last executing test programs:

15.980122118s ago: executing program 2 (id=35):
select(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000)="000000eb", 0x4)
syz_emit_ethernet(0x66, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r1 = socket(0x2, 0x3, 0x0)
shutdown(r1, 0x2)
r2 = syz_open_pts()
close(r2)
syz_open_pts()
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1000, 0x11, 0x2, 0x48}, {0x40, 0xf0, 0xff, 0xfffffffd}, {0x6, 0x80, 0x12, 0xfffff802}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)='r', 0x1}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000340)="a7a6d61de4a16809d26255c61b4f0919d7aacd3dc6959cb3e86fff46c0fbdee1a9b5737a476cd679", &(0x7f0000000000)=0x28, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f00000012c0)={@local, @random="302c01003885", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1c, 0x28, 0x67, 0x1, 0x7, 0x62, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x6, 0x0, 0x4}}}}}})
r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000180)={0x4, &(0x7f00000000c0)=[{0x1, 0x5, 0x4, 0xffff}, {0x0, 0x9, 0x5}, {0x3c, 0xa, 0x4, 0x6}, {0x1006, 0x57, 0x6, 0x9}]})
syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[])
accept$inet6(0xffffffffffffff9c, 0x0, 0x0)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="83243d83c6993b00a28754c31b306d6c000000034daa8b42", 0x18}], 0x1, 0x10002eb5)
unveil(0x0, 0x0)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000140)=0x9)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="cff5c05e64da486cdaae4a8238b1f359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a3b0b2e", 0x2a}, {&(0x7f0000000240)="aa6295ceab03", 0x6}], 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000001ac0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520300243c03fe8000000000000000000000000000bbff020000000000000000000000000001"])

15.308407953s ago: executing program 2 (id=37):
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x3}, 0x34, 0x0, &(0x7f00000000c0)=0xfffffffffffffe21, 0x0, 0x63)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000940), &(0x7f0000001940), 0x0, 0x0)
sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x7)

14.851789585s ago: executing program 2 (id=40):
r0 = socket(0x18, 0x3, 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async)
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts() (async)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
write(r1, &(0x7f0000000100)='\a', 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3, 0x9, 0x9, 0x1}, {0x3, 0x8, 0x0, 0x1}, {0x3c56, 0xcf, 0x32, 0x4}]})
syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[])
lseek(r0, 0x8, 0x1)

10.600876211s ago: executing program 0 (id=49):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
fchflags(r0, 0x10001)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x80, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1}) (async, rerun: 32)
execve(0x0, 0x0, 0x0) (async, rerun: 32)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
r2 = socket(0x24, 0x2, 0x0)
shutdown(r2, 0x1) (async, rerun: 32)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='W\x00') (async, rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async)
close(r3) (async)
r4 = socket(0x2, 0x4001, 0x0)
r5 = dup(r4)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
r7 = dup2(r5, r6) (async)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000200), 0x4)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
truncate(&(0x7f0000000140)='./file0\x00', 0x7)
pipe(0x0)
mmap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x1, 0x810, r7, 0x7)
ioctl$BIOCSRTIMEOUT(r8, 0x8010426d, &(0x7f0000000040)={0x0, 0x1}) (async, rerun: 64)
socket(0x18, 0x2, 0x0) (async, rerun: 64)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffffa, 0x2, 0x4, 0x4, 0x100}], 0x8, 0x0, 0x5, 0x0)

9.64145866s ago: executing program 0 (id=51):
r0 = socket(0x18, 0x1, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4)
getsockname(r0, 0x0, &(0x7f0000000140))
sysctl$kern(&(0x7f00000000c0)={0x1, 0x30}, 0x2, &(0x7f0000000140), 0x0, 0x0, 0x0)

8.691100435s ago: executing program 0 (id=53):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000040)=0x1) (async)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000040)=0x1)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x11)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x1)

8.211393687s ago: executing program 1 (id=54):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
getgroups(0x7, &(0x7f0000000200)=[0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0])
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
select(0x40, &(0x7f0000000100)={0xd, 0x20, 0x6d, 0x588, 0x1, 0x6, 0x9, 0x6}, 0x0, 0x0, 0x0)
r3 = socket(0x18, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r4)
socket$inet(0x2, 0x3, 0xfc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000500)={0x1, 0x0, 0x8, {[0xe, 0xcf, 0xe00, 0x1, 0x6, 0xcb7, 0x1, 0x80000001, 0xcee, 0x3, 0x1, 0x7, 0x9, 0xd7, 0x9, 0x3ff, 0x78c9d7c0, 0x8], [0x8, 0x792, 0x9959, 0xf, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffa, 0x0, 0x2ec], [0x9, 0x6, 0x9, 0x6f61, 0xf3, 0x8f3, 0x7], [0x8000000000000000, 0x3, 0x0, 0x9, 0x7fff, 0x8], [{0x2, 0x5, 0x7, 0x4}, {0x4, 0x8, 0x10001}, {0x2, 0x7, 0x3, 0x1}, {0x9, 0x4, 0x5}, {0x2, 0xa7, 0x5, 0xfffffffffffffffe}, {0x7fff, 0x2, 0xf, 0x3}, {0xf5cc, 0xe1f8, 0xc00000}, {0xb3b, 0x6, 0x6, 0x80000000}], {0x2, 0x5, 0x0, 0x5}, {0x4, 0x21, 0xfff, 0xe3}}})
socket(0x2, 0x2, 0x0)
socket(0x18, 0x2, 0x0)
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
flock(0xffffffffffffffff, 0x2)
sysctl$kern(&(0x7f0000000040)={0x1, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x0)

7.511575155s ago: executing program 0 (id=55):
r0 = syz_open_pts()
sendmmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x3, 0x5) (async)
ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async, rerun: 32)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x7) (async, rerun: 32)
r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc)
listen(r1, 0x101) (async)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x7) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async, rerun: 32)
r3 = socket(0x1, 0x8000, 0x3) (rerun: 32)
poll(&(0x7f0000000140)=[{r1, 0x100}, {r2, 0x2}, {r0, 0x8}, {r0, 0x100}, {r3, 0x100}], 0x5, 0x7fff)
execve(0x0, 0x0, 0x0)

7.030712823s ago: executing program 2 (id=56):
r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a)
select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x5, 0x2000000000000044}, 0x0, 0x0, 0x0)
fchmod(r0, 0xf3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000080)=@in6, 0xc, &(0x7f0000000480)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/105, 0x69}], 0x5, &(0x7f0000000500)=""/121, 0x79}, 0x840)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x200, 0xffffffffffffffff)

6.570244295s ago: executing program 1 (id=57):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0xe, 0x85, 0x1}, {0x64, 0xf0, 0xff}, {0x6, 0x7f, 0xe, 0xa}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f9", &(0x7f0000000000)=0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[])
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe8000000000000000000000000000aa00030000000000000101000101000401000401"])
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9)

5.908934356s ago: executing program 1 (id=58):
r0 = syz_open_pts()
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x1)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xfd)
syz_open_pts()
ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000080)={0xc0f6, 0x68e})
syz_open_pts()

5.170079654s ago: executing program 2 (id=59):
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwrite(r0, &(0x7f0000000000)="97ab076f6cca2757c074202dc95cea7dd3095396d18f8844c24c41bb3374decfc89ae94ea72b0bc5f65934ad7434bb4c6b06dc0dee", 0x35, 0xb17) (async)
pwrite(r0, &(0x7f0000000000)="97ab076f6cca2757c074202dc95cea7dd3095396d18f8844c24c41bb3374decfc89ae94ea72b0bc5f65934ad7434bb4c6b06dc0dee", 0x35, 0xb17)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000380)="880d9b68a97107ed7fe5c081fba60a8c9bd4ac52400e8b74b0ac6b577260b4499055eaf77bdad0c890fb642c07e805612b", 0x31}], 0x1, 0x100000000) (async)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000380)="880d9b68a97107ed7fe5c081fba60a8c9bd4ac52400e8b74b0ac6b577260b4499055eaf77bdad0c890fb642c07e805612b", 0x31}], 0x1, 0x100000000)
open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190)
ftruncate(r1, 0x10000)
ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000340)={0x2, 0x10001})
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000200)='./bus\x00', 0xbffab6d3d3d32fb2, 0x202) (async)
mknod(&(0x7f0000000200)='./bus\x00', 0xbffab6d3d3d32fb2, 0x202)
ktrace(&(0x7f0000000140)='./bus\x00', 0x41ecf3848c59a689, 0x4000000c, 0x0)
msgget(0x3, 0x600)
r2 = getuid()
setreuid(0xee00, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
msgget$private(0x0, 0x100) (async)
msgget$private(0x0, 0x100)
msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1a4, 0x800)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580), &(0x7f0000000140)=0xc) (async)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}})
r5 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r5, 0x0)
r6 = shmget(0x0, 0xa000, 0x0, &(0x7f0000ff6000/0xa000)=nil)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x47ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x902, 0x10, [{0x0, 0x9, 0x2, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x110, 0xfffff4a1, 0x0, 0x9}, {0x1, 0x803, 0x8007, 0xb6b}, {0xa, 0x200727, 0x9f7, 0x800007}, {0x1, 0x650, 0x5, 0xcb}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xffe, 0x7ff, 0x14, 0xc}, {0x2, 0x200083, 0x8000005, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0x1, 0x10001, 0xe, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffff6, 0xffffffff, 0x7}, {0xd, 0x3, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r7, 0x80184405, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
shmctl$IPC_STAT(r6, 0x2, &(0x7f00000003c0)=""/202)
setreuid(0xee00, r5)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080), 0xc)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0), 0xc)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), 0xc) (async)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), 0xc)

3.669995124s ago: executing program 1 (id=60):
r0 = syz_open_pts()
r1 = syz_open_pts()
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000000)=0xffff)
r2 = syz_open_pts()
flock(r2, 0x2)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x1)
r3 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
sysctl$kern(&(0x7f0000000000)={0x1, 0x58}, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0)
r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="b55d145e54af", [], {@ipv4={0x88e7, {{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0xfff, 0x0, 0xf0, 0x0, @local={0xac, 0x14, 0x0}, @loopback}, @udp={{0x0, 0x3, 0x8}}}}}})
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x61, 0x16, 0x2, 0x3}, {0x7, 0x8, 0xb3, 0x80000000}, {0x3c46, 0xfe, 0x37, 0x109}]})
syz_emit_ethernet(0xaa, &(0x7f0000000080)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCCLR(r4, 0xc0a86b04, &(0x7f0000000000)={0x0, 0x10000, 0x0})
r6 = socket(0x18, 0x3, 0x0)
setsockopt(r6, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
setsockopt(r6, 0x1000000000029, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0\x00')

2.939976976s ago: executing program 2 (id=61):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000c4"], 0x18}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x2, 0x2, 0x0)
r0 = open$dir(&(0x7f0000000040)='./bus\x00', 0x8000, 0x100)
faccessat(r0, &(0x7f0000000080)='./file0\x00', 0xe6, 0x1)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8001, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x48e}, 0x5, 0x8, 0x0, 0x0, 0x100000002, 0x4000000000002, 0x7f, 0x40000000000000})
mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0)
ioctl$TIOCEXCL(r1, 0x2000740d)
setuid(0xffffffffffffffff)
open(&(0x7f0000000340)='./bus\x00', 0x200, 0x124)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, 0x0)
r3 = kqueue()
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000100)={0x1, [{0x3, 0x1}, {0x3, 0xffffffc0}, {0x1, 0x1ff}, {0x2, 0x4}, {0x1, 0xf6c}, {0x2, 0x8}, {0x1, 0x7}, {0x5, 0x10000}, {0x3, 0xf4}, {0x3, 0x8}, {0x3, 0xee0c}, {0x2, 0x62}, {0x3, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x2000000}, {0x1, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x2, 0x9d8}, {0x2, 0x400}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0xa809}, {0x2, 0x78}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x10}]})
kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = syz_open_pts()
fcntl$lock(r4, 0x9, &(0x7f0000001500)={0x3, 0x0, 0x0, 0x1000300000000})
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x47}, {0x40, 0x9, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="721d1a7055c3cb4e9d397c3c2affc6d0a19283d610335e747d989778354ac313b91bb888b8e4876c", 0x28}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a16809d26243003b47915d8156c41f3462b255c61b4f0919d7aacd3dc6959cb3e86fff46c0fbde88822411", &(0x7f0000000000)=0x30, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x5, @multicast1}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x68}}}}})

2.200305276s ago: executing program 1 (id=62):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000400)={'tap', 0x0})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="721d1a7055c3cb4e9d397c3cccc01ec62aff32e8e70b1967437f63eb9dc6d0a19283d610335e74f8f5180ad17d989778354ac313b965b4f3299e98b0052576bf60297290c9a93ffdf12a96a86b66d4112eff7f00000000000034b6236859b88d78a17cc2d099dcceefd603c0b0a97e60b34a4a69d3f7f9b9746ec0ed617158ccfc66bb93bb552fcbfecca3360aeb5635d2479e06e3117a418cc90909", 0x9c}], 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000000))
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000880), 0x621, 0x0)

1.481075789s ago: executing program 0 (id=63):
r0 = socket(0x18, 0x3, 0x0)
setuid(0xffffffffffffffff)
ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000000))

740.314137ms ago: executing program 1 (id=64):
r0 = socket(0x18, 0x3, 0x3a)
sendto(r0, &(0x7f0000000340)="9c0cd793d0512c68", 0x8, 0x0, 0x0, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x20)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x40000120, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$PCIOCWRITE(r2, 0xc0107003, &(0x7f0000000040)={{0x1, 0x9, 0x50}, 0x8000, 0x7, 0x7})
linkat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x4) (async)
linkat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)

0s ago: executing program 0 (id=65):
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xd7ba)
lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) (async)
lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0))
setrlimit(0x8, &(0x7f0000000080)={0x9, 0x66}) (async)
setrlimit(0x8, &(0x7f0000000080)={0x9, 0x66})
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r0, 0x6, 0x10, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) (async)
setsockopt(r0, 0x6, 0x10, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
dup2(r0, r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts.
pppx: unable to set addresses for pppx1, error=17
ifconfig: tap3: SIOCIFDESTROY: Device not configured
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 inet6 fe80::03aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
ifconfig: socket: No buffer space available
ifconfig: socket: No buffer space available
SYZFAIL: command failed
command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap3 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted)
SYZFAIL: repeatedly failed to execute the program
proc=3 req=4 state=1 status=67 (errno 4: Interrupted system call)


OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffffd806f0b8288, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
Password:
Login incorrect
login: show panic
Password:
Login incorrect
login: show registers
Password:
Login incorrect
login: ps
Password:
Login incorrect
show malloc
login: Password:
Login incorrect