last executing test programs: 4.956293306s ago: executing program 4 (id=1440): r0 = socket$inet6(0x18, 0x3, 0x3c) readv(r0, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/132, 0x84}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000500)=""/143, 0x8f}], 0x4) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1ff, 0x40, 0x1, 0xa00440}, {0x84, 0x85, 0x4, 0xa}, {0x16, 0x3, 0x90, 0x48a6}]}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind(r0, &(0x7f00000000c0)=@in6={0x18, 0x1, 0x8, 0x101}, 0xc) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@in6={0x18, 0x3, 0x9f60, 0x2}, 0xa, 0x0, 0x0, 0x0, 0x1bf}, 0x406) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="00e0ae5b0600000000000000820000001800000000000000000000004dcaba520cb4f13b4bdea84216e7629f82746cdc60099fcb580e98c1343d200d05d2e16a97ea9d60de247b4504d1700db9016f0f18ca85e764e0269df875557dba08000000000000", &(0x7f0000000080)=0x64, 0x0, 0x0) (async) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$VT_ACTIVATE(r2, 0x20007605, &(0x7f0000000180)=0xfffeffff) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) 4.933406344s ago: executing program 4 (id=1443): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x44, 0x1, 0x80043f}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x4, 0x48a6}]}) socket$unix(0x1, 0x5, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) socket(0x18, 0x3, 0x3) socket(0x2, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="bec6c3772dc20f9373950674c639dd1cbc7f23dd4a823d6f130225f3bfc0730046a3a8b654804eb23d22f84271940a0499faeedca3c3d00019a2fba138f95ea37e4b1e5e9f033e", 0x47}, {&(0x7f00000002c0)="d88be2eff65d5f6ccc01e046224d561f543a453c29d113ebe241edbe0138eac97759dcd79fd7b3bcd6d421b070f9ea055d8b5f3e3d150f1bf6089858a25db5a04d81d943a930508178feb76c54d1a62a440f439936cde31713b2ad7b7322074494cde728d8e440d926be2187ef762c4db809e2fb67bcc3e7982dcc0a895d227cbfa7b47faa2992cecbadf05bb393bf4fbd6169fa72f7de9c0546be1f41b002ae54d112757b5694b73a5bb5ea2b1db5e0305709adb2f12b8c76e571b24c6e336c5a5c5de3548ef1c59ba392639f800b1e24ea7c616b54e07f0e3936c5049431921795998f87cf93753b461821c2f952f42d1a963e72", 0xf5}, {&(0x7f0000000540)="fb3719962cc63b3bf42c798e781d6671af7d23f883e0956da55cf5b9f4cb740411328123ee0716a45864beef3a2902d14f5c99b15c0c51bd3e7e7c3d570d967b6e636eeddc99e802489ee2a19fadef0f510013518d9529156ffc4598186ff096475e2cb1623d5d026cb8f39469555a59258a1808e37df6008ff148bd01433f300c11dce7165d48b73bb16938feaf8f16bb81d426a230a9369406cda25ef11f741ce56e4bd0d45bbbd1eb906f9a7e9245a0287537bc8dc0b38d00f546d298d8b97fec", 0xc2}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="3800000000000000ffff00000700000006fcafe356dd7f95175e03d88168ceb08ff85af96595ff2b812c065cf42413d3b5af534a88c62e00328074ffc53b7f919d6b3116c47418068f079dafa97205854c5a8f681cba5ef1860df591c2972abafee3f5c9a39e866194736a2891ef1f4a3b5e0e81c46f31efec866cc61166d3cfc681e84332690aca2f6a1fe5d513f1dab6ac82370932fd2bd3a2bb41a4dcb45feaa15de4f503841b41e54a3efd6ba288de"], 0x38}, 0x7}, 0x1, 0x2) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x4, 0x0, 0x0, 0x1, 0x7, 0x0, 0x2, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0xb81], [0x8, 0x2, 0x8f, 0x0, 0x800000, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x0, 0xfffffffe, 0x1000}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0x8}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) r4 = kqueue() kevent(r4, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ioctl$TIOCSETA(r0, 0xc028445a, &(0x7f0000000740)={0xd, 0x6, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0x1bf, 0x7fffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="b119000066ec31f2fa0026399be533bfcb4c96ff54000000000247260882675d066a1329135711654b9e372eeb9ba36ee76ceb70a9a2e79ccdc0be88b8217859ac33d2d3d66a06402bb7287550a07a0c", &(0x7f0000000080)=0x50, 0x0, 0x0) mprotect(&(0x7f000019b000/0x2000)=nil, 0x2000, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[]) 4.894074724s ago: executing program 4 (id=1444): sysctl$kern(&(0x7f0000000000), 0x2, &(0x7f0000000140)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_mpls(&(0x7f0000000000)={0x4, 0x21, 0x6}, 0x3, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0) 4.893576124s ago: executing program 4 (id=1445): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0xff, 0x80000004, 0x80000003, 0x10003, 0x10, [{0x0, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0xfffffff9, 0x6, 0xffffffff, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x0, 0xffffff81, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ca, 0x10001, 0xb, 0x7}, {0x7ff, 0xb, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 4.837340554s ago: executing program 4 (id=1451): open$dir(&(0x7f0000000480)='./file1\x00', 0x0, 0xb4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) select(0x40, &(0x7f0000000180)={0xffffbffffffffffd, 0x6c9, 0xffffffffffffffff, 0x40000002000021, 0xce03, 0xe4, 0x3, 0x2}, 0x0, 0x0, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket(0x2, 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae828e137847f62, 0x0) ktrace(&(0x7f0000000340)='./file0\x00', 0x1, 0xd27d43220c7df9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0xffffffffffffff7b}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket(0x18, 0x8000, 0x0) setsockopt(r2, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) r3 = dup2(r2, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0xf, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x3}, {0x4, 0x1ff}], 0x2) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000200000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) chflagsat(r1, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x2, 0xdf) openat(r3, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x181) close(r5) socket(0x18, 0x3, 0x7a) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 4.732587851s ago: executing program 4 (id=1459): ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000280)={0x2, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x0, 0x3}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc) r1 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) write(r2, &(0x7f0000000040)='f', 0x1) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc9e", 0x1d}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09f9", 0x49}], 0x2) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000140)={0xfffffffe, 0x4, 0x1b57, 0x7fffffff, "5c7f8f87ca898e49399097771898228b3f445080", 0x9, 0x200}) syz_open_pts() ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000080)=0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f00000003c0)="0341d86c71a30018bc5a91505d9230cca32a2b4b71b59c7acd912c34eb8627", &(0x7f0000000080)=0x67, 0x0, 0x2e) 4.433474302s ago: executing program 1 (id=1475): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffbfffffffffffd, 0xffffffffffffdfff}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x200) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x2e) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x50) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x3, 0x0, 0x4000000000000001, 0x1000381010089}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, 0x0) sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000100)="394c8d1909f367a4ccf018a5f44e080c287fe8c86d0d02eed267744d9a251fb2d91b088eb708dc1048fee87f8ddcf046ed0e1cd3a0dd476570baf83f6186d17a1d706d5a8b85c399ad34b36a80a9fdd9dac9217ed1a79cd80a34be157ad03d0a944cfccb30f38ea9a37a81fccbc2aa6df59eb8342494ee4e6e1cb1ba5727c655a121f9337035883e313aacd1f05a3a378de9c4f74fb5cfb3da86f6c7db610e1a32737de552a71a61caf6b5c441ead9db7e3b76d35222fc2ecec60f5a2d1f8f4d44aa25b10d351ef39b50cd9f11398bd7452b465c15b193", &(0x7f0000000200)=0xd7, &(0x7f0000000240)="36928024d66d05dd179a25ffc8596e75232735750cacfa6aba2b5848bd5a1b857ca758f6828b180a5c53103bd77a2916a1a13aaa6673782366f19c9ed924f1b2299edf32f4f6ca86cae3f9b2f362821c176572f50afa643d541ae031b9196ad2432ff7febaab8123198858799db1c993aa796220a5aeea0504d4f937f30c2640d805f53a252b7d504a74", 0x8a) ftruncate(r0, 0x48001000007) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) 4.366212283s ago: executing program 1 (id=1479): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x8) r1 = openat(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0xaa) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r2, 0xc0a86b07, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 4.31040517s ago: executing program 1 (id=1483): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000380)="8b53428809a0e824f75b09d3d97ed9a8782188e72d55aaabb42e9cc20397eb566fadfc47c28d0177edbefce9aa520a4398c60d7965fb3c6eb2b54043189877fe60e3a582ebb11f1ff2acfcf04714a3fa0000000000009085cd453d3696e99011923284de44f8c725c0e5bbde3482062745ea4d4e", 0x74}], 0x1) execve(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x200, 0x0, 0x0, 0x0, 0x0, 0x42, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x3fffffffe, 0x5}) getrusage(0x1, &(0x7f0000000040)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0xc, 0x2, 0xf40}, {0x5, 0x10, 0xe4, 0x120}, {0x6, 0xa, 0x83, 0x400f}]}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="f968f845920e63", 0x7}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="11fcca9397381dcc46104bce88c700004221f33f53b416e7d9e97285b27ca83538e175c1aeb4fca4585290759f1ec9636e89c42b5979ff64db7e1a1f3fffdffe5d9c12e7", &(0x7f0000000080)=0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000140)) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) select(0x40, &(0x7f0000000040)={0x89fc, 0x2, 0x40f, 0x1, 0x400, 0x6, 0x10000, 0xf}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[]) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x64, 0x3a, 0x1, 0x105}, {0x1ae, 0x8, 0x1, 0xa0e}]}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) 4.309191807s ago: executing program 6 (id=1485): symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') chown(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) chflagsat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) 4.308477653s ago: executing program 6 (id=1487): r0 = open(&(0x7f0000000380)='./file0\x00', 0x10, 0x4ebfac6bbaf7949) setgid(0xffffffffffffffff) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000040)='./file0\x00', 0x750, 0x0) setgroups(0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) setgroups(0x1, &(0x7f00000000c0)=[0x0]) kevent(r1, 0x0, 0x8, 0x0, 0x4, 0x0) setreuid(0x0, 0xee01) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x10, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) write(r0, &(0x7f0000000140)="0920203ce62b620309018010001f00000069db0000ff4278ad535c2a4156308c2f39e4e6987f31dbf15624b77b6a0a", 0x2f) r3 = socket(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x3, 0x0) getsockopt(r4, 0x29, 0x1, 0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f0000000000)=0x1) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ftruncate(r5, 0x9) kqueue() ioctl$VMM_IOC_TERM(r5, 0x80045604, &(0x7f0000000400)={0x3}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_extract_tcp_res(&(0x7f0000000180), 0x9, 0x4ce) bind(r3, &(0x7f0000000000), 0x10) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 4.27981215s ago: executing program 6 (id=1490): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) sendmmsg(0xffffffffffffff9c, &(0x7f0000000380)={&(0x7f0000000340)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000200)=[{&(0x7f0000000080)="8b1407f739fa2b089115306a1d0348f9ac539bd2e81da4e0a0c49483d31b5f3aa4e90be4c4", 0x25}, {&(0x7f00000000c0)="858b35157fb1a338ae7a15baf28f8c98f51d0d0602065619325e6586b1778bc5e5028131e84747e4940c59d69f6163a75bfe3355d15f9031e5b8b9c5c0e16154d107a4fc3ff7031228d1b902", 0x4c}, {&(0x7f0000000140)="91888f99b9c42c59f01d3ffe6f57f9b8685d446919dbbc03cc83119b9cd1b4cd49cefd4eae12eba152c58dae7f959ca3ba3c05a314422b58084d790e148e3840032d00da7c3caf7e152c67ec10300284d2bcb0faa3f53a798a8931aa6a4ac59ceafa005ebaac05ab5449d710770bdefc97c6d226a22948087e75952fcb6e1544ae4fbcdcf650581b250715f8aea27d5f2afbdc65f949092b246bf19f28aacbcba2fc01bef5d008a9b4575f07a68d887e727e35e534e846", 0xb7}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000000000ffff0000060000005000000000000000ffff0064152ed0f4ef11a2facaa7865d00010000007b966b41cb4b259049b4a9b6899990fbef410c693c08e6731fc9d9076148dcf274fca67d225d09c85b712f859c3e9724c7a40f"], 0x60}, 0x4c}, 0x10, 0x406) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) 4.187204962s ago: executing program 0 (id=1491): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) setitimer(0x2, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x18, 0x3, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x2}, {0x6, 0xa, 0x5, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="00a0a78d0ca801c529ae2469554e7d17bc333f641255236e28593593fe71f1000000007b8972f4027f8578eecec3d015ad6e73127f3506cf18de34c887a141b879ef24428999e46fc3bb234f6aa9ac88fb7895a0dd3b6de2a719c6b7cacbc80900", &(0x7f0000000080)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r3, &(0x7f0000000480)='\x00'/14, 0xe) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000b80)="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"/285, 0x11d}, {&(0x7f0000000040)="180200f7ff0000400000000000000000009ee5682b46cdb57d7ddd82aaa02dba2f", 0x21}], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r2, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000046230000000000003c0c68f3e01a0744edc10b7c61ff337b6e71c87a7007a26163"]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000000)=0xc) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) sysctl$hw(&(0x7f00000000c0)={0x6, 0x13}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x36}, 0x2, &(0x7f0000000000), &(0x7f0000000080), 0x0, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffefffffffc, 0x10000}}, 0x0) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000280)=[{0x3d, 0x1, 0x0, 0x1915}, {0x25, 0x0, 0x2, 0x20000009}, {0x7, 0x2, 0x30, 0x7}, {0x84, 0x8, 0xaa, 0x7}, {0x6, 0x4, 0x7, 0x800}]}) 4.186876008s ago: executing program 6 (id=1492): openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) mknod(&(0x7f0000000040)='./file0\x00', 0x1ffa, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x11) dup2(r1, r2) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() kqueue() ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5) select(0x40, &(0x7f0000000080)={0xc5, 0x5, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x7ffffffc}, 0x0, &(0x7f00000000c0)={0x1ff, 0x800000000000000, 0x1, 0x4, 0x0, 0x0, 0x7, 0x1}, 0x0) ioctl$TIOCSBRK(r4, 0x2000747b) 4.186457087s ago: executing program 0 (id=1493): setrlimit(0x5, &(0x7f0000000980)={0x3, 0x62}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x9, 0x1, 0x2, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x67, &(0x7f0000000280)={0x3, 0x0, 0x8}, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x118a, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x10, 0xd6) setrlimit(0x6, &(0x7f00000000c0)={0x9, 0x7ff}) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) write(r1, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x20007605, &(0x7f0000000080)=0x80000000) pipe2(0x0, 0x10000) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xd3b2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b936}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000298000/0x2000)=nil, 0x2}, {&(0x7f000025e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x81}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f000053e000/0x4000)=nil, 0x5}, {&(0x7f000046b000/0x2000)=nil, &(0x7f00002d0000/0x4000)=nil}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x8}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x812b}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0xf}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xd}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x7}], './file0\x00', 0xfffffffe}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x7) write(r1, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write(r1, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.091818305s ago: executing program 0 (id=1501): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x4000004, 0xffffffffffffffff}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @empty, @loopback}}}}}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0x8, 0x800) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) select(0x40, &(0x7f0000000000)={0x400}, 0x0, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) r3 = syz_open_pts() syz_open_pts() syz_open_pts() semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x7fff, 0x1000}], 0x1) clock_getres(0x2, &(0x7f0000000540)) fcntl$lock(r3, 0x7, &(0x7f0000000580)={0x3, 0xde00d2f3e165aa6c, 0x5, 0x5}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) truncate(&(0x7f0000000040)='./file0\x00', 0x30000) 3.975645863s ago: executing program 3 (id=1507): pwrite(0xffffffffffffffff, &(0x7f0000000300)="1bfbce76c217a552e0a04a55fe7166ca24a3c4bec50405ff17bfaf049dac58211aa845512a751d2669cc30eaff2987065fe98a497b1aacd8115231f948849bbb576d", 0x42, 0x7c) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @empty, [], {@ipv6={0x86dd, {0xb, 0x6, "eed57d", 0x38, 0x2c, 0x2, @rand_addr="04f19d6bceb1ee1eedc0754f15dd5ff9", @mcast2, {[@dstopts={0x2b}], @icmpv6=@dest_unreach={0x1, 0x3, 0x0, 0x1, '\x00', {0x7, 0x6, "2925c8", 0x7, 0xff, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1}}}}}}}) sysctl$hw(&(0x7f0000000000)={0x6, 0x15}, 0x2, &(0x7f0000000040)="814a211e9a1c909232f5a4fb5755dd6ce4bc7d0c5f52747e6bb0791e143a9edddc50565746bfab34a0", &(0x7f0000000080)=0x29, &(0x7f00000000c0)="2c10d8edce14da558f6809684461993bad77269344f790a9ec28ed60552fbb2cc1b15f05353ea132ad4e5c784ac7cc3db14bee0effdc3bae507c67c3eb624b4d9e7076467f812bad041a79f1441ab45f03aec86f4e6a823b4b30f3196e", 0x5d) 3.970819918s ago: executing program 3 (id=1509): r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x3b, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) sysctl$vm(&(0x7f0000000000)={0x2, 0xa}, 0x2, &(0x7f0000000040)="b924889d58d907d7952500af79c6fc0aaf9e7f7c8bbc2107047d", 0x0, 0x0, 0x0) 3.830406281s ago: executing program 3 (id=1511): r0 = socket$unix(0x1, 0x5, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x803, 0x3fd, 0xffff, 0x200499, "084880fa870000bdda0988d11554e90d6602ff07", 0xb52, 0x3}) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) writev(r1, &(0x7f0000000380)=[{&(0x7f00000019c0)="f2b544d304fca742e6f86a8d70fdc3ef57db24d5fe2e43492dfd6197aa2b17391432c95909a65d23130d94", 0x2b}], 0x1) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000500)={&(0x7f0000000480)={&(0x7f0000000000)=@in6, 0xc, &(0x7f0000000340)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000280)=""/190, 0xbe}], 0x7, &(0x7f00000003c0)=""/192, 0xc0}, 0xff}, 0x10, 0x1040, &(0x7f0000000540)={0x1ff, 0xba2}) r3 = socket(0x2, 0x4002, 0x0) setsockopt$sock_int(r3, 0xffff, 0x4, &(0x7f00000004c0), 0x1) 3.822292481s ago: executing program 0 (id=1513): getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, r0, 0x141, 0x200}}) r1 = socket(0x18, 0x1, 0x6) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 3.821361162s ago: executing program 0 (id=1515): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) poll(&(0x7f0000000ac0), 0x2000000000000050, 0x887e) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x5) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x6, 0x1, 0xfffffff9, 0x8d, "f7ab8012a87208b58258d7489144ec9de2d97378", 0x1000, 0x3a9}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) 3.753938087s ago: executing program 0 (id=1519): ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, 0x0) writev(0xffffffffffffffff, &(0x7f0000000880), 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, 0x0) setitimer(0x2, 0x0, 0x0) socket(0x18, 0x3, 0x0) socket(0x18, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f00000002c0)="1895cde3341a251ab4728a8c671f6dc6b6fc9ad91ffce9599f47afaceac731ab4966b46411f19c3f1dbad68bc487481284d492c8f024de285f86b4efde1723622301cf918d0a1de9f12c1dec7a7454cce93880173811d7e3b95380d431c0a65a4271185476a3ca6efdf9bf4996e0e996b880d2a65189eacc83fa51f2650e98fa186c7f81740ff051cba6fd03af3808994a08e9a9df7a96fe3bccd5011c6a0a54611c78fe6de0d4fa06b1df6a793f8ebf88a5f49994218d", 0xb7}], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r1, 0x0) syz_emit_ethernet(0x3b, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = open(0x0, 0x80000000000206, 0x17) ftruncate(r2, 0xb04e) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x451c) open(&(0x7f0000000080)='./bus\x00', 0x1, 0x145) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) flock(r4, 0xe) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000240), 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x19b, 0x9) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffefffffffc, 0x10000}}, 0x0) mprotect(&(0x7f00000cb000/0x2000)=nil, 0x2000, 0x2) 2.544807104s ago: executing program 1 (id=1524): r0 = socket(0x2, 0x3, 0x0) syz_open_pts() (async) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000680)}, 0x8) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000900)={0x8, 0xb, 0x9e, 0x9bb, "0b48a5a4ac1444c1e55496c0e21bf990bf7978d0", 0xffffffff, 0x8000}) (async) r3 = kqueue() (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0xac}, {0x3, 0x10001}}, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x4004, 0x1}, {0x8, 0xc0000}}, 0x0) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000380166000000069078e0000001ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="908080049078fffc0101080a00000003000000080003450019da16a6a1a568f1513d81e62745cbb86bb042d93843f5c264df8a221555dd333342f03f39b2e12f27b77c2f85c1cb600251ac5ce4aa63ce478b2f90daaae164b1d7c015196a80edfa8d3eddc189ba46828587aba51ed371c400a197721ad5c0c43bf2e26f31b389aaa524b59f381f83c3d1b90f0c711808a79a238a51b8"]) r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)="0000f4aa0ed444d2bfe6f56dad16e9a6", 0x10) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) (async) sendmsg(r6, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x180}, 0x404) (async) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r5, 0xc0307004, &(0x7f0000000080)=0x2) (async) r7 = socket(0x2, 0x1, 0x0) r8 = dup(r7) (async) setsockopt(r7, 0x6, 0x4, &(0x7f0000000240)="5194eb5d", 0x4) setsockopt(r8, 0x6, 0x8, &(0x7f0000000080)="1385d4d8", 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000b00)="b266dcd4f161665bf92c0cdfa3ced1adfb6e431de5924010a59f872e97ecb77cd87936a7c9bed16c4ab1342f1d9d90910f4808a5865aa77d1309ac90d08a63991feb6dabeba3231034f2ab461d085c207625ff276828c284ba895a5d5c0a30d7750850fd2defd3036b02596007234ecbddc63c185e5501dd77ed7c222570309a4369f9e891a2a63642", 0x89}], 0x1) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) 2.537264862s ago: executing program 1 (id=1525): r0 = socket(0x18, 0x3, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xb1, 0x10, 0xe4, 0x5}, {0x2, 0xd, 0x2, 0x2}, {0x6, 0xa, 0x86, 0x7f}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x20130f) open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x20) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffefbfffffffffb, 0x1, 0x2, 0x1, 0x0, 0x0, 0xdf5a, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xa8, 0x10002, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffb, 0xffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1], [0x100000000, 0x2, 0x20040000000, 0x0, 0xffffffffffffffff, 0x8011000, 0xffdffffffffffffe], [0x100, 0x20000000000, 0x80000001, 0x100000004, 0xffffffffffefffff, 0x6], [{0x0, 0x7, 0x0, 0x7d06}, {0xfffc, 0x7, 0x5, 0x5}, {0x4, 0x0, 0xfffffffe, 0xfffffffffffffffd}, {0x3, 0x5, 0x8, 0x80000001}, {0x10, 0x2, 0x0, 0x808}, {0xb, 0x2003, 0x40000, 0x1fffffffffffffff}, {0x1}, {0x0, 0x965, 0x0, 0x8}], {0x2000, 0x1000001, 0x5, 0x80000000000000}, {0x0, 0x0, 0x5ad424d4, 0x2}}}) (async) r2 = kqueue() kevent(r2, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) (async) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r3 = getpid() (async) r4 = msgget$private(0x0, 0xafb0e20fef6483ff) msgrcv(r4, 0x0, 0x0, 0x3, 0x1000) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000200)={{0x1000800, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4}, 0x7, 0x9, r3, r3, 0x1, 0x3ff, 0x1, 0x6}) (async) msgsnd(r4, &(0x7f0000000340)={0x0, "587fb8cfee7b4812c4a18f450da54ea0b87b304aef09cd2a94de7c958c021c37ffed201592214e732317879d3489"}, 0x36, 0x0) (async) setsockopt(r0, 0x1000000029, 0x3c, &(0x7f00000001c0), 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000001080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2a080049000024006800000001907800000000ac1400bb070309440c0552000000ad00000dd800"]) 2.536807361s ago: executing program 3 (id=1526): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x1000) (async) msgctl$IPC_STAT(r1, 0x2, 0x0) msgctl$IPC_SET(r1, 0x1, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="f968f845920e632101a1a17348e1de1e1ca6f96c0bbc8877cc2175f66f4657fd821805b13e75d7006f8c32b703e30e14b644a8aaf0403a80546fd18b079bdc26", 0x40}], 0x1) sysctl$kern(0x0, 0x40000059, 0x0, &(0x7f0000000180), 0x0, 0xfffffffffffffdb2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x3200) (async) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/42, 0x2a}], 0x1, 0x8000000000000001) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[]) select(0x40, &(0x7f0000000000)={0xffffffffffffaf01, 0x8000000000000001, 0x3, 0x7, 0x2000000004007, 0x6, 0x7ffb, 0x3a}, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket(0x18, 0x2, 0x0) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x1, 0x4000, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYRES16=r0]) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) close(0xffffffffffffffff) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0x7}, {0x0, 0x7fffffff}, {0x1, 0x4}, {0x3}, {0x5e857b33fad53efb, 0x9}, {0x5, 0x28}, {0x0, 0xff}, {0x3}, {0x1}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x203}, {0x1, 0x8}, {0x2, 0xfffeffff}, {0x3}, {0x0, 0x2}, {0x0, 0xfffffffd}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x400}, {0x0, 0xffffffff}, {0x2}, {0x3, 0x3}, {}, {}, {}, {}, {0x1, 0x40057fd}]}) (async) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6060226000200001000000000b0000000000000000000000fe8000000000000000000000000000aa3c01000000000000040107010600000000000000000000004e224e2000089078"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$TIOCSETA(r5, 0xcd504404, &(0x7f0000000080)={0x1ffe, 0x2, 0x9, 0x2f, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) 2.51592192s ago: executing program 6 (id=1528): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f00000001c0)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x4, 0x1ffffffffffffffc, 0x181c, 0x9, 0x10000000009}, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x4, 0x0, 0x2, 0x0, "d76c0fc21753a784858e74fbf520000002000f00", 0xfffffffa}) (async) kqueue() (async) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x4, 0x0, 0x80}, {0x3, 0x0, 0x0, 0x49}]}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f0000000000)="800d5f00", 0x4) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x3, 0x0, 0x48a6}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @local, [], {@ipv6={0x86dd, {0x5, 0x6, "aab1f9", 0x14, 0xf0, 0x95, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, {[], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x800, 0x0, 0x7}}}}}}}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shmget(0x1, 0x2000, 0x44, &(0x7f000043a000/0x2000)=nil) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x104, 0xfffffff9, 0xfffffffe, 0x1, 0x8a, 0x8, 0x3e, 0x2, 0x1, 0x100000000000002, 0x3}) (async) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) 2.305403522s ago: executing program 7 (id=1531): sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0xf}, 0x3, &(0x7f0000000400)="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"/325, &(0x7f0000000380)=0x145, &(0x7f00000001c0)="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", 0xcb) r0 = kqueue() r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) kevent(r0, &(0x7f00000005c0)=[{{r1}, 0xfffffffffffffffc, 0x8b, 0x1}], 0x90a, 0x0, 0xbe5, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$TIOCSETA(r2, 0xc2084415, &(0x7f00000003c0)={0x1, 0x2, 0x200, 0x0, '\x00W\x00', 0x400000, 0xff}) dup2(r1, r0) r3 = getuid() r4 = getegid() fchown(r0, r3, r4) getpid() 2.299705367s ago: executing program 7 (id=1534): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = syz_open_pts() close(r1) ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000001c0)=0x1) kevent(0xffffffffffffffff, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x140) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) r3 = socket(0x18, 0x4, 0x6) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x4000000000054}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000380)={0x750, 0x4b, 0xd, 0xa, "03524fa9000080000020000080f600", 0x8a, 0x5}) write(r4, &(0x7f0000000240)="c570a4a5bbebc12d2a91854a3269facb1316b1dbefdc29ce59a480cfbf608dea9c620e5c769e41325bb05beb095558da1082977cecf0ae7465d33a476b2bf8d8323faf622b829cdd2def3aebda43f9d65bdedac3153eaa24e781fe6c886078dc1997598181a8a2b44b588cefa7fe886b4990181ebd182952bc83b084eeaf3c75abd47f349f01f6", 0xfead) sendto$unix(r3, &(0x7f0000000280)="b1000501600000000000900d07000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0) close(r2) 1.305754742s ago: executing program 1 (id=1543): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) (async) mprotect(&(0x7f000016d000/0x3000)=nil, 0x3000, 0x2) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) setitimer(0x2, 0x0, &(0x7f0000000100)) (async) unveil(0x0, &(0x7f00000001c0)='r\x00') sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x404, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x4) (async, rerun: 32) execve(0x0, 0x0, 0x0) (rerun: 32) 1.305143027s ago: executing program 3 (id=1545): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x64d1) open$dir(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x24, 0x2, 0x0) setsockopt(r0, 0x6, 0x1, &(0x7f0000000280)="e9f6d779", 0x4) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000400), 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000000)={{}, {0xffffffff, 0x1027}}, 0x0) 244.51333ms ago: executing program 6 (id=1547): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x117, 0x200000b, 0x101, 0x80000001, 0x80000001, 0x80, 0x10, [{0x0, 0x17, 0x0, 0xe}, {0x5, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x1dc}, {0x401, 0x40200726, 0x2800, 0x7}, {0x2, 0x55d, 0x5, 0x1}, {0xce3, 0xffffffff, 0x4f8, 0x6e}, {0x6, 0x803, 0x14, 0xa}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x80000001, 0xd1b, 0x88}, {0x1df, 0x10001, 0xc, 0x6}, {0x7ff, 0xb, 0x8, 0x6}, {0x3, 0x4, 0x48, 0x4}, {0x29a71717, 0xfffffffa, 0xfff, 0x406}, {0xc, 0x5, 0xffff215d}, {0x0, 0x21, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x400000000, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0)) r3 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0xc0307004, &(0x7f0000000080)=0x2) 243.953493ms ago: executing program 7 (id=1548): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x44, 0x1, 0x80043f}, {0x60, 0x85, 0x20, 0xa}, {0x16, 0x4, 0x4, 0x48aa}]}) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000680)}, 0x8) (async, rerun: 64) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (rerun: 64) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[]) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="ed", 0x1) (async) ioctl$VNDIOCGET(0xffffffffffffffff, 0x80106468, &(0x7f0000000740)={'./file0/file0\x00', 0x7, 0x8, 0x6}) (async) r5 = getuid() chown(&(0x7f0000000200)='./file0\x00', r5, 0x0) (async) setreuid(0xee00, r5) (async, rerun: 64) r6 = getgid() (rerun: 64) fchown(r3, r5, r6) (async) readv(r4, &(0x7f00000000c0)=[{0x0}], 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r7, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x10071002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x1, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0x3ff, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r7, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r7, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32) execve(0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 185.332453ms ago: executing program 3 (id=1551): r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x1021, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = socket$inet(0x2, 0x8000, 0xe) bind(r1, &(0x7f0000000000)=@in6={0x18, 0x1, 0x9, 0x221}, 0xc) (async) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) (async) select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x10000006, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8000}, 0x1000001268, 0x2000000000003, 0x0, 0x0, 0x80000001, 0xfb5f, 0x8, 0x8000008000000e62}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) (async) ioctl$BIOCSRTIMEOUT(r5, 0xc0307006, &(0x7f0000000100)={0x7ff, 0x10}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$VMM_IOC_RESETCPU(r7, 0x82405605, &(0x7f0000000240)={0x1e, 0x0, {[0x8000000000000000, 0x9, 0x1, 0x5, 0x2, 0x7, 0x8000000000000001, 0x55cd, 0x9, 0x0, 0xffffffff, 0x2, 0x7, 0x8000, 0x6, 0x4, 0x80, 0x10], [0x41, 0x98, 0xfffffffffffffffd, 0xffff, 0x1, 0x4, 0x9c, 0x97, 0x4, 0x9], [0x100000000, 0xfffffffffffffc00, 0x800, 0xc2, 0x2, 0x5, 0xbe48], [0x9, 0x8, 0x8, 0x80, 0x7, 0xd9f], [{0x4, 0x6, 0x8, 0x1}, {0x2, 0x4, 0x3, 0x4}, {0x8, 0x7, 0xffffffff, 0x7}, {0x3, 0x0, 0xff, 0x5d}, {0x3, 0xaf, 0x9, 0xe}, {0x2, 0x6, 0x8000, 0x7}, {0x6, 0x8, 0x3, 0x1}, {0x3, 0x54fe161b, 0x0, 0xffffffffffff5d1c}], {0x84, 0x3d8, 0x1, 0x9}, {0xe43, 0x1, 0x9, 0x800}}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000000), 0x10) 143.271345ms ago: executing program 5 (id=1554): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5c) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='x\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8218, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0xf, 0x10071002}, {0x2, 0x5, 0x8, 0xfffffff7}, {0x100, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0xd}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x5, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x100}, {0xfff, 0x7ff, 0x14, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1c8, 0x10001, 0x40000, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0x200b8c, 0x555981a8, 0x8, 0x5}, {0x29a71717, 0x9, 0xffff, 0x6}, {0xc, 0x2000005, 0x5, 0x800}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f00003a0000/0xe000)=nil, 0xe000, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x0, 0x2}, {0x1, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x7f, 0xb, 0x2}, {0x80, 0x81, 0x0, 0xb47}, {0x16, 0x67, 0xf8, 0x80000000}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="00a0008d0ca82026dec3e59be543bfcb4c969b00f79603ac0f05eae26edb0afa14df826150972ba105bf3fe398728f0d931d0ea77445c5e3f88f6c43f3a293cc18af260d03000000d891057b4be647e67ddb1c9361d56f8638b37fa8243119d000", &(0x7f0000000080)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000a80)=ANY=[]) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "010000000000000000001339e13600005003005b"}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x5}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x42) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) 84.208834ms ago: executing program 5 (id=1555): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b80)="7952620e94f60e5197e9", 0xa}], 0x1, 0x0, 0x0, 0x8}, 0xa) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40e}, 0x40e) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "97a22242006b470500", 0x2007, 0x10}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x80000000000206, 0xa4) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) r2 = socket(0x11, 0x3, 0x0) setreuid(0xee00, 0xffffffffffffffff) ioctl$TIOCSTOP(r0, 0x2000746f) sendto$unix(r2, &(0x7f0000000000)="b1000513000000000000000012000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f336443a42118000000720fd38bfbb770c1f5a872c88106002ec589040000000c000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c0112000"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f00000002c0)=0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x40}], 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x40) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000540)="934c6de967caa6bf08dee579bd434871737386d5fd7378a6d26f014265602020d3", 0x4e}, {&(0x7f0000000180)="e4a517ab6acb8d101341b4949ade11bf7c65caa813791d02571ac2f7072264455c158966cc65aedd3aac704bf75be405497ec0b0598887bf1eb6cdb32c56da380de35c3ffdfbad435b739d5e7c8c8d523787036b1ca3c5623c1478339361fc6fc4f9a4a8df1df0a201eff048ba20a57a47ee1d9da451fae14709bdc1dad72e12f3c56c26446c77cc9099"}], 0x2) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="20092000019c0a", 0x7}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000000440)={&(0x7f0000000400)={&(0x7f00000000c0)=@un=@abs, 0x8, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/198, 0xc6}, 0x4}, 0x10, 0x81, &(0x7f0000000480)={0x6, 0x6}) 82.076029ms ago: executing program 2 (id=1556): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x51a, 0x0) (async) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x412, 0x0, 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) (async, rerun: 32) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0) (rerun: 32) 81.744116ms ago: executing program 5 (id=1557): setrlimit(0x0, &(0x7f0000000100)={0xbe, 0x8}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x5, 0x100006, 0x9, 0x50b, "9cdc452e307e0804012f4c0000002f9e68cd3304", 0x400, 0x7efffffd}) open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)) getgid() r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) ioctl$VNDIOCGET(r2, 0x41946472, &(0x7f0000000740)={'./file0/file0\x00', 0x7, 0x8, 0x6}) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) setreuid(0xee00, 0x0) r3 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) r4 = getuid() fchown(r3, r4, 0xffffffffffffffff) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "0100012d29fb000700000000098002005a00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x2, &(0x7f0000000180)="3bf2ee74", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24df8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f05000000000000004fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x9e, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xee) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{}, {0x0, 0xffffffffffffffff}}, 0x0) readv(r2, &(0x7f0000000b80)=[{&(0x7f00000002c0)=""/120, 0xfffffd43}, {&(0x7f0000000440)=""/159}, {&(0x7f0000000240)=""/5}, {&(0x7f0000001280)=""/4096}, {&(0x7f0000000280)=""/62}, {&(0x7f0000000500)=""/35}, {&(0x7f0000000540)=""/74}, {&(0x7f00000005c0)=""/140}, {&(0x7f0000000680)=""/87}], 0x1) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) 81.187199ms ago: executing program 2 (id=1558): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x3, 0x0, 0x1fe, 0x100000001}) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0xe03) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f00000001c0)=0x6, 0x2b) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x5}, {0x0, 0xffffffffffffff81}}, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x9, &(0x7f0000000000)="02000000", 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r3) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x80) sysctl$hw(&(0x7f0000000200)={0x6, 0x5}, 0x2, &(0x7f00000002c0)="73221392c267571309a7482e9ef66751296028b70b87764c26f2240e64821f7b1b5e79e5acae669b85f5833ac3fd6812d171fccf2927930104db19133890be92c3d8a35f7ea9982795fabbf42b8b4ff56e2f226331e928d15f62", &(0x7f0000000240)=0x5a, &(0x7f0000000340)="c8e1217e76143a32eec54e2f0bf17e0a89698e76ead684188a7107aa2b54c1c81f", 0x21) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x3ff}, {0x6, 0xa, 0x5, 0x400f}]}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="edeee6beceace7a605ff21ee57347d97b1c79d96", 0x14}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r4, &(0x7f0000000480)='\x00'/14, 0xe) r5 = socket(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fchflags(r6, 0x0) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) 80.167344ms ago: executing program 7 (id=1559): r0 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000), 0x3, &(0x7f0000000040)="475942a5dcef82651763c3ef6370ef2227663c92f94dce9964060f0fcea5ff92f6374aebeb96934c46348952edcc71081483b581381216f704306a78b5c6a8d7f751faa87be988b7e8af3a1ba782a23c0d4e9be8bf24ced7dde9fa6a1a8881511244a10b9e86826df1b00ae4d4168625a5ecc0636a24ea65260d48", &(0x7f00000000c0)=0x7b, &(0x7f0000000100)="b3918defcfa257e9c82b509273fdd60a7fe0dd01d345bcf860301fc9a1194b5aee382c49b528386834eef6a1c187ea18f8f545cbf7410629be1704abd9c66d90c55ba27e0ebf39303a415ad1dec58a698325ee392fb17d2b0c49409cb6683b547b96fabab4acc3cc707ef268ee9bad48c3421eb47cd88bf41e0e13e255", 0x7d) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x4, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) 59.033596ms ago: executing program 2 (id=1560): seteuid(0xffffffffffffffff) seteuid(0x0) r0 = socket(0x18, 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0xc}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x1000000029, 0x31, 0x0, 0x0) 57.835156ms ago: executing program 5 (id=1561): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000080)="ab", &(0x7f0000000000)=0xfd8c, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x40) semctl$GETNCNT(r1, 0x1, 0x3, &(0x7f00000000c0)=""/4096) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x14) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) ioctl$BIOCSETIF(r0, 0x20004102, 0x0) pipe(&(0x7f00000010c0)) 57.407963ms ago: executing program 7 (id=1562): r0 = syz_open_pts() ioctl$TIOCSDTR(r0, 0x20007479) (async) ioctl$TIOCSDTR(r0, 0x20007479) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000000)) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000080)=0x81) (async) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000080)=0x81) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000140)={&(0x7f0000000100)=[{0x0, 0x39}, {0x44, 0x10001}, {0x87, 0x7}, {0x101, 0x887}], 0x4}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000feb000/0x12000)=nil, 0x12000, 0x1, 0x4012, r3, 0x400) ioctl$BIOCGSTATS(r2, 0x4008426f, &(0x7f00000001c0)) pread(r1, &(0x7f0000000200)="8e6acda4", 0x4, 0x7) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000240)=0x4) ioctl$VT_WAITACTIVE(r2, 0x20007606, &(0x7f0000000280)=0x315b) (async) ioctl$VT_WAITACTIVE(r2, 0x20007606, &(0x7f0000000280)=0x315b) socket(0x10, 0x8000, 0x9) (async) r4 = socket(0x10, 0x8000, 0x9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x8, 0x0) kevent(r2, &(0x7f0000000300)=[{{r4}, 0xfffffffffffffffe, 0x44, 0xf0000000, 0x0, 0x8}, {{r5}, 0xffffffffffffffff, 0x2b, 0x10, 0x100, 0x100}, {{r0}, 0x1, 0x40, 0x2, 0x247e, 0x9}, {{}, 0xffffffffffffffff, 0x80, 0x2, 0x7ff, 0x8}, {{r1}, 0xfffffffffffffffb, 0x8d, 0x1, 0x2, 0x6}, {{r2}, 0xffffffffffffffff, 0x23, 0x2, 0xaafd, 0x3e97}], 0x80, &(0x7f00000003c0)=[{{r0}, 0xfffffffffffffffb, 0x8, 0x0, 0x0, 0x9d31}, {{r2}, 0xffffffffffffffff, 0x50, 0x80, 0xf, 0xe}, {{r3}, 0xfffffffffffffffa, 0x10, 0x1, 0x5, 0x951}, {{r3}, 0xffffffffffffffff, 0x8, 0x1, 0x4, 0x8000}, {{r1}, 0xfffffffffffffffd, 0x42, 0x2, 0x4, 0x83b}, {{r3}, 0xfffffffffffffffe, 0xca, 0x10, 0x1, 0xfffffffffffffffd}, {{r0}, 0xfffffffffffffffb, 0x3, 0x2, 0x7, 0xa4}], 0x3, &(0x7f00000004c0)={0x9, 0x2}) ioctl$TIOCFLUSH(r5, 0x80047410, &(0x7f0000000500)=0xfff) (async) ioctl$TIOCFLUSH(r5, 0x80047410, &(0x7f0000000500)=0xfff) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0x68, &(0x7f0000000540)={{0x18, 0x0, 0x8, 0x8}, {0x18, 0x2, 0x950, 0x9}, 0x3ff, [0x10001, 0x9, 0xb, 0x8, 0x5, 0x3410fc71, 0x1ff, 0x1]}, 0x3c) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000580)=0x2) (async) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000580)=0x2) ioctl$PCIOCWRITE(r5, 0xc0107003, &(0x7f00000005c0)={{0x5, 0x4, 0xff}, 0x8001, 0x7, 0x4}) close(r1) (async) close(r1) r6 = dup2(r2, r1) kqueue() (async) r7 = kqueue() pipe(&(0x7f0000000600)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) (async) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) socketpair(0x1, 0x5, 0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0x18, 0x4, 0xe) (async) r11 = socket$inet6(0x18, 0x4, 0xe) r12 = dup(r6) kevent(r6, &(0x7f0000000680)=[{{r5}, 0xfffffffffffffffd, 0x1, 0x20, 0x4, 0x6}, {{r6}, 0xfffffffffffffffa, 0x40, 0x40, 0x3, 0x40}, {{r2}, 0xffffffffffffffff, 0x5, 0x1, 0x7fffffff, 0x9d}, {{r1}, 0xfffffffffffffffa, 0x21, 0x14, 0x31, 0xa}, {{r7}, 0xfffffffffffffffb, 0x20, 0x10, 0x5, 0x5}, {{r8}, 0x1, 0x8, 0x2, 0x5, 0x9b}, {{r9}, 0xfffffffffffffff9, 0x0, 0xf0000000, 0x7, 0x2}, {{r1}, 0xfffffffffffffffb, 0x48, 0x20, 0x2, 0x2}], 0xd3dd, &(0x7f00000007c0)=[{{r10}, 0xfffffffffffffff9, 0x11, 0x10, 0xffffffffffffdaca, 0x62ae}, {{r11}, 0xfffffffffffffff8, 0x8, 0x1, 0x5, 0x1200}, {{r3}, 0xfffffffffffffffd, 0x62, 0xf0000000, 0x40, 0x32}, {{r3}, 0xfffffffffffffffb, 0x28, 0x1, 0x100000001, 0x9}, {{r12}, 0xffffffffffffffff, 0x4, 0xfffff, 0xf3d}, {{r0}, 0xfffffffffffffffa, 0x0, 0xa1, 0x4, 0x1ff}, {{r1}, 0xffffffffffffffff, 0x0, 0xc739af991475a81e, 0x513, 0x3}], 0x1, &(0x7f00000008c0)={0xae, 0x6}) setgroups(0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) 56.750234ms ago: executing program 7 (id=1563): r0 = msgget(0x0, 0x100) r1 = socket(0x18, 0x3, 0x0) msgsnd(r0, &(0x7f0000001080)={0x3, "5fc96ac9a28e"}, 0xe, 0x0) setsockopt(r1, 0x1000000029, 0x38, 0x0, 0x0) r2 = accept$unix(r1, &(0x7f0000000000)=@file={0x0, ""/4101}, &(0x7f0000001040)=0x1007) select(0x40, &(0x7f0000000140)={0x6, 0xf, 0xfffdfbfffff7fffe, 0xa, 0x80000000000bd8, 0x3, 0xffd, 0x100000000000}, 0x0, 0x0, 0x0) r3 = socket(0x18, 0x3, 0x80) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) mquery(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x0, r2, 0x4) 4.441051ms ago: executing program 2 (id=1564): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc148445e, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x0, 0x4}) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000004880), &(0x7f00000048c0)=0x4) 4.056152ms ago: executing program 2 (id=1565): r0 = socket$inet(0x18, 0x3, 0x102) connect$inet(r0, &(0x7f0000000600)={0x2, 0x2}, 0xc) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0xf, 0x8}]}) sysctl$hw(&(0x7f0000000000)={0x6, 0xb}, 0x3, &(0x7f0000000140)="d5bd0d1d2d9ffee9de25ae000299278f439e7ba85cfc6828fac6bd2c4db863", &(0x7f0000000040)=0x74, 0x0, 0x0) 1.482458ms ago: executing program 5 (id=1566): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_pts() r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000040)=0x1, 0x4) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) getsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) close(r2) (async) setsockopt(0xffffffffffffffff, 0x80000000, 0x2, &(0x7f00000000c0)="86e3b234c94f99ad5f88ce7a01cc2a8a21acb91f228771570e800729c3a7d136334b4afc4ba230c9f2e4840a87ce8f4c155535b24b7f072c29361d52931aa515a9fde97563", 0x45) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PCIOCGETROM(r4, 0xc0107005, &(0x7f0000000100)={{}, 0x0, 0x0}) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080), 0xc) (async) fchown(r2, 0xffffffffffffffff, 0x0) (async) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000200)=0x2) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x0}, 0xffffffff}, 0x10, 0xc2, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) close(r0) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x6, @multicast1, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0xc}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0x1000, 0xfffa}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 280.283µs ago: executing program 2 (id=1567): socketpair(0x1, 0x8000, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000040)=0x7fffffff) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x33}, 0x4, &(0x7f00000000c0)="c5ad07bac79bd033c0df0803627b0c2f87fd7dce076692c8244ff6569fb92e4156feb2c7a744b426075729504f7175f3ae4c70a6700c8e53a22283e1bd08d422ed232e8ab97171654695fd149448ba039dfe73b7e2753a6924270824c8", &(0x7f0000000140)=0x5d, &(0x7f0000000180)="ea09efe217f4924df8ec39120e3be99eb268552948f501340a2f14b13fd1d72b7e57f9e4de79feb1e242b272274a714a0911fd2d162c62e74937ab0820925374cf4efe6f2587da46604d42ed11a1c701c69af1da6fa5d85120e8edf47972cb76a89dcce40ce2fe73", 0x68) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000200)=0xfffffffa) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r3 = syz_open_pts() fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x7, 0x8e4}) recvmsg(r0, &(0x7f00000019c0)={&(0x7f00000002c0)=@un=@file={0x0, ""/4105}, 0x100b, &(0x7f0000001880)=[{&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000001400)=""/91, 0x5b}, {&(0x7f0000001480)=""/114, 0x72}, {&(0x7f0000001500)=""/164, 0xa4}, {&(0x7f00000015c0)=""/227, 0xe3}, {&(0x7f00000016c0)=""/246, 0xf6}, {&(0x7f00000017c0)=""/9, 0x9}, {&(0x7f0000001800)=""/105, 0x69}], 0x8, &(0x7f0000001900)=""/181, 0xb5}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00', 0x0, 0x2) getsockname(r1, &(0x7f0000001a40)=@in, &(0x7f0000001a80)=0xc) sysctl$kern(&(0x7f0000001ac0)={0x1, 0x34}, 0x2, &(0x7f0000001b00)="df1306", &(0x7f0000001b40)=0x3, &(0x7f0000001b80)="6eea95d8448d40ab1f53b66b2b318176e1c007802fa2626714c06e30096b604a0f284464c74be0972ab13397051666f6206d21b686a75c19279bb3a6dad42fb85f67c1f66416d4a451fb008ee7e2cdee34bd80911272207895cd8e5efdb42da853da2a7f45f4535bde105dd040d1e865855d02daac949148592af7fe684852017d33427638ad13d990c4eee56aec44b8dade962bebd0fee04faac8e1a53b18dec4a0aa459a3fd50204de7bce3848e1", 0xaf) fsync(r0) sendto(r2, &(0x7f0000001c40)="6279abb4ec5e7029adcbc671e51f5b48e185ec9c41a7cfd069aa0573a22aa347fde386bf5224e800baad40423296d1509b278e8059ed5c441b1a310244d6c1aab5f171", 0x43, 0x4, 0x0, 0x0) ioctl$TIOCEXCL(r3, 0x2000740d) sysctl$kern(&(0x7f0000001cc0)={0x0}, 0x0, &(0x7f0000001d00)="d882f8c129e3481d26742d8887ccb3b7863562df55db06ba1cb79807eacfc255338556842844f1b092de87fd1ca471ae6f55b644d847e79ad4a22b1b8c1ff86dd2161bf6d1ecbdd14cb112", &(0x7f0000001d80)=0x4b, &(0x7f0000001dc0)="8ba40878fdb01c83d29ccf2bb34f24680c1de235fbbf28e24964d7018c8ed643bb81756948725a4f2f9460a55d82e4bfe2b157415a3a3b4328ff6570714b1e40cd604b8fe26cd509b833458397bb28c3f77e504744e1e6aede", 0x59) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000001e40)={0x0, 0x0}, 0xc) setuid(r4) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000001e80), 0x1, 0x0) r6 = openat(r2, &(0x7f0000001ec0)='./file0\x00', 0x1, 0x203) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001f00)=""/54) readv(r1, &(0x7f00000023c0)=[{&(0x7f0000001f40)=""/184, 0xb8}, {&(0x7f0000002000)=""/167, 0xa7}, {&(0x7f00000020c0)=""/231, 0xe7}, {&(0x7f00000021c0)=""/52, 0x34}, {&(0x7f0000002200)=""/203, 0xcb}, {&(0x7f0000002300)=""/6, 0x6}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/56, 0x38}], 0x8) ioctl$TIOCSTAT(r6, 0x20007465, &(0x7f0000002440)) fcntl$getown(r1, 0x5) mknod$loop(&(0x7f0000002480)='./file0\x00', 0x8000, 0x1) seteuid(r4) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f00000024c0)={0x44f, 0x8a, 0x0, 0x7fff, "1af9d412e45dfa2cab1600977794e74e1a40b5e7", 0x4, 0x3}) r7 = msgget(0x0, 0x1) msgctl$IPC_RMID(r7, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000002500)=0x10000, 0x4) accept$inet(r6, &(0x7f0000002540), &(0x7f0000002580)=0xc) 0s ago: executing program 5 (id=1568): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) getgid() openat$vnd(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$VNDIOCGET(r1, 0x41946472, &(0x7f0000000740)={'./file0/file0\x00', 0x7, 0x8, 0x6}) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) (async) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-9.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error vnd0: sloppy read from proc 67063 (syz-executor): blkno 0 bcount 35 pckbd_enable: command error pckbd_enable: command error    OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 951 Starting stack trace... panic(ffffffff8343134a) at panic+0x1ba __assert(ffffffff833e19c2,ffffffff8332ba91,3b7,ffffffff833e4a81) at __assert+0x29 refcnt_finalize(ffff80002a8edb20,ffffffff8332e1e6) at refcnt_finalize+0x1c8 pppx_if_destroy(205b9a,ffff80002a8edb18) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a7f0540) at pppxclose+0xa0 spec_close(ffff80002a80ed90) at spec_close+0x412 VOP_CLOSE(fffffd806aa21470,1,fffffd8007bfb888,ffff80002a7f0540) at VOP_CLOSE+0x12a vn_closefile(fffffd806c55dcc0,ffff80002a7f0540) at vn_closefile+0x11d fdrop(fffffd806c55dcc0,ffff80002a7f0540) at fdrop+0x126 closef(fffffd806c55dcc0,ffff80002a7f0540) at closef+0x18d fdfree(ffff80002a7f0540) at fdfree+0x115 exit1(ffff80002a7f0540,0,0,1) at exit1+0x59c sys_exit(ffff80002a7f0540,ffff80002a80f100,ffff80002a80f050) at sys_exit+0x1a syscall(ffff80002a80f100) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71df65dad2a0, count: 242 End of stack trace.