last executing test programs: 3.185436854s ago: executing program 6 (id=1057): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500003cff002000fc00907800000000000000004e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a020fffdb0780009080a000000030000025392f6b1740ac0a4d800800000000000a2041000e286bd407c7fd6f5640bdcc826db30b3d00f87f7bc63192fd93429aaea783e247957d23efe28e49ecf1c6600206b6d6da7f9179328814e1d5c09bcacace8909dc685b044f96184f11620661a541ba6e4c8bf95bf20e7d4eb44e947004ea69edb033dde472b0823bf7845bce97cb1535d55296a"]) 3.177462031s ago: executing program 6 (id=1059): nanosleep(&(0x7f0000000000)={0x5}, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) 3.085766928s ago: executing program 6 (id=1065): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$TIOCSETA(r0, 0xc0044456, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x100000, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) poll(&(0x7f0000000000), 0x0, 0x8) socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000240)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881e2772ec5a1040040e068a69c00c436000000000000361b1257aea8c5d0002012020000000000880d6633c556ae9be371a3f8343712051eeab71d8900f90600bc", 0xb2, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4004287e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x25, 0x1, 0x0, 0x7ffffff8}, {0xc, 0xff, 0xfa, 0x7}, {0x6, 0x3f, 0x7, 0x800}]}) write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setuid(0xffffffffffffffff) r4 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r5 = getuid() setreuid(r5, r5) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r6 = open(0x0, 0x2, 0x0) shutdown(r6, 0x2) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f0000000040)={0x10001, 0xffff8691, 0x5, 0x0, "97a2e9008000000000000000004000", 0x100, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) ioctl$WSKBDIO_SETBELL(r2, 0x80105703, &(0x7f00000000c0)={0x401, 0xfffff16a, 0x9, 0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x14, &(0x7f0000000240), 0x0) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000000)={0x1, 0x5}) open$dir(&(0x7f0000000100)='./file0\x00', 0x20, 0x15) 2.806878319s ago: executing program 6 (id=1080): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VNDIOCSET(r0, 0xc0285108, &(0x7f0000000140)={0x0, 0x0, 0x0}) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x10001}) r2 = syz_open_pts() close(r2) syz_open_pts() (async) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f00000000c0)=0xf) (async) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="a5d4be1cfac10a", 0x7}], 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) r4 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r4) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r3, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000080)={0x0, 0x0}) (async) r5 = kqueue() kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[{{r5}, 0xffffffffffffffff, 0xdcd8c4bc089e638d}], 0x0, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0xfffffffc, &(0x7f0000000300)=[{{}, 0xfffffffffffffff9, 0x41, 0x0, 0xffffffffffffffff}], 0x0, 0x0) kevent(r5, &(0x7f0000000140), 0xe4a, 0x0, 0xa9fa, 0x0) (async) close(r5) 2.738051737s ago: executing program 6 (id=1087): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB]) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) (rerun: 32) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0xa1, 0x4, 0x9, 0x4}], 0x40, 0x0, 0xa, 0x0) kevent(r0, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) (async) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) kevent(r1, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x74, 0x2, 0x30, 0x9}, {0x6, 0x6d, 0x12, 0x2}]}) (async, rerun: 32) write(r3, &(0x7f00000002c0)="d81ad3ede1f3bd8558d5c7364888", 0xe) (rerun: 32) fsync(r2) 2.6438103s ago: executing program 6 (id=1092): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000180)=0xfff) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x0, 0x5, 0xf0c, 0x9, "d97995e98e82ccfcc666de91919494f247464b67", 0x2, 0x7fff}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="b113262f2feee889edec1a963865c1db8432dd86adfe9f1a307de3ce6d196a3b5de127a7772937d9fe9c7f4dc4accfa097c99492186bcffea526aa9303e74f983ceb4b443c505061d731715641c5a8b76959bdfefebe3ff63606ea7cffac0db7d17b85b197bf0a98921331a119600f0a2b13c35adafc8f3fddc28bb2bae9d08a79f3b1893e9c904365e5bc761c581f6533325f6afba24c13805df3a0af504415fa86c229ad8c9ab3b2f809", 0xab}], 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0x401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0x10001, 0x9, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71715, 0xfffffffa, 0x6, 0x6}, {0x4, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30000}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69e1ffffffffaaaaaaaaaabb86dd606b9efb00085000cb697a653e2c6f000077dc99778be1"]) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0xf, 0x8, 0x7, 0x1}, {0x2009, 0x5, 0x21, 0x4}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809ea3, 0x2, 0xfffffffffffffffd, 0x2800000000080000, 0x181a, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x10, 0x2, 0x1}, {0xb1, 0x10, 0x2}, {0x16, 0xa, 0x7f, 0x400f}]}) accept(0xffffffffffffffff, &(0x7f0000000240)=@in, &(0x7f0000000280)=0xc) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="c5ccea0f1c4c274e71d6dc03562095cdc75d2678beae71c4f10f1760", 0x1c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5ab2501ddc32bd720294a34b8e5f84cf71b59c7afec37082dc40cf765cb9c25e3e267c047687d6300aae5e0f7ed6c95cdd76b34302798df1d159a9a738d3a5d572fdbeffd54842c6d1d6ff387614d20beede6f3aa2879a3978ab144945a091b1c82099d5c6a6307bdcb2614fd7125dc899bb40071606a8d9e72e06", &(0x7f0000000080)=0x84, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000cc0)=ANY=[]) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) fcntl$dupfd(0xffffffffffffff9c, 0x0, r3) close(r4) 1.975323783s ago: executing program 2 (id=1132): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000700)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000001180)={0x3, &(0x7f0000001140)=[{0x3, 0x7, 0xc, 0x9}, {0x2, 0x8, 0x2, 0x9}, {0x6, 0xd, 0x6, 0x3}]}) syz_extract_tcp_res(0x0, 0x7, 0x5) readv(0xffffffffffffffff, 0x0, 0x20) syz_emit_ethernet(0x16, &(0x7f0000000640)={@broadcast, @random="be5f986fcdf8", [{[{0x88a8, 0x0, 0x1, 0x4}], {0x8100, 0x5, 0x0, 0x3}}], {@generic={0x8006}}}) 1.865202544s ago: executing program 2 (id=1134): mkdir(0x0, 0x0) chmod(0x0, 0x23f) r0 = socket(0x11, 0x3, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xf}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000100)=@in, 0xc, &(0x7f0000000200)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, &(0x7f0000000300)=""/239, 0xef}, 0x1002) connect$unix(r2, &(0x7f0000000000), 0x10) sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="4bbe3911f2399d12ba0933bfa666b1c4d092a00ea0f79645617d1f1c52e399d6f87a01c2cdd2650ec56df5c80c6d7ceff48f7c115ce0b185fe61d43883789b52d302e91693c224a01405fd6a8ca473dcc186d1e1496b6bad2dbc1c236d048851e9f8e4697029bee003d887b3022bd5516a95c529f8713e71a2de894ffaa22d5e05a4a9d94e6fb2c6b79d3e0d7e", 0x8d}], 0x1) execve(0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f00000000c0)=0x80, 0x4) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmmsg(r0, &(0x7f0000000280)={0x0}, 0x10, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="8ad0852952805c46945cd968cc860cf8bb71cb39918c59eb9b7a409201436b91677b5ac1aa962304cd13521fb0e5f713a486dafcbe47da1a69d69ae3e25ffb5325a4c36201d56a766c7101009cccd3b3ff360c7402752447fcdda4f67449d2870998b030f36ba661eaff355cd20f6d1403bfb7748cffc7900f568c8d738e912bef2912ff0037674875c3dddb0c099dc2cd5a30be1a7cd855157000ebb8cc81fd8bb273800ac36d243f0a057a61263efbee8a93c0f7ded8300dc29fddac6bc592b5691b21a3239d0682aa8d000000000000000800000000e4eba4477eaf3ea5bc148bc55747", 0xe5}], 0x1) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) close(r4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f00000002c0)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) 994.83527ms ago: executing program 2 (id=1179): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x23, 0x10, 0x2, 0x1}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="b92e", 0x2}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000100)={'./file0/file0\x00', 0x7fffffff, 0xf34, 0xe579, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2, 0x9, 0x2}) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x129, 0xe5, 0x5, 0x5c32}]}) (async) open$dir(&(0x7f0000000180)='./file0/file1\x00', 0x20, 0x0) 994.371804ms ago: executing program 2 (id=1180): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto(r0, &(0x7f0000000280)="478031e591bee432a03b0539a9ef58bc120bde1b8afda2f301dbe303", 0x1c, 0x401, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0xa) 734.022017ms ago: executing program 3 (id=1191): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$TIOCSBRK(r0, 0x2000747b) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000001180)={0x3, &(0x7f0000000000)=[{0x81, 0x3, 0x6}, {0x2, 0x1, 0x0, 0x2}, {0x6, 0x0, 0xe9, 0x1}]}) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xff14, 0x0, 0x2000, 0xfc}}}}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x202a8, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x165) r5 = socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000300)="97f530578b85", 0x6}], 0x1) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) r6 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r6) ioctl$BIOCPROMISC(r2, 0x20004269) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r4, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x875be7aaada81e9b) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x1, 0x1, 0x0, 0xfffff4b2}, {0x3, 0xff, 0xfa, 0x2}, {0x6, 0x6, 0x7, 0x800}]}) write(r3, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r7 = kqueue() recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000002c0)=""/229, 0xe5}], 0x5, &(0x7f00000004c0)=""/189, 0xbd}, 0x1062) kevent(r7, &(0x7f00000000c0), 0x100, &(0x7f00000005c0)=[{{r2}, 0xfffffffffffffffe, 0xb3}, {{r2}, 0xfffffffffffffffd, 0x62}, {{r2}, 0xfffffffffffffffd, 0x4d, 0x2, 0x4, 0x5}, {{r4}, 0xfffffffffffffffd, 0xf52fef2ce9bdf2e5, 0x20000006, 0xfffe, 0x8}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x40, 0x80000000, 0x101}, {{r1}, 0xfffffffffffffffb, 0x3, 0x1, 0x4, 0xd0}], 0x6, 0x0) 686.362914ms ago: executing program 3 (id=1194): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcf, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0x7}, {0x6, 0x0, 0x2, 0x401}]}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r2) dup2(r1, r2) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x800, 0x10) kevent(r2, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffffd, 0x39, 0x20, 0x2, 0x6}], 0x0, &(0x7f00000002c0)=[{{r3}, 0xffffffffffffffff, 0x85, 0x80000000, 0x5, 0x2}, {{r0}, 0xfffffffffffffffa, 0x0, 0xfffff, 0xd9dd, 0xe}, {{r0}, 0xfffffffffffffffc, 0x20, 0x1, 0x6, 0x3d}, {{0xffffffffffffff9c}, 0xfffffffffffffffc, 0xc0, 0x2, 0x9}, {{r0}, 0xfffffffffffffffe, 0xd3, 0x10, 0xd6e, 0x7fff}], 0x5, &(0x7f00000001c0)={0x5331, 0xfffffffffffffffb}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="c5ccea0f1c4c274e71d6dc03562095cdc75d2678", 0x14}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5ab2501ddc32bd720294a34b8e5f84cf71b59c7afec37082dc40cf765cb9c25e3e267c047687d6300aae5e0f7ed6c95cdd76b34302798df1d159a9a738d3a5d572fdbeffd54842c6d1d6ff387614d20beede6f3aa2879a3978ab144945a091b1c82099d5c6a6307bdcb2614fd7125dc899bb40", &(0x7f0000000080)=0x7c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x36}, 0x2, 0x0, 0x0, &(0x7f0000001440)="cca410df", 0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x20, 0x0) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5bb5, 0x0, 0x1, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r4, &(0x7f00000000c0)="c3", 0xffffffed) read(r5, &(0x7f0000000400)=""/119, 0xfd4c) 623.32564ms ago: executing program 3 (id=1198): sysctl$kern(&(0x7f00000000c0)={0x1, 0x58}, 0x2, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc020697e, &(0x7f00000001c0)) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x5, 0xa) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "88ce17", 0x1c, 0x2b, 0xdb, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="0294cae1d22f1c2eb4383bace004e3fc", {[@fragment={0x1, 0x0, 0x0, 0x0, 0x0, 0x17, 0x64}], @tcp={{0x3, 0x2, r2, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800, 0x0, 0x4b}}}}}}}) syz_emit_ethernet(0x292, &(0x7f00000005c0)={@random="4995d47c08fd", @random="c7a2e46f05fa", [], {@ipv6={0x86dd, {0x2, 0x6, "5b0d8e", 0x25c, 0xc, 0xfb, @rand_addr="29b953d285f1da6ecaff3c23468aa504", @empty, {[@routing={0x0, 0x4, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @local={0xfe, 0x80, '\x00', 0x0}]}, @routing={0x67, 0x10, 0x0, 0x3, 0x0, [@rand_addr="4062135aeea62489c8d847be23ec19ca", @mcast1, @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @empty, @empty, @empty]}, @fragment={0x8, 0x0, 0x9, 0x0, 0x0, 0x17, 0x64}, @routing={0x89, 0x14, 0x0, 0x2, 0x0, [@rand_addr="9978bed8b8f8ee6ba194a442f5713782", @rand_addr="2bb5d18f1395cbd2a37cb806d4839fb5", @loopback, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @local={0xfe, 0x80, '\x00', 0x0}, @empty, @mcast2]}, @fragment={0x33, 0x0, 0x80, 0x0, 0x0, 0x8, 0x64}, @routing={0x3c, 0x10, 0x0, 0x81, 0x0, [@loopback, @mcast2, @empty, @mcast2, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote={0xfe, 0x80, '\x00', 0x0}]}, @dstopts={0x3f, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}], @tcp={{0x0, 0x2, r1, r2, 0x0, 0x0, 0x17, 0x80, 0x8, 0x0, 0x4, {[@md5sig={0x13, 0x12, "1157732fd3f039fee77a39df5bb6cf63"}, @sack={0x5, 0x1e, [0x0, 0x10000, 0x7, 0x77, 0x7f, 0x7, 0x0]}, @md5sig={0x13, 0x12, "334b362efe653abb2df4238180802f3a"}, @window={0x3, 0x3, 0x40}]}}}}}}}}) r3 = socket$inet(0x2, 0x2, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79c9) setreuid(0xee00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, r5) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000001600), 0x8, 0x0, 0x0, &(0x7f0000000380)="3458fd190e73f5449e403fbfbde39a49ff8f01fe405448aafcbeaeaea060df9546f3c0de896126697629e6e4866c5bb039241bdf713957c8ab5e624c5ab5e5b8a60f7ee7f6dfdc502ec7a24301dc6a34a3e0c819cd91f82cfc869c01f3741a921ff9f5e89f4f2b367e347ba071accc1a7c544259039be659893bfce997f9b369ed79d996c18f68c4b1c2dec138c97e39540ca2ec29cc5351fd24d6d4b34cf3bec879f51561eb243c22c583a33b0021e4a2af72c13ff6e2962553b35044bf61e0b4a4c42211d36eb16a32cc1d86f0a005ddfa653aea236ad7455abe31ae421d30", 0xe0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) 617.864892ms ago: executing program 3 (id=1201): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) setuid(0xee01) (async, rerun: 64) r0 = semget(0x0, 0x1, 0x400) (rerun: 64) sendmsg$unix(0xffffffffffffffff, 0x0, 0x7) (async, rerun: 32) setgroups(0x0, 0x0) (async, rerun: 32) semctl$GETNCNT(r0, 0x1, 0x3, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwritev(r1, &(0x7f0000001840)=[{0x0}], 0x1, 0x0) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000001180)={0x3, &(0x7f0000000000)=[{0x81, 0x2, 0x6}, {0x0, 0x1, 0x0, 0x2}, {0x6, 0x0, 0xe8}]}) (async, rerun: 64) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x4800) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) (async) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xff14, 0x0, 0x2000, 0xfc}}}}}) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0xf7fffffe, 0x6b, 0x51f, 0xd2f, "8717f90579ce018000008080df91480d01000002", 0x0, 0x2}) dup2(r2, r3) (async) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000100)="8be2299b47cab632865590495d2f29444832706e70936f98e1380c6c7410dddb7d39c3b1616c828bfa0f7bb64e14b6b2e17e6d5ecda156982ff1fa4e8a05cbccdcad1d929446144eff53f490ca4b275988c7dc9bde5c0eb21f50ddb61d3263f3bc4d6e96bda72579858322de15a2092be4f0cb8e5c7e83adfc528275c1dd421ae0dc429ff91bfea818fd06048e6018e42d6177d0bf967ce407866c7ed9c877154f54d649ded0167deb3a169e1ad5ec7fae137d990f9ad8933539a7bf33ef6c1570d8f665645f55e63f677786ac", 0xcd}, {&(0x7f00000002c0)="e20b189f877ce055eca9752726967cf73f60e2746b164517db06930042c7d22fcdf23ca3185ec14874ae625e38c77d268797f95f8c340e3ff2273ec7c913774506426630e4b68a1da0c2f0f8271ba2aead9b973e4875ef71bc427bd997b9baad65e042510596a884cd4a176052a56af3a63b25fbf6716362e6592a539b75bce64edca0c2bb8ceb6a15911447b59e870c8fbb4b0ddf56e8e4bf071eeafa17d7318dfc893c573e2e192dfdd6e376cd839060da64e137f11d99ecabe1f2d12855f1c5a1a9df8fd1fb9caa44ada73839cee454861ad0db5b996d41f83bd9782af3a5276434cd20c7", 0xe6}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="af590bdc1eaff395faf1744640ad1c2022489888335d6020ee4b105dd25a", 0x1e}], 0x4) 603.916111ms ago: executing program 4 (id=1202): mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) sysctl$hw(&(0x7f00000000c0)={0x6, 0x14}, 0x2, &(0x7f0000000180)='\ta\f\x00\x00\x00\x00\x00', &(0x7f0000000040)=0x8, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x51) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="c5289000", 0x4}], 0x1) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mprotect(&(0x7f00001ab000/0x4000)=nil, 0x4000, 0x4) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x0, 0xffffffffffffffff, 0x81) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x41, &(0x7f00000007c0)="00e0ae5b7e0d0000bc5a91501d020000005f84cf7157c36cdc4a02000000cca76e6b18ce44597b8a532abfc6b345138735a5f2b1ed64e696c0cacf983480dcf647fff9bb5292ddbb9500d71abe3074272de345809238eddd6078460dae01ba5176457f57823146b74f672a967ad6edafbfc171fe689822e297cbe06b93773d71244a026ec0b6be352d1b0c30e1dae9d24e1e122d28380dd148a9fcd5b1ed2cca6eead302ed6d52e22e1d28baed7448da71abc3be0e5befc91e57d1bd3e03866734e8f747fb07714bee9b063ed093e800df0161d751dbdd5def4f0a6bbfca3da6b4d99bc9057a97d6f764d8dc1635be5700008a4eadec75e48f327f4b59b81d76c83b647ef6dfdea948ae525d9f9bae09d8fd545dbe0693cb0000e824da6841a2df228a8061532c8093579882b66f26cbaf288923f25f4e20ff1164103e44f496d960ca93000007000000000018b91aa479dddc475b5fb8fb44affe140ea4def2e93ef06e5784306ac92f9d96b0be18015d78b89c8d0021660d80a3cf547c637ca765219bccb63caa945f53adf9acc2bfac62d026446dd7f60934e2354a94ec09932913e7b53a1dbd2df0ca2edb54e96fa1c14c11bbfe18022174c675e90f2d8cc0d44eb26825af05024e6c5bb9ad53398ce28c516100a8d7264064a7aab3fb9451d20074b5755a5d7a7491dc5a846a4d37e897548d75cba71df35456cbc956d63803449459a29261e002a96097e073a2d13d6e4e3437b988b3ebfe9b71063b0855f1000000000000000000", &(0x7f0000000080)=0x155, 0x0, 0x60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r1, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000100)=0x6) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 603.711036ms ago: executing program 3 (id=1203): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$diskmap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x4, 0x5, 0x80, 0x4}, {0x24, 0x0, 0x2, 0x7ffffffc}, {0x106, 0x4, 0x6, 0x800}]}) write(r3, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) write(r2, 0x0, 0x0) r4 = open(0x0, 0x615, 0x0) r5 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000762000/0x3000)=nil) shmat(r5, &(0x7f00003cd000/0x2000)=nil, 0x800) writev(r4, &(0x7f0000001480)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) openat$speaker(0xffffffffffffff9c, 0x0, 0x8, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x3012, 0xffffffffffffffff, 0x0) 570.816857ms ago: executing program 4 (id=1205): sysctl$vm(&(0x7f00000000c0)={0x2, 0x8}, 0x2, &(0x7f0000000000)="e509e8854f5df6ddca5bc0f752afd3223756a0c0de38a24bebd2e967041b19c7d402b99bd14a7fe42afd785d6f47b98bf9d8c0e1bd8e573fa71c6df3d56868775463aed2b772a651c8e26b3282cc3acb990800a0474348ca92cddb5c66b23905492e2913db2769f311ed4403db8e53400620394789ed1aca63bc4849f79f1c7791c8a1e2ce48a6aa1f435e4671fe9898e6ee235bb00500000000000000507048f959ba59bbecc5", 0x0, 0x0, 0x0) (async) sync() (async) sync() sync() 568.517877ms ago: executing program 3 (id=1207): unveil(0x0, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="10", 0x3}], 0x1) (async, rerun: 64) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async) setsockopt(r0, 0x0, 0xb, &(0x7f00000001c0), 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000), 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x28, 0x3}, 0x404) recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0) (async) unveil(0x0, &(0x7f0000000080)='W\x00') 461.809165ms ago: executing program 4 (id=1210): setrlimit(0x7, &(0x7f00000000c0)={0x1, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') write(r0, &(0x7f00000001c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/171, 0xab}], 0x1, 0x0}}, 0x10, 0x1060, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) shutdown(r0, 0x2) close(r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r3, 0x40045744, &(0x7f0000000180)) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd31929648160000000000000000", 0x14) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f0000017000/0x2000)=nil, 0x2000, 0xa) 401.714876ms ago: executing program 1 (id=1216): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000000)) r1 = kqueue() poll(&(0x7f0000000000)=[{}, {r1, 0x127}], 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x10c) r5 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r5, 0x0, 0x18, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = dup(r4) recvmmsg(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}}, 0x10, 0x0, 0x0) dup2(r3, r6) execve(0x0, 0x0, 0x0) getsockname(r2, 0x0, &(0x7f0000000100)) sysctl$kern(&(0x7f0000000000)={0xa}, 0x3, 0x0, 0x0, 0x0, 0x0) accept(r2, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc) 394.249309ms ago: executing program 7 (id=1217): r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) getitimer(0x7, 0x0) setgroups(0x0, 0x0) fchmod(r0, 0xf3) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x1}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x7, 0xf15, 0x4}, {0x788c, 0xffff, 0x8, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x800, 0x8bfd}, {0x0, 0x0, 0x8, 0x7}, {0x3, 0xc7cb, 0x800000, 0xa6a}, {0x401, 0x6, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x2, 0x2, 0x69}]}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000080)={&(0x7f0000000100)}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="c5289000", 0x4}], 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf7157c36cdc4a3e8a362ecca706c43c69490d5088112aa234d1", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r3, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x14, 0x8, 0x7f, 0x40400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f0000000040)="8858cd20", 0x4) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='r\x00') 316.401184ms ago: executing program 7 (id=1222): sysctl$kern(&(0x7f0000000140)={0x1, 0x49}, 0x2, 0x0, 0x0, 0x0, 0xc) 294.839238ms ago: executing program 5 (id=1223): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000080)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x2012, r1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0x0) syz_emit_ethernet(0x240e, &(0x7f0000000000)=ANY=[@ANYRES64=0x0]) sysctl$net_pipex(&(0x7f0000000340)={0x4, 0x23, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) 294.378338ms ago: executing program 1 (id=1225): sysctl$hw(&(0x7f0000000100)={0x6, 0x9}, 0x2, &(0x7f0000000440)="bfac85b4a73e0e154c00581e42a2616f11865e60ac617ff5125354e9e10330b3b83064863345e794d334e839dbc2185875a1c403edecb1fe8ef6fa7ade9d25264e6fda5fdddef1f25dfc1fe48cab358e3b39cb51dbf9535cea3200e5561525474c57b9078c5b23", &(0x7f0000000080)=0x67, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="172140030f70", @empty, [], {@ipv6={0x86dd, {0x6, 0x6, "0cf5b8", 0x10, 0x0, 0x1, @rand_addr="5796bdca6f177b098b2b5ae22967efd7", @mcast2, {[@dstopts={0x11, 0x0, '\x00', [@padn]}]}}}}}) (async) r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) 294.018362ms ago: executing program 7 (id=1226): r0 = semget(0x3, 0x4, 0x440) semop(r0, &(0x7f0000000000)=[{0x4, 0x2, 0x1c00}], 0x1) semctl$GETVAL(r0, 0x2, 0x5, &(0x7f0000000040)=""/51) r1 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) r5 = geteuid() getgroups(0x6, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x2, r1, r4, r5, r10, 0x10, 0x3}, 0x9a1, 0x0, 0x4}) r12 = openat$klog(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r13 = geteuid() fchown(r12, r13, r6) r14 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$SO_PEERCRED(r14, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc) r17 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$WSKBDIO_GETMAP(r17, 0xc010570d, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xff, 0x8, 0xc9eb, 0x2, 0x9667}, {0x54, 0x5, 0x0, 0x8597, 0x9c7}, {0xff, 0x800, 0x28, 0x4}, {0x0, 0xfffb, 0x6, 0x5, 0x2}]}) r18 = getuid() fchown(r14, r18, r8) r19 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r19, 0x1, &(0x7f0000000300)={{0x6b0f, r5, r8, r15, r9, 0x4, 0x3}, 0x1, 0x5, r2, r2, 0x5, 0x1, 0x4}) setuid(r1) getsockopt$SO_PEERCRED(r14, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xc) setgroups(0x9, &(0x7f00000003c0)=[r10, r16, r11, r4, r8, r22, r7, r6, r11]) r23 = getegid() r24 = fcntl$getown(r12, 0x5) pipe(&(0x7f0000000ac0)={0xffffffffffffffff}) r26 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x8, 0x0) r27 = socket$inet6(0x18, 0x4, 0x5b) getsockopt$SO_PEERCRED(r14, 0xffff, 0x1022, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0xc) r29 = socket$inet(0x2, 0x2, 0x0) sendmsg$unix(r14, &(0x7f0000000c80)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000a40)=[{&(0x7f0000000440)="69a88bc47b7e2f61b6a13de8cc7b22c70cc757833094166a633b40a6dec7e55782f286a1f702b6d9b618527484d50a0f598a7e5f5fb36e4b6b5da8ffb8c8111a786c3e77a157ab12f94861e5a499320221f3454ebe9bfd0f0fa7ccde24d0b47c832aa932b58f66d8cdbcaabf9365c7809a9f5f4b1278bc683f3159ee237b6ad8c4f83c5b2a43e4b150793aaa37a5b66aec732d3f4e1484059a9c0a8b5923e1e6effe96c29d9b73e9a328535a220b22a8", 0xb0}, {&(0x7f0000000500)="f8f22c9d226f0e425bdf690dbbee3fe1fd6fca933ebc9f3a44719b08d21392647e5ede2fc2f9bee77de2f0f4f6593b3ef8b1141f64416b3c8d391064d6b2af657645b18b23cf26a8c8c32150625bd618026c0749faf6e715e3129029c01069df72651a463de69f5b84733e1786bb1930dec99dd3bb5882924b6cd385714afb5a7bf3d03e6fc466c7735a643f8bc65a709c", 0x91}, {&(0x7f00000005c0)="b390b387bdcf84404b00e94793b962cf60ed158228640d8696f7d9a2320ab855f0c5fe52e0cb45c766b484850a713d43691563b56241775c77f98d0c73645a7f5705550c086a781dc54ab0db5e3ee63cc4a831d4cab65ca11423dc0627930c1f1a0b1eda5ec0b34162d1915d335109d1a06605ace02439d8502c59723a6708dce0eb1b9d94087fb94436b3f36b0b5a85507451692f7e8b6803baf5f5a8b639677351b088af8699437ec8b52e975ef7b594d6fa3d06ca66d41f5ebb74b1ec4c7d19baad0b27d77a3277602e258df2cf28ce28f8fada16e8e52dadb5cb7acb1e2e4238b56492f45dd7f6218e23ab677352d340e7bb448904c1", 0xf8}, {&(0x7f00000006c0)="4694d54a48c0122a8c4c175521a2dbc345d6d3d14689f9c6d979bcf434a9f48baec311e8c486012bfd4fa486d5925e4f5dd2c62022b82c06a530a8b09d49583a267c0c2816fa8267d739384b87b50178ec6c26d2a5eab4ad54c5d07b92953188277db6e9f8360d09167863e85fc207692bc4c3911b2ec1d8fdfe2e7530c48c7ac313c3b7e29e5d11c44046ecba73ef8ba484b324711b114509c10f73577d3c720f1daef00bd5c9aefca0d434f65476e73443bd3a3e02105b3ce1d3687f327d5e78cc32d2e158bd29556012ed0f3739efb367", 0xd2}, {&(0x7f00000007c0)="ed27fc09ea90e43521b6412b9557860ee56e633d6c751fbaf9bf12342a58fae1280120334782e95330325f87d5c087d8943e7d75f455eeda742326488c45606e17e6bbf24f6d68b87d78f3c5b2de1ccc3c700fa9eb09e6b54513d4fe13dd5826ab255cb0718dbb0d90ab8f2e267099", 0x6f}, {&(0x7f0000000840)="be5211042d22e745b3b6194d4b97da604ada319e77d64e0f71147b0e1f85369e3b6b234a11c7927f791be1e08649e64c8f327b86e97f579baa9b35", 0x3b}, {&(0x7f0000000880)="e12d14b8c844f5dbe449118534500721f701127306b7a263b401fcff09df337b76711e4d74392d38a12e18d14d03ebb4b3079d79b2fd764819317d0fc850dc554a21ebb9fd9514ca51c3da92cad50372475e690a799aeb3e3b90ac2a1b6fba6a5a08c591126949296bd5a9ad37f0ddd68236d792bbf8de2374efb5baea63c06e33", 0x81}, {&(0x7f0000000940)="b9e0c6671be661f7e6cd751bae8e7c83405b2a0e383097d834d8c27a28c5f2e2cac9a0df18ac9e81b88107eaf5346be9bfd4ef1363fbde4ec9320c9b5e6089efa4ce65b12e1ecf3b959ac36d1c62f603db16c5a1e4b98b478c63950baa05ec96f287bf19b2125548e74d54a87ffc78b527187ebbbb1e2d3c2dc9a40c4a1249dfd6025b7bdea7f87d62559fd1aee7d3456179e13e341f6f8e915c6701a45fd94cac523f57652cee6826db841d2f24c6e41eefccc36a2a56958736fc22c1bc1e16dd9b5c3850825c41d2596b0a17221e", 0xcf}], 0x8, &(0x7f0000000b80)=[@cred={0x20, 0xffff, 0x0, r20, r5, r7}, @cred={0x20, 0xffff, 0x0, r2, 0x0, r23}, @cred={0x20, 0xffff, 0x0, r24, r21, r10}, @rights={0x30, 0xffff, 0x1, [r12, r17, r12, r25, r26, r12, r27]}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r3, r28}, @rights={0x30, 0xffff, 0x1, [r29, r12, r12, r12, r14, r17, r14, r14]}], 0xe0}, 0x40a) 243.326809ms ago: executing program 5 (id=1227): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x24}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r1 = syz_open_pts() setreuid(0x0, 0xee01) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x7fff}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}) msgctl$IPC_SET(r2, 0x1, 0x0) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000002640)={0x3a49, 0x6549}) sendto(r0, 0x0, 0x0, 0xd, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r4 = getpid() r5 = getppid() ioctl$BIOCGETIF(r3, 0x4020426b, &(0x7f0000000080)={""/16, @ifru_media}) getppid() fcntl$setown(r3, 0x6, r4) fcntl$setown(r3, 0x6, r5) 242.00625ms ago: executing program 1 (id=1228): sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005016000009f05000e00070000000018", 0x12, 0x0, 0x0, 0x0) socket(0x18, 0x3, 0x0) (async) r0 = socket(0x18, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) getpeername(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x120, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x81206919, &(0x7f0000000100)) 241.626909ms ago: executing program 0 (id=1229): mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0xc2c04200, &(0x7f00000001c0)) r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x8) socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080)=0x3, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10, &(0x7f0000000000)=0x5, 0x4) r3 = msgget(0x2, 0x608) r4 = socket(0x18, 0x1, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4b}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) msgsnd(r3, &(0x7f0000000040)=ANY=[], 0xe5, 0x0) 241.074178ms ago: executing program 7 (id=1230): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000240)={0x0, 0x219c, 0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x4b) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x101) setgroups(0xffffffffffffffd2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040)="ed", 0x1) recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/196, 0xc4}], 0x1, 0x0}, 0xfffffffa}, 0x10, 0x40, 0x0) readv(r3, &(0x7f0000000300), 0x41) recvfrom(r3, 0x0, 0x0, 0x1006, 0x0, 0x0) close(r2) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000700)={'./file0\x00', 0x9, 0x9, 0xf5, 0x0, 0x100, 0xcf, 0x7, 0x1, 0x0, 0x10, 0x5a7}) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000640)}], 0x8, 0x3) 182.56695ms ago: executing program 5 (id=1231): open(&(0x7f0000000080)='./file0\x00', 0x611, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x1003f8d}, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x19e) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) 172.388294ms ago: executing program 1 (id=1232): sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = semget(0x0, 0x1, 0x281) (rerun: 32) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) semop(r0, 0x0, 0x0) (async) r1 = msgget$private(0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETF(r2, 0x80104267, 0x0) (rerun: 64) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0xff, 0x0) msgrcv(r1, 0xffffffffffffffff, 0x0, 0x1, 0x1000) (async, rerun: 64) msgrcv(r1, 0xfffffffffffffffe, 0x0, 0x3, 0x1000) (rerun: 64) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x7, 0xa, 0xb}) (async, rerun: 64) r3 = socket(0x18, 0x2, 0x0) (rerun: 64) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) writev(r3, &(0x7f00000006c0)=[{0x0}], 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) munlock(&(0x7f0000302000/0x1000)=nil, 0x1000) (async) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) 169.352532ms ago: executing program 5 (id=1233): mlock(&(0x7f0000feb000/0xd000)=nil, 0xd000) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() r1 = open(&(0x7f0000000480)='./file0\x00', 0x400, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000100)) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0x6}}, 0x0) setitimer(0x0, 0x0, &(0x7f00000004c0)) (async) setsockopt$sock_int(r1, 0xffff, 0x1003, &(0x7f0000000180)=0x5, 0x4) (async) close(r0) (async) r2 = syz_open_pts() (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)="ff0959d8635a8c34aa68d3c020df9236b504ff", 0x13}], 0x1) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f00000001c0)=0x9c7f) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) clock_getres(0x4, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x9) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) (async) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r4, 0x0) (async) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) 169.19478ms ago: executing program 0 (id=1234): r0 = socket(0x2, 0x8003, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) getsockname$inet(r0, 0x0, &(0x7f00000000c0)) unveil(0x0, 0x0) unveil(0x0, &(0x7f0000000080)='W\x00') r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x682eb13985c518e6, 0x7}, 0x8) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000000080)="a3e6788ef2a7e6cf8b4f2352", &(0x7f0000000040)=0xc, &(0x7f0000000100)="7dafc24abdcb9aea4e2f584a45c13df381687351edf174ba0382f87b896b4ab95c531ebbdc6eb981ca4131aa8d5b669eec514562932db2d54ffd29a000827ee47602ba1d75fe7c89ae118b41f93a7851f6a5c5f8602b8d70a1fdde4a85adf29a9b3ff86c9aa23d43a5f90a32056def0d479faec1260ff0cf438a3856d78d812d257ccc52a9417f15d9f62900a477f0dde568ce6204ebb34ff3cfd96b1ef0181ca6a5e7db399319b044373cf10f8e48530ec211e0ac861fb807152e4b5455843791df0100000076cecb07", 0xca) 168.952144ms ago: executing program 0 (id=1235): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) r2 = socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x23) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)="7b573f9d30da087facf1d55406ebec84c951087d94f0257b52fdb637748347e1ec406a150678b990a0061f981c08497122b3bbb05b17c7ee5150aff54b3a1936b0397e0b14549e48ed74a18db87eb51ef7b4d3ca96b39a33ab60b1c32338b333996f21f12b57228b93681431332bba8606e8d5d2652e5de81bb08ec5467f92898dc7b896bc9985ef71f3e51d093c0227657bbe25c113c40837247749d3d24696db89f447684b0c6e6ecce8e75d980ef5df307526a8612ca58232cbac632811a8bbb8154bec7af888553a8b0c19ff59d6b6173efe525c", 0xd6}], 0x1) 168.746468ms ago: executing program 5 (id=1236): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0xfffffffffffffe20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000004c0)={&(0x7f0000000040)='./file0\x00', 0x5, 0x0}) mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) mknod(0x0, 0x20, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0)="ed", 0x1) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1, 0x0}, 0x6}, 0x10, 0x1822, 0x0) unveil(0x0, &(0x7f0000000080)='c\x00') r5 = socket(0x1, 0x4, 0x0) close(r5) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="40235088202ec1f08fc99e0bd425813da46ff6a2d49332b7b37aeb9f1091a2828dd26ff18df85c1fff30e6e079819949b0377f0081502718f82abd7e43758893a5bd47d9b0b016c2e1855e93158684ec54be2f0c3b90e55d0433c8bbddbe9843031674a105b00a31156b841f048bd1ce68e831630a0dea7fdaaf9120c0612210bead97bec1ea2d5a03f0a94fd92318257115ca96caa90b9cc99eed9367539834930bace259b95ece1d50f3fbc3e833da5c4fdf41c585feb3bf6853d2513b1ed90e85590989319f2a11", 0xc9}, {&(0x7f0000000380)="bdb12b5cbf280c5ff92cec2695b8c6c7db9925abdb8ecab17391e3187bbd97504c084aa08992e876440d829b09348168a068bf5bc8c2a2ef84fa438b7dab62f561f645946731befa62d8cf19ceeb72d6898aa56656a53d527f962394e6dee2d54565b7888e388b74", 0x68}], 0x2) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 164.831669ms ago: executing program 1 (id=1237): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r0, 0xc0187009, &(0x7f0000000080)=0x400) r1 = socket(0x2, 0x2, 0xd) close(r1) 120.767708ms ago: executing program 1 (id=1238): r0 = syz_open_pts() openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="23180596c9095449483e68bf39cb85705a226281f2b44595aaedcb5f134c99d5293bc09edcab079034fb4752fe6b83389fcb5279ea8969c4fb347bf688ac55cd175f650b94b946e78421ecdb4000c85d6c18e801a83065f13e012746cb42553f1a742729ae3fc076aed8e69b5730f95f81462e", 0x73}], 0x1) execve(0x0, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfbfffffe, 0x40000, "d76c1f46000000ef1f0160fbf520000002000f00", 0x0, 0x1}) syz_open_pts() semget(0x2, 0x0, 0x43) (async) r2 = semget(0x2, 0x0, 0x43) semctl$GETPID(r2, 0x2, 0x4, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x18, 0x3, 0x20) (async) r3 = socket(0x18, 0x3, 0x20) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = shmget$private(0x0, 0x3000, 0x308, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r5, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000100)) (async) ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000100)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0xfd}, {0x4, 0x0, 0x0, 0x800}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x401, 0x28, 0xfffffffe, 0x9, "ea885b00000000000000ee371c8ce2c9b6000008", 0x7, 0x4080}) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x401, 0x28, 0xfffffffe, 0x9, "ea885b00000000000000ee371c8ce2c9b6000008", 0x7, 0x4080}) getsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000180), &(0x7f0000000200)=0x10) 120.197396ms ago: executing program 2 (id=1239): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @random="049b88fae84d", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @broadcast}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x4, {[@window={0x3, 0x3}, @window={0x3, 0x3}]}}}}}}}) syz_emit_ethernet(0x46, &(0x7f0000001540)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x10, 0x11, 0x0, @rand_addr="fe0000002000", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x16}], @udp={{0x0, 0x2, 0x8}}}}}}}) 119.937313ms ago: executing program 4 (id=1240): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) setreuid(0xee00, 0x0) r2 = getuid() r3 = accept(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) poll(&(0x7f0000000080)=[{r3, 0x100}], 0x1, 0x1) setreuid(0x0, r2) r4 = getpid() fcntl$setown(r0, 0x6, r4) setreuid(r2, 0x0) close(r0) 62.753122ms ago: executing program 2 (id=1241): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0xdc5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r0 = socket(0x18, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000400)={&(0x7f0000000240)='./file0\x00', 0x65, &(0x7f0000000280)='./file0\x00', 0x8}) ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100)) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100)="688b20b5", &(0x7f00000001c0)=0x4, 0x0, 0x0) read(r0, &(0x7f0000000300)=""/214, 0xd6) 60.181781ms ago: executing program 0 (id=1242): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000000}) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000640)="c7cf5711111ad824254ea42930052d988b646d1f6fdb3a0f767e6d3466d67f8f72c3619e694f53e72e7a23ad7a9f2f6629f9caed586e55443c2cfc207c92fd290643", 0x39}], 0x2) (async) execve(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x46}, 0x2, &(0x7f00000001c0)="2e02d80c8374f97eb737c9ae31acf8d1681f390c1e922c8b5fa341645c2466f594c7b5bf03212b38534cc55b70107cf3b8e54babd6f518c6691d9e2f6bf3a9a6bf4f3d5998cf094db488cf44f8f53119290b7d8f94f21ef8dc30409b8cf24d31e00715daa653b5f54e9302e521605b6a2dcaf732", &(0x7f0000000280)=0x74, &(0x7f00000002c0)="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", 0xfe) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000000)=0xb, 0x37) (async) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000840)={0xd, 0x401, 0x1, 0x9, 0xfffff977, 0x4, 0x200, 0x10, [{0x6, 0x6, 0x800002, 0x5}, {0xb, 0xfffffffc, 0x4b0, 0x1}, {0x7ff, 0x86e, 0x5, 0x2}, {0x80000000, 0x2, 0x203, 0x3}, {0xefffffff, 0x8295, 0x3, 0x9}, {0x101, 0x2, 0x202, 0x3ff}, {0x5, 0x1, 0x0, 0x1}, {0x3, 0x400, 0x7, 0x1d}, {0x8, 0x800005, 0x0, 0x5}, {0x4, 0x0, 0x1c5b, 0x6}, {0x10000, 0x6, 0xe, 0x9}, {0xd7, 0xffff, 0x0, 0xc}, {0x3, 0x7fff, 0x40007, 0xfffffffc}, {0x8, 0x0, 0x2, 0x1}, {0x8, 0x5, 0x2, 0x6}, {0x0, 0x2, 0x5, 0x1}]}) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0xfffffffe}) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r3 = syz_open_pts() syz_emit_ethernet(0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd605f6ad900393a0051efbcf8208a366699c16dcd4227cb614bc7d190dc0427c9da0b85fe8000000000000000000000000000aa02009078000000006006c33e00001100fe8000000000000000000000000000aaff0200"/111]) (async) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000240)={0xfffffffc, 0x8, 0x15, 0x0, "52c4a7129c9e242f0005aac10fa300", 0xffffff80}) poll(&(0x7f0000000180)=[{r3, 0x1}], 0x1, 0x0) (async) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0xb51a, "1a2198b59b58505f40edabfaffffece900"}) (async) r4 = socket(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000), 0x10) shutdown(r4, 0x2) 59.884526ms ago: executing program 4 (id=1243): mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x6380) (async, rerun: 32) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 32) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4) (async, rerun: 64) r1 = dup2(r0, r0) (rerun: 64) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)=0x6) (async) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f00000000c0)) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="3e081121d6b6adc9fb9aa558f561c0ddb275e1bfb3273bd28022c3a7eadccb8489eff83b99bafb3663642001bb4615bae49c0bba6273ba082dbde09ed2d58ba8e2a84d2ace601f835fb25c6d7bd674f71be7596623", 0x55}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async, rerun: 32) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000001c0)={0x6, 0xf, 0x0, 0x1000, "120f878e58fa9470a77167d9c21238d2a9737f7c", 0x6, 0x9}) (rerun: 32) sysctl$kern(&(0x7f0000000240)={0x1, 0x51}, 0x2, &(0x7f0000000280)="1a06174074bd43c85343cc8885686141e6ea80d45661284abbc74ce5099efde622130d1e8c30fc5c4042a634ded0f581ac5a11cfa3ae54c557e80cc036699b0905352c8ccfeb6e0da07d802154774723e0244120828d895507b410614af4d477ce56d6dcb79929bd0d0c71b9c0b678ce71e1db1994eb26c8c16cc2e585447e2b462be64d2071ba02429cc26d36fc1384879d9aeb5d961520a638c5afd3cd6c43880b1715e213e6fd7806db7980ceda0ce5dce1bf76ec922108d7d50ee98a10eb47c2ef", &(0x7f0000000380)=0xc3, &(0x7f00000003c0)="58b1bf9442f2a79a64d9e7cb2823fffb476e8aad9637fe39bc2ff27eea009fad5c1f94cf5f6d3a1fafa463e16ef2500f4bae1769629ddd65b9f42f04ec2c63bf75c576d3513598c9dda4b7d3102cd81137ba5d40e908f85e745f4bf9085a20958e0924535edba213635af2092c6895913a262e11e1d049ce99a09cbbdd7feb6a746df0ba25f783bfc74eff8a30d452c7fec1414b2a08ce28d25a379c5378fff15938e06c06c69121db81d3310088732d2f53f3176f9e0f917230b618a55833a927694df11ca63156994083a9e853d5a575c794cfc8399fca6e4b5f0ab109b6f482", 0xe1) (async, rerun: 64) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000200)=0x4c6) (async, rerun: 64) mlock(&(0x7f00007cd000/0xb000)=nil, 0xb000) 59.168631ms ago: executing program 0 (id=1244): open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) clock_gettime(0x2, &(0x7f0000000080)) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) (async) close(r0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) socket(0x18, 0x3, 0x0) (async) r1 = socket(0x18, 0x3, 0x0) r2 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="7607d7712be309c1fe1ab031c220b0c2", 0x170}], 0x1}, 0x0) (async) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="7607d7712be309c1fe1ab031c220b0c2", 0x170}], 0x1}, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) r3 = socket(0x2, 0x400000000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r3, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="84d095922bf641c3000180860100001a9d1b4da20dd50726e7a71f0a6b7b4db01c83a8120b00000000000032736b36372978ab576e24d9580b5906664ee826586066773b2feb2bc081868c7df74457c62f098dec", 0x54}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="84d095922bf641c3000180860100001a9d1b4da20dd50726e7a71f0a6b7b4db01c83a8120b00000000000032736b36372978ab576e24d9580b5906664ee826586066773b2feb2bc081868c7df74457c62f098dec", 0x54}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="71f91e3471ac0058bc5ab2501dca32bd720294a34b8e5f84cf71b59c", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="71f91e3471ac0058bc5ab2501dca32bd720294a34b8e5f84cf71b59c", &(0x7f0000000080)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r4, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) r5 = socket(0x18, 0x2, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getpid() (async) r6 = getpid() setpgid(r6, 0x0) (async) setpgid(r6, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)="7b573f9d30da087facf1d55406ebec84c951087d94f0257b52fdb637748347e1ec406a150678b990a0", 0x29}], 0x1) 56.90637ms ago: executing program 4 (id=1245): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setgroups(0x1, &(0x7f0000000080)=[0x0]) r0 = shmget$private(0x0, 0xa000, 0x410, &(0x7f0000ff6000/0xa000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/228) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/228) shmat(r0, &(0x7f0000003000/0x3000)=nil, 0x1000) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) 10.583382ms ago: executing program 7 (id=1246): setregid(0xffffffffffffffff, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)="4bbe3911f2399d12ba0933bfa666b1c4", 0x10}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0), 0x1000000000000302, 0x0}, 0x40) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470cd6cc022ca000240000000000069078e0000001ffffffff9406000000060000100090"]) 9.525719ms ago: executing program 0 (id=1247): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x1}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x7, 0xf15, 0x4}, {0x788c, 0xffff, 0x8, 0x9}, {0x4, 0x800, 0x3, 0xffffffff}, {0xffff, 0x9, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x800, 0x8bfd}, {0x0, 0x8, 0x8, 0x7}, {0x3, 0xc7cb, 0x800000, 0xa6a}, {0x401, 0x6, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x2, 0x2, 0x69}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) r2 = getuid() setreuid(0xee00, r2) setuid(r2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mlock(&(0x7f0000002000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x9b, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "88ce17", 0x65, 0x2b, 0xdb, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="0294cae1d22f1c2eb4383bace004e3fc", {[@fragment={0x1, 0x0, 0x0, 0x0, 0x0, 0x17, 0x64}], @tcp={{0x3, 0x2, r3, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800, 0x0, 0x4b}, {"d810e44bb8dfc3c12eafbb51bf81813c3d966d5f69c804814a4dd1bd27dd6687c110ac5928a7adfea90e17578ddecf3e0a453245c5ec039812475f3f3b21edef9922236769f6c4e08e"}}}}}}}) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000001c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @tcp={{0x1, 0x0, r3, r4, 0x1, 0x0, 0x15, 0x20, 0xd, 0x0, 0x0, {[@window={0x3, 0x3, 0xb}, @sack={0x5, 0xe, [0x1, 0x2, 0xe3]}, @md5sig={0x13, 0x12, "c874e4bf54fbeec4940b332676ecd10d"}, @md5sig={0x13, 0x12, "d61b6c322d25175862e4150abddb9b58"}, @mss={0x2, 0x4, 0xc}, @window={0x3, 0x3, 0x7}, @nop, @eol]}}, {"2c2d22813dbf1de169645e72b3fc93575e9c6717"}}}}}}) 9.260738ms ago: executing program 7 (id=1248): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='r\x00') r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) shutdown(r1, 0x0) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) open(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) r2 = msgget$private(0x0, 0xf1) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) r3 = msgget(0x2, 0x20) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='r\x00') (async) socket$unix(0x1, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) shutdown(r1, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) (async) open(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) (async) msgget$private(0x0, 0xf1) (async) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) (async) msgget(0x2, 0x20) (async) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) msgctl$IPC_RMID(r2, 0x0) (async) 0s ago: executing program 5 (id=1249): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x56}, 0x2, &(0x7f00000015c0), 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='lP.', 0x3}, {&(0x7f0000000100)="f0b40295376a", 0x6}], 0x2) execve(0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x9, 0x20, 0x7, 0x40}], 0x7, 0x0, 0x401, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000280)=[{{}, 0xfffffffffffffff9, 0x39, 0x10, 0xfffffffffffffffd, 0x3}], 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000001c0), 0x84, 0x0, 0x9319, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x5, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec3708246c5b160cce373448dbe5393a86a03035d3e0c0253e9bf8d8d522da1adbf4dd6cd72dfeea17554330fdcb6f1a3523609e67ab4b218db28f2208c959c05e93b323403984d57b158f5983892cf9fb3252cf3090d7c05e6f4e68bfcd9817533c18b", &(0x7f0000000080)=0x1918, 0x0, 0x37) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 j|E1\:)OB.Δz&,Mx;qTg' 51}DRp2f#)?}DŃ$".@_Byg *mR)`l'Sp({- key,O1J.U7]zZO؛{eUrYI]+MuCi~KCS+SJ5uiM9L{}e>!XfRZ0Ql)cq$f˶T򶜯Q+9>1S#:&[pD7MLO< MDGso_snd.sb_lock) 2nd 0xfffffd806dc772e0 inode (&ip->i_lock) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 54: Connection reset by peer) OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) login: set $lines = 0 Password: Login incorrect login: show panic Password: Login incorrect login: show registers Password: Login incorrect login: ps Password: Login incorrect show malloc login: Password: Login incorrect