last executing test programs:

1.865098876s ago: executing program 0 (id=528):
r0 = semget(0x0, 0x1, 0x281)
sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0)
semop(r0, &(0x7f0000000000), 0x23)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0xfffffffffffffffd, 0x2, 0x100200000, 0x100000000, 0x7, 0xdf60, 0xffffffffffffffff, 0x4, 0x6, 0x95, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x80000001, 0xfffffffffffffffa, 0xff, 0x5e, 0x100000000007b98, 0x800, 0x6, 0x0, 0x7fffffffffffffff], [0xfffffffe, 0x8000, 0x40000000, 0x0, 0xb, 0x11001, 0xffffffff00000000], [0x9, 0x800001fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x20, 0x10400000, 0x0, 0x7d06}, {0x2, 0x1e, 0x5, 0x20000000000000}, {0x9, 0x0, 0xfffefffe, 0x280}, {0xb, 0x80004, 0x5, 0xffffffffffffffff}, {0xfffe, 0x2, 0x7f, 0xc}, {0xc6a, 0x2000009, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}})
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0})
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
writev(r3, &(0x7f0000002dc0)=[{&(0x7f0000000980)="2b1c33c71c6e352e", 0x8}], 0x1)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x48, 0x1, 0x0, 0x5}, {0x1, 0x1, 0x8, 0x9}, {0x6, 0xfb, 0xe4, 0x4000800}]})
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[])
sysctl$hw(&(0x7f0000000100)={0x6, 0x17}, 0x2, &(0x7f00000001c0)="3b991b57ee6218a0c1944e39c315ca90324be24856129e5e2ac2997afc2001e965adab096ee0d5e919aeb88652f001e219c636787d1a760a5a31661d8a7ac2dac471b7de5c0e5cb39355a0476a65bbb226c76bf5aa35f8696f0960ed0a0bb700836573b8ed37f87e59f58d8a1bfecdd2ffd8853ab8d14448e16aafe9c1c1b7016464bfc461250908a3a0eeec108c6c03b0deeddc7ee9f313ec15a94fb44a18ebca3a0b3b21b00198b1b697b35b866165b2cd64658e61bbfe8cafe88be7171341a1e366ae55091952dae8f5c110a7e9112b550bff282353d29c65f9fd3e6d4c3434", &(0x7f00000002c0)=0xe1, &(0x7f0000000380)="352306e3a6bf81b5d33b107e09a5fb2b687571556da5b4a420ef733efd43b1787925a6f082887758608e0ef1ff82b32cc7209235798cbd5c99ab4956310ada4f2f4852143efc9ec1b38d9884ced17028a4f5ab8a352ea139a192110ab00316b53b5d0295b0e4cb26f5c94ba29c44a78664fac2abee71ef283fd0b8140cb4a2989f6f63cd20734d639ab2f7605b9c1ac60d70a4dd", 0x94)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0)
ftruncate(r4, 0x8531)
sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x1d)
r5 = kqueue()
kevent(r5, &(0x7f0000000040)=[{{r5}, 0xfffffffffffffff9, 0x101, 0x3, 0xfffffffffffff5f6}], 0x1, 0x0, 0x0, 0x0)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x7}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x29, 0xe, &(0x7f0000000000)="02", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f0000000340)={0x4, 0x2, 0x0, 0x26}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0xe}, 0x2, &(0x7f00000011c0), &(0x7f0000000080), 0x0, 0x0)

1.633853106s ago: executing program 5 (id=546):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000340000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f000024d000/0x1000)=nil, &(0x7f00005ff000/0x4000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000179000/0x1000)=nil, 0x80000202}, {&(0x7f0000338000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6b9}, {&(0x7f0000132000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12e}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x2}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0xa}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000269000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00004d0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f00003e0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x100, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcca, 0x400, 0xfffffffd, 0xa19, 0x40080, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x9, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x693, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x2000001, 0xfffd, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x2, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x4, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x0, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7b, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x200787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x3, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0x7ff, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x4, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff2b, 0x2, 0xdb9, 0x7, 0x0, 0x4, 0xfff, 0x6, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10002, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x8, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0xfffffffe, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]})
mknod(0x0, 0x6000, 0x100)
r2 = open(0x0, 0x80000000000206, 0x4ebfac6bbaf79e5)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
openat$speaker(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
ioctl$DIOCRCLRADDRS(r4, 0xc4504442, &(0x7f0000000b80)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x30, 0x7}, 0x0, 0x0, 0x0, 0x10001, 0x6, 0xf, 0x8001, 0x0, 0x6041})
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000080)={0x2, 0xd2cc}, 0x8)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000180)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0)
ioctl$AUDIO_START(r5, 0x20004126)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x0, 0x0})
chflagsat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.54081878s ago: executing program 5 (id=550):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x400, 0x40, 0xffffd6c6, "e48294068d5bfac68f398406df04df009900", 0x543, 0x8}) (async)
readv(r0, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/154, 0x9a}], 0x1) (async)
syz_open_pts()

1.539059284s ago: executing program 5 (id=552):
r0 = socket(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000000)="04000000", 0x4)
sendto$inet(r1, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x80000001}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
r3 = socket(0x18, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)="673bb5b8cc0c16ed08f1b8d24ec34555a65007857cf49811f8e6abbbdabb26a52ad7f4", 0x23}], 0x1)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r4 = syz_open_pts()
close(r4)
r5 = syz_open_pts()
ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$FIOASYNC(r5, 0x80047460, &(0x7f00000000c0)=0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
read(r4, &(0x7f0000000100)=""/60, 0x3c)
r6 = openat$audioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
dup2(r6, r2)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r7)
rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00')
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
r8 = socket(0x18, 0x2, 0x0)
sendmsg$unix(r8, &(0x7f0000000040)={&(0x7f0000000200)=@file={0xd5, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20, 0x2}, 0x6)
connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xfffffffd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s', 0x80}, 0xffffff75)
sysctl$kern(&(0x7f0000000080)={0xa, 0x6}, 0x5, &(0x7f0000000100), 0x0, 0x0, 0x7)
setsockopt$inet_opts(r2, 0x0, 0x14, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)

1.522215717s ago: executing program 5 (id=553):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
connect(r1, &(0x7f0000000080)=@in6={0x1c, 0x18, 0x0, 0x40000006, "00000000000000000000000000000001", 0x7}, 0x1c)
r2 = msgget$private(0x0, 0x71)
msgsnd(r2, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x1c, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x1, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xf, 0x8000000000000000, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff, 0x0, 0x7})
setuid(0xffffffffffffffff)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000280)})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000400)={0x3, &(0x7f0000000000)=[{0x24, 0x0, 0x2, 0x4}, {0x84, 0x1, 0x9, 0x9}, {0x6, 0xff, 0xe4, 0x4000800}]})
sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x6c, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6500000019324b9b7a065af1faf4a1532d36083c8c73a28ce546a06907f80ffffffff51d886fc83b4e42b47bfc59f113c6de28a6fc3aba6b71dbead812576", &(0x7f0000000000)=0x40, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r3, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe)
msgrcv(r2, 0x0, 0xfffffffffffffd82, 0x1, 0x1000)
r4 = socket$inet(0x2, 0x1, 0x0)
r5 = semget(0x0, 0x1, 0x281)
semop(r5, &(0x7f00000000c0)=[{0x0, 0x6, 0x1800}], 0x1)
semctl$SETVAL(r5, 0x0, 0x8, 0x0)
semctl$GETNCNT(r5, 0x4, 0x3, &(0x7f0000000140)=""/186)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000800000000", 0x8)
dup2(r4, r0)

1.247588258s ago: executing program 2 (id=565):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
r1 = socket$inet6(0x18, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[], 0x58}}, 0x38, 0x400)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f00000001c0)={0x1, 0x7739, './file0\x00', 0x180, 0xa, 0x8})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r2 = syz_open_pts()
close(r2)
sysctl$hw(&(0x7f0000000100)={0x6, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0)
setrlimit(0x8, 0x0)
r3 = syz_open_pts()
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637f)
open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x7, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x4, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x7, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x7, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x7}}})
r4 = kqueue()
kevent(r4, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0)
kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x90000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0xc5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x8d}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x400, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x1, 0x9}, {0x9be2, 0x1, 0x7, 0x400}]})
poll(&(0x7f0000000000), 0x35, 0x0)
close(r3)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000380)="cff5c0566cda9742823a8ecea9cfa6722a0094af8bc2a22421f359025250129bdb3bbb3b553a303538fc7d2874774e852e3b0bea187fff03", 0x38}], 0x1)
sysctl$net_inet_ip(&(0x7f0000000240)={0x4, 0x2, 0x0, 0x3}, 0x4, &(0x7f0000000280)="4d7b9347dc94dfd0e1bd624740464ca391e101085bd648cfa74e86c3358a70664c1658434fd5253235116fa5c43b3a20e3c7533176ed", &(0x7f00000002c0)=0x36, &(0x7f00000003c0)="647f3cb45ec457e128599032aa1a98b0aeef8e33fd45b248ee69cfc8be5342a2904ad5d4314913bb0fb36f527b4d36e9dd17ee33e5d762552d3558ead9408f316178f034898548fc4ceb734dccb1cb495c61b0302d1a8a49472c0d093b1594e17c65594403c8f91cbb8e1b66d90bdb858a6589e553865dd39d7344fa98e52c7ee98b355e67", 0x85)

1.13584918s ago: executing program 7 (id=569):
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0xfffffffffffffffa) (async)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async)
r1 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r1)
r2 = socket(0x2, 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x18, 0xb}, 0x0)

1.13489993s ago: executing program 3 (id=570):
sendto$unix(0xffffffffffffffff, &(0x7f0000000400)="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", 0x18c, 0x400, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$DIOCGETRULES(r0, 0xcd604406, &(0x7f00000005c0)={0x2c93, 0x9, 0x6, './file0\x00', './file0\x00', 0x0, "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"})
getsockopt(0xffffffffffffffff, 0x0, 0x6a, 0x0, 0x0)
open(0x0, 0x10, 0x0)
ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x5, 0x2f, '\x00', 0x0, 0x40000002})
sendto$unix(0xffffffffffffffff, &(0x7f0000000400)="1b34bee1425e839281c1cc2b5f8260e5374115a78f4888d2b4ae44143f4a61d3bc5fd7bc0f04afe93c3c0ff7f86351a4b4f76a01d73950b3d5bf368a575d70cee82e71200827e68a9ea50852249fc26c95ee578df3d72277eda5affc71ad4a862eda761a7ca3235a667cffca2b733363096b1553b1e4fcf4545d7391f1f7fab21a0a970ac97e232a9eafe739369413977d89a1196cbb95e3f3c51fa6ef90ec0533497ba75a2def2574eddf0eda13213682cd068c8153b79016c1819012a4ef8e54127b41da27987d77221e370ae18a4749e00fd8f30e45a2c958e1169d50ed2c013dc3d234d95f92e0cef680d389e8db836dd6b7fe7ff857e808e4bde8f949882eebe90a3bb0174c95290226b16f59b38b66dfcf79e8f7f4f5a0aeb6a865148e6f7063c550523fcdd73e37c3caefa1ddc77a977f3b7432dadf037329ebc2f14064605dea3f7e135450883ece683ca6f66f887c1b21f4c91e9892d83a4f708bd2e275582e99d842ea028d2280864a2edddd0bdc93fb76740cffc8de5231386413e5e77788e0c7ce4b10a7540d", 0x18c, 0x400, 0x0, 0x0) (async)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
ioctl$DIOCGETRULES(r0, 0xcd604406, &(0x7f00000005c0)={0x2c93, 0x9, 0x6, './file0\x00', './file0\x00', 0x0, "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"}) (async)
getsockopt(0xffffffffffffffff, 0x0, 0x6a, 0x0, 0x0) (async)
open(0x0, 0x10, 0x0) (async)
ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x5, 0x2f, '\x00', 0x0, 0x40000002}) (async)

1.079780569s ago: executing program 7 (id=572):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0xb)
mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7)
ioctl$FIONREAD(r1, 0xc0106978, &(0x7f0000000340))

1.079464396s ago: executing program 6 (id=573):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = socket$inet6(0x18, 0x1, 0x6)
setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x2, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x206, '\x00', 0x441}, 0x1c)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x3, 0x6, 0x7, 0x7}, {0x40, 0xa, 0x6, 0x2}, {0xe, 0x3, 0x1f, 0xdbe6}]})
syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @random="74959453a2ab", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8000, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0xff, 0x7fe}]}}}}}}})

1.077969663s ago: executing program 3 (id=574):
r0 = socket$inet(0x2, 0x2, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000001c0)=0x9) (async)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f0000000240)) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async)
syz_extract_tcp_res(0x0, 0x6, 0x7) (async, rerun: 32)
pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) (async, rerun: 32)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240), 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040)='x\x00')
syz_extract_tcp_res(&(0x7f00000002c0), 0x8512, 0x80000001)
sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
unveil(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='r\x00') (rerun: 32)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x3, 0x6, 0x7, 0x7}, {0x40, 0xa, 0x6, 0x2}, {0xe, 0x3, 0x1f, 0xdbe6}]}) (async, rerun: 64)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @random="74959453a2ab", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8000, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0xff, 0x7fe}]}}}}}}}) (async, rerun: 64)
mlockall(0x1) (async)
sysctl$hw(&(0x7f0000000100)={0x6, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0)

1.076598723s ago: executing program 7 (id=575):
setuid(0xffffffffffffffff)
r0 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x1}, 0x1c)
mkdir(&(0x7f0000000000)='./file0\x00', 0xc5)

1.048456529s ago: executing program 0 (id=576):
r0 = socket(0x2, 0x3, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr=0xac14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}})
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac140081}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r0, &(0x7f0000000000), 0x10)
write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050146123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea)
r1 = socket$inet(0x2, 0x3, 0x2)
fcntl$setstatus(r1, 0x4, 0xc4)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000400)={0x3, &(0x7f0000000040)=[{0x6c, 0x7, 0xf7, 0x6}, {0x7c, 0x1, 0x9, 0x4000009}, {0x6, 0xff, 0xe4, 0x40007ff}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[])
sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_carp(&(0x7f00000000c0)={0x4, 0x2, 0x70, 0x4}, 0x4, 0x0, 0x0, &(0x7f0000000240), 0x0)
connect$inet(r1, &(0x7f0000000f00)={0x10, 0x2, 0x2, 0x1ff}, 0x10)
r3 = dup3(r1, 0xffffffffffffffff, 0x4)
ioctl$DIOCCLRSTATES(r3, 0x0, &(0x7f0000000000)={{0x6, 0x80, 0x2}, 0x18, '\x00', 0x7f, {@any={'\x00', 0x0, 0x4, 0x7}, [0xcf, 0x7], 0x8a, 0x2, 0x3cec}, {@table={'./file0\x00', 0x0, 0x3, 0x40}, [0x7832, 0x3], 0x2, 0x8, 0x7}, './file0\x00', './file0\x00', 0x8, 0x3})

1.036789476s ago: executing program 3 (id=577):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async)
r1 = getpid()
sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) (async)
getitimer(0x0, 0xfffffffffffffffe) (async)
select(0x40, &(0x7f0000000180)={0x0, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x800000181c, 0x4, 0xbcb2}, 0x0, 0x0, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xbe, 0xff, 0xffff, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x8000, 0x6})
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) (async)
openat$wsmouse(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async)
closefrom(r2) (async)
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x402)

1.035905912s ago: executing program 7 (id=578):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x3, 0xff, 0x10, 0x6}, {0x1, 0x8, 0x0, 0x86d4}]})
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000180)={0x3, 0x800}) (async)
ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000180)={0x3, 0x800})
open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68)
unlink(&(0x7f0000000100)='./file0\x00')
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r2, 0x20000000)
close(r2)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x400, 0xa, 0x0, 0x1}, {0x2, 0x8c, 0x7, 0x3}, {0xd, 0x3, 0x15, 0x8}, {0xfff3, 0x2, 0x5, 0x6}]})
syz_emit_ethernet(0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @broadcast})
msgget$private(0x0, 0x688) (async)
r4 = msgget$private(0x0, 0x688)
msgrcv(r4, 0x0, 0x0, 0x0, 0x1000)
ioctl$TIOCSCTTY(r1, 0x20007461)
msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/192)
r5 = socket(0x11, 0x3, 0x0)
sendto$unix(r5, &(0x7f0000000200)="b1000502000000000000003401180000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896406a42102020000720fd18bfbb670c1f5a872c881ea672ec5890400000000008000361b4cc702fac500002021fbfa0c0f000096c38fc46218fc616c59c88abfba221554f460f668246c0904000008e371a3f834", 0xb1, 0xc, 0x0, 0x0) (async)
sendto$unix(r5, &(0x7f0000000200)="b1000502000000000000003401180000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896406a42102020000720fd18bfbb670c1f5a872c881ea672ec5890400000000008000361b4cc702fac500002021fbfa0c0f000096c38fc46218fc616c59c88abfba221554f460f668246c0904000008e371a3f834", 0xb1, 0xc, 0x0, 0x0)

1.035351191s ago: executing program 6 (id=579):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
ppoll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0xe4c6, 0x0, 0x0, 0x3}, &(0x7f0000000380)={0xffb, 0x200, 0xfffffffffffffffa, 0x400000000000000, 0x0, 0x9, 0x2}, 0x0, 0x0)
ioctl$DIOCRCLRTABLES(r2, 0xc450443c, &(0x7f0000000840)={{'./file0\x00', './file1\x00', 0x50, 0x4}, 0x0, 0x0, 0x0, 0x7fffffff, 0xb, 0x7cd6, 0x3, 0x20, 0x5})
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x3, 0x9, 0x5, 0x8, "3b46d6b8bc655338add1e6c760bf92c4c7f146f6", 0x9, 0x401})

1.033971799s ago: executing program 2 (id=580):
sysctl$vm(&(0x7f0000000300)={0x2, 0x1}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x14)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
rename(&(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000040)='./file1\x00')
sysctl$hw(&(0x7f00000000c0)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0)

988.692843ms ago: executing program 2 (id=581):
sysctl$kern(&(0x7f0000000140)={0x1, 0xa}, 0x2, &(0x7f0000000180)='H', &(0x7f0000000400)=0xfffffffffffffc3b, &(0x7f0000000340)="69298d321f5ed7631d0d737fbb567cc2bc6ba6b94c9b3bf4bd14bf50a17912e2ab93523743ffae82c691718d72dc5b7485c0645ed95b70174f1ca4af0eadd417597440bf96c423c9ef56ac84cf8fb0f6ca7abd13bb69a0d849f5dd4a79b03a51292e8c724e08e84f3f1fb7627b5f4b88a13dae4f86685ef7969bd594d49736d5b333e93df878cf87dadcd86f473e4c6be44cfefc43165d6638471c5b83874576a2e3", 0xa2)
sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="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"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1c}, 0x2, &(0x7f0000000040)="d369c51a533448adc1858ac9152815d21369a51ed432de15e79da9664fcce63126c3c152acf54a2de3e59cd19dcc78b7adaebc20e1109c60c8d2bfcf046a19d899c966c4989d068028a35d17036b5b3c813a26e7e3325580761c20304eb6e98e0d65", &(0x7f00000000c0)=0x62, &(0x7f00000001c0)="7717254331225f88ff785ee7d7ef60f625d3d7515e3f09735bee41796ad247bdeb24e530418d9145748bc455aa91dfc908f90128a479ba493e3b3378ca358f0e193929e4057f71bc3334f88bc104cb9b8e6e9fe8aa13ada89592a16be944749c1fe2916520611744a31fe420f2bbc2a4cecf99b7994210ea11d2b69de8933b1d856fcc9d6f65cdb5c71fdb2c4d6104742c512ca21cd4d7f07c918ce91c5ce459b352534c13af75cd3c8f8d733a6029e7fc2e241a92032492d4ccde0027", 0xbd)

987.222315ms ago: executing program 0 (id=582):
r0 = socket$inet(0x2, 0x1, 0x0) (async)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
setgid(0xffffffffffffffff) (async)
r2 = msgget$private(0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
setuid(0xffffffffffffffff) (async)
msgctl$IPC_STAT(r2, 0x2, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x100000001)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/101, 0x65}], 0x1, 0x80000001)
r3 = socket(0x2, 0x3, 0x2f)
r4 = dup(r3)
setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async)
listen(r0, 0x7fff) (async)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) (async)
sendto$inet(r0, &(0x7f0000000140)="a24a7c14e508fe3a04912f3056219d5df73af9717826f53fa637ec249be1f64e69816b76803e951276cdff62ed7b0ed6ccaa33769cd3ee1e8ae42eb11aa6536294392e9ef055dad724a727ea84245c76a747df209f2e4697f59bdc215641cf6cf56ecbef105a8873c168a4f5494fb37f38e6f910a9f6cfaeb26466335b1dd141bfc444f42207a832a392b606", 0x8c, 0xe, &(0x7f0000000200)={0x10, 0x2, 0x1, 0xfffffffd}, 0x10)
sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28, 0xd}, 0x563dd8b3efe7882a) (async)
setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="600282009078fffc02020402"])

986.020842ms ago: executing program 6 (id=583):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000b40)={0x2122, 0x900007fc, {[0x101, 0xffffffbbfffffffc, 0x0, 0x4, 0xfffffffffffffffe, 0x403, 0x553b, 0xfffffffffffffffe, 0x182, 0x7, 0x4, 0x40, 0x38000000000000, 0x3, 0x3, 0xff, 0x1, 0x7f], [0xb67b00000, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x10000000000802, 0x40006, 0x5, 0x80000000000002, 0xd, 0x1000009], [0x7fffffffffffffff, 0xfffffffffffffffe, 0x5, 0x902, 0x4, 0x7fc, 0x1000], [0x40001a29a207, 0x6, 0xffff, 0x9, 0x8, 0x3], [{0x6, 0x9, 0x9}, {0xe986, 0x40, 0x100040, 0x8}, {0x0, 0x0, 0x8ba, 0x1}, {0x5, 0xe, 0x7fcfffff, 0x8}, {0x4, 0xff, 0x7f, 0x5}, {0x11, 0x4006, 0x7, 0x7}, {0x7fff, 0x5, 0x801, 0xb}, {0xc2a8, 0x200081, 0x4000e6e9, 0x80000000}], {0x4, 0x10000ff9, 0x10001}, {0x2, 0x10000957, 0x4, 0x10001}}})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffffb, 0x40000002})

921.101072ms ago: executing program 0 (id=585):
r0 = syz_open_pts()
r1 = msgget$private(0x0, 0x0)
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$WSDISPLAYIO_GTYPE(r2, 0x40045740, &(0x7f00000002c0))
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
msgrcv(r1, 0x0, 0x0, 0x0, 0x1000)
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800})
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x4, 0x2, 0x5, 0x5, "b7336626918f00000000002000000107001000", 0x9722, 0x1})
mknod(0x0, 0x2000, 0x285b9a)
sysctl$kern(&(0x7f0000000000)={0x1, 0x5b}, 0x2, &(0x7f0000000040)="ffa6cd287e4086579d5a9f98f7538fa6fbab27ec604260a7b4987745d69b42b5f9a3036258144bf612066c7fa40b906b372738e30ea9a27b660913de979e71fe92dad5680d597b9f9d312d974ba54193c5c1e572087b7b4b614f39adfe3e3d8c9492c75f1d34d393f2428ca27ac451e158528d8b45cbf7b7623020", &(0x7f0000000140)=0x7b, &(0x7f0000000180)="6eb89a8141ca7834924c155a46a7c8085bc411b14ca4174c93ff21b06cf711a1f77c6ae2d4cad9e2894ae0efaf2bddef62d123d963a9db3c68c67bbf1ff948508f4de8b80bc0535aef70741fedd1a024ef3764ac55b46bb40d2761429a64363faf30bb03e3bd0023e40b9fdb85537db367444e75b9c618b1c339ee4f717fe10abd9212fd353ed9341bae32423d31b42215af5079541fcb16ac3c73a31a4f38130b60d43ecdced05d464dfb7e98fb206691602d2bda008b8cf1f8b39f594cabf43f9274dec0f5ced40b3190ca6d5f73b987912872c4e3d1cf0abfa92ef94a3e374d3442ff8c725f67b0c11161347dbcedad8373591f829568", 0xf8)

920.541093ms ago: executing program 2 (id=586):
sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000500)="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"/302, &(0x7f0000000080)=0x12e, &(0x7f0000000640)="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", 0xffba)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e})
sysctl$hw(&(0x7f0000000280)={0x6, 0x13}, 0x2, &(0x7f0000000000)="0000e65bc39e76ec", &(0x7f0000000240)=0x8, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0)
r0 = socket(0x18, 0x2, 0x0)
sendmsg(r0, &(0x7f0000003200)={&(0x7f0000001b00)=@un=@abs={0x3, 0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000002f80)=[{0x10, 0x29, 0x33, "ea"}], 0x10}, 0x4)
writev(r0, 0x0, 0x7f4c927fea6cc7b)
r1 = syz_open_pts()
close(r1)
semget$private(0x0, 0x3, 0x1c0)
syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x47)
writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="5790ca6cc32be3d62952e0cc3cd2d3da3b000000000000f1016e6e81e60c69408d0e5eb488d9a4f836b66b966879748a51b90be3e53627015a2a14557ad05e05f4f17d0d5daef0b3", 0x48}], 0x1)
utimes(0x0, &(0x7f0000000100)={{0xffffffffffffff7f}, {0x80, 0xffffffffffff9b7e}})
syz_extract_tcp_res(&(0x7f0000000040)={<r2=>0x41424344}, 0x80000000, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r3 = socket(0x18, 0x3, 0x85)
ioctl$FIONREAD(r3, 0xc1206949, &(0x7f00000001c0))
syz_emit_ethernet(0x58, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0000000011907800000003200000014e234e204feb49347f1677061c0c34a6316235fe60e142091ef52cb4e9742c613b279bbbefc99372324a0ca77bb323af7823fdc7e36913ddeb7a28989633094636e16b7d7b0c22e6760abf5ecfb9f46df04854cb0f167dd3da8bde2b49f014b33fe77b03145b83e62ba645bb937bc46bc6468cdae9114ceb737e45690faef8d6aed153b37281c448260eafd0e5736257a06647d3277c36059b2c58f5d4895a0510cd34607fa81167e252fc74bf20a23cce16b15df076d50f7f7d27bf4de5640ab3e9fe6631", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="71080e0890780f7c02040002040200005e43816c4d677f265de6bbee093277b8ec92fdf49d69ddb611f5"])

913.562076ms ago: executing program 6 (id=587):
getrusage(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000356000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x33c7f5e9}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0xfffffffffffffffd}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100))
r1 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb6)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0)
ftruncate(r1, 0x8531)
open$dir(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4)
unveil(0x0, &(0x7f00000016c0)='x\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000a00)='./file0\x00', 0x0, 0x3)

912.171803ms ago: executing program 6 (id=589):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r1 = socket(0x11, 0x3, 0x4)
ioctl$DIOCGETQUEUE(r0, 0xc148445f, &(0x7f00000002c0)={0x32, 0x19, {'\x00', './file0\x00', './file0\x00', './file0/file0\x00', {{0xb409, 0x8}, {0x3ff, 0x2}, 0xeb0}, {{0xa46, 0x1}, {0x2, 0x62}, 0x4}, {{0x6, 0x401}, {0x40, 0xb1e}, 0x2}, {0x7fff, 0x2, 0x1ff, 0x1000}, 0x0, 0x1, 0xe, 0xfffffff8, 0x7}})
pledge(&(0x7f0000000040)='tty V\xd9\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95?(\x01\xa6~\xd0|\x02\x00\x00\x00k\xbe\xa9kG\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\x91rr)\\\x9elO\x91\x10\x19\x9a\x057\xabT\xb4B\x95a+J\x8bx\xb3S\x1fTKl-\xb2\x15\xb6\t\x15\x01\xd1\x98g\xb5\xdd\xcc\xb0\xd5F\x80> \xee\xca\xacv?ks\xb2\xc0\x1f\xb0\x9eT$`\x9am\x94\x94\x1fQ\xe7\x8fL\x11\x8e[N\x8e\x1f\xb5\xac\x11*\xc9\xc5d\x91\xe9\xc6;I\xcfZ>|\xbac\xf8Y\by\x1f!\nV\xb2\xf9\x917\fR\xc4\xba\x9b\x1dM&*\xf3{+\xf6:+nE$\x839o\x9e\xf9\xd8\x12\xe0t\xb4\xa0\"s\xa6\x15\v\x89\xf4\x10.J\b\xaa\x86p\x11_\xd3eTJ\xa9\x1e\x82l\xba\xda\xc1\xbeb\xf8\x8a\x1796\x84W\x9b3\xa5\xd2\xc9\xce\x90\xb2\x8bj\xb3\xc5\xf4\x13\xb4\xcc!\xbd\xc6\xf2\x8c\xad\xae\x169\x81\xb6\xcd\xa9\xdd~\xc4\xc2\x86?M\xa9\x7fw\xad\xefRG2JI\xceR\xaa4\x02kgQWC\xd3V\xc4\xacg\x96[\"/\x8fN\xe4\xf5\xe3\x19*8\xaf\xdb%\xad\x97J8\xa9\xa2\xc6\xee\x94\x80k\xffP\x98\xc7W\x89\xbf\x04\xc7\xa3\xd7d\xb7,\x04\x83\xef\xf52v\xc0h\xb7\xdfUf\xa2?\x0fx\xf9\xc3G\x85lh,\x16\x8an\x10\xc0\xe4f\x15n\vFL\xf3t\xe90\xae&\x19\v;\xe9\xf8\x019\xac\x9c\b\xe0Y1\xdc\"{\x16L-:5D^\x13\xc9>\xda\x12\x98\xac\xec`Yr\xd4\xb1\xbep\xfeA\x13\xe5\xd8\xb5\x19\xd7LE\x11%\xed\x17\xe0\xdc@\xfa\xd5\x14!j\xeeh\xd0\xc52\rC\x14\x1e9\xbe\x15H\xfft\x83\x1a\x88\x80j/\xca\x1a\xa2\xb9\x00\xe6\xcdP\xff\x96V\xe6\xdc\x19\xbe\xbf\xe63+\x7f\x13]\x85w\x19\x9e\xe3\xf2\xa3\x1bT\xf4\x9a\xc6\xf4y\x1aps\xd1\xe4\a\n@\xe9h\xda\xe7gT\xb6qm\xb9\xc0<\x87\x85\x99\xf1X\x03\xf43\x17W\x80,\xf6\xae\r\xfcFd-|w\xa7\xec\x83v6Fd\xb2\xd2r\rI4N2@0\xc26 \xf9v2#\x00I(\xc4\x1b \xd2w\xb0\xca\x98\x86t\x81\x88bm\xb2\x16O<\xc0\xe0\xa3\x1cR\x98\xaa\xfe{k\xad\x99\x90\x9d\x02\'Z\x18V\xb7<\xd2\x81\x92\x9d\xf6\xbf\x88\a[p\tq\x14O\x0e\x1b\x01\x90\x0e\a\xfb', 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x165)
truncate(&(0x7f0000000040)='./file0\x00', 0xb2bf)
socket(0x2, 0x400000000002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = msgget$private(0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0)
msgsnd(r2, &(0x7f0000003e40)=ANY=[@ANYBLOB="02000000"], 0xe1, 0x800)
recvmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@un=@abs, 0x8, 0x0, 0x0, &(0x7f0000000180)=""/46, 0x2e}, 0x1800)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
socket(0x11, 0x3, 0x4) (async)
ioctl$DIOCGETQUEUE(r0, 0xc148445f, &(0x7f00000002c0)={0x32, 0x19, {'\x00', './file0\x00', './file0\x00', './file0/file0\x00', {{0xb409, 0x8}, {0x3ff, 0x2}, 0xeb0}, {{0xa46, 0x1}, {0x2, 0x62}, 0x4}, {{0x6, 0x401}, {0x40, 0xb1e}, 0x2}, {0x7fff, 0x2, 0x1ff, 0x1000}, 0x0, 0x1, 0xe, 0xfffffff8, 0x7}}) (async)
pledge(&(0x7f0000000040)='tty V\xd9\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95?(\x01\xa6~\xd0|\x02\x00\x00\x00k\xbe\xa9kG\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\x91rr)\\\x9elO\x91\x10\x19\x9a\x057\xabT\xb4B\x95a+J\x8bx\xb3S\x1fTKl-\xb2\x15\xb6\t\x15\x01\xd1\x98g\xb5\xdd\xcc\xb0\xd5F\x80> \xee\xca\xacv?ks\xb2\xc0\x1f\xb0\x9eT$`\x9am\x94\x94\x1fQ\xe7\x8fL\x11\x8e[N\x8e\x1f\xb5\xac\x11*\xc9\xc5d\x91\xe9\xc6;I\xcfZ>|\xbac\xf8Y\by\x1f!\nV\xb2\xf9\x917\fR\xc4\xba\x9b\x1dM&*\xf3{+\xf6:+nE$\x839o\x9e\xf9\xd8\x12\xe0t\xb4\xa0\"s\xa6\x15\v\x89\xf4\x10.J\b\xaa\x86p\x11_\xd3eTJ\xa9\x1e\x82l\xba\xda\xc1\xbeb\xf8\x8a\x1796\x84W\x9b3\xa5\xd2\xc9\xce\x90\xb2\x8bj\xb3\xc5\xf4\x13\xb4\xcc!\xbd\xc6\xf2\x8c\xad\xae\x169\x81\xb6\xcd\xa9\xdd~\xc4\xc2\x86?M\xa9\x7fw\xad\xefRG2JI\xceR\xaa4\x02kgQWC\xd3V\xc4\xacg\x96[\"/\x8fN\xe4\xf5\xe3\x19*8\xaf\xdb%\xad\x97J8\xa9\xa2\xc6\xee\x94\x80k\xffP\x98\xc7W\x89\xbf\x04\xc7\xa3\xd7d\xb7,\x04\x83\xef\xf52v\xc0h\xb7\xdfUf\xa2?\x0fx\xf9\xc3G\x85lh,\x16\x8an\x10\xc0\xe4f\x15n\vFL\xf3t\xe90\xae&\x19\v;\xe9\xf8\x019\xac\x9c\b\xe0Y1\xdc\"{\x16L-:5D^\x13\xc9>\xda\x12\x98\xac\xec`Yr\xd4\xb1\xbep\xfeA\x13\xe5\xd8\xb5\x19\xd7LE\x11%\xed\x17\xe0\xdc@\xfa\xd5\x14!j\xeeh\xd0\xc52\rC\x14\x1e9\xbe\x15H\xfft\x83\x1a\x88\x80j/\xca\x1a\xa2\xb9\x00\xe6\xcdP\xff\x96V\xe6\xdc\x19\xbe\xbf\xe63+\x7f\x13]\x85w\x19\x9e\xe3\xf2\xa3\x1bT\xf4\x9a\xc6\xf4y\x1aps\xd1\xe4\a\n@\xe9h\xda\xe7gT\xb6qm\xb9\xc0<\x87\x85\x99\xf1X\x03\xf43\x17W\x80,\xf6\xae\r\xfcFd-|w\xa7\xec\x83v6Fd\xb2\xd2r\rI4N2@0\xc26 \xf9v2#\x00I(\xc4\x1b \xd2w\xb0\xca\x98\x86t\x81\x88bm\xb2\x16O<\xc0\xe0\xa3\x1cR\x98\xaa\xfe{k\xad\x99\x90\x9d\x02\'Z\x18V\xb7<\xd2\x81\x92\x9d\xf6\xbf\x88\a[p\tq\x14O\x0e\x1b\x01\x90\x0e\a\xfb', 0x0) (async)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x165) (async)
truncate(&(0x7f0000000040)='./file0\x00', 0xb2bf) (async)
socket(0x2, 0x400000000002, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
msgget$private(0x0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async)
open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) (async)
msgsnd(r2, &(0x7f0000003e40)=ANY=[@ANYBLOB="02000000"], 0xe1, 0x800) (async)
recvmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@un=@abs, 0x8, 0x0, 0x0, &(0x7f0000000180)=""/46, 0x2e}, 0x1800) (async)

843.021168ms ago: executing program 0 (id=590):
r0 = socket$unix(0x1, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001d80)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3}, 0x40, 0xfffe, 0x0, 0x0, 0x9, 0x8, 0xf})
bind$unix(r0, &(0x7f00000000c0)=@file={0x7, 0x1, './file0\x00'}, 0x5)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x8, 0xfff, 0x20c, 0x8, 0x3}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
setuid(0xee01)
write(r1, &(0x7f00000004c0)="b96a", 0x2)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pread(r2, &(0x7f0000000180)='+', 0x1, 0x8000000000000000)
mknod(&(0x7f0000001240)='./bus\x00', 0x80, 0x2802)
r3 = socket(0x18, 0x1, 0x0)
ktrace(&(0x7f00000000c0)='./bus\x00', 0x1, 0x0, 0x0)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0)
r5 = getppid()
ktrace(&(0x7f0000000000)='./bus\x00', 0x1, 0x80000c10, r5)
sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x28}, 0x4, &(0x7f00000001c0)="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", &(0x7f00000011c0)=0x1000, &(0x7f0000001200)="acc90325ebdd", 0x6)
connect(r3, &(0x7f0000000100)=@in6={0x1c, 0x18, 0x1, 0x1000, "4da790f6534301a41693d7f302134233", 0x50}, 0x1c)

438.985659ms ago: executing program 2 (id=593):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async)
r0 = open$dir(&(0x7f0000000140)='./bus\x00', 0x20, 0x1ae44c217401e030)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async)
open(&(0x7f0000000100)='./file0\x00', 0x800, 0x140) (async, rerun: 64)
closefrom(r0) (async, rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01fe020000000000000000000000a403bbfe8000000000000000000000000000aa82"]) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x7)

437.243432ms ago: executing program 2 (id=594):
sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0x7}, 0x3, 0x0, 0x0, 0x0, 0xfffffe62)
setrlimit(0x8, &(0x7f0000000000)={0x41, 0x5f})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xf66c, 0x5, 0x9, 0x5effff59, "9cdc452e307e7f000000000000002f9e68cd3304", 0x8000, 0x7})
writev(r0, &(0x7f0000001ac0)=[{&(0x7f0000000f80)="c04b2db567d8dee08df15472a211008b9d1cbd147a901185e125d868e23b8361ba17a91726ac6aed1bd1632457a8ef78532c37731bed93740b608d4f5be19e6e724f6a3220e4cd510b1cae9151e2fe", 0x4f}], 0x1)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x412dfb)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1)
r2 = socket(0x18, 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x6})
setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
socket(0x18, 0x2, 0x0)
r3 = syz_open_pts()
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x400, 0x40, 0xffffd6c6, "e48294068d5bfac68f398406df04df009900", 0x543, 0x8})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x7}, {0x2, 0xff03}, {0x1}, {0x0, 0x800}, {0x3}, {0x5, 0xb2c}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {0x3}, {0x1}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf208}, {0x2, 0x1000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)
select(0x40, &(0x7f0000000080)={0xc5, 0x4, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x7ffffffc}, 0x0, 0x0, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000200)="abf734f14a", &(0x7f0000000100)=0x5, 0x0, 0x0)
syz_open_pts()

435.052325ms ago: executing program 6 (id=596):
getresuid(0xfffffffffffffffe, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080)=<r1=>0x0)
r2 = msgget(0x1, 0x400)
r3 = getgid()
r4 = semget(0x0, 0x0, 0x1d8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
setresgid(0x0, r7, 0x0)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r6, r7, 0x8f, 0x9, 0x0, 0x0, 0x4}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8})
r8 = getthrid()
r9 = socket(0x2, 0x3, 0x2f)
r10 = dup(r9)
setsockopt$inet_opts(r10, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
connect$inet(r10, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x5}, 0x10)
select(0x40, &(0x7f0000000180)={0x0, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x3, 0x200000000210, 0x200000008, 0x400007}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9e)
r11 = kqueue()
kevent(r11, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r12 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r12, 0x82907003, &(0x7f0000000140)=0x1)
sendto(r10, &(0x7f0000000080)="61495208e6d5b607", 0x8, 0x4, 0x0, 0x0)
ktrace(0x0, 0x5, 0x128, r8)
r13 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r13)
msgctl$IPC_SET(r2, 0x1, &(0x7f00000000c0)={{r1, r3, r0, r7, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x7, 0x2, 0x2, r8, r13, 0x3, 0x0, 0x6, 0x0, 0x7fc2})

385.048076ms ago: executing program 1 (id=601):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0xff, 0x1, 0x9}, {0x87, 0x0, 0x2, 0x4}, {0x6, 0x1, 0x9, 0x23}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6500000019324b9b7a065af1faf4a1532d360", &(0x7f0000000000)=0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@random="5e0f5d1664a4", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x33, 0x14, 0x1066, 0x9, 0xf6, 0x1d, 0x0, @empty, @loopback}}}}})
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x9, 0x6, '\x00', 0x14, 0x50, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @loopback={0x0, 0xfffffffffffffffe}, {[], @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xf, 0x0, 0x100}}}}}}})

383.804862ms ago: executing program 1 (id=602):
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x800)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="4c31d7", 0x3}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x0, 0x2, 0x4)
sendto$unix(r1, &(0x7f00000000c0)="ee0fdd1508e83cdcb8ebc6824f074b8f7295f8fbf2edd7055ca0b0c859f26eb8c18bd02bceda1edd148c9baac1ffb29fa5162c3b01b9888978cf42457310042844cc72626320c341ee64b46056534ad936419e335611f6196bfb04a1cafd11750554667c7696f6e926fbbb2c17f19ee715c382dd568a2a81ac746e70b6738c1b68969da9062e3274e2e5d265a79d2b31ac", 0x91, 0x40c, 0x0, 0x0)
recvfrom(r2, &(0x7f0000000b40)=""/216, 0xc7, 0x2000, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x8, "d6ad064880fd283615e60375bbb68824", 0x7}, {0x1c, 0x18, 0x3, 0x0, "8478817838591246826e098569186b00", 0x3c}, 0x0, [0x4, 0x7, 0x200, 0x3ff, 0x7fffffff, 0x9, 0x9, 0x9]}, 0x5c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xb5219f1000b913f1, 0x0)
open$dir(&(0x7f0000000080)='./bus\x00', 0x4017a, 0x80)
r5 = socket$inet(0x2, 0x1, 0x0)
ioctl$VT_RELDISP(r4, 0x20007604, &(0x7f0000000180)=0x2)
setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
socket$inet(0x2, 0x4000, 0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea000001", 0x4)
close(r4)

383.380466ms ago: executing program 4 (id=603):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000b40)={0x2122, 0x900007fc, {[0x101, 0xffffffbbfffffffc, 0x0, 0x4, 0xfffffffffffffffe, 0x403, 0x553b, 0xfffffffffffffffe, 0x182, 0x7, 0x4, 0x40, 0x38000000000000, 0x3, 0x3, 0xff, 0x1, 0x7f], [0xb67b00000, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x10000000000802, 0x40006, 0x5, 0x80000000000002, 0xd, 0x1000009], [0x7fffffffffffffff, 0xfffffffffffffffe, 0x5, 0x902, 0x4, 0x7fc, 0x1000], [0x40001a29a207, 0x6, 0xffff, 0x9, 0x8, 0x3], [{0x6, 0x9, 0x9}, {0xe986, 0x40, 0x100040, 0x8}, {0x0, 0x0, 0x8ba, 0x1}, {0x5, 0xe, 0x7fcfffff, 0x8}, {0x4, 0xff, 0x7f, 0x5}, {0x11, 0x4006, 0x7, 0x7}, {0x7fff, 0x5, 0x801, 0xb}, {0xc2a8, 0x200081, 0x4000e6e9, 0x80000000}], {0x4, 0x10000ff9, 0x10001}, {0x2, 0x10000957, 0x4, 0x10001}}})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffffb, 0x40000002})

381.238069ms ago: executing program 5 (id=604):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x4, &(0x7f0000000080)=[{0x4, 0xfc, 0x2, 0x5}, {0x5, 0x9}, {0x9b1e, 0xd3, 0xf8, 0xcd9}, {0x1, 0x8f, 0x4}]})
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYBLOB="af1bdb79b042d062e1ede4a8a490b28ec4a27434c46849ed08f7fe17c9924d02ff4eee3740a77cfb0e00801b9cc250ff926490ce1420f236da8db6b098499b70b5f0f041da2093d57ffeb431d6839cd4843cd59fd95ad56e3984095e8feea8af4a052f3c4827262d8c725d97c88c90eff0899f66153b7ffdfb8da40c04afd8ee7a7bdde2836ad43c2122a46ae85d6b9c37049af00321555dc45877044973606a1f03220d80c2d0e20485bad9e2c5707b70b269fcc8eca558f540027eafd2d5c7e7532d8ca3dba10f20d12be6cfb3c74966beb73d8a28ee31adf64c7ae7a2be", @ANYBLOB="85b5540dcf9449b85d4c3cd88a01ebbbad1000c1d6739ad7148b2848c558c6166dccb3639fc28c507c942439de7b891e9a863b8db2456fc0cec44cb57eacf5a056fcf65d1d6dab6d7a8b078a7b9d2523dae5a8654cd8d0704eb1de6830fb1ed3553779c56f7c9a0a1bdae34ed5197cf528ea28bf51fc9db0b62e6249618657c452807f08e3c917daeb8cf647e827eea36bb5f6848eef8431dbdfa4ce5757e703d99ca8dfe11af6de6c1458275fe30905a6183aecf87068132809b94948788416338d18334642b166f88ce4fe12ddb893930dc55a80c84b98c62f3c48389abe00cb3883b2085fc72664e7a7dc9b00d067ad869ccfb75d"])
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="624455ee462bd13bfe7560bd59840fcb79fe11ed00fa2e3c420aa26c4c41a52ad39f4649ec12a448234ec2d83f0ea4d994dd1107b14e8d561788f8c9bf3bd2762229401f7ffe7e61bf67021cff7ed0e695c6c53b5c5350392e2e853ac29a39341ec5c6feb842af263b69bf1d87176b2192acd76ef1688facd3d1d4", 0x7b}], 0x1)
execve(0x0, 0x0, 0x0)
closefrom(r0)
ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000100)={&(0x7f00000000c0)})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x4, &(0x7f0000000080)=[{0x4, 0xfc, 0x2, 0x5}, {0x5, 0x9}, {0x9b1e, 0xd3, 0xf8, 0xcd9}, {0x1, 0x8f, 0x4}]}) (async)
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYBLOB="af1bdb79b042d062e1ede4a8a490b28ec4a27434c46849ed08f7fe17c9924d02ff4eee3740a77cfb0e00801b9cc250ff926490ce1420f236da8db6b098499b70b5f0f041da2093d57ffeb431d6839cd4843cd59fd95ad56e3984095e8feea8af4a052f3c4827262d8c725d97c88c90eff0899f66153b7ffdfb8da40c04afd8ee7a7bdde2836ad43c2122a46ae85d6b9c37049af00321555dc45877044973606a1f03220d80c2d0e20485bad9e2c5707b70b269fcc8eca558f540027eafd2d5c7e7532d8ca3dba10f20d12be6cfb3c74966beb73d8a28ee31adf64c7ae7a2be", @ANYBLOB="85b5540dcf9449b85d4c3cd88a01ebbbad1000c1d6739ad7148b2848c558c6166dccb3639fc28c507c942439de7b891e9a863b8db2456fc0cec44cb57eacf5a056fcf65d1d6dab6d7a8b078a7b9d2523dae5a8654cd8d0704eb1de6830fb1ed3553779c56f7c9a0a1bdae34ed5197cf528ea28bf51fc9db0b62e6249618657c452807f08e3c917daeb8cf647e827eea36bb5f6848eef8431dbdfa4ce5757e703d99ca8dfe11af6de6c1458275fe30905a6183aecf87068132809b94948788416338d18334642b166f88ce4fe12ddb893930dc55a80c84b98c62f3c48389abe00cb3883b2085fc72664e7a7dc9b00d067ad869ccfb75d"]) (async)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="624455ee462bd13bfe7560bd59840fcb79fe11ed00fa2e3c420aa26c4c41a52ad39f4649ec12a448234ec2d83f0ea4d994dd1107b14e8d561788f8c9bf3bd2762229401f7ffe7e61bf67021cff7ed0e695c6c53b5c5350392e2e853ac29a39341ec5c6feb842af263b69bf1d87176b2192acd76ef1688facd3d1d4", 0x7b}], 0x1) (async)
execve(0x0, 0x0, 0x0) (async)
closefrom(r0) (async)
ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000100)={&(0x7f00000000c0)}) (async)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async)

380.641445ms ago: executing program 4 (id=605):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000002a00)={{'./file0\x00', './file0\x00', 0x24, 0x3}, &(0x7f0000000040)=[{'./file0\x00', './file0\x00', 0x41, 0x10}, {'./file0\x00', './file0\x00', 0x60, 0x3}, {'./file0\x00', './file0\x00', 0x2, 0x81}, {'./file0\x00', './file0\x00', 0x0, 0x3}, {'./file0\x00', './file0\x00', 0x2d, 0x5}, {'./file0\x00', './file0\x00', 0x581ce12e949fca08, 0x7}, {'./file0\x00', './file0\x00', 0x4, 0x9}, {'./file0\x00', './file0\x00', 0x73}, {'./file0\x00', './file0\x00', 0x0, 0x1}, {'./file0\x00', './file0\x00', 0x47, 0x7}], 0x3, 0xa, 0x7, 0x6, 0x5, 0x0, 0x72, 0xd})
pipe2(&(0x7f0000002e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10004)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000002ec0)={0x100, 0xffffff01, 0x7, 0x47, "47df012c486368bc4509b76899ecf32de06fada7", 0x40, 0x2})
ioctl$TIOCCLRVERAUTH(r1, 0x2000741d)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000002f00), 0x40881, 0x0)
shutdown(r1, 0x0)
openat$speaker(0xffffffffffffff9c, &(0x7f0000002f40), 0x200, 0x0)
accept(r3, &(0x7f0000002f80)=@in6, &(0x7f0000002fc0)=0x1c)
select(0x40, &(0x7f0000003000)={0x7, 0xff, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5cf, 0x2, 0x5}, &(0x7f0000003040)={0x200, 0x6, 0x100000000, 0x3, 0x4, 0x69, 0x9344, 0xffffffff}, &(0x7f0000003080)={0x7, 0x8, 0x74e2, 0xb, 0x0, 0x63, 0x8, 0x5}, &(0x7f00000030c0)={0x3f9d, 0xce1})
r4 = open$dir(&(0x7f0000003100)='./file0\x00', 0x80, 0x181)
mkfifoat(r4, &(0x7f0000003140)='./file0/file0\x00', 0x40)
ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000003180))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000031c0)={0x4, 0xff, <r5=>r1})
ioctl$TIOCSETVERAUTH(r5, 0x8004741c, &(0x7f0000003200)=0x5)
lstat(&(0x7f0000003240)='./file0/file0\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
setuid(r6)
setresgid(r7, r7, r7)
ioctl$DIOCGETSTATUS(r3, 0xc2084415, &(0x7f0000003300))
execve(&(0x7f0000003540)='./file0\x00', &(0x7f0000003640)=[&(0x7f0000003580)='\':{\x00', &(0x7f00000035c0)='\x00', &(0x7f0000003600)='/dev/speaker\x00'], &(0x7f00000036c0)=[&(0x7f0000003680)='\\&9\x00'])
syz_emit_ethernet(0xdf, &(0x7f0000003700)={@empty, @random="45a5f473de80", [], {@ipv4={0x800, {{0xb, 0x4, 0x3, 0x1, 0xd1, 0x67, 0xf120, 0x8, 0x11, 0x0, @rand_addr=0x1, @multicast1, {[@noop, @noop, @end, @ssrr={0x89, 0x13, 0x5, [@empty, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}]}]}}, @generic="08b1f2070c8cdb047432f1f769ae4732dd6d459136ab9465d7cfe411d28ef361ca676985ac4cf5de7c754d882b9479acacf17a7c7cea7ad43f94ee416905834cf8bf5a06cfb48f5d55c54602a902e3c5c351dc67839474e3cb94b55e6daec9e8a5477d33e0c6b7785f01ba5d92bc7a0a292086a53dabc55a1b824a85f3c71203921d48e74d1b7b0c2bae2c647b54e93921bb0ed7839aabab81fbad880e5f8226b3dc62b7db"}}}})
ioctl$DIOCRGETTSTATS(r3, 0xc4504440, &(0x7f00000061c0)={{'./file0/file0\x00', './file0/file0\x00', 0x20, 0x5}, &(0x7f0000003800)=[{'./file0\x00', './file0\x00', 0x4, 0x4}, {'./file0\x00', './file0\x00', 0x62, 0xab}, {'./file0/file0\x00', './file0\x00', 0x45, 0x1}, {'./file0/file0\x00', './file0\x00', 0x20, 0x81}, {'./file0\x00', './file0\x00', 0x1, 0xf0}, {'./file0\x00', '\x00', 0x24, 0x4}, {'./file0\x00', './file0/file0\x00', 0x0, 0x8}, {'./file0/file0/file0\x00', './file0\x00', 0x0, 0x15}, {'./file0/file0\x00', './file0/file0\x00', 0x8}, {'./file0/file0\x00', './file0/file0\x00', 0x4, 0x3}], 0x9, 0xa, 0x3, 0x6, 0xa571, 0x9, 0x0, 0x2})
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
getgroups(0x3, &(0x7f0000006640)=[r7, r7, r7])
stat(&(0x7f0000006680)='./file0/file0\x00', &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(r8, r6)
sysctl$ddb(&(0x7f0000006740)={0x9, 0xb}, 0x2, &(0x7f0000006780)="3e12e09fbf305701d3953c123a74ea21a5056767a985969dbd2608f5908f1aa93b897875f069e9926a0c301ffa7d5481b4629626cf9bcc1ae4a13e8c7d0b1bf76ce6944f8479a32f4eb264fbcffb549f2873c3d81adb59defe737fa670fc322c67c51b7ff4e463a05fbb3d18b670c819c06e0e4678e992c9d2929d58e84daf11c5bcc6facec511585ac07ce2e2e1997f279804b9ccc24996823988294ccc1c50636897bda4b565da7efc8284550d22a0d54bcdd053edbc663e2a65cfef096b40b21a26fb27bf6b92bb560d550c068a3761c57e6161fd96c901e018f0f1fe9196", &(0x7f0000006880)=0xe0, &(0x7f00000068c0)="9088e258fb38411204b359cb3332a6b280fcaf86ba31f19060678f3612715840f576ef125e2b4d4fd98bb61aadd6c4d949ad6a5b8a7dc390904a587ff0c8498fd1d38d57355c84b0644c71d213852fa5728c8be796ae2f9e838a5fd17e15db8db6001cb8ad7781d45d53c3f298a4b57e0291d85aec652f92054bf99e32e0b1019bb15316180f970cef91f4269585e46e3e9de49dbddced9b71f3ca5cec2a0b8f3996bb30e49fba08a91c8830b3863184f8", 0xb1)
preadv(r0, &(0x7f0000006980), 0x0, 0x7)
getegid()
kqueue()

380.43405ms ago: executing program 4 (id=606):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb6)
symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
fchmodat(r0, &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20, 0x2)

380.065935ms ago: executing program 5 (id=604):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x4, &(0x7f0000000080)=[{0x4, 0xfc, 0x2, 0x5}, {0x5, 0x9}, {0x9b1e, 0xd3, 0xf8, 0xcd9}, {0x1, 0x8f, 0x4}]})
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYBLOB="af1bdb79b042d062e1ede4a8a490b28ec4a27434c46849ed08f7fe17c9924d02ff4eee3740a77cfb0e00801b9cc250ff926490ce1420f236da8db6b098499b70b5f0f041da2093d57ffeb431d6839cd4843cd59fd95ad56e3984095e8feea8af4a052f3c4827262d8c725d97c88c90eff0899f66153b7ffdfb8da40c04afd8ee7a7bdde2836ad43c2122a46ae85d6b9c37049af00321555dc45877044973606a1f03220d80c2d0e20485bad9e2c5707b70b269fcc8eca558f540027eafd2d5c7e7532d8ca3dba10f20d12be6cfb3c74966beb73d8a28ee31adf64c7ae7a2be", @ANYBLOB="85b5540dcf9449b85d4c3cd88a01ebbbad1000c1d6739ad7148b2848c558c6166dccb3639fc28c507c942439de7b891e9a863b8db2456fc0cec44cb57eacf5a056fcf65d1d6dab6d7a8b078a7b9d2523dae5a8654cd8d0704eb1de6830fb1ed3553779c56f7c9a0a1bdae34ed5197cf528ea28bf51fc9db0b62e6249618657c452807f08e3c917daeb8cf647e827eea36bb5f6848eef8431dbdfa4ce5757e703d99ca8dfe11af6de6c1458275fe30905a6183aecf87068132809b94948788416338d18334642b166f88ce4fe12ddb893930dc55a80c84b98c62f3c48389abe00cb3883b2085fc72664e7a7dc9b00d067ad869ccfb75d"])
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="624455ee462bd13bfe7560bd59840fcb79fe11ed00fa2e3c420aa26c4c41a52ad39f4649ec12a448234ec2d83f0ea4d994dd1107b14e8d561788f8c9bf3bd2762229401f7ffe7e61bf67021cff7ed0e695c6c53b5c5350392e2e853ac29a39341ec5c6feb842af263b69bf1d87176b2192acd76ef1688facd3d1d4", 0x7b}], 0x1)
execve(0x0, 0x0, 0x0)
closefrom(r0)
ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000100)={&(0x7f00000000c0)})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x4, &(0x7f0000000080)=[{0x4, 0xfc, 0x2, 0x5}, {0x5, 0x9}, {0x9b1e, 0xd3, 0xf8, 0xcd9}, {0x1, 0x8f, 0x4}]}) (async)
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYBLOB="af1bdb79b042d062e1ede4a8a490b28ec4a27434c46849ed08f7fe17c9924d02ff4eee3740a77cfb0e00801b9cc250ff926490ce1420f236da8db6b098499b70b5f0f041da2093d57ffeb431d6839cd4843cd59fd95ad56e3984095e8feea8af4a052f3c4827262d8c725d97c88c90eff0899f66153b7ffdfb8da40c04afd8ee7a7bdde2836ad43c2122a46ae85d6b9c37049af00321555dc45877044973606a1f03220d80c2d0e20485bad9e2c5707b70b269fcc8eca558f540027eafd2d5c7e7532d8ca3dba10f20d12be6cfb3c74966beb73d8a28ee31adf64c7ae7a2be", @ANYBLOB="85b5540dcf9449b85d4c3cd88a01ebbbad1000c1d6739ad7148b2848c558c6166dccb3639fc28c507c942439de7b891e9a863b8db2456fc0cec44cb57eacf5a056fcf65d1d6dab6d7a8b078a7b9d2523dae5a8654cd8d0704eb1de6830fb1ed3553779c56f7c9a0a1bdae34ed5197cf528ea28bf51fc9db0b62e6249618657c452807f08e3c917daeb8cf647e827eea36bb5f6848eef8431dbdfa4ce5757e703d99ca8dfe11af6de6c1458275fe30905a6183aecf87068132809b94948788416338d18334642b166f88ce4fe12ddb893930dc55a80c84b98c62f3c48389abe00cb3883b2085fc72664e7a7dc9b00d067ad869ccfb75d"]) (async)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="624455ee462bd13bfe7560bd59840fcb79fe11ed00fa2e3c420aa26c4c41a52ad39f4649ec12a448234ec2d83f0ea4d994dd1107b14e8d561788f8c9bf3bd2762229401f7ffe7e61bf67021cff7ed0e695c6c53b5c5350392e2e853ac29a39341ec5c6feb842af263b69bf1d87176b2192acd76ef1688facd3d1d4", 0x7b}], 0x1) (async)
execve(0x0, 0x0, 0x0) (async)
closefrom(r0) (async)
ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000100)={&(0x7f00000000c0)}) (async)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async)

379.840215ms ago: executing program 1 (id=607):
r0 = syz_open_pts()
fcntl$lock(r0, 0x8, &(0x7f0000000840)={0x1, 0x1, 0x7fffffffffffffff, 0x1000100000003})
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ffbf, 0x0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, 0x0, 0x0)
ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000440)=0x94a)
closefrom(r1)
sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x8000004, './file0\x00', [{[@v4=@multicast1, @v4=@rand_addr=0x3], [0x159, 0x40], 0x0, 0x18}, {[@v6=@mcast1], [0x46], 0x4}], {{0x246, 0x6c, 0x1, 0x7ff}, 0x5, 0x409, 0x80, 0x8000, 0x8, 0x17, 0xa}, {{0x5, 0x5, 0x1, 0x7}, 0x8001, 0x7, 0x10007, 0x6, 0x800, 0xf0, 0xfe}, @v6=@loopback, 0x4, 0x0, 0xfffffffe, 0xf23e, 0x5, [[0xfffffff7, 0x77], [0x2, 0x834c]], [[0xfbfffffd, 0x4], [0x9, 0x3]], 0x9, [0x0, 0x79], 0x0, 0x2, 0x6, 0x0, 0xff, 0x3, 0xb, 0x83, 0x1, 0x8, 0xff, 0xce53}})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x1, 0x4, 0x5, 0x3, 0x10, [{0xfffff000, 0x2, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x800002}, {0x100006, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x5, 0x7}, {0x2, 0x83, 0x14000009, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x7, 0x6, 0x3, 0x9}, {0x401, 0x0, 0x8001, 0x7}, {0x401, 0xfff9, 0x48a, 0x13}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x29, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xffffffb8}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0x3, 0x6}]})
r2 = socket(0x18, 0x5, 0x0)
r3 = socket$inet(0x2, 0x4002, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000001100), 0xffffffffffffff37)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0))
syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1f}, 0x4, &(0x7f0000000340)="f2f57e9af0c5675b779f9ee439f8de12d27165b4f7ca0fea70ca41b4b89d7f095ca4b614fe39af5839e75346e1461e3467e834b25bd0bdad7631410d9dbfd4c6bde4375744de77cf1243d9af349f8cbb39b16b655d96b957cc822b8d815c", &(0x7f0000000180)=0x5e, &(0x7f0000000240)="b24d7804408c59bd5d8a80a2e1e4f29cd32d53557d7bf941ba39169c8e4f857a9b5a7a2d188aeb683ba59d36d056df33b2b65a4188e1008c07fe79b66e28b052f1e08816c44a7a750551c83156f1e79db40ecc47bf8e5f96a09867a534eb61a72eb9c9c55981b2be8a404f9bcb6454133a8973fe608004fb76008535dce411131ddcf46ba94302ae18eaea22af483ad40b48dec492fac1a64e4b9cecc07f799e9bd7b04c44b945ea3398bb86da39b81038488efd6a04956aca056dc7c1deeb96a049e279614f4cd35be6d381c0371569b05e703ac6d3b7560d739b33e73ac7bb7e1e3cf836ade6c03638de532be942a05c4979b730ae0a", 0xf7)
execve(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000500)='-}\x00', &(0x7f0000000480)='\')\x97i\x0e'], &(0x7f0000000680)=[&(0x7f00000005c0)='\x00', &(0x7f0000000540)=').-*\x00', &(0x7f0000000580)='tap', &(0x7f00000006c0)='D\x99H\xf9\xf40\xdal\xfbyNX,0\x80\xfad\xc2\x05h\xa6\xf6\xb4w3kj\x124\x18\xbe\\ZG\xfc\xdf\xaftap', &(0x7f0000000600)='tap', &(0x7f0000000640)='\x00'])
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r4, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xb, 0x1, 0x1040807, 0x50001, 0x3, 0x0, 0x0, 0x8, 0xf5fffffffffffff9})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r5 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r5, 0xffff, 0x1024, &(0x7f0000000480)={<r6=>0x0}, &(0x7f0000000580)=0xc)
kill(r6, 0x12)
socket$inet6(0x18, 0x1, 0x6)

379.406396ms ago: executing program 4 (id=608):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCPROMISC(r1, 0x20004269)
ioctl$BIOCPROMISC(r1, 0x20004269)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, &(0x7f0000000080)="bd", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, &(0x7f0000000500)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061adbbc2fe232ae450b437675a7504ab125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98", 0xee)
sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="87c27e33bb7a86bf70b1d91d8cc5937d", 0x4}, {&(0x7f0000000240)="0f8ede06d4e0679dc1074f1aa9e637013d896881b2050782dca39bb40e21ffc552d591267babdbdca0d62113e59e99150370061bfd1f5c9e52b0ae96ca84e3210a909ad5fde2e67bebfe4d6eb44760dbb4f7d44d1baceafa676fbffa5cc5129a46a9b9581ceef4c48e7b6eaefbc683e99b40c77f6d99617d7062c68ad4c0e5eb131cdebc68f955f17507f3cd3ec2d94af5f539f0d1df7f19f6a24ba38431abaf3dab372c0b94a446a1453fc0fcb7edd95906646dcd5f88f01ce3dea9da311237227b01f77e9aa2ec47ef62e66ea6ef49e91ca86c66ea14cc69", 0xd9}, {&(0x7f0000000140)="bbdd94dc1f38354e99d294535289e772a51306fdae308a5792dfa81bd56b57797a6a4ec9bfe1787ed5643f243927d9d9dfb3e37221e6243b6a8a30c4b8f02eabaf039db6948785da82905c3cc528ae9a7b3b4ce64d130f9179bc5d9f4ae8296b2d3c246d16289c25", 0x68}, {&(0x7f00000003c0)="51219ab7eb0182220f1323ad917cc590a2c6a7c81a45a7b4fd6fecf97a78718e", 0x20}], 0x100000000000008c, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x40a)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x2, 0x1, 0xa}, {0x6c, 0xc9, 0xfe, 0x8}, {0x9b1e, 0x22, 0xf, 0x4020bff}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@empty, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x33, 0x14, 0x66, 0x9, 0xf6, 0x37, 0x0, @multicast2, @loopback}}}}})
ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10})
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$DIOCCLRSTATES(r5, 0x0, &(0x7f0000000400)={{0x4d800, 0x7}, 0x2, '\x00', 0xffff346d, {@addrmask={@v4=@loopback, @v4=@rand_addr, 0x0, 0x0, 0x6}, [0x2, 0x7f], 0x2, 0x6, 0x8}, {@any={'\x00', 0x0, 0x4}, [0x9, 0xe751], 0x7f, 0x4, 0x1}, './file0\x00', './file0\x00', 0x3, 0x2})
r6 = socket$inet6(0x18, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xa858, "0000000000000800063c07b811af4100", 0x7}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db0900", 0x10, 0x0, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@hopopts={0x2b, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}]}]}}}}})
syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="5047bbb69258", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7fff, 0x0, 0xfffc}}}}}})
syz_emit_ethernet(0x39, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x2b, 0x66, 0x0, 0xa, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8586c89c8fc0f0fd, 0x6, 0x0, 0xfffc}, {"8af76a"}}}}}})
r7 = socket$inet6(0x18, 0x1, 0x6)
setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4)
bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0xfffffff8, "0000000000000000b5fb69193d51a001", 0x20009399}, 0x1c)

174.709276ms ago: executing program 1 (id=609):
sendto$unix(0xffffffffffffffff, &(0x7f0000000040)="ee0fdd1508e83cdcb8ebc6824f074b8f", 0x10, 0x40c, 0x0, 0x0)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d)
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0x23, 0x4, 0x4, 0x6}], 0x1, 0x0, 0x5, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="dc59ecdb75a512a184e16bfffe01bc8b09488172c64ab4f1cca6e2abd4118c70ad25fea5525ac19df1", 0x29}, {&(0x7f00000001c0)="b418d58f0312c17af98845d0d90964ca81033d533337b1852fe4fd2d5ac5e69ed779ca06e272d39c4b4ccd21ea965f4c927ac8e88cf975a0a44fba3d4825586992589b27e3d5e55da12930e744ecd142ff53fa00586cd8284ed68180a0918c9ffab7ea694689c7900eef2025505dd584a676b9a77488f81c0fa1aba6016fb40c03649ba4cfec2b6e", 0x88}, {&(0x7f0000000280)="c3c16e6f1630b399b7e52d36e7c0886fadb9b4cb933db8c4d26ad2abd7963b9b43a3108e447f9833cadff71e819c9087de6658f306fd0d39da9ac544579f8d8f43939c76f29e58f13547a146d35d5d55b49d524c886e0d10a5afe6077010efd0c894b5e83a783da8cd63ec78c47a23dd5e84ffaa509939eb1b02357fa4e66c5726b39fa04bce5f31b7b3d63c1649374e465b2c1974a95c033b38cc1c14b4815abaffd11a2f06995be5", 0xa9}, {&(0x7f0000000340)="1c8015fcfa4271025f8c4f50333c4702bf6cfc48623f049808da0da5f7e1a74bb3456528f639b9e04d53870232ec05040ebf1ad15a505f8ee9b5882a24fd4ad0983b299ec064f1603c3cc53cfc31c2fea7686773ecfb5b48fd79e83b48a7548d3950f7fb0369ef72e315e6b72851ee", 0x6f}], 0x4)
r2 = getppid()
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r3=>0x0}, 0xc)
getresgid(&(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={r2, r3, r4}, 0xc)

142.025505ms ago: executing program 3 (id=610):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async)
open(&(0x7f0000000040)='./bus\x00', 0x200, 0xaf) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x1000, 0x0, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2eff, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0x8000000000000000, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001, 0x4], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffe, 0x3], [{0x4, 0x4, 0xffffffff, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x81, 0x0, 0x40000000008}, {0x0, 0x2106, 0x40000, 0x2000000000000000}, {0xf054, 0x0, 0x1, 0x1}, {0x8, 0x1, 0x0, 0x2}], {0x8002, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) (async)
r0 = kqueue()
syz_emit_ethernet(0xf3, &(0x7f0000000480)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x0, 0xfffc, {[@window={0x3, 0x3, 0x3}, @generic={0x3, 0x8, "3303c4bd4ebd"}, @generic={0x8, 0x2}]}}, {"1c09c9e1e02a2b84daa6e39f00f95530b581366e8100b761ca8fbd491f3735e11c9135768025c011d15133b7089d709c94ded9dcde89558c306c4391498bc0c8946d1b1548a51755fa701c0c28a6a1b3c6c54ed95d01e34b4ca429fc42b312fe46999e5dddc1227da6e1ee188c4111ab86e367cf0967f87e06da2cec2f2f208d242ad5c8ba229f3f367e166388c17b3c7cbbbe05004522674fdc82ed74cfaf3a592a25ee70ea4ae862baa4ca0a"}}}}}}) (async)
kevent(r0, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async)
close(r0)

131.86337ms ago: executing program 4 (id=611):
r0 = socket$inet(0x18, 0x3, 0x102)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='r\x00')
unveil(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='r\x00')
chroot(&(0x7f0000000080)='./file0\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='w\x00')
sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000140)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="630c0000000006f7fffffff2efa24a85abdd612dd68e59adff0200000000000000c47e84f7c477da4d9c793909f5480a00"/60, 0x3c}], 0x1, 0x0}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834400081100fed38d5ba8079e61cd0c535a980000ebff0200000000000000000000000000014e234e23000800"])
r1 = socket$inet(0x2, 0x3, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[])
execve(0x0, &(0x7f0000000480)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200), &(0x7f00000004c0)='/U-]:#@\\,\x00jv\xee\xaeF\xdc\x1a\x1f\v5X\x8d\xd0\xcc\xa1\x9d\xeb\xda\x8d\xb0\x97\xf2o\x83\x1cP\xbcj\xec\xe3s\xfc\aF\x1c\xc4&\xfe>2\xdb\xef\xa9W&,\xec\x04\xa3\xc9F\x1a\xabW0\xcc,\xfa\x8ck\x8fP\x94\xba\x96', &(0x7f0000000380)='w\x00', &(0x7f00000003c0)='w\xeb', &(0x7f0000000400)='w\x00', &(0x7f0000000440)='r\x00'], 0x0)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100))
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

130.47753ms ago: executing program 7 (id=612):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x0)
setsockopt(r1, 0x0, 0x7, &(0x7f0000000200), 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='mN', 0x2}, {&(0x7f0000000080)="0f23", 0x2}], 0x2, 0x9)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd6000000000383a00000000000000000000000000000000000000000000000000aa02"])

130.001802ms ago: executing program 3 (id=613):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x8) (async)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x8)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
ftruncate(r0, 0x40000000007)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2, 0xfffffffffffffff7, 0x3, 0x0, 0x80000000004, 0x400000000009, 0x0, 0x4701})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9)
ioctl$FIOASYNC(r1, 0xc0107008, &(0x7f00000000c0)) (async)
ioctl$FIOASYNC(r1, 0xc0107008, &(0x7f00000000c0))
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/55, 0x37}, {&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/4082, 0xfffffeeb}, {&(0x7f0000001280)=""/68, 0x44}], 0x5, 0x9fa)
open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7)

129.415871ms ago: executing program 4 (id=614):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaafcb825b56a98aaffffffffffff082245f400340067000000069078e0000002ac143e339f0744da16f0142e6eb8f6e12a002ae38c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800282009078fffc03030703085a001c5fb32100"])
semget(0x2, 0x3, 0x44)
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)

129.027846ms ago: executing program 1 (id=615):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000000)='x\x00')
unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00')
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[])

17.959992ms ago: executing program 3 (id=616):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc10016", 0x4}], 0x1) (async, rerun: 64)
syz_emit_ethernet(0x138, &(0x7f0000000200)=ANY=[@ANYBLOB="ff02", @ANYRES64]) (rerun: 64)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = fcntl$dupfd(r0, 0xa, 0xffffffffffffffff)
close(r2) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r3 = syz_open_pts()
close(r3) (async)
syz_open_pts() (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000000)=0x1d) (rerun: 64)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1)
futimens(r4, &(0x7f0000000000)=[{0x9, 0xfffffffffffffffb}, {0x2, 0x8}]) (async)
ioctl$AUDIO_MIXER_READ(r4, 0xc0144d00, &(0x7f00000000c0)=@value_ctrl={0x7, 0x3, 0x7, "fd89b4ccae7d623a"}) (async)
syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) (async)
syz_emit_ethernet(0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08060001080006040009ffffffff72ffffffe000000200210000000000000000"])
r5 = socket(0x2, 0x2, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x2)
r6 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async)
r7 = socket$inet(0x2, 0x4, 0x2)
setsockopt$inet_opts(r7, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f00000001c0), 0x0) (async)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
readv(r5, &(0x7f0000001440), 0x0) (async, rerun: 64)
setsockopt$sock_int(r6, 0xffff, 0x800, &(0x7f0000000180)=0x3, 0x4) (rerun: 64)

14.671508ms ago: executing program 1 (id=617):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r0, 0x1000000000029, 0x9, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
r3 = socket(0x18, 0x2, 0x0)
setuid(0xee01)
socketpair(0x2, 0xc003, 0xa5, 0x0)
getsockopt(r3, 0x29, 0x37, 0x0, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffb, 0x1, 0x1, 0x1, 0xfffffffffffffffe, 0x10000000000000, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x5c, 0x7fffffffffffffff, 0x8000ffffffff, 0x100, 0x5800000000000000, 0x1fe, 0xb, 0x1, 0x8], [0x100100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0x1, 0x4, 0xfffffffffffffffd], [0x100, 0x2020000000000, 0x401, 0x100000000, 0xfffffffff7efffff, 0x6], [{0x8000, 0x2, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x2001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x81, 0x809}, {0x2, 0x40, 0x40001, 0x4}, {0xa, 0x20000, 0x4, 0x4}, {0x0, 0x965, 0x3, 0x4}], {0x2000, 0x6, 0x10000}, {0x0, 0x0, 0x3, 0x2}}})
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80)
ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f0000000140)={0xd, 0x6})
ioctl$WSKBDIO_SETENCODING(r6, 0x80045710, &(0x7f0000000340)=0xa9)
getsockopt$sock_cred(r5, 0xffff, 0x1024, &(0x7f0000000480)={<r7=>0x0}, &(0x7f0000000580)=0xc)
kill(r7, 0x13)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0x3, 0x0, 0x7}, {0x4, 0xf1, 0x9}, {0x6, 0x1, 0x1d, 0xdbe3}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x40, 0xb, 0x1, 0x9}, {0x2, 0x9, 0xf7}, {0x9b1e, 0x2, 0xf8, 0x4000800}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x4, 0x6, 0x1, 0xfffffffe}, {0x3, 0x0, 0x0, 0xffffffff}, {0x180, 0x0, 0x0, 0xbc2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaadd60db090000102b04fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000000000018b009078000000080000000000000002"])

12.109239ms ago: executing program 7 (id=618):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
r1 = socket$inet6(0x18, 0x4, 0x5)
close(r1)
socket(0x18, 0x2, 0x0) (async)
socket(0x18, 0x2, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r2 = socket(0x18, 0xc003, 0x3a)
setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async)
setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000280)={{0x1c, 0x18, 0x2, 0x1, "2da5ab4118bb11f262f104012ece831c", 0x6}, {0x1c, 0x18, 0x3, 0x4, "2a04f39ccf93665af5f71a7f86067f69", 0xd}, 0x3, [0xa, 0xb9c, 0x7, 0xffffffc5, 0x6, 0x2, 0x7, 0x2]}, 0x5c)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x2, 0x1, 0xa}, {0x20, 0xc9, 0xfe, 0x8}, {0x9b1e, 0x22, 0xf, 0x40203fe}]})
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="c2a6500000019324b9b7a065af1faf4a1532d36083c8c73a28ce546a06907f80", &(0x7f0000000000)=0x20, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[])

0s ago: executing program 0 (id=619):
r0 = socket(0x18, 0x2, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x8, 0x4, 0x410}, {0x1b16, 0x81, 0x9e, 0x80000000}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) (async)
setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd20000", 0x88)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
writev(r2, &(0x7f0000000200), 0x0) (async, rerun: 64)
readlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/41, 0x29) (rerun: 64)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
socket(0x2, 0x3, 0x0) (async, rerun: 64)
connect$unix(r2, &(0x7f0000000180)=@file={0x0, 0x0, './file0\x00'}, 0xa) (rerun: 64)
r3 = socket(0x2, 0x3, 0xff)
bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10)
connect$unix(r3, &(0x7f0000000000), 0x10)
r4 = socket(0x18, 0x3, 0x0)
setsockopt(r4, 0x1000000029, 0x38, 0x0, 0x0)
sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts.
pppx: unable to set addresses for pppx1, error=17
¹j¼õ¬|ÿ ž¨E1\…:lo0: can't handle af0
¹j¼õ¬|ÿ ž¨E1\…:pckbd_enable: command error
pckbd_enable: command error
denied attempt to set clock back 4129213580 seconds
Connection to 10.128.0.108 closed by remote host.
ktrace write failed, errno 27, tracing stopped
pppx: unable to set addresses for pppx1, error=17
ktrace write failed, errno 27, tracing stopped
pckbd_enable: command error
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 357181  20353      0           0          0    0  syz-executor
db_enter() at db_enter+0x25
panic(ffffffff834b75bd) at panic+0x1e5
__assert(ffffffff834f735b,ffffffff835078cd,3bb,ffffffff83530857) at __assert+0x29
refcnt_finalize(ffff80003c3b3778,ffffffff834ad9d2) at refcnt_finalize+0x1db
pppx_if_destroy(285b9e,ffff80003c3b3770) at pppx_if_destroy+0x3d
pppxclose(285b9e,41,2000,ffff80002a23c800) at pppxclose+0xa0
spec_close(ffff80003c3d75a0) at spec_close+0x417
VOP_CLOSE(fffff08076c897c0,41,fffff080097fd0d0,ffff80002a23c800) at VOP_CLOSE+0x132
vn_closefile(fffff0806f327468,ffff80002a23c800) at vn_closefile+0x12b
fdrop(fffff0806f327468,ffff80002a23c800) at fdrop+0x121
closef(fffff0806f327468,ffff80002a23c800) at closef+0x192
fdfree(ffff80002a23c800) at fdfree+0x116
exit1(ffff80002a23c800,0,0,1) at exit1+0x576
sys_exit(ffff80002a23c800,ffff80003c3d7910,ffff80003c3d7860) at sys_exit+0x1a
end trace frame: 0xffff80003c3d7900, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff834b75bd) at panic+0x1e5
__assert(ffffffff834f735b,ffffffff835078cd,3bb,ffffffff83530857) at __assert+0x29
refcnt_finalize(ffff80003c3b3778,ffffffff834ad9d2) at refcnt_finalize+0x1db
pppx_if_destroy(285b9e,ffff80003c3b3770) at pppx_if_destroy+0x3d
pppxclose(285b9e,41,2000,ffff80002a23c800) at pppxclose+0xa0
spec_close(ffff80003c3d75a0) at spec_close+0x417
VOP_CLOSE(fffff08076c897c0,41,fffff080097fd0d0,ffff80002a23c800) at VOP_CLOSE+0x132
vn_closefile(fffff0806f327468,ffff80002a23c800) at vn_closefile+0x12b
fdrop(fffff0806f327468,ffff80002a23c800) at fdrop+0x121
closef(fffff0806f327468,ffff80002a23c800) at closef+0x192
fdfree(ffff80002a23c800) at fdfree+0x116
exit1(ffff80002a23c800,0,0,1) at exit1+0x576
sys_exit(ffff80002a23c800,ffff80003c3d7910,ffff80003c3d7860) at sys_exit+0x1a
syscall(ffff80003c3d7910) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7d2ad3768ce0, count: -16
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c3d7370
rbx               0xffff80002999ee07
rdx                                0
rcx               0xffff80002a23c800
rax               0xffff80002999dff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x868da7069abf7d85
r11               0x2f917a3b5c28928e
r12               0xffff80002999ec08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff821d1f05    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c3d7360
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=37739 pid=902 tcnt=0 stat=onproc
    flags process=1018<EXITING,SUGID,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=81, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80002a23c800 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff800030f90a90,0xffff80002a23d270
    process=0xffff80002a22c4f8 user=0xffff80003c3d2000, vmspace=0xfffff08077c4a9a0
    estcpu=31, cpticks=6, pctcpu=0.5, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 20353  357181  34550      0  7           0                syz-executor
 20611  300615  31402      0  2           0                syz-executor
 49805  430658  15190      0  2         0x2                ifconfig
 57652  230748  16576      0  2    0x100002                sh
 15190  176347  92578      0  3    0x10008a  sigsusp       sh
 92970  391548  66711      0  2           0                syz-executor
 92970  422388  66711      0  3   0x4000000  smrbar        syz-executor
 92970   34229  66711      0  3   0x4000080  fsleep        syz-executor
 16576  141602  47063      0  3        0x82  wait          syz-executor
 92578  163554  47063      0  3        0x82  wait          syz-executor
  6864   39370      0      0  3     0x14280  nfsidl        nfsio
 61604  147609      0      0  3     0x14280  nfsidl        nfsio
 24827  227121      0      0  3     0x14280  nfsidl        nfsio
 32080  424171      0      0  3     0x14280  nfsidl        nfsio
 42102   85826      0      0  3     0x14280  nfsidl        nfsio
 38725    6007      0      0  3     0x14280  nfsidl        nfsio
 27449   14337      0      0  3     0x14280  nfsidl        nfsio
 58564  333639      0      0  3     0x14280  nfsidl        nfsio
 54679  228636      0      0  3     0x14280  nfsidl        nfsio
 45189  294683      0      0  3     0x14280  nfsidl        nfsio
 64970  378477      0      0  3     0x14280  nfsidl        nfsio
 51882  302500      0      0  3     0x14280  nfsidl        nfsio
 16228   79716      0      0  3     0x14280  nfsidl        nfsio
 28636  152273      0      0  3     0x14280  nfsidl        nfsio
 26253  473683      0      0  3     0x14280  nfsidl        nfsio
   403  206537      0      0  3     0x14280  nfsidl        nfsio
  6506  501290      0      0  3     0x14280  nfsidl        nfsio
 44631  143230      0      0  3     0x14280  nfsidl        nfsio
 82724  295812      0      0  3     0x14280  nfsidl        nfsio
 12394  505080      0      0  3     0x14280  nfsidl        nfsio
 31402  280559  47063      0  3        0x82  nanoslp       syz-executor
 66186  215190  47063      0  3        0x82  piperd        syz-executor
 58659  501119  47063      0  3        0x82  nanoslp       syz-executor
 66711  229938  47063      0  3        0x82  nanoslp       syz-executor
 12586  365982  47063      0  3         0x2  biowait       syz-executor
 34550   51496  47063      0  3        0x82  nanoslp       syz-executor
 47063  124184      1      0  2         0x2                syz-executor
 62531  101487      0      0  3     0x14200  bored         smr
 84368  251658      0      0  2     0x14200                zerothread
  1679  118435      0      0  3     0x14200  aiodoned      aiodoned
 59578  152776      0      0  3     0x14200  syncer        update
  3149  143697      0      0  3     0x14200  cleaner       cleaner
 19688  424302      0      0  3     0x14200  reaper        reaper
 57781  447602      0      0  3     0x14200  pgdaemon      pagedaemon
 27025  327918      0      0  3     0x14200  bored         viomb
 51378  143991      0      0  3  0x40014200  acpi0         acpi0
  6194   22408      0      0  3  0x40014200                idle1
  5553  201198      0      0  3     0x14200  bored         softnet1
 43256  108243      0      0  3     0x14200  bored         softnet0
 43568  165978      0      0  3     0x14200  smrbar        systqmp
 32900  398382      0      0  3     0x14200  bored         systq
 63539  468147      0      0  3     0x14200  tmoslp        softclockmp
 49754  113736      0      0  3  0x40014200  tmoslp        softclock
 90227  257063      0      0  3  0x40014200                idle0
     1  460166      0      0  4  0x58000082                init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 12586 (syz-executor) thread 0xffff8000ffffc7d0 (365982)
exclusive rrwlock inode r = 0 (0xfffff0806e5d9120)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x279
#7  ufs_mkdir+0xfc
#8  VOP_MKDIR+0x101
#9  domkdirat+0x179
#10 syscall+0xb17
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffff0806d553b18)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vfs_lookup+0x12b
#6  namei+0x7c5
#7  domkdirat+0x8b
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 43568 (systqmp) thread 0xffff8000ffffe7c8 (165978)
shared rwlock systqmp r = 0 (0xffffffff83943138)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11093  12216K   12404K 166960K     12987        0
            pcb    17     14K      16K 166960K       226        0
         rtable   179     12K      13K 166960K       519        0
             pf    41     19K      24K 166960K       165        0
         ifaddr    34      5K       7K 166960K        86        0
        ifgroup    52      2K       2K 166960K       130        0
         sysctl     4      1K       9K 166960K        14        0
       counters    70     36K      37K 166960K       136        0
       ioctlops     0      0K       4K 166960K      1688        0
            iov     0      0K      20K 166960K        34        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1475     93K      93K 166960K      2195        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2     20K      32K 166960K        23        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        31        0
        dirhash    12      2K       3K 166960K        24        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    16     61K      93K 166960K       793        0
          sigio     0      0K       0K 166960K         8        0
           proc    20     33K     180K 166960K       726        0
        subproc    72      4K       4K 166960K       109        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        70        0
       in_multi    67      5K       6K 166960K       146        0
    ether_multi     1      0K       0K 166960K         8        0
            mrt     1      0K       0K 166960K        30        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   235   1049K    1049K 166960K       235        0
           exec     0      0K       1K 166960K       493        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap    98     79K     176K 166960K      8825        0
       UVM aobj    36      2K       2K 166960K        37        0
     pinsyscall    17     34K     104K 166960K      2081        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        15        0
            NDP    11      0K       1K 166960K        56        0
           temp    54   9118K    9175K 166960K     39838        0
         kqueue     1      2K      34K 166960K       158        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       72    0       72     1     0     1     1     0     8    1
rtentry    176      152    0       84     5     0     5     5     0     8    0
unpcb      144      588    0      588     4     1     3     3     0     8    3
syncache   336       10    0       10     1     1     0     1     0     8    0
tcpcb      736      222    0      221     4     3     1     4     0     8    0
arp        136       23    0       11     1     0     1     1     0     8    0
inpcb      328      772    0      770     7     3     4     7     0     8    3
nd6        152       34    0       19     1     0     1     1     0     8    0
pkpcb       40       70    0       70     1     1     0     1     0     8    0
kcovpl      48       12    0        4     1     0     1     1     0     8    0
ppxss      1192      22    0       21     1     0     1     1     0     8    0
pppxif     1576       5    0        4     2     1     1     1     0     8    0
pfstscr     40       75    0       73     1     0     1     1     0     8    0
pffrag     232        3    0        0     1     0     1     1     0   482    0
pffrnode    88        3    0        0     1     0     1     1     0     8    0
pffrent     40        4    0        1     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       4    0        1     1     0     1     1     0     8    0
pfanchor   1288      10    0        7     1     0     1     1     0     8    0
pftag       88        2    0        0     1     0     1     1     0     8    0
pfqueue    320        1    0        1     1     1     0     1     0     8    0
pfstitem    24       59    0       15     1     0     1     1     0     8    0
pfstkey    128      197    0      153     2     0     2     2     0     8    0
pfstate    448      130    0       86     6     0     6     6     0     8    0
pfrule     1360      29    0       23     2     1     1     2     0     8    0
rttmr      136        3    0        3     1     0     1     1     0     8    1
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      745    0      399    29     2    27    29     0     8    2
art_table   40      747    0      399     5     0     5     5     0     8    0
art_node    32      152    0       91     1     0     1     1     0     8    0
sysvmsgpl   40        7    0        4     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl      72       27    0       17     1     0     1     1     0     8    0
shmpl      112       34    0        1     1     0     1     1     0     8    0
dirhash    1024      25    0        8     3     0     3     3     0     8    0
dino2pl    256     2723    0     1247    93     0    93    93     0     8    0
ffsino     296     2723    0     1247   115     0   115   115     0     8    0
nchpl      144     3804    0     2097    64     0    64    64     0     8    0
rtmask      32        2    0        2     1     1     0     1     0     8    0
vnodes     216     3461    0        0   193     0   193   193     0     8    0
namei      1024   12648    0    12647     2     1     1     2     0     8    0
percpumem   16       83    0       33     1     0     1     1     0     8    0
pfiaddrpl  120        1    0        0     1     0     1     1     0     8    0
kstatmem   264       75    0       50     3     1     2     3     0     8    0
scsiplug    72        5    0        5     2     1     1     1     0     8    1
scxspl     216    16834    0    16833    13     5     8     8     1     8    7
plimitpl   152      184    0      166     1     0     1     1     0     8    0
sigapl     424     1140    0     1073     8     0     8     8     0     8    0
knotepl    120      701    0        0    22     0    22    22     0     8    0
kqueuepl   224      236    0      235     3     2     1     3     0     8    0
pipepl     344      177    0      150     3     0     3     3     0     8    0
fdescpl    528     1103    0     1085     3     0     3     3     0     8    0
filepl     160     6183    0     6030    18     3    15    18     0     8    5
lockfpl    104      310    0      309     1     0     1     1     0     8    0
lockfspl    48      134    0      133     1     0     1     1     0     8    0
sessionpl  144       53    0       44     1     0     1     1     0     8    0
pgrppl      48       70    0       53     1     0     1     1     0     8    0
ucredpl    104      965    0      951     1     0     1     1     0     8    0
zombiepl   144     1087    0     1073     1     0     1     1     0     8    0
processpl  1232    1140    0     1073     6     0     6     6     0     8    0
procpl     664     2184    0     2115     8     0     8     8     0     8    1
sosppl     176        3    0        3     1     1     0     1     0     8    0
sockpl     752     1528    0     1526    11     3     8    11     0     8    7
mcl64k     65536      6    0        0     1     0     1     1     0     8    0
mcl16k     16384     11    0        0     2     0     2     2     0     8    0
mcl12k     12288      3    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     127    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      29    0        0     4     0     4     4     0     8    0
mtagpl      96        4    0        0     1     0     1     1     0     8    0
mbufpl     256      212    0        0    13     0    13    13     0     8    0
bufpl      272     7002    0      871   409     0   409   409     0     8    0
anonpl      32     7677    0        0    62     0    62    62     0   246    0
amapchunkpl 152   28258    0    28017    37     9    28    36     0   158   13
amappl16   200     2485    0     2467    21    14     7    15     0     8    4
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184      466    0      464     1     0     1     1     0     8    0
amappl13   176      143    0      143     1     0     1     1     0     8    1
amappl12   168     1374    0     1360     2     0     2     2     0     8    0
amappl11   160        4    0        4     1     1     0     1     0     8    0
amappl10   152       65    0       65     1     0     1     1     0     8    1
amappl9    144      275    0      275     1     1     0     1     0     8    0
amappl8    136      109    0      107     1     0     1     1     0     8    0
amappl7    128      174    0      172     1     0     1     1     0     8    0
amappl6    120      185    0      181     1     0     1     1     0     8    0
amappl5    112      121    0      120     1     0     1     1     0     8    0
amappl4    104      330    0      327     1     0     1     1     0     8    0
amappl3     96     5787    0     5732     4     0     4     4     0     8    0
amappl2     88      638    0      629     2     0     2     2     0     8    0
amappl1     80    15501    0    15409    17     3    14    17     0     8    5
amappl      88     7850    0     7764     5     0     5     5     0    92    0
uvmvnodes   80      125    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       36    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1103    0     1085     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1103    0     1085     1     0     1     1     0     8    0
vmmpekpl   168    11324    0    11278     3     0     3     3     0     8    0
vmmpepl    168    79460    0    78796   101     7    94   101     0   357   52
vmsppl     488     1102    0     1085     5     1     4     5     0     8    0
rwobjpl     80    24123    0    23695    28     2    26    27     0     8    2
pdppl      4096    2213    0     2170   113    66    47    85     0     8    4
pvpl        32    14446    0        0   118     1   117   117     0   265    0
pmappl     256     1102    0     1085     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      707    0       76    19     0    19    19     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff838d9ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839e6d40) at __mp_lock+0x192
intr_handler(ffff80002a24e720,ffff8000002a3480) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff839e6d40) at __mp_lock+0x192
syscall(ffff80002a24e8f0) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7edfbaf2cdc0, count: 6
ddb{0}>