last executing test programs: 5.051239171s ago: executing program 7 (id=247): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x23, 0x40}, {0x8, 0x9}], 0x2}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x40, 0xf8, 0x0, 0x0, 0x4}, 0x10000000006, 0x7, 0x11, 0x2, 0x60000000002004, 0x0, 0x0, 0x1000000000000002, 0x0, 0xb2d, 0x0, 0x6}) (async) r1 = semget$private(0x0, 0x3, 0x92) (async) r2 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) (async) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000002c0)={{r2, r3, r4, r5, 0x100, 0x1}, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x1}) (async) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffff9c, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x2, 0xfffffbff, 0x0, 0x8, 0x75a6, r6}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r7 = socket(0x11, 0x3, 0x0) sendto$unix(r7, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 5.008696117s ago: executing program 7 (id=249): bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x80, 0x1, './file0\x00'}, 0xa) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0xff, 0x1, 0x9}, {0x25, 0x0, 0x2, 0x4}, {0x80, 0x9, 0xf7, 0x100}, {0x6, 0x1, 0x9, 0x9}, {0x9b1e, 0xff, 0xf4, 0x4000800}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6500000019324b9b7a065af1faf4a1532d36083c8c73a28ce546affff7f80ffffffff51d886fc83b4e42b47bfc59f", &(0x7f0000000000)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0xf, 0x0, 0x6f, 0x8}, {0x5b8, 0x1, 0x2, 0x5}, {0xe7fe, 0x5, 0xa0, 0x101}, {0xfff7, 0x3, 0x9, 0xfffffffd}]}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffffff9, 0xffff63db, 0x9, 0x4, 0x8, 0x8007c, 0x80000000, 0x10, [{0x400008, 0x10000, 0xfffff115, 0x80000002}, {0x0, 0xffffffff, 0x200100, 0xffd}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x6, 0x8020fe, 0xf, 0x2000100}, {0x6, 0x2000007, 0x5, 0x5}, {0x3993, 0xfffd, 0x8, 0x40000009}, {0x10004, 0xa00, 0x3, 0xfffffffb}, {0x207, 0xffffffff, 0x228000, 0xffffe2e9}, {0x9, 0x1000, 0x5, 0x7fff}, {0x3, 0x1, 0x7, 0xfffffd76}, {0x3, 0x0, 0x8a3a0004, 0x2000a}, {0x10000, 0x0, 0x4, 0xa6a}, {0x8, 0x0, 0x7f, 0x4}, {0x3, 0x22, 0xfffffffd, 0x6f5fc48f}, {0x3, 0xff, 0x3, 0x9}, {0x9be2, 0x5, 0x0, 0xb}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000100)="0000d9ba0000000000000000000000000300000096a128a6ebc112d0326ed214360896946b47abf40028779be72456043033ddd0274307ec4ab95fee3d5db5f5ccc8f064ef968da56792d51764707e7f6a9796ee9ae970faf1ef2a92cdb632d7b8cb49b57abe7bb610b5a362863f96f7e12e02000000000000732f184afbffffffffffffff095e5a04cf4a4176c6f6e67c1a39dc09a5d3", 0x97) 5.001203718s ago: executing program 7 (id=252): getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x7fffffff, 0x3, 0x9, "01000000d000", 0x400, 0x4}) syz_emit_ethernet(0x74b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000580)={0x2, 0x2, 0x4, 0x10000, "000800000a00000f000000aff0338a6b4fc6d780", 0x4, 0x7}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3ffffffffffffdf3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) setreuid(r0, 0xee01) 4.925696449s ago: executing program 7 (id=254): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fstatat(r0, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00), 0x4) r1 = syz_open_pts() r2 = syz_open_pts() ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000000580)={0x4, 0xee}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800}) ioctl$TIOCSTOP(r1, 0x2000746f) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, "0100042d49c3577b00005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000000a80)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x7f, 0x3, 0xf, 0x1, 0x4, 0x4, 0x7, 0x1, 0x2, 0x4, 0x7}) r4 = open(&(0x7f0000000300)='./bus\x00', 0x200, 0xa0) r5 = kqueue() r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$DIOCXBEGIN(r6, 0xc0104451, &(0x7f0000000200)={0x33, 0x408, &(0x7f0000000300)=[{0x1, '\x00', 0x1081}]}) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x11, 0x4, &(0x7f0000000340), 0x0) r8 = open$dir(&(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x80) r9 = openat$pf(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$DIOCRGETTSTATS(r9, 0xc4504440, &(0x7f0000000480)={{'./file0\x00', './file0\x00', 0x2, 0x6}, 0x0, 0x5, 0x0, 0x4, 0xbfb5, 0x9, 0x8, 0x2, 0x1}) r10 = openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r11 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) kevent(r5, &(0x7f0000000240)=[{{r8}, 0xfffffffffffffffe, 0x0, 0x4, 0x6, 0xffff}, {{r6}, 0xfffffffffffffff7, 0x71, 0x40, 0x1, 0x2}, {{r6}, 0xfffffffffffffffa, 0x9f, 0x1c0000021, 0x4, 0x1}, {{r6}, 0xfffffffffffffffa, 0x40, 0xf0000000, 0x9, 0x1}], 0x100, &(0x7f0000001bc0)=[{{r9}, 0xfffffffffffffff8, 0x52, 0x40000000, 0x5, 0xffffffffffffffff}, {{r10}, 0xfffffffffffffff9, 0x4, 0x10, 0x6, 0x8000}, {{r10}, 0xfffffffffffffffa, 0x30, 0x8, 0xee0, 0x6}, {{r4}, 0xfffffffffffffffa, 0x4, 0x40000003, 0x8, 0xfffffffffffffff9}, {{r7}, 0xfffffffffffffffd, 0xc, 0x4, 0xfffffffffffffffc, 0x4ca}, {{r5}, 0xfffffffffffffff7, 0xef, 0x1, 0x5, 0x8000000000000000}, {{r5}, 0xfffffffffffffff6, 0x10, 0x20, 0x8}, {{r11}, 0xfffffffffffffff8, 0x41, 0x4, 0x21, 0x7f}], 0x7, 0x0) ioctl$TIOCSFLAGS(r4, 0x8004745c, &(0x7f0000000000)=0xfffffff9) syz_open_pts() 4.899615056s ago: executing program 7 (id=258): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5790ca6cc32be3d62952e0cc3cd2d3da3b000000000000f1016e6e81e60c69408d0e5eb488d9a4f836b66b966879748a51b90be3e53627015a2a14557ad05e05f4f17d0d5daef0b3990c", 0xfe7d}], 0x1) readv(r1, &(0x7f0000003b80)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x2) 4.692260853s ago: executing program 7 (id=262): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) mknod(0x0, 0x2000, 0x200) (async) mknod(0x0, 0x2000, 0x200) listen(r0, 0x7fff) setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) setsid() (async) r2 = setsid() r3 = syz_open_pts() ioctl$TIOCSTOP(r3, 0x2000746f) (async) ioctl$TIOCSTOP(r3, 0x2000746f) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000740)="84e122b3", 0x1f38}], 0x1) setpgid(r2, r2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @random="aa6d6500", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x3c, 0x67, 0x0, 0x0, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8200, 0x0, 0xfffc, {[@md5sig={0x13, 0x12, "7d8649600c13b6f5c375afebeb0a9161"}]}}}}}}}) 2.710795266s ago: executing program 1 (id=354): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000001480)=[{0x8040, 0xf4, 0xff, 0xffffffff}]}) r0 = socket(0x18, 0xc003, 0x7) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x65, 0x0, 0x0) 2.708881311s ago: executing program 1 (id=357): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2, 0xfffffffffffffff7, 0x3, 0x0, 0x80000000004, 0x400000000009, 0x0, 0x4701}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r0, 0xc0107008, &(0x7f00000000c0)) r1 = syz_open_pts() r2 = msgget$private(0x0, 0x200) msgctl$IPC_STAT(r2, 0x2, &(0x7f00000001c0)=""/111) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x2ff, 0x100000001}) openat$audioctl(0xffffffffffffff9c, &(0x7f0000001800), 0x40, 0x0) fcntl$lock(r1, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000005}) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) recvmsg(r0, &(0x7f00000017c0)={&(0x7f0000000200)=@in, 0x10, &(0x7f0000001640)=[{&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f00000003c0)=""/47, 0x2f}, {&(0x7f0000000400)=""/76, 0x4c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/170, 0xaa}, {&(0x7f0000001540)=""/128, 0x80}, {&(0x7f00000015c0)=""/32, 0x20}, {&(0x7f0000001600)=""/25, 0x19}], 0x9, &(0x7f0000001700)=""/183, 0xb7}, 0x1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) getpeername$inet(r0, &(0x7f0000001840), &(0x7f0000001880)=0x10) select(0x40, &(0x7f0000000080)={0x8, 0x7, 0x88a, 0x1, 0x80000000, 0x0, 0x3, 0x9}, &(0x7f00000000c0)={0x9cf0, 0x9, 0x57, 0x7, 0x4, 0xffffffffffffffb7, 0xe63, 0xfff}, &(0x7f0000000140)={0x7, 0x7fffffff, 0x8, 0x6, 0x3, 0x5, 0x5, 0x3}, &(0x7f0000000180)={0x865b, 0x8}) 2.655807377s ago: executing program 1 (id=363): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x1000, 0x0, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2eff, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0x0, 0x80000001, 0x8000000000000000, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001, 0x4], [0x5ad8, 0x7f, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x9, 0xfffffffffffffffe, 0x6], [{0x4, 0x4, 0xffffffff, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x48}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x40000000008}, {0x0, 0x2106, 0x40040, 0x2000000000000000}, {0xf054, 0x0, 0x1, 0x1}, {0x8, 0x1, 0x0, 0x2}], {0x8002, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000002340), 0x20, 0x0) ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000100)={{'./file0\x00', './file0\x00', 0x5b, 0x7f}, 0x0, 0x34, 0x0, 0x0, 0xc, 0x7fe, 0xc3a4, 0x12, 0x3}) r2 = kqueue() r3 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(0xffffffffffffff9c, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x8) ioctl$DIOCSETSYNCOOKIES(r1, 0xc0014462, &(0x7f0000000580)) getsockopt$sock_int(r3, 0xffff, 0x100, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe01) r4 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) r5 = socket(0x18, 0x1, 0x0) r6 = syz_open_pts() ioctl$TIOCCONS(r6, 0x80047462, &(0x7f0000000040)=0x10) r7 = syz_open_pts() ioctl$TIOCCONS(r7, 0x80047462, &(0x7f0000000100)=0x2) getsockopt(r5, 0x29, 0x1b, 0x0, 0x0) kevent(r2, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x3}, 0x4, &(0x7f0000000040)="e07feb87cc802f0369015c8c4250f49a21b4900690d84823f1e8921b00c470605dfdc1a83aa2b658ac", &(0x7f0000000140)=0x29, 0x0, 0x0) closefrom(r0) 2.568367797s ago: executing program 1 (id=366): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0xa}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x5, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800200, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r1, 0x7) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) listen(r1, 0x6) poll(&(0x7f0000000000), 0x35, 0x0) close(r0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) syz_open_pts() (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0xa}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x5, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800200, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) listen(r1, 0x7) (async) socket$unix(0x1, 0x1, 0x0) (async) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async) listen(r1, 0x6) (async) poll(&(0x7f0000000000), 0x35, 0x0) (async) close(r0) (async) 2.549394109s ago: executing program 1 (id=369): select(0x40, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xfffffffeffffffff, 0x3, 0x210, 0x200000008, 0x400007}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x40, 0x285b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x132) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = socket$inet(0x2, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() r4 = semget(0x0, 0x0, 0x1d8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r7, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r6, r7, 0x8f, 0x9, 0x0, 0x0, 0x4}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) fstat(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, r8) sysctl$kern(&(0x7f0000000000)={0x1, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r3) syz_open_pts() ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000000)=0x1d) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x100007) r9 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r9, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) unveil(0x0, &(0x7f0000000200)='w\x00') bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x0, 0x200}, 0x10) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000040)=0x1) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000240)="5174bd36e66d1672b7b06e4f938fca786b8d00ed11655a8f4b5703b5b7b43b07809146f0f865c73765b5615adc028aef889d2cbe2a772e9ce5b680b55e16cf9abded214acb6f53a36b4936f4c9a23d0032886e9e474c08bcc97e0e", 0x5b}, {&(0x7f00000002c0)="0b68c477c3b1ccc0699c30bf6ca3cf5ec54372ab0d77e30678aa6edf92a928a894e294800189718b8b34f87b6dd7b640d9bffd9d6bd1568e7c65423ab3df5048eba62ba5f2e004da00ec0552c73a6b2ae9b466bfaea801292228d07c3eb4f528ea9800105ae0ebcacd08f647d65034fbc08fe0cb0301a144e9ce7015c5c287447b785205f0b875e7d5de76782e3d4439ab448f502b25", 0x96}, {&(0x7f0000000380)="c9edc55acaba9feb47a0b89807a3aded5473cc9edadad1c1162e2b3821443012867f", 0x22}, {&(0x7f00000003c0)="a3ea746caa46a86ab0631270844e363ae586149466f91957ad31d0377c8960809c32fa00fcc9ecb984de31c4fe4b1615f718e1c5081072f5ddc705e7d94828fce8885d38c76ba5288f1cb8654b44f1dc4e71f1ba6fd3230e4f30281cb08bca729a6cebf9cecc021dc8f946a7697891fe7772cb546838a25db80ed00805111e23aecbe238ed8ca79a73afb52e400b0c550bc098fc5da5857f829a578b45ba964d4b2e290fa57efaae14b2990ec468ad715747006e5e381f4559502f4cd20ff480", 0xc0}, {&(0x7f0000000480)="2941020c0fa4f4fcc1478c302ecbc3e2a451d86547aa6526ffba4d14c186c6ffb293deb34efbccf6b44b500a9bd5fff1e843bcaff28ede2a2bc60126500868be54d58aaa7f6eeb2f4af6091b66c2064440badec5abf75f23f4ec1fab56ae9863bb78b38bf23a99c94faa5e3cdae9697cfdf0d3bdf777becbdae99898e273aa743239c6475863f33abc974798bc8cb200c9c6c858b78eeaac03bc4ff9a9918979714cb6c41c7316678ed112e5a675255b7396fb8a2d95f6962b5ee92df014460d884289836dcd0bb13c523c05e8c5ebcb14c15c2beee77b6b7eac4e6affeb16285c742157523feb36", 0xe8}, {0xffffffffffffffff}], 0x6) 2.265571425s ago: executing program 1 (id=381): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x7ffffffd, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x44, 0x3effd}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) syz_open_pts() (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000200)={0x80, 0x800, 0x800, 0x0, "cb962592b2baeed20a2296685b81de9f71e03bff", 0x8, 0x8}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) (async) open(0x0, 0x20, 0x190) (async) unveil(0x0, &(0x7f0000000180)='w\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003f00)={0x9, 0x20fdc7}) 1.807616562s ago: executing program 4 (id=404): select(0xf568f7a24c336c93, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ftruncate(0xffffffffffffffff, 0x8531) setreuid(0xee00, 0x0) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) access(&(0x7f0000000000)='./file0\x00', 0x2) socket(0x18, 0x1, 0x6) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x2, 0x1, 0xa}, {0x20, 0xc9, 0xfe, 0x8}, {0x9b1e, 0x22, 0xf, 0x40203ff}]}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="c2a6500000019324b9b7a065af1faf4a1532d36083c8c73a28ce546a06907f80ffffffff51d886fc83b4e42b47", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[]) r2 = accept$unix(0xffffffffffffff9c, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x8) getsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000100)) 1.807299462s ago: executing program 4 (id=405): pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000280)=0xe7ff0001) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0xff, 0x1, 0x9}, {0x2, 0xc9, 0x2, 0x8}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000400)={0x2, &(0x7f0000000000)=[{0x24, 0x0, 0x1, 0x4}, {0x6, 0xff, 0xe4, 0x40007fc}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6500000019324b9b7a065af1faf4a1532d36083c8c73a28ce546a06907f80ffffffff51d886fc83b4e42b47bfc59f", &(0x7f0000000000)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r1, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) write(r0, &(0x7f0000003800)=',', 0xffffffce) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ftruncate(r1, 0x7ff) r3 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r3, 0xc1206949, &(0x7f00000001c0)) getsockopt$sock_int(r2, 0xffff, 0x1007, &(0x7f0000002480), &(0x7f0000000080)=0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000380)={0x7, 0x4b, 0xd, 0x5, "03ec0009007f88000000000000b500", 0x1108a, 0x1f}) r4 = open$dir(&(0x7f0000000240)='./file0/file0/file0\x00', 0x8, 0x284) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000), 0xfdf8}], 0x1) open(&(0x7f0000000200)='./file0/file0\x00', 0x800, 0x0) 1.563946239s ago: executing program 0 (id=407): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000080)='V<[e', &(0x7f0000000000)=0x4, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0xfffc, 0x0, 0x8, 0x11, 0xf0, @multicast1, @multicast1}}}}}}) r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x8) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad9003037008fd8b0e5602493ff1f88b029e0ad0c35ff020000000000000000000000000001"]) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6802) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xc}, 0x4, &(0x7f0000000100)="bfcff3e9c32f533df2f019f98f1421b0f4d088c14e5f1f93e874d6d9ad39d79c14855b63213b86c8bb0e1733a68bce93572f98b3de7f2010ddf6989af3c01a534e04a963fdd6aeaa6a1a8a54f48529df93fe7699e3c2484e310ffbea56db11f6135d09c90e7df65832c60605d6e2299f3850fd636003bf7aad44f47152e0d417f73eea84059067bb12c875d6889b7261be657ddb6a62ed5790d470c809040d46398f8de1d7756619d8c0dfb6a9229fa3f4715ff180dae62814bbd8d15c40d6d2f92e5983c9ec4c9bea463763257747b9342111d1a2543bd50584c7", &(0x7f0000000240)=0xdb, &(0x7f0000000280)="af348fdbc46e69596922786eadf7138811e6a2c2a0f9f6855c4dd00e17016db072baa2ffbeaebfc2243b5ccabfbe54646518f0d9f1aa6ddb6cc1143e631022d0d45f5881eb3e9bed1497d12a29411433f486be9d20e7d3155ca21d8a95364faf5b6f74113f1b2338af6afb8838e88ae854744bce2e626fea6d20ed8f596b7a6cdb116a4a972e416b1193da7fd80ced4f2e5c8115db3ce07770353403932ac91b5c57493367ca40791a651a5b0dcc0ec621b46bf5d8728803e8b8334fac8a80b26bc7276af8", 0xc5) 1.562743196s ago: executing program 0 (id=408): open(&(0x7f0000000140)='./file0\x00', 0x2, 0x20) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) kqueue() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000180)={'./file0\x00', 0x2, 0x10000, 0xd5e, 0x0, 0x2, 0x3ff, 0x200, 0x2, 0x2, 0x21, 0x1}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) socket(0x18, 0xc003, 0x3a) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x6, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto(r2, 0x0, 0x0, 0x4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = dup(r3) connect$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x80000001}, 0x10) write$audio(r4, 0x0, 0x0) setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) 1.562498903s ago: executing program 0 (id=409): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)=""/133, 0x85}], 0x1, 0x0}, 0x1840) closefrom(r0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 1.273120575s ago: executing program 0 (id=410): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01864c1, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}) ppoll(&(0x7f0000000080)=[{r0, 0x8}, {r1, 0x2}, {r2, 0x8}, {r1, 0x100}, {r0, 0x8}, {r1, 0x100}, {r0, 0x100}, {r0, 0x2}], 0x8, 0x0, &(0x7f00000000c0)={0x6}) 938.714887ms ago: executing program 3 (id=432): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0xe, &(0x7f0000000000), 0x0) socket(0x18, 0x3, 0x7) (async) r2 = socket(0x18, 0x3, 0x7) setsockopt(r2, 0x1000000000029, 0x3e, &(0x7f0000000780), 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v6=@rand_addr="54d00c1a5b0cbdf72e40eb4989e8d249", @v6=@empty], [0xd, 0x40], 0x0, 0x2}, {[@v4=@remote={0xac, 0x14, 0x0}, @v4=@multicast2], [0x46, 0x800], 0x2006, 0x18}], {{0x244, 0xe8, 0xfa, 0x5}, 0x6543, 0x409, 0xfff00000, 0x7b3e, 0x800, 0x17, 0x7}, {{0x0, 0x7, 0x1, 0x5}, 0x8001, 0x10, 0x10007, 0x6, 0x3fd, 0xf0, 0xfd}, @v6=@rand_addr="44d2a996e7799d0f4eeb22f1456d36d7", 0x4, 0xffffffff, 0x2, 0x1000000, 0x5, [[0x400008, 0xd], [0x5, 0x8344]], [[0xfc000002, 0x4], [0xfffffff7, 0x10003]], 0x9, [0x1d9, 0x77], 0x1, 0x18, 0x5, 0x1, 0x0, 0x3, 0xc, 0x83, 0x5, 0x8, 0x1, 0xce57}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setuid(0xee01) (async) setuid(0xee01) bind$unix(0xffffffffffffffff, 0x0, 0x0) semget(0x0, 0x1, 0x281) (async) r4 = semget(0x0, 0x1, 0x281) semctl$IPC_SET(r4, 0x0, 0x1, 0x0) semget(0x0, 0x0, 0x8b) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) (async) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) r5 = kqueue() closefrom(r5) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0xad) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0xd4) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000680), 0x40881, 0x0) ioctl$DIOCRADDTABLES(r6, 0xc450443d, &(0x7f0000000b00)={{'./file1\x00', './file0\x00', 0x14, 0xec}, 0x0, 0x428, 0x0, 0xb44e, 0xe, 0x7ff, 0x6, 0x0, 0x1}) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) 899.393505ms ago: executing program 4 (id=436): setresuid(0x0, 0xee00, 0x0) r0 = msgget$private(0x0, 0x1c8) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xcf, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x0, 0x0, 0x4, 0x1, 0x15, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x1}) msgrcv(r0, 0x0, 0x0, 0x0, 0x800) sysctl$kern(&(0x7f0000001700)={0x1, 0x41}, 0x2, &(0x7f0000001740)="f926245c", &(0x7f00000017c0)=0x4, 0x0, 0x0) 842.208727ms ago: executing program 4 (id=441): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCSTOP(r0, 0x20004402) ioctl$DIOCXROLLBACK(r0, 0xc0104453, 0x0) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xb, 0x4, 0x0, 0xc13}, {0xb, 0x7, 0x0, 0x10001}, {0x6, 0x8, 0x45}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8020691f, &(0x7f00000001c0)) ioctl$DIOCSETTIMEOUT(r0, 0xc008441d, &(0x7f00000035c0)={0xf}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xd7a1, 0xb, 0x9, 0x2}]}) 831.109183ms ago: executing program 4 (id=444): setuid(0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206918, &(0x7f00000001c0)) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) r1 = socket(0x2, 0x8002, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000000), 0xffffffffffffff04) r2 = socket(0x2, 0x8000, 0x0) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000040)="01000000", 0x4) 799.34025ms ago: executing program 4 (id=445): r0 = semget(0x0, 0x1, 0x281) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f00000000c0)=[{0x0, 0x8, 0x1800}], 0x1) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$TIOCSETVERAUTH(r3, 0x8004741c, &(0x7f0000000040)=0x5) r4 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCCHKVERAUTH(r4, 0x2000741e) r5 = syz_open_pts() syz_open_pts() syz_extract_tcp_res(&(0x7f0000000100), 0x8, 0x0) syz_emit_ethernet(0xde, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff807a5edbc30075b49d751a3c95c488ce820775d6a8840dbaedee965945b8d4303b07beeeeb68cafd6e5536bebb982010277848da9d9c2b061a98fb56c257b1241d7b1a81651d5c51f8359c1900892a7af4e839788943b8b87f07f9cd27e0cc8b813e60cf52768d0b168b998660b171db56aac2a55ef1071e4087eea2b47475ece9993afb640670417ba02f5b0b26024e3f19f89466df8af76f90ee5db7557931c82fb4c6383c35f209c156afdc327a4d0e7f838d3f3b5ac79ded11d36ab76ded2682e390f650b97e4e0043dbb0f9ee27208d"]) ioctl$TIOCOUTQ(r5, 0x40047473, &(0x7f0000000040)) select(0x40, &(0x7f0000000180)={0x0, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x3, 0x210, 0x200000008, 0x400007}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9e) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r7 = open(&(0x7f0000000340)='./file1\x00', 0x40, 0x12) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x80009, 0x80000001, 0x7, 0xd7, "0000000000000000000000000000000500", 0x5, 0x3}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x3}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r8, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(0xffffffffffffffff, 0xc0307004, &(0x7f0000000300)=0x401) semop(r0, &(0x7f0000000000), 0x0) r9 = syz_open_pts() syz_open_pts() readv(r9, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1) 591.539041ms ago: executing program 2 (id=461): r0 = socket(0x11, 0x3, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000001540)="9b0209c3", 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="b10005016000000416000b00070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000020000000000000000000000000000000000000001f00000000000800", 0xb1, 0x3a3ae0e0de5f5dda, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) fchmod(r0, 0x102) connect$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) setresuid(0xee00, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x21, 0x5}], 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f58f10939603ad903abf65b18d01000000000000000000000001000000af776665d4cd12c60034", 0x31}], 0x1, 0x0, 0x2, 0x2}, 0x40d) ioctl$TIOCSETA(r2, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) 580.254402ms ago: executing program 0 (id=465): chmod(&(0x7f0000000140)='./file1\x00', 0x145) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0xd}, 0x3, 0x0, 0x0, 0x0, 0x0) fchdir(r0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r1) unveil(&(0x7f0000000200)='.\x00', &(0x7f0000000100)='r\x00') 529.417658ms ago: executing program 0 (id=466): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xa819, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x18, 0x3, 0x102) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r1 = socket(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) select(0x40, &(0x7f0000000940)={0x7, 0xfffffffffffffff7, 0x9, 0x8, 0x1, 0xe4f9, 0x3, 0x1}, 0x0, &(0x7f00000009c0)={0xff, 0x9, 0x3, 0x7ffffffffffffffe, 0x0, 0x2, 0x6, 0x8}, 0x0) kqueue() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) ioctl$BIOCSETIF(r3, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000440)=@in6={0x1c, 0x18, 0x2, 0x0, "3894405089da4aa73a3e01849150f592", 0x1}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000480)="b68334e21ac6c428", 0x8}, {&(0x7f00000004c0)="b77558ffbf6cddb58c5e8d1a01c9f3752e0ed533dd361c16ebd3ca6db874e089", 0x20}], 0x2, 0x0}, 0x400) 528.938645ms ago: executing program 2 (id=468): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000040)) open(&(0x7f0000000240)='./file0\x00', 0x18289, 0xc) 527.419292ms ago: executing program 2 (id=470): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) shutdown(r0, 0x2) listen(r0, 0x1) r1 = socket(0x11, 0x3, 0x0) ioctl$DIOCRGETADDRS(0xffffffffffffffff, 0xc4504446, &(0x7f0000000540)={{'./bus\x00', './bus\x00', 0x20, 0x9}, &(0x7f0000000000)=[{@broadcast, '\x00', './bus/file0\x00', 0x0, 0x9, 0x2, 0x3, 0x7f, 0x9, 0x8}], 0x9, 0x1, 0x5, 0x8001, 0x8, 0x1, 0x44, 0x7}) setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) r3 = socket(0x18, 0x3, 0x40) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) syz_emit_ethernet(0x42, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT=r2, @ANYRESHEX, @ANYRES64=r4, @ANYRESOCT=r0, @ANYBLOB="3f8ecad44938bdd4a71e88a1c88b07ba87a460b98c1ab234ea349d7fcb5641989befcc63a611db9c2a9677ca099cd0ec1afa93169a73a4beb4af5e1b4dd55382aa27bcda0bb44da3f4a1bf534012dfc3bc1e0e5aa576413f9d5d2ebff54bde68a748bc28b220b7c05c8ad7ecb223ae0d3b3ceca255aa0843514c17559fac2006791660e675fc398bf483d9074e4d7e"]) 420.648369ms ago: executing program 2 (id=474): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b2000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x205}, 0x0) ioctl$TIOCSETA(r2, 0xc4504445, &(0x7f0000000740)={0x20008, 0xffffffff, 0x2, 0x7, "e9640000000100", 0x5, 0x4}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffff000001"], 0x18}, 0x0) sendmmsg(r0, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x0) shutdown(r1, 0x0) 412.580021ms ago: executing program 2 (id=477): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4000000000000054}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() setreuid(0x0, 0xee01) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(0x0, r4) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x766a, 0x7ff, 0xcfe, 0xffffff00, "9cdc4580307e080000006b08fc5f81e6015fdd04", 0x7, 0x9}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x2cd}], 0x1) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f0000000080)=0x82, 0x4) 374.058845ms ago: executing program 2 (id=478): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xc0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x6, 0x1142fa, 0x10000000, 0x0, 0xfe200005, 0x7, 0x7b9, 0x2, 0x1, 0xfffffffffffffffc, 0x2}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xcfc, 0x400001, 0x7, 0xd4, 0xa, 0x8001, 0x9c, 0x10, [{0x5, 0x9, 0x1, 0x7ff}, {0x7, 0x4, 0xffb}, {0x10000006, 0x2000f87, 0x0, 0x40007}, {0x5, 0x800, 0x7, 0xffffff}, {0x8, 0x1, 0x9, 0x10000}, {0xfffffff5, 0x1, 0x0, 0x8000494}, {0x9, 0xffffffff, 0x1003, 0x71}, {0x1f, 0x10008803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0x1, 0x800004b}, {0x2, 0x5, 0x3}, {0xfffffffa, 0x40, 0x400008, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x4, 0x3}, {0x0, 0x4, 0x7, 0x1ffffffb}, {0x4, 0x1, 0x4, 0xc3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) socket$inet(0x2, 0xc003, 0xdf) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000040)='.\x00', 0x35e) socket(0x6, 0x4000, 0xe) r3 = socket$inet(0x2, 0x1, 0x0) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000200)={0x10, 0x2, 0x1, 0x6c9a2be8}, 0x10) listen(r4, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0xa7}}}}}}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x2000007, 0xfffffffffffffffd, 0x27ffffffffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) 372.275719ms ago: executing program 5 (id=479): msgctl$IPC_SET(0x0, 0x1, 0x0) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0x2, 0x8}}) (async) r1 = socket(0x10, 0x5, 0x7) getsockopt$sock_int(r1, 0xffff, 0x1008, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000000040)=0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x7) madvise(&(0x7f0000552000/0x3000)=nil, 0x3000, 0x0) (async) r2 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000001a00)={{0x0, 0x0, 0x0, 0x0, 0x84, 0x7, 0x0, 0x0, 0x81}, 0x8, 0x0, 0x0, 0x6, 0x0, 0x200, 0x3, 0x1ff, 0x100000001, 0x8, 0x1}) (async, rerun: 32) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a}) (async) r4 = syz_open_pts() close(r4) (async) r5 = syz_open_pts() (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000000)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 32) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000180)={0x920e, 0x200000c, 0x6, 0xffffffd1, "08955c06000000000000000000011a0000000800", 0x4000000, 0x2}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) setuid(0xffffffffffffffff) (async, rerun: 64) r6 = getuid() (async, rerun: 64) r7 = getuid() setresuid(r6, r7, 0x0) (async) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000240)=""/242, 0xf2}], 0x1) (async) writev(r3, &(0x7f0000001400)=[{&(0x7f0000000200)="da897d48756e34", 0x7}], 0x1) socket(0x2, 0x4, 0x0) msync(&(0x7f000052a000/0x2000)=nil, 0x2000, 0x6) 371.87502ms ago: executing program 5 (id=480): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) (async, rerun: 32) kqueue1(0x10004) (async, rerun: 32) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x34, 0xa, 0x0, 0x410}, {0x3, 0x4, 0xf4, 0x7}, {0x1b16, 0x81, 0x9f, 0x80000000}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000240)=ANY=[]) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) (async, rerun: 32) readlinkat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="ffd4bed3feaf730800460000000000029078acb87ebbe000000294040001110090780200"/45]) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x3bbfc14f460a9dc5, 0xaa) 236.52807ms ago: executing program 5 (id=482): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r0, 0x0, 0x66, 0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x119) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async, rerun: 64) chroot(&(0x7f0000000040)='./file1\x00') (async) setuid(0xffffffffffffffff) (async) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000080)='c\x00') 236.243354ms ago: executing program 5 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) setuid(0xee01) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (rerun: 32) fchdir(r0) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0xc}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0x12}, 0x2, &(0x7f00000000c0)="0d5afff687ef6f96d4c4c0", &(0x7f0000000100)=0xb, &(0x7f0000000140)="dcfdcc4211b80f743f1c8125aeb73dc619fb844115b38ecfd10f6fdf129fa57c2bfd2f134775039a479df5e581c08c5dcb1ff042a44e557f2281be80f8325ba6dea73aa24f44aa0bf86b44b9bf8e2976411ba9a958322ee1a17e078473d3da4678383d9d40c8c289fd6a9ec2cdbe56026b77786bca03548c753e86052ed4d73ab4b3a605fca60dacfeefa98795709e45baf344ecdfb1f178c1a1a01290b7ec1d0c10fb3c3c0af0908e03e8692ca15358ed86892d4442474771e8e0569176b3270fb7", 0xc2) 233.969659ms ago: executing program 5 (id=485): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r2]) r3 = msgget$private(0x0, 0x116) msgsnd(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="0200"], 0x8, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000580)={{r4, 0x0, 0x0, 0x0, 0x4, 0x51f}, 0x0, 0x0, 0xbe7f, 0x602298e2, 0x3a6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}) msgrcv(r3, &(0x7f00000011c0)={0x0, ""/24}, 0x20, 0x2, 0x1000) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000080)={{r1, r2, 0x0, 0x0, 0x0, 0xa6}, 0x6c, 0x10000, 0x1, 0x41, 0x200000001, 0x80000000000000c, 0x0, 0x3f}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) 233.788516ms ago: executing program 6 (id=486): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000f0000000200", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="638802000000119a8c51f6f2efa24a85abdd612dd68e59ad4ecf9323100084410a8591426ee03e53", 0x30}], 0x1, 0x0}, 0x402) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0xff3f0000) 131.298603ms ago: executing program 5 (id=487): munmap(&(0x7f0000118000/0x3000)=nil, 0x3000) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x107) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x107) mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x406) openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0xd98, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0xd98, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000080)={@v6=@loopback, @v4=@remote={0xac, 0x14, 0x0}, @v4, @v6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x2, 0x7, 0x1, 0x9, 0x5, 0x2, 0x6, 0x3}) openat$wsmouse(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x3, 0xffffffffffffff9c) write(r2, &(0x7f0000000100), 0xfffffe5d) (async) write(r2, &(0x7f0000000100), 0xfffffe5d) 128.156674ms ago: executing program 6 (id=488): pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x40) (async) r1 = getpid() fcntl$setown(r0, 0x6, r1) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = setsid() fcntl$setown(r2, 0x6, r3) (async) kill(r1, 0x0) 121.884626ms ago: executing program 6 (id=489): r0 = semget(0x0, 0x0, 0x1d8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r2, r3, 0x8f, 0x9, 0x0, 0x0, 0x4}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) semop(r0, &(0x7f00000000c0)=[{0x0, 0x8, 0x1800}], 0x1) getpgid(0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) semctl$GETZCNT(r0, 0x4, 0x7, &(0x7f0000000000)=""/125) r6 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) r7 = socket$inet(0x2, 0xc003, 0xdf) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r8 = kqueue() kevent(r8, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x820007f, 0xa, 0x9, 0x0, 0x4, 0xd86, 0x40, 0x2, 0x0, 0x100002000642}) setitimer(0x2, &(0x7f0000000080)={{0x8000000000000001, 0xa0000000000003}, {0x4, 0x400000000006}}, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r9 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r9, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xcfc, 0x400001, 0x7, 0xd4, 0xa, 0x8001, 0x9c, 0x10, [{0x5, 0x9, 0x1, 0x7ff}, {0x7, 0x4, 0xffb, 0x80}, {0x10000006, 0x2000f87, 0x0, 0x40007}, {0x5, 0x800, 0x7, 0xffffff}, {0x9, 0xa, 0x9, 0x10000}, {0xfffffff5, 0x1, 0x0, 0x8000494}, {0x9, 0xffffffff, 0x1bb, 0x71}, {0x1f, 0x10008803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0x1, 0x800004b}, {0x2, 0x5, 0x3}, {0xfffffffa, 0x40, 0x400008, 0x5}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x4, 0x3}, {0x0, 0x4, 0x7, 0x1ffffffb}, {0xff, 0x1, 0x4, 0xc3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x2000007, 0xfffffffffffffffd, 0x27ffffffffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r9, 0x82907003, &(0x7f0000000140)=0x1) closefrom(r7) shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$SHM_UNLOCK(r6, 0x4) 121.713068ms ago: executing program 3 (id=490): sysctl$kern(&(0x7f0000000000)={0x1, 0x53}, 0x2, 0x0, 0x0, 0x0, 0x0) 84.923971ms ago: executing program 3 (id=491): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x6dc) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) syz_emit_ethernet(0xab, &(0x7f0000000340)={@random="34d9e3c6502d", @random="a346ffb54efa", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x9d, 0x68, 0x0, 0x1e, 0x6, 0x0, @rand_addr=0x2, @local={0xac, 0x14, 0x0}}, @udp={{0x1, 0x1, 0x8}, {"d2ff2297ff53b5b38db6f3de48fef6e1d0da60d51a6b1498d4847005061d8b3f3db1eb4a472d1f606fd672c179e2a2344d26a398cc8416e869f0693bad30266963370e7da4329a1d9cb30810b9410eea125b606aa3d3bc5e2dc7dd49db359b5993c8425d1e9f31a4dc270646728b075f273a7e7f9a54891e8253ba681513dd8fb1"}}}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r1, 0xc0187009, &(0x7f0000000080)) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r0, 0x2000747b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000100)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000140)="b9c2834bc807ac54fa508349a65c7bb59c5461439adfe6e98eb9c2e062dc4304", &(0x7f0000000180)=0x20, &(0x7f0000000400)="aae58a38fb459c16d0b4d8f3032dee868628801d90a95e0d6b3a64a5a618f573d30b093735921d85bb50eb56509a0a75343bf5917c5c82205e3d14d9be976d4c0d0f6d215cb9685732ea4b4c0301b495ad34b0b32c27c491f45562e1f96489e954b5eb1dacadb9700d1bf243b3d2451ab8e8f705ea86610efb40addc4ee907e496721946526596be95f851caffdf9657c81016ff564977a449ce5fb7631d70db44952efe0b491d71fd5307b0881fef46f3c01951b22c290b59e9575d4e8fe0f25644b7943eb721de48fd79e6a3c213925f5f44354ce1133b402760a6f9167b32243b35d7cf88e457946b39539d17d9", 0xef) read(r0, &(0x7f0000000240)=""/243, 0xf3) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) 84.657491ms ago: executing program 3 (id=492): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x1d) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x100000001) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000080)="05000000", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x29}, 0x2, &(0x7f0000000200)="71f91e3471ac0058bcffffffffffffffff5f84cf71b5ba7afec3708293b07e289798ea06a757a4dfda4927ee0e470d3cc86df6cfdaf275c50f5c5149aa0478158f8fac898673c9c3e8b7c79bc27485179ed93d49851aaedf9fa6ed559b5378b9", &(0x7f0000000080)=0x60, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/101, 0x65}], 0x1, 0x80000001) mknod(&(0x7f0000000240)='./bus\x00', 0x6000, 0x1000402) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 83.634844ms ago: executing program 6 (id=493): r0 = socket(0x6, 0x4, 0xa) sendto$unix(r0, &(0x7f0000000100)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce1018000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712050eeab7196fcbd80407000200c011200000", 0xb1, 0x6, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000000)=0xffffc5db, 0x4) bind(r1, &(0x7f0000000040)=@in={0x2}, 0xc) r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x70fc, 0x82, 0xa, 0x2}, {0x0, 0x16, 0x0, 0x7}, {0x9, 0x81, 0x2, 0x7}, {0x7fff, 0x47, 0x1, 0x3d}, {0x8, 0xfe, 0xb9, 0x7}, {0xff, 0x7, 0x2, 0x4}]}) acct(&(0x7f0000000080)='./file0\x00') acct(&(0x7f0000000180)='./file0\x00') 1.154913ms ago: executing program 3 (id=494): sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x1, 0x6) access(0x0, 0x2) setsockopt$sock_int(r0, 0xffff, 0x1000, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000780)={{0x0, './file0\x00', [{[@v4=@rand_addr=0x53a5, @v4=@loopback], [0x400, 0xa59], 0xfffb, 0x18}, {[@v6=@loopback, @v4=@remote={0xac, 0x14, 0x0}], [0x6, 0xb], 0x3, 0x18}], {{0x1, 0x80, 0xad, 0x400}, 0x4, 0xb54, 0x3, 0x9, 0x7, 0x3, 0xc}, {{0x5, 0x6, 0xd1, 0x3}, 0x0, 0x1, 0x800, 0x96, 0x2, 0xd, 0x7f}, @v6=@empty, 0x40, 0x9, 0x2, 0xb4, 0x0, [[0x0, 0x84], [0xfffffffd, 0x5]], [[0x3, 0x5], [0x9a, 0x8]], 0x1, [0x7ff], 0x4, 0x4, 0x0, 0x3, 0xc5, 0x4, 0x8, 0x3, 0x4, 0x40, 0x67, 0x920, ')$'}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x2f, "20000000000000c1a3eca8e578df8000", 0x6, 0x8}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0xff, 0x1, 0x9}, {0x2, 0xc9, 0x2, 0x8}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x24, 0xfc, 0x2, 0x4}, {0x7, 0xff, 0xe4, 0x4000800}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300), &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kill(0x0, 0x34) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, 0x0) socket(0x2, 0x8003, 0x20) socket$inet(0x2, 0x2, 0x0) closefrom(0xffffffffffffffff) fchdir(0xffffffffffffffff) r3 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x62a4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xd5}, 0x1c) 510.875µs ago: executing program 3 (id=495): r0 = socket$inet6(0x18, 0x3, 0x2) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) syz_open_pts() (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r3, 0xc0307004, &(0x7f0000000140)=0x1) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x400000a3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x400000a3, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) select(0x40, &(0x7f00000000c0)={0x7, 0x7, 0xffff, 0x4, 0x100000001, 0xffffffff, 0x100000001, 0x6}, &(0x7f0000000100)={0x1, 0xb, 0xc7a, 0x2, 0x10000, 0x3, 0xc, 0x3}, &(0x7f0000000180)={0x91, 0x7fffffffffffffff, 0x5, 0x4661, 0x4, 0x80000000, 0x3, 0x9d}, &(0x7f00000002c0)={0x3, 0xae62}) (async) select(0x40, &(0x7f00000000c0)={0x7, 0x7, 0xffff, 0x4, 0x100000001, 0xffffffff, 0x100000001, 0x6}, &(0x7f0000000100)={0x1, 0xb, 0xc7a, 0x2, 0x10000, 0x3, 0xc, 0x3}, &(0x7f0000000180)={0x91, 0x7fffffffffffffff, 0x5, 0x4661, 0x4, 0x80000000, 0x3, 0x9d}, &(0x7f00000002c0)={0x3, 0xae62}) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000001c0)={0x9, 0x5, 0x5, 0xfffffef5, "6400b72860147bcc0100d49a540e34b9e1c800", 0x7}) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000001c0)={0x9, 0x5, 0x5, 0xfffffef5, "6400b72860147bcc0100d49a540e34b9e1c800", 0x7}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)="58b02460d121d152c88df7e37b7a6665062f11c5ad6c9e6b797948375c50da1f1e23fe010086c6a466ee2244262530fc5d360410afd464af56f4878e1a6c2a67d428e7dd7075dbce0b000028c3340b496b772a9af30a8f0899f6c2fc4eafb845d82b1cfd7f8735c0a8749156f2ffa7e2e4960b06ee72d0d6ba8bc2d35220b449de1f77991d0c439f6d2c78162c3bcf43a1784694cd4606057c6ee0b1d9", 0x9d}], 0x3f) socket(0x2, 0x8002, 0x0) (async) r4 = socket(0x2, 0x8002, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000000)={0x1, 0x6, r1}) closefrom(r6) closefrom(r5) (async) closefrom(r5) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x7, "f30700", 0xffff}, 0x1c) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102"]) 187.799µs ago: executing program 6 (id=496): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fed38d5ba81b9e61cd2c735a98002000", @mcast2, {[], @udp={{0x1, 0x2, 0x8}}}}}}}) 0s ago: executing program 6 (id=497): syz_emit_ethernet(0x36, &(0x7f0000000000)={@remote, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @broadcast, @rand_addr=0x1}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 Connection to 10.128.1.67 closed by remote host. +42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$ j|E1\:QN\b:gp>v6+sǜd nIU;`ܬ~9J ktrace write failed, errno 27, tracing stopped panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 229955 63718 0 0 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834be690) at panic+0x1e5 __assert(ffffffff834f96fd,ffffffff83506fac,3bb,ffffffff8352fd64) at __assert+0x29 refcnt_finalize(ffff80002a243150,ffffffff834ade6a) at refcnt_finalize+0x1db pppx_if_destroy(285b9e,ffff80002a243148) at pppx_if_destroy+0x3d pppxclose(285b9e,41,2000,ffff800030f84fb8) at pppxclose+0xa0 spec_close(ffff80002a260900) at spec_close+0x417 VOP_CLOSE(fffff4806ea96210,41,fffff480097fd618,ffff800030f84fb8) at VOP_CLOSE+0x132 vn_closefile(fffff4806f313d28,ffff800030f84fb8) at vn_closefile+0x12b fdrop(fffff4806f313d28,ffff800030f84fb8) at fdrop+0x121 closef(fffff4806f313d28,ffff800030f84fb8) at closef+0x192 fdfree(ffff800030f84fb8) at fdfree+0x116 exit1(ffff800030f84fb8,0,0,1) at exit1+0x576 sys_exit(ffff800030f84fb8,ffff80002a260c70,ffff80002a260bc0) at sys_exit+0x1a end trace frame: 0xffff80002a260c60, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}>