last executing test programs: 12.738190642s ago: executing program 4 (id=1353): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x400c745c, &(0x7f00000000c0)) setitimer(0x0, &(0x7f0000000000)={{0x9, 0x7}, {0x7ff, 0x92}}, 0x0) 12.70325385s ago: executing program 4 (id=1356): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000002c0), 0x136, 0x0, 0xffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="ed", 0x1) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) recvmmsg(r4, &(0x7f00000009c0)={0x0, 0x8800}, 0x5c, 0x1040, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, &(0x7f0000000080), 0x0) unveil(0x0, &(0x7f0000000780)='x\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff4c7cd07bebfb0c0045fc00300068000000019078ac1400bbe00000010c009078000000004500fffc0068000000020000e0000001e0000001"]) 10.974106285s ago: executing program 4 (id=1445): syz_emit_ethernet(0x8a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5fbb8af09d7c86dd6600ed0000543308fe8000000000000000000000000000aa00000000ff00000000000000000000000601000000000000c204000000000101000000000000000064040000000000000502ffc0010005020005c20400000034f5b5f296ed3e6b0000000100f602f3514e22fc6e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080000490780004"]) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7ed841f1e000, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5fbb8af09d7c86dd6600ed0000543308fe8000000000000000000000000000aa00000000ff00000000000000000000000601000000000000c204000000000101000000000000000064040000000000000502ffc0010005020005c20400000034f5b5f296ed3e6b0000000100f602f3514e22fc6e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080000490780004"]) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7ed841f1e000, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 10.961273308s ago: executing program 4 (id=1448): sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa6585f5121e188e238a435bf223e0ccaa74d6e6b85b6cfeed70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde8652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce90bcefd3e022d30a37fceefabee7e3ebe806f6af569ae94", 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000003c0)) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x14, 0x0) utimensat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x6, 0x400}, {0xab, 0xd}}, 0x2) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000580)=0x6) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x890, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f0000000300)) ioctl$BIOCGFILDROP(r3, 0x40044278, &(0x7f0000000600)) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x0, 0x7f, 0x40000007}, {0x7e, 0xc, 0xd5, 0x20004006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="441e3849aa3d88cc0adaae0d355cf9ffffff3901bed11fcceee194f9830f0ff83af43300", 0x24}], 0x1) sysctl$hw(0x0, 0x3fffff7d, &(0x7f0000000100)="50041b0200c29e3e80a5992ff7624d0700808d07576432352f8ccfe7260a18c4453f55d0c2e913de26c1f2292ed85afc7ed46327714bde7a8634d78da58ecc5e79adadca17db4701009f", &(0x7f0000000000)=0x24, 0x0, 0x3b) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, &(0x7f0000000100)="c684d769", &(0x7f0000000180)=0x4, &(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_etherip(&(0x7f0000000040)={0x4, 0x2, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000000000000ffff003dc39db97188000000000000ffff00000200000010000000000000000100000001000000"], 0x30}, 0x40a) socket$unix(0x1, 0x5, 0x0) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r6, 0x80045710, &(0x7f00000002c0)=0x1000) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 10.855312493s ago: executing program 4 (id=1450): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000300)="79be6381", 0x4}, {0x0}], 0x2) (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000080)="01000000", 0x4) (async, rerun: 64) execve(0x0, 0x0, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x54e}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0xbffffffd, 0xb, 0x7, 0xa, "00000000000000000000060000000600", 0x3, 0xfffebffc}) (async) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x10, 0x0) read(r2, &(0x7f0000000200)=""/174, 0xae) (async) pread(r2, &(0x7f0000000300)="ceb3706d7f7824c3b72b0280ac66e6c3fde2f8224c0174f0d96709d2870f8bf64a062c90b127289378c1ea4b7e7fc7b2730e097adf4cd7f03a6c1373dac55e55f73122a7c483b428d0b41fd6705a04f7a648", 0x52, 0x38) (async, rerun: 32) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) (rerun: 32) 5.814198632s ago: executing program 4 (id=1677): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x10, 0x4) setgid(0xffffffffffffffff) (async) setgid(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x8}], 0x1, 0x0) setrlimit(0x0, &(0x7f0000000980)={0xb, 0x4f}) (async) setrlimit(0x0, &(0x7f0000000980)={0xb, 0x4f}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCNOTTY(r0, 0x20007471) (async) ioctl$TIOCNOTTY(r0, 0x20007471) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x401, 0x7f, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000008, 0x2}) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x401, 0x7f, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000008, 0x2}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 4.262658091s ago: executing program 5 (id=1745): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() setrlimit(0x0, &(0x7f0000000200)={0x1, 0x7}) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0xf672, 0xffff, 0x3, 0xffffbb80, "1b1837b3127d35044487576a00002f9e68cd3304", 0xb, 0x40007}) r1 = socket$unix(0x1, 0x1, 0x0) getpgid(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xc) r4 = accept(0xffffffffffffffff, &(0x7f0000000480)=@in6, &(0x7f0000000500)=0xc) r5 = getpgid(0xffffffffffffffff) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000540), 0xc) r6 = getegid() r7 = getppid() sendmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000340)="301c44732a4edf9e15a90dbc9a2360b95a6d1b6d70220bd93966fa8e083672dd8c38f4d116119791d24e71cc9c420205aa0790dbe0fa887479ee3495c0a6475a6c6e0454a6f5809d62a5a4f6af2767f39623c2b84452", 0x56}], 0x1, &(0x7f0000000580)=[@rights={0x18, 0xffff, 0x1, [r0]}, @cred={0x20, 0xffff, 0x0, r7, r2, r3}, @rights={0x18, 0xffff, 0x1, [r4, r0]}, @rights={0x10}, @cred={0x20, 0xffff, 0x0, r5, 0x0, r6}, @rights={0x10}, @rights={0x18, 0xffff, 0x1, [r4]}], 0xa8, 0x2}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x19b}], 0x1) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r9 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r9, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f000014d000/0x2000)=nil, 0x2000, 0x1, 0x2012, r8, 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) chroot(&(0x7f0000000240)='./file1\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r11, &(0x7f00000001c0)=[{&(0x7f0000000740)="27e365d64afa14082f2f54c769bd841da68c06c4867f8066ef19164727c0606ca3f8ade2ac6bccc6e7107871b14324a7209c20989979c01aa0cd277efb994237d4789cb1da50757eea2c6c07d796916d4ffb72983cb830fb39bf1dac820ad09f8d6c7b0415ff031f7ca47380a12cc6821e31f5d43dbdda8491ff12bfed10b68afcc2d0b3abe7ab15daa50259d4a1d7c333c88b89de07b2820297d5722acdf752c47d9ae28e5632129f26cb6175ed5eff", 0xb0}], 0x1) write(r10, &(0x7f0000000080)="c30516845e", 0xff55) close(r11) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 2.414222579s ago: executing program 5 (id=1822): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f00000000c0)) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x3ff, 0x6, 0x0, 0x4, "da98bf38eaa477162f6c1cb7f321a842e2daa0a9", 0x400, 0x10}) fchflags(r1, 0x10000) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x1000000}) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chown(0x0, 0x0, 0xffffffffffffffff) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r6 = dup2(r4, r4) dup2(r3, r6) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) semget$private(0x0, 0x4, 0x504) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x10, 0x4) setgid(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x8}], 0x1, 0x0) setrlimit(0x3, &(0x7f0000000980)={0xb, 0x54}) r8 = syz_open_pts() close(r8) syz_open_pts() ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f00000000c0)={0x401, 0x7f, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000008, 0x2}) writev(r7, &(0x7f0000000200), 0x0) ioctl$TIOCSETA(r2, 0xcd504407, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x4, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x28, 0x4042}) 2.384516037s ago: executing program 5 (id=1827): sysctl$hw(&(0x7f0000000080)={0x6, 0xe}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) 2.338577198s ago: executing program 5 (id=1832): socket$unix(0x1, 0x5, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x4}) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$KDENABIO(r1, 0x20004b3c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9e, 0x411}, 0x4, 0x800100000001, 0x0, 0x0, 0x0, 0x4000000000, 0x40000000001, 0x4}) r3 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r4 = socket(0x800000018, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x100000000}) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) writev(r5, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) close(r6) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r0, 0x7, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) 1.204516583s ago: executing program 7 (id=1878): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x18, 0x6, 0x9}, 0x4, &(0x7f0000000300)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) (async) write(r1, &(0x7f00000004c0)="b96a", 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0x8018, 0x2000007, 0x101, 0xf9, 0x81b0, 0x10201, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0xa, 0x9, 0x6, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x4}, {0x4, 0x800, 0x8003, 0x87}, {0x8, 0x3, 0x2800, 0x7}, {0xc, 0x650, 0x3, 0x199}, {0xce0, 0x4, 0x1, 0x6d}, {0x3, 0x803, 0x14, 0x800008}, {0x2, 0x80000000, 0x5, 0x5}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1cc, 0x10001}, {0x8, 0x9, 0x610, 0x2}, {0xb94, 0x7, 0x2, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x7}, {0x9, 0x5, 0x5}, {0x0, 0x1, 0xf, 0x10000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r2, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket(0x18, 0x3, 0x0) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000040)={0xffffffffffff0001, 0x1b3}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) 1.16989958s ago: executing program 7 (id=1881): sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="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", 0x21f, 0x408, 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sysctl$net_inet_etherip(&(0x7f0000000140)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000001d00)='\x00\x00\x00\x00', 0x4) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="b1b901046a0000b7000000000041", 0xe, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x8000, 0x0) (async) r1 = open(&(0x7f0000000480)='./file0\x00', 0x2, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r3 = socket(0x18, 0x3, 0x0) close(r3) (async) socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x4, &(0x7f00000004c0)="0300000071d3fe337a29a45ec4f1b3350ec8c658d1b2752b86fa9ec9e6411e2ed72f1f31de213fdf751da465f9b495f1d059cdbeb5ca3979a35ca16db9226c864b5cfac0543ea7c4ab89f2fffd2e8c79ea1fb668a7b6fe0516c5ebbc51a0a4218a1818f7d68cba8cc4b12841b3ef4be4b706154a918e78b1e2e51956f7f24c3851a7b6332542c7c8", 0xfffffffffffffeb1) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r4 = socket(0x2, 0x4001, 0x0) r5 = fcntl$dupfd(r4, 0x2, r2) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r6, 0xc00c7007, &(0x7f00000003c0)) (async) close(r2) (async) r7 = socket(0x2, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000), 0x10) (async) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000080), 0x4) (async) ioctl$TIOCCDTR(r1, 0x20007478) (async) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f00000000c0)={0x2, './file0\x00', './file0\x00'}) (async) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000340)='./file0\x00', 0xb4c47592f83603be, 0x1b1) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000400)) 1.145910097s ago: executing program 7 (id=1884): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4) setsockopt(r0, 0x0, 0x6e, 0x0, 0x0) (async) setsockopt(r0, 0x0, 0x6e, 0x0, 0x0) 1.044387866s ago: executing program 7 (id=1889): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[{{}, 0xfffffffffffffff9, 0x35, 0x2, 0x7, 0x1ff}], 0x7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000140)=0xc) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) setsockopt(r3, 0x2a, 0xe, &(0x7f0000000000)='\x00\"\x00\x00', 0x4) write(r0, &(0x7f0000000240)='\x00\x00\x00!', 0x4) 1.011555476s ago: executing program 2 (id=1892): r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000080)='\"\x00\x00\x00', 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff000000000000000000000000ffff"]) r1 = socket(0x800000018, 0x3, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r2 = accept$inet(r0, &(0x7f0000000000), &(0x7f0000000200)=0xfffffffffffffcdc) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCVERSION(r3, 0x40044271, &(0x7f0000000080)) ioctl$BIOCIMMEDIATE(r3, 0x80044270, &(0x7f0000000140)=0x101) r4 = socket(0x1, 0x2, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000003, 0x3}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setuid(0xee01) r5 = msgget$private(0x0, 0x127) msgrcv(r5, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x1}) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaabfaa86dd600000c0001400f900000000000000000000ffffac1400aa00fe001701000800001a0000000000044e204e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004800390785fff"]) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) write(r2, &(0x7f00000000c0)="a41ac15b1c2ca3d14c3c13b908422d6972246bae5ed0ed0b847e290c303c69bd20e925d99d0a48", 0x27) 958.582504ms ago: executing program 2 (id=1896): sysctl$hw(&(0x7f0000000000)={0x6, 0x5}, 0x2, &(0x7f0000000540)="cac98a5501", &(0x7f0000000080)=0x5, &(0x7f0000000100), 0x0) sysctl$kern(&(0x7f00000011c0)={0x1, 0x56}, 0x2, &(0x7f0000001200), 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="ec30e5cdc5cda44188869cca24c65946a053a7ed8a74efcfb7e417d0bbd12b929fd6ee3f2ee39a7157d21a883414e12ac04e618a5ece9d43f9ad78e465ec5043c1d1f7976fbf3fa175d34403e93af385dc8b7001359255e198822102d5134f02688390f7e3de063732a933e99a254575ce2fb648330bd6fc4277c857bb2736547a1437cd218e8b5b7f134eb1136a3ede828682d4475289c880287dfea91698e53305", 0xa2) 950.759016ms ago: executing program 2 (id=1900): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0xe}, 0x8) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000000)=0x8) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0xe5) pread(r3, 0x0, 0x0, 0x7fffffffffffffff) bind(r3, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xa) 874.618818ms ago: executing program 2 (id=1903): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) close(r0) sysctl$hw(&(0x7f0000000000)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0) execve(0x0, 0x0, 0x0) 815.075315ms ago: executing program 7 (id=1907): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b9", 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0) pwrite(r1, &(0x7f0000001080)='q', 0x1, 0x9) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) accept$unix(r0, &(0x7f0000000000)=@file={0x0, ""/46}, &(0x7f0000000180)=0x30) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r4 = syz_open_pts() close(r4) syz_open_pts() syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffeffffff0000000000000800451800300000000000019078ac1400bbac1400aa030d907800560003450d000500660005056707ffffffffff00000003"]) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = kqueue() kevent(r6, &(0x7f0000000300)=[{{r5}, 0xfffffffffffffffe, 0x11}], 0x7, 0x0, 0x0, 0x0) kevent(r1, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r7 = socket(0x18, 0xc003, 0x3a) setsockopt(r7, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) socket$inet(0x2, 0x5, 0x4) ioctl$FIOASYNC(r4, 0x80047469, &(0x7f00000000c0)=0x5) 810.072221ms ago: executing program 2 (id=1911): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x5d) chdir(&(0x7f0000000100)='./file0\x00') setuid(0xffffffffffffffff) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') sysctl$net_inet_ip(&(0x7f0000000600)={0x4, 0x2, 0x0, 0x7}, 0x4, 0x0, 0x0, &(0x7f0000000040)="6ab94d886d568fa1629b26f5f264c1d49610ede8e10f7df564251a6314096d1013557ab6ff8339fbe31787073fd12ad45797ee4c7735ae29a9000ce61762", 0x3e) 746.717853ms ago: executing program 2 (id=1914): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000140)={&(0x7f00000000c0)='./bus\x00', r1}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x6, 0x2000003, 0xeffffff9, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x4001, 0x7f}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) poll(&(0x7f0000000000), 0x35, 0x0) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_pts() r7 = socket(0x18, 0x3, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x33, 0x400c}, 0xb3d83f2, 0x200000000001, 0xffffffffffffffff, 0x0, 0x1ff, 0x1, 0x6, 0x5}) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt(r7, 0x29, 0x2c, 0x0, 0x0) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000100)={0x5ca1, 0xfffffffd, 0x8, 0x8, "4b06a6bcff0300dba800000000000800", 0x200000, 0xf}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="34729b0c85826275cdcf680e4d8098fba53d1131a8be9b4788a5d07b109ba98b815538530418fd0d805eb055f64901fea76dcccadc96cde6ed704c69d1249c544c294f", 0x43}, {&(0x7f00000000c0)="e7c4a4d86cb242843ec2cbd63a9e170a73cef2a623e23e5eda0501c23699e258b51417", 0x23}], 0x2) syz_open_pts() ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0x36}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x16}, 0x4, 0x0, 0x0, 0x0, 0x0) 746.236323ms ago: executing program 7 (id=1915): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="c4606b116e", 0x5}, {&(0x7f0000000100)}], 0x2) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000100)) (async) ioctl$TIOCSETA(r0, 0xc0804467, &(0x7f0000000340)={0x3, 0x2, 0x7, 0x80000001, "18040400003000", 0x800006, 0xfffffff7}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x5ff}, 0x10) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) ioctl$TIOCSETA(r2, 0xc1584460, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x2, "97a25e6a43c100df65c042e22364bc0000000100", 0x4, 0x1}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x40, 0xf, 0x9, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="0300000056d3bc6ef3901e0143df0897363f0cfc969b0bc1dc06a618228b2b27eecc4768021ba85ba6660b2d20d7d819", 0x30}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000100)="000484009b6943c1daa555adc3d105000000330d490c88b68915d10f", &(0x7f0000000000)=0x1c, 0x0, 0x0) (async) madvise(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x3) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r3, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) r4 = socket(0x1, 0x1, 0x0) close(r4) (async) socket(0x18, 0x3, 0x0) (async) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa) (async) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) 630.690621ms ago: executing program 6 (id=1919): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000659000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7d}, {&(0x7f0000e63000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffb}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000708000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x47d}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000032b000/0x2000)=nil, &(0x7f00008c4000/0x4000)=nil, 0xc}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f000074b000/0x1000)=nil, 0xd1c8}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x51}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f000069c000/0x3000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x3fffc0000000}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff3}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0xfffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x6, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) 629.583727ms ago: executing program 5 (id=1921): semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000940)=""/4096) (async) syz_emit_ethernet(0x73, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000650066000000069078ac1400aaac14e1b24e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000029078fffd28293841161dca18464b88067b4376d4a7380f0dd016744f6b360f7a4226c73275ac599d29bb5d17b36bf6d652b683c62fd12fd3d124bbc576d839ef01"]) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x13, 0x2}, {{r0}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) (async) setrlimit(0x0, &(0x7f00000000c0)={0x9, 0x8000000000200}) r2 = semget$private(0x0, 0x4, 0xa0) semop(r2, &(0x7f0000000000)=[{0x3, 0x7fff, 0x1000}, {0x0, 0x2, 0x1800}], 0x2) 615.734655ms ago: executing program 3 (id=1922): r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x4}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9e, 0x411}, 0x4, 0x8000fffffffe, 0x0, 0x0, 0x0, 0x4000000004, 0x40000000001, 0x5}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x9}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0x8, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 614.706672ms ago: executing program 6 (id=1923): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000580)={0x3, &(0x7f0000000040)=[{0x94, 0x5, 0x0, 0x1}, {0x7, 0xf5, 0x3}, {0x6, 0x25, 0x43, 0x8000008}]}) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x1, 0x28, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f00000000c0)=0xb) (async) select(0x40, &(0x7f0000000000)={0x7c, 0x0, 0x0, 0x4, 0x0, 0x98, 0x7b}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) 555.294648ms ago: executing program 6 (id=1924): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000000)=0x1) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x4000005) poll(&(0x7f0000000000)=[{r1, 0x104}], 0x1, 0x6) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) socket(0x1, 0x6, 0x8b) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r5 = fcntl$getown(r4, 0x5) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x2, r5) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x1020, 0x0) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000140)={0x3e1, 0xfffffffd, 0x2}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000000)=0x1) (async) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) syz_open_pts() (async) close(r1) (async) syz_open_pts() (async) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x4000005) (async) poll(&(0x7f0000000000)=[{r1, 0x104}], 0x1, 0x6) (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) socket(0x1, 0x6, 0x8b) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r3, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) fcntl$getown(r4, 0x5) (async) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x2, r5) (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x1020, 0x0) (async) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000140)={0x3e1, 0xfffffffd, 0x2}) (async) 554.78053ms ago: executing program 0 (id=1925): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc1206925, &(0x7f0000000100)) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x4ebfac6bbaf7941) r3 = getppid() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) connect$inet6(r2, &(0x7f0000000080)={0x18, 0x1, 0xf0, 0x5}, 0xc) setuid(0xffffffffffffffff) r4 = socket(0x18, 0x2, 0x0) r5 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x8, &(0x7f0000000000)=0x8, 0x0) (async, rerun: 64) r6 = socket(0x1, 0x2, 0x0) (rerun: 64) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) (async) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mquery(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r7, 0x200) (async) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188ef82cc93, r3) (async) close(r1) (async) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000000), 0xc) (async) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r8, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) connect$unix(r9, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) close(r9) (async, rerun: 64) accept$unix(r8, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) 554.615389ms ago: executing program 5 (id=1926): r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f00000002c0)=[{0x0, 0x7, 0x1800}, {0x0, 0xfff9, 0x1000}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ba15f0c263ce18107ef20ee9f1354b908ae6e8a23c603ac3bd7b08064b36b42b1e48a1eb4f8981737d8058ac0c0758d2de25fa39934cfa3a4a9b1e273a1f82a34adc20b8e6067b904adc30ae556eb6288c10a7513a997ff1f0891ee54aa6dcdd30af550d0625ecdb6e44441dbd5e7202b4ef1d4585a1ef14302d7d3cec29e26d1f3e3ac37929288b9f590a9d8c3f32d14ee244e975cac021193d1241e38e6c9ab6c8634baa8e498b21eef1ac0bd9e1f8475c77adfe1c3de09c8848b04e29d43e2e380e7204e6aaa1c283"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000100)={0xffff, 0x3, 0x3, 0xfffffb85, "9ddcac86317d351d44fc19090000009e68cd3314", 0x4, 0x90}) writev(r3, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x19b}], 0x1) r5 = socket(0x18, 0x1, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r6, 0xc0284457, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x1405, "080400000000000000010000000100", 0x4917, 0x7}) ioctl$TIOCCDTR(r6, 0x20007478) r7 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r7) dup2(r2, r7) 544.890684ms ago: executing program 0 (id=1927): setrlimit(0x8, &(0x7f0000000980)={0x40000000042, 0x80000d7}) r0 = syz_open_pts() close(r0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x9}], 0x303, 0x0, 0xfffffffc, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea4084b8c4013a9c", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x5e2, 0x4) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f0000000040)=[{0x0, 0x31}], 0x1) 467.386987ms ago: executing program 6 (id=1928): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) dup2(r1, r0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0xed49) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x3, 0x71000}, {0x101, 0x8, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x8, 0x2800, 0x7}, {0x9, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x7, 0xffff, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0xd3a5, 0x10000, 0x0, 0x0, 0x200000001, 0x3, 0x4, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) 467.047736ms ago: executing program 0 (id=1929): mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) (async, rerun: 32) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) (async) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x5) (async) setuid(0xffffffffffffffff) (async) close(r2) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x6}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0x40, 0xdd, 0x73, 0x1a}, {0x81, 0x2d, 0x2, 0x2008}, {0x9, 0x80, 0xfe, 0xfffffffe}, {0x1, 0xd6, 0x80, 0xfff}, {0x6, 0x9f, 0x2}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VMM_IOC_INTR(r5, 0x800c5606, &(0x7f0000000400)={0x5, 0x0, 0x2}) (async, rerun: 64) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 64) r6 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x4, 0xfffffff9, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x4}, {0xce1, 0xffffffff, 0x4d4, 0x9}, {0xf, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0x8, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r7 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0xe) (rerun: 32) ioctl$VNDIOCSET(r7, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r7, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 466.838188ms ago: executing program 3 (id=1930): syz_emit_ethernet(0xd2, &(0x7f0000000400)={@local, @random="5fbb8af09d48", [], {@ipv6={0x86dd, {0x6, 0x6, "e22945", 0x9c, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="fe00000000ebffffffffffffff00", {[@hopopts={0x6, 0x10, '\x00', [@generic={0x8, 0x7e, "769cdf6cf4d9569465d2a3dc0410c4155f71946da376a7cdc2fabe50c105630dad9bec5410900a041849d114cb24c16b6f05ee0f2db631329dd51ff4f487a98b128e8da233a413d5b920509b98429133fd3b1167b646fb9540cd40e9db07b10b328ced8cc4a36ab5bb30cc6368ef6d247c40fed5750cb2cd7393453f6421"}]}], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) r0 = syz_open_pts() close(r0) dup2(r0, 0xffffffffffffffff) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) select(0x40, &(0x7f0000000000)={0x80000000000000, 0x1ff, 0xfffffffffffffffa, 0x4, 0x81, 0x90, 0x8, 0x4}, &(0x7f0000000040)={0x4, 0xffffffff, 0x0, 0x4, 0x1, 0x80, 0x0, 0x7ff}, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x3, 0x100000000, 0x7, 0x0, 0x160000000000000, 0x8}, &(0x7f00000000c0)={0x100, 0x2}) 466.06684ms ago: executing program 3 (id=1931): sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0) semget$private(0x0, 0x4, 0x485) (async) r0 = semget$private(0x0, 0x4, 0x485) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000380)=""/213) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x119) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0xcf) close(0xffffffffffffffff) r1 = syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x7, 0x3, 0xffff, 0x600495, "084880fa870000bd090088d11554e90d6602ff07", 0xb52, 0x2a6d}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x7, 0x3, 0xffff, 0x600495, "084880fa870000bd090088d11554e90d6602ff07", 0xb52, 0x2a6d}) read(r1, &(0x7f00000009c0)=""/4096, 0x1000) (async) read(r1, &(0x7f00000009c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt(r2, 0xf20d, 0x2, 0xffffffffffffffff, &(0x7f0000000280)) sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000000040)="d97478b1e892baa2ef007ed36dc8056847cc72e2f2c4edb4f5c030fe4485a4d6", &(0x7f0000000080)=0x20, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x56, &(0x7f00000014c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000000203a090029e2b9630000000000000000000200fe8000000000000000000000000000aa0100000700000000820090780009000000000000000000000000000000000001"]) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffff3d51734c4c0f00000011c25d403dbf37d2a5ffaaaaaaaaaabb0800450000242c0000000000069078ac1400bb000000024e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000"]) (async) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffff3d51734c4c0f00000011c25d403dbf37d2a5ffaaaaaaaaaabb0800450000242c0000000000069078ac1400bb000000024e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000"]) 380.002439ms ago: executing program 0 (id=1933): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x88) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x9, 0x4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x7e, 0xc, 0xd5, 0x20004006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x44}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000007c0)="7f4549b70cb7a21de87373791810aaa95d576a0ac7fca22709002987b881794ffa08bb11bafcdc202a2940aaae682605080088be73fd6c631e055d0000000000", 0x40}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) ioctl$TIOCSWINSZ(r3, 0x80087467, &(0x7f0000000180)={0x3, 0x7, 0x101, 0x4}) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000240)="01", 0x1) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 379.769678ms ago: executing program 3 (id=1934): syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[]) (async) syz_extract_tcp_res(&(0x7f0000000080), 0x6, 0x14000000) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@broadcast, @local, [{[{0x88a8, 0x3, 0x1, 0x7}], {0x8100, 0x4, 0x1, 0x4}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @broadcast, @random="04096bb5261a", @multicast1}}}}) (rerun: 32) syz_extract_tcp_res(&(0x7f0000000040), 0x1, 0x1) 379.605395ms ago: executing program 0 (id=1935): open(&(0x7f0000000240)='.\x00', 0xa40, 0x1a) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) 321.202498ms ago: executing program 0 (id=1937): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = msgget(0x0, 0x240) setuid(0xee01) select(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(r1, 0xffffffffffffffff, 0x0, 0x800) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000080)=0x80000001) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[]) 320.499177ms ago: executing program 3 (id=1938): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000659000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7d}, {&(0x7f0000e63000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffb}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000708000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x481}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000032b000/0x2000)=nil, &(0x7f00008c4000/0x4000)=nil, 0xc}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f000074b000/0x1000)=nil, 0xd1c8}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x51}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f000069c000/0x3000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x3fffc0000000}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff3}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0xfffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x6, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) 319.908246ms ago: executing program 6 (id=1939): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x0, 0xc, 0xd5, 0x20004006}, {0x16, 0x9, 0x1, 0xfffffff2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xc8d, 0x0, 0xffffffffffffffff, 0x0, 0x54b, 0x3, 0x6, 0x8}) (async) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) (async) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000100)=0x4) (async) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000480)="a99616ace5fdd77e", 0x8}], 0x1) (async, rerun: 32) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="50041b02003e807447ac11efd5c1e289aaff000800002e00000000000f000000000000003c7c3087de4ada9a933366b344db9d5fea", &(0x7f0000000000)=0x35, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) sysctl$net_inet_tcp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0x14}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) open$dir(&(0x7f0000000480)='./file0/file0/../file0\x00', 0x200, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x2, 0x400000, "63742200000000000000009280c9795a6b47c1d1", 0x8000}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async, rerun: 64) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x4, 0xf, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="a99616ac80ccb429333143c45b35e66709ba6c96a60e83fd36a30dd5bee2f6d36f2c9c06be45c2843ac386986640366afe969381c6", 0x35}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="50041b02003e807447ff000000000000005a220f87de4ada9a933366b344db9d5fea3d714a7c60c6c79f23bf4d5a0990a98e13b1e268a10337d3119696", &(0x7f0000000000)=0x3d, 0x0, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[]) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 306.277479ms ago: executing program 3 (id=1940): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open$dir(&(0x7f0000000100)='./bus\x00', 0x80, 0x28) r1 = open(&(0x7f0000000180)='./bus\x00', 0x2, 0x144) ioctl$VNDIOCGET(r1, 0x80106468, &(0x7f0000000b80)={'./bus\x00', 0x6c1, 0x7, 0xffffffffffffffee}) r2 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000006c0)={0x0, 0xfffffffb, 0xffff, 0xff7ffff8, "ffff0d000300ef010155000000ff00", 0x7, 0x8}) writev(r0, &(0x7f0000000340), 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) 189.785998ms ago: executing program 6 (id=1942): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff0000dd"], 0x9}, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) setsockopt(0xffffffffffffffff, 0x2a, 0x69, &(0x7f00000002c0)="84cdd2dcc30c6c4214c658ea466153407100"/33, 0x21) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x3, 0x2}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x9010, r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="27e365d64afa1408319ded102f2f54c769bd841da68c06c4867f8066ef19164727c0606ca3f8ade2ac6bccc6e7107871b14324a7209c20989979", 0x3a}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) unveil(&(0x7f00000001c0)='.\x00', 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x800, 0xa6, 0x9, 0x2, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0xffff, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xfffffff8}, {0x101, 0x6, 0xfffffffc, 0x409}, {0x4, 0x67, 0x800f, 0x3}, {0x401, 0xffff, 0x8, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x590e}, {0x2000002, 0x82, 0x6, 0x6}, {0xc, 0x1c00000, 0x1000, 0x4}, {0x1cc, 0x7fe, 0xdaa1, 0x3}, {0xc, 0x7, 0x8}, {0x3, 0x7, 0x4, 0x8}, {0x29a71717, 0x5, 0x60, 0x7}, {0x1100c, 0x5, 0x5, 0x1}, {0x0, 0x1, 0xf7f, 0xe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x1, &(0x7f0000000240)={0xcd69, 0x7fffffffffffffff}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r3, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) sysctl$kern(&(0x7f0000000100)={0x1, 0x58}, 0x2, &(0x7f00000011c0)="c0492971", &(0x7f0000000080)=0x4, 0x0, 0x0) 188.264725ms ago: executing program 1 (id=1945): r0 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="50041b02003e807447ff000000000000005a220f87de4ada9a933366b344db9d5fea3d714a7c60c6c79f23bf4d5a0990a98e13b1e268a10337d31196968e11d0af3a0180", &(0x7f0000000000)=0x44, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[]) getsockopt(r0, 0x29, 0xb, 0x0, 0x0) 187.800823ms ago: executing program 1 (id=1946): madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="d635d193c2", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000580)={0x20000b, 0x2, 0x1, 0x2f, "cd00fd00", 0x40048003, 0x6}) recvmmsg(r2, &(0x7f0000000800)={&(0x7f00000007c0)={&(0x7f0000000140)=@un=@abs, 0x8, &(0x7f0000000680)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000340)=""/61, 0x3d}], 0x9, &(0x7f0000000740)=""/89, 0x59}, 0x5}, 0x10, 0x41, &(0x7f0000000840)={0xe2a, 0x8}) shutdown(r1, 0x0) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0xe}, 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff16f2b58f9227b9e1aaaa86dd60006f3300383a008a21f8d1450021b07f5a195768f30000fe8000000000000000000000000000aa02009078080000006000000000003a00fe8000000000000000002000000000aa00"]) 2.446857ms ago: executing program 1 (id=1947): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="cc", 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="011c0000", 0x4) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) (async) chmod(&(0x7f0000000080)='./file0/file0\x00', 0x27a) (async) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x18a) (async) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x56}) (async) r2 = syz_open_pts() close(r2) (async) syz_open_pts() (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="cff5c05664da486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a10352e3b0b2e4247b103", 0x31}], 0x1) (async) ktrace(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2, 0x100, 0x0) 2.07551ms ago: executing program 1 (id=1948): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32=0x41424344]) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001940), 0x200, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000002fc0), 0x6, &(0x7f0000000600)=[{{}, 0xfffffffffffffffd, 0x53, 0x4, 0x6, 0xc5}, {{r0}, 0xfffffffffffffff9, 0x80, 0x85165d08b0489459, 0x8, 0x400001000}, {{}, 0xfffffffffffffffd, 0x42, 0x20000000, 0x1, 0xd6}, {{r1}, 0xfffffffffffffff9, 0x14, 0x4, 0x8, 0x1}, {{r1}, 0xffffffffffffffff, 0xc4, 0x4, 0x5, 0x1000000000008}, {{}, 0x0, 0x49, 0x40000000, 0x7, 0x2}, {{}, 0xffffffffffffffff, 0xa, 0x8, 0x6, 0x9}, {{}, 0xfffffffffffffff9, 0x1, 0x0, 0xfffffffffffffffc, 0xa5}], 0x60b, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getppid() fcntl$setown(r3, 0x6, r4) fcntl$setown(r2, 0x6, r4) fcntl$setown(r3, 0x6, r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r5, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x10, 0x4) ioctl$WSDISPLAYIO_GETEMULTYPE(r6, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) recvmsg(0xffffffffffffff9c, &(0x7f0000000500)={&(0x7f0000000140)=@un=@abs, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000280)=""/28, 0x1c}], 0x3, &(0x7f0000000400)=""/163, 0xa3}, 0x0) r7 = msgget$private(0x0, 0x127) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000002c0), 0x0) close(r8) execve(0x0, 0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_RMID(0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VMM_IOC_INTR(r9, 0xc0205609, 0x0) fcntl$lock(r2, 0x0, &(0x7f00000000c0)={0x3, 0x2, 0xfffffffffffffffd, 0x100000400000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x3}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000"], 0x10}, 0x402) setuid(0xee01) 157.157µs ago: executing program 1 (id=1949): sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x2}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x1, 0xfffffffd}, {0x1, 0xa}, {0x2}]}) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r1 = syz_open_pts() close(r1) syz_open_pts() writev(r1, &(0x7f0000000700)=[{&(0x7f0000000900)="98b3cb60fb635b491bbbec01601ab1921d9405ceb6c16a4196afc5daa51bb48d2055cfb9d8b43a4a00d3c32942b4ce4cac4de58bb41799103b2875d3237dc3fae5beeaf4133619a3c5bb62a6b92617f04ec1d91e913b8900ea1d010df7f5b7c327cae1566c67836c8de642b731ff4792db1e5c89f9d1b773755da733de26141a4f3205308dacb4df311c819dc3539cab66b5b3b59aca760f81c13ae951cc47352397afc12b438d489a042b1474478dd8355d76890feee6643a02aab506bf0b59cba40e94283b391868e1cf7d81cdc1a52ec69dc7667e5e7d098fd4ba6ba1589f9aba08af61df23872fb8118434767beb55754ff09bd352d914774ef27f61d47b1d751b045005bd05a6345ac9e2e454e92168729aed955389c5ee85663ea4373128cf2d1028df9591658ba0b4db9aa903da0f558e5813f8e47aa2b1218f4ccc320b4af8861d269a83c84e3615ce3af60aa7b86340640cf9645c7f088cc5f1c2658ce8076af8712516c53615769301c9ec88b3c86d75872ccf73da39313c1639edfe51a11cee2d29c7b1421fa4f034b8a25c6e2366f686da86e7fc951c0053a80d0954c3a314c4f274a2b88a9922f5903b6654b08791b1fe98e138d815", 0x1bc}], 0x1) openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r2, 0x8020560a, &(0x7f0000000040)={0x1, 0x0, 0x1}) setreuid(0xffffffffffffffff, r0) sysctl$ddb(&(0x7f00000001c0)={0x9, 0x1}, 0x2, &(0x7f0000000200)="5fe97cef7d8e8a555c64b185a9cf95f340863344e8cf3541bb721bde4d78ee3059479fe1380b95fdf35b87341d0d9d92eb068668094382d994212134089dd2079dcd6f00e0a03ee4692db28b4281339097c89905311dde9034e04abe616775741dc90e5560620e995d60de8b56e81d8b40fb93bb5a06ee1b157ae30dd935c895fd13430512305d025c0d7f343b6031e356865932374e3ea217767bbaac1723523b34b721d5e1c8fe453c4d8184e7a3cc80512f4179c18ea197374dfeaf61c4e0c6c30a7889145f1c14428cef574062447055", &(0x7f0000000300)=0xd2, &(0x7f0000000340)="90e43ed2fd200978010315bcad937a525159f9fa2e8dbf04c063ad3c90c729a1047d1530ccac40244424fdbb6cfa1d7a0030f08d5f734db8055a1bdf28c9af5aa1ae142ddbbefe12aca2514629cb16b9e47cef931010245bb6fe70069e7d376d13d0eeef0b5351806f7eecd06d529fe502bf04de73f71dbc47a89150ad4d19fe8785638f73", 0x85) 0s ago: executing program 1 (id=1950): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@lsrr={0x83, 0xf, 0x80, [@remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @loopback]}]}}}}}}) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000001c0)={0x2df57366, 0x8, 0x5, 0xfffffff5, "6400b72860140a400000d49a540e34b9e1c800", 0x8, 0x100000c}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="468cac6f0d21ad30ea06a66da6e35ca182b6f8ac09aae2791394b81cdc227df8708a627986346b1c74c5b7ceede23281d70c3cd17aa2896df45b0507e270157239b6da65d09ddd12dcf64fb31e09c46cbd7c19411f6a1e17bd1a22ee472267bec369f7f21a2575dcb7baf509bbade09225d4628633", 0x75}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. pckbd_enable: command error    OpenBSD/amd64 (ci-openbsd-multicore-4.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vm_create: uvm_map failed: 12 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17   denied attempt to set clock back 0 seconds pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 134217731 seconds malloc(): allocation too large, type = 29, size = 16796513700 vm_resetcpu: failed malloc(): allocation too large, type = 29, size = 16796513700 vm_create: uvm_map failed: 12 pppx: unable to set addresses for pppx1, error=17 panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x86a31016000, opte 0xffffffffffffffff Starting stack trace... panic(ffffffff8343e93a) at panic+0x1d0 pmap_remove_pte(fffffd800b062c00,fffffd80086df080,7f8435188000,86a31000000,86a3107c000,0) at pmap_remove_pte pmap_do_remove(fffffd800b062c00,86a30f72000,86a3107c000,0) at pmap_do_remove+0x589 uvm_unmap_kill_entry_withlock(fffffd8069dcd3f0,fffffd805b3c61a8,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd8069dcd3f0) at uvm_map_teardown+0x117 exit1(ffff800035bf7258,0,0,1) at exit1+0x6fc sys_exit(ffff800035bf7258,ffff8000327e5370,ffff8000327e52c0) at sys_exit+0x1a syscall(ffff8000327e5370) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79b257ec4af0, count: 248 End of stack trace.