last executing test programs: 3.763763135s ago: executing program 7 (id=2294): sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) 3.543805314s ago: executing program 7 (id=2297): select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7ffe}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = geteuid() getgroups(0x5, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, r2, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 3.521666277s ago: executing program 6 (id=2298): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="25e07b", 0x3}], 0x1, 0x0, 0x0, 0x8}, 0xe) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r1, &(0x7f0000000480)='\x00'/14, 0xe) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x48e}, 0x0, 0x9, 0x0, 0x0, 0x8000000000, 0xb000000000004000, 0x3, 0x1838}) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r4 = socket$inet(0x2, 0x3, 0x102) close(r4) 3.517289173s ago: executing program 3 (id=2299): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000000)={0x7ff, 0x1, {[0x703, 0x5, 0x4, 0x40, 0xf, 0x73e12c45, 0x1, 0x80000000, 0x0, 0x7, 0x9, 0xaa85, 0x7, 0xaa1, 0x7, 0x8, 0x1, 0xc], [0x6, 0x2, 0x9, 0xa8a8179, 0x2, 0x8001, 0x1, 0xb, 0xffffffff, 0xda64], [0x10001, 0x0, 0x7ff, 0x8000, 0x5, 0x4, 0x4], [0xb932, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x6, 0x0, 0x10], [{0x1c, 0xdd, 0x8, 0x7}, {0x2, 0x8, 0x6, 0x1}, {0xfffd, 0x3, 0xfbe, 0x40}, {0x2, 0x2, 0x8, 0x1}, {0x6, 0xc, 0x101, 0x100}, {0x7, 0x9, 0x6, 0xffff}, {0xda2, 0x2, 0x6, 0x10001}, {0xffc0, 0x761, 0x8, 0x7}], {0x4, 0xce33, 0x9, 0x9}, {0x10b, 0x9, 0x3, 0x2000}}}) r0 = socket(0x1, 0x4, 0xf8) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000240)) r1 = dup(r0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000280)) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f00000002c0)=0x67, 0x4) ioctl$TIOCSBRK(r1, 0x2000747b) r2 = fcntl$getown(r1, 0x5) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r5 = fcntl$dupfd(r1, 0xa, 0xffffffffffffff9c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000540)={0x0}, 0xc) r8 = getgid() r9 = getppid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r11 = getgid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r13 = geteuid() r14 = getegid() sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="c2a5500da776d4117e61e0b7e713f62461bd9ef9e09e9dfebca170cda6ff682aa668ef75ee4b", 0x26}], 0x2, &(0x7f0000000680)=[@rights={0x20, 0xffff, 0x1, [r0, 0xffffffffffffff9c, r0]}, @cred={0x20, 0xffff, 0x0, r2, r3, r4}, @rights={0x30, 0xffff, 0x1, [r5, r6, r1, r0, 0xffffffffffffff9c, r0, r0]}, @cred={0x20, 0xffff, 0x0, r7, 0x0, r8}, @cred={0x20, 0xffff, 0x0, r9, r10, r11}, @cred={0x20, 0xffff, 0x0, r12, r13, r14}, @rights={0x28, 0xffff, 0x1, [r1, r0, r1, r0, r1]}], 0xf8, 0x4}, 0x7) sendmsg$unix(r0, &(0x7f0000001980)={&(0x7f00000007c0)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000001940)=[{&(0x7f0000000800)="b5095b4e3a8f60868f754821c5ecf3dcd82ea75226334dd9712cd009d4ee793a2fe126f62aee01077c86f2b0ef6f0b9ba013f0b48e11d6e132dadf59396ccf93f3dda43d9155a58a2c0d719c857f1c090926c0094a4a2f7f6d5f3fd0492cdfa1e7e335a3e00f2b891b18e7da08ad8472db1cdc725221b68cc3fd109c0224d48341d1efb11ed0073286ae6fb7e5f9225b02a4323821b9f5314c9806efd5d7ebec4449bfe962cb491bd140f6db8eb5bfb65f6f41fe74c43cbdf34e5c97cc2ba8ee061755eaf17cb3618d", 0xc9}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="769b8120fe2ea215efeb23c30bc092034b869f2f2607e16ada4e3aff6039e54ac5e3cb", 0x23}], 0x3, 0x0, 0x0, 0x400}, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f00000019c0), 0x10000, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000001a00)={0x3982f595, 0x2, 0x5, 0x3, "b2c46105912c5c804b02abc8484590f02ace5c5f", 0x3, 0x600000}) msgget$private(0x0, 0x1) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000001a80)={&(0x7f0000001a40)=[{0x7, 0x4}, {0x41, 0x6f7f}, {0x2c0166822efccd53, 0x4}, {0x40, 0x800}], 0x4}) openat$vnd(0xffffffffffffff9c, &(0x7f0000001ac0), 0x80, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f0000001b40)={&(0x7f0000001b00)='./file0\x00', r1, 0x2}) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000001b80)) wait4(r2, &(0x7f0000001bc0), 0x1, &(0x7f0000001c00)) 3.515514433s ago: executing program 6 (id=2301): setrlimit(0x8, &(0x7f00000000c0)={0x42, 0x61}) r0 = syz_open_pts() close(r0) getrlimit(0x5, &(0x7f0000000040)) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x7ffbffff, 0x9, 0xff, 0x21d8b78c, "10152618620dccd269dc7adcff000300002500", 0x9, 0xfff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="1d0920935421966a699982597f3d89868420381cedd12eceed841eebb592426023074c0b254cb0af91c5b2434420a67dc9824ea71941b61e4a7c7a47c420baeb1437396096e6746d38e550ade1c001689dfef3a29aef5d04a00848a986a0a9e88f035bc8db36c09bdc6797ce296771bc099353dfd629cedcde2c8fe90f3a2105ee3331df2d9304d72919a21911c8a6c72283540869563f3a052bf30969b35a002dad45318e88f4114b4ef5bd9a9263edcb3bd6d89b1e859b7db2c8d235a47f9e28f84704adf9dba5bcafbedab960e58a", 0xd0}], 0x1) 3.511183424s ago: executing program 3 (id=2302): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(0x0, 0x80, 0x29) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867ea9ed92904831d11a55848d3fd987d0eb7462fbfb504601380841859eebeeb3371", 0x3d}], 0x1, 0x0, 0x0, 0x9}, 0x6) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="7fb9b071cfc29674818384af0f75f22e78257dfefb4f6fd500b19871840fd73154a8d6250fc7fa39da36000000001d2aec5b19130700"/69, &(0x7f0000000080)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @random="f600000eee7f", [], {@ipv4={0x800, {{0xa, 0x4, 0x1, 0xc, 0x30, 0x67, 0x4, 0x3, 0x61, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x6, 0xa8a3}, @timestamp={0x44, 0xc, 0x93, 0x3, 0x4, [{[], 0x6}, {[], 0x6}]}]}}, @udp={{0x3, 0x0, 0x8}}}}}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x24, &(0x7f0000000180)="fd0cc0", 0x3) sendmsg(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x180}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r4, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{}, {}]}) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000002c0)={&(0x7f00000000c0)='./file0\x00', r1, 0x3}) 3.26091288s ago: executing program 6 (id=2304): syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x1, 0x0, @rand_addr=0x6, @multicast2, {[@lsrr={0x83, 0x3}]}}, @icmp=@generic={0x10, 0x0, 0x0, "a5eaee0e"}}}}}) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)='m', 0x1}, {&(0x7f0000000180)='S', 0x1}], 0x2) r1 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x2) ktrace(0x0, 0x1, 0xe00, r2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xf8d, 0x8b, 0x2, 0x7}, {0x2, 0x81, 0x0, 0x2}, {0x1006, 0xa, 0x6, 0x1}]}) setitimer(0x2, &(0x7f0000000000)={{0xb, 0x6}, {0x2000400000000000, 0x7f}}, 0x0) ioctl$BIOCSBLEN(r3, 0xc0044266, &(0x7f00000001c0)=0x7) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="d3d3b638becfc5000000000000000800dc00000073213c108da2662e2186b928d24c88ace3e8659da875cd6e", 0x2c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ad8a7531b1c6af2ef6966b461e8d6fe72cfef4824fe750821662548746bf498c718c07c977c3255b", &(0x7f0000000080)=0x28, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) close(r4) r5 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x120, 0x8001}, 0x3, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000000}) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x10}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000024c0)={@random="533ed089f74d", @random="be18f0edadcd", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x29, 0x28, 0x65, 0x9, 0x1, 0x2e, 0x0, @empty, @broadcast}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x0, 0x0, 0xf7ff}}}}}}) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8c) kevent(r6, 0x0, 0x7, &(0x7f00000002c0)=[{{r6}, 0xfffffffffffffff9, 0x2, 0x40, 0x0, 0x5}, {{r6}, 0xfffffffffffffffc, 0x22, 0x20000000, 0x5, 0x46ad}, {{}, 0xfffffffffffffff8, 0xe, 0x8, 0x1, 0x400000000000008}, {{}, 0xffffffffffffffff, 0x6e, 0x10, 0xffffffff, 0xc3b}, {{}, 0xfffffffffffffffb, 0x6b28b7731859c8bc, 0x40000000, 0x9, 0x83}, {{r6}, 0xffffffffffffffff, 0x1d5, 0xf0000003, 0xe, 0x10000}, {{r6}, 0xfffffffffffffff9, 0x14, 0x10, 0x5, 0x100000001}, {{r6}, 0xfffffffffffffffe, 0x38, 0x8, 0x103, 0xfffdfffffffffffb}], 0x282, 0x0) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x3) 3.036383136s ago: executing program 6 (id=2308): getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = socket(0x1e, 0x3, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x801169ab, &(0x7f0000000240)) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) ioctl$VMM_IOC_INTR(r3, 0x800c5606, &(0x7f0000000200)={0x5, 0x1, 0x5}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x3, r0}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0115, '\x00'}, 0x2) setpgid(r0, r0) 2.987330954s ago: executing program 7 (id=2311): r0 = socket(0x2, 0x1, 0x0) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x1}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000001580)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./file0/file0/..\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x0, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xffff6397, 0x4}, {0x18, 0x2, 0xb, 0x4}, 0x1003, [0x6, 0xfffffcb1, 0x24a, 0x400000c, 0x1, 0x8, 0x9, 0x3]}, 0xfffffffffffffdfc) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="1fd54b1ec141392e", 0x8}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000002c0)=[@cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x20}, @cred={0x20}, @cred={0x20}], 0x80, 0xd}, 0x1) getsockname(r1, &(0x7f0000001600)=@in, &(0x7f0000001640)=0xc) sysctl$net_inet6_ip6(&(0x7f0000000580)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000002740)="abf734f14a4819137aa3fb4fede70914bb67340f459d8806085867fde6f3eceea7d85b9e4b487e5ea752729d4421276fe97a8f07a77efc742151f530da628321afb3defa47da55c2b95e8f1f4b2e51dac4d2cf31128821714f8fae14a6be1589d3a057f3cb522f5c7b9d7b467b0b8fa759d27151d8b2df46", &(0x7f0000000440)=0x78, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="a1af00903afe43d72ff8687f0e8712bf0d6c9b7ca86e9472b3a14d568b87d022d5f34a07a6bd4f76670b5ccf11365027693447713aca2173e12bab783308acfa79e7bdc3e0e7efc98318d79a5c46c158392d7b9527c59c0f0810d9aeaff1934aa2ad0dde47509148a2939c4f5fc2de577abc5f89fa26e5f0c163c9360c67f83df9a07e6726e2c1aee163a69fcf", 0x8d}, {&(0x7f0000000240)="982ed3c7", 0x4}], 0xd7, &(0x7f0000000100)=ANY=[@ANYBLOB="100000f633c24ea100000100000001000000"], 0x10}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x2, 0x0) r5 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r5) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) setgid(0xffffffffffffffff) 2.985364586s ago: executing program 6 (id=2312): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) r0 = socket(0x800000019, 0x8000, 0x10) r1 = msgget$private(0x0, 0x10) r2 = getpid() unlink(&(0x7f0000000300)='.\x00') msgctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1a0, 0x8001}, 0x1000000000007, 0x81, 0x0, r2, 0x4000000000003, 0x0, 0x0, 0x7}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() writev(r3, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000080)={0xfba, 0xfffffffe, 0x4001, 0xffffffdd, "b035000900a4006a6de6e015c500", 0x1, 0x1}) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69e1629b617452e06c828c7486dd606b9efbf1085000cb697a653e2c6f000000500000000000ff0200000000000000000000000000014e204e2300089078"]) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) poll(&(0x7f0000004140)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x100}], 0x2, 0x99c) unveil(0x0, &(0x7f0000004300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCIMMEDIATE(r6, 0x80044270, &(0x7f0000000080)=0x9) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x80) 2.517620685s ago: executing program 4 (id=2318): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x1c, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xbd, 0x0, 0x1, {[@mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x4}]}}}}}}}}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x2, 0x70, 0x4d}, {0x7c, 0x0, 0xee, 0x101}, {0x6, 0x5, 0x2, 0xa}]}) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000080)={0x7fffffff, 0x1}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4, &(0x7f00000000c0)="953552ddb1ff978e01cacf535f4927b63a4fb581ba2d05f04b0cfcd775801ec1bfdd2d927d737b83f028fdbb4607ea324f373b010fe7f56994", 0x0, 0x0, 0x0) 2.516133401s ago: executing program 4 (id=2320): mkdir(&(0x7f0000000640)='./file0\x00', 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x19}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) close(r0) r1 = socket(0x2, 0x3, 0xfe) r2 = socket(0x2, 0x3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4) bind(r1, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x21e) chdir(&(0x7f0000000140)='./file0\x00') setuid(0xffffffffffffffff) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1003, &(0x7f0000000000)=0x1, 0x4) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) chdir(&(0x7f0000000340)='./file0\x00') write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbffffffffeb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffb, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000800002, 0xd, 0x4, 0x3, 0x4], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x1fffffff, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0xffffffffffffffff, 0xb, 0x11000, 0xffffffff00000001], [0x104, 0x1fffffffffd, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7}, {0x8, 0x22, 0x5}, {0x4, 0x0, 0x2, 0x80}, {0x7, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x7, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x5}], {0x21, 0x5, 0xb1f4, 0x3}, {0xfffe, 0x3, 0x51, 0x3}}}) kevent(0xffffffffffffffff, &(0x7f0000000000), 0x400, &(0x7f00000001c0), 0x5f, 0x0) setitimer(0x3, 0x0, 0x0) kqueue() 2.509483223s ago: executing program 1 (id=2322): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x28980, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="f968f845920e632101a1a16648a42512d1d22bd616faaba0a30c4a4a36fe437a2bcf1c350275dd83", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f94e01785a8f43b7ef17002b56c70e94e2b69e24d88e9146c66afdc6911177105cb82e730ec9226cf873d40e34d07680270a73a6db316a0568544283f3a73e143408e9", &(0x7f0000000080)=0x44, 0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="000000000000faff", @ANYRESOCT=r1], 0xef, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) msgrcv(r1, &(0x7f0000000000)={0x0, ""/14}, 0x16, 0x3, 0x1800) mprotect(&(0x7f00003a4000/0x1000)=nil, 0x1000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r0, &(0x7f0000000480)='\x00'/14, 0xe) r3 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0}) symlinkat(&(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f00000001c0)='./file0\x00') 2.268926663s ago: executing program 4 (id=2324): syz_emit_ethernet(0x11a, &(0x7f00000005c0)={@empty, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x10c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x204}, @udp={{0x1, 0x0, 0x8}, {"56b4deb2d338a707789c6e7ca8c563a37b8f5831323314290950b960928829f3a7ff00e0dc6e7c2d25c6c0517c405e2c8f31e6647b5a3b4dc3a74f2ac01be29e49cae606004363ce3b44f244e7a49c30511c48f515338d72b6b2dab48d3a51256ac9f320d5bdd807dc882dd839a6c657c6b599fe290d17ebb3063cbd0e79fdadb61d82ff007dce9954a7b3c8fa965c3928bef031e34a92d5069f9db264a19f5fcdde6c4c3db0028fb1c5f7a79dddd0ebe50a53b56fe89d4e5d93aed162f1e4b829e1c7203591bec9aef359bd99c8464f171ef438518d08d4c1b356cc7c9f2ddfa3e215ce02df091a05369495f9b2f11e"}}}}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) syz_emit_ethernet(0x5c7, &(0x7f0000000b40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa000000000000000900050000907800000000000000004e224e20000890784efcad05e1dd7a5045463bbe0c63133dff11f4d2fba442247a02da9090d85f315367a17a8f9acfe215329fab0283f81f6e5c5654e476af99631a2819969437bdb372bcea91e87ec762445a2c0d611521"]) sysctl$net_inet6_icmp6(0x0, 0x0, &(0x7f0000000240)="c1707e", &(0x7f0000000300)=0x3, &(0x7f0000000340), 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f5769e67f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendto$inet(r2, &(0x7f0000000200)='\x00', 0x1, 0x195a05e282d6161, 0x0, 0x0) r3 = accept$unix(r0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x1801, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0x7) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0x18, 0x1, 0x2) setsockopt(r6, 0x6, 0x2, &(0x7f0000000000)="60590552f90ac2cada0ade036a863a734b26e119956718ea6e5d256d6c61ed0615a2d0252b7f7291295624ee6ce78b62d352593b4b917654634b7c2c3800671ace86", 0x42) 2.267942805s ago: executing program 3 (id=2325): select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7ffe}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x10, 0x28) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/225, 0xe1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x1, 0x0, {0x9, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$unix(r2, 0x0, 0x0, 0x404, 0x0, 0x0) ioctl$WSKBDIO_SETMODE(r0, 0x4004667b, &(0x7f0000000080)) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x1, 0x0) r5 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r5, 0xc0206921, &(0x7f00000001c0)) r6 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r6, 0x80206916, &(0x7f00000001c0)) setrlimit(0x1, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 2.267216573s ago: executing program 1 (id=2326): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb80350054ce09e919526de77b01080006040000000000000000c50d0000ff841a71acf2cf0194adec49601221909c8585c46da49176c31011bea93d013ea1f14f79f48c63afb42f"]) syz_emit_ethernet(0x46, &(0x7f0000000180)={@random="69e1629b6174", @random="52e06c828c74", [{[{0x88a8, 0x3, 0x0, 0x1}], {0x8100, 0x2, 0x0, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "6b9efb", 0x8, 0x50, 0x0, @rand_addr="cb697a653e2c6f8000005000", @mcast1, {[], @udp={{0x1, 0x3, 0x8}}}}}}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x110) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x637e) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x16, &(0x7f0000000140)={@local, @remote, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @broadcast, @remote={0xac, 0x14, 0x0}}}}}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r2, 0x20004109, 0x0) 1.800177726s ago: executing program 1 (id=2327): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x7, 0x3, 0x3, 0x1}, {0xc0, 0x85, 0xf, 0x7}, {0x816, 0xc, 0x14, 0x80}]}) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCREAD(r1, 0xc0187009, &(0x7f00000000c0)) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="0d882bf513a42a316e95d336d7769a8962410ed196b2f533b03e2aa379a15d8e4c4c88cbb6da8d7c5227b49cc3a0a8e5e9ed9be16b784c42c2d7dbdb1d781b8cbc18290ed67fbb6a5393b4900d38e3499520e449f4f10bf06b0688057482fe93a07b25ae4d39aad61ef69cfe1165e6a596e2ea146a31fa688cfd7fe30ec94183c4db8f8350d08e57b7c24b1684eca10a6bf193c53517727091e3c3f170e286ed5c75366d82661b2999395993", @ANYRES8=r1, @ANYBLOB="bc57599154f83b04a594d2d26ab3cfa2bee1fb7ce646b5", @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRES64=r1]) 1.79951205s ago: executing program 1 (id=2329): r0 = socket(0x11, 0x3, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETA(r1, 0xc4504447, &(0x7f0000000300)={0xffffffff, 0x0, 0x2000000b, 0x94, "08ff000000000000000000005d00", 0x2}) sendto$unix(r0, &(0x7f0000000080)="b10005010000009f0500070007010000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a42118210000720fd38bfb0000fd54c125191b1257aea8c500002002fbfe0c2300008abfba0902000000e371a3f8343712051eeab70800000000050000ffffffff00"/177, 0xb1, 0x0, 0x0, 0x0) 1.794401099s ago: executing program 6 (id=2330): setrlimit(0x5, &(0x7f0000000980)={0x3e, 0x7f}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0xfffff7c0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="6e992eb479f00f43797a321b657925dfad6ae3f9e1d0385adbd298fade1693c9608384a2a2c1c6c0898c08fb59cf6d6dd8c0920862f5d4dbbd7c1158e1f51b9b0d0c98ab3fc57076ac8b956b20a771cbee2740aed181efc3318aa450ca19e8dd73ce40045183ab27fedf8d8b3d7f2486bcbec0cb4f15c5f8a4974821893b57f14eba03b3780ff6e3a85038b1a54aa03ecc5cd756c51a565d3eef6523b005ae2bccae4bc97ea51cc02556f34918d2fc5f78b57974b2c9fa1a80612334f0efe57fd313c19fef3d61a535c9aa", 0xcb}, {&(0x7f0000000000)="9bbf79a08b7f9b91688b9b54634fd05d1fc8f73e703bec810da4b379e8880d55406f871f089a49199884c64b248aa8d950b71c2600eb3015b9c50b7026b5938eb09404967a9e8a708375dfed5f860190d6ee2609e0e4cd5921cfb9e9536efb5083fb1e9619731fd128ab51c7e24a8af043f920ddb4f640c94cf67009dc37c48a1a3f1e3a973c3910004bc10eb7e90457995776df109faf6ec59035f70186cc2c0615fc958175f70ebe86f55d6118c92b97", 0xb1}, {&(0x7f0000000200)="aaca31f1ad3cfbaf31d9777507cdf1847fdf8729b25191b26753911b586774d37f9ca89b8b9693490a38338e6901b81f31f58b0fe3e5aba19c769148bd0256224dac610bd7e3c4a00143ba310f1b2fb1aea598901f54fd05e9e95a71146c11aa58742f38f9b2f303f7b2fa9c4a6be4f212319e4dfb70fff4d667c4a5320776e0d0f3148ac132550fc05ae2ef38cb903b2d6c77d70edf2814a5d654ffeb4056866462f5a6340ba20a805d96641c347df293fbd38faaa03ad2a1c4b2cc0faceec4a8b288f804b03af58f", 0xc9}], 0x3) 1.78943496s ago: executing program 7 (id=2331): syz_emit_ethernet(0x50, &(0x7f00000003c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1f, 0x42, 0xffdf, 0x2000, 0x0, 0x0, 0x0, @rand_addr=0x4}, @udp={{0x3, 0x2, 0x8}, {"bd794d0f6a9d0b02b57c0d75520653b6c57395e6da9e9ad78c9930f020f968510a412d343f6b"}}}}}}) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) setreuid(0xee00, 0x0) (async) r0 = getuid() (async) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) (async) setreuid(0xee00, r0) (async) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000140)='*-x-:-\\:^\x00', &(0x7f0000000180)='+\x00', &(0x7f00000001c0)='}\x00', &(0x7f0000000200)='-%\'@ )%!/\x00', &(0x7f0000000240)='\xff\xff\xff\xff\xff\xff'], &(0x7f0000000380)=[&(0x7f00000002c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000300)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000340)='!&-&{\x00', 0x0]) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x30000) 1.550060811s ago: executing program 7 (id=2332): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x88) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aed, 0x2000007, 0xfe, 0x1, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0xcd, 0x88, 0x8, 0x7}, {0x8, 0x7f, 0xfff, 0x9}, {0x961, 0x900, 0xe}, {0x8, 0x200326, 0x2800, 0x7}, {0x2, 0x6, 0xffffffff, 0x99}, {0xce1, 0x4, 0xffff, 0x26d}, {0x8, 0x801, 0xc, 0x7}, {0x5, 0x82, 0x5, 0x9}, {0x7, 0x100, 0xd1a, 0x1088}, {0x1e7, 0x10001, 0xc, 0x2}, {0x1, 0x7ff, 0x8, 0xb}, {0xb8e, 0x4, 0x8, 0x3}, {0x29a7171a, 0x8, 0x1, 0x2264}, {0xc, 0x10000, 0x1, 0xfffffffc}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x4000000000000005, 0x0, 0x53}) socket(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x5) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x3}, {0x4, 0x1ff}], 0x27fd) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) recvfrom$unix(r0, 0xffffffffffffffff, 0x0, 0x801, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) sysctl$net_pipex(&(0x7f0000000180)={0x6, 0x1b, 0x2}, 0x3, &(0x7f0000000080), 0x0, 0x0, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="a3", 0x1}], 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000380), 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x5}, {0x6, 0x0, 0xe4, 0x2000100}, {0x6, 0xa, 0x83, 0x400f}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="71cfc296315f065b10dc1b932d5a34000000cb8fb5818384af1975f24a9bd13293a9d5bde34b94fcad2b3aca", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast2, @remote, @broadcast}}}}) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) 1.549573465s ago: executing program 1 (id=2333): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0xb, 0x20007}, {0x8106, 0x0, 0x4, 0x3}]}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7, 0x8017, 0x7fffffff, 0x40, 0x0, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x4, 0x71002}, {0x800, 0x9, 0x8, 0x1}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x800a}, {0x404, 0x1, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x99}, {0x2, 0x9, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x8f, 0x7fff, 0x6, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0xa3c, 0x8, 0xc}, {0x29a71717, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0xc, 0x88b0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0xf, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) sendmmsg(r1, &(0x7f0000001440)={0x0, 0x8000001}, 0xfffffe8b, 0x41e) getsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000040)=0x10) 1.545859453s ago: executing program 5 (id=2334): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r0 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0x3a) ioctl$TIOCEXCL(r0, 0x2000740d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) chmod(&(0x7f00000000c0)='./file0\x00', 0x21e) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0xee00, r1) open(&(0x7f00000000c0)='./file1\x00', 0x615, 0x1) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffeffffff86dd6006250000202b00fe350e28ef0900c08cfe24be00000000feffffff0000000000000000000000012b0202"]) 1.299883069s ago: executing program 3 (id=2336): open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mlock(&(0x7f0000356000/0x4000)=nil, 0x4000) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0xc, 0x0, 0x0, &(0x7f0000000080)="c38c4374c5ee39d810000000000000002d6600521a4a2cf2edbdea35bb", 0x1d) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x0, 0x1, 0x3, 0x40}]}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x404, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x61, 0xda, 0x80, 0x1}, {0x30, 0x9, 0x1, 0x81}, {0x6, 0x0, 0xa4, 0x6}]}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0x80206910, &(0x7f00000001c0)) r2 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) r3 = socket(0x18, 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000100)) socketpair(0x18, 0x4, 0xc6, &(0x7f0000000000)) recvfrom(r3, &(0x7f0000000080)=""/124, 0x7c, 0x1000, 0x0, 0x0) setsockopt(r3, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) 1.278383416s ago: executing program 5 (id=2338): r0 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r0, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.276758804s ago: executing program 0 (id=2339): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x8) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="9b0209c3", &(0x7f00000002c0)=0xfffffffffffffe8d, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x22}, 0x4, 0x0, 0x0, &(0x7f0000000400)="63afa137491600113bebf9d41b235a88d683de25598794aa300832f72de9ea7c6356e87a570100205d089a575c3fc0cbe65337bf7fd68ecf8a000000000000080000000000322453ca81118fc0ed392215e27cf184c1ee", 0x57) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f00000000c0)="b4f3c660a874f17ea64aa9a4049fb4492192f17e7db48b92db44930346dfb4645274803f1a9d03e1caed781867698d825f95c463d167ab1c35fc7933da08c8f31245cbbc97451ebf158ad45f86497e3802d70a6f6957d6aeca2aca30e2457d86753396b8a69d55431c444fee34c183bcede222deba6c43e9613c5e83d490984fc5b9481fa19260fd9c20220cb92e7f4e8f2f0359875d9235f09afe773c2d0a6f75e2d33ed7b227482f73fc51084d81ff9036681a01c93cee64cee992cbbda958e7c922d3bba541975d3d50dd3dca1122b7649b63222fd40cb1f5c3abf23a202ecdaf6d773e6a96806d", &(0x7f0000000040)=0xe9, &(0x7f0000000300)="af81891dec17e8df9ea09273c1546f8219661557ec92a1602b49df81f1b5a3d076b22bc5bcec379632993184025ea7d6d96c2a8b546dcd676a2a47ded8b4b4bec5c0c0f3bfabf27ff07026e4e85f7e0075e4ea935028d812e94dd8a2d1ea7e88f143e174121407b256ec68c1a6e9ea5b07ef388fdda3e0507dc45caef0cc6304e9cb58649ccb65ec46b98981ca9e664282714c5048ba6b27cbe07ddeefe04db17b8e91d31e1bc7915e9f6dca3d4bdb1b711073b7ada2db48acee2325011e55688a86e99a", 0xc4) 1.050049622s ago: executing program 7 (id=2341): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x462, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x10001, 0x7, 0x8, 0x8, "137437fdaec90b5830790cd0faa3901ef9ed7e55", 0x2, 0x7}) ioctl$TIOCSTOP(r1, 0x2000746f) write(r1, &(0x7f0000001380)="c547f8d85ccbf2cbf7097d5cdea7590df7ce93b7f026c1f9fa6bbcf573d8f7f80e998009f74cb3926bbcee3a13555c375c72cd1d46e8fc262fa39773abce3d9548f56cd4a04dd06f1204335ff799979e598cfe455d178f5331b71e", 0x5b) (async, rerun: 64) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (rerun: 64) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async, rerun: 32) write(r2, &(0x7f0000000200)="bb899b76d14f24e264aceda703e41c8a84e100000048ea741d8d657463ce0758edf516fd0faad3a1b3ad0fe59e8057ae82c6fbb34f68b12ee6056b296a7fbc5ed8c4fedf284d82c58121fd953b3571204bfac87f41dfec5bac22763caf3ac8a82155c067d4797ae3b0d00957e6a7946c038835355ba371d2", 0xfffd) (async, rerun: 32) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0xf0, 0x6453}, {0x44, 0x8, 0x1, 0x9}, {0x6, 0x1, 0x56, 0xfffff000}]}) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) (async) write(r0, &(0x7f0000000140)="7696e5f7ffff8c37cea8615ac7cf", 0x2c27945c880b947b) (async) write(r2, &(0x7f00000002c0)="873428f00b0e7e415208cc92aed91c5621983d50ec424b8f8e43bb8975156c4e0d51f3a140ed95a51d37efeff434a98e009f004022772e197286b72e9e920baeb3fbfa8d591505cd48d0bfe81bdc4c2276a2d50b877d2da28a6197bd8ef45f96c88415a7e6b3657968a33ed17f975e67366e8ddb08e2c548a5b36bc97fa3f3376e27ebbc8a43576f70731155f49e53872d0afbe823", 0x95) 1.049759397s ago: executing program 0 (id=2342): ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x0, 0x4, 0x10) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) socket$inet(0x2, 0x2, 0x0) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) 1.045579377s ago: executing program 2 (id=2344): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x6}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x6, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) pipe2(0x0, 0x8000) 800.086297ms ago: executing program 2 (id=2345): sysctl$kern(&(0x7f00000000c0)={0x1, 0x46}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867", 0x1c}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="71cfc296315f065b10dc1b932d5a34000000cb8fb5818384af1975f24a9bd13293a9d5bde34b94fc", &(0x7f0000000080)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) r1 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x1510, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) r2 = shmget$private(0x0, 0x1000, 0x440, &(0x7f0000002000/0x1000)=nil) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0285108, &(0x7f0000000040)={0x0, 0x29, 0x0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) unveil(0x0, 0x0) unveil(0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, 0x0) ioctl$BIOCSETF(r3, 0x80104267, 0x0) mknod(0x0, 0x2000, 0x450c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) socket(0x2, 0x3, 0x0) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) shmat(r2, &(0x7f0000000000/0x1000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 793.386625ms ago: executing program 2 (id=2346): r0 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x19) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x510, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) setgid(0xffffffffffffffff) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6c, 0x24, 0x9, 0x801002}, {0x206, 0x2, 0x9, 0x9}]}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x80) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0xc02069b6, &(0x7f0000000100)) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000040)=ANY=[]) r5 = kqueue() kevent(r5, &(0x7f0000000080), 0x1, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x9, 0x0, 0x0) ioctl$FIONBIO(r6, 0x8004667e, &(0x7f0000000100)=0x9) kevent(r5, &(0x7f0000000500), 0x4, 0x0, 0x20, 0x0) 793.108674ms ago: executing program 5 (id=2347): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="f968f845920e632101a5a12512e3d2b274f1f79b", 0x14}], 0x1) sysctl$hw(&(0x7f0000000080)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) 791.664694ms ago: executing program 4 (id=2348): rmdir(&(0x7f00000000c0)='.\x00') r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@in, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000340)=""/91, 0x5b}], 0x5, &(0x7f0000000440)=""/155, 0x9b}, 0x0) 789.374407ms ago: executing program 1 (id=2349): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe6) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0xff, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x70fff}, {0x1, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x10008007, 0x8}, {0x401, 0x200726, 0x2f03bd72, 0x7}, {0xfffffff9, 0x6, 0x6, 0x99}, {0xce1, 0xfffffdff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x84}, {0x1ce, 0x10001, 0x8000c, 0x3}, {0x7ff, 0xb, 0xfffff3ae, 0x9}, {0xb8e, 0x4, 0x8, 0x44}, {0x29a71717, 0x7fffffff, 0xfffffffd, 0x6}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0xff, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x70fff}, {0x1, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x10008007, 0x8}, {0x401, 0x200726, 0x2f03bd72, 0x7}, {0xfffffff9, 0x6, 0x6, 0x99}, {0xce1, 0xfffffdff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x84}, {0x1ce, 0x10001, 0x8000c, 0x3}, {0x7ff, 0xb, 0xfffff3ae, 0x9}, {0xb8e, 0x4, 0x8, 0x44}, {0x29a71717, 0x7fffffff, 0xfffffffd, 0x6}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002, 0x30004}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x6, 0xfa}, {0x0, 0x1000000100}}, 0x2) (async) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x6, 0xfa}, {0x0, 0x1000000100}}, 0x2) r0 = socket(0x2, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {}, {0x2}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x4000, 0xfa) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000300)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23", 0x41, 0x0, 0x0, 0x0) setsockopt(r3, 0x0, 0x7, &(0x7f0000000400)="ff030000", 0x4) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/12, 0xc}], 0x1) setsockopt$sock_int(r3, 0xffff, 0x800, &(0x7f00000000c0)=0x400, 0x4) (async) setsockopt$sock_int(r3, 0xffff, 0x800, &(0x7f00000000c0)=0x400, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r3, &(0x7f0000000000), 0x10) (async) bind(r3, &(0x7f0000000000), 0x10) socket(0x2, 0x2, 0x0) (async) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) setsockopt(r2, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) write(r0, &(0x7f0000000340)="a9b4d43a4b022a16a3a9fc548ff8b9ab31cda89d045cc269f11ea65df936d680f10278e29f53d86e97545b83145af549f664e2c40d9197e65bcac675c5e37bc22215fbfb9fbe542f2af963e54a1f229ee34c0e251d81a6c1453b7e447567e1e6ddaa1efea42678a319", 0x69) (async) write(r0, &(0x7f0000000340)="a9b4d43a4b022a16a3a9fc548ff8b9ab31cda89d045cc269f11ea65df936d680f10278e29f53d86e97545b83145af549f664e2c40d9197e65bcac675c5e37bc22215fbfb9fbe542f2af963e54a1f229ee34c0e251d81a6c1453b7e447567e1e6ddaa1efea42678a319", 0x69) write(r2, &(0x7f0000000200)="f92a9bd300"/20, 0x14) (async) write(r2, &(0x7f0000000200)="f92a9bd300"/20, 0x14) 547.543154ms ago: executing program 4 (id=2350): mkdir(&(0x7f0000000080)='./file0\x00', 0x98) unveil(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='c\x00') (async) unveil(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='c\x00') r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0/file1\x00', 0x20, 0x3) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x101, 0x6) (async) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x101, 0x6) ioctl$TIOCSETA(r0, 0xc1084413, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x0, 0x6}) open(&(0x7f00000002c0)='./file0/file1\x00', 0x80000000000206, 0x4ebfac6bbaf7949) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@local, @broadcast, [{[], {0x8100, 0x5, 0x0, 0x4}}], {@generic={0x8820, "7a8ca7d39ea29c21"}}}) 521.04534ms ago: executing program 0 (id=2351): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = socket(0x2, 0x2, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="ac0d25f4262106a6cd76ec1091e4f6425523629261a080ffba1b2e91849ae2c6d1d6324c6af08e619d15a406184823374059790b1439bc1df5549f9a7828035e3d790d377f48874344a9dc85d1dfadc7e0261d6e", 0x54}, {&(0x7f0000000340)="7ecbcd8b2d9f7ca300ea81700813dae74b1511740c70a534774bc0435da8a36a31d6e681dcf24aab5d3245c28ae43ac2cb75f4e24bb3ed7e6d11c8eb5e2ec6d3d644d9e9bc84a8cd92", 0x49}], 0x2) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) sysctl$hw(&(0x7f0000000300)={0x6, 0x12}, 0x2, &(0x7f0000000600)="8207df3de33ca63a65ffc025c0570260382cabd0545bbc385769fa1de8ad95b2c9cd073b58bfa6db91dce783062fca5ad5e54435eaaaed484f691e822f4f22822cf84d7fa7dc65f4c157ded2d897dc655cbd2a0070c6853905ac4af46a3e9d1bcf9124d82d8b825c8e9af14d8a058750", &(0x7f0000000040)=0x70, 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) sysctl$kern(&(0x7f0000000000)={0x1, 0xb}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCGET(r2, 0x20006473, &(0x7f0000000000)={'./file0\x00', 0x0, 0x0, 0xfffffffffffffffc}) 519.509206ms ago: executing program 5 (id=2352): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f00000012c0)) socketpair(0x19, 0x2, 0xb, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000180)=""/179, 0xb3}], 0x2, 0x0) sysctl$net_inet6_ip6(&(0x7f0000001500)={0x4, 0x18, 0x29, 0x30}, 0x4, &(0x7f0000001540)="4b8efdd2fd4bd7e52c8f261f97a518337510e39386b8", &(0x7f0000001640)=0x16, 0x0, 0x0) 517.491845ms ago: executing program 4 (id=2353): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) select(0x40, &(0x7f0000000180)={0xee6, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0xe494, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x100) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f0000000100)) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) r3 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r3, 0x29, 0x27, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) close(r1) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffff}) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0785101, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) select(0x40, &(0x7f0000000180)={0xee6, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0xe494, 0x9}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x100) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) (async) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f0000000100)) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) socket$inet6(0x18, 0x3, 0x0) (async) getsockopt(r3, 0x29, 0x27, 0x0, 0x0) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r1) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffff}) (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0785101, 0x0) (async) 291.700515ms ago: executing program 2 (id=2354): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="258b300ad1711569", 0x8}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) (async, rerun: 64) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7ffffffd, 0xffff63de, 0x3, 0x2, 0x2, 0x3, 0x80000001, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0x3}, {0x0, 0x4baa, 0x7ff, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x7, 0xf15, 0x84}, {0x788e, 0xffff, 0x8, 0xffffffff}, {0x4, 0x800, 0x1}, {0x209, 0x25, 0x28000, 0xffffe2e9}, {0x9, 0x1, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x3, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x9, 0x800000, 0xa6a}, {0x401, 0x4, 0x6, 0xa1}, {0x3, 0x3, 0x2, 0x9}, {0x3, 0x4, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0xe}]}) (async, rerun: 64) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x17) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) ftruncate(r2, 0x7ffff) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x41) preadv(r3, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/224, 0xfffffdd5}], 0x1, 0x0) (async, rerun: 64) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (rerun: 64) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="71cfc296315f065b10dc1b932d5a34000000cb8fb5818384af1975f24a9bd13293a9d5bde34b94fcad2b3aca68ecfffa44579531e3df602f5460bf17914ecd6b76000000c94c4948e0e3e3e8bbbf0a41335911ee6218f76129951149a8f3f1", &(0x7f0000000080)=0x80, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') unveil(&(0x7f0000000140)='./file1\x00', &(0x7f0000000080)='c\x00') (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008060001080006040003ffffffffffffe00000240000001cc67c8f20a8aaaaaac6ffffffff"]) (async, rerun: 64) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x82) (rerun: 64) mmap(&(0x7f000051c000/0x1000)=nil, 0x1000, 0x2, 0x8010, r4, 0x0) (async) r5 = socket(0x18, 0x3, 0x0) setsockopt(r5, 0x1000000029, 0x3e, &(0x7f0000000140)='\"\x00\x00\x00', 0x4) 285.029409ms ago: executing program 0 (id=2355): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffffff4d) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b0300000000000000000000ffff7f000001fe580400010000003771c41b01bd053300063204202de03bf203cc442ae33239d18e1eff688f06a327509fcc3ccd44957fb2011da86b445babbb82a262758c370e2c73c5f2d56b2212d01e7351545ff8d84e6bae103567baa7fdbbe80743d737429d0a122cb692d9c46b04dc21438fdebb33bb7b9a3161ba0470da7ce572a4d891b9a2c4ae9b44d8"]) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa"]) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 284.597087ms ago: executing program 2 (id=2356): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0x7}, {0x16, 0x3, 0xfe, 0x48a4}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="d3fefa38becfcd4001000088a67708d300107f00f6aca823564f7e57bd31011da10701178186fb6bca3dde21b21e15e9b01d380e15c8eff1a2c1650c154beafafe81360473798a99901e5f04e6aa060085a2aa8507a624ebad8dce4df7d8d02fc9696eefd5b445db3d8f2d063539ca41d2a90ad8", 0x74}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="00e0ae5b7e0d0000bc5a913fc194a34b8ecf5852cb0428d46e4abacc561a228515ce0b4326700e79c45fa08920bf6388be0b8df95f59f5ab0afef7a9b594b62f4b4efc235a711be96508750000", &(0x7f0000000080)=0x4d, 0x0, 0xffffffffffffffcb) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) (async) write(r1, &(0x7f0000000000)='\x00'/14, 0xe) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 284.323345ms ago: executing program 3 (id=2357): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000980)={0x60000000, 0x60000000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = socket(0x20, 0x4000, 0x3) setsockopt(r0, 0xffffffff, 0x7fffffff, &(0x7f00000000c0)="1ac06a31ed72e7b00c3991484424c70c9fb6cbb919ea615d3a078d8e548fb16d5e28936b8bdd0609a47dc29a3418dc4d4124ade2a16a1ca44b17b81fc538a685856deb39ce69169e5779fa408bc20929fd7ed1c11cd96ae0a81954db010521ee14fc7e395deb92fcc37619d04323938b14f62411585fcc26e9fa04d843b38a973dfeccff40bccdc2d7fe78eb27865fc04ea6419a1417470b73d2dac7b7c33f341247769e6a57319d928a860febbb2a8b584dba4c5dd295fb79ad52b9801f2689e548e6", 0xc3) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000020000000001020090"]) 284.008199ms ago: executing program 5 (id=2358): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x20) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r1, 0xffff, 0x8, &(0x7f0000000080)=0x6, 0x4) r2 = geteuid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x5, 0x0, 0x0, 0x44}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000080)={0x1, 0x2c}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) ktrace(&(0x7f0000000240)='./file0\x00', 0x1, 0x0, r3) fchown(r1, r2, r4) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x40) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x512, 0xffffffffffffffff) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0x40}, {0x8106}]}) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x80, 0x801) sysctl$kern(&(0x7f00000000c0)={0x1, 0xb}, 0x2, &(0x7f0000000000)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0x42, &(0x7f0000000440)={@broadcast, @local, [{[], {0x8100, 0x0, 0x0, 0x3}}], {@ipv6={0x86dd, {0x8, 0x6, "000100", 0x8, 0x3c, 0x9, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8d}, 0x10, 0x0, 0x0) sendmmsg(r8, &(0x7f0000000080)={0x0, 0x5ce}, 0x10, 0x406) close(r7) r9 = open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x46) bind$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa) preadv(r9, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 50.106681ms ago: executing program 0 (id=2359): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x10205b1a) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0x200, {[@rr={0x7, 0x3}]}}, @icmp=@info_request={0xf, 0x0, 0x0, 0x1, 0x2}}}}}) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) (async) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) 49.724966ms ago: executing program 2 (id=2360): r0 = socket(0x11, 0x3, 0x0) recvfrom$unix(r0, &(0x7f0000001080)=""/4073, 0x1024, 0x842, 0x0, 0x0) (async) recvfrom$unix(r0, &(0x7f0000001080)=""/4073, 0x1024, 0x842, 0x0, 0x0) r1 = semget(0x0, 0x1, 0x281) semctl$SETVAL(r1, 0xfffffffffffffffe, 0x8, 0x0) (async) semctl$SETVAL(r1, 0xfffffffffffffffe, 0x8, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x200000b, 0x385, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x40}, {0x3fe, 0x200725, 0x2800, 0x7}, {0x9, 0x650, 0x0, 0x99}, {0xce1, 0xffffffff, 0x4fb, 0x2d}, {0x6, 0x803, 0x16, 0x8}, {0x2, 0x82, 0x5, 0x1005}, {0x6e75, 0x8001, 0xd1f, 0x4}, {0x1cc, 0x10001, 0xd, 0x4}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000006, 0x5, 0x5, 0x10001002}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x6, 0x1, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f00000000c0)="b10005010000009f18003f0107000000211c13fecea79c5dfaf66e8d030100000000000000ef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f8343712050500b71d8000090005080000fca65361ba84913f01000008000000000000000000", 0xb1, 0x408, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 48.41302ms ago: executing program 3 (id=2361): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x401, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000200)="ea00000100000000", 0x8) (async) r3 = syz_open_pts() read(r3, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0x1ff, 0xfffffffffffffffc}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0xb, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) (async, rerun: 64) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x1, 0x400f}]}) (rerun: 64) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="25e07b", 0x3}], 0x1, 0x0, 0x0, 0x8}, 0xe) sysctl$kern(0x0, 0x0, &(0x7f00000008c0)="00f1ffffffffffff9f0400000098bdf4e420e6add2", &(0x7f0000000080)=0x15, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) (async, rerun: 64) write(r6, &(0x7f0000000480)='\x00'/14, 0xe) (async) setsockopt(r4, 0x6, 0x400002e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = syz_open_pts() kevent(r1, &(0x7f00000004c0)=[{{r3}, 0xffffffffffffffff, 0x68, 0x2, 0x5, 0x2}, {{r2}, 0xfffffffffffffffe, 0x82, 0x1, 0xc7ec, 0x8000000000000001}, {{r0}, 0xfffffffffffffffa, 0x4, 0x4, 0x5, 0x73}, {{0xffffffffffffff9c}, 0xfffffffffffffffa, 0xa1, 0x80, 0xff, 0x18}], 0x49f1, &(0x7f0000000440)=[{{r2}, 0xffffffffffffffff, 0x34, 0x80000000, 0x27a, 0x5}, {{r8}, 0xfffffffffffffffc, 0x2, 0x0, 0xe55, 0x10}, {{r0}, 0xfffffffffffffffd, 0x80, 0x1, 0x6, 0x10001}, {{r1}, 0xfffffffffffffffa, 0x2, 0x80000000, 0x6, 0x6}], 0x8, &(0x7f00000001c0)={0x4, 0x5}) (async, rerun: 32) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) 48.053259ms ago: executing program 5 (id=2362): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x7) open(&(0x7f0000000040)='./bus\x00', 0x10000, 0x0) 0s ago: executing program 0 (id=2363): r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000), 0x23) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000280)) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="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", &(0x7f0000000080)=0x12e, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x4e, 0x20000044809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x16, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r3, 0xc0307004, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fchdir(r4) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt(r5, 0x6, 0x8, 0x0, 0x0) mmap(&(0x7f00004f6000/0x4000)=nil, 0x4000, 0x3, 0x5012, r4, 0x0) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="0ee33667", 0x4}], 0x1, 0x4) close(r6) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) ioctl$FIOSETOWN(r7, 0x8004667c, &(0x7f00000001c0)=0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. malloc(): allocation too large, type = 6, size = 56103010304 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error 0#+"$%.!",%: #/--!.$ %22/2 56.&,53(: /"*=08&&&&&$80785#32%8, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! OpenBSD/amd64 (Amnesiac) (tty00) login: vnd0: sloppy read from proc 24882 (syz-executor): blkno 0 bcount 4096 malloc(): allocation too large, type = 127, size = 402391056 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806d5e02e8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error denied attempt to set clock back 134217739 seconds pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: denied attempt to set clock back 134217744 seconds pckbd_enable: command error malloc(): allocation too large, type = 127, size = 5406812912 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: cksum4: out of data pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back 125829184 seconds pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error 2ěWARNING: thread `nfsio' (153620) exits with status -1 WARNING: thread `nfsio' (8025) exits with status -1 WARNING: thread `nfsio' (87481) exits with status -1 WARNING: thread `nfsio' (145630) exits with status -1 WARNING: thread `nfsio' (455089) exits with status -1 WARNING: thread `nfsio' (199261) exits with status -1 WARNING: thread `nfsio' (146125) exits with status -1 WARNING: thread `nfsio' (338081) exits with status -1 WARNING: thread `nfsio' (24554) exits with status -1 WARNING: thread `nfsio' (245065) exits with status -1 WARNING: thread `nfsio' (211845) exits with status -1 WARNING: thread `nfsio' (167922) exits with status -1 WARNING: thread `nfsio' (467042) exits with status -1 WARNING: thread `nfsio' (328307) exits with status -1 WARNING: thread `nfsio' (178193) exits with status -1 WARNING: thread `nfsio' (269835) exits with status -1 WARNING: thread `nfsio' (292304) exits with status -1 WARNING: thread `nfsio' (151854) exits with status -1 WARNING: thread `nfsio' (9432) exits with status -1 WARNING: thread `nfsio' (311961) exits with status -1 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 951 Starting stack trace... panic(ffffffff83434018) at panic+0x1ba __assert(ffffffff833e3311,ffffffff83330b7d,3b7,ffffffff833e9c00) at __assert+0x29 refcnt_finalize(ffff80002a903618,ffffffff8332c6db) at refcnt_finalize+0x1c8 pppx_if_destroy(0,ffff80002a903610) at pppx_if_destroy+0x3d pppxclose(205b92,1,2000,ffff80003a540548) at pppxclose+0xa0 spec_close(ffff80003ca46fd0) at spec_close+0x412 VOP_CLOSE(fffffd80693ed898,1,fffffd8007bfb6e8,ffff80003a540548) at VOP_CLOSE+0x12a vn_closefile(fffffd8077e8f080,ffff80003a540548) at vn_closefile+0x11d fdrop(fffffd8077e8f080,ffff80003a540548) at fdrop+0x126 closef(fffffd8077e8f080,ffff80003a540548) at closef+0x190 syscall(ffff80003ca47230) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x96b660946a0, count: 245 End of stack trace. syncing disks...set $lines = 0 set $maxwidth = 0 show panic trace show registers show proc ps show all locks show malloc show all pools machine ddbcpu 0 trace machine ddbcpu 1 trace