x102)
r0 = socket(0x2, 0x3, 0x2f)
dup(r0) (async)
r1 = dup(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$TIOCMBIS(r2, 0x8004746c, &(0x7f0000000080)=0xe088)
ioctl$AUDIO_GETSTATUS_ctl(r2, 0x40204128, &(0x7f0000000000))
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0xb}, 0x4, &(0x7f0000001540)="9b0209c3", &(0x7f00000002c0)=0x4, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x8, 0x646e, 0x1000, 0x1000, "64792629aa8c8040a8d4cce6e38d9fa8515bc510", 0xfffffffe, 0x1003}) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x8, 0x646e, 0x1000, 0x1000, "64792629aa8c8040a8d4cce6e38d9fa8515bc510", 0xfffffffe, 0x1003})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x0, 0x1, 0x68, 0x6ea4}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="f284", 0x2}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="b53e1ba3ee211141ab1f3fd1fb32fc26ac7b0bf676", &(0x7f0000000000)=0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x10004, &(0x7f0000000100)=ANY=[]) (async)
syz_emit_ethernet(0x10004, &(0x7f0000000100)=ANY=[])
r4 = socket(0x18, 0x2, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000001}})
setsockopt(r4, 0xfffffffb, 0xa, &(0x7f0000000700)="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", 0x1b8) (async)
setsockopt(r4, 0xfffffffb, 0xa, &(0x7f0000000700)="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", 0x1b8)
socket(0x2, 0x2, 0x0) (async)
r5 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r5, 0xc0206923, &(0x7f00000001c0))
socket(0x2, 0x1, 0x0) (async)
r6 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) (async)
ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0))
utimensat(r1, &(0x7f0000000140)='\x00', &(0x7f0000000280)={{0xa}, {0x10001, 0x80000002}}, 0x0)
futimes(r0, 0x0)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0})
ioctl$DIOCSETSTATUSIF(r7, 0xc0284414, &(0x7f0000002780)={'./file0/file0/fi', 0x0, 0x10001, 0x26, 0x1, 0xf0bf})

1.481933726s ago: executing program 0 (id=174):
setrlimit(0x8, &(0x7f0000000140)={0x3, 0x5a}) (async)
open(&(0x7f0000000200)='./file1/file0\x00', 0x0, 0x8a) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async)
r0 = syz_open_pts()
r1 = setsid()
kill(r1, 0x10) (async)
getrlimit(0x5, &(0x7f00000000c0))
getrlimit(0x1, &(0x7f00000001c0)) (async)
close(r0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x6b, [{&(0x7f0000cf9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f00009e0000/0x1000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x1}, {&(0x7f0000f6c000/0x1000)=nil, &(0x7f00007a4000/0x3000)=nil}, {&(0x7f0000038000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bee000/0x4000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c77000/0x1000)=nil, 0x8}, {&(0x7f00002fc000/0xd000)=nil, &(0x7f0000622000/0x1000)=nil, 0x9}, {&(0x7f0000bc5000/0x3000)=nil, &(0x7f0000e23000/0x4000)=nil, 0x3}, {&(0x7f0000208000/0x1000)=nil, &(0x7f00002de000/0x3000)=nil, 0x3}, {&(0x7f0000c91000/0x1000)=nil, &(0x7f0000402000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000025000/0x1000)=nil, &(0x7f0000b0b000/0x1000)=nil, 0x14c}, {&(0x7f00009ee000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfff}, {&(0x7f0000c71000/0x8000)=nil, &(0x7f0000ab6000/0x2000)=nil, 0x9}, {&(0x7f0000a97000/0x2000)=nil, &(0x7f000065f000/0x4000)=nil, 0x7}, {&(0x7f000034c000/0x4000)=nil, &(0x7f0000d60000/0x4000)=nil, 0x1}, {&(0x7f0000018000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0\x00', 0x299c, 0xfffffffa, 0x8b, 0x81, [0x7, 0x7, 0x7, 0x3, 0x6, 0x5, 0x33, 0x669, 0x7, 0x80000001, 0x4e00, 0x7f, 0xfffffc00, 0x9, 0x0, 0x9, 0x5, 0x787c5a33, 0x4, 0x4e, 0xd9, 0x6, 0x6, 0x4, 0x6, 0x4, 0x10, 0x0, 0x7839, 0x8, 0xfffffff8, 0x7fffffff, 0xffff, 0x80000000, 0x2, 0x5a, 0x2, 0x7, 0x200, 0x2, 0x9, 0x3, 0x0, 0x100, 0x3ff, 0xee, 0x4, 0x1, 0x81, 0x5, 0x30, 0x100, 0x4, 0x3, 0xcb, 0x6760, 0x2, 0x9, 0xa, 0x5, 0x6, 0x1, 0x800, 0xb31b, 0x8, 0x1250, 0x6, 0x9, 0x7, 0x1, 0x68b, 0x7, 0x5, 0x0, 0xf, 0x80, 0x1, 0x400, 0x0, 0x80, 0x3ff, 0xdd2f, 0x9ce, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x2, 0x401, 0xcd, 0x6, 0x5, 0xe3b, 0x401, 0x11f5, 0x8, 0x69e8, 0x24d5, 0x69, 0xfffffffe, 0x5, 0x7, 0x1, 0x2, 0x6, 0x200, 0x7, 0x80000000, 0x8, 0x10001, 0x632ffa74, 0x3ff, 0x6, 0xb510, 0x0, 0x3, 0xc, 0xa5, 0x0, 0x2, 0xfff, 0x5ec1, 0x7, 0x8, 0x0, 0xfffffba7, 0xff, 0x2, 0x1, 0x377, 0x9, 0x654, 0xe, 0x8, 0x2540000, 0x1f00, 0xc2, 0x8, 0xc, 0x5, 0x9, 0x3, 0x4, 0x0, 0x3ff, 0x8, 0xfffffff0, 0x3, 0x380, 0x3, 0x1, 0xffffffff, 0xdf, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x640, 0xfff, 0x0, 0x10, 0x4, 0x1000, 0x69db78bf, 0x321fc0, 0xfda, 0x5, 0x1, 0x7f, 0xfffffffb, 0x4ffc, 0xdba1, 0x7f, 0x10, 0x9, 0x4, 0xffff0000, 0xd8fe, 0x1, 0x7ff, 0x700000, 0x5, 0x81, 0x2, 0x6, 0x3ff, 0x1, 0x85cd, 0x5, 0xbaf, 0x26b, 0x80000000, 0x1, 0x8, 0x5ed, 0x10, 0x5, 0xf, 0x400, 0xffffff07, 0xfffffffa, 0x401, 0x7, 0x7, 0x101, 0x200, 0x8, 0x9, 0x1, 0x8000, 0x10000, 0x3, 0x2, 0x81, 0xc00000, 0x2, 0x6, 0x9, 0x10000, 0x80, 0x3, 0xd, 0x7, 0x5, 0x3, 0x7, 0x30, 0x9, 0x3de57e0b, 0x80, 0x7, 0x5, 0x97, 0x3, 0x2, 0x9, 0x7, 0x5, 0x10, 0x4, 0x7, 0x7f, 0x1, 0x8001, 0x0, 0x80, 0x1, 0x7ff, 0x10001, 0x9, 0x80000000, 0xfffff800, 0x8, 0x2, 0x9, 0x30, 0x0, 0x4, 0x7ff, 0x7, 0x10001, 0xbeb, 0xf73, 0x8, 0x7, 0x4, 0xa92, 0x5, 0x7c, 0x6, 0x7ff, 0x53f, 0x200, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x101, 0x9, 0x7, 0x10, 0x7fffffff, 0x0, 0xbf, 0x8000, 0xa, 0x8, 0x81, 0x80000000, 0x8, 0x101, 0x8, 0xad, 0x594, 0x3, 0xf31c, 0x1, 0x9, 0x9, 0x7, 0xfffffffc, 0x8, 0x0, 0x0, 0xfffffffa, 0x47, 0x8, 0x7, 0x800, 0x5, 0x101, 0xffffffff, 0x7fff, 0x74c, 0x79, 0x7, 0x9, 0xbebb, 0x448b, 0x401, 0x7, 0x32fe, 0xffffffff, 0x9, 0x2, 0x90, 0x7, 0x6df, 0x3, 0x9, 0xfffffff8, 0x8, 0x0, 0x8001, 0x3ff, 0x9e, 0x1, 0x7, 0x6, 0x9ff, 0x8, 0xb6b4, 0xa, 0x0, 0x4, 0x14400000, 0x8bbb, 0x6, 0x400, 0xc, 0x0, 0x2, 0x100, 0x4, 0x80000001, 0x6, 0x1000, 0x9f, 0xd7d, 0x7fffffff, 0x7f, 0x40, 0x2, 0x1f, 0xfbb, 0x6, 0x4, 0x0, 0x0, 0x0, 0x914, 0x5, 0x4, 0xfffffff9, 0x6, 0xdd0, 0x1, 0x4, 0xf, 0x6, 0x6, 0x7, 0x30bc, 0x8000, 0x100, 0x1, 0x7, 0x7, 0xf9, 0x5, 0x4, 0x6, 0xc, 0x5cb7, 0x6db, 0x2, 0x1, 0xf, 0x3, 0x9, 0x6, 0x6, 0x10000, 0xbe9, 0x0, 0x513f, 0x0, 0x3, 0x3, 0x400, 0xe, 0x0, 0x6, 0x4, 0x3, 0x10000000, 0x7fff, 0xfffffffb, 0x7, 0x9, 0x0, 0x43c, 0x9, 0x3c00000, 0x7fff, 0x4, 0xfff, 0x80000000, 0x800, 0x1, 0x1, 0xf7, 0x4, 0x81, 0x0, 0x8, 0x3, 0x1, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x10000, 0x27, 0x80000001, 0x1, 0x3, 0x9, 0x7, 0x7f, 0x2, 0x1, 0x9, 0x8f, 0x7, 0x5, 0x7, 0x3, 0xd25, 0x5, 0x2, 0xca86, 0x10000, 0x10, 0x0, 0x3ff, 0x1, 0x5, 0xfff, 0x10, 0x9518, 0x25c, 0x9, 0x8, 0xe9, 0x585, 0x5, 0x800, 0x7, 0x80000001, 0x58, 0x6, 0xffffffff, 0xfffffff9, 0x6, 0x8, 0x5b74ed42, 0xf, 0x8001, 0x3, 0x7fffffff, 0x7, 0xa623, 0x5, 0xa1c, 0x5, 0xa, 0xfffffff7, 0x1, 0x3ca29155, 0x1, 0x1, 0xb10, 0x9, 0x12991041]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
sysctl$net_inet_ipip(&(0x7f0000000100)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r3 = socket$inet(0x2, 0x8003, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

1.340251159s ago: executing program 1 (id=216):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x782, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="61994f19a4a59b11b088a35a8bd8e5a3e2c3a473b8c3aac634aab703de8d5a1fcbffe704be06f16054cd57e2113b11ceeedca6da8b53467321ba863114682b47395601f32976486c922ff3a64119a23a9ef881b66da0128dc333435630c9ccddc8ce0e27bbbe39a4dda071bb1419881b7ba52260045f9d9b2ffa703ca869296e98381973b7ef4a5fe9dca4d5ede072ec859a3e0ce812311f79b671da8dbc0dc603103fc9e726346c75aedb2064db0af864202ef6bc9e94e1989e4e3d8e9c9d993b0862cc42050b717ba47a3372267d7e4d771fc917132e43a871b33b357ee14578f0094f28364c226b0f1688ff92329b56b0376e352ec9", 0xf7}], 0x1) (async)
execve(0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x4e, 0x0) (async)
seteuid(0xffffffffffffffff) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfffc, 0x1, 0x4b, 0xbbfffff9}, {0x4c, 0x85, 0xff, 0x7}, {0x6, 0x6, 0x1, 0xfffff803}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a645d3be05a9b9695e0acf8d1ba3ee29d441ab6077da8e0600001c700c5a1f3fd11b33fcdb00fcfbaf2142", &(0x7f0000000000)=0x2c, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x10004, &(0x7f0000000740)=ANY=[]) (async)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xde8, 0x0) (async)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.33953768s ago: executing program 2 (id=225):
sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0xfffffcac)
r0 = syz_open_pts()
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800})
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x4003, 0x0, 0x6, 0x401, "b7336626918f00000000002000000107001000", 0xe, 0x209})
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000001340)=[{0x1, '\x00', 0xa1}]})
mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0xc7)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pread(r1, &(0x7f0000000200)="cc236c92", 0x4, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0)
ioctl$TIOCSETA(r3, 0xc0104453, &(0x7f0000000040)={0x474, 0x408, 0xfeff, 0x10070, "456000004fcb420865abbf000200000000000001", 0x8, 0x7})
r4 = socket(0x11, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x18, 0x2, 0xd4, "6845e57dee28494ce4c5d9d814b085c2", 0x9c9}, 0x1c)
r5 = socket(0x11, 0x3, 0x0)
r6 = semget(0x2, 0x2, 0x7f5)
semctl$GETVAL(r6, 0x193f45c5ce09d979, 0x5, 0x0)
sendto$unix(r5, &(0x7f0000000180)="b1000504600000000000180007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673051d2d236073705ae04be38164991f7b85143222b297be1aa5b2354eb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000ffbb27c501f1306c7f008a09ba09006574ffffffffff35b5710426037503682ce371a30080", 0xb1, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4)
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40001004, 0xffffffffffffffff)
write(r2, &(0x7f0000000240)="d101c7cdbfafa5f9dfa1f12cb7d3741dbeaf06762e26706282dc13b5bd25de82e5e7fc3439a454f821b53b319abebd969d528a", 0x33)

1.33729495s ago: executing program 3 (id=226):
setrlimit(0x8, &(0x7f00000003c0)={0xa, 0xfffffffffffffffd})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000240)={0x803, 0xfffffffb, 0x56af, 0x655, "291cfcf208000100f0236b6e75c34a000e00", 0x4, 0x1})
semget(0x2, 0x4, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
execve(0x0, 0x0, 0x0)

1.333985861s ago: executing program 4 (id=28):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x2000)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = getuid()
setresuid(0x0, r1, 0x0)
seteuid(r1)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000400)='./file0\x00', 0x153, 0x0})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r3 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) (async)
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000600)='./file0\x00', 0xc354, 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="efac5298e19a3082145f29fec62a447d83156d3bddd874a2ca670c169a3b547ea2b836e5f67d328b592a0281a82e705a31248b15b1fbf67149039edf0a84150f62121c32a0d53307670840496ab763d0ac6ca538aaa94ddc9c6c7f562072fc0162a726af5ce533b59ce2fdc8c933a030902da072a8c3f81c5bf7e7b2534888f86d40aff5eb181fe8f79f7c8ab4b45a807ea0c0c8d93cb578d075d4c66aef1b0f5c07904b1767b429d6dc55ab55a534f2236f3a561339fa0009719d7ac287e626642f11577e7e535233326e3e666621f1197c800ad192a29f67e541ae22ee0c595fa516f63570b2dbbba788a50c5e72e60fc76954b0b955b807949dab0444bf93fbf3efa1f3a346f82ae302a2387c240f74", 0x111) (async)
sysctl$kern(&(0x7f0000000240)={0x1, 0x2c}, 0x2, &(0x7f00000002c0)="ea6fa833c5cb0a6f432e88f407a0e462ffe7d54b167753e67f0ccc93f07e4bb20b7786af62074082fc7d4b0d5c6b59170f1bf2c7300f83863ee56a3ff57acf1472aa328f808b581240ce3ea42dd4925187dc34f243f5165db1bce2170860164d3242f2dc3c3383562db9e17d758498699448324cedd4c0c4c824e10394e975f4e40efa5115a45c947a2d4dce0d", &(0x7f0000000380)=0x8d, &(0x7f0000000440)="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", 0x111)
mprotect(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x1, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0x2, 0x1}, {0x6, 0x6, 0xd3, 0xfffff804}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r4, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe)
execve(0x0, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='r\x00')
mkfifo(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x3, 0xe0000000}, 0x10)

1.333868122s ago: executing program 6 (id=227):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000100)={0x0, 0x5, 0x3, 0xf, "000000000000000000000000f900", 0x9})
sysctl$kern(&(0x7f0000000040)={0x1, 0x22}, 0x2, &(0x7f0000000000)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x33, 0x0, 0x0)

1.333610665s ago: executing program 7 (id=221):
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffe, 0x5, 0x2, 0x100200000, 0x200100000004, 0x81, 0xa77, 0xffffffffffffffff, 0x7, 0x3, 0x2, 0xc, 0x3, 0x200000000002, 0xd, 0x4, 0x1, 0x400000000100], [0x8, 0x1, 0x7, 0xfffffffffffffffc, 0x5e, 0x100000000007b98, 0xa, 0x6, 0x2, 0x7fffffffffffffff], [0x20000fffffffe, 0x8000, 0x40000000, 0x9, 0xb, 0x11001, 0x128], [0xc, 0x800001fffffffffb, 0x9, 0x4000002, 0xbffffffffffffffa, 0x8], [{0x20, 0x10410000, 0x4, 0x7d06}, {0x402, 0x1e, 0x5, 0x20000000000004}, {0xd, 0xfffffffc, 0xfffefffb, 0x280}, {0xb, 0x80004, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0x4, 0xc}, {0x3, 0x2000008, 0x9, 0x2000000000000000}, {0x5, 0x2, 0xfffffff7, 0xb}, {0xa, 0x104, 0x1, 0xfffffffffffffffc}], {0x1, 0x800008, 0x80000006, 0x4}, {0xfbfe, 0x16, 0x6d1, 0x6}}})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x4)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0xc, 0x9, 0x2009, 0x214, 0x4, 0x3}, 0x0, 0x0, 0x0) (async)
r1 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async)
r2 = syz_open_pts()
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xa, 0x3, 0x1, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
mprotect(&(0x7f0000044000/0x1000)=nil, 0x1000, 0x4) (async, rerun: 32)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (rerun: 32)
getegid() (async, rerun: 32)
close(r2) (async, rerun: 32)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYRES64=r2]) (async)
r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x6, 0x0})

343.675776ms ago: executing program 2 (id=228):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f0000000c40)={0x7b, 0x40003ff, {'\x00', './file0/file0\x00', './file0/file0\x00', './file0/file0\x00', {{0xdcea, 0xac}, {0xa, 0xf}, 0x9}, {{0x40, 0x1}, {0x8001, 0x6}, 0x1}, {{0x8}, {0x20001, 0x4}, 0x1}, {0x6, 0x1, 0x5}, 0x0, 0x12, 0x1, 0x358, 0x1000}})
ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "20180000000001002500", 0xfffffffb, 0xb})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3})
closefrom(r1) (async)
closefrom(r1)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ffbf, 0x0)

343.282574ms ago: executing program 3 (id=229):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000), 0x0)
msgctl$IPC_RMID(0x0, 0x2000000)

342.923765ms ago: executing program 6 (id=230):
r0 = socket(0x11, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x18, 0x2, 0xd4, "6845e57fee28494ce4c5d9d814b0cfc2", 0x9c9}, 0x1c) (async)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000180)="b1000504600000000000180007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673051d2d236073705ae04be38164991f7b85143222b297be1aa5b2354eb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000ffbb27c501f1306c7f008a09ba09006574ffffffffff35b5710426037503682ce371a30080", 0xb1, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x28, 0x4c}, 0xc, 0x2a3, 0x0, 0x0, 0x40000003, 0x800000000000013, 0x8000000200, 0x1}) (async)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000540)="3527afa8718e063bb29cc31e07027e91e3a35fe22d7d2afe45b798d701000000000000005f16418b10298d0f05093b2679ad8263991fbf98d13f474354013e87c8ac3d6251e65c1e0041808553da2e077c04461924c8b43979f2dccb3d71ec49b820197845ed4f2eb397b0e98e080e8f705752b73f71656c1171a921a9300bd7a890b3b68734adc63a55b84015a2cf14f92e738d5a0919722daf81196a143354444ea21f4402a6f3da3605cd5e4ef1e84f0ee35bc33fe098c32882a21fdcdaa074b53b7139f4825455a7fba3b28af99a49616a775cbf6e4e0b0b03d41632994ce64a5366bc1ce06e92ddb01f13f6a55bb7631e154d53", 0xf6}], 0x1, 0x9) (async)
execve(0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x37)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000080)={0x1, 0x8ce}) (async)
r4 = kqueue()
kevent(r4, &(0x7f0000000040)=[{{r4}, 0xfffffffffffffff9, 0x23, 0x1, 0x3fffffffffffff, 0x6}], 0x1, 0x0, 0x5, 0x0) (async)
closefrom(0xffffffffffffffff)

342.573047ms ago: executing program 7 (id=231):
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4)
r0 = semget$private(0x0, 0xf, 0x692)
semop(r0, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000300)=[0x401])
semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000400)=""/240)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffbfffffff86dd606a9a0000083a6900000000000000000015000000800000fe7ffffffffffffffb2b4b00"/62])
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) (async)
semget$private(0x0, 0xf, 0x692) (async)
semop(r0, 0x0, 0x0) (async)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000300)=[0x401]) (async)
semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000400)=""/240) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffbfffffff86dd606a9a0000083a6900000000000000000015000000800000fe7ffffffffffffffb2b4b00"/62]) (async)

139.92152ms ago: executing program 3 (id=232):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
r2 = accept$unix(r0, &(0x7f00000001c0)=@file={0x0, 0x0, ""/86}, &(0x7f0000000280)=0x58)
getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000002c0), &(0x7f0000000300)=0x10)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000006c0)={&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, 0x2})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x6, 0x0})
bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f0000001100)=@abs={0xff, 0x0, 0x0, 0x3}, 0x8)

976.066µs ago: executing program 2 (id=233):
setuid(0xffffffffffffffff)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @random="aa6d6500", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @generic="42ecbdce58a515a8cbeefaabeb62b59644044e327885cf37ea0f9600f63e5e19d295a452b79d09a50d4441d5a8488a72e1aa1601629dc0cb"}}}})
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x800)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/4096}, 0x1008, 0x1, 0x1800)

405.322µs ago: executing program 3 (id=234):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x186)
r1 = getpid()
mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x1, 0x2812, r0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x40, 0x16cf8ee, 0xfffffffffffffffd, 0x7, 0x181c, 0x8, 0x2000000000000084}, 0x0, 0x0, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0)
r3 = semget(0x0, 0x1, 0x281)
semop(r3, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x1)
r4 = semget(0x0, 0x1, 0x281)
ioctl$FIONREAD(0xffffffffffffffff, 0x8020697a, 0x0)
semop(r4, &(0x7f00000000c0)=[{0x0, 0x8, 0x1800}], 0x1)
r5 = openat$bpf(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, 0x0)
syz_emit_ethernet(0xe, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0)
r8 = dup3(r7, r6, 0x10000)
read(r8, &(0x7f0000000040)=""/92, 0x5c)
r9 = socket(0x1, 0x1, 0x6)
ioctl$DIOCMAP(r8, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file1\x00', r9, 0x1})
pledge(0x0, &(0x7f0000000000)='\x00\xfb\xa0\xb2gj\xba\xfc\x85\xb1!z\xf5\xbcL\xad\x81_\xd0\x9ez\xe9w\xf6\x82\x16\xf8\xde IN\xe2\xe1G\"7\xe1\xd2\x03.\xea\x92v\xcci!Q\xf2\xd7V\x96\x1b\xcd\x03\x1c\x9eO\xbag\n\xf88\b\xde<a\xe5\xd5\x15\x02\xc9\xcc\x01<5\xad\n\x98\xd3\xa5Q\xb9\x97\xfc=\xd9\x10\xfct\x8f\xeb\xcd\xbe8\xaa3\vpu\xbd\x18\x93\xde\xb9\t\b\xc1u\xff\x02:GI\x9b\x02')
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1100, r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
pledge(0x0, &(0x7f0000002840)='tty   \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=<l\x8c\x01\xe3\x05$\x1c\x04B\x00\xa4P\x04\xcf\x87\xaa\x96iP\x14{4\xe6\x87\x9d\x8f\bz9$\x10_\xd8E\x93\x92\xf5\x8au\xab\xf9)\xf5\xa6\xc7\xc8\xed\xb9\x1f:\x03K\xa2\xdbUshx\xbe\\\x19\xdax\xeb_\x10|r\x1e\x06p>\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659)
fcntl$setown(r2, 0x6, r1)
r10 = socket(0x11, 0x2, 0x3)
sendto$unix(r10, &(0x7f0000000280)="b1000501600000001700000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x8, 0x0, 0x0)

0s ago: executing program 5 (id=70):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x5c6f, 0x0, <r0=>0xffffffffffffffff})
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x40, 0x2}, 0x0, 0x0, 0x0, 0xfd, 0xa9f, 0x9, 0x67, 0x2c, 0xfffffffc}) (async)
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)) (async)
clock_settime(0x2, &(0x7f0000000540)={0x1, 0x7fff}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1})
faccessat(r0, &(0x7f00000005c0)='./file0\x00', 0x2, 0x1) (async, rerun: 32)
readlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) (rerun: 32)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001780)={{'./file0\x00', './file0\x00', 0x20, 0x9}, &(0x7f0000001640)=[{@empty, '\x00', './file0\x00', 0xe, 0x8, 0x2, 0x5, 0xff, 0x3, 0xd4}, {@broadcast, '\x00', './file0\x00', 0x81, 0x6, 0x2, 0x6, 0x1, 0x9, 0x7}, {@loopback, '\x00', './file0\x00', 0x2d, 0xa, 0x2, 0x3, 0x8, 0x5, 0x81}, {@multicast2, '\x00', './file0\x00', 0x9, 0x66, 0x1a, 0x5, 0xfc, 0x7e, 0x8}, {@empty, '\x00', './file0\x00', 0x80, 0x2, 0x0, 0x7, 0x40, 0x7, 0x6}], 0x8, 0x5, 0xb7ff, 0xe4, 0x2, 0x8, 0x4, 0x3})
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001c00)={0x4, 0x7, 0x7ff, 0x259, "6b79cb5d806ed8abd7237748c68fab5452405073", 0x8001, 0x4}) (async)
ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001d40)={{'./file0\x00', './file0\x00', 0x12, 0x7}, &(0x7f0000001c40)=[{@multicast1, '\x00', './file0\x00', 0x1000, 0x3, 0x19, 0x7f, 0x5, 0x86, 0x5}, {@loopback, '\x00', './file0\x00', 0x4, 0x400, 0x2, 0x2, 0x26, 0x0, 0x52}, {@empty, '\x00', './file0\x00', 0x5, 0x3, 0x1a, 0x7, 0x9, 0x9e}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0xa31, 0x1a, 0x0, 0x7f, 0x81, 0xe4}], 0x4, 0x4, 0x800, 0x1, 0x6, 0xe4d4, 0x2, 0x200}) (async)
pselect(0x40, &(0x7f00000021c0)={0x43a0, 0x9, 0x8, 0x8, 0x401, 0xab, 0x4, 0x5}, &(0x7f0000002200)={0x5, 0x1, 0xfffffffffffffffd, 0x6, 0x0, 0xa, 0x2, 0x1}, &(0x7f0000002240)={0xff, 0x7fffffff, 0x3, 0x6, 0x3d, 0x8, 0x916, 0x7}, &(0x7f0000002280)={0xffffffffffffffff, 0xaf}, &(0x7f00000022c0)={0x105a}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002340)={&(0x7f0000002300)=[0x5b89968c], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x40046402, &(0x7f0000002380))
ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000003040)={{'./file0\x00', './file0\x00', 0x1, 0x9}, &(0x7f00000023c0)=[{'\x00', './file0\x00', 0x18, 0x7}, {'./file0\x00', './file0\x00', 0x0, 0x5}, {'./file0\x00', './file0\x00', 0x4d, 0x2}], 0x401, 0x3, 0x10000, 0x0, 0x5, 0x1000, 0x8, 0x80000000})
r3 = accept$unix(r0, 0x0, &(0x7f00000034c0))
closefrom(r3) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003600)={&(0x7f0000003500)=[0x0, 0x0], &(0x7f0000003540), &(0x7f0000003580), &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0x0, 0x5, 0xffff7f8a, 0xfffffffa, 0x5, 0x200})
r4 = semget(0x3, 0x2, 0x88)
semctl$GETPID(r4, 0x1, 0x4, &(0x7f0000003640)=""/229)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000003740), 0x8000, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000003780)={0x3, 0x6, './file0\x00', 0x3, 0x6, 0xe64f, 0x81})
unveil(&(0x7f00000037c0)='./file0/file0\x00', &(0x7f0000003800)='c\x00') (async, rerun: 64)
ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000003840)={0x8001, 0x3, 0x1}) (async, rerun: 64)
getitimer(0x1, &(0x7f0000003880)) (async)
symlinkat(&(0x7f00000038c0)='./file0/file0\x00', r0, &(0x7f0000003900)='./file0\x00') (async)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64)
ioctl$VT_GETSTATE(r5, 0x40067664, &(0x7f0000003940)) (async, rerun: 64)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000003980)={'./file0/file0\x00', 0x100, 0xff, 0x6, 0x0, 0x8, 0x4762, 0x7, 0x0, 0x1, 0x6, 0x9c01})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts.
pckbd_enable: command error
kernel: protection fault trap, code=0
Stopped at      lf_advlock+0x2fa:       incl    0x28(%r12)
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> show kasan
No such command
ddb{1}> trace
lf_advlock(ffff800001601f20,0,ffff80003a3aa010,2,ffff80002a2acd80,40) at lf_advlock+0x2fa
VOP_ADVLOCK(fffff38075d802b0,ffff80003a3aa010,2,ffff80002a2acd80,40) at VOP_ADVLOCK+0x87
sys_fcntl(ffff800038796a88,ffff80002a2acee0,ffff80002a2ace30) at sys_fcntl+0x120f
syscall(ffff80002a2acee0) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6824db69d00, count: -5
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a2acca0
rbx               0x2dc847e7000002ff
rdx                                0
rcx               0xffff800038796a88
rax               0xffff80002999dff0
r8                    0x7f7fffffc000
r9                               0x1
r10               0xb04f65b9fc0e6f7f
r11               0x98ddc7ab12f12e96
r12               0xdeafbeaddeafbead
r13                              0x2
r14               0xffff80002a2acd80
r15               0x5237b818fffffd01
rip               0xffffffff81da257a    lf_advlock+0x2fa
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002a2acc10
ss                              0x10
lf_advlock+0x2fa:       incl    0x28(%r12)
ddb{1}> show proc
PROC (syz-executor) tid=163056 pid=9765 tcnt=6 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800038796558,0xffff8000387974f8
    process=0xffff80003a3a7040 user=0xffff80002a2a7000, vmspace=0xfffff3800b1cb3d0
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 10393    7961  80567     0  7    0x100000          0           sh
 22360  158373  46601     0  2         0x2          0           sh
  5694  363760  77126     0  2      0x2044          0           syz-executor
 80567  463168  50669     0  3    0x100002       0x88 sigsusp   sh
  9765  459500  32465    -1  2        0x10          0           syz-executor
  9765  327253  32465    -1  3        0x10  0x4000080 fsleep    syz-executor
  9765   71060  32465    -1  3        0x10  0x4000080 fsleep    syz-executor
* 9765  163056  32465    -1  7        0x10  0x4000000           syz-executor
  9765  145011  32465    -1  3        0x10  0x4000080 fsleep    syz-executor
  9765  316255  32465    -1  3        0x10  0x4000000 lockflk   syz-executor
 50669   42730  51954     0  3         0x2       0x80 wait      syz-executor
 20157  418179  15985     0  2           0          0           syz-executor
 93274  458151  51954     0  2         0x2          0           syz-executor
 12283  466374  27463     0  3           0       0x80 nanoslp   syz-executor
 12283   86819  27463     0  3           0  0x4000080 kqread    syz-executor
 12283  140330  27463     0  3           0  0x4000080 fsleep    syz-executor
 12283  281143  27463     0  3           0  0x4000080 fsleep    syz-executor
 46601  520623  51954     0  3         0x2       0x80 wait      syz-executor
 77126  474513  51954     0  3        0x82          0 ppwait    syz-executor
 15985  179610  51954     0  3         0x2       0x80 nanoslp   syz-executor
 27463   64768  51954     0  3         0x2       0x80 nanoslp   syz-executor
 76004   37633  51954     0  2         0x2          0           syz-executor
 32465  460288  51954     0  3         0x2       0x80 nanoslp   syz-executor
 51954  387362  14789     0  3         0x2       0x80 kqread    syz-executor
 14789  203782  42120     0  3    0x100002       0x88 sigsusp   ksh
 42120  488155  30462     0  3        0x10       0x88 kqread    sshd-session
 30462   81877  29238     0  3        0x12       0x80 kqread    sshd-session
 76582  470809      1     0  3    0x100003       0x80 ttyin     getty
 29238   91004      1     0  3           0       0x88 kqread    sshd
 77670  162794  18857    74  3   0x1100012       0x80 bpf       pflogd
 18857  468960      1     0  3           0       0x80 sbwait    pflogd
 66000  442192  51050    73  3   0x1100010       0x80 kqread    syslogd
 51050  483143      1     0  3    0x100002       0x80 sbwait    syslogd
 52269  250497      1     0  3    0x100000       0x80 kqread    resolvd
  4762  479141   1206    77  3    0x100012       0x80 kqread    dhcpleased
 55007   93730   1206    77  3    0x100012       0x80 kqread    dhcpleased
  1206   24076      1     0  3           0       0x80 kqread    dhcpleased
 27455   36721      0     0  3     0x14000      0x200 bored     smr
 73409  166877      0     0  2     0x14000      0x200           zerothread
   390  195531      0     0  3     0x14000      0x200 aiodoned  aiodoned
  6590  469414      0     0  3     0x14000      0x200 syncer    update
 74218  315691      0     0  3     0x14000      0x200 cleaner   cleaner
 96828   90727      0     0  3     0x14000      0x200 reaper    reaper
 60366  126691      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 27340  120716      0     0  3     0x14000      0x200 bored     viomb
 93450  322820      0     0  3     0x14000 0x40000200 acpi0     acpi0
 24979  432312      0     0  3     0x14000 0x40000200           idle1
 36845   42824      0     0  3     0x14000      0x200 bored     softnet1
 81663    9059      0     0  3     0x14000      0x200 bored     softnet0
 80667   19519      0     0  3     0x14000      0x200 smrbar    systqmp
 34045  410796      0     0  3     0x14000      0x200 bored     systq
 23521  432205      0     0  3     0x14000      0x200 tmoslp    softclockmp
 50081  269976      0     0  3     0x14000 0x40000200 tmoslp    softclock
 67840  439827      0     0  3     0x14000 0x40000200           idle0
     1  317378      0     0  4  0x40000002  0x8000080           init
     0       0     -1     0  3  0x10010000      0x200 scheduler swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffff3806cd1c910)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  pmap_enter+0x24b
#3  uvm_fault_upper_lookup+0x30d
#4  uvm_fault+0x159
#5  upageflttrap+0xa9
#6  usertrap+0x430
#7  recall_trap+0x8
Process 10393 (sh) thread 0xffff8000387962c0 (7961)
shared rwlock amaplk r = 0 (0xfffff3806d106e78)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvm_fault_check+0x8a9
#3  uvm_fault+0x106
#4  upageflttrap+0xa9
#5  usertrap+0x430
#6  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffff3806cd1d120)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x430
#7  recall_trap+0x8
Process 22360 (sh) thread 0xffff80002a222540 (158373)
exclusive rwlock vmmaplk r = 0 (0xfffff3800b1cba88)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x430
#7  recall_trap+0x8
Process 9765 (syz-executor) thread 0xffff800038796a88 (163056)
exclusive rwlock lockflk r = 0 (0xffffffff8392f7c8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  lf_advlock+0x227
#3  VOP_ADVLOCK+0x87
#4  sys_fcntl+0x120f
#5  syscall+0xbd4
#6  Xsyscall+0x128
Process 76004 (syz-executor) thread 0xffff800045fee548 (37633)
exclusive rwlock vmmaplk r = 0 (0xfffff3806cedf6d0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvmspace_fork+0x12b
#4  process_new+0x583
#5  fork1+0x3f6
#6  syscall+0xb17
#7  Xsyscall+0x128
exclusive rwlock vmmaplk r = 0 (0xfffff3806cedfaa0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvmspace_fork+0x44
#4  process_new+0x583
#5  fork1+0x3f6
#6  syscall+0xb17
#7  Xsyscall+0x128
Process 80667 (systqmp) thread 0xffff800045ffea60 (19519)
shared rwlock systqmp r = 0 (0xffffffff838ec3e8)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11051  12081K   12223K 166960K     12626        0
            pcb    17     12K      12K 166960K        55        0
         rtable   169      7K       9K 166960K      2311        0
             pf    31     17K      24K 166960K       217        0
         ifaddr    29      5K       8K 166960K       317        0
        ifgroup    47      2K       2K 166960K       340        0
         sysctl     1      1K       9K 166960K         7        0
       counters    66     36K      37K 166960K       220        0
       ioctlops     0      0K       4K 166960K      1738        0
            iov     0      0K      12K 166960K         7        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1356     85K      86K 166960K      2263        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem    27      1K       2K 166960K       550        0
        dirhash    15      2K       2K 166960K        15        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    18     62K      89K 166960K      1408        0
          sigio     0      0K       0K 166960K         3        0
           proc    72    115K     180K 166960K      2390        0
        subproc    63      3K       4K 166960K       676        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        24        0
       in_multi    55      3K       6K 166960K       816        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     0      0K       0K 166960K        38        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    55    254K     254K 166960K        55        0
           exec     1      0K       1K 166960K      1534        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   205    151K     168K 166960K     10934        0
       UVM aobj     9      2K       2K 166960K         9        0
     pinsyscall    43     86K     104K 166960K      4242        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         3        0
            NDP    12      0K       2K 166960K       230        0
           temp    71   9124K    9188K 166960K     22463        0
         kqueue    15     20K      26K 166960K        82        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120      214    0      209     1     0     1     1     0     8    0
rtentry    176      819    0      751     6     0     6     6     0     8    0
unpcb      144      209    0      192     4     3     1     4     0     8    0
syncache   336        5    0        5     1     1     0     1     0     8    0
tcpcb      736      118    0      114     7     6     1     7     0     8    0
arp        136      146    0      136     1     0     1     1     0     8    0
inpcb      328      547    0      540     8     7     1     7     0     8    0
nd6        152      218    0      206     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     1     0     1     0     8    0
kcovpl      48       75    0       68     1     0     1     1     0     8    0
ppxss      1192       7    0        7     2     2     0     1     0     8    0
pfstscr     40        4    0        4     1     1     0     1     0     8    0
pffrag     232        3    0        1     1     0     1     1     0   482    0
pffrnode    88        3    0        1     1     0     1     1     0     8    0
pffrent     40        4    0        2     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfsrclim   320        1    0        1     1     1     0     1     0     8    0
pfanchor   1288       6    0        1     1     0     1     1     0     8    0
pfstitem    24       42    0       15     1     0     1     1     0     8    0
pfstkey    128       47    0       20     2     0     2     2     0     8    0
pfstate    448       45    0       18     4     0     4     4     0     8    0
pfrule     1360      22    0       16     2     0     2     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     3345    0     2981    34     6    28    34     0     8    0
art_table   40     3347    0     2981     6     0     6     6     0     8    0
art_node    32      819    0      737     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        1     1     1     0     1     0     8    0
semapl      72      545    0      520     1     0     1     1     0     8    0
shmpl      112        6    0        0     1     0     1     1     0     8    0
dirhash    1024      19    0        0     3     0     3     3     0     8    0
dino2pl    256     2185    0      591   100     0   100   100     0     8    0
ffsino     296     2185    0      591   123     0   123   123     0     8    0
nchpl      144     2775    0      827    73     0    73    73     0     8    0
rtmask      32        1    0        1     1     1     0     1     0     8    0
vnodes     216     3066    0        0   171     0   171   171     0     8    0
namei      1024   15623    0    15622     3     2     1     2     0     8    0
percpumem   16      126    0       77     1     0     1     1     0     8    0
kstatmem   264      175    0      152     3     1     2     3     0     8    0
scsiplug    72        3    0        3     2     2     0     1     0     8    0
scxspl     216     9726    0     9726     6     5     1     5     1     8    1
plimitpl   152      199    0      183     1     0     1     1     0     8    0
sigapl     424     1591    0     1543     7     1     6     7     0     8    0
knotepl    120      306    0        0    10     0    10    10     0     8    0
kqueuepl   224       95    0       85     1     0     1     1     0     8    0
pipepl     344      341    0      314     4     1     3     4     0     8    0
fdescpl    528     1575    0     1543     3     0     3     3     0     8    0
filepl     160     5409    0     5201    16     6    10    15     0     8    0
lockfpl    104      231    0      229     2     1     1     2     0     8    0
lockfspl    48      111    0      109     1     0     1     1     0     8    0
sessionpl  144      111    0      102     1     0     1     1     0     8    0
pgrppl      48      189    0      172     1     0     1     1     0     8    0
ucredpl    104      373    0      358     1     0     1     1     0     8    0
zombiepl   144     1543    0     1543     1     1     0     1     0     8    0
processpl  1232    1591    0     1543     5     1     4     5     0     8    0
procpl     664     2174    0     2118     7     2     5     6     0     8    0
sockpl     752      984    0      955    12     9     3    10     0     8    0
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       1    0        0     1     0     1     1     0     8    0
mcl4k      4096     125    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      30    0        0     4     0     4     4     0     8    0
mextrefs    64       36    0        0     1     0     1     1     0     8    0
mtagpl      96        4    0        0     1     0     1     1     0     8    0
mbufpl     256      276    0        0    16     0    16    16     0     8    0
bufpl      272     3130    0      106   202     0   202   202     0     8    0
anonpl      32     7007    0        0    57     0    57    57     0   247    0
amapchunkpl 152   30791    0    30409    31    15    16    31     0   158    0
amappl16   200     2461    0     2448    16    14     2    13     0     8    0
amappl15   192        7    0        6     1     0     1     1     0     8    0
amappl14   184     1209    0     1204     1     0     1     1     0     8    0
amappl13   176      251    0      239     1     0     1     1     0     8    0
amappl12   168     2078    0     2053     2     0     2     2     0     8    0
amappl11   160        8    0        7     1     0     1     1     0     8    0
amappl10   152       69    0       55     1     0     1     1     0     8    0
amappl9    144      291    0      290     1     0     1     1     0     8    0
amappl8    136      359    0      357     1     0     1     1     0     8    0
amappl7    128      277    0      264     1     0     1     1     0     8    0
amappl6    120      802    0      798     1     0     1     1     0     8    0
amappl5    112      133    0      123     1     0     1     1     0     8    0
amappl4    104      507    0      486     1     0     1     1     0     8    0
amappl3     96     5704    0     5628     3     0     3     3     0     8    0
amappl2     88     1461    0     1388     2     0     2     2     0     8    0
amappl1     80    20072    0    19482    16     3    13    15     0     8    0
amappl      88     9073    0     8940     5     0     5     5     0    92    0
uvmvnodes   80      106    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        8    0        0     1     0     1     1     0     8    0
uaddrrnd    24     1575    0     1543     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1575    0     1543     1     0     1     1     0     8    0
vmmpekpl   168    13377    0    13331     3     0     3     3     0     8    0
vmmpepl    168   108872    0   107112    89     9    80    88     0   357    0
vmsppl     488     1574    0     1543     5     0     5     5     0     8    0
rwobjpl     80    32287    0    31281    25     1    24    25     0     8    0
pdppl      4096    3157    0     3086   151    80    71    83     0     8    0
pvpl        32    12951    0        0   106     1   105   105     0   265    0
pmappl     256     1574    0     1543     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      554    0       97    14     0    14    14     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff838daff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
witness_lock(fffff380092760b8,fffff380092760b8) at witness_lock
pmap_enter(fffff3806cd1c900,f4d8e228000,793e4000,1,20) at pmap_enter+0x83a
uvm_fault_upper_lookup(ffff80002a2a61e0,ffff80002a2a6218,ffff80002a2a60e0,ffff80002a2a6160) at uvm_fault_upper_lookup+0x30d
uvm_fault(fffff3806cd1d020,f4d8e22b000,0,1) at uvm_fault+0x159
upageflttrap(ffff80002a2a6380,f4d8e22b668) at upageflttrap+0xa9
usertrap(ffff80002a2a6380) at usertrap+0x430
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x78f01853e920, count: -10
ddb{0}> machine ddbcpu 1
Stopped at      lf_advlock+0x2fa:       incl    0x28(%r12)
ddb{1}> trace
lf_advlock(ffff800001601f20,0,ffff80003a3aa010,2,ffff80002a2acd80,40) at lf_advlock+0x2fa
VOP_ADVLOCK(fffff38075d802b0,ffff80003a3aa010,2,ffff80002a2acd80,40) at VOP_ADVLOCK+0x87
sys_fcntl(ffff800038796a88,ffff80002a2acee0,ffff80002a2ace30) at sys_fcntl+0x120f
syscall(ffff80002a2acee0) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6824db69d00, count: -5