last executing test programs:

4.142836507s ago: executing program 3 (id=146):
r0 = semget$private(0x0, 0x3, 0x40)
sysctl$vfs_nfs(&(0x7f0000002e80)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000002ec0)="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", &(0x7f0000003ec0)=0x270, 0x0, 0x0)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
semop(r0, &(0x7f0000000100)=[{0x4, 0x40, 0x1000}, {0x1, 0x7, 0x800}, {0x6, 0x80, 0x1800}, {0x0, 0x3}, {0x0, 0x200, 0x1000}, {0x0, 0x90, 0x1000}, {0x3, 0x101, 0x2800}], 0x2aaaaaaaaaaaace1)
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000040)="b1000501000000ae05000701070000000508000000000500fef96ecfc72fd3357ae30200004e30ffecb92819f20bf404be01000000f7c8cf5f882b297de1aa050400ce9462f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x0, 0x0, 0x0)
close(r1)

3.913553439s ago: executing program 4 (id=148):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x6, 0x101, 0x1, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0xb7fe, 0xf, 0x7}, {0x100004, 0x4, 0x1fc000, 0x3}, {0x3, 0x10, 0x200, 0xfffffffb}, {0x4, 0x3, 0xe, 0x7}, {0x2, 0x20048000, 0x7d457398, 0xff}, {0x5, 0xbffffff5, 0x4, 0x6}, {0x99d, 0x8, 0xfdf0, 0x4}, {0xf, 0x44c7, 0xbfa9, 0x8000}, {0x6, 0x0, 0x10001, 0x20000001}, {0xa44f, 0xfff8, 0x488, 0xe1}, {0x8000, 0x5, 0x8, 0x8}, {0x2080e0, 0x9, 0x5, 0x3ff}, {0xfffffffe, 0x0, 0xffff0001, 0xfffffff8}, {0x2, 0x5, 0x4, 0x2000b}, {0x81, 0xf3, 0x7, 0x4}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r1, 0x20007461)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x87, 0x3, 0x90, 0x10000002}, {0x4c, 0x1, 0x89, 0xfffffffb}, {0x1026, 0xa0, 0x2, 0x5}]})
syz_emit_ethernet(0x22, &(0x7f0000001240)=ANY=[])
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000001c0)={0x2df57366, 0x1, 0xd, 0xffff7dfc, "0a6400b72834605c9b000a296203000000020400", 0x80000005, 0x3ff})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000001b80)=[{&(0x7f0000001340)="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", 0x223}], 0x1)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000080)='./file2/file0/file0\x00')
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xd, 0x1, 0x1040807, 0xfffeffff, 0x0, 0x1, 0xea58a3795ec839c9, 0x8, 0x8000000000f6})
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
accept(r3, 0x0, &(0x7f0000000000))
socket(0x18, 0x3, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83)
ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000040)=0x10004)
close(0x3)
setitimer(0x2, &(0x7f0000000140)={{0x3, 0x100800000000009}, {0x7ffefffbeffefffe, 0x8000003}}, 0x0)
mknod(&(0x7f00000000c0)='./file2\x00', 0x100, 0x8000)
setuid(0xee01)

3.912537278s ago: executing program 5 (id=149):
openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
r0 = msgget$private(0x0, 0x10)
r1 = geteuid()
setresuid(0xffffffffffffffff, r1, 0x0)
r2 = getegid()
getresuid(&(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180), &(0x7f00000001c0))
r4 = getgid()
setresgid(r4, r4, 0x0)
r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
r6 = setsid()
fcntl$setown(r5, 0x6, r6)
ioctl$DIOCRDELADDRS(r5, 0xc4504444, &(0x7f0000000880)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0\x00', 0x50, 0x1}, &(0x7f0000000740)=[{@multicast1, '\x00', './file0aaaaaaaaa', 0x3, 0xffff, 0x18, 0x3, 0x4, 0x0, 0x2}, {@multicast2, '\x00', './file0aaaaaaaaa', 0x0, 0xfff3, 0x4, 0xe, 0x3, 0xa, 0x9}, {@multicast1, '\x00', './file0aaaaaaaaa', 0x56fd0090, 0x100, 0x2, 0x81, 0x14, 0x81, 0x1}, {@rand_addr=0x2, '\x00', './file0aaaaaaaaa', 0xa, 0x1, 0x0, 0xfd, 0x7f, 0x7, 0x3a}, {@local={0xac, 0x14, 0x0}, '\x00', './file0aaaaaaaaa', 0x2, 0x6, 0x1a, 0xc0, 0x2, 0x2, 0xa}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0aaaaaaaaa', 0x5, 0x8, 0x2, 0xd, 0x9e, 0x8, 0x9}], 0x6, 0x6, 0x2, 0x6, 0x9, 0xe8, 0x7e, 0x2})
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{r1, r2, r3, r4, 0x6, 0xfff9, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x100000000, 0x400, 0x4f, r6, 0x0, 0xc755, 0x0, 0x46})
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r7 = socket$inet(0x2, 0x4003, 0x6b)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000240)="ea00000142000000", 0x8)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ftruncate(0xffffffffffffffff, 0x8531)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x0, &(0x7f00000000c0)})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(r8, 0xc0284408, &(0x7f0000000000)={0x0, 0x7, 0x0})
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

3.911365422s ago: executing program 6 (id=150):
mknod(&(0x7f00000000c0)='./bus\x00', 0x80, 0x881)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x40) (async)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x40)

3.910762171s ago: executing program 0 (id=152):
readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000080)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x2042, 0x0) (async, rerun: 32)
r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f00000000c0)=0x10) (rerun: 32)
connect$inet(r2, &(0x7f0000000100)={0x10, 0x2, 0x3, 0x6}, 0x10) (async)
shutdown(r1, 0x2) (async)
close(r1) (async)
execve(0x0, 0x0, 0x0)

3.908750093s ago: executing program 6 (id=154):
r0 = semget(0x3, 0x1, 0x2a1)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x4000000, 0x6, {0x0, 0x1000000002}})
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x4, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x1, 0x8000, 0x41)
close(r2)
r3 = socket(0x18, 0x3, 0x3a)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x8, &(0x7f0000000200)=[{0x5, 0x6, 0x0, 0xeea}, {0x0, 0x3, 0xf1, 0x1000}, {0x1, 0xff, 0x6, 0x1}, {0x7225, 0x66, 0x4}, {0x1, 0x1, 0x1, 0x2}, {0x1, 0x3, 0xf9, 0xfffffffe}, {0xb2ef, 0xc, 0xd2, 0x8}, {0x2, 0x5, 0x3, 0xe8}]})
setsockopt(r2, 0x10000, 0x8001, &(0x7f0000000000)="eb48e6995961964800"/20, 0x14)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x1800)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x8})
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setresgid(0x0, 0x0, 0x0)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x78, 0x25, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x8})
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc813, r4, 0x2)
mknod(&(0x7f0000000000)='./bus\x00', 0x80, 0x884)
mlock(&(0x7f0000294000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000120000/0x4000)=nil, 0x4000)
mmap(&(0x7f000048a000/0x3000)=nil, 0x3000, 0x2, 0xe819, r2, 0x6)
semctl$GETZCNT(r0, 0x0, 0x7, &(0x7f0000000080)=""/70)
mknod(&(0x7f0000000100)='./bus/file0\x00', 0xffffffffffff2ffd, 0x6d4)
mknod(0x0, 0x4, 0x205b1a)
openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)

3.69420335s ago: executing program 3 (id=155):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
r0 = socket(0x19, 0x2, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sysctl$vm(&(0x7f0000003d00)={0x2, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='./file0\x00')
rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x40450c)

3.645057133s ago: executing program 1 (id=158):
r0 = socket(0x18, 0x2, 0x0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x9, 0x7ff, 0xcfe, 0xffffff01, "a7754d80307e0a00f62b16d7fc5f81ef09c2a104", 0x103, 0x9})
ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000000)=0x80)
setuid(0xee01)
r2 = msgget$private(0x0, 0x8)
msgctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x1f0, 0x7e67, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0x3, 0x4000009, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x1, 0x0, 0x9})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x4b, 0x7)
r3 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r3, 0xf3)
setuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0)
r4 = syz_open_pts()
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
open$dir(&(0x7f0000000080)='./bus\x00', 0x80, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
dup3(r5, r4, 0x10000)
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0xf66c, 0x3, 0x7, 0x5ffbfb59, "7ad58fdbe07c0000000000e1ffffff00", 0x743c8c17, 0xd9e})
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0xffffffff7fffffff}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00000e7000/0x3000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f0000701000/0x3000)=nil, &(0x7f0000673000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0xa8}, {&(0x7f000015d000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffffc}, {&(0x7f00005a4000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000344000/0x4000)=nil, 0x1000039fc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x55d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9, 0x20000000]})
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
ioctl$TIOCSETA(r6, 0xc4504442, &(0x7f0000000200)={0xffffffff, 0x0, 0x2000000b, 0x228c4ae2, "6aff000047000000f8ff00", 0x4e9, 0x4})

3.272328843s ago: executing program 7 (id=162):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0))
r3 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r3, 0xc0206923, &(0x7f00000001c0))
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r1, 0x1000000029, 0xd, &(0x7f00000002c0), 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000503000004000000000105000000331c01040100008000000000ff0100007ae302fffe4e3039d2d236acf20b7810be38164991f7c8cf5f881029ffffff7fda0000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fc18bfbb670c1f5a8b67114d66e2ec589040000000000800078e36b361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa", 0xb1, 0x804, 0x0, 0x39)
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSKBDIO_SETDEFAULTBELL(r4, 0x80105705, &(0x7f0000000080))
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01)
r5 = open(&(0x7f0000000540)='./bus\x00', 0x20, 0x0)
pread(r5, &(0x7f00000001c0)="2beb0750083aff44b433dfbb0000005647e792b2a666c2563e39cd80405f780de9323e19646ddb3db0cdaad7bb50764301f2366f9a21598d5c030000000000000007e71f640da0dbe0031b00000000", 0x4f, 0x80000000)

3.041586928s ago: executing program 0 (id=166):
r0 = msgget$private(0x0, 0x1ba)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0x0)
setuid(0xee01)
openat$vnd(0xffffffffffffff9c, 0x0, 0x40, 0x0)
msgrcv(r0, &(0x7f0000001540)={0x0, ""/115}, 0x7b, 0x3, 0x1000)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$inet(r1, 0x0, 0x0, 0x6, &(0x7f0000000280)={0x10, 0x2, 0x2, 0x63e8}, 0x10)

3.041174468s ago: executing program 4 (id=167):
r0 = open$dir(&(0x7f0000000440)='.\x00', 0x0, 0xc4)
lseek(r0, 0xfffffffffffffffd, 0x0)
unveil(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='x\x00') (async)
getdents(r0, &(0x7f0000000000)=""/52, 0x34)

3.036529142s ago: executing program 5 (id=168):
ktrace(&(0x7f0000000000)='./bus\x00', 0x1, 0x40000c08, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x78800, 0x220)
pwrite(r0, &(0x7f0000000280), 0x0, 0x3)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$BIOCSRTIMEOUT(r1, 0xc0307004, &(0x7f0000000080)={0x2, 0x2000000f})
r3 = open(&(0x7f0000000100)='./bus\x00', 0x40, 0x42)
ioctl$FIONBIO(r3, 0x8004667e, &(0x7f00000001c0)=0x4)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080))
socketpair(0x18, 0x4000, 0x29, 0x0)

2.953071071s ago: executing program 3 (id=169):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x285b9b)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0)
poll(&(0x7f0000000380)=[{r0, 0xcb}], 0x1, 0x487)
fchdir(r0)
close(r0)
r1 = socket(0x800000018, 0x1, 0x0)
r2 = socket(0x24, 0x2, 0x6)
getsockopt$sock_int(r2, 0xffff, 0x1021, 0x0, 0x0)
getsockopt(r1, 0x6, 0x4, 0x0, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
r4 = kqueue1(0x10004)
r5 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100))
r6 = accept$inet6(r1, 0x0, &(0x7f0000000200))
kevent(r4, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffff3, 0x1c, 0x1, 0x7, 0x8000000000000000}, {{r2}, 0xfffffffffffffffa, 0x40, 0x1, 0x8, 0x4}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0xba, 0x40, 0x7, 0x1}, {{r1}, 0xfffffffffffffffd, 0x4, 0x2, 0x9, 0x8}, {{r3}, 0xfffffffffffffff9, 0x10, 0x2, 0xe7, 0xfff}, {{r2}, 0xfffffffffffffff9, 0x90, 0x0, 0x0, 0x7}], 0x5, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffff7, 0x10, 0xfffff, 0x3, 0x7}, {{r5}, 0xfffffffffffffff9, 0x0, 0x4, 0xfffffffeffffffff, 0x1}, {{r1}, 0xfffffffffffffff7, 0x42, 0x2, 0xfffffffffffff001, 0x77f6}, {{r3}, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0x589b29bb}, {{r1}, 0xfffffffffffffffa, 0x35, 0x1, 0x1, 0x6}, {{r6}, 0xfffffffffffffffc, 0x3c, 0x80, 0x3, 0x7fffffffffffffff}, {{r3}, 0xfffffffffffffffc, 0xc6, 0x9, 0xffff, 0x8}], 0x1, &(0x7f0000000340)={0x8, 0x7})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0xf0, 0x3, 0xc1}, {0x6, 0x24, 0x0, 0xe94}]})

2.952361111s ago: executing program 1 (id=170):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000200))
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x7e, 0x3, 0x48}, {0x5, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0)
ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000040)=0x7)
write(r1, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$VNDIOCSET(r4, 0x80046309, &(0x7f0000000100)={0x0, 0x0, 0x0})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCGDIRFILT(r3, 0x4004427c, &(0x7f0000000240))
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x5, &(0x7f0000000100)=[{0x7c, 0x80, 0x1, 0x9}, {0x35, 0x0, 0x2, 0x9}, {0x0, 0x9, 0x8, 0x9}, {0x87, 0x1, 0x0, 0x102}, {0x9b1e, 0x2, 0xf4, 0xb1e}]})
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])

2.951584689s ago: executing program 6 (id=171):
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffff9c, 0xc00464be, &(0x7f0000000600)={<r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffff9c, 0xc00464be, &(0x7f0000000640)={r0})
mkdir(&(0x7f0000000500)='./file0\x00', 0x0)
setuid(0xee01)
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000380)={0x11f1800000000000, 0x9})
r3 = socket(0x18, 0x3, 0x0)
setsockopt(r3, 0x1000000029, 0x31, 0x0, 0x0)
ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f0000000100)={0xfd29, 0x4, 0x8000000e, 0x5})
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000700)=0xc)
setgroups(0x1, &(0x7f0000000000)=[r6])
fchownat(r1, &(0x7f0000000000)='./file0\x00', r4, r6, 0x0)
getrlimit(0xd, 0x0)
open(0x0, 0x10686, 0x8)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x23, 0x0, {[0x5, 0x802, 0xffffffffffffffd, 0x1, 0xc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x22, 0xffffffffffff7ffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1], [0x55, 0x5, 0x4, 0x11000, 0x1, 0x0, 0x5, 0x0, 0x80000000, 0xfffffffffffffff8], [0x7fffffffffffffff, 0x8, 0x0, 0x40, 0x100000], [0xdb9d, 0x0, 0x0, 0x165, 0x0, 0xb], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x7}, {0x1000, 0x3c, 0x0, 0x1}, {0x0, 0x1000, 0xfffd, 0x1}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x9, 0x1, 0x0, 0x1}, {0x0, 0x0, 0xaa, 0xfffffffffffffff9}, {0x0, 0xfffffff5, 0xc00000}], {0xffeb, 0xfffffffd, 0x20000003, 0xf5a752c}, {0x0, 0x6, 0x10000000}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x11, 0x3, 0x0)
r7 = socket(0x18, 0x3, 0x50)
ioctl$FIONREAD(r7, 0x8020699f, &(0x7f00000001c0))
chdir(&(0x7f0000000100)='./file0\x00')
mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x40006dd)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[0x5c27, 0x8000, 0xf, 0x2, 0x0], 0x5, 0x4})
open(&(0x7f0000000040)='./file0\x00', 0x100, 0x2)
closefrom(r1)
execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000180)=':{\x00', &(0x7f0000000200)='/dev/wskbd\x00', &(0x7f0000000240)='\x00', &(0x7f00000002c0)='/dev/wskbd\x00', &(0x7f0000000300)='/dev/wskbd\x00'], &(0x7f00000005c0)=[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/wskbd\x00', &(0x7f0000000400)='/dev/wskbd\x00', &(0x7f0000000440)='*{\x00', &(0x7f0000000480)='.-]*\\}}\x00', &(0x7f00000004c0)='/dev/wskbd\x00', &(0x7f0000000540)='[\x02\'}\x00', &(0x7f0000000580)='/dev/wskbd\x00'])

2.665303652s ago: executing program 2 (id=173):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7)
setrlimit(0x4, &(0x7f0000000040)={0x5, 0x3}) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000000) (async, rerun: 32)
ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000240)={{'./file0\x00', './file0\x00', 0x3, 0xc}, 0x0, 0x0, 0x0, 0x2, 0x7, 0x65f, 0x1, 0x30, 0xd}) (rerun: 32)

2.664907263s ago: executing program 7 (id=174):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10004)
ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000080)=0x7)
readv(r2, &(0x7f0000000340)=[{0x0}], 0x1)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xfffffffa, 0x0, ""/32, 0x8, 0x8})
r3 = fcntl$getown(r1, 0x5)
kill(r3, 0x5adc72ff3ab04764)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x14, 0xff, 0x1, 0x4008}, {0x30, 0x9, 0x7, 0x6}, {0x9b1e, 0x2, 0xf7, 0x9}]})
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])

2.661225367s ago: executing program 1 (id=175):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f58f8d8d76b9ad903abf65b18d01000000000400000000000000fafd02af776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x402}, 0x8)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x0, 0x0, "000001e3bb4e3447c1d100", 0x4, 0xffff2bd9})
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000001280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6569dadf00302e0400000000000000000000ffff00000000000000000000000000000000000000010301907804000000641779f1fbff610000000000000000000000000003000001fe8000000000000000000000000000aa"])
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x101, 0x80000001, 0x256, 0x10001, 0x10, [{0x0, 0xc, 0x0, 0x71000}, {0x9, 0x1000018, 0x8, 0x9}, {0x4, 0xf86, 0x0, 0x9}, {0xfffffffe, 0x8, 0x8047}, {0x3ff, 0x200726, 0x2800, 0x8000}, {0x706, 0x29, 0xff, 0x100099}, {0xce1, 0x3, 0x75dc, 0xfff}, {0x6, 0x8300, 0x52, 0x4}, {0x3, 0x82, 0x9, 0x1}, {0x1, 0xfffffff9, 0xd1b, 0x5}, {0x101, 0x10001, 0x1, 0xfffffffd}, {0x7fb, 0x7, 0x0, 0x9}, {0xb8c, 0xf18f, 0x8, 0x200004}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x3, 0x5}, {0x8002, 0x3, 0xffe, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x3, 0x0)
setsockopt(r3, 0x1000000029, 0x25, &(0x7f0000000000), 0x0)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x7, 0x0})
bind$unix(r2, &(0x7f0000000300)=@abs={0xf, 0x0, 0x0, 0x0}, 0x8)
r4 = semget(0x0, 0x1, 0x281)
semop(r4, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x1)
semctl$SETALL(r4, 0x0, 0x9, &(0x7f00000000c0)=[0x8, 0x401, 0xb])
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
setgid(r1)
bind(r3, &(0x7f00000002c0)=@un=@abs={0x9, 0x0, 0x0, 0x3}, 0x8)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x806378, 0xb, 0x41, 0x801104, "bb00c30000ec2d0a436079c10d00000900", 0x8f48, 0x9})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
open(&(0x7f0000000340)='./file1\x00', 0x0, 0x190)
semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000380)=""/198)
close(r5)
fchdir(r5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='r\x00')
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

2.66078021s ago: executing program 5 (id=176):
stat(&(0x7f00000001c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, 0xee00, r0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x97)
lseek(r1, 0x400000000000000e, 0xc65dfe7f06a0dff9)
r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0)
writev(r2, &(0x7f00000015c0), 0x0)

2.414196337s ago: executing program 4 (id=177):
setuid(0xffffffffffffffff) (async)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
setreuid(0xee00, 0x0)
setreuid(0x0, 0xffffffffffffffff)
semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, 0x0)

2.413489145s ago: executing program 2 (id=178):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) (async)
setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0)
sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000001140), 0x0)
ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000400)={{0x400, './file0\x00', [{[@v6=@mcast2, @v6=@rand_addr="a9f87e314ce7a8ed4cd23c39985c9124"], [0x8, 0x6], 0x5c3b}, {[@v6=@mcast1, @v6=@mcast2], [0x6, 0x9], 0x3, 0x2}], {{0x4, 0x1, 0x6, 0x4}, 0xffffffff, 0xfffffff4, 0x7, 0x7, 0x6, 0x7f, 0x6}, {{0x107, 0xc5, 0x81, 0x1}, 0x9, 0x3ff, 0x2000, 0xffff, 0x8001, 0x2, 0x9a}, @v4=@rand_addr=0x1, 0x3, 0x100, 0xd, 0x8, 0x6, [[0x7, 0xdf], [0x8000, 0xf]], [[0x7, 0x4], [0xfff, 0x1]], 0x5, [0x2, 0x10], 0x5, 0x1a, 0x4, 0x1, 0xbe, 0x7, 0xe, 0x6, 0x7f, 0x8, 0x10, 0x400d, "67ae"}}) (async, rerun: 32)
r1 = kqueue() (async, rerun: 32)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, 0x0)
openat(0xffffffffffffffff, 0x0, 0x2, 0x0)
setrlimit(0x8, 0x0) (async)
syz_open_pts()
kevent(r1, &(0x7f00000003c0)=[{{r0}, 0xfffffffffffffff6, 0x8b, 0x80, 0xb414}], 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
r2 = syz_open_pts() (rerun: 64)
ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000140)={0x81, 0x103, 0x6, 0x400, "0000000f000000aff0338a6b4fc6001000", 0x9, 0x8})

1.97395606s ago: executing program 7 (id=179):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x10001, 0x6, <r0=>0xffffffffffffffff})
ioctl$DIOCXEND(r0, 0xc0044464, &(0x7f0000000040)=0x4)
mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x81)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={r1, 0x59, &(0x7f00000000c0)=""/89})
sendto$unix(r0, &(0x7f0000000180)="9afcee74012dd7d80faf1e386aaaac03d9e4f22ea8fe23db04980c516b0b86007ce797ed42410204eecab492b904a11ca0b210595ef15b2fb62556cef636890303c17db0df4528c6", 0x48, 0x0, 0x0, 0x0)
r2 = dup2(r0, r0)
ioctl$DIOCSETDEBUG(r2, 0xc0044418, &(0x7f0000000200)=0x4)
ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', 0xd5, &(0x7f0000000280)='./file0\x00', 0x8})
ioctl$DIOCXEND(r0, 0xc0044464, &(0x7f0000000300)=0xe5c1)
fsync(r2)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000003c0)={&(0x7f0000000340)='./file0\x00', 0x3, &(0x7f0000000380)='./file0\x00', 0x8})
sysctl$kern(&(0x7f0000000400)={0x1, 0x15}, 0x2, &(0x7f0000000440)="c404a134efd44d06c4f84ae5e3a1bf70785a53185322936a2dd376c7088f412d8e4e28ea5a0f7e84d820526f003bcfc6b94c2228ea432bb757740050d89f3b9b82bfd2340212651febd6c21db04ff09b50a4d533c8912fc6d89e9feda4ae53df3368091c001be54b20f36117bd9cf39a9a3d59c87e5d92aef4131c903777d6555abee674e37b4edc5e", &(0x7f0000000500)=0x89, &(0x7f0000000540)="6e6b43b372815b6309ef0faea0b552e4ac19bb027ea6eb8dba5c8e6c816d7fe85cdab6d4353f0a4f0d69a492aa4dd9711894e1f3b9f4f48946f80e5e346464b0bb1b67ef3df899c87f33dcab1a02321e0419d9e44bdbd43e57673e8c96cb3e29720efa50284cfa3156ce9ebb", 0x6c)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000640)={0x6, 0x9, <r3=>r2})
mquery(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, r3, 0x6)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000007c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x1, 0x6, 0x7, 0x0, <r4=>0x0, 0xf, 0xfffffffc, 0x3, 0xfffffffe, 0x7, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000ac0)={&(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x3, 0x0, <r5=>0x0, 0x7, 0x6, 0x2, 0x5, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000e00)={&(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0], 0x7, 0x2, 0x1, 0x0, <r6=>0x0, 0x1, 0x5, 0x400, 0xbf, 0x5, 0x7f})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000f80)={&(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x8, 0x4, 0x6c, 0x5, 0x8, 0x1000})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000010c0)={&(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[<r8=>0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0], 0x4, 0x1, 0x3, 0x2, 0x5, 0x4, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000001240)={&(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[<r9=>0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x2, 0x6, 0x1, 0x4, 0x7fff, 0x2})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000001280)={<r10=>0x0, 0x5, 0x6, 0x32314258, 0x1, [], [0x5, 0x80000001, 0xf442, 0xd0d], [0x8, 0x10001, 0x4], [0x6, 0xfffffffffffffff8, 0x4, 0x3]})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001300)={&(0x7f0000001100)=[r4, r5, r6, r7, 0x0, r8], 0x6, r9, r10, 0x9, 0x1ff, 0x5, 0x7, {0x7ff, 0x1, 0x3ff, 0x2, 0x5, 0x101, 0xa51, 0x4, 0x7fff, 0x10, 0x1, 0x7, 0x7c000, 0x5, "66d093a7d7948160bb402bb97db64015fc3a12e0ed13ee4e8a35906afabf3103"}})
r11 = open$dir(&(0x7f0000001380)='./file0\x00', 0x200, 0x90)
unlinkat(r11, &(0x7f00000013c0)='./file0\x00', 0x8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001400)={0xa75, 0x9, <r12=>r3})
write(r12, &(0x7f0000001440)="557d250b2672787e51d52c4b5fa7b99f762f79b86b732f57814a", 0x1a)
ioctl$VNDIOCGET(r12, 0xc4104603, &(0x7f0000001480)={'./file0\x00', 0xc, 0x5, 0x2})

1.788305587s ago: executing program 4 (id=180):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000940)=[{0x7c, 0x2, 0x3, 0x1224000}]})
r1 = socket(0x1e, 0x3, 0x2)
sendto$unix(r1, 0x0, 0x0, 0x8, &(0x7f0000000000)=@file={0x1}, 0xa)
r2 = syz_open_pts()
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080})
fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x2, 0x2, 0x300, 0x100000001})
fcntl$lock(r2, 0x8, &(0x7f0000000180)={0x2ff, 0x0, 0x10, 0x2ffffffff})

1.782938206s ago: executing program 5 (id=181):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$DIOCADDQUEUE(r0, 0xc148445d, &(0x7f0000000040)={0x8, 0xbf, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x7ff, 0x6}, {0xfff, 0x1000}, 0x6}, {{0x80, 0x7}, {0x8980, 0x9}, 0x7}, {{0x8, 0xace8}, {0x10, 0x9}, 0x80}, {0x2, 0xb8, 0x6, 0x4}, 0x0, 0x2, 0x6, 0x8000, 0x2}})
ioctl$DIOCSTART(r0, 0x20004401)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000200)=0x2)
ioctl$DIOCRSETADDRS(r0, 0xc4504445, &(0x7f0000000340)={{'./file1\x00', './file0\x00', 0x19, 0x91}, &(0x7f0000000240)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xe, 0xfffb, 0x2, 0x7, 0xdf, 0x3, 0x10}, {@multicast2, '\x00', './file0\x00', 0x1000, 0x9, 0x2, 0x0, 0x4, 0xff, 0x13}, {@broadcast, '\x00', './file0\x00', 0x3, 0x9, 0x2, 0x1, 0x4, 0x7, 0x8}, {@multicast1, '\x00', './file0\x00', 0x0, 0xe4f, 0x2, 0x3, 0x5, 0x3, 0x2}], 0x3, 0x4, 0x47e, 0xfffffac0, 0x7, 0x9, 0x2, 0x6})
read(r1, &(0x7f00000007c0)=""/90, 0x5a)
r2 = socket(0x1, 0x1001, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0)
ioctl$DIOCGETQUEUE(r3, 0xc148445f, &(0x7f0000000880)={0x9, 0x10b038c, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x7, 0x7}, {0x9, 0x3}, 0x1}, {{0x7, 0x6}, {0x7, 0xffff}, 0x3}, {{0x11f000000, 0x2}, {0x1, 0x8}, 0x3}, {0x8, 0x3, 0x14e15962, 0x6}, 0x0, 0xfffffff7, 0x10000, 0x74, 0x1}})
ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000a80)={&(0x7f0000000a00)='./file1\x00', 0x32c9, &(0x7f0000000a40)='./file1\x00', 0x8})
r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000b00)={0x0, 0x1495, 0x3, 0x4, 0x2, 0xe, 0x8, 0x10, [{0x6, 0xfffffff2, 0x0, 0x9}, {0x100, 0x1, 0x80000001, 0x3fff8000}, {0xfe1, 0x4, 0x7, 0xc}, {0x1d53, 0x5, 0x11b3, 0x1}, {0x1, 0x7, 0x2, 0x175}, {0x2, 0xfffffff8, 0x0, 0x48}, {0x80000001, 0x3ff, 0x80000000, 0x400}, {0x1000000, 0x40, 0xa4, 0x3}, {0x4, 0x6, 0x2, 0xfffffe0c}, {0x3, 0x4, 0x10001, 0x23a7}, {0x9, 0x8, 0x68, 0x1}, {0x1, 0x2, 0x9, 0x752}, {0xffff, 0x0, 0x3b7178d, 0x3}, {0x5ddc8162, 0x2, 0x3, 0x6}, {0x2, 0x1, 0x3, 0x5}, {0x4fe9, 0x40, 0xf6c0, 0x6}]})
ioctl$DIOCMAP(0xffffffffffffff9c, 0xc0106477, &(0x7f0000000c80)={&(0x7f0000000c40)='./file0\x00', r4, 0x1})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
openat$pf(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1, 0x0)
ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffff9c, 0x8058574d, &(0x7f0000000d00)={'./file1\x00', 0x0, 0x0, 0x8, 0x1, 0x6, 0x0, 0x200, 0x0, 0x2, 0x1, 0x7})
ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000d80)={{0x3ff, './file0\x00', [{[@v6=@loopback, @v6=@mcast2], [0x2], 0x1, 0x18}, {[@v6=@mcast1, @v6=@mcast1], [0x5, 0xf], 0x4, 0x2}], {{0x7f, 0xaf, 0x3, 0x3800}, 0x4, 0x9, 0xb6e9, 0x7, 0x81b4, 0x81, 0xc}, {{0x1, 0x4, 0x3, 0xab2}, 0xffffffff, 0x7fff, 0xe, 0x0, 0x0, 0xc, 0x6}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x8001, 0x3c3, 0x4, 0xa, 0x5, [[0x3, 0xc9c], [0x6c, 0x8]], [[0x6, 0x5], [0x3, 0x81]], 0x101, [0x0, 0x1000], 0xa4bb, 0x2, 0x0, 0x3, 0xd4, 0x9, 0x80, 0x8, 0x8, 0x5, 0x4, 0x2, "7b12"}})
ioctl$WSMOUSEIO_SETMODE(r4, 0x80045726, &(0x7f0000000ec0))
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000f00)={0xffffffff, 0x4, 0x7, 0x9, "9a3be6992bf276ec63e046140734c3c4b6b28a8a", 0xaa13, 0x4})
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000f40), 0x400, 0x0)
write(r5, &(0x7f0000000f80)="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", 0x1000)
r6 = accept4(r2, 0x0, &(0x7f0000001f80), 0xa000)
recvmmsg(r6, &(0x7f0000002340)={{&(0x7f0000001fc0)=@un=@abs, 0x8, &(0x7f0000002200)=[{&(0x7f0000002000)=""/76, 0x4c}, {&(0x7f0000002080)=""/174, 0xae}, {&(0x7f0000002140)=""/55, 0x37}, {&(0x7f0000002180)=""/112, 0x70}], 0x4, &(0x7f0000002240)=""/206, 0xce}, 0x3}, 0x38, 0x2040, &(0x7f0000002380)={0x8000, 0x8})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000002400)={<r7=>0x0}, &(0x7f0000002440)=0xc)
ktrace(&(0x7f00000023c0)='./file1\x00', 0x0, 0x110, r7)
setsockopt(r2, 0x1, 0x3, &(0x7f0000002480)="924ca8b2c63f87ce61ebf102a0fe65fcf8838944cb0763a039ddc38822ff545811348ba1569c9dad052f63740d008706f7e1e0739a40fb99126fbb8abddaed3b44253d18cbdd12012ac3ccaf72f5fe0e2df20767a5cbfb6e9965c203293cd0c00460771c68ba7be958d1174fb66e184fe54d953ce4562d49c233d6f0555598418e29b14805b0ba65b713603547b1127bae27c059f8079d7473384713949bb2bae3be67", 0xa3)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002540), 0x8, 0x0)
ioctl$BIOCGETIF(r8, 0x4020426b, &(0x7f0000002580)={""/16, @ifru_broadaddr=@in6})
ioctl$WSKBDIO_SETKEYREPEAT(0xffffffffffffffff, 0x800c5707, &(0x7f0000002600)={0x0, 0x7, 0x4})

1.781798954s ago: executing program 2 (id=182):
r0 = socket(0x2, 0x8002, 0x0)
r1 = accept$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
socket(0x18, 0x2, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0xfffffffffffffff9, 0x0, 0x0, 0x200000001, 0x800000000000108, 0x24, 0x4})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)

1.781556773s ago: executing program 1 (id=183):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x1}}) (async)
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$KDENABIO(r0, 0x20004b3c) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket(0xafc71908b4f61174, 0x5, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "fffe0000000000000000009000", 0xff}, 0x1c)

1.780585083s ago: executing program 6 (id=184):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
open$dir(&(0x7f0000000080)='./bus\x00', 0x40, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open$dir(&(0x7f0000000100)='./file0\x00', 0xc5a, 0x81)
unveil(0x0, &(0x7f0000000300)='r\x00')
openat$vnd(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0)

1.589985921s ago: executing program 3 (id=185):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$DIOCGETRULE(r0, 0xcd604407, &(0x7f0000000100)={0x2, 0x4, 0xff, './file0\x00', './file0\x00', 0x0, "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"})
truncate(&(0x7f0000000040)='./file0\x00', 0xa0001)

1.586401943s ago: executing program 2 (id=186):
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x3, 0x1)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="01000000", 0x4)
connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x0)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
open(&(0x7f0000000100)='.\x00', 0x200, 0x0)
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$SPKRTONE(r1, 0x80085301, &(0x7f0000000080)={0x4, 0xe0000000})
r2 = socket(0x2, 0x3, 0xfe)
connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10)
sendmmsg(r2, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0xffffffffffffffbc, 0x0}}, 0x38, 0x404)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)
fcntl$setstatus(r0, 0x4, 0x40)

1.584239316s ago: executing program 0 (id=187):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x810, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
munmap(&(0x7f0000001000/0x400000)=nil, 0x400000)

974.160204ms ago: executing program 1 (id=188):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = socket(0x1, 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x2}, {0x3, 0x29, 0x8, 0xfffffff9}, {0x101, 0x5, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x7, 0xffff, 0x2800, 0x7}, {0xffffffff, 0x650, 0x3, 0x9b}, {0xce1, 0xfffffeff, 0x4d4, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x7}, {0xc, 0xa, 0x1}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0xfffffffa, 0x205, 0x4}, {0x0, 0x1, 0x1ff, 0x230003}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0))
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x40)
closefrom(r3)
pipe(0x0)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000000)={0x0, 0x4})

973.678761ms ago: executing program 4 (id=189):
r0 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x8060693d, &(0x7f0000000100))
kqueue1(0x18002)

971.761672ms ago: executing program 3 (id=190):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}})
r0 = semget(0x0, 0x1, 0x281)
semop(r0, &(0x7f0000000000), 0x23)
semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000100)=""/123)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x3, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x46, 0x6, 0x30, @rand_addr="00f8ff00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @generic="3d259c06b15a443aa104000ce98378b65dde37b92d7200cff44a58083c8a09119fc163a34eb4a4de01040db565be4559cce243ac8387255f660d6c9d872a4cb56bf4c6693a11"}}}}})
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$VNDIOCCLR(0xffffffffffffffff, 0xc0a86b07, &(0x7f0000000200)={0x0, 0x6, 0x0})
open$dir(&(0x7f0000000200)='./file0\x00', 0x40f02, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x18, 0x2, 0x0)
r5 = dup2(r4, r4)
sendmmsg(r5, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x8)
ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "610d004000000600000000000000443300", 0x2000000, 0x5})
syz_emit_ethernet(0xe5, &(0x7f0000000300)={@local, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "0f8c06", 0xaf, 0x1, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, {[@fragment={0x11, 0x0, 0x80, 0x0, 0x0, 0x1d, 0x67}, @hopopts={0x16}], @udp={{0x2, 0x1, 0x8}, {"b4d8d764e5890c3bf15fb1c383d9c2cf2f970f607d71bb39a6e12f292ac5ed5590ad907bb93b665140c57cade43996a705b3a54d3d15383ed1cec7deadc45b181c7b081c6065978538f6010e9e187ea2ca89bf8d40c6c0b0a887e6df28f8a362599a969d9f358552b2ea7dcd688c6a24c1b3bcd42ddba86d34d46f9113375ab4749da5e72058845449a1f367cf7c308f9ba49a6beed887"}}}}}}})
ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d00000002000c0006000000000200", 0x7ffffffe})
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0xffffffc0}, 0x1c)

878.000801ms ago: executing program 7 (id=191):
socket$unix(0x1, 0x2, 0x0) (async)
r0 = socket(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 64)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async, rerun: 64)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async, rerun: 64)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x8000, 0x0) (rerun: 64)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x8, 0x7, 0x3, 0x0, "7f0a180597d5b5826214eb73a3f2ad79f275412f", 0x4, 0xcf24}) (async, rerun: 32)
open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (rerun: 32)

876.338932ms ago: executing program 2 (id=192):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
r1 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0xc018696c, &(0x7f0000000100))
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x5, &(0x7f0000000100)=[{0x7c, 0x80, 0x1, 0x9}, {0x35, 0x0, 0x2, 0x9}, {0x0, 0x9, 0x8, 0x9}, {0x87, 0x1, 0x0, 0x102}, {0x9b1e, 0x2, 0xf4, 0xb1e}]})
sysctl$vm(&(0x7f0000000040)={0x2, 0x8}, 0x2, &(0x7f0000000200)="32d206badcee939a20bdf153fae688c5358590b28291c188ee9ccfcd0768c5abf4f7ddadd013a0a126558180bf894495c7d92d90e6a2b9bdaf89dd5f17a29d257c43ca5edbbec2af495d4aa40e14c884f4354c48313e329a2420b70b0ff607d0f3c8113d0e55175d1deaea31d417f281304b6d51eb021c48f18cde375dd747e6bb01d8f59c100164cce24da731641550e9d51a11d55bfdeb8b4723efc7e293f33c1ff38bfb320dc015167118299d87cc854e92d4586d805b23e9557d5939b65997e5c7ad0e1f09e01e8a68cc3ce01b930e48959d2eda53b79c82b0a29f7c1d5c040364078b66", &(0x7f0000000300)=0xe6, &(0x7f0000000340)="79cf606fcd89741ff0d1a2ee025524bef9bea04e4193383cdc18b98ba0", 0x1d)
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])
pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x20004)
kevent(r3, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffff7, 0x71, 0x4, 0x85c, 0xf2}, {{r1}, 0xfffffffffffffff8, 0x32, 0xfffff, 0xd4e9, 0xc}], 0xc, &(0x7f0000000180), 0x6, &(0x7f0000000380)={0x9, 0x3})

876.041551ms ago: executing program 5 (id=193):
mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x2)
r0 = socket(0x20, 0x4000, 0x0)
r1 = fcntl$dupfd(r0, 0x2, r0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$TIOCSETA(r2, 0xcd604406, &(0x7f0000000040)={0x2, 0x0, 0xfffbfff0, 0x80000000, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5})
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$TIOCSETA(r3, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x7c, 0xfffbfff0, 0xffc00000, "d6a24900b178926c79486b46c1d100", 0x4, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0)
ioctl$TIOCSETA(r4, 0xcd604407, &(0x7f0000000040)={0xa, 0x0, 0xe76b, 0x800005, "2c0d000000024000a400000300", 0x10000, 0x5})
close(r1)
open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190)
r5 = dup2(r0, r1)
connect$unix(r5, &(0x7f0000000040)=@file={0x80, 0x1, './file0\x00'}, 0xa)

659.010781ms ago: executing program 6 (id=194):
sysctl$ddb(&(0x7f0000000000)={0x9, 0x7}, 0x2, &(0x7f0000000300)="5b1584a6", &(0x7f0000000180)=0x4, 0x0, 0x11)
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$net_pipex(&(0x7f0000000240)={0x4, 0x23, 0x2}, 0x3, &(0x7f0000000340)="4db78a4ad3b6bebb21becd77efc0c1aab39f6637230d7393277ebccbd7ea8f45afb44037edb07b16fbb1c881d9927c7a73b26290ba95e16137e0841fa884e05d2967b7326b69c8c56f685b066f9d1c7f60949182e1302a72910d4118ed7898e208aa26811e056a7e1468c9bbce9cbcb3b00e1bef027e001ef5c00c31f6e7f7ec1feedee5eecdbdaa8757e517ac8634f9d80fb176d6bdbd62433969273b1fe32617cb0df205f67d2a905294b63c0f09b3", &(0x7f0000000400)=0xb0, &(0x7f0000000440)="a772cae29cf1721e92f89530a311f16f59edd66bff359c094d5ab703eacb6865dda6360b755e38ce6ccbf67e1d36024c4f9fd3965c6274876cccf8bf707e4afb11dff86dd07bc3fb6f3f962bee11dc2bfea4f294af065a5637cd7dd1f4e52756027db318d386427544049b53546abf1c008e9dccbda393363af1342b6e3047cd15e7b22edd0ffde5a85f20464e1cc180e3fd3e016d1d0af5ea45ea28a0e593f64ceee3e3cf140ed108bbf92e567fd43378fb88dcd474351d2ff1a6b8e10375f0fcb9df8962d27ad28f9b94bb04cb640a3ce6b00a96914f92b6cff1763a9c74730041acdee121310836dcb74eefc4a82914fde72f2a10058041", 0xf9)
sysctl$ddb(&(0x7f0000000040)={0x9, 0x3}, 0x2, &(0x7f0000000080)="a576024b5c11d61f40a1f51958b162e228db17032d20fffacbca7b9ada1fe3be1109d3ccf7ff511b55ef4de33209789b8e8584d80a7e4e7c86951b53de20379ada231f30311af5ec98779d272972c7cdcc161a300badd98973214649e0ac41e44023e141c42977fdeaed49d11cf1d3de01450d52fa5354d32db972e27fa9cc1031c40f9d84bd967159a611a1c2eeb5198be8ae907f04dd89604967fe7eef374658b2020dc5", &(0x7f0000000140)=0xa5, &(0x7f00000001c0)="e6b5de5d8496fdc19962b98c2e866bbb0b1463acecf89029c961d970a8e5ecc8f08b99f28f7574ae40435a1b53fab65aed7ec7c596354ee10198faaf42c49e772283ad720866a49963eb", 0x4a)

658.815488ms ago: executing program 0 (id=195):
syz_emit_ethernet(0x10c, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff807a85c03aa59dcc289a75f49b397e5a000abfb0158aa38c7f0000000000007462625b0653f54f80d2dc14d23ce7deadcf35f1aeeeacd7ad681e74123c365ab1567b28a28507a89cba420bd976484ea5d2efb2153cd8b9ec74e9156ddfe824e18b9e5adb81db69f6ea470906dbfc9f081b8b2bb893ace28d9c5db558a343526a0d3e28ca921fc83355f1714b928a7e87e33bf904821f303e85bbe4b66eb5147580f4414f870abc57e30c7c3844662d5d780830ea93e81873c2e64f28c328656038db46486b82fb2e6a93f1210556d2fcabeed33c9bc7d307b65883712e50682ff600af3f9eb4b5608cbedef61ef6b2d4edfb259ac765738a3933df486bb7037f"])

658.35533ms ago: executing program 4 (id=196):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async, rerun: 64)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (rerun: 64)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x8, 0xa2)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="61b8159b6174aaa7aaaaaabb86dd"]) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x7, 0x5, 0x8008, 0x7}, {0xde, 0x9, 0xe, 0x9}, {0x9, 0xd, 0xe}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11088}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0xe}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x7, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30004}]}) (async, rerun: 32)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x7}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) (async, rerun: 64)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
setitimer(0x0, 0x0, &(0x7f0000000080)) (async, rerun: 32)
getitimer(0x0, &(0x7f00000000c0)) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r2 = socket(0x18, 0x3, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x5, 0x101, 0xfffffffd, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0xb77e, 0x800002, 0x7}, {0x100004, 0x4, 0x1fc000, 0x2}, {0x2, 0x9, 0x200, 0xfffffffb}, {0x4, 0x3, 0xe, 0x7}, {0x2, 0x20048000, 0x7d457398, 0xff}, {0x5, 0xbffffff5, 0x4, 0x6d}, {0x99a, 0x8, 0xfdf0, 0x4}, {0xf, 0x44c7, 0xbfa9, 0x8000}, {0xfffffc00, 0x0, 0x10001, 0x1}, {0xa44f, 0xfff8, 0x488, 0xe1}, {0x8000, 0x5, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0xfffffffe, 0x0, 0xffff0001, 0xfffffff8}, {0x2, 0x5, 0x172000, 0x2000b}, {0x85, 0xf4, 0x7, 0x4}]}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32)
ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async, rerun: 32)
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000000))
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0xe, 0x0}) (async)
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async)
getpeername$unix(r0, 0x0, &(0x7f00000008c0))

657.901713ms ago: executing program 0 (id=197):
sysctl$kern(&(0x7f0000000dc0)={0x1, 0x48}, 0x2, &(0x7f0000000e00)="818d9b7a", &(0x7f0000000e40)=0x4, &(0x7f0000000100)="700c8d9198ce9e7c4be0c522b82c52124aad804ef41e780e10177b6e3ad58dd4cb4699f9ebcf25ccecc5be04d2ca0ee8ef99d3a1bb89ed2bec6e3e0021c056bcca713e", 0x43) (async)
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x5f0, 0xee6b, 0x9, 0x160350c, "cc14d30d2100caa26a364fa8a325850d1ec100", 0xa00001, 0x6})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r1 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r1, 0xc020699c, &(0x7f00000001c0))
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x24, 0x6d, 0x6, 0x8}, {0x0, 0xf0, 0x2c, 0x1}, {0x106, 0x21, 0x0, 0x100002}]}) (async)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000040))
r3 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x5, 0x10000, 0x26b6, 0x4, "5fb11997b934617ec3143d6b00", 0x3, 0x10})

657.52902ms ago: executing program 7 (id=198):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0)
setreuid(0x0, 0xee01)
r1 = getpid()
fcntl$setown(r0, 0x6, r1)
setuid(0xee01)
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000000029, 0x3f, &(0x7f0000000100)="00000080", 0x4)
close(r0)

657.028423ms ago: executing program 6 (id=199):
r0 = dup(0xffffffffffffff9c)
getpeername$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x2000641f)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffff9c, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1})
r2 = accept$inet(r0, 0x0, &(0x7f0000000140))
getsockname(r2, &(0x7f0000000180)=@in, &(0x7f00000001c0)=0x10)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000200)={0x5, 0x9, 0xa121, 0x80, "566ac4ae0b51e86e5cc63d26da59ca76f2001974", 0x1, 0x1})
sysctl$vm(&(0x7f0000000240)={0x2, 0x1}, 0x2, &(0x7f0000000280)='B', &(0x7f00000002c0)=0x1, &(0x7f0000000300)="7644918c991946cc966571dbf53a2256c219617144e62a53ddacfeb7b194bc5d679ab2987affd06587313866cd99b062ff3840e7677e1a789a96de73e5a762ab231d8ed267383e6ab805be89ae2de6136e2215830c776c047144cb50018f1f", 0x5f)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01864c1, &(0x7f0000000380)={r1, 0x1, <r3=>0xffffffffffffffff, 0x0, 0x5})
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
openat$speaker(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f00000004c0)={0x3, 0x5, 0x8, 0x4, 0x2, 0x400, <r6=>0x0, 0x8, 0x6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)={r6})
ioctl$DRM_IOCTL_VERSION(0xffffffffffffff9c, 0xc0406400, &(0x7f00000006c0)={0xa000, 0x3ff, 0xfff, 0xd8, &(0x7f0000000540)=""/216, 0x3d, &(0x7f0000000640)=""/61, 0xb, &(0x7f0000000680)=""/11})
r7 = msgget(0x0, 0x6c9)
r8 = geteuid()
fstatat(r3, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x0)
r11 = getppid()
msgctl$IPC_SET(r7, 0x1, &(0x7f00000007c0)={{r8, r10, r4, r5, 0x34, 0x1, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x7, 0x2, 0xd93, r11, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7fff})
msgget(0x3, 0x400)
r12 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil)
fstatat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}, 0x6)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000940)={<r14=>0x0}, &(0x7f0000000980)=0xc)
shmctl$IPC_SET(r12, 0x1, &(0x7f00000009c0)={{r9, r5, r13, r5, 0x0, 0x8, 0x0, 0x0, 0xfb3}, 0x10, 0x0, r14, 0x7b2, 0x0, 0x5, 0x2, 0x4, 0x2, 0xb, 0x10001})
shmat(r12, &(0x7f0000ffe000/0x2000)=nil, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000a40)={{0x1c, 0x18, 0x2, 0x1ff, "56bc4862ac85784336c73eaabb2919ee"}, {0x1c, 0x18, 0x0, 0x6, "112b869213a474913d08460c1ee4c2a8", 0x98}, 0x6, [0x3, 0x0, 0x189, 0x1, 0x4, 0x5, 0x8, 0x2]}, 0x5c)
kill(r11, 0x12)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000b80)={0x0, 0x3, 0x5, 0x80000001, 0x0, 0x9})

224.17682ms ago: executing program 2 (id=200):
r0 = semget$private(0x0, 0x1, 0x0)
semop(r0, &(0x7f0000000080)=[{0x1, 0x7, 0x1000}, {0x0, 0x0, 0x1000}, {0x0, 0x6, 0x1800}, {0x1}, {0x2, 0xc33, 0x2000}, {0x0, 0x6, 0x1800}, {0x1, 0x400, 0x1800}], 0x7)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
ftruncate(r1, 0x40002)
openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="a9bea477601070adcf1de9b19f4a516bb2740af2f78911fc145d30e4dc300a2a7cb5682e26e3be6b2c7266e6f102df8ccd64751997bde721c5eb21c9d9eb7d6c1418fc22805759fe563b55dd18ede1c26e3cd0aebd45ac019a17cd2401e0d6a89a6f57567b7425d40c20e6a4a191c7e8fda624bee5145d586b6b4a0da231c0dd3dd19941c28f7bab5a0ae843b6cb6024664ec0f835a353a1813e6cf29046b920e6dfdee12449c419338dd32508e1c43b1f953119d5462476445cba0df41b284844630cf5b24c3250e46419f2de35fd9846d3c633e89b14fb368fd28fe9", 0xdd}], 0x1000000000000337, 0x40000)

223.410631ms ago: executing program 5 (id=201):
sysctl$net_inet_ip(&(0x7f0000003a40)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000003b00)="2018b958", 0x4) (async, rerun: 64)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64)
r1 = socket(0x18, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async)
r2 = open(&(0x7f0000002600)='./file0\x00', 0x78e, 0x18c) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x7}, {0x3, 0x0, 0x0, 0x8}]}) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x3d)
ioctl$DIOCCLRIFFLAG(r0, 0xc028445a, &(0x7f00000001c0)={'./file0\x00', &(0x7f0000000180)=""/36, 0x7ff, 0xfffffffb, 0x98, 0x8}) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2810, r2, 0x1) (async, rerun: 32)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x16}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xee)
clock_getres(0x3, &(0x7f0000000100)) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0)
pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000280)="be", 0x1}], 0x1, 0x88bd2)

221.021688ms ago: executing program 1 (id=202):
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0x2f, 0xc, 0x3, 0xfffffffe, "0400091000000000000048000000448621c82f00", 0x100, 0x2}) (async)
ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000300)={'./file0\x00', &(0x7f0000000240)=""/187, 0xf29, 0x3, 0x80, 0x4}) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
getrlimit(0x2, &(0x7f0000000000))
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xd51, 0x1, 0x9, 0xffffff85}]})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, 0xffffffffffffffff, 0x0) (async)
open(0x0, 0x615, 0x0)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6b881aef, 0x2000007, 0x102, 0x80001001, 0x12, 0x8, 0x10, [{0x3, 0x1, 0x7, 0x2}, {0x8, 0x88, 0x8008, 0x6}, {0x101, 0x8, 0xc, 0x9}, {0x8, 0x5}, {0x401, 0xa, 0x100027fd, 0x7ff800}, {0x5, 0x27f3, 0x231, 0x6}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x400801, 0xb, 0x8b}, {0x2, 0x59b, 0x5, 0x7}, {0x4007, 0x3, 0xd18, 0x11088}, {0x1e8, 0x10005, 0x4, 0x6}, {0x800, 0x0, 0x4, 0x1}, {0xb8e, 0x4, 0x4, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x2004, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) (async)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
write(r2, &(0x7f00000003c0)="f81ad301000600", 0x7) (async)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x3, 0x0, 0x7, 0x1000300000000}) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
getpid() (async)
futimes(r1, &(0x7f0000000340)=[{0xffffffffffffff7f, 0x8001}, {0x2, 0x9}]) (async)
setgroups(0x0, 0x0)

5.364853ms ago: executing program 0 (id=203):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803) (async)
sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xa}, 0x4, &(0x7f0000000080)="ad979dfb", &(0x7f0000000140)=0x4, &(0x7f0000000180)="f060ce0d", 0x4) (async)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0xa)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x7) (async, rerun: 64)
close(r0) (rerun: 64)

2.943126ms ago: executing program 7 (id=204):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0xa4, 0xd, 0x5, 0xc}, {0x48, 0x2, 0x4, 0x3}, {0x6, 0x7, 0x4, 0x8000009}]})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[])
r2 = syz_open_pts()
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300))
ioctl$TIOCEXCL(r2, 0x2000740d)
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe8000000000000000000000000000aa00030000000000000101000101000401000401"])
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9)
setrlimit(0x1, &(0x7f0000000000)={0xfffbfffffffffffd, 0xffffffffffffdfff})
ftruncate(r0, 0x48001000007)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = syz_open_pts()
syz_open_pts()
syz_open_pts()
fstat(r3, 0x0)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00')
r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000180)="7f37ce070000003d965a1564287bafc1d6d531c28c4a7eaa13e5232a74bba3779ca27b8e0d00000004fe8a4cc330bb35350cb60a9a374aa8a836289681106692", 0x40}], 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = syz_open_pts()
ioctl$TIOCSWINSZ(r5, 0x80087467, &(0x7f0000000100)={0x7, 0x4, 0x7fff, 0x4})
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7fc87, 0x0)

0s ago: executing program 3 (id=205):
r0 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x200, 0x196)
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd})
r1 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil)
ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, &(0x7f0000000700)=0x639)
mkdirat(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x188)
shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/164)
setuid(0xffffffffffffffff)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00')
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$DIOCXCOMMIT(r3, 0xc0104452, &(0x7f0000003340)={0x0, 0x25, 0x0})
ioctl$DIOCRCLRTABLES(r3, 0xc450443c, &(0x7f0000000280)={{'./file1\x00', './file0/file0\x00', 0x22, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x802, 0x0, 0x48, 0x10003})
r4 = socket(0x18, 0x2, 0x0)
r5 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x1, 0x401, 0xfffffffe, 0x966b, '\x00\x00\x00*h\x00', 0x10044, 0x3effd})
ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x505, "296449fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff})
getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000000), 0xc)
futimens(r0, &(0x7f0000000140)=[{0x401, 0x1000}, {0x10000, 0x2}])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts.
pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00)

login: malloc(): allocation too large, type = 6, size = 485448485632
Connection to 10.128.1.190 closed by remote host.

OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00)

login: panic: kernel diagnostic assertion "(p->pfik_flagrefs == 0) || (p->pfik_flagrefs == 1)" failed: file "/syzkaller/managers/main/kernel/sys/net/pf_if.c", line 907
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*264625   2494      0           0  0x4000000    0  syz-executor
db_enter() at db_enter+0x25
panic(ffffffff8341b4bc) at panic+0x1cf
__assert(ffffffff83455408,ffffffff8343d459,38b,ffffffff833c936f) at __assert+0x29
pfi_clear_flags(ffff8000314c7330,0) at pfi_clear_flags+0x41d
pfioctl(14900,c028445a,ffff8000314c7330,3,ffff80002f0ba020) at pfioctl+0xf6a
VOP_IOCTL(fffffd8072cd37a8,c028445a,ffff8000314c7330,3,fffffd8007ffd548,ffff80002f0ba020) at VOP_IOCTL+0xa3
vn_ioctl(fffffd807c2c35b0,c028445a,ffff8000314c7330,ffff80002f0ba020) at vn_ioctl+0xea
sys_ioctl(ffff80002f0ba020,ffff8000314c7500,ffff8000314c7450) at sys_ioctl+0x660
syscall(ffff8000314c7500) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xce8f8a564e0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb>