last executing test programs: 10.198837582s ago: executing program 2 (id=3): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x0, 0x8000, 0xfffffffe, 0x1000, "ff14ef100000000002008000", 0x1, 0x40000}) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x4, 0x6b, 0x6, 0xa, "3bd78df61904edcaade8733a5f41f5aa8da601ea", 0xfd, 0x4c554fdc}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="8d57e6676b65d2ef43ca1b40e421829a9b559bcdebb33ce2f1db5918e20afd2659320b341eef6f57ee0b5ceb78181c993ef4c1dc2002e37f2f9facfafe5ec23317f48a6c1587af90232a63391a08ecaa26fc839502da1900f18f3b6845cf6dc94808c1ec4b4e", 0x66}, {&(0x7f00000000c0)="8880394a4272225776d0c280cd3147e14bbbc3033689cc153eed", 0x1a}, {&(0x7f0000000100)="766a519f34f21f9ed5069547c368d184cae0d766ef29936a3c914b059b6dccfc32341709b58129639b8f0d2776c132fd43bfe31dbe6145ef229630615fa2c367fed27c26ce08c7c1b2ee626fdd38582e7e23d037e226e3755adb399f161ef731510b1b143e2bbe82f2bf1bd9bd1e8bc516901ffa5bdf2edf0b9d3f05b22dbc471af721ab2c64b01edcc311a6e341b7d0d93a9477368b9f8b4c53eb07e47149077ea445ea2f2f52a7002c12580dc390b2bd5488e9d5ed70066ccb6b5dd035cdba7e5d23a5afd5ff78d7a92e0176a9bcb6b943f94f0752e92715f719438864ee5d", 0xe0}, {&(0x7f0000000200)="5b868af13fceba2d95c70551f833fc36a37e17e412fa1e3545f98ab5d53b1a546b5a2d3a285f4f917ecc37f4f1bf", 0x2e}, {&(0x7f0000000240)="beab3647bc5744fffbc74bcdd46711d0416b3f57ca1d65d4fddaf672578949f6d6ec7cf5dc9de3e4cb57ee830cd084b1f3780fa61afd6c0536323952efee51d67c472b8fd49cbdff4574cb82e4ad8e27d882c8aac0671e2518b8c4ff2d8ba144a2e8692abfdde1e1da6d66d9a619448ca925294980f66cc2806d7a327b393291a8623f346b8b24c30830d93ac085d4ccc1a7", 0x92}], 0x5) socket$inet(0x2, 0x3, 0x9) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) 5.125117901s ago: executing program 2 (id=124): close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x40, 0x7fffffff, 0xc, 0x10001, 0x10, [{0x0, 0x7, 0x24, 0x70ffe}, {0x3, 0x8, 0x8, 0x62f9}, {0x100, 0xffffffff, 0x0, 0x6}, {0x1, 0x800, 0x800a}, {0x401, 0x200727, 0x2801, 0x7}, {0x1, 0x650, 0x3, 0x97}, {0x2, 0xfffffffb, 0x4f8, 0xd5}, {0x6, 0x803, 0x4014, 0x4000008}, {0x2, 0x207f, 0x6, 0x5}, {0x7f, 0x8001, 0x81, 0x3}, {0x1cc, 0xffff, 0xc, 0x3}, {0xffffff82, 0x9, 0x604, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffb, 0x1, 0xffffffc0}, {0x0, 0x3, 0x5, 0x2}, {0x0, 0x9, 0xffb, 0x2004004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f0000000300)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x7) sendto$unix(r1, &(0x7f0000000480)="b10005136000009f05003e0800000000331c13fecea10500fef96ecfc72fd3357a068d02bc31a3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8faff0037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9b287948a62310db415f779642cdcd71a3f8343712051e", 0xb1, 0x9000000000000000, 0x0, 0x0) r2 = dup(r1) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000380)={&(0x7f0000000340)=[{0x2f, 0x1}, {0x84, 0x7fffffff}], 0x2}) r3 = getpid() ktrace(&(0x7f0000000240)='./file0\x00', 0x0, 0x510, r3) setrlimit(0x1, &(0x7f0000000000)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000002c0)=[{0x81, 0x9, 0x2}, {0xb1, 0x6, 0x1, 0xff}, {0x6, 0x5, 0x81, 0x4013}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) r5 = syz_open_pts() ioctl$TIOCSTAT(r5, 0x20007465, 0x0) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x18, 0x2, 0x0) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000100)=0x1) 2.454838427s ago: executing program 7 (id=164): sysctl$kern(&(0x7f0000000080)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e38a25871b59cfec37082000f4208feb81faf12c663ac9b99efaa48f86669eccbe166fda56a34302c74ca3f9f9c35c0393e52c2937fa19d361ffe2f3855a00e9e", &(0x7f0000000000)=0x51, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0) ftruncate(r0, 0xb358) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000800005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r4 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f00000005c0)="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"/678, &(0x7f0000000080)=0xd4, 0x0, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r3, 0x3}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3]) execve(0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x36}, 0x2, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="0609415a100aff8fa3fb18584fa6a94cf6b21d9d69c536eddf33c5fc0387b9085217a50c4c1999100760", 0x2a) 2.410747273s ago: executing program 5 (id=169): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0x9ff, 0x44809ea1, 0xffffffffffffffff, 0xfc32, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffffffff, 0xfffdffff, 0xfff7, 0x0, 0x802, 0xffff, 0x2, 0x2, 0x0, 0x2, 0xff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffff9c, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xf, 0xcd, 0xfff6, 0x0, 0x8, 0x3, 0x6, 0x0, 0x1, 0x7, 0x2b7}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = socket(0x18, 0x2, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="000000d860a82060dec3e59be543bfcb449377b76614632250b46f16a822dabfe1792314b1ed12705beea02875758ce32405ccc046fcc745bf8c54e0610c14dd677cae275cf8cff389c01d23bd2f", 0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0)) sysctl$kern(&(0x7f0000000080)={0x1, 0x51}, 0x2, &(0x7f00000001c0)="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", &(0x7f00000000c0)=0x1000, &(0x7f0000000100)="e7fbff7d08910d7fb1dc303bec3e713d4a4892a5ee09d253cec7cffe71bd6a9d152c45a4208091194f37d4e9ab", 0x2d) 2.338444288s ago: executing program 1 (id=171): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x18501, 0x0) ioctl$TIOCSETA(r0, 0xc148445f, &(0x7f0000000040)={0x2, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x5, 0xff}) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x2b6e2aa33aa2ad32) sysctl$kern(&(0x7f0000000000)={0x1, 0x21}, 0x2, &(0x7f00000000c0)="0842866797a6a16652c323b6339c23d8228d20952834a1e9f9be6e5f2c7c6046a7cc19d180d0e324eef4cb58353c3d0e2ab1062debe4fab7384640f7f94783f33569bd17ac1b", &(0x7f0000000140)=0x46, &(0x7f0000000200)="66fbb35ba9ada06524f9c2fc2cfd6cef8538cbe7b17b1d133cacdf109ad4ae3ea264b56c339aa00ff1e3fbb3136611fb6f1cbb29e66136f031096074b1cca275c65dcace7a232f97f9019ae026d9c77538475926bc93ef9508fd00f2a2f9ef8b1c2d54a0863f82ed53b421ec7441539aeca7438b8cb55cb41ea1c2b47016a38ab8bb41730d2a0954e48701d6e5e2729ccfe27d915ef12b312d0eeeb37d", 0x9d) 2.336332649s ago: executing program 6 (id=173): select(0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async, rerun: 32) setuid(0xffffffffffffffff) (rerun: 32) fchmod(0xffffffffffffffff, 0x21) (async) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10, 0x0, &(0x7f00000016c0)) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb3", 0x2) (async) r0 = shmget(0x1, 0x1000, 0x383, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, 0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGTSTAMP(0xffffffffffffffff, 0x4010745b, 0x0) (async, rerun: 32) r3 = kqueue() (rerun: 32) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) 2.304411967s ago: executing program 6 (id=175): r0 = socket$inet(0x2, 0x4000, 0x9) recvfrom$inet(r0, &(0x7f0000000000)=""/98, 0x62, 0x1, &(0x7f0000000080)={0x2, 0x3}, 0xc) r1 = dup2(r0, r0) fchflags(r1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000100)="815418a304aaa7f037060c64644e685c227f477be274bbab105f784e9c0180355574d51f15a81d98a3f8cd634a24994001ca4f6806c55e7853acc4d9945280bb72751dacf6d3eff3b0ff327b46b83092bff34bc62c47f86b5d75f2fbd08a90eafad7ca70a789c6207c4066cab162a0e8fe03c9a6dd09531392ebf98df935ff203034270cd4433cb73f33fa04b19381ebef4a272f82440c54f82134232cf6a50972738fb08c3bf9a8561f7e5670bc5a02cbe5133af39a836e409cbb81a3552531245e575e549e65d67e3825199e17a12925d1166d2ae44b3584ba3fddefa21edd1dc8c474bc5d7a303985bac47bc1fa37bd3459a917", 0xf5) fcntl$getown(r2, 0x5) r4 = dup(r2) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r1, 0x400c570a, &(0x7f0000000200)) ioctl$TIOCFLUSH(r3, 0x80047410, &(0x7f0000000240)=0x9) r5 = syz_open_pts() ioctl$TIOCSTART(r5, 0x2000746e) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000000280)) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f00000002c0)) r6 = dup(r5) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000300)) fchmod(r6, 0x80) socket(0x2, 0x3, 0xf4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000340)={0x3, 0x1, 0x2, 0xbfc5, 0x7fffffff}, 0xc) r7 = openat$klog(0xffffffffffffff9c, &(0x7f00000003c0), 0x8, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f0000000400)={&(0x7f0000000380)='./file0\x00', r7}) ioctl$BIOCGETIF(r3, 0x4020426b, &(0x7f0000000440)={""/16, @ifru_addr=@un=@abs}) r8 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r8, &(0x7f0000000480)="1b536ef90aa7ebb28109a10101673fd33c8f6a82c5e5831f38ecf8ce2b919a86c2392884858ebe131e6445817415ac84c7b8c8ab082b089d04df461423b849cd85631a0639de85fff80221c15fdc982e7f1f7cd4833d967ecee9c0", 0x5b, 0x8, &(0x7f0000000500)=@abs={0x0, 0x0, 0x0}, 0x8) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x4) ioctl$FIONREAD(r9, 0x4004667f, &(0x7f0000000580)) r10 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r11 = open$dir(&(0x7f0000000600)='./file0\x00', 0x80, 0x40) fcntl$dupfd(r10, 0xa, r11) pread(r3, &(0x7f0000000640)="0bf7564a3c5f29ea6932d6b7b6e22da0856373a7790605aaf3e3307d68e48dca77ff1aa7c24463a2c6255d3c13d31bd831a0f20e72cee0bfc64ddbe48be4659f8f04dafb6ebe20f79bac5b22d71f4968fff7c4824636fc1d6868ef97aab149da", 0x60, 0x81) 2.303651517s ago: executing program 7 (id=177): open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0xb6, 0x8018, 0x3, 0x400106, 0xffff, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x4}, {0x6, 0x9, 0x7, 0x9}, {0x100, 0x80000001, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2803, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0x8, 0x3ff, 0x4f8, 0x9}, {0x6, 0x803, 0x14, 0x8}, {0x5, 0x82, 0x5, 0x6613}, {0x6a74, 0x6, 0xd3b, 0x4}, {0x1cf, 0x10001, 0xc, 0x2003}, {0x8, 0x9, 0x1, 0x2}, {0xe28, 0xb, 0x8, 0x1000004}, {0x9eda, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x2, 0x10200000}, {0x0, 0x8, 0xfff, 0x30004}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0xb6, 0x8018, 0x3, 0x400106, 0xffff, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x4}, {0x6, 0x9, 0x7, 0x9}, {0x100, 0x80000001, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2803, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0x8, 0x3ff, 0x4f8, 0x9}, {0x6, 0x803, 0x14, 0x8}, {0x5, 0x82, 0x5, 0x6613}, {0x6a74, 0x6, 0xd3b, 0x4}, {0x1cf, 0x10001, 0xc, 0x2003}, {0x8, 0x9, 0x1, 0x2}, {0xe28, 0xb, 0x8, 0x1000004}, {0x9eda, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x2, 0x10200000}, {0x0, 0x8, 0xfff, 0x30004}]}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r1 = geteuid() r2 = getegid() fchownat(r0, &(0x7f0000000340)='./file1\x00', r1, r2, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x1, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x8001, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) kqueue() syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x4001, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x10009, 0x11b, 0x0, 0x80000001, 0x8, 0x5, 0x10, [{0x7, 0x2, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffff7f4}, {0x8, 0xf8a, 0x0, 0xaf9}, {0x1, 0x8001, 0x7, 0xffffffff}, {0x200, 0x7fff, 0x4, 0x7}, {0x6, 0x6, 0x3, 0x98}, {0x1cdf, 0x1, 0x4f8, 0xff}, {0x8000003, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x4, 0x8, 0x88}, {0x2, 0x50001, 0x9, 0xae7}, {0x7fe, 0x400, 0xffff8001, 0x9}, {0x0, 0x2, 0x2, 0x6}, {0xa6d2, 0x7, 0x1, 0x8}, {0x1, 0x6, 0x2007, 0x400}, {0x0, 0xfffffffd, 0x4, 0x9}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x10009, 0x11b, 0x0, 0x80000001, 0x8, 0x5, 0x10, [{0x7, 0x2, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffff7f4}, {0x8, 0xf8a, 0x0, 0xaf9}, {0x1, 0x8001, 0x7, 0xffffffff}, {0x200, 0x7fff, 0x4, 0x7}, {0x6, 0x6, 0x3, 0x98}, {0x1cdf, 0x1, 0x4f8, 0xff}, {0x8000003, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x4, 0x8, 0x88}, {0x2, 0x50001, 0x9, 0xae7}, {0x7fe, 0x400, 0xffff8001, 0x9}, {0x0, 0x2, 0x2, 0x6}, {0xa6d2, 0x7, 0x1, 0x8}, {0x1, 0x6, 0x2007, 0x400}, {0x0, 0xfffffffd, 0x4, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm(&(0x7f0000000200)={0x2, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm(&(0x7f0000000200)={0x2, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = socket$inet(0x2, 0x3, 0x102) sendmmsg(r4, &(0x7f0000000200)={&(0x7f00000006c0)={&(0x7f0000000240)=@un=@file={0x14, './file1\x00'}, 0xa, 0x0, 0x0, 0x0}, 0x7}, 0x10, 0x2) (async) sendmmsg(r4, &(0x7f0000000200)={&(0x7f00000006c0)={&(0x7f0000000240)=@un=@file={0x14, './file1\x00'}, 0xa, 0x0, 0x0, 0x0}, 0x7}, 0x10, 0x2) socket(0x2, 0x4001, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x2}, {0x6, 0xa, 0x80, 0x400f}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x2}, {0x6, 0xa, 0x80, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="00a0a78d0ca82026dec3e59be543bfcb4c969b0000729500000000000000000000000000eb528c98dd00c62eaac3cb592815119db58b90f5b1006ee0ee4d6cf7db09dc1aa1fd1da842a6a040bb6363fbf7df3f25", &(0x7f0000000080)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) 2.244597245s ago: executing program 6 (id=181): mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10, 0x8) mquery(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, r0, 0x863) recvfrom$inet6(r0, &(0x7f0000000040)=""/132, 0x84, 0x40, &(0x7f0000000100)={0x18, 0x3, 0x7, 0x7f}, 0xc) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000140)={0x71440000, 0x8001}, 0x10) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f00000001c0)) r2 = dup2(r1, r0) socketpair(0x6, 0x4000, 0xb, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000240)) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000280)=0x8) syz_emit_ethernet(0xe, &(0x7f00000002c0)={@local, @local, [], {@generic={0x4c42}}}) ioctl$FIOGETOWN(r5, 0x4004667b, &(0x7f0000000300)) connect$inet6(r3, &(0x7f0000000340)={0x18, 0x0, 0x3, 0x1}, 0xc) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x7f, 0x3, 0xe}, {0x3, 0xc1, 0x0, 0x412}]}) ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000400)=0x1) ioctl$TIOCNOTTY(r0, 0x20007471) syz_extract_tcp_res(&(0x7f0000000440), 0x7, 0x8) r6 = dup(r3) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000480)) getpeername$inet(r6, &(0x7f00000004c0), &(0x7f0000000500)=0xc) chdir(&(0x7f0000000540)='./file0\x00') recvmsg(r5, &(0x7f0000000a80)={&(0x7f0000000580)=@in6, 0xc, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/66, 0x42}, {&(0x7f00000006c0)=""/27, 0x1b}, {&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/229, 0xe5}], 0x6, &(0x7f00000009c0)=""/174, 0xae}, 0x1842) write(r1, &(0x7f0000000ac0)="6cf52b72bb20e3a5bb95e86bafbbecabda956bfb2543fd39bd71ddab1e1223b4f38788beb399e9a49bdc26767e29bd95a7908d45dc89f85efd07610d2c9f41dd08a242cd42c7b0739935ba6941ce", 0x4e) fcntl$setflags(r5, 0x2, 0x1) open(&(0x7f0000000b40)='./file0\x00', 0x80, 0x8) ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000000b80)=0x1) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) close(r7) 2.168889722s ago: executing program 5 (id=183): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x2e) ftruncate(r2, 0x80002) pwritev(r0, &(0x7f0000000b80)=[{&(0x7f0000000640)='~', 0x1}], 0x1, 0xf87c) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) connect(0xffffffffffffff9c, &(0x7f0000000140)=@in6={0x18, 0x1, 0x6, 0x800}, 0xc) preadv(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) 2.168081425s ago: executing program 7 (id=184): syz_emit_ethernet(0xfc, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x2, 0x6, "0500", 0xc6, 0x3a, 0x6, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0xf0, 0x3, '\x00', [@padn, @pad1, @enc_lim={0x4, 0x1, 0xf}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x800}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xff}]}], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xd9, '\x00', {0x1, 0x6, "952161", 0x10, 0x32, 0x1, @rand_addr="d7b3ebf3adf9060045ef63058a695882", @mcast1, [@hopopts={0x89, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x6, 0x0, '\x00', [@pad1]}, @fragment={0x62, 0x0, 0x0, 0x0, 0x0, 0x10, 0x65}], "332ed6ce30b91b3682dfe2a19a287bca2761d49295c25e9d59934f89e40575181b3fad8af1412cb5ccc4e05982a448fbd2e26218000f860b435fe02d6a2a3e23e8bab9f688a8"}}}}}}}) 2.15681062s ago: executing program 1 (id=186): r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="ac2740", 0x3, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005", 0x3, 0x408, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000000c0)="b100050160000004000000000700000012df8106cfa10500fef96ecfc73fd3357ae36caa0416fa4f376b36acf00b7804be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257169ed0d44a699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000200)=""/164, &(0x7f0000000180)=0xa4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unveil(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='c\x00') getpeername$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) listen(r3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) accept$unix(r3, 0x0, 0x0) r5 = semget(0x0, 0x1, 0x381) r6 = socket(0x18, 0x2, 0x0) socket(0x18, 0x2, 0x0) getsockopt(r6, 0x29, 0x37, 0x0, 0x0) semop(r5, &(0x7f0000000000), 0x23) close(r3) execve(0x0, 0x0, 0x0) 2.06189357s ago: executing program 6 (id=189): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$TIOCSETA(r0, 0xc148445e, &(0x7f0000000000)={0x10001, 0x2, 0x7, 0xd5, "00000000f8feff3d000000e7ff61aa9f4f00", 0x2, 0xff}) r1 = socket(0x2, 0x3, 0x0) r2 = socket(0x2, 0x3, 0x0) close(r2) r3 = socket(0x18, 0x3, 0x0) close(r3) socket(0x18, 0xc003, 0x3a) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r2, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1007c) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x57, 0x81, 0x65, 0x1}, {0xffff, 0x1, 0xd0, 0x6}, {0x897, 0x3, 0x5, 0x10}, {0xfffb, 0x7, 0x5, 0x219b}, {0xf34, 0xf1, 0x2, 0x1}, {0xbb, 0x5, 0xe, 0x5b8b6cdf}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r5, 0xffff, 0x2, &(0x7f0000000b40)=""/167, &(0x7f0000000c00)=0xa7) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r6, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) getsockname$inet(r1, 0x0, &(0x7f0000000040)) sysctl$vm(&(0x7f0000000180)={0x2, 0x2}, 0x2, &(0x7f00000000c0)="6deff1605c5705c04d30e9f0202c959ce2b5c3580180ad30", &(0x7f0000000f00)=0x18, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSDISPLAYIO_DELSCREEN(r7, 0x80085754, &(0x7f0000000040)={0x5, 0x2}) sysctl$vm(&(0x7f0000000100)={0x2, 0x4}, 0x2, &(0x7f00000001c0)="22b39b2b7a1cfe7eaebbb9c84e7278c1e5f062f400994e20476cc475624d23f0d95bf7973bb2934a90abac01a53ecee044c2acf9870e4da59789bdc8a6570b0b6534cbff34f62b85366d82236dd77d0e64e117cd8d6bc9b2225299074338a16b7cf7f6a608b9923e7cce69e492ead0b327ea26a6c580e0ae683530f00ba53ddc9169ed00190eb3d2", &(0x7f0000000140)=0x88, &(0x7f0000000280)="9a377a72245eb307e1bfcb4ef761d59a4084fbf6f1218f6ae16fdcb8bcf3a08b02ff", 0x22) openat$pf(0xffffffffffffff9c, &(0x7f0000000740), 0x200, 0x0) select(0x40, &(0x7f0000001e80)={0x9, 0x8000000000000001, 0x1, 0x200, 0x100000000, 0x2, 0x1, 0x7f}, &(0x7f0000001ec0)={0xe, 0x7, 0x10, 0x2, 0xfff, 0x9, 0xfffffffffffffffb, 0x101}, &(0x7f0000001f00)={0x9, 0x7, 0xffffffff, 0x9, 0x81, 0x3ff, 0x5, 0x4}, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) 1.904219682s ago: executing program 5 (id=190): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x3ff}, {0x7ff, 0xa, 0x5, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="766b84e27a8f14984763e0259ca8341e9db2a52cbc77000002000000000000000000023c19e81891915c66817715a9d1f7f08061aee8a0cf82354c9abb0a10cc32ac63e1f34467dbdfaee190a92caeb769cfe2851e062d17866730ca1340b497994162e4007600957668ece3ac4e56e5732b3110e35561e9c2d2cadc5b8b9213a155c35d1df8434869368149d86448d4b5bc8d2c2774606b1ae04906117be6d13f1cf86fcc20b482040d73648ff234afb653973d37ed4b6ebe13e84acf785065", &(0x7f0000000080)=0xc0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r3, 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x0, "fc686b340da1e4795af94547bd1305d65c21963c"}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001180)=',', 0x1) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x7bed, 0x4347e793, 0xffffff8d, "182628040200c2a6d203680023e0ff7f0d000004", 0x1, 0x1ffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x1c2}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[]) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r1, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000002100)=[{&(0x7f0000000180)="968ce1c69d9498126526e1ad5174636898ad874ffb4ff82f905c4f4c", 0x1c}], 0x1) execve(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="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", 0xfb}], 0x1) 1.903677236s ago: executing program 7 (id=191): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x1, 0x11, 0x0, @rand_addr="fe000000010000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn, @pad1, @pad1]}, @routing={0x2b, 0x0, 0x0, 0xf7, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @empty]}], @udp={{0x0, 0x2, 0x8}}}}}}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x102) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x21, 0xd, 0x4000001, 0x2, 0x1, 0x1, 0xf1e}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 1.784227692s ago: executing program 5 (id=197): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x8) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) 1.78319906s ago: executing program 1 (id=198): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000001180)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0xf1, 0x8}, {0x48, 0x7b, 0x14, 0x4a}, {0x1ae, 0x8, 0x6, 0x9}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) r1 = getppid() wait4(r1, 0x0, 0x0, 0x0) 1.702093359s ago: executing program 4 (id=201): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x165) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x5, 0x10, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0xfffffffffffffdae) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000280)="00000000c4004000ac326503c8633bff2a21b1a206bfaf9708b1c2430ac8648408000000986d3cd10d21fb44c655e2feccab9940e4419d001d2fe7613b5daef527bfde236777d70e23046671671661db7740a3de70d40a72e2259bbade4af88870a6f01ad820121b729ce2bcf8f94ac635378ad3772ce7382f33baeb9115faab1c6a268288cb96ebe19e3940ab6adaebc9e4b1fbdb67b98278e00f0300f6667c12e4c572076505e01af8d927ff4a6f76f5743691ce6cb04f04e99e1976493eb2947bb5cc1a9ffe21d9b4f4502add", 0x4) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd605f6ad900483a0000000000000000000000000000000000fe80000000000000000000000000c3698f"]) 1.699740014s ago: executing program 5 (id=202): r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x1bd19bbd7f415b3, 0xffffffffffffffff) close(r1) socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x900) 1.699104729s ago: executing program 7 (id=203): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="eaef125c00000000", 0xc) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) minherit(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x3) munlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r2 = dup(r1) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000100)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$TIOCNXCL(r2, 0x2000740e) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) execve(0x0, 0x0, 0x0) 1.596132113s ago: executing program 4 (id=209): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x28, &(0x7f0000000180)="674cd6e5", 0x4) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r1 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0xc2c04200, &(0x7f00000001c0)) syz_emit_ethernet(0x52, &(0x7f0000000000)={@remote, @remote, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x67, 0x0, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x20, {[@mss={0x2, 0x4, 0x6}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}, @eol, @window={0x3, 0x3, 0x9}, @timestamp={0x8, 0xa, 0x1}]}}}}}}}) listen(0xffffffffffffffff, 0x361) 1.593123716s ago: executing program 1 (id=210): r0 = kqueue() r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0115, './file0\x00'}, 0x3) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc) fchown(r3, r4, r5) r6 = fcntl$dupfd(r1, 0x0, r0) close(r6) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d886b4", 0x3}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r7 = accept$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x8) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f, &(0x7f0000000000), 0x49}, 0x400) 1.481354487s ago: executing program 4 (id=211): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) link(0x0, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x5) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0xfff, 0x7, 0x7ff, 0x71000}, {0x7, 0x8, 0x1cc, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x2, 0x800, 0xeb3e, 0x3}, {0x3fe, 0x200726, 0xfffbffff, 0x7}, {0x2, 0x6, 0x3, 0x9a}, {0xce1, 0x1, 0x1, 0x30a}, {0x6, 0x803, 0x14, 0x8}, {0xfffffffb, 0x82, 0x1, 0x9}, {0x20000004, 0x8001, 0xd19, 0x88}, {0x1d0, 0x10001, 0xdc, 0x975e617}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8a, 0x4, 0x6, 0x8}, {0x29a31717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x8, 0x6, 0x3}, {0x0, 0x756, 0x4, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r1 = dup2(r0, r0) accept$unix(r1, &(0x7f0000000580)=@file={0x0, ""/257}, &(0x7f00000000c0)=0x103) sysctl$net_inet_tcp(&(0x7f0000000bc0)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f0000001c40), 0x0) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0, 0xffffffffffffff37}) ioctl$WSDISPLAYIO_SBURNER(r1, 0x800c5751, &(0x7f0000000040)={0x89, 0xf, 0x4}) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) 1.479988212s ago: executing program 1 (id=213): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1040000", 0x4) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x31, &(0x7f00000001c0)='\x00', 0x1) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0}, 0xc) r3 = getuid() chown(&(0x7f0000000040)='./file0\x00', r3, 0xffffffffffffffff) getgroups(0x7, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) chown(&(0x7f0000000280)='./file0\x00', r3, r4) r5 = getegid() setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={r2, r3, r5}, 0xc) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) socket$unix(0x1, 0x2, 0x0) r8 = kqueue() r9 = dup(r8) socketpair(0x1e, 0x3, 0x6, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r9}, 0xfffffffffffffffa, 0x1, 0x40000080}], 0x6, 0x0, 0x0, 0x0) r10 = kqueue() kevent(r10, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r10, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r12 = fcntl$dupfd(r11, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r12, 0x400c745c, &(0x7f0000000080)) close(r6) writev(r7, &(0x7f0000000200)=[{0x0}], 0x1) 1.474449662s ago: executing program 3 (id=214): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) setuid(0xee01) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000001c00)={0x0, 0x46}, 0x10, 0x0) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000080)=0xc01f) dup2(r0, r1) 1.313395813s ago: executing program 0 (id=216): socket(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x8000000000000000, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x40000000000], [0x0, 0x0, 0xffffffffffffffff], [{0x0, 0x1, 0x0, 0x4}, {}, {0x0, 0xfffffffd, 0x0, 0x800000000000}, {0x0, 0xfffffffe, 0x0, 0x1}]}}) (async, rerun: 32) r1 = kqueue() (rerun: 32) kevent(r1, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r1, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) unveil(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='c\x00') 1.312568912s ago: executing program 3 (id=217): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]}) nanosleep(&(0x7f0000000000), 0xfffffffffffffffe) msgget(0x1, 0x218) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x200}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x9) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="b273a18160be077e7ecce2945464df218ec9aa8b737dc1b3411461b170f76b77bd1a56ba8ad5f7492176f8375d400405e2b2ee7d68f88b4ea4c2b27d0bc9fae1f2c21d0eba8d56f4521d6955742e949efdbbee54b622b172bc717ef5caf6247116cab6a52f47fdfb62a35f5018c434a42434e231260bb0b7f6862e22506ce03a3338a39234852453ec32263076676e27f639a6afe393626e5b4691620cd3b139635ab19041cce7bf97670efb78d1f742c0f94afd5806e19d0301ef0a0dd5e1835ee1b109d3c143905fc20eb579df734d7f8adebd8cdd0a", 0xd7}], 0x1) r2 = geteuid() getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r5, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0xf27ff7791bbc9c0f, 0xfd, 0x13fff}], 0x1, 0x0, 0xfffffff8, 0x0) kevent(r5, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) getgroups(0x2, &(0x7f0000000080)=[r3, r4]) setuid(r2) socket(0x10, 0x2, 0x2) setuid(0xee01) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b7", 0x23}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x18, 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12"], 0x20, 0x2}, 0x6) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TIOCMGET(r7, 0x4004746a, &(0x7f0000000040)) 1.31234433s ago: executing program 4 (id=218): pipe2(&(0x7f0000000000), 0x6) (async) pipe2(&(0x7f0000000000), 0x6) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') symlinkat(&(0x7f0000000200)='./file2\x00', r0, &(0x7f0000000240)='.\x00') writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) kqueue() (async) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x138, 0x0, 0xffffffff, 0x0) (async) kevent(r2, &(0x7f0000000000), 0x138, 0x0, 0xffffffff, 0x0) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') execve(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) (async) execve(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x20, 0x2, 0xd) ioctl$FIONREAD(r3, 0x8218694a, &(0x7f00000001c0)) 1.311902986s ago: executing program 0 (id=219): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r0 = getuid() chown(&(0x7f0000000180)='./file0\x00', r0, 0xffffffffffffffff) r1 = getuid() setreuid(0x0, r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') unveil(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='r\x00') 1.233150361s ago: executing program 3 (id=220): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) sysctl$net_inet_udp(&(0x7f0000000080)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000080)=0x5) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='r\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x2000740e) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x80, 0xa0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = dup(r3) ioctl$BIOCSBLEN(r4, 0xc0044266, &(0x7f0000000100)=0x6) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="9ae03c4d34370838b0bb15901e5290cdf581f1f515a81c69fda8b0a11cbc0609215166dbda4b6e32372e9f0115e9752596ddab3b7e65070720a853053b158e49a42b2f3c77ff881c32281d8a26ae74ecc9e711e4884c546a1c141dd64ccc6ccc06d92a27975732f0e88e48349b18377faa9e6e78ff0e1805457e06634d5fcacd50111e40e24fb04bb4ad6fa1877d4e120b05869b7b928c5d0d67964b224f09ee2732253287f29e76a383bb843f9a30fe2f4db122cb6bdf5a964592b3086035b62b9d673b833e2eab9f65e310295f403d943ac28e6994d640c9f89180ccf42cefaf175cb01138d0559c", 0x0, &(0x7f00000002c0), 0x0) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f0000000000)={0x0, 0x2}) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[]) readv(r3, &(0x7f0000002a00)=[{&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f00000002c0)}, {&(0x7f0000000840)=""/240, 0xf0}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000002940)=""/147, 0x93}], 0x9) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f00000004c0)={0x4, 0x5, 0x8000000000000000, {[0x3, 0x514a243d, 0x100000001, 0xe1, 0xec, 0x4, 0x80000000, 0x2, 0xfffffffffffffff7, 0x0, 0x2, 0x80, 0xc, 0x6, 0x5, 0xfffffffffffffff4, 0xad, 0x29], [0x13c8ba76, 0x1, 0xffffffffffff8001, 0x6, 0x4, 0x7, 0x0, 0x4, 0x40, 0x7fffffff], [0x6, 0x6, 0x85, 0x200, 0x8, 0x1000008, 0x6249b8cc], [0x58, 0xa, 0x2e, 0x5, 0x7, 0x2], [{0x100, 0xfffffffa, 0x1, 0x6}, {0x1, 0x9, 0x7, 0x8}, {0x6, 0xffffff63, 0x7, 0x80}, {0x0, 0x75f80000, 0x0, 0x7}, {0x8000, 0x1, 0x5}, {0x12, 0xfffffd7f, 0x2}, {0x5, 0x10001, 0x6, 0x4}, {0xb, 0x8, 0x8}], {0x0, 0x4, 0x95, 0xfe00000000000000}, {0x500, 0x9, 0xffffffc0, 0x3}}}) pread(r2, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) sysctl$net_inet_gre(&(0x7f0000000100), 0xb, &(0x7f0000000140)="b1904dafec59a7020b8701ab", &(0x7f0000000300)=0xc, &(0x7f00000001c0)="b3ec1747e9b6ccd50c640969ea4e0af98258ff93e2786b628cb8b79c18f4044d5aa55d0d7529853f433c3212359ea5a366376bbfec1ad9d13ee04cac8ba55681f7625ab699e9629749ef05efe45c699ef4958189661c694dd7089ef7ffc5612379a7488c1a061c6a4566680bcf5cef322c11e063a52072023a85d7aaf2cc9bd1fd1fd354261500353f165f9e103899db41c37f436050c1f537ec9542b44bbd91f9e7917ff57d2f751cb69b5e83317316c243c44899fe14398a3ea970989a8277cedacd2b239da45aa6fc18b7f52b558da19fefc86df5946586ad45ffb38099f02084a332073cc8b657", 0xe9) 1.232945309s ago: executing program 4 (id=221): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_extract_tcp_res(&(0x7f0000000100), 0x9, 0x3) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x5, 0x3) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x0}, 0x8) minherit(&(0x7f00006dc000/0x4000)=nil, 0x4000, 0x2) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.232451642s ago: executing program 0 (id=222): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x0, 0x2}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.232064181s ago: executing program 3 (id=223): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) write(r0, &(0x7f0000000180)="742bda523993d84bd9691018ec1e694c45bcefc0366f094e05f22224cd7dc8bb9016b523e4c3b4d0691a099ae4efb67de846da918bce6b89b0eb63a90708acfb", 0x40) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x23, &(0x7f0000000080)}) r2 = syz_open_pts() ioctl$TIOCEXCL(r2, 0x2000740d) 1.194506238s ago: executing program 0 (id=224): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x102) r2 = dup2(r1, r0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) sendto$inet(r2, &(0x7f0000000040)="b9bda36623a0eced4946ae35e7407c0f1ee1f3973af2bbcbec46749bdc5b08638957adad21c44a629415bc7102b3d90264ff177d2eede667cb3b8bd7c5102d85e0bba7d722dac36ab6ed8155628a3aa5edd67ff43091a03133dc17cfed5296b6d8fbdf64db439fad4c5ba52fee75f094641d4264a84552453e1b1e95bae1cf8725383a614d495d3b8e04c689702d03c0ae5376abb9513159572c0afec0c393cb85c06010a4d7c16738025378c19e96ff", 0xb0, 0x8, 0x0, 0x0) 1.194103931s ago: executing program 4 (id=225): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000000140)="00000001", 0x4) r4 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) (async) r5 = socket(0x18, 0x3, 0x3a) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f0000000000)={0x1, 0x1, 0x20, 0x3}, 0xc) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket(0x2, 0x3, 0x0) connect$unix(r6, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0xa) (async) write(r6, 0x0, 0x0) r7 = accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000640)=0x8) sysctl$net_inet6_ip6(&(0x7f0000000480)={0x4, 0x18, 0x29, 0xa}, 0x4, &(0x7f0000000500)="8e297ee776f8365286486cbac4293a6cdaaecd4655e4788e2883948870c81987c37e475f5e457f9167a39738abd532a3fdcb22b45de73dfb4390dafa96ea963d3ddedfcb898ec45f1d8137218805b95e54", &(0x7f0000000580)=0x51, &(0x7f00000005c0)="34ecff535f98399fe11177d4dec652fc0ab735e9a79c94d0f4449e9b72cb7cd5ea164a471ea2dd45af0514d7c06a5114b01eeed9b61a86e1814613020943b6674013fbee8f21d44e837d96213f7333f622f2df8c565146e212d91df0aac8c532522602c32d5def", 0x67) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2) r9 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) (async) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r10, 0x80104277, &(0x7f0000000140)={0x4, &(0x7f0000000280)=[{0xc, 0x9, 0x40, 0x1915}, {0x28, 0xfe, 0x30, 0x1}, {0x81, 0x6, 0xa8, 0xf2b}, {0x6, 0x4, 0x7, 0x801}]}) (async) write(r10, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) poll(&(0x7f0000000280)=[{r0, 0x2}, {r1, 0x2}, {r3, 0x8}, {r4, 0x8}, {r6, 0x1}, {r7, 0x100}, {r8, 0x20}, {r9, 0x48}, {r10, 0x8}, {0xffffffffffffff9c}], 0xa, 0x53) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r11 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r11, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) fsync(r11) recvfrom$unix(r2, &(0x7f0000000300)=""/148, 0x94, 0x2, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x3}, 0x8) (async) close(r11) (async) fchmodat(0xffffffffffffffff, 0x0, 0x50, 0x2) ioctl$PCIOCREAD(r11, 0xc0107002, &(0x7f0000000080)) 1.193361236s ago: executing program 3 (id=226): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x40, 0x1, 0xa00440}, {0x20, 0x85, 0x4, 0xa}, {0x16, 0x3, 0x8d, 0x48a6}]}) openat$diskmap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = semget(0x0, 0x1, 0x289) setuid(0xffffffffffffffff) semctl$GETZCNT(r1, 0x577eaa50d7ba3a98, 0x7, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000340)="71f91e3471ac0058bc8e5f84cf71b59c7afebae093fa21386716c37082000004", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r2 = semget$private(0x0, 0x4, 0x4) semctl$GETALL(r2, 0x0, 0x6, &(0x7f00000000c0)=""/229) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) syz_emit_ethernet(0xf1, &(0x7f00000002c0)=ANY=[]) 1.192301224s ago: executing program 6 (id=227): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x8}], 0x200000000000007f, 0xa) (async) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000002100)=[{&(0x7f0000000180)="968ce1c69d9498126526e1ad5174636898ad874ffb4ff82f905c4f4c", 0x1c}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x2008, 0x412dfc) (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', 0xcd, 0x0}) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="30c47992f29e3a166e6f783bdfe063346223993d29ca6123", 0x18}], 0x1) (async) execve(0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r2 = syz_open_pts() (async) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x4004667b, &(0x7f00000001c0)={0x80000000, 0x200, 0x0, 0x1, 0x37, 0x100, 0x10, 0x10, [{0x3, 0x7, 0x9, 0x4}, {0x7, 0x0, 0xf, 0x1}, {0x8001, 0xffffffff, 0x1, 0x9}, {0x2, 0x2, 0x3, 0x6}, {0x6, 0x2, 0x7ff, 0xa}, {0xfffffffd, 0xce63, 0x9, 0x2d6}, {0xb, 0x6, 0x80009, 0x56d6}, {0x4, 0x100, 0x2, 0x8000017}, {0x1, 0x10, 0x800006, 0x6}, {0x9e, 0x5, 0x40, 0x69}, {0x403, 0xa82, 0x6c2, 0x10000}, {0x38a, 0x7, 0x6c}, {0x20002c13, 0x10, 0x40000008, 0xda}, {0x8eb, 0x200, 0x220, 0xde17}, {0x2, 0xffff, 0x0, 0x5}, {0x200, 0x1, 0x6d2, 0x6}]}) (async) close(r2) syz_open_pts() (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) ioctl$TIOCGETD(r4, 0x4004741a, &(0x7f0000000100)) (async) ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5) (async) ioctl$TIOCCBRK(r2, 0x2000747a) (async) select(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x1, 0x0, 0x8}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff10, 0x9}, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) (async) socket(0x18, 0x2, 0x1) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000001180)={0x3, &(0x7f0000000000)=[{0x84, 0x0, 0xf1, 0x5}, {0x44, 0x7b, 0x14, 0x4a}, {0x1ae, 0x8, 0x6, 0x5}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 58.477189ms ago: executing program 0 (id=228): r0 = socket(0x10, 0x8000, 0x0) recvmmsg(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/139, 0x8b}, {&(0x7f0000000140)=""/160, 0xa0}], 0x3, &(0x7f0000000240)=""/30, 0x1e}, 0x2}, 0x10, 0x40, &(0x7f0000000300)={0x4}) sendto$inet(r0, &(0x7f0000000340)="aedf8b6dbc1759a1bc5549af6da926ed3e3102f6478cca9e2e04a8c24e6f4190d378f23d5a9c35e36a11113562d47cc3de16055214ad08cf8e1574b668d1f9fe82824c9a83fa3662dc287101e25783a8590dad0d95d5fdd70ccc0a75e04217c3a787f6234fce3d8369bab4b68a46481ffc643a3f637d59cca96ca588826dfc59ef033bfc0944f36160a504c8a9d90c452c9a9b0aecc7bdfe16444c40d3d603842c596b97864129f28833b1ea164a651e8c2c4a908887726bca143d438812b9cb6e6c3b16dae2ff75004d49ccb4062ce08a12ef255289745a123abaa87cb789f053b32d200c7076e446045d870ed750f924", 0xf1, 0x403, &(0x7f0000000440)={0x2, 0x1}, 0xc) bind(r0, &(0x7f0000000480)=@un=@file={0x0, './file0\x00'}, 0xa) bind$unix(r0, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x0}, 0x8) unveil(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='x\x00') r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x2000740d) r2 = open$dir(&(0x7f00000005c0)='./file1\x00', 0x80, 0x4) r3 = openat(r2, &(0x7f0000000600)='./file0\x00', 0x8, 0xf9) ioctl$TIOCCDTR(r1, 0x20007478) r4 = fcntl$dupfd(r3, 0xa, r2) close(r4) sysctl$kern(&(0x7f0000000640)={0x1, 0x21}, 0x2, &(0x7f0000000680)="dfcb2a9f5f21e0b132c35995c6674930418750470dec6aec3c08201b5b324306f8a21db6deb37d7de89fe3e1b755b8471e4f536f368377da9f18d92dfe7db46ad54918e3acd19532cedb0eb61a0236af6f885a2573ae948115a3bffe8eaf5e", &(0x7f0000000700)=0x5f, &(0x7f0000000740)="88cf2fa154b1375dbaae4d63c42297fcd436057022d77ed0e6a37708016b50b2a8c8ff07f0bc15fbed7b98db69ef0d139035a504962bea4e63deaebeb68f5cfd8755231141dc98dd84d8084b203c0de4314098b2762ec4410554bbc3cf0838fdce3989afecdaabaf771843472177c8bbca3c56734c4bbbe92833c1b38385440d4e5be1ae5505783b0f0427fc6368ba17639132b1f1687846bd921b6945", 0x9d) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) stat(&(0x7f0000000840)='./file1\x00', &(0x7f0000000880)) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) ioctl$WSDISPLAYIO_USEFONT(r6, 0x80585750, &(0x7f0000000940)={'./file0\x00', 0x1000, 0x8, 0x4, 0x1, 0x5, 0x5, 0x2, 0x1, 0x2, 0x9, 0x40a}) r7 = accept$inet(r0, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg(r7, &(0x7f0000000ec0)={&(0x7f0000000a40)=@un=@file={0x0, './file1\x00'}, 0xa, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="9dadc264126c64b0db62e6fa35c7a3226f17d21a3b26f82e5f51f05ba4ea35085ef17c216e4c942268859f284e42018a31327f7436dd71", 0x37}, {&(0x7f0000000ac0)="292400e265ed782184540d5fc39a64d527d39d43521f159de3d54124383936dc83a61f1a09e803a9c7ec05c0b57f9d2c215af22f676bc8ba3f7dca4d7f7bb6f71ecc938b961070797bc91fac8117235981eac5b1b5a8dfa5ce5893b704f409be3ee0a54664aae2ae85df44a8b756ed5a49ad3306c072797d781e8ad67ba2c605457f4f4bce66b06e06444e6c5d645392c03819bbbc81f58fd8baa851db298cdb4cf4c8192137ae331b5b96d9c2ea0d9a618885e5ce39fc407436463468805ddac60928cd7a907ac90712cb3e", 0xcc}], 0x2, &(0x7f0000000c00)=[{0x10, 0xffff}, {0x98, 0x1, 0x0, "130ff4a29f2482a864540aa500f483be37b2a04f0a94a1eca9c97208d0fc06b4cc0d4090398f3fecbcd465404e2320da5b5e9d143adbe5a7eb0933f9a0d5f8ff516d29f6961d9e4f25f4cd00393dcd40bb1b078581de13b7fa1950ea24a2c24d44419246198671cfd9c8d4d49fc838fb6570106e19bb99b7d703dec1b0d5cfafaf06b70964"}, {0xd0, 0x0, 0xd37e, "7ded2acffda80073f3ad60a794681c2ef3342d01fd629824d683745b4af78b5ad28eacd16efe65cfef97058428b15f794f9d5fd52e2f3998ecbec3c762cdfa52dc4a6e7d4845d7e4a460f2229ab26c8e323de7f35f2b840ff6d6694017806f51144478b679b0f6de8443e68587074b91f5b0456ee204ca6323defdf6b2c036d5e95e1cef31caef40c45556b60ff7aa479894ff53840c1d3be2e29d1cb3140155c79054b8609746fbffc94a33e1c7aa963ac1fc40f7134fb90e5b86d02ec6"}, {0x40, 0xffff, 0xed4, "99712bf1236576feff82048f3bb870c3ca118f45cbc37898fba8ac4be755a1c8ec39deca5e888f9e0f"}, {0x108, 0x1, 0x4, "0226cda64778b7fbc8cabc1a0160ca33953dc227b517d4bd5d7f1120cfba99c3cf87f7ae73abcb4ae213dbcea241eed68e9ccb4b0976f11b7f7df34818f04ada660759f46cb769e5342ea2aafda36da832a5348bcf4ec2f1fc2ed1ffa99f55a172df08b0b5067e36a727d5fc1be890634ed602824bbd04e60e5b3217031f9e42c3cc868588001734e0f3f0fe2af2becbe16e841c7a77860a8dd94d5eb6df3bf4c6e444d909359ab8749e98bca8a644818f91cf919866839ff8afd517cf2de28595af2390b7ddf35eeeeaed61980ce33dbb9730bd90119c2e80c42321d5e8d024cb402efa18eaa94b76970cb47778971ed0d505"}], 0x2c0}, 0x1) sendmmsg(r6, &(0x7f00000013c0)={&(0x7f0000001380)={&(0x7f0000000f00)=@in6={0x18, 0x0, 0x7, 0x2}, 0xc, &(0x7f0000001100)=[{&(0x7f0000000f40)="c903fae8421be63b1abfa03b6c11ee0e48a4b3e31cfedb5515a07e204285931fb6b2a3079ea65fe6fcb686e4c04df5fa412dc918c8a05192706cfc6a4348fb6b72ac5c55162fc167b0935e5acdf6c264f0dc31a63e0771cf661336b1b369165a7eab4a5766df1bbe2064ae54babb69b5fef2379b2bd1febc126ae55bb73051ccccb2b3c68cc0b91dbeb8f39ac2bc5dee313a3f815191a783f9222ccc68611fc86b7401fcc026b4d2a3d5484711177a7d7cf3bc9d56342e178a6069ff99e2bec112c9eb574bcc1a13a5", 0xc9}, {&(0x7f0000001040)="c1db8b6e44197ad8e4df7b6c64d52e4e9cf7c686587aa9d12a8c98739766590a191dfe79115580aca36af22db6a095a46d584b6958efc5e8bf9ef16bb60525221e0cbccef61a2d935a6d0c0aa191bda0bd71a029c7b8687ef4ab44a7188e3979c8eed07a75587b8f407c71bd6e8c54958bd7e7933dd9057385bca2775f16b374213e11c5278dadbc204ac4ff29d749762f8a54427610acec4001d7f9c61486e17cfe4b2a364c4d8b453c6db889", 0xad}], 0x2, &(0x7f0000001140)=[{0xf8, 0xffff, 0x2, "0637061507d69dc59d647f6f77b0563335f35f524987415db3b98cc030e4ded6f203868ca9d8324b9f09469d678fea8d24758bd42621054bf826d5af94f6dc3b99f7fb9d10e86916cec2b2b211f3de1616ae8898c270c333cc6864bba3d05913d9a660b03dde64e9556b641f14224f16ac1c294328fec08eb815ad4f2924ad8f2900a15146587398cb473557ba88d1ccfc59889b749536be4c8c81f218f015647e394d389ba9a74a09e738357b2fe016137b1aac6a47bf3046005bb1ee1a1ed7d7f75056d20299913c217bd2556adc6e5fd99a344a5b4a13cd08dac92275f0d70686dfbeca13"}, {0x68, 0xffff, 0x0, "ed9a4434c966101d02dcd953eb31a4226a6e10512f723acf7d14725fd3c83898a872127119e5c008d72bcbccc785f59ca3f2b1a455381f18a969f2d722e648c26a9ac25b8b9b62fa88f1e8bef5caa9e296ef837adbc1"}, {0x20, 0xffff, 0x0, "65836ba099679a8e6565"}, {0xb0, 0x1, 0x4cc8, "9ffb2421ebbb5da082dc0a47c6081ed7d92111e376ca7ebfff8c6f10d7093692a00cc67be2bd408b01ba46f255568d5aff4312d39ee610ff7ee82157124abbd09a6df0d5f5e0ea9d2267ea469e11903fb2de4d5a6dae871381057560dc2ebf12b0319bbe89c905adf0ec776ff2dca57a6a983d297a60cb909f5a6c7956cf9cfef5f6b5cf5de41027707b6ad027284660554ea8e8742fc36e7bd3"}], 0x230}, 0x3}, 0x10, 0x400) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001400)=""/90, 0x5a, 0x0, &(0x7f0000001480)={0x2, 0x0}, 0xc) r8 = open(&(0x7f00000014c0)='./file0\x00', 0x10000, 0x100) flock(r8, 0x4) ioctl$WSDISPLAYIO_SBURNER(r5, 0x800c5751, &(0x7f0000001500)={0x5, 0x8, 0x1}) r9 = socket(0x6, 0x1, 0x3) dup2(r9, r8) ioctl$WSDISPLAYIO_DELSCREEN(r8, 0x80085754, &(0x7f0000001540)={0xf265}) pipe(&(0x7f0000001580)={0xffffffffffffffff}) mknodat(r10, &(0x7f00000015c0)='./file0\x00', 0x8, 0x8001) 46.233726ms ago: executing program 3 (id=229): r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0xc1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x10b) pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) symlinkat(0x0, r1, &(0x7f00000000c0)='./bus\x00') syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$TIOCGTSTAMP(r2, 0x4010745b, 0x0) socket(0x2, 0x2, 0x0) r3 = dup(r0) ioctl$KDSETLED(r3, 0x20004b42, &(0x7f0000000080)) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, 0x1) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 45.442244ms ago: executing program 6 (id=230): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000040)) ioctl$TIOCSCTTY(r0, 0x20007461) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f00000000c0)={0x8, 0x2, 0xfffffffb, 0x7}) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000100)=0x7) ioctl$KDENABIO(0xffffffffffffffff, 0x20004b3c) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000140)) ioctl$WSKBDIO_GETKEYREPEAT(r1, 0x400c5708, &(0x7f0000000180)) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$TIOCSTART(r0, 0x2000746e) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000280)=':[*!}&:\x00', &(0x7f00000002c0)='tap', &(0x7f0000000300)='/dev/wskbd0\x00', &(0x7f0000000340)='/dev/wskbd0\x00', &(0x7f0000000380)=']/\x00', &(0x7f00000003c0)='/dev/ttyCcfg\x00', &(0x7f0000000400)='%\')\xa8*J-)\x00', &(0x7f0000000440)='/dev/ttyCcfg\x00', &(0x7f0000000480)='%&^\x00', &(0x7f00000004c0)='-:\x00'], &(0x7f0000000740)=[&(0x7f0000000580)='\'+\x00', 0xffffffffffffffff, &(0x7f00000005c0)='\\,\x00', &(0x7f0000000600)='tap', &(0x7f0000000640)=')#$\\(\x00', &(0x7f0000000680)='$}]%\\%(*,//#/\x00', &(0x7f00000006c0)='tap', &(0x7f0000000700)=':\'@/-,:\x00']) r2 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x100) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000800), 0xc08, 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000840)={0x70, 0x4, 0x3ff, 0x8, "84649bc61a7d27d8e7556a38d8db2b52deea1d4d", 0x8001, 0x1}) r4 = dup2(r3, r2) r5 = dup(0xffffffffffffffff) ioctl$WSKBDIO_SETDEFAULTBELL(r5, 0x80105705, &(0x7f0000000880)={0x1, 0x9, 0x8, 0x5}) openat$vnd(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r6 = socket(0x6, 0x2, 0x9a) setsockopt(r6, 0x3, 0x0, &(0x7f0000000900)="95a7c9c9740270b463863d52dd8af8c60a", 0x11) ioctl$TIOCMSET(r4, 0x8004746d, &(0x7f0000000940)=0x7a49) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r1, 0x7680000000000) read(r3, &(0x7f0000000980)=""/139, 0x8b) openat$vnd(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) ioctl$TIOCSTAT(r4, 0x20007465, &(0x7f0000000a80)) r7 = syz_open_pts() ioctl$TIOCSCTTY(r7, 0x20007461) 40.531724ms ago: executing program 5 (id=231): pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="1d", 0x1}], 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x5, 0x8, 0xdf, 0x3}, {0x1, 0x3a, 0x3, 0x3}, {0x0, 0xa, 0x1, 0x400}]}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r2, 0x802069c1, &(0x7f00000001c0)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) accept$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write(r1, &(0x7f0000000480)="5f1bd5d3881b11fd4c9f4a7bd60d6f89a5526727943d0763dcce94a230f13f37b278d6e3346e606e041cdfc03c3909f9a676138631feb4e0d89bac346cbd037ab9b14342521939fa0edc95f3965cf0ad7d9b45fa1bac78247b35d921298c21ea5dd57d22d1a50edd6feac6e112f60ab31dade8b88e2cb7bcad92189f16356eb16625b8feaeea16400654676bc77bf44d01b46cfa57617e18022145392e77f1da333ed86a8217738eb42cc3f8bc9254859b875bcf58026545abe06228f3a4c970d490e777da6533565bb7dcddb5d8aa7ab24bc8df60fd1e5174ab6d465552c4909e1f673b603487b061a5302d661ad8c0c752041a1d859d2fc11549fb2b15b0f8448d9fcacada23b6bc1aa02914f5e9f762aa083ec7337cd35ec809506cb981afc18c390bd4099ca871cd0b0ef6b660e04189a3b08ccb37c6c92a34eee1dab00b807ce7e0048ec73a5b3dd84d969cec688202cc12d822a33881f2ae7293ea181557ff1370d5937c0d7b9592710a94563319efef0870164c190a4da6da0c2e9880d7ec85f67b96f199876e4c01dfbdba555a869954ae730d735a28b9e5fb7c9dec8228e2d9f81ab660e7e8ae", 0x1ab) execve(0x0, 0x0, 0x0) listen(r0, 0x63a) 38.584866ms ago: executing program 7 (id=232): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x9, 0x20, 0x2}, {0xb1, 0x0, 0x1, 0x100}, {0x6, 0xa, 0x83, 0x2}]}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="73e0ae5b6c0d1539abbdb5009975262ff7a164cf5f0000000000000004d8c9da6e07be8fc162cf4fc2b9528fe2a0ea634b15ad504217fc4b2bdad87ee5f5859332b196de1ed6ccdc7d6fb55acddcba07f0d23c0df371daf6c65bab8bbcf0e46eacb4dde17d9b3c71b0b23bf122ae585f7d74f85a93a0e22c488996c67af80158c3126be6b0aeda", &(0x7f0000000080)=0x87, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x2a, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r1, &(0x7f0000000480)='\x00'/14, 0xe) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) r2 = socket$inet(0x2, 0x3, 0x102) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000980)=[{0x10, 0xffff, 0x5}], 0x10}, 0x0) getsockname(r2, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0xc) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xb1, 0x10, 0xe4, 0x10000f}, {0x20, 0xd, 0x2, 0x4}, {0x6, 0xa, 0x83, 0x880}]}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="dd5bd70bbb4bb98f4e0d1ddcdceff73b683b86b9aef2fc5a07627f0bda05c2b1c9b6edeb68215811fc38cbc2a74590ac13c154810ae485f6fbff69336da1996971e5e9262bcc3b22e9f038a3ade65ee54bb6f74405000000a35c2503a22fda471b51ff8adb66ff68b1e14b0e", 0x6c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="b119770066ec31a7de3026399b82675d066a7ddbc9de2ee05d4c372eeb", &(0x7f0000000080)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@random="d176b279747b", @random="be18f0edadcd", [], {@generic={0x8048}}}) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000140)=0x1) 30.287997ms ago: executing program 1 (id=233): r0 = kqueue() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000000), 0x23) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) kevent(r0, &(0x7f0000000600)=[{{r1}, 0xfffffffffffffffe, 0x2c5d36d679bbffaf, 0x1, 0xffffff7fffffffff, 0x20000000008}, {{r1}, 0xfffffffffffffffe, 0x5a, 0xffffb, 0x800000000005a, 0x6}], 0x5, 0x0, 0x1ff, 0x0) 0s ago: executing program 0 (id=234): sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="bb", 0x1, 0x403, &(0x7f00000000c0)={0x2, 0x0}, 0xc) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="bb", 0x1, 0x403, &(0x7f00000000c0)={0x2, 0x0}, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x40, 0x66, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x2, 0x0, 0xfffd, {[@sack={0x5, 0x2}, @mss={0x2, 0x4, 0x4}, @md5sig={0x13, 0x12, "ffea5bd5142bbc312f403c79cd8764ea"}]}}}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806386aba0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at sys_semop+0x45b: movzwl 0(%rax),%r15d ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace sys_semop(ffff80002fbdf218,ffff80003b015580,ffff80003b0154d0) at sys_semop+0x45b syscall(ffff80003b015580) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9ce901b2d50, count: -3 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80003b0154a0 rbx 0 rdx 0 rcx 0xffff80002fbdf218 rax 0xdeadbeefdeadbf1f r8 0x7f7fffffc000 r9 0 r10 0x7b8615e80ba84e57 r11 0x3cdb94741e7fc881 r12 0xffff800001501604 r13 0 r14 0xffff80003b015580 r15 0 rip 0xffffffff810a7d4b sys_semop+0x45b cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003b015380 ss 0x10 sys_semop+0x45b: movzwl 0(%rax),%r15d ddb{0}> show proc PROC (syz-executor) tid=180758 pid=5225 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002fbdef88,0xffff80002a296550 process=0xffff80002fbe04f8 user=0xffff80003b010000, vmspace=0xfffffd8071b68978 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 5225 456017 75838 0 2 0 syz-executor * 5225 180758 75838 0 7 0x4000000 syz-executor 5225 302157 75838 0 3 0x4000080 fsleep syz-executor 5225 499935 75838 0 3 0x4000080 fsleep syz-executor 32657 453042 7795 0 7 0 syz-executor 32657 115825 7795 0 3 0x4000080 pipewr syz-executor 32657 478064 7795 0 3 0x4000080 pipewr syz-executor 61188 271787 85170 0 2 0 syz-executor 61188 110562 85170 0 3 0x4000080 fsleep syz-executor 56482 471385 72528 0 2 0 syz-executor 56482 368451 72528 0 3 0x4000080 fsleep syz-executor 10839 433023 90108 0 3 0 vmmaplk syz-executor 10839 135787 90108 0 2 0x4000000 syz-executor 10839 77833 90108 0 3 0x4000000 vmmaplk syz-executor 33628 121829 65350 0 3 0x3000 suspend syz-executor 33628 223425 65350 0 2 0x4081000 syz-executor 33628 293372 65350 0 3 0x4081000 inode syz-executor 64013 129374 0 0 3 0x14200 acct acct 85250 133303 0 0 3 0x14200 bored sosplice 85170 124328 47064 0 3 0x82 nanoslp syz-executor 72528 347265 47064 0 2 0xc82 syz-executor 7795 360454 47064 0 3 0x82 nanoslp syz-executor 65350 347464 47064 0 2 0x2 syz-executor 90108 213483 47064 0 2 0x2 syz-executor 36424 34798 47064 0 3 0x82 wait syz-executor 75838 278281 47064 0 3 0x82 nanoslp syz-executor 84758 189759 47064 0 2 0x2 syz-executor 47064 330551 19993 0 3 0x82 kqread syz-executor 19993 448585 56453 0 3 0x10008a sigsusp ksh 56453 322352 97540 0 3 0x98 kqread sshd-session 97540 201664 82177 0 3 0x92 kqread sshd-session 28701 354098 1 0 3 0x100083 ttyopn getty 82177 430709 1 0 3 0x88 kqread sshd 24915 471270 41201 74 3 0x1100092 bpf pflogd 41201 358654 1 0 3 0x80 sbwait pflogd 64693 256350 58861 73 3 0x1100090 kqread syslogd 58861 211669 1 0 3 0x100082 sbwait syslogd 66103 294040 1 0 3 0x100080 kqread resolvd 96464 379039 89672 77 3 0x100092 kqread dhcpleased 67848 272274 89672 77 3 0x100092 kqread dhcpleased 89672 180173 1 0 3 0x80 kqread dhcpleased 80823 524137 0 0 3 0x14200 bored smr 58664 491122 0 0 3 0x14200 pgzero zerothread 78529 343493 0 0 3 0x14200 aiodoned aiodoned 34861 103619 0 0 3 0x14200 syncer update 73817 451763 0 0 3 0x14200 cleaner cleaner 95783 517033 0 0 3 0x14200 reaper reaper 33966 322872 0 0 3 0x14200 pgdaemon pagedaemon 51298 325323 0 0 3 0x14200 bored viomb 82793 117849 0 0 3 0x40014200 acpi0 acpi0 54492 130722 0 0 3 0x40014200 idle1 27106 203901 0 0 3 0x14200 bored softnet3 103 513368 0 0 3 0x14200 bored softnet2 91838 221616 0 0 3 0x14200 bored softnet1 24702 471433 0 0 3 0x14200 bored softnet0 56076 145147 0 0 3 0x14200 bored systqmp 50144 178738 0 0 3 0x14200 bored systq 86838 200991 0 0 3 0x14200 tmoslp softclockmp 18354 373337 0 0 2 0x40014200 softclock 42810 442265 0 0 3 0x40014200 idle0 1 450948 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 5225 (syz-executor) thread 0xffff80002fbdf218 (180758) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83991ea0) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 malloc+0xe5 #3 sys_semop+0x234 #4 syscall+0xb08 #5 Xsyscall+0x128 Process 10839 (syz-executor) thread 0xffff80002a2962b0 (135787) exclusive rwlock kmmaplk r = 0 (0xffff800000025300) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x81 #4 km_free+0x87 #5 vunmapbuf+0xc7 #6 physio+0x3f9 #7 spec_read+0x155 #8 VOP_READ+0x102 #9 vn_read+0x17b #10 dofilereadv+0x230 #11 sys_pread+0xae #12 syscall+0xbc6 #13 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd8071b686b8) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x36e #2 uvm_vslock_device+0x149 #3 physio+0x277 #4 spec_read+0x155 #5 VOP_READ+0x102 #6 vn_read+0x17b #7 dofilereadv+0x230 #8 sys_pread+0xae #9 syscall+0xbc6 #10 Xsyscall+0x128 Process 33628 (syz-executor) thread 0xffff80002a296f80 (223425) exclusive rrwlock inode r = 0 (0xfffffd806e34b2f0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vn_write+0x190 #6 dofilewritev+0x23c #7 sys_write+0xa2 #8 syscall+0xbc6 #9 Xsyscall+0x128 Process 84758 (syz-executor) thread 0xffff80002a2ba2a8 (189759) exclusive rrwlock inode r = 0 (0xfffffd806bf510a0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d027670) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10221 11232K 11306K 166960K 11744 0 pcb 18 14K 16K 166960K 68 0 rtable 230 9K 9K 166960K 393 0 pf 35 17K 21K 166960K 65 0 ifaddr 42 7K 7K 166960K 54 0 ifgroup 55 2K 2K 166960K 72 0 sysctl 3 1K 9K 166960K 11 0 counters 68 36K 37K 166960K 92 0 ioctlops 0 0K 4K 166960K 1526 0 iov 0 0K 16K 166960K 17 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1429 90K 90K 166960K 1667 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 17 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 364 0 sigio 0 0K 0K 166960K 72 0 proc 73 103K 140K 166960K 558 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 42 0 in_multi 98 7K 7K 166960K 106 0 ether_multi 1 0K 0K 166960K 3 0 mrt 2 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 409 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 250 168K 182K 166960K 5056 0 UVM aobj 12 2K 2K 166960K 15 0 pinsyscall 42 84K 108K 166960K 1472 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 5 0 NDP 12 0K 2K 166960K 34 0 temp 43 8676K 8742K 166960K 13563 0 kqueue 13 20K 28K 166960K 62 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 47 0 44 1 0 1 1 0 8 0 rtentry 176 114 0 16 6 0 6 6 0 8 0 unpcb 144 243 0 224 4 0 4 4 0 8 2 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 65 0 61 1 0 1 1 0 8 0 arp 128 18 0 0 1 0 1 1 0 8 0 inpcb 328 411 0 400 11 9 2 10 0 8 0 nd6 144 25 0 0 1 0 1 1 0 8 0 pkpcb 40 4 0 4 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 10 0 10 2 1 1 1 0 8 1 pffrag 232 2 0 1 2 1 1 1 0 482 0 pffrnode 88 2 0 1 2 1 1 1 0 8 0 pffrent 40 3 0 2 2 1 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 0 0 1 0 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 37 0 1 1 0 1 1 0 8 0 pfstkey 128 37 0 1 2 0 2 2 0 8 0 pfstate 384 37 0 1 4 0 4 4 0 8 0 pfrule 1344 25 0 18 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 520 0 78 30 2 28 29 0 8 0 art_table 32 521 0 78 4 0 4 4 0 8 0 art_node 16 113 0 25 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semapl 112 12 0 3 1 0 1 1 0 8 0 shmpl 112 12 0 3 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 1994 0 486 95 0 95 95 0 8 0 ffsino 288 1994 0 486 109 0 109 109 0 8 0 nchpl 144 2530 0 842 63 0 63 63 0 8 0 rtmask 32 5 0 5 2 1 1 1 0 8 1 uvmvnodes 80 2308 0 0 48 0 48 48 0 8 0 vnodes 216 2308 0 0 129 0 129 129 0 8 0 namei 1024 8254 0 8253 2 1 1 2 0 8 0 percpumem 16 61 0 12 1 0 1 1 0 8 0 kstatmem 264 38 0 12 3 1 2 3 0 8 0 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 9807 0 9807 10 9 1 8 1 8 1 plimitpl 152 43 0 24 1 0 1 1 0 8 0 sigapl 424 673 0 622 7 1 6 7 0 8 0 knotepl 120 319 0 0 10 0 10 10 0 8 0 kqueuepl 224 160 0 150 5 2 3 3 0 8 2 pipepl 336 135 0 106 3 0 3 3 0 8 0 fdescpl 520 653 0 622 3 0 3 3 0 8 0 filepl 160 3415 0 3185 19 6 13 16 0 8 3 lockfpl 104 102 0 99 1 0 1 1 0 8 0 lockfspl 48 51 0 48 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 36 0 19 1 0 1 1 0 8 0 ucredpl 104 273 0 260 1 0 1 1 0 8 0 zombiepl 144 642 0 640 1 0 1 1 0 8 0 processpl 1240 673 0 622 5 0 5 5 0 8 0 procpl 656 1068 0 1006 6 0 6 6 0 8 0 sosppl 168 3 0 3 1 1 0 1 0 8 0 sockpl 728 707 0 674 18 9 9 12 0 8 6 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mtagpl 96 9 0 0 1 0 1 1 0 8 0 mbufpl 256 142 0 0 9 0 9 9 0 8 0 bufpl 280 4067 0 137 281 0 281 281 0 8 0 anonpl 32 8805 0 0 71 0 71 71 0 246 0 amapchunkpl 152 15743 0 15167 36 5 31 31 0 158 7 amappl16 200 2461 0 2360 20 14 6 19 0 8 0 amappl15 192 7 0 6 1 0 1 1 0 8 0 amappl14 184 113 0 101 1 0 1 1 0 8 0 amappl13 176 8 0 8 1 1 0 1 0 8 0 amappl12 168 1307 0 1276 3 1 2 2 0 8 0 amappl11 160 47 0 33 1 0 1 1 0 8 0 amappl10 152 34 0 34 1 1 0 1 0 8 0 amappl9 144 240 0 240 1 1 0 1 0 8 0 amappl8 136 33 0 30 1 0 1 1 0 8 0 amappl7 128 135 0 123 1 0 1 1 0 8 0 amappl6 120 174 0 171 1 0 1 1 0 8 0 amappl5 112 144 0 133 1 0 1 1 0 8 0 amappl4 104 322 0 301 1 0 1 1 0 8 0 amappl3 96 2869 0 2756 5 1 4 4 0 8 0 amappl2 88 650 0 588 2 0 2 2 0 8 0 amappl1 80 9176 0 8568 15 2 13 15 0 8 0 amappl 88 4329 0 4153 6 1 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 14 0 3 1 0 1 1 0 8 0 uaddrrnd 24 653 0 622 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 653 0 622 1 0 1 1 0 8 0 vmmpekpl 168 6909 0 6864 3 0 3 3 0 8 0 vmmpepl 168 48075 0 45995 103 10 93 103 0 357 0 vmsppl 480 652 0 622 5 1 4 5 0 8 0 rwobjpl 72 17766 0 14425 61 0 61 61 0 8 0 pdppl 4096 1313 0 1244 109 38 71 85 0 8 2 pvpl 32 16163 0 0 131 0 131 131 0 265 0 pmappl 256 652 0 622 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 391 0 45 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace sys_semop(ffff80002fbdf218,ffff80003b015580,ffff80003b0154d0) at sys_semop+0x45b syscall(ffff80003b015580) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9ce901b2d50, count: -3 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x724fbe7afd70, count: -3