last executing test programs:

16.486405181s ago: executing program 6 (id=245):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="867631fea695", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})
r1 = socket$inet(0x2, 0x5, 0x3)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x0)
ftruncate(r2, 0x8530) (async)
ftruncate(r2, 0x8530)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0)) (async)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0))
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[])
r3 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x10, "00000000000001000000000000000001", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="630c00000000119a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d", 0x29}], 0x1, 0x0}, 0x0)

14.793563717s ago: executing program 6 (id=245):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="867631fea695", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})
r1 = socket$inet(0x2, 0x5, 0x3)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x0)
ftruncate(r2, 0x8530) (async)
ftruncate(r2, 0x8530)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0)) (async)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0))
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[])
r3 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x10, "00000000000001000000000000000001", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="630c00000000119a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d", 0x29}], 0x1, 0x0}, 0x0)

14.039114589s ago: executing program 1 (id=150):
chmod(&(0x7f0000000140)='.\x00', 0x3db) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xc) (async)
socket(0x11, 0x3, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f00000005c0)={{0x4004, './file1\x00', [{[@v6=@mcast2, @v4=@rand_addr=0x3], [0xd, 0x3c], 0x0, 0x30}, {[@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@loopback], [0x46], 0x4, 0x2}], {{0x246, 0x48, 0x4, 0x806}, 0x80000001, 0x4, 0xfff00000, 0xbe46, 0x4, 0x17, 0x1a}, {{0x8, 0x7, 0x5, 0x5}, 0x8001, 0x870, 0x10007, 0x6, 0x800, 0x3}, @v6=@mcast1, 0x8, 0xb, 0x2, 0xf23e, 0x5, [[0x7ffffff7, 0x80000077], [0x40007, 0x834c]], [[0x80, 0x401], [0x6, 0x3]], 0x2013, [0x7fffffff, 0x79], 0x1ff, 0x18, 0x2, 0x2, 0x0, 0x40, 0xb, 0x83, 0x9, 0x8, 0x1, 0xce57, "cbff"}}) (async)
r2 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x1}, 0x10) (async)
listen(r2, 0xfffffffd) (async)
r3 = socket(0x2, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
connect$inet(r3, &(0x7f0000000740)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) (async)
sendto$inet6(r3, &(0x7f0000000780)="99", 0x1, 0x8503c97dd4963c1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x4000) (async)
poll(&(0x7f00000007c0)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)) (async)
r4 = socket$inet(0x2, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) (async)
r6 = open(&(0x7f0000000380)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000003c0)={0xffffffff, 0xfffffffd, 0xffffffbc, 0xbba8, "1100"}) (async)
bind$inet(r5, &(0x7f0000000200)={0x10, 0x2, 0x3}, 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000400)={<r7=>0x41424344}, 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344, <r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xd5, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "05b656", 0x9f, 0x0, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="dcb7f62fb1fd91a3c504d2f9f32e2487", {[@fragment={0x16, 0x0, 0x6, 0x0, 0x0, 0x17, 0x68}, @hopopts={0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x401}, @pad1]}], @tcp={{0x1, 0x1, r7, r8, 0x0, 0x0, 0xb, 0x8, 0x8000, 0x0, 0x6, {[@generic={0x4, 0x6, "7eeeb67e"}, @mss={0x2, 0x4, 0x1}, @nop, @timestamp={0x8, 0xa, 0x6, 0x2}]}}, {"f48292421540dcc9ad7eb96ade9d407136886c59ca22d454fbd7f40db2079445d9a1c7a7b0963d90a790a0d95edb9261a0760eb0996a216b8321e3be604940906a53afdec7897c15b61dbdc840852fff737892"}}}}}}})
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000240)=0x3, 0x4)

13.761416878s ago: executing program 2 (id=220):
setrlimit(0x6aa2ce84d0a83001, &(0x7f00000014c0)={0xa, 0x6})
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts()
r1 = socket(0x1, 0x8002, 0x1)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001980)={0x8002ffff, 0x6, 0xfff2, 0x21d8b78e, "141bd4c9059000", 0x47, 0xc69}) (async)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000001580)="d8bffdac235be5c338bea7dd70c88a692aa9896ada6134e7caaa8ca0e9495bb940fe3759f2f8296d9e46682905a8896ccbbc20232cca51f47fb5178da44fff5528702eb41f495edfc87ba294", 0x4c}], 0x1) (async)
mknod(&(0x7f0000001500)='./file0\x00', 0x2000, 0x1e60)
r3 = open(&(0x7f00000019c0)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000001a00)={0x4, 0x4a, 0x2100009, 0x5c5, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x49, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2, 0x99}, {0xcdd, 0x0, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x2}, {0x2, 0x10, 0x5, 0x8}, {0x8007, 0x8001, 0x10001, 0x103}, {0x1cc, 0x10001, 0xfb, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x2}, {0x7, 0x7, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000001b80)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000001bc0)={0x1, [{0x2, 0xfffffeff}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x401}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x81}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) (async)
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000001d00), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000001d40)={0x3, 0x0, 0x1}, 0x6)
r5 = socket(0x11, 0x3, 0x2)
r6 = socket(0x11, 0x3, 0x2)
sendto$unix(r6, &(0x7f0000001600)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x6, 0x0, 0x0)
r7 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@un=@abs, 0x8, &(0x7f0000001440)=[{&(0x7f0000000280)=""/219}, {&(0x7f0000000380)=""/3}, {&(0x7f00000003c0)=""/33}, {&(0x7f0000000400)=""/1}, {&(0x7f0000000440)=""/4096}], 0x0, &(0x7f00000001c0)=""/80, 0x20}, 0x2002) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
sysctl$kern(&(0x7f0000001d00)={0x1, 0x9}, 0x2, &(0x7f0000001d80), 0x0, 0x0, 0x0) (async)
execve(&(0x7f00000016c0)='./file0\x00', &(0x7f00000018c0)=[&(0x7f0000001700)='\x00', &(0x7f0000001740)='/dev/dri/card0\x00', &(0x7f0000001780)='*\xf4^:{(+0[*(/\x00', &(0x7f00000017c0)='^\x1d(#}.%$,\x00', &(0x7f0000001800)='/dev/dri/card0\x00', &(0x7f0000001840)='*%&{,!0(\\}\x00', &(0x7f0000001880)='\x00'], &(0x7f0000001940)=[&(0x7f0000001900)='[\x00']) (async)
sendto$unix(r5, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x2, 0x0, 0x0)

12.050655053s ago: executing program 4 (id=210):
ioctl$DIOCRDELTABLES(0xffffffffffffff9c, 0xc450443e, &(0x7f00000010c0)={{'./file0\x00', './file0\x00', 0x0, 0x4}, &(0x7f0000000000)=[{'./file0\x00', './file0\x00', 0x7, 0x3}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x0, 0xff}, {'./file0\x00', './file0\x00', 0x10, 0x6b}], 0x3, 0x4, 0xcc2, 0x7, 0x9dff, 0x11f9, 0x4, 0xc0})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
r0 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x80aec933ad86fbe3) (async)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r1 = semget$private(0x0, 0x2, 0x1)
r2 = geteuid() (async)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001540)={0x0, <r3=>0x0}, 0xc) (async)
fstat(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) (async, rerun: 32)
getresgid(&(0x7f0000001600)=<r5=>0x0, &(0x7f0000001640)=<r6=>0x0, &(0x7f0000001680)) (rerun: 32)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000016c0)={{r2, r3, r4, r6, 0x16, 0x2, 0xc8}, 0x0, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x2}) (async)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
rename(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') (async)
r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0)
ioctl$WSKBDIO_GETBELL(r7, 0x40105704, &(0x7f0000001800))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async)
mkdir(&(0x7f0000001840)='./file0\x00', 0x88) (async)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) (async)
msgget$private(0x0, 0x40)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001880), 0x100, 0x0)
read$audio(r8, &(0x7f00000018c0)=""/170, 0xaa) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000001980)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername(r9, &(0x7f0000001a00)=@un=@abs, &(0x7f0000001a40)=0x8) (async)
r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a80), 0x8, 0x0)
ioctl$DIOCGETLIMIT(r10, 0xc0084427, &(0x7f0000001ac0)={0x5, 0xffffff6a}) (async)
ioctl$WSKBDIO_SETDEFAULTBELL(r7, 0x80105705, &(0x7f0000001b00)={0x1bd3, 0x155, 0x9, 0x3}) (async)
setegid(r5)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/123, 0x7b, 0x2003, &(0x7f0000001bc0)={0x10, 0x2, 0x2, 0x8}, 0x10)

11.850111821s ago: executing program 6 (id=245):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="867631fea695", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})
r1 = socket$inet(0x2, 0x5, 0x3)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x0)
ftruncate(r2, 0x8530) (async)
ftruncate(r2, 0x8530)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0)) (async)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0))
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[])
r3 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x10, "00000000000001000000000000000001", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="630c00000000119a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d", 0x29}], 0x1, 0x0}, 0x0)

11.849656828s ago: executing program 1 (id=150):
chmod(&(0x7f0000000140)='.\x00', 0x3db) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xc) (async)
socket(0x11, 0x3, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f00000005c0)={{0x4004, './file1\x00', [{[@v6=@mcast2, @v4=@rand_addr=0x3], [0xd, 0x3c], 0x0, 0x30}, {[@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@loopback], [0x46], 0x4, 0x2}], {{0x246, 0x48, 0x4, 0x806}, 0x80000001, 0x4, 0xfff00000, 0xbe46, 0x4, 0x17, 0x1a}, {{0x8, 0x7, 0x5, 0x5}, 0x8001, 0x870, 0x10007, 0x6, 0x800, 0x3}, @v6=@mcast1, 0x8, 0xb, 0x2, 0xf23e, 0x5, [[0x7ffffff7, 0x80000077], [0x40007, 0x834c]], [[0x80, 0x401], [0x6, 0x3]], 0x2013, [0x7fffffff, 0x79], 0x1ff, 0x18, 0x2, 0x2, 0x0, 0x40, 0xb, 0x83, 0x9, 0x8, 0x1, 0xce57, "cbff"}}) (async)
r2 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x1}, 0x10) (async)
listen(r2, 0xfffffffd) (async)
r3 = socket(0x2, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
connect$inet(r3, &(0x7f0000000740)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) (async)
sendto$inet6(r3, &(0x7f0000000780)="99", 0x1, 0x8503c97dd4963c1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x4000) (async)
poll(&(0x7f00000007c0)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)) (async)
r4 = socket$inet(0x2, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) (async)
r6 = open(&(0x7f0000000380)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000003c0)={0xffffffff, 0xfffffffd, 0xffffffbc, 0xbba8, "1100"}) (async)
bind$inet(r5, &(0x7f0000000200)={0x10, 0x2, 0x3}, 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000400)={<r7=>0x41424344}, 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344, <r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xd5, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "05b656", 0x9f, 0x0, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="dcb7f62fb1fd91a3c504d2f9f32e2487", {[@fragment={0x16, 0x0, 0x6, 0x0, 0x0, 0x17, 0x68}, @hopopts={0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x401}, @pad1]}], @tcp={{0x1, 0x1, r7, r8, 0x0, 0x0, 0xb, 0x8, 0x8000, 0x0, 0x6, {[@generic={0x4, 0x6, "7eeeb67e"}, @mss={0x2, 0x4, 0x1}, @nop, @timestamp={0x8, 0xa, 0x6, 0x2}]}}, {"f48292421540dcc9ad7eb96ade9d407136886c59ca22d454fbd7f40db2079445d9a1c7a7b0963d90a790a0d95edb9261a0760eb0996a216b8321e3be604940906a53afdec7897c15b61dbdc840852fff737892"}}}}}}})
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000240)=0x3, 0x4)

11.701979219s ago: executing program 7 (id=307):
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000000)={{0x4, './file0\x00', [{[@v4, @v4=@rand_addr=0x8], [0x1, 0xfff1], 0x5, 0x18}, {[@v4=@rand_addr=0x5, @v6=@mcast2], [0x6], 0x4a, 0x1a}], {{0x0, 0x80, 0x7, 0xfff}, 0x6, 0x0, 0x80, 0xc, 0x4, 0x6, 0x3}, {{0x1ff, 0xfd, 0xff, 0xb07}, 0xfffffffd, 0x3, 0x40000004, 0xff, 0xfb, 0xfc, 0x6}, @v4=@remote={0xac, 0x14, 0x0}, 0x1, 0x1, 0x80004, 0x7, 0xfe, [[0x5, 0x4], [0x125a, 0x1d7]], [[0x8], [0x2, 0x203]], 0x48000, [0x7], 0x5, 0x31, 0x66, 0x2, 0x20, 0x1, 0x89, 0x2, 0x2, 0x6, 0x3, 0x3, "02ac"}})
setrlimit(0x8, &(0x7f0000000140)={0xb, 0x53})
r0 = syz_open_pts()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000e80)="ebffcbdf13b9fd812eaa4e713048e69931", 0x11)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0)
fcntl$lock(r1, 0x8, &(0x7f0000000f80)={0x9, 0x1000, 0x0, 0x3, 0x1})
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1, 0x0)
openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000f00)={0x5d, 0x81})
close(r0)
openat$vmm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000200)={0x0, [{0x1}, {0x3}, {0x0, 0x300}, {0x3}, {0x3, 0x4000}, {0x2, 0xf}, {}, {0x3, 0x1000001}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x9}, {0x1, 0x100000}, {0x2}, {}, {0x3, 0x4}, {0x1, 0x1000}, {0x2}, {0x0, 0x40}, {0xb3b787630a3b27cc}, {0x0, 0x5}, {0x2, 0xfffffffe}, {0x3}, {0x0, 0x2000}, {0x0, 0x7ff}, {0x0, 0x1}, {0x0, 0x10000}, {0x2, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}, {0x1}]})
ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0xc0307006, &(0x7f0000000340)={0x1, 0x10})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60788ea60006000000697a653e336f000000500000200000ff020000000000000000000000000001"])
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000003c0)=0x100004)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
openat$pf(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0)
ioctl$DIOCGETRULE(r1, 0xcd604407, &(0x7f00000010c0)={0x7, 0x5, 0x1, './file0\x00', './file0\x00', 0x0, "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"})
r3 = open(&(0x7f0000001e40)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001e80)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000001ec0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0})

11.222706975s ago: executing program 5 (id=308):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0)
dup3(r0, r1, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)

9.779675454s ago: executing program 2 (id=220):
setrlimit(0x6aa2ce84d0a83001, &(0x7f00000014c0)={0xa, 0x6})
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts()
r1 = socket(0x1, 0x8002, 0x1)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001980)={0x8002ffff, 0x6, 0xfff2, 0x21d8b78e, "141bd4c9059000", 0x47, 0xc69}) (async)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000001580)="d8bffdac235be5c338bea7dd70c88a692aa9896ada6134e7caaa8ca0e9495bb940fe3759f2f8296d9e46682905a8896ccbbc20232cca51f47fb5178da44fff5528702eb41f495edfc87ba294", 0x4c}], 0x1) (async)
mknod(&(0x7f0000001500)='./file0\x00', 0x2000, 0x1e60)
r3 = open(&(0x7f00000019c0)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000001a00)={0x4, 0x4a, 0x2100009, 0x5c5, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x49, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2, 0x99}, {0xcdd, 0x0, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x2}, {0x2, 0x10, 0x5, 0x8}, {0x8007, 0x8001, 0x10001, 0x103}, {0x1cc, 0x10001, 0xfb, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x2}, {0x7, 0x7, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000001b80)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000001bc0)={0x1, [{0x2, 0xfffffeff}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x401}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x81}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) (async)
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000001d00), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000001d40)={0x3, 0x0, 0x1}, 0x6)
r5 = socket(0x11, 0x3, 0x2)
r6 = socket(0x11, 0x3, 0x2)
sendto$unix(r6, &(0x7f0000001600)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x6, 0x0, 0x0)
r7 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@un=@abs, 0x8, &(0x7f0000001440)=[{&(0x7f0000000280)=""/219}, {&(0x7f0000000380)=""/3}, {&(0x7f00000003c0)=""/33}, {&(0x7f0000000400)=""/1}, {&(0x7f0000000440)=""/4096}], 0x0, &(0x7f00000001c0)=""/80, 0x20}, 0x2002) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
sysctl$kern(&(0x7f0000001d00)={0x1, 0x9}, 0x2, &(0x7f0000001d80), 0x0, 0x0, 0x0) (async)
execve(&(0x7f00000016c0)='./file0\x00', &(0x7f00000018c0)=[&(0x7f0000001700)='\x00', &(0x7f0000001740)='/dev/dri/card0\x00', &(0x7f0000001780)='*\xf4^:{(+0[*(/\x00', &(0x7f00000017c0)='^\x1d(#}.%$,\x00', &(0x7f0000001800)='/dev/dri/card0\x00', &(0x7f0000001840)='*%&{,!0(\\}\x00', &(0x7f0000001880)='\x00'], &(0x7f0000001940)=[&(0x7f0000001900)='[\x00']) (async)
sendto$unix(r5, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x2, 0x0, 0x0)

9.779438054s ago: executing program 4 (id=210):
ioctl$DIOCRDELTABLES(0xffffffffffffff9c, 0xc450443e, &(0x7f00000010c0)={{'./file0\x00', './file0\x00', 0x0, 0x4}, &(0x7f0000000000)=[{'./file0\x00', './file0\x00', 0x7, 0x3}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x0, 0xff}, {'./file0\x00', './file0\x00', 0x10, 0x6b}], 0x3, 0x4, 0xcc2, 0x7, 0x9dff, 0x11f9, 0x4, 0xc0})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
r0 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x80aec933ad86fbe3) (async)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r1 = semget$private(0x0, 0x2, 0x1)
r2 = geteuid() (async)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001540)={0x0, <r3=>0x0}, 0xc) (async)
fstat(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) (async, rerun: 32)
getresgid(&(0x7f0000001600)=<r5=>0x0, &(0x7f0000001640)=<r6=>0x0, &(0x7f0000001680)) (rerun: 32)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000016c0)={{r2, r3, r4, r6, 0x16, 0x2, 0xc8}, 0x0, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x2}) (async)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
rename(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') (async)
r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0)
ioctl$WSKBDIO_GETBELL(r7, 0x40105704, &(0x7f0000001800))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async)
mkdir(&(0x7f0000001840)='./file0\x00', 0x88) (async)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) (async)
msgget$private(0x0, 0x40)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001880), 0x100, 0x0)
read$audio(r8, &(0x7f00000018c0)=""/170, 0xaa) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000001980)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername(r9, &(0x7f0000001a00)=@un=@abs, &(0x7f0000001a40)=0x8) (async)
r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a80), 0x8, 0x0)
ioctl$DIOCGETLIMIT(r10, 0xc0084427, &(0x7f0000001ac0)={0x5, 0xffffff6a}) (async)
ioctl$WSKBDIO_SETDEFAULTBELL(r7, 0x80105705, &(0x7f0000001b00)={0x1bd3, 0x155, 0x9, 0x3}) (async)
setegid(r5)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/123, 0x7b, 0x2003, &(0x7f0000001bc0)={0x10, 0x2, 0x2, 0x8}, 0x10)

9.374928396s ago: executing program 1 (id=150):
chmod(&(0x7f0000000140)='.\x00', 0x3db) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xc) (async)
socket(0x11, 0x3, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f00000005c0)={{0x4004, './file1\x00', [{[@v6=@mcast2, @v4=@rand_addr=0x3], [0xd, 0x3c], 0x0, 0x30}, {[@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@loopback], [0x46], 0x4, 0x2}], {{0x246, 0x48, 0x4, 0x806}, 0x80000001, 0x4, 0xfff00000, 0xbe46, 0x4, 0x17, 0x1a}, {{0x8, 0x7, 0x5, 0x5}, 0x8001, 0x870, 0x10007, 0x6, 0x800, 0x3}, @v6=@mcast1, 0x8, 0xb, 0x2, 0xf23e, 0x5, [[0x7ffffff7, 0x80000077], [0x40007, 0x834c]], [[0x80, 0x401], [0x6, 0x3]], 0x2013, [0x7fffffff, 0x79], 0x1ff, 0x18, 0x2, 0x2, 0x0, 0x40, 0xb, 0x83, 0x9, 0x8, 0x1, 0xce57, "cbff"}}) (async)
r2 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x1}, 0x10) (async)
listen(r2, 0xfffffffd) (async)
r3 = socket(0x2, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
connect$inet(r3, &(0x7f0000000740)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) (async)
sendto$inet6(r3, &(0x7f0000000780)="99", 0x1, 0x8503c97dd4963c1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x4000) (async)
poll(&(0x7f00000007c0)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)) (async)
r4 = socket$inet(0x2, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) (async)
r6 = open(&(0x7f0000000380)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000003c0)={0xffffffff, 0xfffffffd, 0xffffffbc, 0xbba8, "1100"}) (async)
bind$inet(r5, &(0x7f0000000200)={0x10, 0x2, 0x3}, 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000400)={<r7=>0x41424344}, 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344, <r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xd5, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "05b656", 0x9f, 0x0, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="dcb7f62fb1fd91a3c504d2f9f32e2487", {[@fragment={0x16, 0x0, 0x6, 0x0, 0x0, 0x17, 0x68}, @hopopts={0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x401}, @pad1]}], @tcp={{0x1, 0x1, r7, r8, 0x0, 0x0, 0xb, 0x8, 0x8000, 0x0, 0x6, {[@generic={0x4, 0x6, "7eeeb67e"}, @mss={0x2, 0x4, 0x1}, @nop, @timestamp={0x8, 0xa, 0x6, 0x2}]}}, {"f48292421540dcc9ad7eb96ade9d407136886c59ca22d454fbd7f40db2079445d9a1c7a7b0963d90a790a0d95edb9261a0760eb0996a216b8321e3be604940906a53afdec7897c15b61dbdc840852fff737892"}}}}}}})
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000240)=0x3, 0x4)

9.169765461s ago: executing program 5 (id=311):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}})
r0 = syz_open_pts()
close(r0)
setrlimit(0x8, &(0x7f0000000000)={0xb, 0x4e})
r1 = syz_open_pts()
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111) (async)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111)
sysctl$kern(&(0x7f0000000440)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80086476, &(0x7f0000000480)={0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, &(0x7f00000004c0)})
close(r1)
syz_open_pts() (async)
r3 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47) (async)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsid()
ioctl$TIOCSCTTY(r3, 0x20007461)
read(r3, &(0x7f0000000340)=""/159, 0x9f) (async)
read(r3, &(0x7f0000000340)=""/159, 0x9f)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x2, 0x2, 0x0) (async)
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0))

8.966971179s ago: executing program 7 (id=312):
r0 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r0, 0x20007461)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000080)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0)
select(0x40, &(0x7f0000000100)={0x40, 0x7, 0x8, 0xbbde, 0x1ffffffeff, 0x8, 0x2aa, 0x400000000000009}, 0x0, 0x0, 0x0)
kevent(r1, &(0x7f0000000140), 0x8000, 0x0, 0x8000800, 0x0)
r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write(r2, 0x0, 0x0)

8.243593763s ago: executing program 4 (id=210):
ioctl$DIOCRDELTABLES(0xffffffffffffff9c, 0xc450443e, &(0x7f00000010c0)={{'./file0\x00', './file0\x00', 0x0, 0x4}, &(0x7f0000000000)=[{'./file0\x00', './file0\x00', 0x7, 0x3}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x0, 0xff}, {'./file0\x00', './file0\x00', 0x10, 0x6b}], 0x3, 0x4, 0xcc2, 0x7, 0x9dff, 0x11f9, 0x4, 0xc0})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
r0 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x80aec933ad86fbe3) (async)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r1 = semget$private(0x0, 0x2, 0x1)
r2 = geteuid() (async)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001540)={0x0, <r3=>0x0}, 0xc) (async)
fstat(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) (async, rerun: 32)
getresgid(&(0x7f0000001600)=<r5=>0x0, &(0x7f0000001640)=<r6=>0x0, &(0x7f0000001680)) (rerun: 32)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000016c0)={{r2, r3, r4, r6, 0x16, 0x2, 0xc8}, 0x0, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x2}) (async)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
rename(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') (async)
r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0)
ioctl$WSKBDIO_GETBELL(r7, 0x40105704, &(0x7f0000001800))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async)
mkdir(&(0x7f0000001840)='./file0\x00', 0x88) (async)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) (async)
msgget$private(0x0, 0x40)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001880), 0x100, 0x0)
read$audio(r8, &(0x7f00000018c0)=""/170, 0xaa) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000001980)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername(r9, &(0x7f0000001a00)=@un=@abs, &(0x7f0000001a40)=0x8) (async)
r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a80), 0x8, 0x0)
ioctl$DIOCGETLIMIT(r10, 0xc0084427, &(0x7f0000001ac0)={0x5, 0xffffff6a}) (async)
ioctl$WSKBDIO_SETDEFAULTBELL(r7, 0x80105705, &(0x7f0000001b00)={0x1bd3, 0x155, 0x9, 0x3}) (async)
setegid(r5)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/123, 0x7b, 0x2003, &(0x7f0000001bc0)={0x10, 0x2, 0x2, 0x8}, 0x10)

8.239256478s ago: executing program 2 (id=220):
setrlimit(0x6aa2ce84d0a83001, &(0x7f00000014c0)={0xa, 0x6})
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts()
r1 = socket(0x1, 0x8002, 0x1)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001980)={0x8002ffff, 0x6, 0xfff2, 0x21d8b78e, "141bd4c9059000", 0x47, 0xc69}) (async)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000001580)="d8bffdac235be5c338bea7dd70c88a692aa9896ada6134e7caaa8ca0e9495bb940fe3759f2f8296d9e46682905a8896ccbbc20232cca51f47fb5178da44fff5528702eb41f495edfc87ba294", 0x4c}], 0x1) (async)
mknod(&(0x7f0000001500)='./file0\x00', 0x2000, 0x1e60)
r3 = open(&(0x7f00000019c0)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000001a00)={0x4, 0x4a, 0x2100009, 0x5c5, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x49, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2, 0x99}, {0xcdd, 0x0, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x2}, {0x2, 0x10, 0x5, 0x8}, {0x8007, 0x8001, 0x10001, 0x103}, {0x1cc, 0x10001, 0xfb, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x2}, {0x7, 0x7, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000001b80)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000001bc0)={0x1, [{0x2, 0xfffffeff}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x401}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x81}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) (async)
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000001d00), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000001d40)={0x3, 0x0, 0x1}, 0x6)
r5 = socket(0x11, 0x3, 0x2)
r6 = socket(0x11, 0x3, 0x2)
sendto$unix(r6, &(0x7f0000001600)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x6, 0x0, 0x0)
r7 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@un=@abs, 0x8, &(0x7f0000001440)=[{&(0x7f0000000280)=""/219}, {&(0x7f0000000380)=""/3}, {&(0x7f00000003c0)=""/33}, {&(0x7f0000000400)=""/1}, {&(0x7f0000000440)=""/4096}], 0x0, &(0x7f00000001c0)=""/80, 0x20}, 0x2002) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
sysctl$kern(&(0x7f0000001d00)={0x1, 0x9}, 0x2, &(0x7f0000001d80), 0x0, 0x0, 0x0) (async)
execve(&(0x7f00000016c0)='./file0\x00', &(0x7f00000018c0)=[&(0x7f0000001700)='\x00', &(0x7f0000001740)='/dev/dri/card0\x00', &(0x7f0000001780)='*\xf4^:{(+0[*(/\x00', &(0x7f00000017c0)='^\x1d(#}.%$,\x00', &(0x7f0000001800)='/dev/dri/card0\x00', &(0x7f0000001840)='*%&{,!0(\\}\x00', &(0x7f0000001880)='\x00'], &(0x7f0000001940)=[&(0x7f0000001900)='[\x00']) (async)
sendto$unix(r5, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x2, 0x0, 0x0)

8.238920571s ago: executing program 6 (id=245):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="867631fea695", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})
r1 = socket$inet(0x2, 0x5, 0x3)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x0)
ftruncate(r2, 0x8530) (async)
ftruncate(r2, 0x8530)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0)) (async)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0))
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[])
r3 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x10, "00000000000001000000000000000001", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="630c00000000119a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d", 0x29}], 0x1, 0x0}, 0x0)

8.148146997s ago: executing program 5 (id=311):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}})
r0 = syz_open_pts()
close(r0)
setrlimit(0x8, &(0x7f0000000000)={0xb, 0x4e})
r1 = syz_open_pts()
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111) (async)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111)
sysctl$kern(&(0x7f0000000440)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80086476, &(0x7f0000000480)={0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, &(0x7f00000004c0)})
close(r1)
syz_open_pts() (async)
r3 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47) (async)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsid()
ioctl$TIOCSCTTY(r3, 0x20007461)
read(r3, &(0x7f0000000340)=""/159, 0x9f) (async)
read(r3, &(0x7f0000000340)=""/159, 0x9f)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x2, 0x2, 0x0) (async)
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0))

7.93975374s ago: executing program 7 (id=315):
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
openat$klog(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
mknod(0x0, 0x2000, 0x1e60) (async, rerun: 32)
open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x2a) (rerun: 32)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000300)={0x4, 0x4e, 0x2100009, 0x1, 0x81, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0xd, 0x800a}, {0x3fe, 0x200726, 0x2800, 0x7}, {0x9, 0x203, 0x3, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x400002}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x123}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0xff, 0xfffeffff, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc376}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0x23d4, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
sysctl$kern(0x0, 0x0, &(0x7f0000000440)="71f91e3471ac0058bc5a91501d94", &(0x7f0000000480)=0xe, 0x0, 0x0) (async, rerun: 32)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc028698d, &(0x7f00000004c0)) (async)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000001000)={0x101, 0x1c, {[0x3, 0x9, 0x10, 0x1, 0x6, 0x9, 0x9, 0x1, 0x3, 0x6, 0x4, 0xffffffff, 0xb, 0x101, 0x2, 0x7ff, 0x4, 0x7], [0x6, 0xf0fe, 0x7ff, 0x2, 0x3fe, 0x4, 0x9, 0x0, 0x5, 0x4], [0xffffffffffffffff, 0x2, 0x7, 0x6, 0x4, 0x9, 0x1], [0x7dc, 0x26, 0xab0, 0xa, 0x400000001, 0x34], [{0x9, 0x40, 0x2, 0xffffffffffffffa3}, {0x7, 0x6, 0xff}, {0x9, 0x6e, 0x26, 0x16}, {0x1, 0xffffffff, 0x9003, 0xa}, {0x0, 0x6, 0x6, 0x7fffffffffffffff}, {0x3, 0x9, 0xc, 0x101}, {0x7b, 0x0, 0xde}, {0x2, 0xffffff81, 0xffffffff, 0x7}], {0x3, 0x6, 0x900000, 0x10}, {0xe42, 0x5, 0x7, 0x8000000000000001}}}) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async, rerun: 64)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, [], {@generic={0x8864}}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="8f07688624117e5da938a43dac7d47eeaf6114de21b31ac5d9e5eb19f2c90ca2c3b2fdf11a0af52d4f1ff3405486cdcfb596910738cffc98876ba8f9205291bd42f4252c4d678839680cad2176", &(0x7f00000000c0)=0x4d, &(0x7f0000000600)="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"/403, 0x193) (async)
setuid(0xffffffffffffffff) (async)
r2 = syz_open_pts()
ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000000200)={0x0, 0x7f}) (async, rerun: 64)
r3 = setsid() (rerun: 64)
kill(r3, 0xb)
clock_getres(0x2, 0x0) (async)
socket$inet(0x2, 0x3, 0x102) (async)
sysctl$vm(&(0x7f0000000100)={0x2, 0x8}, 0x2, &(0x7f0000000140)="79960000", &(0x7f0000000180)=0x4, &(0x7f0000000240)="f0f8a258", 0x4) (async)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000005c0)={0x1080ff68, 0x2, 0x80c, 0xa, "74de6800", 0x5, 0xdb60})

7.582882037s ago: executing program 1 (id=150):
chmod(&(0x7f0000000140)='.\x00', 0x3db) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xc) (async)
socket(0x11, 0x3, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f00000005c0)={{0x4004, './file1\x00', [{[@v6=@mcast2, @v4=@rand_addr=0x3], [0xd, 0x3c], 0x0, 0x30}, {[@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@loopback], [0x46], 0x4, 0x2}], {{0x246, 0x48, 0x4, 0x806}, 0x80000001, 0x4, 0xfff00000, 0xbe46, 0x4, 0x17, 0x1a}, {{0x8, 0x7, 0x5, 0x5}, 0x8001, 0x870, 0x10007, 0x6, 0x800, 0x3}, @v6=@mcast1, 0x8, 0xb, 0x2, 0xf23e, 0x5, [[0x7ffffff7, 0x80000077], [0x40007, 0x834c]], [[0x80, 0x401], [0x6, 0x3]], 0x2013, [0x7fffffff, 0x79], 0x1ff, 0x18, 0x2, 0x2, 0x0, 0x40, 0xb, 0x83, 0x9, 0x8, 0x1, 0xce57, "cbff"}}) (async)
r2 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x1}, 0x10) (async)
listen(r2, 0xfffffffd) (async)
r3 = socket(0x2, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
connect$inet(r3, &(0x7f0000000740)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) (async)
sendto$inet6(r3, &(0x7f0000000780)="99", 0x1, 0x8503c97dd4963c1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x4000) (async)
poll(&(0x7f00000007c0)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)) (async)
r4 = socket$inet(0x2, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) (async)
r6 = open(&(0x7f0000000380)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000003c0)={0xffffffff, 0xfffffffd, 0xffffffbc, 0xbba8, "1100"}) (async)
bind$inet(r5, &(0x7f0000000200)={0x10, 0x2, 0x3}, 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000400)={<r7=>0x41424344}, 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344, <r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xd5, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "05b656", 0x9f, 0x0, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="dcb7f62fb1fd91a3c504d2f9f32e2487", {[@fragment={0x16, 0x0, 0x6, 0x0, 0x0, 0x17, 0x68}, @hopopts={0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x401}, @pad1]}], @tcp={{0x1, 0x1, r7, r8, 0x0, 0x0, 0xb, 0x8, 0x8000, 0x0, 0x6, {[@generic={0x4, 0x6, "7eeeb67e"}, @mss={0x2, 0x4, 0x1}, @nop, @timestamp={0x8, 0xa, 0x6, 0x2}]}}, {"f48292421540dcc9ad7eb96ade9d407136886c59ca22d454fbd7f40db2079445d9a1c7a7b0963d90a790a0d95edb9261a0760eb0996a216b8321e3be604940906a53afdec7897c15b61dbdc840852fff737892"}}}}}}})
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000240)=0x3, 0x4)

4.699765916s ago: executing program 0 (id=319):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$DIOCSETHOSTID(r0, 0xc0044456, &(0x7f0000000080)=0x101)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4)
setuid(0xee01)
setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000300), 0x14)
ioctl$DIOCSETDEBUG(r0, 0xc0044418, &(0x7f00000000c0)=0x5)
r2 = socket(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10)
mprotect(&(0x7f00006f3000/0x2000)=nil, 0x2000, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendto$unix(r3, &(0x7f0000000140)="0821e884601bbb526cf6cb63fe8fb1876c048aefe224d491e435e62de2960473e754dc1f14a117e0b59562d87f3324649d5f6902cb7eafb9d712e5f9762bafd17b0711b94c2dbafec1f2be62c51a74b8c05687f9ba154e01a6c787d27ccba4719ee09bc56b3514fc9d53c95852a7ead96e123fd7fb41c015a0a582ed5046c75d1fc5233cf7ced3bf109decdf0ce51e35331d619d5dd79f730051e17c0da0db1d4004f1f557d2957ba1ac9bfe927b904cc8bd372cc52cd9c0d9a66fc79fe8276fd336bfb0ce00378bf3af58135605df04a4d7068b9286bee3dab5b3196193aa56e56e909d3771d931", 0x25a9d7e6b69b58e, 0x402, &(0x7f0000000240)=@abs={0x40, 0x0, 0x0, 0x1}, 0xa)
close(0x3)
execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10)

4.698405196s ago: executing program 2 (id=220):
setrlimit(0x6aa2ce84d0a83001, &(0x7f00000014c0)={0xa, 0x6})
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts()
r1 = socket(0x1, 0x8002, 0x1)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001980)={0x8002ffff, 0x6, 0xfff2, 0x21d8b78e, "141bd4c9059000", 0x47, 0xc69}) (async)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000001580)="d8bffdac235be5c338bea7dd70c88a692aa9896ada6134e7caaa8ca0e9495bb940fe3759f2f8296d9e46682905a8896ccbbc20232cca51f47fb5178da44fff5528702eb41f495edfc87ba294", 0x4c}], 0x1) (async)
mknod(&(0x7f0000001500)='./file0\x00', 0x2000, 0x1e60)
r3 = open(&(0x7f00000019c0)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000001a00)={0x4, 0x4a, 0x2100009, 0x5c5, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x49, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2, 0x99}, {0xcdd, 0x0, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x2}, {0x2, 0x10, 0x5, 0x8}, {0x8007, 0x8001, 0x10001, 0x103}, {0x1cc, 0x10001, 0xfb, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x2}, {0x7, 0x7, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000001b80)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000001bc0)={0x1, [{0x2, 0xfffffeff}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x401}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x81}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) (async)
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000001d00), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000001d40)={0x3, 0x0, 0x1}, 0x6)
r5 = socket(0x11, 0x3, 0x2)
r6 = socket(0x11, 0x3, 0x2)
sendto$unix(r6, &(0x7f0000001600)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x6, 0x0, 0x0)
r7 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@un=@abs, 0x8, &(0x7f0000001440)=[{&(0x7f0000000280)=""/219}, {&(0x7f0000000380)=""/3}, {&(0x7f00000003c0)=""/33}, {&(0x7f0000000400)=""/1}, {&(0x7f0000000440)=""/4096}], 0x0, &(0x7f00000001c0)=""/80, 0x20}, 0x2002) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
sysctl$kern(&(0x7f0000001d00)={0x1, 0x9}, 0x2, &(0x7f0000001d80), 0x0, 0x0, 0x0) (async)
execve(&(0x7f00000016c0)='./file0\x00', &(0x7f00000018c0)=[&(0x7f0000001700)='\x00', &(0x7f0000001740)='/dev/dri/card0\x00', &(0x7f0000001780)='*\xf4^:{(+0[*(/\x00', &(0x7f00000017c0)='^\x1d(#}.%$,\x00', &(0x7f0000001800)='/dev/dri/card0\x00', &(0x7f0000001840)='*%&{,!0(\\}\x00', &(0x7f0000001880)='\x00'], &(0x7f0000001940)=[&(0x7f0000001900)='[\x00']) (async)
sendto$unix(r5, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x2, 0x0, 0x0)

4.698173293s ago: executing program 4 (id=210):
ioctl$DIOCRDELTABLES(0xffffffffffffff9c, 0xc450443e, &(0x7f00000010c0)={{'./file0\x00', './file0\x00', 0x0, 0x4}, &(0x7f0000000000)=[{'./file0\x00', './file0\x00', 0x7, 0x3}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x0, 0xff}, {'./file0\x00', './file0\x00', 0x10, 0x6b}], 0x3, 0x4, 0xcc2, 0x7, 0x9dff, 0x11f9, 0x4, 0xc0})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
r0 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x80aec933ad86fbe3) (async)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r1 = semget$private(0x0, 0x2, 0x1)
r2 = geteuid() (async)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001540)={0x0, <r3=>0x0}, 0xc) (async)
fstat(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) (async, rerun: 32)
getresgid(&(0x7f0000001600)=<r5=>0x0, &(0x7f0000001640)=<r6=>0x0, &(0x7f0000001680)) (rerun: 32)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000016c0)={{r2, r3, r4, r6, 0x16, 0x2, 0xc8}, 0x0, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x2}) (async)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
rename(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') (async)
r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0)
ioctl$WSKBDIO_GETBELL(r7, 0x40105704, &(0x7f0000001800))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async)
mkdir(&(0x7f0000001840)='./file0\x00', 0x88) (async)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) (async)
msgget$private(0x0, 0x40)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001880), 0x100, 0x0)
read$audio(r8, &(0x7f00000018c0)=""/170, 0xaa) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000001980)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername(r9, &(0x7f0000001a00)=@un=@abs, &(0x7f0000001a40)=0x8) (async)
r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a80), 0x8, 0x0)
ioctl$DIOCGETLIMIT(r10, 0xc0084427, &(0x7f0000001ac0)={0x5, 0xffffff6a}) (async)
ioctl$WSKBDIO_SETDEFAULTBELL(r7, 0x80105705, &(0x7f0000001b00)={0x1bd3, 0x155, 0x9, 0x3}) (async)
setegid(r5)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/123, 0x7b, 0x2003, &(0x7f0000001bc0)={0x10, 0x2, 0x2, 0x8}, 0x10)

4.697988156s ago: executing program 5 (id=311):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}})
r0 = syz_open_pts()
close(r0)
setrlimit(0x8, &(0x7f0000000000)={0xb, 0x4e})
r1 = syz_open_pts()
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111) (async)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111)
sysctl$kern(&(0x7f0000000440)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80086476, &(0x7f0000000480)={0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, &(0x7f00000004c0)})
close(r1)
syz_open_pts() (async)
r3 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47) (async)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsid()
ioctl$TIOCSCTTY(r3, 0x20007461)
read(r3, &(0x7f0000000340)=""/159, 0x9f) (async)
read(r3, &(0x7f0000000340)=""/159, 0x9f)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x2, 0x2, 0x0) (async)
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0))

4.697871143s ago: executing program 6 (id=245):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="867631fea695", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})
r1 = socket$inet(0x2, 0x5, 0x3)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x0)
ftruncate(r2, 0x8530) (async)
ftruncate(r2, 0x8530)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0)) (async)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0))
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[])
r3 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x10, "00000000000001000000000000000001", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="630c00000000119a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d", 0x29}], 0x1, 0x0}, 0x0)

4.697629207s ago: executing program 7 (id=315):
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
openat$klog(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
mknod(0x0, 0x2000, 0x1e60) (async, rerun: 32)
open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x2a) (rerun: 32)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000300)={0x4, 0x4e, 0x2100009, 0x1, 0x81, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0xd, 0x800a}, {0x3fe, 0x200726, 0x2800, 0x7}, {0x9, 0x203, 0x3, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x400002}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x123}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0xff, 0xfffeffff, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc376}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0x23d4, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
sysctl$kern(0x0, 0x0, &(0x7f0000000440)="71f91e3471ac0058bc5a91501d94", &(0x7f0000000480)=0xe, 0x0, 0x0) (async, rerun: 32)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc028698d, &(0x7f00000004c0)) (async)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000001000)={0x101, 0x1c, {[0x3, 0x9, 0x10, 0x1, 0x6, 0x9, 0x9, 0x1, 0x3, 0x6, 0x4, 0xffffffff, 0xb, 0x101, 0x2, 0x7ff, 0x4, 0x7], [0x6, 0xf0fe, 0x7ff, 0x2, 0x3fe, 0x4, 0x9, 0x0, 0x5, 0x4], [0xffffffffffffffff, 0x2, 0x7, 0x6, 0x4, 0x9, 0x1], [0x7dc, 0x26, 0xab0, 0xa, 0x400000001, 0x34], [{0x9, 0x40, 0x2, 0xffffffffffffffa3}, {0x7, 0x6, 0xff}, {0x9, 0x6e, 0x26, 0x16}, {0x1, 0xffffffff, 0x9003, 0xa}, {0x0, 0x6, 0x6, 0x7fffffffffffffff}, {0x3, 0x9, 0xc, 0x101}, {0x7b, 0x0, 0xde}, {0x2, 0xffffff81, 0xffffffff, 0x7}], {0x3, 0x6, 0x900000, 0x10}, {0xe42, 0x5, 0x7, 0x8000000000000001}}}) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async, rerun: 64)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, [], {@generic={0x8864}}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="8f07688624117e5da938a43dac7d47eeaf6114de21b31ac5d9e5eb19f2c90ca2c3b2fdf11a0af52d4f1ff3405486cdcfb596910738cffc98876ba8f9205291bd42f4252c4d678839680cad2176", &(0x7f00000000c0)=0x4d, &(0x7f0000000600)="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"/403, 0x193) (async)
setuid(0xffffffffffffffff) (async)
r2 = syz_open_pts()
ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000000200)={0x0, 0x7f}) (async, rerun: 64)
r3 = setsid() (rerun: 64)
kill(r3, 0xb)
clock_getres(0x2, 0x0) (async)
socket$inet(0x2, 0x3, 0x102) (async)
sysctl$vm(&(0x7f0000000100)={0x2, 0x8}, 0x2, &(0x7f0000000140)="79960000", &(0x7f0000000180)=0x4, &(0x7f0000000240)="f0f8a258", 0x4) (async)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000005c0)={0x1080ff68, 0x2, 0x80c, 0xa, "74de6800", 0x5, 0xdb60})

3.84972336s ago: executing program 3 (id=320):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x50, 0x9, 0x6, 0x400}, {0x6, 0x47, 0xff, 0x200000}]})
r1 = socket(0x18, 0x3, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x767eae64, "3c929157ca2e515dd6bc89e2f2c51bd5", 0xda9}, {0x1c, 0x18, 0x3, 0x7, "73a956890414d27ca2b84bf96477bcda", 0x2f3eab55}, 0x4, [0x5, 0xdc8, 0x8, 0x1, 0x4, 0xfffffff2, 0x0, 0x4]}, 0x5c)
syz_extract_tcp_res(&(0x7f0000000180), 0x2, 0x0)
r2 = socket(0x18, 0x1000, 0x9)
getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x50, 0x9, 0x6, 0x400}, {0x6, 0x47, 0xff, 0x200000}]}) (async)
socket(0x18, 0x3, 0x0) (async)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x767eae64, "3c929157ca2e515dd6bc89e2f2c51bd5", 0xda9}, {0x1c, 0x18, 0x3, 0x7, "73a956890414d27ca2b84bf96477bcda", 0x2f3eab55}, 0x4, [0x5, 0xdc8, 0x8, 0x1, 0x4, 0xfffffff2, 0x0, 0x4]}, 0x5c) (async)
syz_extract_tcp_res(&(0x7f0000000180), 0x2, 0x0) (async)
socket(0x18, 0x1000, 0x9) (async)
getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) (async)

3.410234025s ago: executing program 0 (id=321):
r0 = socket(0x11, 0x3, 0x7f) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f0000000180)={0x10, 0x2, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3, 0x1}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xfffffffffffffffc, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1ff, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x148}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00008ba000/0x2000)=nil, 0x1, 0x1}, {&(0x7f0000eda000/0x4000)=nil, &(0x7f0000910000/0x3000)=nil, 0xffffffff, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ca000/0x4000)=nil, 0x1, 0x1}, {&(0x7f0000ccc000/0x4000)=nil, &(0x7f0000dd0000/0x2000)=nil, 0x4, 0x1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d0000/0x4000)=nil, 0x6, 0x2}, {&(0x7f0000aa5000/0x3000)=nil, &(0x7f0000679000/0x1000)=nil, 0x8, 0x1}, {&(0x7f00004c9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x80000000, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a9d000/0x4000)=nil, 0xffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000797000/0x2000)=nil, 0x9}, {&(0x7f00008c8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x10}], './file0\x00', 0x8000, 0x0, 0x0, [], <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
r2 = syz_open_pts()
syz_open_pts() (async)
syz_open_pts() (async)
flock(r2, 0x3) (async)
sendto$unix(r0, &(0x7f00000000c0)="b100050160000004000000000700000018008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f1302000000000000007d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba9c500022012010000de5000"/177, 0xb1, 0x800, 0x0, 0x33)

3.404808169s ago: executing program 3 (id=322):
r0 = socket(0x18, 0x2, 0x0)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
write(r0, &(0x7f0000000100)="81a9c382d96d62a07d45c7e01425b15e1632a1d7cb562dd554c171ef8b8e8a763482168b117264aac2a60fc40840d6c02f69432f22992a6fa577983462570d363aa8e0427e80c5593f13b9314de54d180a92531b23d91e0415059248ac7af23512c48c3d64489b23f449a386f63e800a75fc1dc62b0e228ae6710f959f56e2c509bb117e75b8a2dd126aa32ce6b1fc71a19f08cec3ac17b839285ecb6239d2bf590c3a1f9208b0c50aa993beedebad04bfa59634482a", 0xb6)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000000)="4683f0bcb0242ee54ac7917d419004d5c966eb6de06fe5ad039e5a8ba1578752e7060d79396150d9502391a7b78910929e20c329a8d1b3f9815006b31df5ce615fd23e5afa373c9af3e8405d380dce897dc53b1eb71b71a332cc4ba5b1ee7586961e43ebf1360aef82c8b61bfc3a49fc3a3a1635372d00d997c7b18cf3c53cb72683fce8cf885dbe4814e5a5a0c30a917a67f0d79050df59d4a0cd940bc73285cb2dfda018dc348e3cfb496b89279eebd9076edc857322ba01014dd8d05b22b1a7efea251cf5135457dfde58edcc", 0xce)

3.346775475s ago: executing program 7 (id=315):
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
openat$klog(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
mknod(0x0, 0x2000, 0x1e60) (async, rerun: 32)
open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x2a) (rerun: 32)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000300)={0x4, 0x4e, 0x2100009, 0x1, 0x81, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0xd, 0x800a}, {0x3fe, 0x200726, 0x2800, 0x7}, {0x9, 0x203, 0x3, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x400002}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x123}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0xff, 0xfffeffff, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc376}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0x23d4, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
sysctl$kern(0x0, 0x0, &(0x7f0000000440)="71f91e3471ac0058bc5a91501d94", &(0x7f0000000480)=0xe, 0x0, 0x0) (async, rerun: 32)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc028698d, &(0x7f00000004c0)) (async)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000001000)={0x101, 0x1c, {[0x3, 0x9, 0x10, 0x1, 0x6, 0x9, 0x9, 0x1, 0x3, 0x6, 0x4, 0xffffffff, 0xb, 0x101, 0x2, 0x7ff, 0x4, 0x7], [0x6, 0xf0fe, 0x7ff, 0x2, 0x3fe, 0x4, 0x9, 0x0, 0x5, 0x4], [0xffffffffffffffff, 0x2, 0x7, 0x6, 0x4, 0x9, 0x1], [0x7dc, 0x26, 0xab0, 0xa, 0x400000001, 0x34], [{0x9, 0x40, 0x2, 0xffffffffffffffa3}, {0x7, 0x6, 0xff}, {0x9, 0x6e, 0x26, 0x16}, {0x1, 0xffffffff, 0x9003, 0xa}, {0x0, 0x6, 0x6, 0x7fffffffffffffff}, {0x3, 0x9, 0xc, 0x101}, {0x7b, 0x0, 0xde}, {0x2, 0xffffff81, 0xffffffff, 0x7}], {0x3, 0x6, 0x900000, 0x10}, {0xe42, 0x5, 0x7, 0x8000000000000001}}}) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async, rerun: 64)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, [], {@generic={0x8864}}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="8f07688624117e5da938a43dac7d47eeaf6114de21b31ac5d9e5eb19f2c90ca2c3b2fdf11a0af52d4f1ff3405486cdcfb596910738cffc98876ba8f9205291bd42f4252c4d678839680cad2176", &(0x7f00000000c0)=0x4d, &(0x7f0000000600)="bc8a066c1b1c0dc126609aea3532112299c90118d7a0d0148c7c25b1e61196952ab4541540d26a1c4f27337e6be5c01802005d9eeab012a538fa53b40fe145f5eaf0e06bb223f2ae5e10ae76c34d18c4985328faa2381d7263dd03ac27b45bda5946c2753cdb3af4fc648bc8a2ab3f76e6da7435302ebbdf59ae88b850ef82c7809fdfa7ef3ec8c07a113998fd69190d51ea66ab73cddd13d912f59a24d8758490fe409e28d2beb739c70fce9006000da70069bf002257a4277b1e8f1b48a981c90b0fd1485287e29d96091d66439ef224d4df3d15f2f14a2047b64efdbb28d8c166cf5ed85f0c699e69f816e7aa2f82990b4f8c80bba05007fa55891aeef6964464e26d437232714b67a816b7a62a2639fba3ac797a53d7d965d43ec36e5933e47f0e3eb36ca5c7b85e9cf6aa487b2e17cbf23f0da432ce75e0c6b38cfea4b906f3513f30deabf218ba5283e196cb69a6069eb4e31d49dd010000004a624ce131ba5d511d408135c6bd187bc5c599426dc60a6ed2257037bfc4f42f95393ddb53c91100"/403, 0x193) (async)
setuid(0xffffffffffffffff) (async)
r2 = syz_open_pts()
ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000000200)={0x0, 0x7f}) (async, rerun: 64)
r3 = setsid() (rerun: 64)
kill(r3, 0xb)
clock_getres(0x2, 0x0) (async)
socket$inet(0x2, 0x3, 0x102) (async)
sysctl$vm(&(0x7f0000000100)={0x2, 0x8}, 0x2, &(0x7f0000000140)="79960000", &(0x7f0000000180)=0x4, &(0x7f0000000240)="f0f8a258", 0x4) (async)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000005c0)={0x1080ff68, 0x2, 0x80c, 0xa, "74de6800", 0x5, 0xdb60})

3.140026117s ago: executing program 1 (id=150):
chmod(&(0x7f0000000140)='.\x00', 0x3db) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xc) (async)
socket(0x11, 0x3, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f00000005c0)={{0x4004, './file1\x00', [{[@v6=@mcast2, @v4=@rand_addr=0x3], [0xd, 0x3c], 0x0, 0x30}, {[@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@loopback], [0x46], 0x4, 0x2}], {{0x246, 0x48, 0x4, 0x806}, 0x80000001, 0x4, 0xfff00000, 0xbe46, 0x4, 0x17, 0x1a}, {{0x8, 0x7, 0x5, 0x5}, 0x8001, 0x870, 0x10007, 0x6, 0x800, 0x3}, @v6=@mcast1, 0x8, 0xb, 0x2, 0xf23e, 0x5, [[0x7ffffff7, 0x80000077], [0x40007, 0x834c]], [[0x80, 0x401], [0x6, 0x3]], 0x2013, [0x7fffffff, 0x79], 0x1ff, 0x18, 0x2, 0x2, 0x0, 0x40, 0xb, 0x83, 0x9, 0x8, 0x1, 0xce57, "cbff"}}) (async)
r2 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x1}, 0x10) (async)
listen(r2, 0xfffffffd) (async)
r3 = socket(0x2, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
connect$inet(r3, &(0x7f0000000740)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) (async)
sendto$inet6(r3, &(0x7f0000000780)="99", 0x1, 0x8503c97dd4963c1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x4000) (async)
poll(&(0x7f00000007c0)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)) (async)
r4 = socket$inet(0x2, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) (async)
r6 = open(&(0x7f0000000380)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000003c0)={0xffffffff, 0xfffffffd, 0xffffffbc, 0xbba8, "1100"}) (async)
bind$inet(r5, &(0x7f0000000200)={0x10, 0x2, 0x3}, 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000400)={<r7=>0x41424344}, 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344, <r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xd5, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "05b656", 0x9f, 0x0, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="dcb7f62fb1fd91a3c504d2f9f32e2487", {[@fragment={0x16, 0x0, 0x6, 0x0, 0x0, 0x17, 0x68}, @hopopts={0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x401}, @pad1]}], @tcp={{0x1, 0x1, r7, r8, 0x0, 0x0, 0xb, 0x8, 0x8000, 0x0, 0x6, {[@generic={0x4, 0x6, "7eeeb67e"}, @mss={0x2, 0x4, 0x1}, @nop, @timestamp={0x8, 0xa, 0x6, 0x2}]}}, {"f48292421540dcc9ad7eb96ade9d407136886c59ca22d454fbd7f40db2079445d9a1c7a7b0963d90a790a0d95edb9261a0760eb0996a216b8321e3be604940906a53afdec7897c15b61dbdc840852fff737892"}}}}}}})
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000240)=0x3, 0x4)

2.929681277s ago: executing program 2 (id=220):
setrlimit(0x6aa2ce84d0a83001, &(0x7f00000014c0)={0xa, 0x6})
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts()
r1 = socket(0x1, 0x8002, 0x1)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001980)={0x8002ffff, 0x6, 0xfff2, 0x21d8b78e, "141bd4c9059000", 0x47, 0xc69}) (async)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000001580)="d8bffdac235be5c338bea7dd70c88a692aa9896ada6134e7caaa8ca0e9495bb940fe3759f2f8296d9e46682905a8896ccbbc20232cca51f47fb5178da44fff5528702eb41f495edfc87ba294", 0x4c}], 0x1) (async)
mknod(&(0x7f0000001500)='./file0\x00', 0x2000, 0x1e60)
r3 = open(&(0x7f00000019c0)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000001a00)={0x4, 0x4a, 0x2100009, 0x5c5, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x49, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2, 0x99}, {0xcdd, 0x0, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x2}, {0x2, 0x10, 0x5, 0x8}, {0x8007, 0x8001, 0x10001, 0x103}, {0x1cc, 0x10001, 0xfb, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x2}, {0x7, 0x7, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000001b80)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000001bc0)={0x1, [{0x2, 0xfffffeff}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x401}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x81}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) (async)
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000001d00), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000001d40)={0x3, 0x0, 0x1}, 0x6)
r5 = socket(0x11, 0x3, 0x2)
r6 = socket(0x11, 0x3, 0x2)
sendto$unix(r6, &(0x7f0000001600)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x6, 0x0, 0x0)
r7 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@un=@abs, 0x8, &(0x7f0000001440)=[{&(0x7f0000000280)=""/219}, {&(0x7f0000000380)=""/3}, {&(0x7f00000003c0)=""/33}, {&(0x7f0000000400)=""/1}, {&(0x7f0000000440)=""/4096}], 0x0, &(0x7f00000001c0)=""/80, 0x20}, 0x2002) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
sysctl$kern(&(0x7f0000001d00)={0x1, 0x9}, 0x2, &(0x7f0000001d80), 0x0, 0x0, 0x0) (async)
execve(&(0x7f00000016c0)='./file0\x00', &(0x7f00000018c0)=[&(0x7f0000001700)='\x00', &(0x7f0000001740)='/dev/dri/card0\x00', &(0x7f0000001780)='*\xf4^:{(+0[*(/\x00', &(0x7f00000017c0)='^\x1d(#}.%$,\x00', &(0x7f0000001800)='/dev/dri/card0\x00', &(0x7f0000001840)='*%&{,!0(\\}\x00', &(0x7f0000001880)='\x00'], &(0x7f0000001940)=[&(0x7f0000001900)='[\x00']) (async)
sendto$unix(r5, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x2, 0x0, 0x0)

2.929302761s ago: executing program 3 (id=323):
openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
r0 = socket(0x18, 0x3, 0xd)
sendmmsg(r0, &(0x7f0000000040)={{&(0x7f0000000080)=@in6={0x1c, 0x18, 0x1, 0x7, "459eac52d8138e6b8f3b267633c339cf", 0xb}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x2c}}, 0x38, 0x0)
r1 = openat$audioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUDIO_MIXER_READ(r1, 0xc0144d00, &(0x7f0000000100)=@set_ctrl={0x6, 0x2, 0x9})
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2)
ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, &(0x7f00000001c0)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x40, 0x10000000})
sysctl$net_inet_tcp(&(0x7f0000000600)={0x4, 0x1e, 0x2}, 0x6, &(0x7f0000000640)="808f643b27da5db78de07d2b0ffbc05bc906aa654bb4ae3384fe6f5b54eb996eacaf981c99c213e2bba73f4133a5d70d759d3c86801b4d07a6a9b001c0b4297151cc28e2dbd90de9418cee114caf8de15b81540bec2bacf4b8991b2fa225e6c000000000", 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000940)='./file0\x00', 0xf02, 0x0)
ktrace(&(0x7f0000000980)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff)
read$audioctl(r1, &(0x7f0000000700)=""/102, 0x66)
clock_gettime(0x0, &(0x7f00000009c0))
r2 = setsid()
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x7, 0xffffdffffffdfffd, r2, 0x3, 0x2})
chmod(&(0x7f00000006c0)='./file0\x00', 0x48)

2.928647564s ago: executing program 4 (id=210):
ioctl$DIOCRDELTABLES(0xffffffffffffff9c, 0xc450443e, &(0x7f00000010c0)={{'./file0\x00', './file0\x00', 0x0, 0x4}, &(0x7f0000000000)=[{'./file0\x00', './file0\x00', 0x7, 0x3}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x0, 0xff}, {'./file0\x00', './file0\x00', 0x10, 0x6b}], 0x3, 0x4, 0xcc2, 0x7, 0x9dff, 0x11f9, 0x4, 0xc0})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
r0 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x80aec933ad86fbe3) (async)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r1 = semget$private(0x0, 0x2, 0x1)
r2 = geteuid() (async)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001540)={0x0, <r3=>0x0}, 0xc) (async)
fstat(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) (async, rerun: 32)
getresgid(&(0x7f0000001600)=<r5=>0x0, &(0x7f0000001640)=<r6=>0x0, &(0x7f0000001680)) (rerun: 32)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000016c0)={{r2, r3, r4, r6, 0x16, 0x2, 0xc8}, 0x0, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x2}) (async)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
rename(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') (async)
r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0)
ioctl$WSKBDIO_GETBELL(r7, 0x40105704, &(0x7f0000001800))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async)
mkdir(&(0x7f0000001840)='./file0\x00', 0x88) (async)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) (async)
msgget$private(0x0, 0x40)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001880), 0x100, 0x0)
read$audio(r8, &(0x7f00000018c0)=""/170, 0xaa) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000001980)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername(r9, &(0x7f0000001a00)=@un=@abs, &(0x7f0000001a40)=0x8) (async)
r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a80), 0x8, 0x0)
ioctl$DIOCGETLIMIT(r10, 0xc0084427, &(0x7f0000001ac0)={0x5, 0xffffff6a}) (async)
ioctl$WSKBDIO_SETDEFAULTBELL(r7, 0x80105705, &(0x7f0000001b00)={0x1bd3, 0x155, 0x9, 0x3}) (async)
setegid(r5)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/123, 0x7b, 0x2003, &(0x7f0000001bc0)={0x10, 0x2, 0x2, 0x8}, 0x10)

2.928468582s ago: executing program 5 (id=311):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}})
r0 = syz_open_pts()
close(r0)
setrlimit(0x8, &(0x7f0000000000)={0xb, 0x4e})
r1 = syz_open_pts()
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111) (async)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111)
sysctl$kern(&(0x7f0000000440)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80086476, &(0x7f0000000480)={0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, &(0x7f00000004c0)})
close(r1)
syz_open_pts() (async)
r3 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47) (async)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsid()
ioctl$TIOCSCTTY(r3, 0x20007461)
read(r3, &(0x7f0000000340)=""/159, 0x9f) (async)
read(r3, &(0x7f0000000340)=""/159, 0x9f)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x2, 0x2, 0x0) (async)
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0))

2.922280454s ago: executing program 6 (id=245):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="867631fea695", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})
r1 = socket$inet(0x2, 0x5, 0x3)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x0)
ftruncate(r2, 0x8530) (async)
ftruncate(r2, 0x8530)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0)) (async)
ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x20}, {r0, 0x2}, {r0, 0x20}, {r1, 0x8}, {r0, 0x40}, {r0, 0x100}, {r2, 0x2}], 0x9, &(0x7f00000001c0)={0x10001, 0x8}, &(0x7f00000002c0))
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[])
r3 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x10, "00000000000001000000000000000001", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="630c00000000119a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d", 0x29}], 0x1, 0x0}, 0x0)

2.090022477s ago: executing program 3 (id=324):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8)
mknod$loop(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b0400ffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x2}, 0x0)
open$dir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x100)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5)
r1 = syz_open_pts()
r2 = open(&(0x7f0000000400)='./bus\x00', 0x20, 0x22)
pread(r2, &(0x7f0000000440)="a9646d90a8", 0x5, 0x8000000000000002)
ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000580)={&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, 0x2})
ioctl$TIOCSETA(r1, 0xc4504443, &(0x7f0000000280)={0x1, 0x2, 0x1, 0x8, "01d03cf80047c1d100000000000000cc00", 0x6, 0x7})
r3 = socket$inet6(0x18, 0x4, 0xb)
setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000080)=0x5ac8, 0x4)
r4 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f00000003c0)=0x5, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x3, '\x00', 0x80000004}, 0x1c)

1.843241014s ago: executing program 0 (id=321):
r0 = socket(0x11, 0x3, 0x7f) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f0000000180)={0x10, 0x2, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3, 0x1}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xfffffffffffffffc, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1ff, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x148}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00008ba000/0x2000)=nil, 0x1, 0x1}, {&(0x7f0000eda000/0x4000)=nil, &(0x7f0000910000/0x3000)=nil, 0xffffffff, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ca000/0x4000)=nil, 0x1, 0x1}, {&(0x7f0000ccc000/0x4000)=nil, &(0x7f0000dd0000/0x2000)=nil, 0x4, 0x1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d0000/0x4000)=nil, 0x6, 0x2}, {&(0x7f0000aa5000/0x3000)=nil, &(0x7f0000679000/0x1000)=nil, 0x8, 0x1}, {&(0x7f00004c9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x80000000, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a9d000/0x4000)=nil, 0xffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000797000/0x2000)=nil, 0x9}, {&(0x7f00008c8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x10}], './file0\x00', 0x8000, 0x0, 0x0, [], <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
r2 = syz_open_pts()
syz_open_pts() (async)
syz_open_pts() (async)
flock(r2, 0x3) (async)
sendto$unix(r0, &(0x7f00000000c0)="b100050160000004000000000700000018008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f1302000000000000007d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba9c500022012010000de5000"/177, 0xb1, 0x800, 0x0, 0x33)

1.639761964s ago: executing program 3 (id=325):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x800, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x100051, 0x2000007, 0x6, 0x80000001, 0x80000001, 0x9, 0x10, [{0x3, 0x7, 0x4, 0x71001}, {0x7, 0x9, 0xb, 0x2}, {0x5, 0x100f86, 0x4000, 0xa}, {0x1, 0x800, 0x4410186, 0x3}, {0x401, 0x200726, 0xd28c, 0x7}, {0x2, 0xa, 0x7fffffff, 0x99}, {0xce1, 0x6, 0x3, 0x6d}, {0x6, 0x302, 0x50, 0x7f}, {0x0, 0x2, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x9, 0x10001, 0xf7, 0x8}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x3, 0x4}, {0x29a71717, 0x1, 0x5, 0xc375}, {0xb6f, 0x1ff, 0x5}, {0x7fff, 0x1, 0x101002, 0x30001}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x1c9, 0x457, 0x7, 0x5, 0x0, 0x0, 0xc})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe, 0x0, 0x0, 0x1}, {0x1}, {0x204, 0x0, 0x0, 0x80000001}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1)
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000000)=0x28)
write(r2, &(0x7f0000000140)="e67e843146dfb33d7809c19da343e772a2933512", 0xfffffffb)

516.587795ms ago: executing program 0 (id=326):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000340)={0x3, &(0x7f0000000100)=[{0x2, 0x2b, 0x14, 0x4}, {0x60, 0x83, 0x1, 0x9}, {0x6, 0xfa, 0xb4}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
syz_emit_ethernet(0x2a, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, <r1=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x3, 0x38, 0x65, 0x0, 0x3, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, r1, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0xfff8, {[@eol, @generic={0x3, 0xb, "88b9e00f5285dc11b3"}, @eol]}}}}}}})

493.601076ms ago: executing program 1 (id=150):
chmod(&(0x7f0000000140)='.\x00', 0x3db) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xc) (async)
socket(0x11, 0x3, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f00000005c0)={{0x4004, './file1\x00', [{[@v6=@mcast2, @v4=@rand_addr=0x3], [0xd, 0x3c], 0x0, 0x30}, {[@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@loopback], [0x46], 0x4, 0x2}], {{0x246, 0x48, 0x4, 0x806}, 0x80000001, 0x4, 0xfff00000, 0xbe46, 0x4, 0x17, 0x1a}, {{0x8, 0x7, 0x5, 0x5}, 0x8001, 0x870, 0x10007, 0x6, 0x800, 0x3}, @v6=@mcast1, 0x8, 0xb, 0x2, 0xf23e, 0x5, [[0x7ffffff7, 0x80000077], [0x40007, 0x834c]], [[0x80, 0x401], [0x6, 0x3]], 0x2013, [0x7fffffff, 0x79], 0x1ff, 0x18, 0x2, 0x2, 0x0, 0x40, 0xb, 0x83, 0x9, 0x8, 0x1, 0xce57, "cbff"}}) (async)
r2 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x1}, 0x10) (async)
listen(r2, 0xfffffffd) (async)
r3 = socket(0x2, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
connect$inet(r3, &(0x7f0000000740)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) (async)
sendto$inet6(r3, &(0x7f0000000780)="99", 0x1, 0x8503c97dd4963c1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x4000) (async)
poll(&(0x7f00000007c0)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)) (async)
r4 = socket$inet(0x2, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) (async)
r6 = open(&(0x7f0000000380)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000003c0)={0xffffffff, 0xfffffffd, 0xffffffbc, 0xbba8, "1100"}) (async)
bind$inet(r5, &(0x7f0000000200)={0x10, 0x2, 0x3}, 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000400)={<r7=>0x41424344}, 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344, <r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xd5, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "05b656", 0x9f, 0x0, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="dcb7f62fb1fd91a3c504d2f9f32e2487", {[@fragment={0x16, 0x0, 0x6, 0x0, 0x0, 0x17, 0x68}, @hopopts={0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x401}, @pad1]}], @tcp={{0x1, 0x1, r7, r8, 0x0, 0x0, 0xb, 0x8, 0x8000, 0x0, 0x6, {[@generic={0x4, 0x6, "7eeeb67e"}, @mss={0x2, 0x4, 0x1}, @nop, @timestamp={0x8, 0xa, 0x6, 0x2}]}}, {"f48292421540dcc9ad7eb96ade9d407136886c59ca22d454fbd7f40db2079445d9a1c7a7b0963d90a790a0d95edb9261a0760eb0996a216b8321e3be604940906a53afdec7897c15b61dbdc840852fff737892"}}}}}}})
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000240)=0x3, 0x4)

493.294923ms ago: executing program 2 (id=220):
setrlimit(0x6aa2ce84d0a83001, &(0x7f00000014c0)={0xa, 0x6})
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts()
r1 = socket(0x1, 0x8002, 0x1)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001980)={0x8002ffff, 0x6, 0xfff2, 0x21d8b78e, "141bd4c9059000", 0x47, 0xc69}) (async)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000001580)="d8bffdac235be5c338bea7dd70c88a692aa9896ada6134e7caaa8ca0e9495bb940fe3759f2f8296d9e46682905a8896ccbbc20232cca51f47fb5178da44fff5528702eb41f495edfc87ba294", 0x4c}], 0x1) (async)
mknod(&(0x7f0000001500)='./file0\x00', 0x2000, 0x1e60)
r3 = open(&(0x7f00000019c0)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000001a00)={0x4, 0x4a, 0x2100009, 0x5c5, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x49, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2, 0x99}, {0xcdd, 0x0, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x2}, {0x2, 0x10, 0x5, 0x8}, {0x8007, 0x8001, 0x10001, 0x103}, {0x1cc, 0x10001, 0xfb, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x2}, {0x7, 0x7, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000001b80)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000001bc0)={0x1, [{0x2, 0xfffffeff}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x401}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x81}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) (async)
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000001d00), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000001d40)={0x3, 0x0, 0x1}, 0x6)
r5 = socket(0x11, 0x3, 0x2)
r6 = socket(0x11, 0x3, 0x2)
sendto$unix(r6, &(0x7f0000001600)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x6, 0x0, 0x0)
r7 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@un=@abs, 0x8, &(0x7f0000001440)=[{&(0x7f0000000280)=""/219}, {&(0x7f0000000380)=""/3}, {&(0x7f00000003c0)=""/33}, {&(0x7f0000000400)=""/1}, {&(0x7f0000000440)=""/4096}], 0x0, &(0x7f00000001c0)=""/80, 0x20}, 0x2002) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
sysctl$kern(&(0x7f0000001d00)={0x1, 0x9}, 0x2, &(0x7f0000001d80), 0x0, 0x0, 0x0) (async)
execve(&(0x7f00000016c0)='./file0\x00', &(0x7f00000018c0)=[&(0x7f0000001700)='\x00', &(0x7f0000001740)='/dev/dri/card0\x00', &(0x7f0000001780)='*\xf4^:{(+0[*(/\x00', &(0x7f00000017c0)='^\x1d(#}.%$,\x00', &(0x7f0000001800)='/dev/dri/card0\x00', &(0x7f0000001840)='*%&{,!0(\\}\x00', &(0x7f0000001880)='\x00'], &(0x7f0000001940)=[&(0x7f0000001900)='[\x00']) (async)
sendto$unix(r5, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce2902000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x2, 0x0, 0x0)

492.999885ms ago: executing program 3 (id=327):
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x7c, 0x5, 0xffc00000, "d6a24901b178927c79486b46c1d100", 0x4, 0x8})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x6e)

492.515218ms ago: executing program 4 (id=210):
ioctl$DIOCRDELTABLES(0xffffffffffffff9c, 0xc450443e, &(0x7f00000010c0)={{'./file0\x00', './file0\x00', 0x0, 0x4}, &(0x7f0000000000)=[{'./file0\x00', './file0\x00', 0x7, 0x3}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x0, 0xff}, {'./file0\x00', './file0\x00', 0x10, 0x6b}], 0x3, 0x4, 0xcc2, 0x7, 0x9dff, 0x11f9, 0x4, 0xc0})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
r0 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x80aec933ad86fbe3) (async)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r1 = semget$private(0x0, 0x2, 0x1)
r2 = geteuid() (async)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001540)={0x0, <r3=>0x0}, 0xc) (async)
fstat(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) (async, rerun: 32)
getresgid(&(0x7f0000001600)=<r5=>0x0, &(0x7f0000001640)=<r6=>0x0, &(0x7f0000001680)) (rerun: 32)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000016c0)={{r2, r3, r4, r6, 0x16, 0x2, 0xc8}, 0x0, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x2}) (async)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
rename(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') (async)
r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0)
ioctl$WSKBDIO_GETBELL(r7, 0x40105704, &(0x7f0000001800))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async)
mkdir(&(0x7f0000001840)='./file0\x00', 0x88) (async)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) (async)
msgget$private(0x0, 0x40)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001880), 0x100, 0x0)
read$audio(r8, &(0x7f00000018c0)=""/170, 0xaa) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000001980)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername(r9, &(0x7f0000001a00)=@un=@abs, &(0x7f0000001a40)=0x8) (async)
r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a80), 0x8, 0x0)
ioctl$DIOCGETLIMIT(r10, 0xc0084427, &(0x7f0000001ac0)={0x5, 0xffffff6a}) (async)
ioctl$WSKBDIO_SETDEFAULTBELL(r7, 0x80105705, &(0x7f0000001b00)={0x1bd3, 0x155, 0x9, 0x3}) (async)
setegid(r5)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/123, 0x7b, 0x2003, &(0x7f0000001bc0)={0x10, 0x2, 0x2, 0x8}, 0x10)

492.371875ms ago: executing program 5 (id=311):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2a00000000000000, 0x1, 0x0, 0x0, 0x52f, 0x1ff, 0x1], [0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x0, 0x4, 0x0, 0x8000000000003], [0xfffffffffffffffe, 0xffffffffffffffff], [{0x8, 0x0, 0x400}, {0xfffd}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x8, 0x0, 0x0, 0x7ca7}, {0x0, 0xffff}], {0xfffc, 0x40000000}, {0x0, 0x0, 0x27ca}}})
r0 = syz_open_pts()
close(r0)
setrlimit(0x8, &(0x7f0000000000)={0xb, 0x4e})
r1 = syz_open_pts()
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111) (async)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x111)
sysctl$kern(&(0x7f0000000440)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80086476, &(0x7f0000000480)={0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, &(0x7f00000004c0)})
close(r1)
syz_open_pts() (async)
r3 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47) (async)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0x47)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsid()
ioctl$TIOCSCTTY(r3, 0x20007461)
read(r3, &(0x7f0000000340)=""/159, 0x9f) (async)
read(r3, &(0x7f0000000340)=""/159, 0x9f)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x2, 0x2, 0x0) (async)
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0))

492.114261ms ago: executing program 7 (id=315):
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
openat$klog(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
mknod(0x0, 0x2000, 0x1e60) (async, rerun: 32)
open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x2a) (rerun: 32)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000300)={0x4, 0x4e, 0x2100009, 0x1, 0x81, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0xd, 0x800a}, {0x3fe, 0x200726, 0x2800, 0x7}, {0x9, 0x203, 0x3, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x6, 0x300, 0x57, 0x400002}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x123}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0xff, 0xfffeffff, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc376}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0x23d4, 0x30000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
sysctl$kern(0x0, 0x0, &(0x7f0000000440)="71f91e3471ac0058bc5a91501d94", &(0x7f0000000480)=0xe, 0x0, 0x0) (async, rerun: 32)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc028698d, &(0x7f00000004c0)) (async)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000001000)={0x101, 0x1c, {[0x3, 0x9, 0x10, 0x1, 0x6, 0x9, 0x9, 0x1, 0x3, 0x6, 0x4, 0xffffffff, 0xb, 0x101, 0x2, 0x7ff, 0x4, 0x7], [0x6, 0xf0fe, 0x7ff, 0x2, 0x3fe, 0x4, 0x9, 0x0, 0x5, 0x4], [0xffffffffffffffff, 0x2, 0x7, 0x6, 0x4, 0x9, 0x1], [0x7dc, 0x26, 0xab0, 0xa, 0x400000001, 0x34], [{0x9, 0x40, 0x2, 0xffffffffffffffa3}, {0x7, 0x6, 0xff}, {0x9, 0x6e, 0x26, 0x16}, {0x1, 0xffffffff, 0x9003, 0xa}, {0x0, 0x6, 0x6, 0x7fffffffffffffff}, {0x3, 0x9, 0xc, 0x101}, {0x7b, 0x0, 0xde}, {0x2, 0xffffff81, 0xffffffff, 0x7}], {0x3, 0x6, 0x900000, 0x10}, {0xe42, 0x5, 0x7, 0x8000000000000001}}}) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async, rerun: 64)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, [], {@generic={0x8864}}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000040)="8f07688624117e5da938a43dac7d47eeaf6114de21b31ac5d9e5eb19f2c90ca2c3b2fdf11a0af52d4f1ff3405486cdcfb596910738cffc98876ba8f9205291bd42f4252c4d678839680cad2176", &(0x7f00000000c0)=0x4d, &(0x7f0000000600)="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"/403, 0x193) (async)
setuid(0xffffffffffffffff) (async)
r2 = syz_open_pts()
ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000000200)={0x0, 0x7f}) (async, rerun: 64)
r3 = setsid() (rerun: 64)
kill(r3, 0xb)
clock_getres(0x2, 0x0) (async)
socket$inet(0x2, 0x3, 0x102) (async)
sysctl$vm(&(0x7f0000000100)={0x2, 0x8}, 0x2, &(0x7f0000000140)="79960000", &(0x7f0000000180)=0x4, &(0x7f0000000240)="f0f8a258", 0x4) (async)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000005c0)={0x1080ff68, 0x2, 0x80c, 0xa, "74de6800", 0x5, 0xdb60})

491.783138ms ago: executing program 0 (id=328):
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000000)={{0x4, './file0\x00', [{[@v4, @v4=@rand_addr=0x8], [0x1, 0xfff1], 0x5, 0x18}, {[@v4=@rand_addr=0x5, @v6=@mcast2], [0x6], 0x4a, 0x1a}], {{0x0, 0x80, 0x7, 0xfff}, 0x6, 0x0, 0x80, 0xc, 0x4, 0x6, 0x3}, {{0x1ff, 0xfd, 0xff, 0xb07}, 0xfffffffd, 0x3, 0x40000004, 0xff, 0xfb, 0xfc, 0x6}, @v4=@remote={0xac, 0x14, 0x0}, 0x1, 0x1, 0x80004, 0x7, 0xfe, [[0x5, 0x4], [0x125a, 0x1d7]], [[0x8], [0x2, 0x203]], 0x48000, [0x7], 0x5, 0x31, 0x66, 0x2, 0x20, 0x1, 0x89, 0x2, 0x2, 0x6, 0x3, 0x3, "02ac"}})
setrlimit(0x8, &(0x7f0000000140)={0xb, 0x53})
r0 = syz_open_pts()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000e80)="ebffcbdf13b9fd812eaa4e713048e69931", 0x11)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0)
fcntl$lock(r1, 0x8, &(0x7f0000000f80)={0x9, 0x1000, 0x0, 0x3, 0x1})
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1, 0x0)
openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000f00)={0x5d, 0x81})
close(r0)
openat$vmm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000200)={0x0, [{0x1}, {0x3}, {0x0, 0x300}, {0x3}, {0x3, 0x4000}, {0x2, 0xf}, {}, {0x3, 0x1000001}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x9}, {0x1, 0x100000}, {0x2}, {}, {0x3, 0x4}, {0x1, 0x1000}, {0x2}, {0x0, 0x40}, {0xb3b787630a3b27cc}, {0x0, 0x5}, {0x2, 0xfffffffe}, {0x3}, {0x0, 0x2000}, {0x0, 0x7ff}, {0x0, 0x1}, {0x0, 0x10000}, {0x2, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}, {0x1}]})
ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0xc0307006, &(0x7f0000000340)={0x1, 0x10})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60788ea60006000000697a653e336f000000500000200000ff020000000000000000000000000001"])
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000003c0)=0x100004)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
openat$pf(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0)
ioctl$DIOCGETRULE(r1, 0xcd604407, &(0x7f00000010c0)={0x7, 0x5, 0x1, './file0\x00', './file0\x00', 0x0, "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"})
r3 = open(&(0x7f0000001e40)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000001e80)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=329):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x7fff}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
r1 = socket$inet(0x2, 0x8000, 0x81)
listen(r1, 0x5)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [{[], {0x8100, 0x7, 0x0, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x66, 0x0, 0x1, 0xc, 0x0, @multicast1, @broadcast}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfff8, 0x0, 0xfffc, {[@window={0x3, 0x3, 0x36}]}}}}}}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts.
pckbd_enable: command error
vnd0: sloppy read from proc 83004 (syz-executor): blkno 0 bcount 2909
vnd0: sloppy read from proc 83004 (syz-executor): blkno 64 bcount 2048
vnd0: sloppy read from proc 83004 (syz-executor): blkno 1024 bcount 2048
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-main-5.us-central1-a.c.syzkaller.internal) (tty00)

login: �j���|����E1\�:./file0./file0

�9�y��/dev/bpf
�	 �
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
SYZFAIL: tun: read failed
 (errno 5: Input/output error)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap1: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
SYZFAIL: repeatedly failed to execute the program
proc=1 req=150 state=3 status=67 (errno 4: Interrupted system call)


OpenBSD/amd64 (ci-openbsd-main-5.us-central1-a.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffff8006f9cbb98, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
Password:
Login incorrect
login: show panic
Password:
Login incorrect
login: trace
Password:
Login incorrect
login: show proc
Password:
Login incorrect
show all locks
login: Password:
Login incorrect
show all pools
login: Password:
Login incorrect
trace
login: Password:
Login incorrect
trace
login: Password: