last executing test programs: 8.274399362s ago: executing program 6 (id=6007): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) setrlimit(0x8, 0x0) r2 = syz_open_pts() close(r2) r3 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef35902", 0x11}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockname$inet(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0)) close(r4) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000200)={0x10000, 0x4, {0xaa68, 0x7f}}) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0x5, 0xc, {0xfb, 0x4}}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034006600000006907800000006ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200029078fffd0503010000000000000000f11b86b6e6bf78fbbcfe578a82767454bbc6794fc471cc5bc7b1c5802b72a93cd9b14911954d5ccee5e01035287f5ad16739a5b112094eb5440db00650bdc0bb8fd688f9d9af128fd7c0f8fe7ccf8cef0925119e58c6e7d86f77695ecdaa4764365b068750c7e54ca208b56a831a526b300e039d50229e2d6a4ed6d6409ecc52a5dad627d6d002f39f92f2ac22fd905cebdca222301ab193380b1dcbeaa3c0f2d00cad3e42df52135f084969892b41e6e9f1a1c7a65ec2aa6e26de38929dcbc6"]) syz_extract_tcp_res(&(0x7f0000000080), 0x5e, 0xfffffd1a) 7.101649478s ago: executing program 3 (id=6025): open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd602a654700383afcfe8000000000000000000000000000bfff0200005e9609806131d0f0b15820425978e3500000000000000000000000010102907800000000000000000000000000000000000000000000bb2b00000500000000000000000000000000000000000000002e60acf619d16e672e7177ef9ea29fd5acf242e2c9cb40ac0f0d55f3eb597a5d6a91962717daa4302a6c555aeacd81d6ba5deb608089fc41dcc49f9c1bf9440b854a54eb988a6443a98acc1f52639a9d5dfcd9093d1e2094417d926f0777ecbc91a422535c4012fb8edad0a28b1b8b4cd59795aee97b6dc4aa6a6ae2ed86b60f708da784973b4b46ff4bf155"]) (async) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x9810, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0xee, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x8}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x4, 0x2f, "1800e6234f5d7a000000540945620000008000", 0x80, 0x400007}) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff8, 0xa2, 0x9, 0x20000, 0x100001, 0x400000000000181c, 0x20008, 0xb}, 0x0, 0x0, 0x0) (async) r1 = kqueue() sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f13630b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be3898718e85a774dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8", 0x74) (async) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = kqueue() kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{}, 0xfffffffffffffff9, 0x5, 0x10, 0x7fffffffffffffff}], 0x0, 0x0, 0x0, 0x0) (async) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) mknod(&(0x7f0000000440)='./file0\x00', 0x8000, 0x7) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x51}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) chroot(&(0x7f0000000040)='./file0\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000080)={0x2a03, 0x6, 0x3, 0x172, 0x2, 0x7fff, 0x2, 0x10, [{0x9, 0x2, 0x0, 0x6}, {0x9, 0xb, 0x80000001, 0x1ff}, {0x7, 0x7, 0x4e, 0x8}, {0x0, 0x2000008, 0x6, 0x13f}, {0x2, 0x3, 0x3, 0x2}, {0x0, 0x40, 0x3, 0x7}, {0x0, 0x9, 0x691, 0x5c4}, {0xa, 0xea, 0x3, 0xc0e}, {0x6, 0x6, 0x989, 0x5}, {0x8, 0x7fff, 0x7ff, 0x2}, {0x1000, 0x6, 0xd9e}, {0x8d6, 0x4, 0x2, 0x3}, {0x6c, 0xc3f5, 0x8, 0xb35}, {0x6, 0x750eb550, 0x9, 0xa5d}, {0x7fff, 0x5, 0x7fffffff, 0x9}, {0x6, 0x6, 0x2a4, 0x2b}]}) 6.937294169s ago: executing program 3 (id=6027): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x102) dup2(r2, r1) bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="79040f91f15da040473675618dcd42b074", 0x11) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r4, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) sysctl$hw(&(0x7f0000001840)={0x6, 0x18}, 0x2, 0x0, 0x0, &(0x7f0000001980), 0x0) pread(r0, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) 6.933848337s ago: executing program 3 (id=6031): pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000015c0)) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0xfffc, 0x1, 0x2, 0x0, @multicast2, @rand_addr=0x8}, @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, {[@eol, @eol]}}}}}}}) 6.709636801s ago: executing program 3 (id=6032): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4c, 0x7, 0x5, 0x5}, {0x2, 0x1, 0xb, 0x7}, {0x816, 0x8, 0x14, 0x80}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="3c49a263496329090000000a84e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5ad32a070000006ebb", &(0x7f0000000080)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000740)=ANY=[@ANYRESDEC]) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r1 = syz_open_pts() close(r1) syz_open_pts() socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf86, 0x0, 0x4}, {0x5, 0x800, 0x7}, {0x6, 0x80000003, 0x80e, 0x7}, {0x2, 0x1, 0xffffffff, 0x800009c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0xb}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x3, 0x4000003, 0xfff4, 0x1, 0x81, 0x2d, 0x8000000a, 0x1, 0x2, 0x644, 0xfffffffffffffff8}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) syz_open_pts() fcntl$getflags(r1, 0x1) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000001200)={0x29f57365, 0x4, 0x3, 0xffffffff, "8b030003000100787d902b56d864d3c3a3f4d3c9", 0x4000000}) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x4c, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @udp={{0x3, 0x0, 0x8}, {"fdf6a01be7c3955bdbf2f57d21ecd243a20ed05e6cae0c5b0e0c81fed7f101dd8333029e012488cdf5177c7e74939f5e"}}}}}}) writev(r1, &(0x7f0000002300)=[{0x0}, {&(0x7f00000001c0)="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", 0xe50}], 0x2) 6.387120335s ago: executing program 6 (id=6007): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) setrlimit(0x8, 0x0) r2 = syz_open_pts() close(r2) r3 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef35902", 0x11}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockname$inet(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0)) close(r4) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000200)={0x10000, 0x4, {0xaa68, 0x7f}}) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0x5, 0xc, {0xfb, 0x4}}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034006600000006907800000006ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200029078fffd0503010000000000000000f11b86b6e6bf78fbbcfe578a82767454bbc6794fc471cc5bc7b1c5802b72a93cd9b14911954d5ccee5e01035287f5ad16739a5b112094eb5440db00650bdc0bb8fd688f9d9af128fd7c0f8fe7ccf8cef0925119e58c6e7d86f77695ecdaa4764365b068750c7e54ca208b56a831a526b300e039d50229e2d6a4ed6d6409ecc52a5dad627d6d002f39f92f2ac22fd905cebdca222301ab193380b1dcbeaa3c0f2d00cad3e42df52135f084969892b41e6e9f1a1c7a65ec2aa6e26de38929dcbc6"]) syz_extract_tcp_res(&(0x7f0000000080), 0x5e, 0xfffffd1a) 5.781486522s ago: executing program 3 (id=6057): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x7ad, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfff4, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 5.173723917s ago: executing program 3 (id=6071): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f00006af000/0x1000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x678b}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil, 0x104}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f00002ba000/0x4000)=nil, 0x0, 0xfffffffffffffff9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f00005f0000/0x3000)=nil, 0x1}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000ad5000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x402}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x40000000000001ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x10000000000002}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000403000/0x3000)=nil}], './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x18, 0x1, 0x0) sysctl$kern(&(0x7f0000000c00)={0x1, 0x53}, 0x2, 0x0, 0x0, &(0x7f0000000cc0), 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) ktrace(0x0, 0x5, 0x128, r2) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x4c, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @udp={{0x3, 0x0, 0x8}, {"fdf6a01be7c3955bdbf2f57d21ecd243a20ed05e6cae0c5b0e0c81fed7f101dd8333029e012488cdf5177c7e74939f5e"}}}}}}) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x80, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3, 0x9e}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) setrlimit(0x0, &(0x7f0000000980)={0x47, 0x56}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() writev(r4, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x810, 0xc694, 0xfffffffe, 0xffffffdf, "a1040200000017000000ff106e7900d25d756000", 0x461b, 0x100}) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1) r6 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc1206949, &(0x7f00000001c0)) close(r6) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) openat$pci(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f0000000340)) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SPKRTUNE(r7, 0x20005302, &(0x7f00000000c0)={0x4, 0x4}) 4.869130208s ago: executing program 6 (id=6007): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) setrlimit(0x8, 0x0) r2 = syz_open_pts() close(r2) r3 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef35902", 0x11}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockname$inet(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0)) close(r4) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000200)={0x10000, 0x4, {0xaa68, 0x7f}}) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0x5, 0xc, {0xfb, 0x4}}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034006600000006907800000006ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200029078fffd0503010000000000000000f11b86b6e6bf78fbbcfe578a82767454bbc6794fc471cc5bc7b1c5802b72a93cd9b14911954d5ccee5e01035287f5ad16739a5b112094eb5440db00650bdc0bb8fd688f9d9af128fd7c0f8fe7ccf8cef0925119e58c6e7d86f77695ecdaa4764365b068750c7e54ca208b56a831a526b300e039d50229e2d6a4ed6d6409ecc52a5dad627d6d002f39f92f2ac22fd905cebdca222301ab193380b1dcbeaa3c0f2d00cad3e42df52135f084969892b41e6e9f1a1c7a65ec2aa6e26de38929dcbc6"]) syz_extract_tcp_res(&(0x7f0000000080), 0x5e, 0xfffffd1a) 4.480579232s ago: executing program 0 (id=6086): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe8, 0x0, 0x0, 0x0, 0x0, 0x1a3, 0x2}, 0x8, 0xd7c, 0x0, 0x0, 0x1ff, 0x4000000000, 0xfffffffffefffff9, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r1, 0x20004269) r2 = dup(r1) ioctl$BIOCPROMISC(r2, 0x20004269) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) 4.471786609s ago: executing program 0 (id=6090): syz_emit_ethernet(0x12, &(0x7f0000000000)={@empty, @broadcast, [{[], {0x8100, 0x0, 0x0, 0x4}}], {@generic={0x8100}}}) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x61) 4.331633594s ago: executing program 0 (id=6093): openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = open(0x0, 0x205, 0x0) fcntl$lock(r0, 0x9, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) sysctl$kern(&(0x7f0000000040)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000000200), 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000014c0)="ec6813b6d238c1ba7c041effa1cf42d0c584fffffffffff800000000251cd159d0f9c801497fb642605f9fc054e078879eaf7612e6", 0x35}], 0x1) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="e15a79c7def7ffffff635a54860602af124413450200a1f515b49156f305df5a", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(0x0, 0x2000, 0x1e5f) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r2, 0xc0206921, 0x0) r5 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r5, 0x80206919, &(0x7f00000001c0)) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000080)="000000005e0f72ce000000000000", 0xe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_BELL(r6, 0x20005701) 4.26281986s ago: executing program 0 (id=6097): r0 = socket(0x800000018, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x1, &(0x7f0000000040), 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x9, 0x4) setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x6, 0x1, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x5, 0x2}}}) kevent(r5, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) close(r4) ioctl$TIOCSETA(r3, 0xc0284457, &(0x7f00000000c0)={0xfffeffff, 0xfffffffb, 0xfefffffc, 0xfffefffc, "0800000000060000000100002afb54b90f1e0400", 0x5}) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140)={0xfffffffc, 0x7f, {0x6, 0x100000001}}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x4) write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) syz_emit_ethernet(0x1fbf, &(0x7f0000002440)=ANY=[@ANYBLOB="ffffffffffff07496b91a72886dd696bf59b1f892f01fe8000000000000000000000000000aafe8000000000000000000000020000aa"]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x7}], 0x1}) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x10001, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) r7 = syz_open_pts() close(r7) readv(r7, &(0x7f0000000180), 0x10000000000000a4) 3.917969164s ago: executing program 6 (id=6007): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) setrlimit(0x8, 0x0) r2 = syz_open_pts() close(r2) r3 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef35902", 0x11}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockname$inet(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0)) close(r4) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000200)={0x10000, 0x4, {0xaa68, 0x7f}}) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0x5, 0xc, {0xfb, 0x4}}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034006600000006907800000006ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200029078fffd0503010000000000000000f11b86b6e6bf78fbbcfe578a82767454bbc6794fc471cc5bc7b1c5802b72a93cd9b14911954d5ccee5e01035287f5ad16739a5b112094eb5440db00650bdc0bb8fd688f9d9af128fd7c0f8fe7ccf8cef0925119e58c6e7d86f77695ecdaa4764365b068750c7e54ca208b56a831a526b300e039d50229e2d6a4ed6d6409ecc52a5dad627d6d002f39f92f2ac22fd905cebdca222301ab193380b1dcbeaa3c0f2d00cad3e42df52135f084969892b41e6e9f1a1c7a65ec2aa6e26de38929dcbc6"]) syz_extract_tcp_res(&(0x7f0000000080), 0x5e, 0xfffffd1a) 2.76403093s ago: executing program 7 (id=6118): syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @broadcast, [{[{0x88a8, 0x3, 0x0, 0x2}], {0x8100, 0x3, 0x1, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x18, 0x3b, 0x0, @rand_addr="01984b0e23742b40c3fa3d76af5fc1fa", @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x11, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}]}], @udp={{0x1, 0x0, 0x8}}}}}}}) 2.762484798s ago: executing program 7 (id=6119): openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x380, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x88, 0xc, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="95a8e3f69261b11bfb779408877c5d94", @mcast1, @loopback]}, @hopopts={0x4}, @routing={0xc, 0x4, 0x0, 0x9, 0x0, [@mcast2, @mcast2]}, @dstopts={0x2b, 0x32, '\x00', [@pad1, @generic={0x5, 0xe4, "af20e4b21154e61fbb43d551c50b7bec06f120fe504d4df35619925b72a6b1656feb28597a452998fa7670c7e96a891d6ffe777cb844100410886327f4331b6b7014666b21692ac200f83283494936a2e78e688b24a12df0663b29bf2e8d3ccbab810b49c1ef16b67262e6271040c842f03cde08a1a439e382f0920b9d06cf2a5bbbf68f7e27c398dab6a1feba46ece491f2e3afc9dd415f72d449774cb6d7531708f6d0e12b3c1a52dbbd75db6ecc1ca45fe9dec04ea9d29642012029d0a721f39288cb0be11b5d12fc1fb0cad4845a210fbb369574dfe4b35dfd15d19d936c7f56a1b7"}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @generic={0x2, 0x8e, "ed197aa389e457f4964bef7ff489c04e6627466843c434adf00a7bdd4e1845eb275580125c799e8a837b4dda49ef9e1fa1b70dece49089c3b020b00734a60eb098995dd84e35eebbf81112e75783b6e677a4b2bf6e58471b44f252e4f2887854c4a848f436483155e7cc43b331e26c10d119db5da37942f6ea9bda53c43a5dfad197b5e36606161fe8c31c6053fc"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xb8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0xff, 0x0, 0x9, 0x0, 0x0, 0x7, 0x69}, @routing={0x2, 0x10, 0x0, 0x5, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @mcast1, @rand_addr="0a1067686fc379684e0d60984f1c5249", @loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast2]}, @routing={0x3b, 0x6, 0x0, 0x3, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @mcast1]}, @fragment={0x3c, 0x0, 0x13, 0x1, 0x0, 0x1f, 0x67}, @dstopts={0x0, 0xc, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x40, 0x58, "a26888ef62aa802b4b39b4ad372dc99e7bc8a4d4a2d5735e3e8b76d4054f2bac6b1ad8a09d4f8dcf1a2fe63c133e58b36edbac346569eb988bc9efa77123d022cd5d84bacfed6bb0a62d495e8ef184584e7dac99e28b1fc8"}]}], @udp={{0x2, 0x3, 0x8}}}}}}}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r0, 0x0, 0x6d, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0xa, 0x83, 0x400f}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) sysctl$kern(&(0x7f0000000100)={0x1, 0x5a}, 0x2, 0x0, 0x0, &(0x7f00000011c0), 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x4, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) sendmsg$unix(r3, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$FIOASYNC(r4, 0x80047469, &(0x7f00000000c0)=0x5) 1.962876911s ago: executing program 2 (id=6141): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x1c, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xbd, 0x0, 0x1, {[@mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x4}]}}}}}}}}) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (rerun: 64) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000100)={&(0x7f0000000040)=[{0x7, 0xfffffffb}, {0x21, 0x800}], 0x2}) (async) socket(0x18, 0x2, 0x0) (async) select(0x0, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000080)={0x5f, 0x4}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x1, 0x3, 0xffffffff00000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x4e) 1.855850343s ago: executing program 5 (id=6147): mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.810327555s ago: executing program 7 (id=6150): syz_open_pts() (async) r0 = syz_open_pts() syz_open_pts() (async) syz_open_pts() mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) syz_open_pts() fchown(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000280000000000f09078ffffffffdfffffff4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50770b0f0d3d9cab0036e4ff0690780080"]) sysctl$net_inet_ah(&(0x7f00000000c0), 0x4, 0x0, 0x0, 0x0, 0x0) 1.809693059s ago: executing program 5 (id=6151): r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000001840)={0x0}, &(0x7f00000000c0)=0xc) ioctl$VNDIOCCLR(0xffffffffffffffff, 0x80384601, &(0x7f00000001c0)={0x0, 0x80000001, &(0x7f0000000180)='./file0\x00', 0x8}) r2 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x80206980, &(0x7f00000001c0)) pipe(&(0x7f0000000640)={0xffffffffffffffff}) close(r3) r4 = socket(0x18, 0x2, 0x0) close(r4) r5 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r6 = socket(0x18, 0x2, 0x0) r7 = dup2(r4, r6) setsockopt(r7, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) write(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setpgid(0x0, r1) 1.804728136s ago: executing program 2 (id=6153): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="b92e2f", 0x3}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x30}, 0x2, &(0x7f0000000480)="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"/385, &(0x7f0000000080)=0xfffffe80, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000280)={0x10, 0xffffffffffffff80, [{&(0x7f000041c000/0x3000)=nil, &(0x7f0000118000/0x4000)=nil, 0x7f}, {&(0x7f0000394000/0x2000)=nil, &(0x7f000047d000/0x4000)=nil, 0x7}, {&(0x7f0000490000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f000079d000/0x4000)=nil, &(0x7f0000422000/0x3000)=nil, 0x80000001}, {&(0x7f00006b3000/0x4000)=nil, &(0x7f000064b000/0x4000)=nil, 0x2}, {&(0x7f00002fc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4}, {&(0x7f0000001000/0x3000)=nil, &(0x7f00004bb000/0x4000)=nil, 0x423}, {&(0x7f00001f1000/0x4000)=nil, &(0x7f0000597000/0x2000)=nil, 0x5}, {&(0x7f00007ad000/0x2000)=nil, &(0x7f00002a5000/0x4000)=nil, 0x9}, {&(0x7f00007d1000/0x1000)=nil, &(0x7f00000fa000/0x400000)=nil, 0x9ffa}, {&(0x7f0000582000/0x3000)=nil, &(0x7f00003d1000/0x4000)=nil, 0x7}, {&(0x7f00007db000/0x1000)=nil, &(0x7f00002ff000/0x4000)=nil, 0x9}, {&(0x7f000069d000/0x2000)=nil, &(0x7f00006e4000/0x1000)=nil, 0x100000000}, {&(0x7f0000685000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f000032b000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f00004e2000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil}], './file0\x00', 0x7}) munmap(&(0x7f0000514000/0x4000)=nil, 0x4000) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt(r3, 0x29, 0x0, &(0x7f0000000140)="26dee24f802ddd5b36c0bd896eb001dbf5736e2b7131b90c614e985b623909073a21ced15c582369f35c2c9d989c15b99487a6ba2a695da176032b3a2f0b32c5d1e623b5f99fc3f1ca1b7f3406c35749acef44a48aadeb8333de3e42924eddb54e30af0e2b504a98e65482aa9946ddbb907dc40442f49d505f610d20da5a9a36bf5d5e0bc7332c083e135ee42fd905eee021ee154173e6c977908bb400046b478483b846b83893ea43825d4acec3a3ef11d5", 0xb2) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x1, 0x8}) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x112) munlock(&(0x7f00006a2000/0x2000)=nil, 0x2000) 1.762912332s ago: executing program 1 (id=6155): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x22, 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0x7fffffff, 0x4, 0xfffffff7, 0x8451, "e883864165aa19c0f29cc7968045ad20025a467d", 0xd450, 0x2}) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x3810, r0, 0x3) (async, rerun: 32) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000080)) (async) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x40087468, &(0x7f00000000c0)) (async) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000100)=0xffff) (async) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000140)=0xff) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000180)=0x83) (async, rerun: 64) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) (rerun: 64) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000240)) (async) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000280)={0x2, 0x3}) (async) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f00000002c0)=0x6) (async, rerun: 32) chflagsat(r0, &(0x7f0000000300)='./file0\x00', 0x1, 0x2) (async, rerun: 32) unveil(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='r\x00') (async) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$VT_GETMODE(r3, 0x40087603, &(0x7f0000000400)) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000440)=@un=@file={0x0, ""/62}, 0x40, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/152, 0x98}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/141, 0x8d}, {&(0x7f0000000780)}], 0x5, &(0x7f0000000840)=""/227, 0xe3}, 0x41) (async) connect$unix(r0, &(0x7f0000000980)=@file={0x0, './file1\x00'}, 0xa) (async, rerun: 64) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000009c0)={0x6, 0x8, 0x0, 0x8, "fc8746d7cfb5dfeaf290fcb3d2ead148ad1d1df4", 0x5, 0x8}) (rerun: 64) setsockopt(r0, 0x40, 0x1, &(0x7f0000000a00)="a6e47902fced7a7439dd4faba00857041b4b43b2826b75f231f1581efa8ae478beef601fb61414b1a6f663dd45731abbacc9435a00fef2425cf3095ccd5f0a1fab7dde448cec84306493dcdd19a052039a13c8c65a167b82b98919d636cd0671bc24686b61cdcf7aff5224a68460cd6181cb6c3c7a1adcd59c36e8e6a87ccf46547ef9bba7eb163df82423083b4d22e5f18473073972ceb82a9e8ef8e9e188a54e21a1e4c7952c6a31057d8e61bfcf8bd184edcc3c77d830f0e6d1b13540d67b97", 0xc1) (async) ioctl$FIOGETOWN(r3, 0x4004667b, &(0x7f0000000b00)) ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000000b40)={0x10, 0x8, 0xff}) (async, rerun: 64) write(r1, &(0x7f0000000b80)="d52cb195079fbcdaf1eb4f7b3b8b88e07873e60a72537a3b34b8458b8af75dc8ed123e63792384d527f07ad06e60d358860cebf565760f3f59752256c0", 0x3d) (async, rerun: 64) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000c40)={0x1, &(0x7f0000000c00)=[{0xc7b, 0x0, 0x9}]}) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) getpeername$unix(r5, &(0x7f0000000cc0)=@abs, &(0x7f0000000d00)=0x8) (async) execve(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000f40)=[&(0x7f0000000d80)='r\x00', &(0x7f0000000dc0)='.\x00', &(0x7f0000000e00)='\x00', &(0x7f0000000e40)='/dev/tty\x00', &(0x7f0000000e80)='/dev/zero\x00', &(0x7f0000000ec0)='/dev/tty\x00', &(0x7f0000000f00)=')}\x00'], &(0x7f0000001140)=[&(0x7f0000000f80)='/dev/bpf\x00', &(0x7f0000000fc0)='/dev/zero\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='/dev/zero\x00', &(0x7f0000001080)='/dev/zero\x00', &(0x7f00000010c0)='/dev/tty\x00', &(0x7f0000001100)=']\x00']) (async) ioctl$BIOCSRSIG(0xffffffffffffffff, 0x80044272, &(0x7f0000001180)=0xdeaf) 1.761841535s ago: executing program 2 (id=6156): r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xb9) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x1, 0x10, 0xe4, 0x7}]}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="b9", 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) r2 = dup(r1) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r3 = socket(0x2, 0x5, 0x0) shutdown(r3, 0x2) close(r3) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') fsync(0xffffffffffffff9c) sysctl$hw(&(0x7f00000002c0)={0x6, 0x6}, 0x2, &(0x7f0000000040)="6c01046b", &(0x7f0000000000)=0x4, 0x0, 0x0) sysctl$hw(&(0x7f0000000300)={0x6, 0x7}, 0x2, &(0x7f0000000380)="8d58e3865f7bb88258aa7321b89553e8241b98704e9981f0073342e15398f208843840b3d196a18e5779c2105e86b87abc1562e244525be9a533ba305ffe8ae0573820d30b8c78ef1e1f1a67f806a47931b689d89220a58af7a6ce1dd7d0350d73c32b2f0e43eb8dd8c68674df2b0c9ac4ea730a82b84d6830d30b70f0c14719763a8640f11cbc16026f28136ef81e1f92eedc02179393d951f6c8bea5c8ca1254cb24c56a32eb0a7afefa5cadac333e78a1bed89f3e278ec46fb8c756a9d016199403a6172a07d0af34cb207048307fc2f44a", &(0x7f00000001c0)=0xffffffffffffffa4, &(0x7f0000000340)="3fbcc2464c2e6a5f7135ec4a", 0xc) 1.744656767s ago: executing program 7 (id=6157): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) utimes(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={{0x4, 0x9}, {0x6, 0xf}}) listen(r0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0) chmod(&(0x7f0000000480)='./file0\x00', 0x120) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xb, 0x8013ea, 0xfff6, 0x0, 0x9, 0x25, 0x8, 0x2, 0x1, 0x640, 0x4000000000f19}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r2) shutdown(r0, 0x0) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xe661, 0x2, 0x6, 0x7ffb, 0xffffffffffff8001}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, &(0x7f0000000240)="71f9504cee450c00bc5a91501d94a34b8e5fb59c7afec37082d52f3bb448f4dc5976bd430672f15590e8280aa17e99659c496277ade90e544ac5b7558a94b6de52e45cee8349df1df494d23d5341e47d0f41a45e516f17bcc70ec2331da9e5524f60aa6d5ece9798e209179121b95b4800e88f661fb6d607acc363f497124ecffa65709f43b3f4b0690fe50cabef40289736f630fe43fc17f5f545a910de9d5cee4e607ec91d0696ba08815ed8671bf3f3aa1292c1533304056dd518b8a422254f9a04cb800d2917e09fa76b36f59512c1830d0f5e92bf709f071359bef1998d5692", &(0x7f0000000080)=0xffffff1b, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffff8, 0x40, 0x1, 0x8, 0x5}, {{r0}, 0xffffffffffffffff, 0x40, 0x1, 0x7, 0x99b7}, {{r0}, 0xffffffffffffffff, 0x10, 0xfffff, 0x7fffffff, 0x31}, {{r0}, 0xfffffffffffffffd, 0x22, 0x2, 0x0, 0x8000}, {{r0}, 0xfffffffffffffffd, 0x1, 0x4, 0x4, 0x4}], 0x3, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffffb, 0x0, 0x20000000, 0x2, 0x3}, {{r0}, 0xfffffffffffffffa, 0x1, 0xfffff, 0x7fffffffffffffff, 0x7}, {{r0}, 0xfffffffffffffffe, 0x95, 0x40000000, 0x38000000000, 0x6}, {{r0}, 0xfffffffffffffff8, 0x0, 0x2, 0xffffffffffffffff, 0x4}, {{r0}, 0xfffffffffffffff9, 0x10, 0x80, 0xaf, 0x6}, {{r0}, 0xfffffffffffffffb, 0x44, 0x2, 0x2, 0x10}, {{r0}, 0xfffffffffffffffa, 0xa0, 0x2, 0x20000000, 0x6eeb}], 0x401, &(0x7f0000000440)={0x8, 0x2}) 1.740620214s ago: executing program 5 (id=6158): mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000280)='./bus\x00', 0x6000, 0x202) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x40fc}, {0x6, 0xa, 0x83, 0x400f}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x40fc}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15114aa764dce743f06b3f3e8347a21", 0x14}], 0x1, 0x0, 0x0, 0xb}, 0x3) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15114aa764dce743f06b3f3e8347a21", 0x14}], 0x1, 0x0, 0x0, 0xb}, 0x3) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="71cb42008037c30caef9efff587d054cad082eb4fc7a0ec2b2777f4730c4e6c4568500000000000000b87ea257082097ec16cf59ac5bd8bd3646a7ce53633d66cc41cd4db7e440e722e6b5455252a18b8c8b54fd5e50a30112312a16019b8bb33f63fc22", &(0x7f0000000080)=0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000240)=ANY=[@ANYRES8=r2]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) (async) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x310, 0x2}, 0x100000000001, 0x861, 0xffffffffffffffff, 0x0, 0x100000000, 0xfffffffe, 0x7, 0x10000000007}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000014c0)="ec6813b6", 0x4}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="e15a79c7def7ffffff635a54860602af124413450200a1f515b49156f305df5a9da4070000006ebb807e7fa1", &(0x7f0000000080)=0x2c, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="e15a79c7def7ffffff635a54860602af124413450200a1f515b49156f305df5a9da4070000006ebb807e7fa1", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000480)="00000000d9658f010000003068e8a83e058dd87fa1c842f59f0600785e33372000ff00004d9a465c8238f8c98f56827674018413cc08d98cf6ca1934791e224052009d87bd", 0x45) write(r0, &(0x7f00000000c0)="cf810e34c770818781ef7314916d4fd96ea493dcfa35502169afc5d4101d80a1329222f0ef5a49bd95990595c27cfd5beb6df9ac77341bf27501eb736cbae1147ceff7494115ce162d176b11fda4983ac961bcba25e05da34f006a9f98f4c983406e2ae09142082dc656d215e7d05f8c285a2a20dd970cf4e4b6c1c5149853df20d22a37c00b7a74fe51ce4c", 0x8c) (async) write(r0, &(0x7f00000000c0)="cf810e34c770818781ef7314916d4fd96ea493dcfa35502169afc5d4101d80a1329222f0ef5a49bd95990595c27cfd5beb6df9ac77341bf27501eb736cbae1147ceff7494115ce162d176b11fda4983ac961bcba25e05da34f006a9f98f4c983406e2ae09142082dc656d215e7d05f8c285a2a20dd970cf4e4b6c1c5149853df20d22a37c00b7a74fe51ce4c", 0x8c) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') 1.621583554s ago: executing program 4 (id=6159): syz_emit_ethernet(0xa6, &(0x7f0000000700)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900703a0000000000000000000000000000000000000000000000000000000001"]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000000000)='7', 0x1}], 0x1, 0x40041) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2810, r1, 0x0) ftruncate(r1, 0x8) 1.603431993s ago: executing program 5 (id=6160): syz_open_pts() (async) syz_open_pts() (async) syz_open_pts() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005136000009f0000000000070000001c130500000000fef96ecfc72fd3357ae380b37b6730397804be78164991f7c8cf5f882b295be1aa5b23edeb51e2f0ac3ebbc215000000eeffffff74b0da4f59dd028ea8af630037282102000000720f1a8bfbb770c1f572c822ea772ec592040000000000ff0c2300008abfba0900000008e371a3f83437fb6d90dfb71d89e0462c5e52000080042000"/177, 0xb1, 0x406, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, &(0x7f0000001700)={0x6, 0xfffffffffffffff7}) (async) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000014c0)="ec6813b6d238c1ba7c041effa1cf42d0c584fffffffffff800000000251cd159d0f9c801497fb642605f9fc0", 0x2c}], 0x1) r3 = kqueue() kevent(r3, 0x0, 0xfffffffe, 0x0, 0x10009b69, 0x0) (async) close(r3) (async) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="e15a79c7def7ffffff635a54860602af124413450200a1f515b49156f305df5a9da4070000006ebb807e7fa1d2638b4317a564f770e674e94be9ab52a2fc7d146926241b", &(0x7f0000000080)=0x44, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r1, &(0x7f0000000140)="000000005e0f72ce000000000000bb5877bd2f164198dd3dbce7f1d91f06b6a5f10ec8a93a80a2871082c45d847bfe76499cc0078dda27e5803758c4b41f7fc48079", 0x42) (async) r4 = socket(0x18, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 1.591261542s ago: executing program 2 (id=6161): kqueue() socketpair(0x6, 0x5, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x69) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000080)=0x7f, 0x4) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10822, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) open(0x0, 0x8, 0x100) close(0xffffffffffffffff) syz_emit_ethernet(0x66, 0x0) open(0x0, 0x10000, 0x20) mknod$loop(0x0, 0xc000, 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xffffffffffffff2c, [{&(0x7f000062c000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100d3b5}, {&(0x7f0000419000/0x3000)=nil, &(0x7f0000278000/0x2000)=nil, 0xffffffffffffff7f}, {&(0x7f0000419000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f00006b8000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000076e000/0x2000)=nil, 0x2}, {&(0x7f000006d000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f000041f000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000000000005}, {&(0x7f0000197000/0x3000)=nil, &(0x7f00002ec000/0x2000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f000008f000/0x12000)=nil, 0x3}, {&(0x7f000042f000/0x1000)=nil, &(0x7f0000689000/0x3000)=nil, 0x3}, {&(0x7f0000418000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00000a6000/0x3000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000ff0000/0x3000)=nil, &(0x7f0000fed000/0x10000)=nil, 0x1000039fa}, {&(0x7f000042d000/0x3000)=nil, &(0x7f0000239000/0x2000)=nil, 0x6}], './file0\x00', 0xfffffffe}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setreuid(0x0, 0x0) ioctl$TIOCSETA(r4, 0xc1084425, &(0x7f0000000040)={0x0, 0xff, 0x8, 0x6, '\x00', 0x0, 0x20000000}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xfc, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f00006af000/0x1000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x678b}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil, 0x104}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f00002ba000/0x4000)=nil, 0x0, 0xfffffffffffffff9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f00005f0000/0x3000)=nil, 0x1}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000ad5000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x402}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x40000000000001ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x10000000000002}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000403000/0x3000)=nil}], './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) ktrace(0x0, 0x5, 0x128, r6) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 1.589964118s ago: executing program 1 (id=6162): syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) close(r0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) pwritev(r1, &(0x7f0000002740)=[{&(0x7f0000000000)='7', 0x1}], 0x1, 0x40041) ftruncate(r1, 0x40105) r2 = socket(0x2, 0x3, 0x0) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x2, 0x6616, 0x5, 0x0, 0xfffffffe, 0x7, 0x3, 0x2, 0x1, 0x2, 0x7b}) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4) bind(r2, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x0}, 0x8) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0/file0\x00'}, 0x10) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x2, 0x2, 0x0) (async) close(r0) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) (async) pwritev(r1, &(0x7f0000002740)=[{&(0x7f0000000000)='7', 0x1}], 0x1, 0x40041) (async) ftruncate(r1, 0x40105) (async) socket(0x2, 0x3, 0x0) (async) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x2, 0x6616, 0x5, 0x0, 0xfffffffe, 0x7, 0x3, 0x2, 0x1, 0x2, 0x7b}) (async) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4) (async) bind(r2, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x0}, 0x8) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0/file0\x00'}, 0x10) (async) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) (async) 1.588418908s ago: executing program 4 (id=6163): setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x3, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb}, 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000000)="5ab7776a", 0x4) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r1 = syz_open_pts() close(r1) setrlimit(0x3, &(0x7f00000001c0)={0x6}) r2 = socket(0x10, 0x4, 0x1) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') open(&(0x7f0000000080)='./file1\x00', 0x200, 0x0) setsockopt(r2, 0x1000000000029, 0xe, 0x0, 0x0) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000080)={0xbd, 0x7ffffffc, 0xffd7fdff, 0xfffffffd, "09032e4faceb089b351c0a164dc016b0763047c9", 0x80000000, 0x4}) getpeername(r2, &(0x7f00000013c0)=@un=@abs, &(0x7f0000001580)=0x8) setrlimit(0x3, &(0x7f0000001380)={0x7, 0x800}) r3 = geteuid() r4 = getegid() r5 = fcntl$getown(r1, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x1, 0xffffffffffffffff, 0x0, r3, r4, 0xa5, 0x85f}, 0x1, 0x8d6, 0xffffffffffffffff, r5, 0x2, 0x4, 0x5}) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001500), 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 1.351166503s ago: executing program 5 (id=6164): r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async, rerun: 32) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x48b}, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8000000000, 0x3, 0xfffffffffffffff4, 0x1838}) (async, rerun: 32) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 64) r1 = socket(0x800000018, 0x1, 0x0) (rerun: 64) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) (async) r2 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) (async) semctl$GETPID(r2, 0x1, 0x4, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) clock_gettime(0x3, 0xfffffffffffffffe) 1.350658915s ago: executing program 6 (id=6007): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) setrlimit(0x8, 0x0) r2 = syz_open_pts() close(r2) r3 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef35902", 0x11}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockname$inet(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0)) close(r4) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000200)={0x10000, 0x4, {0xaa68, 0x7f}}) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0x5, 0xc, {0xfb, 0x4}}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034006600000006907800000006ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200029078fffd0503010000000000000000f11b86b6e6bf78fbbcfe578a82767454bbc6794fc471cc5bc7b1c5802b72a93cd9b14911954d5ccee5e01035287f5ad16739a5b112094eb5440db00650bdc0bb8fd688f9d9af128fd7c0f8fe7ccf8cef0925119e58c6e7d86f77695ecdaa4764365b068750c7e54ca208b56a831a526b300e039d50229e2d6a4ed6d6409ecc52a5dad627d6d002f39f92f2ac22fd905cebdca222301ab193380b1dcbeaa3c0f2d00cad3e42df52135f084969892b41e6e9f1a1c7a65ec2aa6e26de38929dcbc6"]) syz_extract_tcp_res(&(0x7f0000000080), 0x5e, 0xfffffd1a) 1.35043897s ago: executing program 1 (id=6165): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r0 = syz_open_pts() r1 = geteuid() setuid(r1) close(r0) r2 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1) ioctl$FIOASYNC(r2, 0x80047460, &(0x7f0000000200)=0x1) unlink(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 760.549299ms ago: executing program 0 (id=6166): sync() sysctl$kern(&(0x7f0000000040)={0x1, 0x46}, 0x2, &(0x7f0000000140)="c818dd3d1b7b91cad25fe20e3997ab4ad3e50e4abc23b6878ab5a6aa32ade92c9cb9f6c45be9af3bcc8c5557906159adbc2ff9130dbe1787db7c17aed47684c6e54e5d42b4191c540bcfc5cf06854ae470694a5d84e884f6289423bee134c1c5fdb740ad988d3263ff443d20c64da6559f96a9cadb27de3041d53c55a4927597dd57e3356220788ce89bc6a4b897ed0a9f593ee7ba957ffede", 0x0, 0x0, 0x0) 735.044973ms ago: executing program 1 (id=6167): syz_open_pts() r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="6ef8a83f5330", 0x6}, {&(0x7f0000000300)='.', 0x1}], 0x2) clock_gettime(0x4, 0xffffffffffffffff) syz_open_pts() 734.338366ms ago: executing program 2 (id=6168): r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x3}, 0x8, 0x0}, 0x400) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x0, 0x85, 0x6, 0x2}, {0x4006, 0x9, 0x3, 0xb643}]}) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[]) r2 = accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8) r3 = socket$inet6(0x18, 0x5, 0x6) kevent(r0, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffb, 0x1, 0x2, 0x339, 0x9}, {{r1}, 0xfffffffffffffffb, 0xc, 0x10, 0x3, 0x3ff}], 0x1, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffff8, 0x81, 0x80, 0x10001, 0x5}, {{r1}, 0xfffffffffffffffe, 0x80, 0xf0000000, 0x6, 0xffffffffffffe2f5}, {{r2}, 0xfffffffffffffffd, 0x40, 0x80000000, 0x1, 0x9}, {{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x23, 0x80, 0x4b, 0x726}, {{r1}, 0xfffffffffffffffd, 0x47290006e31f3e44, 0x1, 0x8, 0x5}, {{r1}, 0xffffffffffffffff, 0x95, 0xf0000000, 0x1, 0x100000000}, {{r3}, 0x7, 0x68, 0x2, 0xfffffffffffffffe, 0xd}, {{r0}, 0xffffffffffffffff, 0xfe, 0x2, 0x2, 0x7c}], 0x5, &(0x7f0000000300)={0x3, 0x3}) r4 = socket(0x2, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b40)="825a4f47c21e02d7eda0f5903abf65b18d7c51050006ccffb40500007e515b7178642408fafd5793776666d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x40e) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$TIOCSETA(r5, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) 733.10247ms ago: executing program 4 (id=6169): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) 724.356909ms ago: executing program 5 (id=6170): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) socketpair(0x1e, 0x3, 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001040)="bdd2b7a0", 0x4}], 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r3, 0xffff, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0x40, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x61cf, 0xe780, 0x8000, 0x0, 0x7ff, 0x1002, 0x1, 0x2, 0x1, 0x0, 0x4000000000f1a}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(0x0, 0x10000, 0x20) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x100, 0x80000000, 0x80000001, 0x10001, 0x10, [{0x0, 0x9, 0x8, 0x71000}, {0x7, 0x8, 0x6, 0xfffffff9}, {0x4, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x7, 0x4}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x8, 0x3, 0x99}, {0xcdf, 0x1, 0x9, 0x6e}, {0x6, 0x803, 0x14, 0x8}, {0x4e2d, 0x82, 0x1, 0x9}, {0x4, 0x8101, 0xd1b, 0x88}, {0x1c1, 0x90001, 0xc, 0x3}, {0x8007ff, 0x9, 0x8, 0x6}, {0xb8c, 0xc3b, 0x2, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x3}, {0xc, 0x7, 0x2}, {0x0, 0x1, 0x4, 0xffffffff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10000, 0x2) ioctl$VNDIOCSET(r6, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x122, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa080045000114000020000400907800000000000000004e234e21ce10ab284d996a3198a58e65a874aaa6c7941a75a2dcaa2460edc93ec76dbce76893a917f0064ce7d384222d0329bd0708f3257ec796e3a3a5ed5b6ea9442abae3cfee02", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100007907800f3a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b42301fbce20dca03b048c1f7d03ef0c1695badab700c5bd7ffafeab2cafc67e4ee6bc4b704da7f72bd92dc8ca145ab196319a64fba250c317ac4ce2c0e3c4e2afbc156f50f848b7e45e8133dbd035e7e2fc2847f9751d836de04e527c46587a830fff210efd250da4f72dfde1b0ee3f77ea5efa03015857225e13612f518c39feab00a51c323d2509829fb72b5af2e23bdbc4a22196a14a7a175e38b1aa5333e657ba7e7c770144b4250c7e92558d04f0c0939c2dfdfedc38c4d0f6a894342cbc97a116e106ae2be206b538d3dbc5ab23296712e22"]) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2d) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0x80206979, &(0x7f0000000000)) 723.236975ms ago: executing program 7 (id=6171): syz_emit_ethernet(0x76, &(0x7f00000000c0)={@empty, @broadcast, [{[{0x88a8, 0x6, 0x1, 0x4}], {0x8100, 0x4, 0x0, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0xfe, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="4f6d38913c6594e8078600ee44621460", [], "e300003699508b41"}}}}}}}) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@empty, @broadcast, [{[{0x88a8, 0x6, 0x1, 0x4}], {0x8100, 0x4, 0x0, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0xfe, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="4f6d38913c6594e8078600ee44621460", [], "e300003699508b41"}}}}}}}) (async) 424.008373ms ago: executing program 0 (id=6172): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x2, 0xfffffffffffffffb}) r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000180)={0x6, 0x8}, 0x8) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffff7f) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r2, 0x0) pwrite(r2, &(0x7f0000001080)="1f", 0x1, 0x9) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4) dup2(r0, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r3, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xa) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) socket(0x1, 0x4000, 0x4) connect$unix(r5, &(0x7f0000000000), 0x10) write(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 423.397458ms ago: executing program 4 (id=6173): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xb, 0xe, 0xfff6, 0x1, 0x9, 0x25, 0x8, 0x2, 0x1, 0x640, 0x4000000000f19}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x20}], 0x1, 0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) socket(0x1, 0x2, 0x7) ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) ioctl$TIOCSTART(r4, 0x2000746e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffc, "32cd8b6a4682fe4b8c1a6c230000005d31000094"}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047469, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast}, @icmp=@generic={0x9, 0x6, 0x0, "4d9864a2"}}}}}) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x166441, 0xfffffff8, 0xea, 0x800, "978680cf00000008000e00", 0x4, 0x1}) close(r1) 399.327099ms ago: executing program 1 (id=6174): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000080)="741ad85d9f945ecdd7e4ffffffff000063b82792b26cff2414a0dee861bd8acd0000158b318100000000c00600d513a0619527c62715f2717d78444f5b1f758ba1086cbaec45eaa62435dfb84cad60daf6779849932654afd18ea1ecc560a1a8b60fb25168df3c2fa3fe5cb65a33bbd2937fd60a86fae0f61b6d196d85d5df9c2b56f6eb45f81bbb30cb227446a42e7db2928030089049dc81a6935221df0f52430f79179b11c5ca12d402", &(0x7f0000000200)=0xfec1, 0x0, 0xd1ef4960be19f686) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x17f6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x10b) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x43ff) open$dir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x40) 397.399575ms ago: executing program 7 (id=6175): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000a, &(0x7f0000000000)="ea", 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0x400101, 0xffff, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x4}, {0x9, 0x9, 0x7, 0x9}, {0x100, 0xf88, 0xd, 0x9}, {0x200005, 0x800, 0x8007}, {0x403, 0x9, 0x2803, 0x7}, {0x1, 0x650, 0x3, 0x9a}, {0xce1, 0x3ff, 0x4f8, 0x69}, {0x6, 0x803, 0x14, 0x8}, {0x5, 0x82, 0x5, 0x100005}, {0x6a74, 0x73f, 0xd3d, 0x4}, {0x1cc, 0x12001, 0xc, 0x3}, {0x8, 0xa, 0x5, 0x2}, {0x3, 0x7, 0x8, 0x4}, {0x9eda, 0xeffbfffa, 0x1, 0x6}, {0xc, 0x5, 0x8, 0x10200003}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="97ca0e9fef76", @random="94ea09066dbd", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0x4010, 0x9, 0x2, 0x0, @multicast1, @broadcast}}}}}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102009078000005000369c46dea0006060826651f52e2840a3a68632730c0fc4357ff020000000000000000000000000001"]) shutdown(0xffffffffffffffff, 0x1) (async) r2 = msgget$private(0x0, 0x125) msgrcv(r2, 0x0, 0x0, 0x1, 0x1000) (async) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/121) (async) msgctl$IPC_RMID(r2, 0x0) (async) sysctl$kern(&(0x7f0000000240)={0x1, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x5}, 0xb, 0x4, 0x40800}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r3, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000340)=[{0x5, 0x4b, 0x7, 0x7}, {0xffff, 0x1, 0xf9, 0x4}, {0xd5, 0x9, 0xfe, 0x10}]}) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='<', 0x1}], 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x4e) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f0000000000)={0x0, 0x400000100006, 0x0, 0xffffff0a}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x53}) 393.168851ms ago: executing program 2 (id=6176): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="825a4fc3b1f0b0c7c8bd020000107c60f76c090804000000007bd16e8fb2bcccf69affebfdbb31c0c7313e675f", 0x2d}], 0x1}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="3c49a263496329090000000a84e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5ad32a070000006ebb807e7fa10000000017bf23566927ba3938828c00", &(0x7f0000000080)=0x44, 0x0, 0x0) (async) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) (async) r2 = msgget$private(0x0, 0x460) msgsnd(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000010000000000003098965bdbedd9977c0fb5936d52b06110217e7c"], 0x29, 0x800) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000200)='n', 0x1}], 0x1) (async, rerun: 64) msgsnd(0xffffffffffffffff, 0x0, 0x481, 0x0) (async, rerun: 64) msgrcv(r2, &(0x7f0000000080)={0x0, ""/42}, 0x32, 0x0, 0x800) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x100000000000000, 0xffffffffffffffff}) setuid(0xffffffffffffffff) (async) syz_open_pts() (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r4 = semget(0x0, 0x1, 0x404) semctl$SETALL(r4, 0x0, 0x9, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000040)="b1000501000000ae05000701070000000000b80000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x0, 0x0, 0x0) (async) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000400)={0x0}) (async) r6 = socket$inet(0x2, 0x4000, 0x3) (async, rerun: 32) sysctl$kern(&(0x7f0000000140)={0x1, 0x22}, 0x2, &(0x7f0000000180)="7f991ce9430a1f02d41ba629b7ea5e60fab75064e33d9597", &(0x7f00000001c0)=0x18, &(0x7f0000000340)="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", 0x1000) (rerun: 32) msgsnd(r2, &(0x7f0000001380)=ANY=[@ANYRESDEC], 0x70, 0x0) (async) r7 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r6, 0xc2c04200, &(0x7f0000000280)=0x6) (async) ioctl$FIOSETOWN(r7, 0x8004667c, &(0x7f0000001340)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 1.34937ms ago: executing program 4 (id=6177): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffff9c, 0xc014575e, &(0x7f0000000000)={0x9, './bus\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') 580.038µs ago: executing program 1 (id=6178): sysctl$hw(&(0x7f00000000c0)={0x6, 0x5}, 0x2, &(0x7f0000000100)="2cbca96081b9b6c240c8a876e2d52a58a67d65aeecace40a76aa5af2003b98cac2af33bc0194a71f859a52c150f00c345494aa16f3f807e5f5f795382dd259ab21c70825e62072428f101ec04b8e69dc221a9bee7c74faf04ba953a7604f6158da8e633977fb5f968e86ea0f7e085f04e20739dc13716f763c1f3f2d24849c47582ec5e2eb99", &(0x7f00000001c0)=0x86, &(0x7f0000000200)="8fcf0e1e932e8f1c42dcac899883fb9262d0687fd52d2b386555d663b12c10f078e3b9ae0416cf162bdb06b0f076956ffc10b6a595bc0c650a7184f972649e2e9bda1ba1f47c7540e1a6b485afa75bd142ed252ca94c1a66c7cdba34cb07bb551bacae17c3b3542f643a0863cc3ebe1c", 0x70) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x82) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100"}) writev(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000002c0)={0x4, 0x1, 0x4, 0xc9a0, 0x8}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$VNDIOCSET(r1, 0xc0104401, &(0x7f0000000040)={0x0, 0x0, 0x0}) setitimer(0x1, &(0x7f0000002900), &(0x7f0000002940)) 147.77µs ago: executing program 6 (id=6007): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) setrlimit(0x8, 0x0) r2 = syz_open_pts() close(r2) r3 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef35902", 0x11}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockname$inet(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0)) close(r4) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000200)={0x10000, 0x4, {0xaa68, 0x7f}}) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0x5, 0xc, {0xfb, 0x4}}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034006600000006907800000006ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200029078fffd0503010000000000000000f11b86b6e6bf78fbbcfe578a82767454bbc6794fc471cc5bc7b1c5802b72a93cd9b14911954d5ccee5e01035287f5ad16739a5b112094eb5440db00650bdc0bb8fd688f9d9af128fd7c0f8fe7ccf8cef0925119e58c6e7d86f77695ecdaa4764365b068750c7e54ca208b56a831a526b300e039d50229e2d6a4ed6d6409ecc52a5dad627d6d002f39f92f2ac22fd905cebdca222301ab193380b1dcbeaa3c0f2d00cad3e42df52135f084969892b41e6e9f1a1c7a65ec2aa6e26de38929dcbc6"]) syz_extract_tcp_res(&(0x7f0000000080), 0x5e, 0xfffffd1a) 0s ago: executing program 4 (id=6179): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x80047476, &(0x7f00000001c0)={0x80000000, 0x200, 0x0, 0xfffffff0, 0x3b, 0x100, 0x10, 0x10, [{0xfffffffb, 0x5, 0x9, 0x4}, {0x7, 0x0, 0xf, 0x1}, {0x8001, 0xffffffff, 0x7fffffff, 0x9}, {0x2, 0x0, 0xdb4d, 0x6}, {0x6, 0x2, 0x3, 0xa}, {0xfffffffd, 0xce63, 0x9, 0x2d6}, {0x7, 0x6, 0x80009, 0x56d6}, {0x4, 0x100, 0x2, 0x8000017}, {0x0, 0x10, 0x6, 0x6}, {0x1d, 0x5, 0x40, 0x7f}, {0x400, 0x6, 0x6, 0x1}, {0x387, 0x4, 0x6c}, {0x20002c13, 0x10, 0x4, 0xda}, {0x8eb, 0x200, 0x220, 0xde17}, {0x2, 0xffff, 0x1000, 0x5}, {0x200, 0x1, 0x6d2, 0x6}]}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x80047476, &(0x7f00000001c0)={0x80000000, 0x200, 0x0, 0xfffffff0, 0x3b, 0x100, 0x10, 0x10, [{0xfffffffb, 0x5, 0x9, 0x4}, {0x7, 0x0, 0xf, 0x1}, {0x8001, 0xffffffff, 0x7fffffff, 0x9}, {0x2, 0x0, 0xdb4d, 0x6}, {0x6, 0x2, 0x3, 0xa}, {0xfffffffd, 0xce63, 0x9, 0x2d6}, {0x7, 0x6, 0x80009, 0x56d6}, {0x4, 0x100, 0x2, 0x8000017}, {0x0, 0x10, 0x6, 0x6}, {0x1d, 0x5, 0x40, 0x7f}, {0x400, 0x6, 0x6, 0x1}, {0x387, 0x4, 0x6c}, {0x20002c13, 0x10, 0x4, 0xda}, {0x8eb, 0x200, 0x220, 0xde17}, {0x2, 0xffff, 0x1000, 0x5}, {0x200, 0x1, 0x6d2, 0x6}]}) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. pckbd_enable: command error uvn_flush: obj=0xfffffd805f579578, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error fuse: Cannot find fusebuf pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error fuse: Cannot find fusebuf malloc(): allocation too large, type = 29, size = 16796513700 56.&,53(: /"*=08&&&&&$8074632%%0, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 0#+"$%.!",%: #/--!.$ %22/2  : 4(2%!$ .&3)/' (245768) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (480894) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (25515) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (522887) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (341147) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (209940) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (339715) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (239686) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (276753) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (23683) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (151246) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (220557) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (42190) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (21998) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (461067) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (385140) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (421515) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (71910) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (15260) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (383667) %8)43 7)4( 34!453 -1 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 0#+"$%.!",%: #/--!.$ %22/2 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 56.&,53(: /"*=08&&&&&$805$993500, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 56.&,53(: /"*=08&&&&&$805%236670, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 &53%: !../4 &).$ &53%"5& $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4106143900 3%#/.$3 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00082, %22/2=17 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 0#+"$%.!",%: #/--!.$ %22/2 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 6, 3):% = 287762939904 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 &53%: !../4 &).$ &53%"5&             OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error wskbd0: can't attach mux (error=5) malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 lo0: can't handle af0 lo0: can't handle af0 fuse: Cannot find fusebuf pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error wskbd0: can't attach mux (error=5) denied attempt to set clock forward to 52172937113390 pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) malloc(): allocation too large, type = 29, size = 16796513700    OpenBSD/amd64 (n:vJ*̮@ qҶ!$ Snh;35aZKk tdj}XdX\?DZQR"̔{=..ɤ~Gc~ja6KSx.;5) (tty00) login: denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175653 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds denied attempt to set clock back -9223372032717175652 seconds fuse: Cannot find fusebuf malloc(): allocation too large, type = 29, size = 16796513700 pmap_unwire: wiring for pmap 0xfffffd806b791100 va 0x200000001000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b791100 va 0x200000001000 didn't change! pckbd_enable: command error wskbd0: can't attach mux (error=5) malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 ( tB%!u&5@} ْ`LvN]t^̒EjC }2]/FVXR 4<>e֢U't-u$_8W+bG-,mM2qQ%ZSSSnk, FMk9) (tty00) login: pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error uvn_flush: obj=0xfffffd80730bc7a0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! j|E1\::@@ load: 13.80 cmd: getty 30676 [ttyin] 0.00u 0.00s 0% 342k denied attempt to set clock back -9223372032717175610 seconds malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 ( tB%!u&5@} ْ`LvN]t^̒EjC }2]/FVXR 4<>e֢U't-u$_8W+bG-,mM2qQ%Zfuse: Cannot find fusebuf SSSnk, FMk9) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error denied attempt to set clock forward to 52172937113390 0#+"$%.!",%: #/--!.$ %22/2 malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 ( tB%!u&5@} ْ`LvN]t^̒EjC }2]/FVXR 4<>e֢U't-u$_8W+bG-,mM2qQ%ZSSSnk, FMk9) (tty00) login: OpenBSD/amd64 ( tB%!u&5@} ْ`LvN]t^̒EjC }2]/FVXR 4<>e֢U't-u$_8W+bG-,mM2qQ%ZSSSnk, FMk9) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 20 seconds malloc(): allocation too large, type = 29, size = 16796513700 lo0: can't handle af0 denied attempt to set clock back 27 seconds malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back -9223372032591346528 seconds uvn_flush: obj=0xfffffd807ba234b0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700                                                                         uvm_fault(0xfffffd806b9cab88, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff82690b18 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002a314b20 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff82690b18 Starting stack trace... panic(ffffffff8339e5b9) at panic+0x1d0 kerntrap(ffff80002a314a70) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff80000145f000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,81,2000,ffff80002a37caa0) at dtclose+0x109 spec_close(ffff80002a314c20) at spec_close+0x466 VOP_CLOSE(fffffd8066c962b8,81,fffffd80097fb6e8,ffff80002a37caa0) at VOP_CLOSE+0x132 vn_closefile(fffffd806cdcb3d8,ffff80002a37caa0) at vn_closefile+0x12b fdrop(fffffd806cdcb3d8,ffff80002a37caa0) at fdrop+0x121 closef(fffffd806cdcb3d8,ffff80002a37caa0) at closef+0x192 fdfree(ffff80002a37caa0) at fdfree+0x116 exit1(ffff80002a37caa0,0,0,1) at exit1+0x576 sys_exit(ffff80002a37caa0,ffff80002a314f90,ffff80002a314ee0) at sys_exit+0x1a syscall(ffff80002a314f90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7555b458e090, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *310178 92111 0 0 0 1 syz-executor 405511 85362 0 0x2 0x1 0 syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x71bf162a23f0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs.