last executing test programs: 19.738938819s ago: executing program 3 (id=967): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0xd}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000009c0)="2aef", 0x2}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000140)="00000067001469dfbaea96fc3c2ca7ec85ed66000500001a6c1d47da58e9774d92936a310aad5a9a01661876eb2c59c63eef83937400cd7ca521bd4a8191bfd29cf85984cee56ea0049e22568d3a4b3d6b2aa8854755b37900505728497250b269", &(0x7f0000000000)=0x61, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 18.995292209s ago: executing program 3 (id=969): sysctl$hw(&(0x7f00000000c0)={0x6, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000082b00fe8000000000000000000000000000bb0000000000000000000000013a00"/61]) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000082b00fe8000000000000000000000000000bb0000000000000000000000013a00"/61]) 18.494353165s ago: executing program 1 (id=973): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0x43, 0x65}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000040)) shutdown(r0, 0x2) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000001580)='+P){', &(0x7f0000000140)=0x4, 0x0, 0x0) r3 = socket(0x18, 0xc003, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000800) r4 = open(&(0x7f0000000200)='./file0\x00', 0x10, 0x20) ioctl$TIOCSDTR(r4, 0x20007479) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000001c0)={0xfbef, 0x1, 0x0, 0xc75c}, 0xc) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) sendmsg$unix(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x803}, 0x40a) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) 18.238773525s ago: executing program 3 (id=975): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0xc, 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x0}, 0x840) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r1 = open$dir(&(0x7f0000000200)='./bus\x00', 0x20, 0x154) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) getppid() r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) setgid(0xffffffffffffffff) r3 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x101, 0x0, r3, r3, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r5 = fcntl$getown(r4, 0x5) ktrace(&(0x7f00000002c0)='./file0\x00', 0x4, 0x40001902, r5) fcntl$getown(r1, 0x5) socket(0x24, 0x5, 0x10) 17.750113992s ago: executing program 5 (id=979): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0x0, 0x5, 0x7ffe, 0x6, "32c14a6159de094004000000e2c7912609ad3860", 0x2, 0x8}) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684498fb00002c05000000000000000000000000000000aaff02"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt(r2, 0x0, 0x69, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x81, 0x80000c9, 0xfff4, 0x1, 0x7ff, 0x7fffffff, 0x417, 0x1, 0x1, 0x6, 0xe081}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) close(r4) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) 13.444774288s ago: executing program 3 (id=982): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000040)=0x5) minherit(&(0x7f00001cf000/0x4000)=nil, 0x4000, 0x2) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="f06c4c03327f6edbf6829f7de9da4578fc2d00000000009cb2000000", 0x1c}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="500e14263bbcf66919b9c6933cd6d21c1b020bb5198774043b506ab05dbe2c9c67a600c29e3e0d81000000f3", &(0x7f0000000000)=0x2c, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x8000, 0x0, 0xfb, 0x9}]}) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r3, 0xc0105715, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000180)={0x9, 0xc, 0x4, 0x4a8}) 13.442772843s ago: executing program 0 (id=984): sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) setsockopt(r0, 0x1000000029, 0x28, &(0x7f0000000040), 0x0) sysctl$hw(&(0x7f0000001580)={0x6, 0x12}, 0x2, &(0x7f00000015c0)="cbebf097da78b53a37ed067b33c8068cb14fd03377efa2279cdc043556b6cd008832311094", &(0x7f00000016c0)=0x25, &(0x7f0000001700), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0/file0\x00') r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmmsg(0xffffffffffffff9c, &(0x7f0000000640)={&(0x7f0000000600)={&(0x7f0000000280)=@in6={0x18, 0x2, 0x7, 0x7}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000440)="8e413f55c8688285e09164534c7dd4ae86541f6df15f2a3a801e6bd603b4eb1f1aba7aee6a9837ae9297eb18351439c6294d33c55ba71e75627870082ea649639920ca9b29c1034d74e577b71349d6154b9c493ecabce7b9d5d7b2d877193e6bba2c9fd9eb33879c1b6bd14fe54f90c32ce222d7224d654def94136a51f2c76435e4697322ede02739747c0fbd58c558e1255ca359a3b493a56482396bf011eb03dfe0d1d2ccaa839555def41dd847ae88ff57704e6eb61591b4078a75f532b80dae", 0xc2}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="8800000000000000ffff0000aa0100002cecfa126b67ada8d7fe0ebee4be30770ca5822de30874e5c2de9b8588764292def7884f24889c7faefc530feb52defae9b3f24f91d84e455c651db7861a20cecfc9ac070bb2133b83132156214d885ec5f40c9c4ead60b52c5f3e36efe8dd177c3967ab52ab668ec55c912534ef4a167bb5510000000000"], 0x88}, 0x1000}, 0x10, 0x367b6a1ba96f42e8) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000380)="851d0cf03b56feb25046", 0xa}, {&(0x7f0000000200)="9a8a0d7d5efec75aa48c22deb37c833f7a586bc08885a54739088525f117e7542fdcc5bd0ab9f266d4e5516d00484d37813ba39269c2cf28892b89e82b6a167918be9dff055a8f43367283ed0eba", 0x4e}], 0x2) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="4103000000817aa201e47374ec73a21c2e875ac85e6f4c", 0x59}], 0x1) execve(0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x3) setuid(0xee01) getpeername$unix(r1, &(0x7f0000000680)=@file={0x0, ""/263}, &(0x7f00000007c0)=0x109) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="f06c4c0332", 0x5}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="002306000f3a0346d4bfbe331b28978095043fa89874012c00000817c53fcb7c0100b539750008007a00000000a25ef4fd8addd6d92c4844d6ffb6e7ec064b6bbea0ffff16000000033ac218973e075828c0c1dfec35f01a119b6b7cfe525eb6", &(0x7f0000000000)=0x60, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) sysctl$kern(&(0x7f00000001c0)={0x1, 0x5}, 0x40000219, &(0x7f0000000000)="71f91e3471ac08040000cf71b59cd1cec37082000000000000000000", &(0x7f0000000180)=0xfffffffffffffff4, 0x0, 0x0) 12.728855249s ago: executing program 4 (id=985): r0 = msgget$private(0x0, 0x200) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/4096}, 0x1008, 0x3, 0x800) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4) dup2(r2, r1) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_icmp(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0xfd28) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) bind(r1, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) 12.728486626s ago: executing program 5 (id=986): r0 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) fcntl$lock(r1, 0xc, &(0x7f00000019c0)={0x3, 0x0, 0x79, 0x2}) select(0x59e6b373594ae5f5, 0xfffffffffffffffe, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0115, './file0\x00'}, 0x3) 12.726820512s ago: executing program 7 (id=987): r0 = semget(0x0, 0x1, 0x112) semctl$GETALL(r0, 0x0, 0x6, 0x0) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea000001", 0x4) socket(0x2, 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0x3, 0x0) 12.25099338s ago: executing program 6 (id=988): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x5, 0x7, 0x5}, {0x4, 0x3, 0x43, 0x2000008b}, {0x3c56, 0x6, 0x0, 0xbf1b}]}) (async) syz_emit_ethernet(0x3e, &(0x7f00000019c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x35, 0x30, 0x67, 0x4, 0x4, 0x89, 0x0, @multicast2}, @icmp=@redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x1, 0x8, 0x1, 0x65, 0x8, 0x8, 0x70, 0x7, @loopback, @rand_addr=0x84}}}}}}) (async) fchflags(r0, 0x1) (async) write(r0, &(0x7f00000000c0)="f2981c75e03308d8100556da850f8ab56e2caa13bc78d60612098403291e2afa7dbc2096dd266003f66d7e4451bdf0a2f7b3d81a5a742950566bc7d5f742fe0755bc8cd51876946c9a5f8c7e84f113d028e727f179b868ac005e3d3a4f25275e909d4040f9ca7860687832b1859b4bf6c0711bb792085150c71c7b4a64db651171ca67227118ec499ab85181dc47e41440435ce1f81ebfc1832bb5be4dd07cde2fc1b424d8d39d81414eecafaa4487c7d106f07d90e57f5f3fdd7c1a1fe8e2c7e1f51c10d90956edd0c2c559e3436e5581d7c94f", 0xd4) 12.250464105s ago: executing program 1 (id=989): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000080)) sysctl$hw(0x0, 0x0, &(0x7f0000001500)="500e1b020bb5199074043b506ab05dbe2c8c67a600c29e3e0d81000000f394c30100215e7b8ef84fc94300a1bcd8f852adae3b00002b571c474a27153cd5fb0e1ea6b442cc8536b79a7d30daff902c61946ce36b3519190006b227a2a8476fe10199554e3d39911783b2147172a2bc237d51aabbb61e3a19ae496aea", &(0x7f0000000000)=0x7c, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[]) 11.251075754s ago: executing program 4 (id=990): setitimer(0x0, &(0x7f0000000040)={{0xffffffff, 0x3}, {0x8}}, 0x0) 11.250080238s ago: executing program 6 (id=991): r0 = kqueue() fchflags(r0, 0x10000) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/69, 0x45}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/255, 0xff}], 0x3) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000011c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x80, 0x8) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000001240)) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f00000012c0)=0xce) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000001300)=0x7) r2 = dup(r0) ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f0000001340)) r3 = openat$tty(0xffffffffffffff9c, &(0x7f00000013c0), 0x80, 0x0) ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000001400)={0x10, 0x401, 0x7fff, 0x7, "61378a78c735c60c2a8a324ff3d9153827fd3434", 0x0, 0x9}) mknod(&(0x7f0000001440)='./file0\x00', 0x6000, 0x85) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001480), 0x20000, 0x0) ioctl$TIOCSTAT(r4, 0x20007465, &(0x7f00000014c0)) sysctl$net_inet6_icmp6(&(0x7f0000001500)={0x4, 0x18, 0x3a, 0xe}, 0x4, &(0x7f0000001540)="0aeb780502557362cfb9ecf06221279fde8cc4081200eb19d15c1af65d91dca51d9ccfee1ac500b6313a52e6af05875d407a3f5bbd7fe12b773162df887d00ab3efa6d23b847f4273c6151876f88e2e4675554f2bf0e47860d", &(0x7f00000015c0)=0x59, &(0x7f0000001600)="bc3307fdf95819ce781c45b0903961357d3c18f44552304fb8b7467597a9146e4b6c12a83497eaa741604f66f762d45d651a6595dd06f117bec23f80fb1bbe90cb408d0c874ba0ee9d9a77cbadf83cf33457ebd8d263864b2f3827c9fe4d46a51e93c37cd82c68bca4b4a6d40330", 0x6e) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0)=0xc) getsockname(r5, &(0x7f0000001700)=@in, &(0x7f0000001740)=0xc) r6 = syz_open_pts() write(r1, &(0x7f0000001780)="168568ea28752227b57fb57239df5025556a2f28c6d0e29992744061102387b3a51f2894cd17ba06e77d2ab56bc01c2c8a1144f2392ae368e8bc83b1b7514465766d797aac8ec9029ff8a9851d8047871b8c6ef34c2568cd55ed81172734ac042a6ac95f954c7285c7f707b0630cde10c88b507e91ac9b1b807c8de10dddcf907a940e2157ff6bd927bfc1a11124ff950f56fa043797", 0x96) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000001840)=0x4) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000001900)={&(0x7f0000001880)='./file0\x00', 0xf35d, &(0x7f00000018c0)='./file0\x00', 0x8}) unlinkat(r1, &(0x7f0000001940)='./file0\x00', 0x8) syz_emit_ethernet(0x3a9, &(0x7f0000001980)={@broadcast, @random="ee67cf821f87", [{[], {0x8100, 0x0, 0x0, 0x2}}], {@ipv6={0x86dd, {0xf, 0x6, "3bc6da", 0x36f, 0x2b, 0x5, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x3}, {[@routing={0x2, 0x8, 0x0, 0x3, 0x0, [@mcast1, @mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x56e}]}, @fragment={0x3a, 0x0, 0xa3, 0x1, 0x0, 0x2, 0x68}, @dstopts={0x8, 0xd, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @generic={0x4, 0x4c, "3c64a0fe1d270b7d6ee93536436205fa5e0d6511c6007360b2139568aecb8fb3700cb2b97f40df817740e1b2d43bf90c4095f40ec9e861d7ae047ee9db10f7c48fb0bbd725b5c649a9e1b43c"}, @pad1, @generic={0x5, 0x5, "3ffc7481eb"}]}, @fragment={0x1, 0x0, 0xf9, 0x0, 0x0, 0x14, 0x68}, @hopopts={0x4, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x40}, @generic={0x3, 0x4f, "d7160433d03020f7cdee11d2c46f96e83fbc4596496d00882aa13e3f0e19cccb280ff7ab62291a79d2c3f5f4b26e0fac522ff3441fea9dbea3e2f33dc1600bddb72fe0cd8f7bcd824aa827bafd1407"}, @generic={0x37, 0x97, "faf6a0ec92cd223657244ef341a1efee3b60e67a547099ac7a4d818d93454f5a509893bf7543f02372913aa635b917d0d6d6465b6e30ecc46b209cf57f2b506f9548ba68dbcccfe509522474b06bc51abcf77cbef7e638743f56db525a9348eb7a09a149ac31025e4142353df5071d0a74386fc2403aa50a6a663ee080ce3c9fa3b99e94282727d8ff51ce2ea1a9a09398e34b3ee1af7e"}]}, @routing={0x11, 0x2, 0x0, 0xfe, 0x0, [@mcast2]}, @fragment={0x67, 0x0, 0x4, 0x0, 0x0, 0x9, 0x67}, @hopopts={0x70, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0xff}, @generic={0x7, 0xee, "08e2bd2b1b4c96268e802a030b6d34ef02853977742dff664e4cd2924ac2bfe0e8692aa58a794372da70260ac362b9faac818cc5e59e2c71ba9b613e93d3c0d1b13dc739036456e08febf60895d5ff6b4a0cad3eece91fcf313b309638e8f8efffbe1ee9b6a0f2cddf2fc8b0980cb11608b9e218d4af9bb88dbf134f3500af15d8f65cc4120fc897d99060b8ed944318904e0e4a008de2c1ab7f8d2e62c9c74605e9aa4e2a69beb01e722c4a80106f967c285101a57eca195176e97c072f5629aa47e1a668b881c80f10547ddb8da524e132ef7967178acc2cc7e1cd4ff5d087b7ce81a0174a0369d1846860d0c7"}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xffff}]}, @hopopts={0xff, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @udp={{0x0, 0x0, 0x8}, {"bb0669d615b5a293c0b707f7b53474371961a40e3c51dfcd466474e3e269f8f40fe7792298a6d79530bf802ed95aaa646aa75f37dc88d150e3ec3ed15c2e0c2df9e43ca07da2ec8d9cd94dbee5658e705961aeecfd47440f189d3ba1830bd3bd8dd51d23d4f949"}}}}}}}) chroot(&(0x7f0000001d40)='./file0\x00') fcntl$getflags(r6, 0x3) getsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000001d80)=""/74, &(0x7f0000001e00)=0x4a) connect$unix(r4, &(0x7f0000001e40)=@abs={0x0, 0x0, 0x0}, 0x8) unveil(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)='x\x00') 11.249667347s ago: executing program 1 (id=992): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x44, 0x82, 0x6}, {0x34, 0x0, 0xf9, 0x9}, {0x46, 0x80, 0xa, 0x20000000}]}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000680)={&(0x7f0000000000)=[{0x1, 0xb300}, {0x84, 0x200}], 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2814, r2, 0x0) open(0x0, 0x615, 0x1) ktrace(0x0, 0x21436587, 0x5cbf1647c65f8d1d, 0xffffffffffffffff) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) r4 = accept$unix(r3, 0x0, 0x0) sendto$unix(r4, 0x0, 0x0, 0x406, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x7, "00000000000000000000f1ff1f93e1f7708a9338", 0x7e, 0xfffffffc}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)='\x00', 0xfffffffc}], 0x1, 0x3effd) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x44, 0x82, 0x6}, {0x34, 0x0, 0xf9, 0x9}, {0x46, 0x80, 0xa, 0x20000000}]}) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000680)={&(0x7f0000000000)=[{0x1, 0xb300}, {0x84, 0x200}], 0x2}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2814, r2, 0x0) (async) open(0x0, 0x615, 0x1) (async) ktrace(0x0, 0x21436587, 0x5cbf1647c65f8d1d, 0xffffffffffffffff) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) accept$unix(r3, 0x0, 0x0) (async) sendto$unix(r4, 0x0, 0x0, 0x406, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x7, "00000000000000000000f1ff1f93e1f7708a9338", 0x7e, 0xfffffffc}) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)='\x00', 0xfffffffc}], 0x1, 0x3effd) (async) 11.000785377s ago: executing program 4 (id=993): sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x40000000000000a2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) (async, rerun: 32) mkdir(0x0, 0x4) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000080)={0x2}) open(0x0, 0x10686, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = socket(0x1, 0x2, 0x0) (rerun: 32) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, &(0x7f0000000100)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1012, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) open(0x0, 0x8000, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 10.990871123s ago: executing program 7 (id=994): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x2, 0x400, 0xffffffffffffffff) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r1 = fcntl$dupfd(r0, 0xa, r0) ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f00000001c0)=0x100) (async) readv(r0, &(0x7f0000000180)=[{&(0x7f0000001340)=""/4081, 0xff1}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000080)=""/217, 0xd9}], 0x3) 10.751051349s ago: executing program 7 (id=995): munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mquery(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x0, r0, 0x9) minherit(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) r1 = socket(0x800000018, 0x1, 0x0) close(r1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x8000000, 0x0, 0x3, 0x0, "0109ffffcf000000000000bc1f557200", 0x2}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) socket$inet(0x18, 0x3, 0x102) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 10.749324708s ago: executing program 2 (id=996): r0 = socket(0x18, 0x3, 0x0) sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$vfs_nfs(&(0x7f0000000000), 0x7, &(0x7f00000025c0), 0x0, 0x0, 0xffffffffffffff2d) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000000)='\"\x00\x00\x00', 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x20, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x16, 0x0, 0x0, 0x2e}, @hopopts={0x50}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x7, 0x9, 0x5, 0x8}}}}}}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ioctl$VNDIOCSET(r1, 0xc0284408, &(0x7f0000000000)={0x0, 0x7, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) 10.475529456s ago: executing program 5 (id=997): r0 = socket$inet(0x2, 0x4003, 0x6b) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240), 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$VNDIOCSET(r1, 0xc0387200, &(0x7f00000000c0)={0x0, 0x9e7c, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) (async) bind$unix(r3, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) getpeername(r2, 0x0, &(0x7f00000003c0)) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) getrusage(0x1, &(0x7f0000000000)) sync() (async) sync() open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open$dir(&(0x7f0000000100)='./bus\x00', 0x10000, 0x0) (async) open$dir(&(0x7f0000000100)='./bus\x00', 0x10000, 0x0) msgget$private(0x0, 0x0) (async) r4 = msgget$private(0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$BIOCLOCK(r5, 0x20004276) msgctl$IPC_SET(r4, 0x1, &(0x7f0000002f80)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x2}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0xa, 0x200000000000000}) socket(0x2b735d4401a83072, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3a) unveil(0x0, &(0x7f0000000300)='r\x00') semget(0x0, 0x0, 0x206) (async) semget(0x0, 0x0, 0x206) 10.474656503s ago: executing program 0 (id=998): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xe, 0xfffffff8, "ff0600000000000000ccde2d210cee00", 0xe8, 0x3effc}) syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) 10.474238513s ago: executing program 4 (id=999): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="b55d145e54af", [], {@ipv4={0x88e7, {{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0xfff, 0x0, 0xf0, 0x0, @local={0xac, 0x14, 0x0}, @loopback}, @udp={{0x0, 0x3, 0x8}}}}}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc4504441, &(0x7f0000000000)={0x7fc, 0xffff002f, 0x8, 0x7ffffffd, "01af00000090fb000000001500", 0x10008000, 0xb}) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, &(0x7f0000000100)="a6f39fb89f88", &(0x7f0000000880)=0x6, 0x0, 0x0) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f00000000c0)=0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x6a) r2 = syz_open_pts() writev(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)='\a', 0x1}], 0x1) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)=0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(0x0, &(0x7f00000002c0)='r\x00') ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) unveil(0x0, &(0x7f0000000140)='c\x00') bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x2}, 0x8) 10.472247633s ago: executing program 2 (id=1000): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000040)={&(0x7f0000000180)=[{0x20, 0x9}, {0x8}], 0x5}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0xe8) ioctl$FIONREAD(r1, 0xc028698b, &(0x7f0000000100)) 9.500882854s ago: executing program 2 (id=1001): r0 = socket(0x18, 0x1, 0x0) close(r0) setgroups(0x0, 0xfffffffffffffffe) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x93, 0x85, 0x47}, {0x4, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="00231b000f4070638a40c1b758385c24fc3b58ce49e8477e20fb60cb767160d9e03f5b87b2008001000000000000c99a687f20731a2800f4ffffffff00", &(0x7f0000000000)=0x3d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000480)="f81ad30100060000000100040000", 0xe) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x3546, 0xa, 0x6, 0x76}, {0xfff, 0x9f, 0x4, 0x9}, {0x7fff, 0x3, 0x8, 0x10000}, {0x9, 0x8, 0x8, 0xfffffbff}]}) socket(0x24, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x1, 0xffffffff, 0xfeffffff, 0x9, "080014e8eaed00", 0x10000000, 0x9}) setsockopt(r0, 0x6, 0x41, &(0x7f0000000280), 0x1c) getitimer(0x1, 0xfffffffffffffffe) 9.500456454s ago: executing program 7 (id=1002): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, r1, 0x0, 0x0, 0x81}, 0x20000000000}) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="feb06c7a40", 0x5}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000480)="00238017008c1a3cb1c4e45ed74ac236ab3734e1808c98c046374669b9a3a3264f27dd40c4fbfc7494161c5d938e8ca14ecd35108dd58a92e2b69a3d4ff8182c511b935bc04d4857d202487079", &(0x7f0000000000)=0x4d, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x66, &(0x7f0000000280)={@random="98093555ab44", @local, [], {@ipv6={0x86dd, {0x4, 0x6, "f12819", 0x30, 0x37, 0x40, @loopback, @empty, {[@fragment={0x6, 0x0, 0x1, 0x0, 0x0, 0xd, 0x67}], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x90, 0xff, 0x47}, {0x40, 0xf1, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="721e594342de26fb7425ff42429add150133a13d31d456cbb37782bba8bd7f179c112f1e", 0x24}], 0x1) (async) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="00231b000f4070638a40c1b758a04d9a9200001f00385c24fc3b58ce", &(0x7f0000000000)=0x1c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) r4 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) (async) r5 = getpid() setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r5) (async) getitimer(0x0, &(0x7f0000000180)) (async) setuid(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0xfffffd73, 0x0, 0xfffffffffffffe7d, 0x0, 0xffffff8f, 0x405}, 0x400) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 9.500119903s ago: executing program 0 (id=1003): r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x2e, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01000000", 0x4) (async) setrlimit(0x1, &(0x7f0000000000)={0x81, 0x1}) 9.447986842s ago: executing program 3 (id=1004): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2410, r1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) select(0x40, &(0x7f0000000180)={0xfffffffffffffffb, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181b, 0x8, 0x9}, 0x0, 0x0, 0x0) open(&(0x7f0000002600)='./file0\x00', 0x78e, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x2010, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000180)="7f454c46c5c41a49b70cb710aaa95d576a0ac7fca22716a22987b881794ffa08bb11bafcdc24ff4c5d5e22b1775c7b1ad1a2ec534c50019377fa47f7af46e521", 0x40}], 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f00000001c0)={0xffff, 0xad9, 0xffffff7f, 0xb, 0x3, 0x7, 0x8, 0x10, [{0x3, 0x7, 0xc, 0x1000}, {0x8, 0x7, 0x7, 0x3}, {0x1, 0x7fffffff, 0x4, 0x2}, {0x8, 0xad8f, 0x1f807787, 0x7ff}, {0xb, 0x7f, 0x4, 0xfff}, {0x4, 0x7fffffff, 0x0, 0x4f9}, {0x8, 0x6, 0x3, 0x3}, {0x4, 0x800, 0x7}, {0x4, 0x80000001, 0x40, 0x4}, {0x9, 0x6, 0x4, 0x8001}, {0x7, 0x80000000, 0xfffffffb}, {0xfffffffb, 0x7, 0xfffffffb, 0x7fff}, {0x2, 0x0, 0x1, 0x1c71}, {0x9, 0x4, 0x3, 0x2}, {0x9, 0x54, 0x0, 0x5}, {0xd, 0x7, 0x4}]}) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 9.439481174s ago: executing program 6 (id=1005): r0 = socket(0x18, 0x2, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x32) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x1, 0xef, 0x61, 0x1, 0x5, 0xd87, 0x8000000c, 0x0, 0x0, 0xaf, 0xffffffffffffffcb}) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) (async) r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x1, 0xcb, 0x7a, 0x1, 0x5, 0xd87, 0x8000000c, 0x0, 0x0, 0xaf, 0xffffffffffffffc8}) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) (async) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) r6 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000000)) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x131, 0xe2f}, 0x3a0, 0xfffffffffffffffb, 0x0, 0x0, 0x6, 0x40000000000d, 0x5, 0x8000000000000001}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040), 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94100e4ac63c90dddc11f11cad5cc4", &(0x7f0000000080)=0x2, 0x0, 0x37) 9.435928064s ago: executing program 6 (id=1006): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x4) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000040)={'./file0\x00', 0x5, 0x5, 0x3, 0x1, 0x7b96, 0x6, 0x6, 0x1, 0x1, 0xffffffff, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSDLT(0xffffffffffffff9c, 0x8004427a, &(0x7f0000000100)=0x8000000) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20, 0x29) fchmodat(r3, &(0x7f0000000180)='./file0\x00', 0x80, 0x6) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000340)=[{&(0x7f0000000200)="35856afd52a52c4d451eaf647e21f36e3033534a780271f9de92fce69bf6d3b08b9b36ad5436fa24cd7ad0334e87cdb77396e5d7f35a8b07f1d39e", 0x3b}, {&(0x7f0000000240)="13cba36c1306a0a37b8d2297635aec3c2ea816e14a078398b4a57a99d53b37924bf19a7f17e3ff7170737250ddc2f0e967eb0d0df154f46c2364e415c1bf76da913236c577b89172a72711f97f6ce6b2f510438b1994684047d2a34885bf0ddc4f13adafad353e166d76816e837842b50f5b0ac109ec26fe0e63007231e509d47a0ee4d6780552", 0x87}, {&(0x7f0000000300)="1f544a5e50e316b7001c7a5de3f9f9f880d3122589bcbc4d6ff269", 0x1b}], 0x3, &(0x7f0000000380)=[@rights={0x18, 0xffff, 0x1, [r3]}], 0x18, 0xc}, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) fchflags(r4, 0x0) kqueue() ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000440)={0x192e, 0x6, 0x2b, 0x3fc00000, 0x5, 0x6, 0xc, 0x10, [{0xff, 0x0, 0x84, 0x52c0}, {0x150, 0x8, 0x2, 0x8}, {0x7, 0x200, 0x800, 0xb87}, {0x8, 0x7f5, 0x7}, {0x3ff, 0x3, 0xffff, 0x401}, {0x7, 0xe, 0xac, 0xc}, {0xd7, 0x3, 0x8001, 0x5}, {0x0, 0x9, 0xfffff801}, {0x0, 0x2, 0x7, 0x2}, {0x0, 0x4, 0xdc2, 0xf}, {0x3ff, 0x1000, 0x1, 0x2}, {0xd1, 0xb, 0x81, 0x9}, {0x4, 0xb, 0x8, 0x4}, {0x80000000, 0x8, 0x9, 0x6}, {0x9, 0x9, 0xfff, 0xe8}, {0x0, 0x400, 0x0, 0x7fffffff}]}) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000580)={0x80000000, 0x8000}) sendto$unix(r2, &(0x7f00000005c0)="1d5788b77dfb981597c8d853cc2ffa182d9b44f3d4d81f07b976912a66a71a4050be0a57b8d759fb2a47ecea24de971a4dd4022c39c56a5103c37f2de45071ea9dd0e7ade5522ecdc7e2f46cbbd4b9d346eba186deb9132412e610376f5c8ad6fdf6ca074403d08daa3bbc35b4679bb7a61f8e", 0x73, 0xa, &(0x7f0000000640)=@abs={0x1, 0x0, 0x1}, 0x8) r5 = socket(0x20, 0x4000, 0x5) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000680)={0x10, 0x100000000, [{&(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8000000000000001}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x10000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x9}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x100000001}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x8}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x80000000}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x822}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}], './file0\x00', 0x7}) r6 = open$dir(&(0x7f0000000880)='./file0\x00', 0x10000, 0x1) readlinkat(r6, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)=""/4096, 0x1000) mkdirat(r3, &(0x7f0000001900)='./file0\x00', 0x80) getsockname$unix(r1, &(0x7f0000001940)=@file={0x0, ""/4089}, &(0x7f0000002940)=0xffb) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) r7 = getuid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000002980)={0x0, 0x0, 0x0}, &(0x7f00000029c0)=0xc) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000002a00)={r8, r7, 0xffffffffffffffff}, 0xc) setpgid(r8, r8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000002a40)) r10 = getgid() setgroups(0x6, &(0x7f0000002a80)=[r9, r9, r9, r9, r9, r10]) shutdown(r0, 0x0) fchown(r2, r7, r9) dup(r5) 8.501007271s ago: executing program 0 (id=1007): setitimer(0x1, &(0x7f0000000280), 0x0) r0 = syz_open_pts() ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f00000002c0)={0x0, 0x7f}) setitimer(0x1, &(0x7f0000000000)={{0x10000, 0xffbffffffffffff9}, {0x2, 0x3}}, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80146945, &(0x7f00000001c0)) ioctl$TIOCSBRK(r1, 0x2000747b) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc) r3 = socket$inet(0x2, 0x4, 0x2) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 8.250816932s ago: executing program 1 (id=1008): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x204a1, 0x0) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0xc, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x0}, 0x840) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x20) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1ff, 0xd, 0x5, 0x83}, {0x81, 0xf6, 0x5, 0x20}, {0x16, 0x2, 0x0, 0x1}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x4, 0x90, 0x7f, 0x4}, {0xa4, 0xc, 0xf7, 0x4005}]}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100", 0x2, 0x400, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r3, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b90d7f00aa4e713048e69920929648", 0x14) bind$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x2}, 0x8) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) clock_settime(0x100000000000000, &(0x7f00000000c0)={0x4000000}) (async) sysctl$net_inet_ip(&(0x7f00000016c0)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 8.000758905s ago: executing program 5 (id=1009): sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x15}, 0x4, &(0x7f0000000040)="57d637ed", &(0x7f0000000280)=0x5c, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090001300000fed38d00000000000000000000000000ff020000000000000000000000000001290400000000000005"]) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xab) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)="50de40b9c7cdeaa1ab539398f103a4979d1f56b8e2ee61a369b69f9d050536290750054e6a3ce0b8ed083f68a77020e73d1ec8fa66b30a8c28091a7b12a817255845d8a1ba3554593224387e95ae03fb527801ea5f08a5ae3cdf91fdb28ec21858778d13aeb8b7cc73c637beee68f94abc11a9e4cdfc18eafe4dbb51c2c0053f9745390b3a679fa1e33d60596c5cbb788a8cc7fa12d25d385a021be2c07b79688df52e4ef4f40c0f1ab585f84ddb", 0xae}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0x205318) open$dir(&(0x7f0000000240)='./bus\x00', 0x9f322acc5e08b2e1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r1, 0x20004102, 0x0) r2 = socket(0x1, 0x5, 0xfe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x7fffffff, 0x200, 0x100000000, 0x6, 0x4, 0x8001}, &(0x7f0000000080)={0xfff, 0x100, 0x100000000000, 0x8000000000000000, 0x400, 0x1003, 0xd3, 0x100000001}, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xb, &(0x7f00000001c0)="19519dde", 0x4) setsockopt(r2, 0x1000000000029, 0xb, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000500)=ANY=[]) open(&(0x7f00000000c0)='./bus\x00', 0x80, 0x314) kqueue() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCIMMEDIATE(r3, 0x4004426a, 0x0) ktrace(&(0x7f0000000300)='./file0\x00', 0x0, 0xd27d43220c7df9f, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0x37) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0xe}, 0x4, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="90f0c168fd9d973d1be4851e8d7f584db300483413d88d781b76b86b829f75131c3c63dc400479a35c1ff8dfa2af2ebe10206e7e3bd00ad6ee11b26c9b85a3d85f21f95b0480f251a1982db977d4122767858f7334b04a45b8a8ebeec30742c32ba6cbea749113e1e65ceb92bdcfd17e1afce4e34adf183b3d62e15cdfc996a2e148d464f8e4c7d2c0d7ca2bd847501e295aa3fcd002accc9c8bf0c12976f61dd2f73ae3d8b35c7f0d5401ea563c0b8b25f55dd3ea3e1790dacc1b247719c7e516a4b842215a09ca34813af697accc854b4d44b16021", 0xd6) openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) 8.000295569s ago: executing program 2 (id=1010): r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x406, 0x0, 0x0) (rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x40, 0x1, 0x17, 0x7e000002}, {0x1, 0x1, 0xcd, 0x3}, {0x5, 0x4, 0xb, 0x800207f8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SPKRTUNE(r1, 0x20005302, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) 7.488604199s ago: executing program 2 (id=1011): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$VT_RELDISP(r0, 0x20007604, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x80) ioctl$WSDISPLAYIO_GMODE(r1, 0x4004574b, &(0x7f00000000c0)) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000100)=0x1) ioctl$WSDISPLAYIO_DELSCREEN(r1, 0x80085754, &(0x7f0000000140)={0x80000000}) clock_gettime(0x2, &(0x7f0000000180)) r2 = semget$private(0x0, 0x1, 0x90) semctl$GETZCNT(r2, 0x1, 0x7, &(0x7f00000001c0)=""/4096) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000001200)={0x7, &(0x7f00000011c0)=[{0x5, 0xff, 0x0, 0xd5ad}, {0x7ff, 0xc, 0xf, 0x7fff}, {0x101, 0x8, 0x5, 0x1}, {0x4, 0x1, 0xad, 0x80000000}, {0x2, 0x5, 0x1, 0xfffffff9}, {0xff8e, 0x2, 0xe, 0x655ba511}, {0x0, 0x2, 0x4, 0x1}]}) ioctl$VT_SETMODE(r0, 0x80087602, &(0x7f0000001240)={0x1, 0x4, 0x8000, 0x1, 0xff}) r3 = open(&(0x7f0000001280)='./file0\x00', 0x8000, 0x26) ioctl$WSDISPLAYIO_GETEMULTYPE(r3, 0xc014575e, &(0x7f00000012c0)={0x92ae, './file0\x00'}) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000001300)={0x2, 0x6}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, &(0x7f0000001340)={0x3, 0x800}) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001380), 0x80, 0x0) ioctl$VT_SETMODE(r5, 0x80087602, &(0x7f00000013c0)={0x0, 0x5, 0x3, 0x6, 0x40}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000001400)=0x10001) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10006) ioctl$FIOGETOWN(r6, 0x4004667b, &(0x7f0000001480)) sysctl$kern(&(0x7f00000014c0)={0x0}, 0x0, &(0x7f0000001500)="5b76d4a78579ded26414446ae374f83967f0c813cc69839b7f", &(0x7f0000001540)=0x19, &(0x7f0000001580)="57930db78b0f295c3e81efaead77b5318b5638b5d380979bf09c40c2fa188bbdb909709ffa9d74fc77c5b5567dd0df1301b315535bba4c7025a549656940b84b7e91facabe956a72ba38e7344a14640f9ea3833dfcabb4ca70284d0db254448ea0fb19ed66d54c10ccd49eb482d436be564d7205ab46d62471b9bc6e57861078e58da419226d790b1d2b4f15e3b84e2fca96a351ba7a1c997085cfbcc4a668dade08f6ec9dbf4991c807c3b8053ed0b782f10aacdd09a1b0c871c6d1f4f830dbf11be3ed66f28a89bb63026a6544dff20bc23624f9dc092d11aa6000f0cc8e727f60704532d23461b37051c03a210460f1a18c12ab", 0xf5) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) lseek(r4, 0x8, 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f0000001680)={0x401, 0x0, 0x308, 0x5, 0x2, 0x1, 0x3, 0x10, [{0x6, 0x5, 0x7, 0x9}, {0xae, 0x68f9, 0x80, 0xfff}, {0x7, 0x1, 0x3, 0x6}, {0x7fff, 0x1, 0x2, 0x5}, {0x4010, 0x3, 0x7, 0x400}, {0x8001, 0x0, 0x3, 0x2}, {0x1, 0x2, 0xffffffff, 0x9}, {0x6, 0x1000, 0x6, 0x3}, {0x2, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x8, 0x9}, {0x81, 0x800, 0x2, 0x5}, {0x3, 0x6, 0x1}, {0x3, 0x3, 0x660d, 0x101}, {0x7, 0x80000000, 0x4b55548a, 0x800}, {0x74b, 0x5, 0x421, 0x3}, {0xc454, 0xb2ac, 0x6, 0x9}]}) recvmmsg(r1, &(0x7f00000029c0)={&(0x7f0000002980)={&(0x7f00000017c0)=@un=@abs, 0x8, &(0x7f0000002880)=[{&(0x7f0000001800)=""/66, 0x42}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x2, &(0x7f00000028c0)=""/146, 0x92}, 0xe}, 0x10, 0x801, &(0x7f0000002a00)={0x8001}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000002a40), 0x20, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000002a80)={0x1}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r3, 0xffff) mknodat(0xffffffffffffffff, &(0x7f0000002b00)='./file0\x00', 0x100, 0x800) 7.488344169s ago: executing program 0 (id=1012): wait4(0xffffffffffffffff, &(0x7f0000000040), 0x1, &(0x7f0000000080)) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendmsg$unix(r1, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x20, 0x2}, 0x2) (async) ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 7.487405703s ago: executing program 7 (id=1013): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4000000000000001, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000074e000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil, 0x5}, {&(0x7f00004e5000/0x3000)=nil, &(0x7f00004e6000/0x14000)=nil, 0x7ff}, {&(0x7f00004c6000/0x2000)=nil, &(0x7f0000234000/0x2000)=nil, 0x800000000}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000080}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f00001a2000/0xe000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000169000/0x3000)=nil, 0x2000000009}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00000e2000/0x2000)=nil, 0x4}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000750000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x8}, {&(0x7f0000696000/0x1000)=nil, &(0x7f00004e6000/0x3000)=nil}, {&(0x7f0000210000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x400}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000064000/0x2000)=nil}, {&(0x7f000057e000/0x3000)=nil, &(0x7f00005e4000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f000057d000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00', 0xfffffffe}) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x64) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f00000013c0)='Mn', 0x2}, {&(0x7f0000000280)="a2237eceb9", 0x5}], 0x2) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x83, 0x2d, 0x2, 0x8}, {0x40, 0xf, 0x9, 0xb}, {0x6, 0x2, 0xa, 0xfffffffe}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) (async) r4 = getpid() setreuid(0xee00, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1801, &(0x7f0000000340)={0x1, 0xe}) (async) setuid(0xee01) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) (async) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x7, 0x400}, {0x7, 0x9}}, 0x2) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080)=0x8, 0x4) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@random="eeb02e86bc0e", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6, 0x30, 0x68, 0x222, 0x2, 0x6c, 0x0, @multicast2, @multicast2}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x4, 0x4, {0x5, 0x4, 0x0, 0x6, 0x9, 0x65, 0x8, 0x10, 0x3b, 0xfffc, @multicast2, @rand_addr=0x5f36}}}}}}) 6.499703634s ago: executing program 6 (id=1014): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x56) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0xfff7, 0x72, 0x1}, {0x4, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="19bc", 0x2}], 0x1) poll(&(0x7f0000000500)=[{r3, 0x5ed878fceb9bd0c7}], 0x1, 0xb4e9) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x3, 0x80, 0x317, 0x8, "476dbcb2fade72eda0fde64f21913f1e5d88fcf8", 0x8, 0xccef}) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x1000f66c, 0x8, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x3, 0x9}) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d2e0b"]) execve(0x0, 0x0, 0x0) setuid(0xffffffffffffffff) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') 5.999739169s ago: executing program 1 (id=1015): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x60, 0xf3, 0xfe, 0x9}, {0x6, 0x4, 0x8, 0xfffff7fe}]}) r1 = kqueue() kevent(r1, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000400)="9b1809ffffffffffffff5fa9ac6df0eeafdb4466a4326da2e1df55f8ee9e5d6cf220ef7f0abdbc34fe42021572dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b4cf2d71670109f6a8aa1c7c1abaf40b166d5b12c8305000000000000009a9ab9b8002192bc4bc83d9368e0ed83c7b89c599f107d940a8d37efbb405d8ecb87a1c9fc75601eec889c0911ff455f4caae80e3e393219a92252198bcf509a5f1ed9c58b5518e2932cc5621113382c571bff52df30d3d5dd2438b6febb4442cd1624697c1fbbf10ed5a3d50adf762b7d32f8dd1e840ca13018fbc8743418114cef99587cde68a3b33e7babec7703250dec47ed68c00e4c6d4016047658db75", &(0x7f0000000280)=0x10011, 0x0, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) close(r0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504", 0x4, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="3d000000002dec30c221d84ca1e6904c2ffd0bc16049a26808c2000000000000009823ea007a2d97b5a79391414951666d56a9836fa781c711aa35f39a00d93ec82fe500f816a64a48b6de85d8e0ed372a33e0b3ce45243268994a98b105ee0bcbc91b858f7a375f660f3c149ca425e5b2370596", &(0x7f0000000000)=0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) dup(r0) recvmmsg(r3, &(0x7f0000000400)={&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/143, 0x8f}, {&(0x7f0000000200)=""/60, 0x3c}], 0x3, &(0x7f0000001540)=""/179, 0xb3}, 0x8}, 0x10, 0x1801, 0x0) write(r0, &(0x7f0000000280)="d81a00"/14, 0xe) read(r3, &(0x7f00000002c0)=""/200, 0xc8) 1.748257687s ago: executing program 5 (id=1016): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x43, 0x10, 0x8, 0x47}, {0x44, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0x9}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1", 0x1, 0x4a3978cf174d4898, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x64, &(0x7f0000000240)="01", 0x1) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="01", 0x1) msync(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r2, 0x3}) setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000003, 0x3}}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac00d4bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2f, 0x0, 0x37) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESHEX]) execve(0x0, 0x0, 0x0) 1.746025314s ago: executing program 4 (id=1017): chmod(&(0x7f0000000000)='./file0\x00', 0x35e) setuid(0xee01) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='r\x00') 1.74387441s ago: executing program 3 (id=1018): setuid(0xffffffffffffffff) r0 = shmget$private(0x0, 0x3000, 0x539, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x3, 0x0, 0x0, &(0x7f0000001300), 0x0) sysctl$hw(&(0x7f0000000100)={0x6, 0x6}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x23) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000200)="9f1809ff775128a910673dc7992bce3a3bd2b99c19be9093eb2c665c3a2459f7628c9af3af0db6831b4b60469d8931f66dcab38acbfabf9834b1382c5f25f705f62d52ab5f4c50f4efda1490ea65c199761fd4a72a455991d682316ad5347427732a85b0ad10c3cce34cf2e4d5cbd8999e3a3a53fd03523b6bd4770d79696dd19db4656eff7ddebc90a7571b53f142bc703ca418c5cb0dabc37100"/164, &(0x7f0000000040)=0xa4, 0x0, 0x0) 1.737172074s ago: executing program 0 (id=1019): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x109) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) chflags(&(0x7f0000000140)='./file1\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x637f) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 1.72879683s ago: executing program 7 (id=1020): close(0xffffffffffffffff) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './bus\x00'}, 0x8) sysctl$hw(0x0, 0x0, &(0x7f0000000140)="802732d7a0ea9200001f00385c2420fb000000000000000000f7301700", &(0x7f0000000000)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffdff, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0xfffffffffffffff8, 0x8000800000045, 0x0, 0x0, 0x2, 0x2008005, 0xfffffffffffffffc, 0x2}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1c2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) setreuid(0x0, 0xee01) setuid(0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fe, 0x1a, 0xfffffffe, 0x857, 0x3, 0x80000001, 0x17ffe, 0x10, [{0xffffffff, 0x10, 0x3, 0xa04}, {0xc5b, 0xb, 0x5, 0x1ff}, {0x800008, 0x20f05, 0x1fc, 0x7d2}, {0x7ffffffe, 0x3, 0x3, 0x784c}, {0x3fd, 0xd, 0x1002802, 0x4d8a}, {0x8, 0xff, 0x3, 0xb}, {0x8000008, 0x0, 0x81ea, 0x2d}, {0x2, 0x836, 0x17, 0x3}, {0x2, 0x40087e, 0x4, 0x10001}, {0x10001, 0xa74d125a, 0xffff, 0x40000088}, {0x1d9, 0x5, 0x4, 0x1}, {0x3, 0xa, 0x2000c, 0x40000010}, {0xb8d, 0x4, 0x8, 0x3}, {0x400, 0x83, 0x8, 0x6}, {0x400002, 0x7, 0xfffffff9, 0x100}, {0x200, 0x8, 0x801005, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x80, 0x12) mknod(0x0, 0x3a0914c44f7b202d, 0x504) close(r3) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)=@in={0x2, 0x3}, 0xc) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.245799767s ago: executing program 6 (id=1021): r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x2f, 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x5, 0x40000000, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0xfff, 0x0, 0x4, 0x2, 0x100], [0x3, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x8000001fe], [0x100000001, 0x2, 0x40000001, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0x3, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x5fb, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffff7, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x2, 0x3, 0x1000, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xffde, 0x80000000, 0x6d5, 0x2}}}) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r4, &(0x7f0000001280)=@file={0x0, ""/251}, &(0x7f00000008c0)=0xfd) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ioctl$VMM_IOC_CREATE(r6, 0xc2585601, &(0x7f0000000480)={0x10, 0x80000000000000, [{&(0x7f0000083000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7}, {&(0x7f0000662000/0x2000)=nil, &(0x7f0000287000/0x4000)=nil, 0x25b3}, {&(0x7f00005ea000/0xc000)=nil, &(0x7f0000552000/0x4000)=nil, 0x4}, {&(0x7f000031d000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x9}, {&(0x7f0000391000/0x1000)=nil, &(0x7f0000337000/0x1000)=nil, 0x6}, {&(0x7f000056f000/0x2000)=nil, &(0x7f00006fc000/0x3000)=nil, 0x4}, {&(0x7f00003df000/0x1000)=nil, &(0x7f000011d000/0x2000)=nil, 0xe}, {&(0x7f00003b4000/0x4000)=nil, &(0x7f000025d000/0x4000)=nil}, {&(0x7f00002c1000/0x3000)=nil, &(0x7f00005c1000/0x2000)=nil, 0x101}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9}, {&(0x7f0000769000/0x1000)=nil, &(0x7f0000189000/0x4000)=nil, 0x5}, {&(0x7f0000156000/0x1000)=nil, &(0x7f0000792000/0x3000)=nil, 0x148}, {&(0x7f00006e0000/0x3000)=nil, &(0x7f0000203000/0x2000)=nil, 0x3}, {&(0x7f0000015000/0x3000)=nil, &(0x7f0000616000/0x2000)=nil}, {&(0x7f0000305000/0x4000)=nil, &(0x7f000014f000/0x2000)=nil, 0x8}], './file0\x00', 0x20e4}) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETA(r8, 0xc450443c, &(0x7f00000000c0)={0x72f, 0xd8, 0xc47f, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2}) ftruncate(r7, 0x8531) setrlimit(0x4, &(0x7f0000000080)={0x8, 0xfffffffffffffffd}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001600)) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 1.24494272s ago: executing program 1 (id=1022): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7, 0x8016, 0x7fffffff, 0x40, 0x0, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x4, 0x71002}, {0x800, 0x9, 0x8, 0x1}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x800a}, {0x404, 0x1, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x99}, {0x2, 0x9, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x4}, {0x140, 0x8001, 0x6, 0x4}, {0x8f, 0x7fff, 0x6, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0xa3c, 0x8, 0xc}, {0x29a71717, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0xc, 0x88b0}]}) (async) syz_open_pts() syz_open_pts() (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32) r2 = socket(0x2, 0x4001, 0x0) (rerun: 32) r3 = dup(r2) listen(r3, 0xb) (async) accept$inet(r2, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xf, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) 1.243611237s ago: executing program 2 (id=1023): clock_settime(0x4, &(0x7f0000000000)={0x4, 0x8001}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = accept$unix(0xffffffffffffff9c, &(0x7f0000000140)=@file={0x0, ""/4088}, &(0x7f0000001140)=0xffa) unveil(0x0, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000001180), 0x10000, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r7 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r7, 0xffff, 0x1021, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r8 = syz_open_pts() close(r8) syz_open_pts() ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000000040)={0x27ffd, 0xcb6b, 0xfff9, 0x21d8b788, "fe00a4a318086056f9bb470000000000002200", 0x3d9, 0x8008037}) writev(r8, &(0x7f0000000700)=[{&(0x7f0000000e40)="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", 0x12b}], 0x1) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r9 = socket(0x18, 0x3, 0x0) setsockopt(r9, 0x1000000029, 0x37, &(0x7f0000000000), 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) kevent(r0, &(0x7f00000011c0)=[{{r1}, 0xfffffffffffffffc, 0x84, 0x80000000, 0x1, 0x3e46}, {{r2}, 0xfffffffffffffff9, 0x21, 0x40, 0x0, 0x9d3}, {{r3}, 0xfffffffffffffffc, 0x3a, 0x4, 0x0, 0xd2}, {{r4}, 0xfffffffffffffff8, 0x20, 0x1, 0xed, 0x8}, {{r5}, 0xfffffffffffffff8, 0xe2, 0x8, 0x9, 0x10000}, {{}, 0xfffffffffffffffd, 0x8, 0x4, 0x9, 0x1ff}], 0x400, &(0x7f0000001280)=[{{r6}, 0xfffffffffffffffc, 0x6a, 0x4, 0x0, 0x9}], 0x8, &(0x7f00000012c0)={0x5, 0xb}) 988.071µs ago: executing program 5 (id=1024): sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="0b45aa6a59c2300c93ad26e84d3fe2383c7f8c4199c9d84b271c680d8e05310da1b2f7ee7b6a1b068fe8a80f90", 0x2d}], 0x1, 0x0}, 0x401) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x809, 0x8, 0x63, 0xfffffff7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x16, 0x400003}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) getrlimit(0x3, &(0x7f0000000000)) (async) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x240, 0x0) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) 0s ago: executing program 4 (id=1025): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0xc0) r2 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x0, 0x0, r2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r4 = fcntl$getown(r3, 0x5) fcntl$setown(r1, 0x6, r4) close(r1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x84, 0x92, 0x3, 0x47}, {0x3, 0x10, 0xdf, 0x1}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) getpid() syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd80647b4ab0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error               OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error denied attempt to set clock back 4229876930 seconds pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at bpfdetach+0x40: movq 0(%r15),%r12 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace bpfdetach(ffff800001569800) at bpfdetach+0x40 if_detach(ffff800001569800) at if_detach+0x12b tun_clone_destroy(ffff800001569800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff8000314fd580) at if_clone_destroy+0x1d5 sys_ioctl(ffff80003c940550,ffff8000314fd750,ffff8000314fd6a0) at sys_ioctl+0x660 syscall(ffff8000314fd750) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x13e1dc76190, count: -7 ddb> show registers rdi 0xffff80003691c000 rsi 0x11c22 __ALIGN_SIZE+0x10c22 rbp 0xffff8000314fd470 rbx 0 rdx 0xffff80003691c000 rcx 0x11c21 __ALIGN_SIZE+0x10c21 rax 0xffffffff8137c939 bpfdetach+0x89 r8 0xffffffffffffffff r9 0 r10 0xb98479ba41d3c2d5 r11 0x690d2d402e503ce6 r12 0xdeaf0002deaf4152 r13 0xffff800001569d60 r14 0xffff800001569800 r15 0xdeaf0002deaf4152 rip 0xffffffff8137c8f0 bpfdetach+0x40 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000314fd440 ss 0x10 bpfdetach+0x40: movq 0(%r15),%r12 ddb> show proc PROC (syz-executor) tid=285059 pid=77978 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=82, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c941a10,0xffff80003c12c570 process=0xffff800035d19b18 user=0xffff8000314f8000, vmspace=0xfffffd8077350188 estcpu=32, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 90383 3536 60260 0 2 0 syz-executor 90383 498212 60260 0 3 0x4000080 fsleep syz-executor 27124 363358 51063 0 2 0 syz-executor 27124 465888 51063 0 3 0x4000080 fsleep syz-executor 76083 398803 79922 0 2 0 syz-executor 76083 424303 79922 0 2 0x4000000 syz-executor 76083 456812 79922 0 3 0x4000080 fsleep syz-executor 8689 265884 61717 0 2 0 syz-executor 8689 374555 61717 0 3 0x4000080 fsleep syz-executor 8689 432454 61717 0 2 0x4000000 syz-executor 49470 369440 92526 0 2 0x1 syz-executor 77978 296572 34554 0 2 0 syz-executor *77978 285059 34554 0 7 0x4000000 syz-executor 77978 280001 34554 0 2 0x4000000 syz-executor 43737 335919 54169 0 2 0x10 syz-executor 43737 34358 54169 0 3 0x4000090 fsleep syz-executor 43737 144805 54169 0 3 0x4000090 fsleep syz-executor 27820 292255 1 0 3 0x100083 ttyin getty 34554 364224 25679 0 3 0x82 nanoslp syz-executor 12144 224237 25679 0 3 0x82 nanoslp syz-executor 51063 335893 25679 0 3 0x82 nanoslp syz-executor 54169 135103 25679 0 3 0x82 nanoslp syz-executor 79922 404867 25679 0 3 0x82 nanoslp syz-executor 61717 393995 25679 0 3 0x82 nanoslp syz-executor 92526 321705 25679 0 3 0x82 nanoslp syz-executor 60260 501351 25679 0 3 0x82 nanoslp syz-executor 25679 70203 45078 0 3 0x82 kqread syz-executor 45078 412534 85262 0 3 0x10008a sigsusp ksh 85262 513558 90675 0 3 0x98 kqread sshd-session 90675 168135 20232 0 3 0x92 kqread sshd-session 20232 93032 1 0 3 0x88 kqread sshd 18654 410758 15750 73 3 0x1100090 kqread syslogd 15750 157187 1 0 3 0x100082 sbwait syslogd 62162 390071 1 0 3 0x100080 kqread resolvd 35743 29145 34971 77 3 0x100092 kqread dhcpleased 49679 400084 34971 77 3 0x100092 kqread dhcpleased 34971 22400 1 0 3 0x80 kqread dhcpleased 4827 386591 0 0 3 0x14200 bored smr 34550 13657 0 0 2 0x14200 zerothread 62740 315173 0 0 3 0x14200 aiodoned aiodoned 61440 302798 0 0 3 0x14200 syncer update 84712 462680 0 0 3 0x14200 cleaner cleaner 89506 296283 0 0 3 0x14200 reaper reaper 96853 65903 0 0 3 0x14200 pgdaemon pagedaemon 96795 360390 0 0 3 0x14200 bored viomb 72991 496578 0 0 3 0x40014200 acpi0 acpi0 57159 213261 0 0 3 0x14200 bored softnet0 15294 46356 0 0 3 0x14200 bored systqmp 35744 52145 0 0 3 0x14200 bored systq 29717 452309 0 0 3 0x40014200 tmoslp softclock 17613 491942 0 0 3 0x40014200 idle0 1 482183 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11066 12279K 13156K 166960K 15119 0 pcb 17 17K 19K 166960K 392 0 rtable 255 11K 11K 166960K 620 0 pf 36 13K 15K 166960K 192 0 ifaddr 44 7K 8K 166960K 108 0 ifgroup 58 2K 2K 166960K 171 0 sysctl 4 1K 9K 166960K 12 0 counters 36 18K 18K 166960K 157 0 ioctlops 0 0K 4K 166960K 611 0 iov 0 0K 24K 166960K 60 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1493 94K 94K 166960K 2822 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 21 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 169 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 1203 0 sigio 0 0K 0K 166960K 17 0 proc 60 59K 108K 166960K 697 0 subproc 72 4K 4K 166960K 100 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 169 0 in_multi 94 6K 7K 166960K 180 0 ether_multi 1 0K 0K 166960K 8 0 mrt 1 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 595 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 244 160K 187K 166960K 12872 0 UVM aobj 33 8K 8K 166960K 37 0 pinsyscall 39 78K 95K 166960K 2401 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 60 0 NDP 14 0K 2K 166960K 72 0 temp 67 8669K 8734K 166960K 57458 0 kqueue 14 22K 30K 166960K 190 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 127 0 123 1 0 1 1 0 8 0 rtentry 136 179 0 78 4 0 4 4 0 8 0 unpcb 144 1038 0 1021 8 4 4 4 0 8 3 syncache 336 11 0 11 4 3 1 1 0 8 1 tcpqe 32 7 0 7 2 2 0 1 0 8 0 tcpcb 736 592 0 546 20 15 5 16 0 8 0 arp 96 27 0 9 1 0 1 1 0 8 0 ipq 40 11 0 7 1 0 1 1 0 8 0 ipqe 40 16 0 12 1 0 1 1 0 8 0 inpcb 328 1445 0 1396 24 17 7 15 0 8 2 ip6q 72 4 0 1 1 0 1 1 0 8 0 ip6af 40 6 0 3 1 0 1 1 0 8 0 nd6 112 39 0 15 1 0 1 1 0 8 0 pkpcb 40 6 0 6 2 1 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1072 107 0 105 2 1 1 1 0 8 0 pppxif 1384 9 0 9 3 2 1 1 0 8 1 pfrktable 1344 2 0 2 2 1 1 1 0 8 1 rttmr 136 3 0 3 1 1 0 1 0 8 0 art_heap8 4096 4 0 1 3 0 3 3 0 8 0 art_heap4 256 842 0 413 30 0 30 30 0 8 1 art_table 40 846 0 414 5 0 5 5 0 8 0 art_node 32 179 0 90 1 0 1 1 0 8 0 sysvmsgpl 40 73 0 70 1 0 1 1 0 8 0 semupl 112 3 0 3 3 2 1 1 0 8 1 semapl 112 164 0 154 1 0 1 1 0 8 0 shmpl 112 31 0 3 1 0 1 1 0 8 0 dirhash 1024 32 0 15 3 0 3 3 0 8 0 dino2pl 256 3636 0 2132 95 0 95 95 0 8 0 ffsino 256 3636 0 2132 95 0 95 95 0 8 0 nchpl 144 5264 0 3562 64 0 64 64 0 8 0 rtmask 32 7 0 7 2 1 1 1 0 8 1 vnodes 216 4637 0 0 258 0 258 258 0 8 0 namei 1024 19602 0 19602 6 5 1 4 0 8 1 vcpupl 3904 3 0 1 1 0 1 1 0 8 0 vmpool 808 3 0 1 1 0 1 1 0 8 0 kstatmem 264 98 0 70 3 0 3 3 0 8 1 scsiplug 72 9 0 9 3 2 1 1 0 8 1 scxspl 216 15771 0 15771 11 9 2 8 1 8 2 plimitpl 152 326 0 309 1 0 1 1 0 8 0 sigapl 424 1496 0 1453 7 1 6 6 0 8 0 knotepl 120 308702 0 308654 32 22 10 10 0 8 8 kqueuepl 184 302 0 291 1 0 1 1 0 8 0 pipepl 304 269 0 241 3 0 3 3 0 8 0 fdescpl 448 1482 0 1452 5 1 4 5 0 8 0 filepl 120 10549 0 10289 18 7 11 14 0 8 2 lockfpl 104 635 0 633 2 1 1 2 0 8 0 lockfspl 48 185 0 183 1 0 1 1 0 8 0 sessionpl 144 31 0 23 1 0 1 1 0 8 0 pgrppl 48 120 0 104 1 0 1 1 0 8 0 ucredpl 104 1849 0 1836 1 0 1 1 0 8 0 zombiepl 144 2037 0 2036 2 1 1 1 0 8 0 processpl 1152 1496 0 1453 4 0 4 4 0 8 0 procpl 664 3260 0 3207 7 1 6 6 0 8 0 sosppl 176 4 0 4 2 2 0 1 0 8 0 sockpl 552 2719 0 2649 28 18 10 19 0 8 5 mcl64k 65536 182 0 181 1 0 1 1 0 8 0 mcl9k 9216 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 18 0 18 4 3 1 1 0 8 1 mcl4k 4096 3873 0 3817 14 6 8 14 0 8 0 mcl2k 2048 1973 0 1966 5 3 2 3 0 8 0 mtagpl 96 272 0 10 8 1 7 7 0 8 0 mbufpl 256 18206 0 17755 94 59 35 86 0 8 4 bufpl 280 5410 0 126 378 0 378 378 0 8 0 anonpl 24 217949 0 210085 94 21 73 73 0 187 0 amapchunkpl 152 43447 0 42873 56 28 28 38 0 158 5 amappl16 200 3815 0 3565 35 9 26 26 0 8 2 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 6 0 5 1 0 1 1 0 8 0 amappl13 176 443 0 441 1 0 1 1 0 8 0 amappl12 168 1858 0 1819 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 70 0 60 1 0 1 1 0 8 0 amappl9 144 257 0 256 1 0 1 1 0 8 0 amappl8 136 18 0 16 1 0 1 1 0 8 0 amappl7 128 95 0 92 1 0 1 1 0 8 0 amappl6 120 305 0 294 1 0 1 1 0 8 0 amappl5 112 76 0 69 1 0 1 1 0 8 0 amappl4 104 432 0 406 1 0 1 1 0 8 0 amappl3 96 8450 0 8340 5 1 4 4 0 8 0 amappl2 88 605 0 551 2 0 2 2 0 8 0 amappl1 80 15265 0 14723 15 2 13 15 0 8 0 amappl 88 11872 0 11698 5 0 5 5 0 92 0 uvmvnodes 80 131 0 0 3 0 3 3 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 256 0 256 2 2 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 36 0 4 1 0 1 1 0 8 0 uaddrrnd 24 1482 0 1452 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1482 0 1452 1 0 1 1 0 8 0 vmmpekpl 168 13742 0 13696 3 0 3 3 0 8 0 vmmpepl 168 101094 0 99017 115 13 102 102 0 357 4 vmsppl 368 1481 0 1452 4 1 3 4 0 8 0 rwobjpl 40 28497 0 27256 18 2 16 16 0 8 0 pdppl 4096 2977 0 2908 136 67 69 81 0 8 0 pvpl 32 642184 0 628588 209 55 154 154 0 265 9 pmappl 216 1484 0 1453 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 525 0 167 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace bpfdetach(ffff800001569800) at bpfdetach+0x40 if_detach(ffff800001569800) at if_detach+0x12b tun_clone_destroy(ffff800001569800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff8000314fd580) at if_clone_destroy+0x1d5 sys_ioctl(ffff80003c940550,ffff8000314fd750,ffff8000314fd6a0) at sys_ioctl+0x660 syscall(ffff8000314fd750) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x13e1dc76190, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace bpfdetach(ffff800001569800) at bpfdetach+0x40 if_detach(ffff800001569800) at if_detach+0x12b tun_clone_destroy(ffff800001569800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff8000314fd580) at if_clone_destroy+0x1d5 sys_ioctl(ffff80003c940550,ffff8000314fd750,ffff8000314fd6a0) at sys_ioctl+0x660 syscall(ffff8000314fd750) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x13e1dc76190, count: -7