last executing test programs:

11.348133754s ago: executing program 1 (id=96):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0)
close(r0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
setreuid(0xee00, 0x0)
r1 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff)
faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0)

11.347944601s ago: executing program 1 (id=97):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000027, 0x101, 0x4, 0xa1b0, 0x10001, 0x10, [{0x4, 0x288f, 0x2, 0x71002}, {0x3, 0x9, 0xfffffffd, 0xfffffff9}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x1, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x10001, 0x5, 0xca9}, {0x8, 0x8009, 0x1000, 0x204}, {0x1cc, 0x10004, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0xb94, 0x807, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1000c, 0x5, 0x5, 0x3}, {0x0, 0x0, 0xfff, 0x20010001}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0xffff, 0x0, 0xffffffffffffffff, 0x1, 0x800000000000108, 0x5, 0x7})
pipe(&(0x7f00000001c0))
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000200)=""/93, 0x5d}], 0x3)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0))
socket(0x24, 0x2, 0x0)

10.074881044s ago: executing program 1 (id=135):
r0 = socket(0x18, 0x3, 0x1)
sendsyslog(0x0, 0xfffffffffffffe6d, 0x4)
getsockopt(r0, 0x29, 0x2c, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

10.070914951s ago: executing program 1 (id=137):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
dup(r0)

4.734389798s ago: executing program 1 (id=211):
ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443c, &(0x7f00000000c0)={0x72f, 0xc8, 0x8, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2})
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00')
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x100, 0x82)
r1 = open$dir(&(0x7f0000000100)='./file2\x00', 0x10, 0x40)
renameat(r0, &(0x7f0000000040)='./bus/../file0\x00', r1, &(0x7f0000000140)='./file1\x00')

4.708953872s ago: executing program 1 (id=216):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f0000000100))
r1 = syz_open_pts()
ioctl$TIOCSTAT(r1, 0x20007465, 0x0)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000240)=0x8)
unveil(0x0, &(0x7f00000003c0)='c\x00')
ioctl$TIOCCHKVERAUTH(r1, 0x2000741e)

3.698116649s ago: executing program 5 (id=252):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000002d00)) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0)

3.578303012s ago: executing program 5 (id=257):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x1}, 0x1c, 0x0, 0xfffffffffffffea8}, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="fbbcc4af05006cc15eda4762a7b213bc78d71063e717ff7f38800a81efddc4b9"])

3.472547971s ago: executing program 5 (id=260):
sysctl$net_inet6_ip6(&(0x7f0000002c00)={0x4, 0x18, 0x29, 0x32}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
r0 = syz_open_pts()
syz_open_pts()
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x101}]})
ioctl$BIOCSETWF(r1, 0x8010427f, &(0x7f0000000340)={0x0, 0x0})
syz_open_pts()
kqueue()
open$dir(&(0x7f0000000100)='./file0\x00', 0x20000, 0x22)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x86, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0xf5d)

3.472210194s ago: executing program 5 (id=261):
setrlimit(0x8, &(0x7f00000000c0)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000940)=0x2)
syz_open_pts()
setrlimit(0x0, &(0x7f0000000640)={0x7fffffffffffffff, 0x5})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000340)={0xe, 0x2, 0x7ffffffd, 0x4006, 0xa, 0x40, 0x805017, 0x10, [{0x90, 0xfd29, 0x7, 0x6}, {0xbb6, 0x0, 0x6, 0x777}, {0x5, 0x10000, 0x81, 0x200}, {0x0, 0x1, 0x8, 0x1}, {0x4, 0x407, 0x5, 0xc}, {0xb1e4, 0x7, 0x1003, 0x2}, {0x1, 0x7, 0xffffffff, 0x9}, {0x3, 0x6, 0x10}, {0xd, 0xb, 0x4, 0x4}, {0x3, 0x9c, 0x1, 0x6}, {0xfffffffc, 0x8, 0xc, 0x8}, {0x424, 0x7ffd, 0x7, 0x3}, {0x809, 0x1002, 0x6}, {0x8bc, 0x4, 0x200}, {0x8, 0xfffffff3, 0x7, 0x7}, {0xfffffffc, 0x5, 0x0, 0x4}]})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/206, 0xce}], 0x7)
writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000180)="b9653c21afbe096af10cc301652d436c7314d4c544f8652c26ecced574c63cb389496edf03fd5b", 0x27}, {&(0x7f0000001000)="619a6faa87b97e89fb2822a862c0675e43a490baae639f5d76f3bf19af32c6efcc571d8bbb52c9b4b9016d791b5dfea7f96e1ba2be94c6cac78dfd66cf413b946a86bfa2cb2f10f801e92047dad80580238d9c39441e5a7cb9c7dad342900f0b1fd79b2d6be807af7a3db7396c98a59bc1c873ed2f98f5ddd86b4cc5b67f92be20e15f28675566fd68eafc61165ca330e13007a3547a25572dc3b2073b4137171c277f60c59919ba0ebb27f284e8edd371d83a4f23c88c96936a0ec6d076f86158b3747e8cfd3ad9235e47a18dc2f2da2a39be6b5a31c2ac2bd0952332e6458070c1b270c330bd62d24f6924bd6ae8bfe5e75903719028ca6d7470caa90d0656c4f68552388f86ffacccd18350834249893e36bee58cd9df60007b6ac550328a433b0e00fd8767e0cbd5d02a3bbfae85368d1e13d33063d339de4f6248fd2af860592e840e5abf508ef0b36374d7daa0737d4387f165d9fdcf61c0d01a41e0b9ef403ad84b9fd6986fee84edf77f72758d8b0f4d9196191a89a9f2", 0x17b}, {&(0x7f0000000bc0)="80d7ee7095bd0d38f6d7b24ba305cc44476a77b5302ade040af3d502c65df7db807d6cdc592e9b45169c3f7f5e9714093ef18737f06bea8944ab5c54dc3184a833e3659f60638a1b9a2c303fc8", 0x4d}, {&(0x7f0000000700)="b410c365322d722a60a93c93be6702870bfa55e955c351e9a3d63c", 0x1b}, {&(0x7f0000000c40)="04c0bd5eacdb11ce3cd6c4d45bcd2d4e954856755df790c2dab2a030f72a0213f85fdb821ba0cd39b5872d44f174439ae7e91c3d5bd59599faea1c834b9303b93346fb64a116852f228d5be114502cd6770a07902a3e0500ddf5a13d6baecc1a340fead125b37e2a9ca28a43cec1e240b9ca8b16c78f56626a23099a4382c08319f613134d5d69116d3a37609d3fd9e1056a7b4712d692d94e57e3800d054fefb75a8fdb89311483ab5e93b78293cd0ef55cd6cf", 0xb4}, {&(0x7f0000000d00)="f564fa944ce59618aeff13ea2c5b68bcb5e5f42b97a8fe294de751766677342631d13ff4f70672f64a24ffa5140151a1ef7a973dcf3cd848bd24aa2f786607bad0b7ed645b84044dedc8a4b7642bc593ed995c4e18465bc4b819029ed39f6f01525871649a1f2aec73698b0cef6e84b0f6ffbb615f39611b0ed6fac508c68714e10e7bcb25aa1d9a2f69bc5ee3790e5fde08d9ee19dec180a11bce", 0x9b}, {&(0x7f0000001500)="5b950e2a4baf0444d4b88a1a1c9ac23e8edd7643d1b5baed9d6cbce7e9158b85787d32e39d0f045f2bbf8a3a27e62ed45b56202af720706985bd54eda0b6b6df7c6d6213575a7e3a754559059207b58b31310e931531b2c39d155b0f8fe6bd7238c4fee815cc231b3969cfbecfc3fed27178cdcf475a035728d6cee0731393b1ceb91ecff18dad05a25a2f175919bbf25a7e7698f1fa32475fc198a4d69485960faf28706ff01adfdd15016b15a62d06000000000000004a6244c84822234184f42e32b0f88e98a4f3d8c257f4250a90dbecdc9d1dc0effb5c711b9d6f718ecee83b119ae7929f02c13c2a4cb8f436e0aef5934383ee453a2e5b1663e3ffc9a0a30fc99902b7459b79a3773befea1f9f430aca1565c82bf88143a5cb5c7911af2c3d8b6624891c8ea13ab9e027e84fc6e96c79192f38301228464081bfafacaf34c56db83af0bf30cf504674edb3146e98111279cff9f1c538584d613daf46d98621443499579db8c77dedcf065d39e71714bfe6007299b965d943cfc8be07208147ebbc213822796122710b406b85588a9c646ff358a627cccc6b216b0d1b0a93971430036a82d6acc9737432d61df8f4253ad497cc4d96ea4b5b451055861eb165", 0x1c2}, {&(0x7f0000001700)="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"/281, 0x119}, {&(0x7f0000001380)="60d6934ed46a0312e0ec3acc5fea9c225c5fbe070fdc9c15dd46a602e4c6d2fe5e17a323874b0dbd51bd91409b392194415a6684dbc4122bf94dc742cbc6082f5ab658a914ebf5a62f1d21f283527a5db5b038441dcac76a92a7dd2547553706d2e0e5d3413f840447fdc151fc003008c2c19f2f54aa28f3704a1e9564921b676e8dee1b06a55d9b792bfae77a24b75cac6f2c205f09793a922f002a4850eece63a5d6ea1a0ce23dd03c2812716938ce86b1472ed48eeff6a3b18aa61b8706ad201310a9da22edd9a4086f33ebb210eede4a59c6faab44ef66d5c4d66bf588c4a0cf07155169af861965d7ef8d5771def97d9bf54cf032cf67a1d6143c1ba9368c3705f297aaadd9a2b87c8cd6e2cc52ee43c8290400915e1cca49a2a9c305a5a71bd1208deea1fa33c46df11a6e998b4b23f99559540a3e1b7b9febd1a3d209e31e19a148b04c62a732208d535533a6e67fe91e589afcb5823c5f7f13a0c2dcb9131f8cc67f26543e87cbfdb6238116e2f960", 0x173}, {&(0x7f0000000b00)="4325e265d32ddc456761e5e185483620b1905576062ed5f406ed7e5b8d13e7fa7fa74f294b40508bb3bfe7dc6639eac110b765a5ea10eb528f9a32609411a474e10060", 0x43}], 0xa)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r2, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f00000009c0)={0x7ffffffc, 0x6, 0xf98, 0x1, 0xae, 0x80, 0x42, 0x10, [{0x7fff, 0x4f, 0x2, 0x5}, {0x9, 0x0, 0x8, 0x6}, {0x7ff, 0x3, 0x8001, 0x1074}, {0xa, 0x7fffffff, 0x4, 0x7}, {0x1e48, 0xcdc, 0xffff}, {0xfffffff2, 0x8, 0x774, 0x9}, {0x2879, 0x8001, 0xfffffff0, 0x80000001}, {0x8000, 0x5, 0x6, 0xffffffff}, {0x80, 0x2, 0x3, 0x80}, {0xe9, 0x8e, 0x7, 0x3}, {0x5, 0x6, 0x7, 0xe}, {0x4, 0xa, 0x7, 0xabcb}, {0x4, 0x1ff, 0x6, 0x8}, {0x2, 0xe378, 0x90ae, 0x6}, {0x4, 0x5, 0xa, 0x100}, {0x14, 0x6, 0xb, 0x40}]})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r1, 0x0)

3.471226768s ago: executing program 0 (id=262):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x10000, 0x1, 0x200023})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0xc002, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0d5508569d4f71352c71173ceb7b", 0xe}, {&(0x7f0000000180)="7f9aabfa543931601e359186961e2f1b305c4cb26ad6265cc3f3d58edfd828d0a3093155a72acbe545fdfdc51c80f71ca506a24df93425ba4e78415cbf13c6326785e3f53154195086a015c05cb09b5b99dc4a31225eee7b3b6785c218ffd968db68e3f497b563b7a59c9cb93b10241e9db5278f7a201f78df919bfa67de335b6ab027a69820c7226b3b13b31841321e1b32f24ebbd76218", 0x98}], 0x2)
ftruncate(r1, 0x7)
dup(r1)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0xdead4110)

3.441467784s ago: executing program 0 (id=263):
r0 = kqueue()
kevent(r0, 0x0, 0x5, 0x0, 0x401, &(0x7f0000000480)={0x4, 0x80000000}) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r0], 0x228}, 0x400) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0) (async)
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
r2 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffff7fff070b1eac1400aa7f000001000e009078000b0008000003fc0000000400000009"]) (async)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async)
r3 = kqueue()
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x3a, 0xf0000000, 0x7, 0x8001}, {{}, 0xfffffffffffffffd, 0x26, 0xf0000000, 0x7, 0x9}, {{0xffffffffffffff9c}, 0xfffffffffffffffe, 0x20, 0x0, 0x10000008, 0x6}, {{}, 0xfffffffffffffffc, 0x17, 0x8, 0xe2, 0x400}, {{r1}, 0xfffffffffffffffb, 0xb0, 0xfffff, 0x4, 0x1}, {{r0}, 0xfffffffffffffffb, 0x92, 0x1, 0x7fffffff, 0x6}], 0x2015, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
socketpair(0x2, 0x8004, 0xa7, 0x0)
r4 = socket(0x2, 0x4, 0x4)
setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r5 = socket(0x2, 0x4001, 0x0)
listen(r5, 0xb)
accept(r4, 0x0, 0x0) (async)
setreuid(0x0, 0x0) (async)
connect$unix(r4, &(0x7f0000000000), 0x10) (async)
getsockopt$sock_int(r4, 0xffff, 0x20, 0x0, 0x0) (async)
getgroups(0x0, 0x0)
r6 = shmget(0x2, 0x1000, 0x681, &(0x7f0000ffc000/0x1000)=nil)
fchown(0xffffffffffffffff, 0x0, 0x0) (async)
shmctl$IPC_SET(r6, 0x1, 0x0)
write(r4, &(0x7f0000000040)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xfe62)

3.416477575s ago: executing program 0 (id=266):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffffff9, 0xffff63dc, 0x9, 0xffffffff, 0x8, 0x8007c, 0x47, 0x10, [{0x8, 0x10000, 0xfffff115, 0x80000002}, {0x0, 0xffffffff, 0x200100, 0xfff}, {0xcd5, 0x4baa, 0x0, 0x9}, {0x7, 0x20fe, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0x1}, {0x3893, 0xfffd, 0x8, 0x9}, {0x10004, 0xa00, 0x3, 0xfffffffe}, {0x207, 0xffffffff, 0x228000, 0xffffe2e9}, {0x9, 0x1000, 0x5, 0x7fff}, {0x3, 0x1, 0x7, 0x8bfd}, {0x86, 0x0, 0x8a3a0004, 0x2000a}, {0x10000, 0x0, 0x4, 0xa6a}, {0x401, 0x0, 0x400009, 0x4}, {0x3, 0x2, 0x2, 0x6f5fc48f}, {0x3, 0xff, 0x3, 0x9}, {0x9be2, 0x1, 0xfffffffe, 0xb}]}) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r0 = socket(0x11, 0x3, 0x0) (async)
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$SPKRTONE(r1, 0x80085301, &(0x7f00000001c0)={0x665, 0x8cf4}) (async)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0)

3.414445198s ago: executing program 0 (id=268):
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000007c0), 0x821, 0x0)
r1 = open(&(0x7f0000000340)='./bus\x00', 0x40380, 0x14e)
r2 = syz_open_pts()
ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000002640)={0x1a49, 0x6549})
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@in6={0x18, 0x0, 0x5, 0xa}, 0xc)
r3 = socket(0x2, 0x2, 0x0)
bind(r3, &(0x7f00000003c0)=@in={0x2, 0x3}, 0xc)
pread(r1, &(0x7f0000000180)="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", 0x118, 0x0)
r4 = socket(0x1, 0x4, 0x1)
r5 = socket(0x18, 0x4000, 0x0)
setsockopt(r5, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4)
listen(r5, 0x6)
close(r4)
fchdir(r4)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a", 0x2}], 0x1, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r6, &(0x7f0000000000)="ed", 0x1)
recvmmsg(r6, &(0x7f0000000300)={&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0}, 0x89}, 0x10, 0x40, 0x0)
recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2)
execve(0x0, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]})
r8 = socket(0x18, 0x4, 0xe)
sendto$unix(r8, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0)
r9 = getegid()
setegid(r9)
poll(&(0x7f0000000040)=[{r1, 0x2}, {r0, 0x4}, {r0, 0x4}, {r0, 0x1}, {r1, 0x100}, {r1, 0x10}, {r1, 0x100}], 0x4d, 0x6)

3.342150416s ago: executing program 0 (id=273):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
setrlimit(0xf, &(0x7f00000008c0)={0x6, 0xfbf})
syz_open_pts()
sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x1f, 0x4, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
getrlimit(0x6, &(0x7f0000000000))
close(r0)
setrlimit(0xa9ffcf1b8568ff01, &(0x7f0000000980)={0xffffffff, 0x10000000})
pipe(0x0)
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x17}, 0x4, &(0x7f00000002c0)="926456a0949c63e467caf1d1e291a51eb3757ff9a4e8def2ef74f6f2c3c5a0d17c388ac8d4e175ea84a5b2fa1044357615f38025ea7d1f122102fe2c6f6e91994d0940b1013160fcb7c588d263c4ac9df4cf7aa937662867c33bf9f151a37e78730af0725a1190934b28be9b8ba6ffa23bb413717e4f4b13bad4a6049ce246c6fe113c667551da34a3fd84ab61c96d92c89a741667a43f5247e191fc1a6513ab81f58fdc11ea9ebb701eb526e4c95b3df567ab94aa71169baebaed27174592a1c67b43b088d65a5bfb771bd82ba2f6ace5ea209f9bb4b52262aa6f07743b8ddf20cc82bfb82b1d74f59b1491963d56", &(0x7f00000001c0)=0xef, &(0x7f0000000240)="9b61bf5e", 0x4)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000640)="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", 0xfb}], 0x2)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x211, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x5dee, 0x91, 0x3, 0x2}, {0x3, 0x4, 0xfb, 0x9}, {0x16, 0x82, 0x8, 0xfffff7fe}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
sysctl$hw(0x0, 0x0, &(0x7f0000000180)="0060054d3d931dc908000000000000002dec30c21761035c2532d7a0ea9200001f00387e24fc3be7b6e1a8846584961faf44a4cc678de8c68b0133ae4c9b4fe363eb14e17a61750d114f84015073aac538b1113b5638440842a11831089289a7", &(0x7f0000000000)=0x60, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[])
pipe2(&(0x7f0000000140), 0x10000)
open$dir(&(0x7f0000000080)='./file0\x00', 0x20000, 0x0)
r2 = socket(0x2, 0x8000, 0x4)
close(r2)
socket(0x1, 0x2, 0x8)
ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000000280)={0x4, 0xfffffffd, 0x5a0, 0x0, "0800140000fffbf6ed010076d0f0ef69d5b1b1ad", 0x200, 0x9})
setsockopt(r2, 0x6, 0x41, &(0x7f0000000280), 0x1c)
setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000100)=0xbd, 0x4)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/23, 0x17)

3.210717813s ago: executing program 0 (id=277):
r0 = syz_open_pts()
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r1, 0x8004667d, &(0x7f0000000080)={0x2, 0x3})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setuid(0xee01)
fchflags(r2, 0x10009)
kevent(r1, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffffa, 0x4, 0x2, 0x1, 0x9}, {{r0}, 0xfffffffffffffffa, 0x4, 0xfffff, 0x9, 0x952}, {{r0}, 0xfffffffffffffffc, 0x4, 0x8, 0xc, 0x6}, {{r0}, 0xffffffffffffffff, 0x19, 0x2, 0x8, 0x9}, {{r0}, 0xfffffffffffffffd, 0x80, 0x2, 0x3, 0xffffffffffff8d34}], 0x191, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffff9, 0x8, 0x40000000, 0xc, 0xf44c}, {{r0}, 0xfffffffffffffffa, 0x20, 0x4, 0x3ff, 0x2}, {{r0}, 0xfffffffffffffffa, 0x40, 0x1, 0x6, 0x8}, {{r0}, 0xfffffffffffffffa, 0x1, 0xf0000000, 0x5, 0xa}, {{r0}, 0xfffffffffffffff9, 0xf0, 0x2, 0xfffffffffffffe00, 0x6}, {{r0}, 0xfffffffffffffff9, 0x4, 0x20000000, 0x5ae3, 0x7}], 0x6915669f, &(0x7f0000000000)={0x81})
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x0, 0x192, 0xffef9ff6, 0x10, "4b06a6bcff0300dba800000000000800", 0x0, 0x2})
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x9}, 0x4, 0xffffffffffffffff, &(0x7f0000000040)=0xffffff9f, 0x0, 0x0)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc", 0x1c}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09", 0x48}], 0x2)
r3 = syz_open_pts()
fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000})
flock(r3, 0x1)
flock(r3, 0x3)
fcntl$lock(r3, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001})
ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f00000002c0)={0x7, './file0\x00'})
syz_open_pts()

3.178568229s ago: executing program 5 (id=283):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x1, 0x3c, 0x0, 0x3}, {0x1, 0x9, 0x5, 0x1}, {0x3c56, 0x4, 0x36}]})
syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x2e, 0x29, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x11, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) (async)
syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x2e, 0x29, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x11, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}})
r1 = socket(0x18, 0x2, 0x0)
r2 = socket(0x18, 0x2, 0x0)
dup2(r1, r2) (async)
r3 = dup2(r1, r2)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0x0)
mmap(&(0x7f000069c000/0x1000)=nil, 0x1000, 0x2, 0x11, r4, 0x0)
ftruncate(r4, 0x8531) (async)
ftruncate(r4, 0x8531)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$TIOCGETA(r5, 0x402c7413, 0x0)
ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f00000006c0)=0xbcff) (async)
ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f00000006c0)=0xbcff)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0)
madvise(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x6)
lseek(r4, 0x8, 0x0) (async)
lseek(r4, 0x8, 0x0)
ioctl$BIOCSDIRFILT(r3, 0x8004427d, &(0x7f0000000080)=0x49)
setsockopt(r3, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) (async)
setsockopt(r3, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
setrlimit(0x8, &(0x7f00000000c0)={0x8, 0x54})
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0)
ioctl$BIOCSRTIMEOUT(r6, 0x8010426d, &(0x7f0000000300)={0x2, 0xfffffffffffffffb}) (async)
ioctl$BIOCSRTIMEOUT(r6, 0x8010426d, &(0x7f0000000300)={0x2, 0xfffffffffffffffb})
syz_open_pts() (async)
r7 = syz_open_pts()
r8 = socket(0x18, 0x3, 0x0)
close(r8) (async)
close(r8)
bind$unix(r8, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0xa)
close(r8)
ioctl$TIOCSFLAGS(r7, 0x8004745c, &(0x7f0000000240)=0x40)
syz_open_pts()
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000180)={0x42b78c, 0x80000001, 0x1, 0x80a199, "bb0800ff010900d91050080000000f0000004000", 0x9, 0x80000001})

2.686126984s ago: executing program 5 (id=290):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents(r1, 0x0, 0x0) (async)
getdents(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
pipe2(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
writev(r3, &(0x7f0000000280), 0x0) (async)
writev(r3, &(0x7f0000000280), 0x0)
close(r4)
select(0x40, &(0x7f0000000080)={0x8, 0x3ff, 0x0, 0x7, 0x0, 0x1, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x8, 0x0, 0x2, 0x4, 0x2}, 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r5 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r5)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r6, 0x0)
clock_gettime(0x0, &(0x7f00000014c0)) (async)
clock_gettime(0x0, &(0x7f00000014c0))

1.508164905s ago: executing program 2 (id=335):
syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @random='\x00C\x00', [], {@ipv6={0x86dd, {0x4, 0x6, 'A\a\x00', 0x0, 0x2b, 0x4, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}})
sysctl$net_mpls(&(0x7f0000000000)={0x4, 0x21, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x1405, "08040000200000008df039ea4e8fcd5200000005", 0x20004917, 0x2})
open(&(0x7f0000000240)='./file0\x00', 0x800, 0x1)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x17b)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x7fffffff, 0x101, 0x5, 0x6, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0x9}, {0x8, 0xd86, 0x6d, 0x9}, {0x1, 0x1800, 0x8007}, {0x401, 0x200726, 0x2800, 0x5}, {0xcf, 0x6, 0x1003, 0x99}, {0xcdf, 0x1dbf, 0x6, 0x3}, {0x6, 0xfff, 0x80000014, 0x8}, {0x7fffffff, 0x1082, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x8b}, {0x1ce, 0xffff, 0x8, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0xf, 0x3}, {0x29a71717, 0xfffffffa, 0x985, 0x6}, {0xfffffff9, 0xf4, 0x5}, {0x0, 0x1, 0x1802, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r2)
r3 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgctl$IPC_SET(r3, 0x1, 0x0)
r4 = syz_open_pts()
close(r4)
r5 = syz_open_pts()
ioctl$FIOASYNC(r5, 0x80047460, &(0x7f00000000c0)=0x9)
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x8, 0xffffffff, 0xffffdf82, 0x9, "08ed95b00900000000000000ffffffffffffffe6", 0x9, 0x4})
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket(0x2, 0x2, 0x0)
write(r6, &(0x7f0000000980)="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", 0x5c6)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

1.37674593s ago: executing program 2 (id=343):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
kqueue()
open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x92641ebb10d02e16)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8)
writev(r1, &(0x7f0000000100)=[{&(0x7f00000009c0)="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", 0x51c}], 0x1)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1, 0x7}, {0x2, 0xff03}, {0x2, 0x101}, {0x0, 0x810}, {0x2}, {0x5}, {0x3, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {0x3, 0x9}, {0x3}, {0x2, 0xfffffffc}, {0x3, 0x7fc}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf208}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x1ff}, {0x2, 0x8}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x4}]})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x33}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x2, 0x3, 0x1)
setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc)
connect$unix(r2, &(0x7f0000000000), 0x10)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000001c0)={0xffffffff, 0x4}, 0xfffffffffffffe56)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x4)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
r3 = kqueue()
r4 = dup(r3)
r5 = kqueue()
kevent(r5, &(0x7f0000001140)=[{{r4}, 0xfffffffffffffffa, 0xc7, 0x0, 0x7ffffbff, 0x800000000000008}], 0x30, 0x0, 0x57d, 0x0)
close(0xffffffffffffffff)
pipe2(&(0x7f0000000080), 0x0)
kevent(r5, 0x0, 0x0, &(0x7f0000000500), 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)

980.402408ms ago: executing program 2 (id=356):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd4, 0x8, 0x80000001, 0x4, 0x10, [{0x0, 0x3, 0x3, 0xa24}, {0xc5c, 0xb, 0xa, 0x1ff}, {0x800008, 0x20f05, 0x200, 0x6}, {0x7ffffffe, 0x3, 0x3ff, 0x1}, {0x3fd, 0xd, 0x1002802, 0x4d8a}, {0x3, 0xff, 0x80003, 0x6}, {0x8000008, 0x7, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x4, 0x5, 0x9}, {0x1000004, 0xa74d925a, 0xd1b, 0x88}, {0x1c4, 0x5, 0x8, 0x412c8391}, {0x3, 0x6, 0x20002, 0x1ff}, {0xb8d, 0x7fffffff, 0x8, 0x2}, {0x29a7171f, 0xffffdffa, 0x1, 0x6}, {0x6, 0x7, 0xfffffff9, 0x100}, {0x0, 0x9, 0x1002, 0x8c}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_pts()
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x20008, "59a6a348c00e00000000000000000000000100", 0xe3, 0xa})
pipe(0x0)

718.358804ms ago: executing program 2 (id=366):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$TIOCSETA(r0, 0xc450444a, &(0x7f0000000040)={0xffffffff, 0x6, 0x10000000, 0x65, "01d04b0a0047c1d100", 0xf, 0xb})

717.13193ms ago: executing program 2 (id=368):
clock_getres(0x0, &(0x7f00000000c0))
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db0900", 0x10, 0x0, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@routing={0x7e, 0x0, 0x0, 0x7, 0x500}], @udp={{0x1, 0x1, 0x8}}}}}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
bind(r0, &(0x7f0000000180)=@in={0x2, 0x1}, 0xc)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1, 0x3c, 0x3, 0x8}, {0x87, 0x7, 0x5, 0x4}, {0x3c56, 0x4, 0x36}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])
sysctl$vm(&(0x7f0000000100)={0x2, 0x2}, 0x2, &(0x7f0000000080)="e40306a3ed3b7ca230cb1491ff7a0ded546c0f66d31540ba", &(0x7f0000000040)=0x18, 0x0, 0x0)
socket$inet(0x2, 0x4, 0x8)

716.578551ms ago: executing program 2 (id=369):
syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"])
r0 = syz_open_pts()
r1 = kqueue()
dup2(0xffffffffffffff9c, r0)
kevent(r1, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffb, 0xb2, 0x1, 0x101, 0x7}], 0x4, 0x0, 0xe, 0x0)
ioctl$TIOCSTOP(r0, 0x2000746f)
socket(0x18, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = syz_open_pts()
ioctl$TIOCSTAT(r2, 0x20007465, 0x0)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)=0x7)
execve(0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x804000, 0x2f00, 0x9, "39012541ffffffffffffee009d23d3c47ae035f5", 0x2007, 0x10})

411.967468ms ago: executing program 4 (id=378):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
rmdir(&(0x7f0000001400)='./file0\x00')
open(&(0x7f0000000040)='./bus\x00', 0x20000, 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r0 = syz_open_pts()
syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x83, 0x2d, 0x33, 0x8}, {0x4, 0xf, 0x9, 0xb}, {0xe, 0x2, 0x8, 0xfffffffe}]})
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x4, 0x10000001, 0xb6f5, 0xa, "0100", 0xfd, 0x4c554fdc})
r2 = semget(0x0, 0x0, 0x0)
semop(r2, &(0x7f0000000040)=[{0x0, 0x6, 0x1800}], 0x1)
semop(r2, &(0x7f00000000c0)=[{0x0, 0x2ff, 0x1800}], 0x1)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7)
sysctl$hw(0x0, 0x0, &(0x7f0000000080)="50060000003e807447ff000800000000000000e3cc3499aa4765d4db1103000000d0af3a01809b31008d7d2c73420af37d0f1393fe6f0a87b4fe9f4bceb2e2efba076468ae", &(0x7f0000000000)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0000000000ffffffffffffffff6800000001907804001007e00000021100907800008001116168a4578988f238ef53b39a8a6f6f460ce0b42590b17362a07cb546c340cf1452aa676dfa2de9d26ae09794ddb577a663ae34f6aa793bce6c6344fad92a6f35e718e40e0561f59004cb7cd6d493c8fc2708fba1d4d4ad5b40b1a7b7023224c3ce62677dd925eae05f7727b12669353b37a68ba7af53106893fc40add17cb5aa210f"])
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xa4, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xd0, 0x9}, {0x6, 0x3, 0x8, 0x2}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r3, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4)

411.634869ms ago: executing program 6 (id=379):
openat$bpf(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959)
writev(r0, &(0x7f00000004c0)=[{&(0x7f00000007c0)="7f4549b70cb7a21de87373791810aaa95d576a0ac7fca22709002987b881794ffa08bb11bafcdc202a2940aaae682605080088be73fd6c631e055d0000000000", 0x40}], 0x1)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x82, 0x0) (rerun: 32)
ioctl$WSKBDIO_BELL(r1, 0x20005701)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x84) (async)
r2 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x2}, 0x8, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0x77}) (async)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}) (async)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async)
getpeername$unix(r1, &(0x7f0000000500)=@file={0x0, ""/515}, &(0x7f0000000200)=0x205)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5dee, 0x91, 0xfd, 0x802}, {0x6c, 0xf2, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="fe6cfae4850000dbf6a29f03246491fdb547541a", 0x14}], 0x1) (async)
sysctl$hw(0x0, 0x0, &(0x7f0000000140)="0021054d3d00000004346ff1234cb715de5ee647b7230e9b93a8f33376f3a025f643aa5151e6c6af1fe33acba438fb80fc00000000000000000000000061b17dbdb3edcb8b3d17897c8a5132581966d1a43d0101000000000000a7d903e126661afb62319e2adb61e2015235", &(0x7f0000000000)=0x6c, 0x0, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x3, 0x9}) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x21}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[])
ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$getown(r3, 0x5)
ktrace(0x0, 0x1, 0x1a2c, r5)
sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x70, 0x2}, 0x4, &(0x7f0000000080)="2e8ef7ed8a135782cfb0ed172d0a50c212d2f0596dd4b2f9e7fa3e059b9645aad99d98e45e5b2e97d0", 0x0, 0x0, 0x4e)

407.386445ms ago: executing program 4 (id=380):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x2d, 0x2, 0x8}, {0x44, 0x6, 0x89, 0xb}, {0x6, 0x2, 0xa, 0xfffffffe}]})
sysctl$hw(0x0, 0x0, &(0x7f00000016c0)="00231b000f3a8095043fa89874012c00000817c53fcb7c7d40b539750008007a00000000a25ef4fd8a2694e9a6cdfad553b6e7ec064b6bbea0ffff160000000000ad068d3fe5411e", &(0x7f0000000000)=0x48, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe)

406.283467ms ago: executing program 6 (id=381):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x800000000000, 0x0, 0xfffffffffffffffb}) (async)
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket(0x18, 0x1, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="678100000000000000f1b8d24e2217dabb26", 0x12}], 0x1)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCCLR(r3, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async)
r4 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffa5ffffff0000000008001a0022000000e001000209004e", @ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="50080007907800f3a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b4230"]) (async)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f00000000c0))
setuid(0xee01) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r0, 0x0) (async)
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') (async)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async)
chmod(&(0x7f0000000240)='./file0\x00', 0x44) (async)
unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='r\x00')

377.616748ms ago: executing program 4 (id=382):
setuid(0xee01)
r0 = syz_open_pts()
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x80000000b})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x7, 0x8, 0xfffffff8, 0xfffffff6, "0000209c0000f000000a00", 0x1009, 0x12})
writev(r1, &(0x7f0000001000)=[{&(0x7f0000001040)="b7e02e6d5b71a2518bfb1397bee5e5d02a7e748e2802e41559c09dd4d4efd4125dad2d074f8804d96906c64b3601b425451ec7dab28d4463d29af54cf5311f6655725067b56a1c1bc10339134c1afc1e2de2b11bb87d1e190a", 0x59}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="ed", 0x1)
recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0xde5acd6b3bbe2a4a, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1, 0x0, 0xfffffffffffffe27}, 0x42)
open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0)
fchmod(r0, 0x0)

339.986348ms ago: executing program 4 (id=384):
r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = open(&(0x7f0000000040)='./file0/file0\x00', 0x20, 0x8)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
writev(r2, 0x0, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket(0x1, 0x2, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f000069c000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x400000000000000}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x9f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xac3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000531000/0x2000)=nil, &(0x7f000069c000/0x4000)=nil, 0x2}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00006bf000/0x4000)=nil, &(0x7f0000010000/0x3000)=nil, 0x8}], './file0\x00'})
ioctl$FIONREAD(r4, 0xc0106978, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
r6 = openat$klog(0xffffffffffffff9c, &(0x7f0000000180), 0x30001, 0x0)
r7 = openat$klog(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
poll(&(0x7f0000000200)=[{r0, 0x80}, {r1, 0xc7}, {r2, 0x2}, {r3}, {r5, 0x4}, {r6}, {0xffffffffffffffff, 0x100}, {r7, 0xa2}], 0x8, 0x1000)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')

339.73387ms ago: executing program 6 (id=385):
r0 = socket(0x11, 0x3, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe})
r1 = socket(0x18, 0x2, 0x0)
close(r1)
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket(0x800000018, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
bind$unix(r3, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x7}, 0x8)
sendto$unix(r0, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x8, 0x0, 0x0)
syz_emit_ethernet(0x23a7, &(0x7f0000004ac0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd68000000237161070000000000000000000000000000000000000000000000000000ff"])

339.099343ms ago: executing program 4 (id=387):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setuid(0xee01)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0x2}, 0xc, 0x2a2, 0x0, 0x0, 0x6, 0x800000000000013, 0x6, 0x40})
sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005030000040005", 0x9, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x7)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0)
ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000040)=0x100)

296.763485ms ago: executing program 6 (id=389):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0xfffffffc, [{}, {0x1}, {0x0, 0x1}, {0x2, 0xd6}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {0x3}, {}, {0x2, 0x721}, {0x1}, {0x1, 0x3b6}, {0x3}, {}, {0x1, 0x7f}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x5}, {0x0, 0x7}, {0x3}, {0x3, 0x400}, {}, {0x2, 0x3}, {0x2, 0xfffffffd}, {0x1}, {0x2}, {}, {0x1, 0xa}, {0x1, 0x5}]}) (async, rerun: 64)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000000)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0x7f}) (async, rerun: 64)
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) (async)
r1 = syz_open_pts()
syz_open_pts() (async)
read(r1, &(0x7f0000000200)=""/145, 0x91)

295.629247ms ago: executing program 6 (id=391):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa, 0x0}, 0x400)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00@\x00', 0x4)
setsockopt(r0, 0x28, 0xa, &(0x7f0000000140)="1f191b3d97", 0x5)
syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080048"])
syz_emit_ethernet(0x26, &(0x7f0000000200)=ANY=[])
r1 = socket(0x800000018, 0x2, 0x0)
setuid(0xffffffffffffffff)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4)
dup2(r2, r1)
listen(r1, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
r4 = socket(0x2, 0x3, 0xfd)
setsockopt$sock_int(r4, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x3)

294.94317ms ago: executing program 4 (id=392):
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x80000000)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000240)=0x8)
unveil(0x0, &(0x7f00000003c0)='c\x00')
ioctl$TIOCCHKVERAUTH(r0, 0x2000741e)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
socket(0x24, 0x2, 0x0)
setsockopt(r1, 0x6, 0x42, &(0x7f0000000000), 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff})
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4)
r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
pipe(&(0x7f0000000100))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r3, 0x8004745f, &(0x7f0000000100)={0x8001, 0x3, 0xfffffffd, 0x927ffffe, "0d0e50123b8f4fc384d6d738a6cfa4369e25fafb", 0xfff, 0x1})
write(r2, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6036d2b500383af9fe8000000000000000000000000000bbfe800000000000000000aa01029078000000006093a36b00002c0000000000000000000000000000000001fe8000000000000000000000000000bbba000007000000000000000000"])

265.125011ms ago: executing program 3 (id=393):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r0 = socket(0x1, 0x2, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000580)={0x3, &(0x7f0000000040)=[{0x7, 0xf5, 0x8, 0x4}, {0x7c, 0x3, 0x9, 0xffff}, {0x806, 0x2, 0x1, 0x4000be9}]})
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[])
ioctl$FIONREAD(r0, 0xc0206981, &(0x7f00000001c0))
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
chmod(&(0x7f0000000280)='./file0\x00', 0x27f)
setuid(0xee01)
r3 = socket$unix(0x1, 0x2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79ea)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
connect$unix(r3, &(0x7f0000000240)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
r4 = socket(0x1, 0x2, 0xa)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x1, 0x9}], 0x10}, 0x402)

262.549752ms ago: executing program 3 (id=394):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r0 = getpid()
ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
select(0x40, &(0x7f0000000040)={0x2000000000008001, 0x5, 0x10000, 0x4, 0x9, 0x5, 0x0, 0x26}, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443f, &(0x7f0000000040)={0x10000, 0x2f, 0x9, 0xe68, "a2a48100", 0xfffffffc, 0xe762})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
recvmmsg(r3, &(0x7f0000000040)={0x0}, 0x10, 0x40, 0x0)
sendmmsg(r2, &(0x7f00000003c0)={0x0, 0x6}, 0x10, 0x4)

254.988418ms ago: executing program 6 (id=396):
r0 = msgget(0x3, 0x280)
msgrcv(r0, 0x0, 0x0, 0x3, 0x1000)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
r1 = getpid()
r2 = getuid()
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x6, 0x0, 0xffffffffffffffff, r2, 0x0, 0x55, 0x2}, 0x8e49, 0x100000000, 0x0, r1, 0x7, 0x83, 0x8, 0x7})
r3 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r3, 0x80206919, &(0x7f00000001c0))
dup2(r3, 0xffffffffffffffff)

185.916524ms ago: executing program 3 (id=397):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8, [{0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x3}, {}, {0x0, 0x5f}, {}, {0x2, 0x80000002}, {}, {0x0, 0x3}, {0x0, 0x1fd}, {0x3}, {0x2, 0xffc}, {0x0, 0x2}, {}, {0x2, 0x2}, {0x3}, {0x2}, {0x0, 0x7ff}, {0x5, 0xffffffff}, {}, {0x3}, {0x0, 0x400}, {}, {0x2, 0x3}, {0x2, 0xfffffffd}, {0x0, 0x9}, {0x2}, {}, {0x1, 0xa}, {0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x32, &(0x7f00000000c0)="b211", 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@random="cffeaf1c1d82", @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @remote={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}}}}})

184.351527ms ago: executing program 3 (id=399):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r0 = socket(0x2, 0x3, 0x0)
r1 = dup(r0)
setuid(0xee01)
r2 = socket(0x18, 0x1, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ktrace(0x0, 0x0, 0x103a, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x6, 0x80, 0x8, 0xfffffffe}]})
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1007, 0x0, 0x0)
r4 = socket(0x800000018, 0x2, 0x0)
r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000002c0)="e0874201f4504fa64126632b81ca6acc209ae5c01e9f12d8d78a9c88a129da4cf8636752686f99c30ffd43f88a02d06a72694697b170bc2b435a46912ea3cd2e2e9f8849d12b1e9be43845a5606cdc141a672bec8cc76ac11c1c02e2ac29a784a5419fbd442b06", 0x67}], 0x1)
execve(0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1000, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1", 0x1, 0x400, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0})
syz_emit_ethernet(0x22, &(0x7f00000016c0)=ANY=[])
setsockopt(r2, 0x6, 0x4, 0x0, 0x0)
setuid(0xee01)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r6 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r6, 0x8020699b, &(0x7f00000001c0))
r7 = dup(r1)
setsockopt$inet_opts(r7, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4)

183.976616ms ago: executing program 3 (id=400):
setrlimit(0x8, &(0x7f00000000c0)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000940)=0x2)
syz_open_pts()
setrlimit(0x0, &(0x7f0000000640)={0x7fffffffffffffff, 0x5})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000340)={0xe, 0x2, 0x7ffffffd, 0x4006, 0xa, 0x40, 0x805017, 0x10, [{0x90, 0xfd29, 0x7, 0x6}, {0xbb6, 0x0, 0x6, 0x777}, {0x5, 0x10000, 0x81, 0x200}, {0x0, 0x1, 0x8, 0x1}, {0x4, 0x407, 0x5, 0xc}, {0xb1e4, 0x7, 0x1003, 0x2}, {0x1, 0x7, 0xffffffff, 0x9}, {0x3, 0x6, 0x10}, {0xd, 0xb, 0x4, 0x4}, {0x3, 0x9c, 0x1, 0x6}, {0xfffffffc, 0x8, 0xc, 0x8}, {0x424, 0x7ffd, 0x7, 0x3}, {0x809, 0x1002, 0x6}, {0x8bc, 0x4, 0x200}, {0x8, 0xfffffff3, 0x7, 0x7}, {0xfffffffc, 0x5, 0x0, 0x4}]})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/206, 0xce}], 0x7)
writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000180)="b9653c21afbe096af10cc301652d436c7314d4c544f8652c26ecced574c63cb389496edf03fd5b", 0x27}, {&(0x7f0000001000)="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", 0x17b}, {&(0x7f0000000bc0)="80d7ee7095bd0d38f6d7b24ba305cc44476a77b5302ade040af3d502c65df7db807d6cdc592e9b45169c3f7f5e9714093ef18737f06bea8944ab5c54dc3184a833e3659f60638a1b9a2c303fc8", 0x4d}, {&(0x7f0000000700)="b410c365322d722a60a93c93be6702870bfa55e955c351e9a3d63c", 0x1b}, {&(0x7f0000000c40)="04c0bd5eacdb11ce3cd6c4d45bcd2d4e954856755df790c2dab2a030f72a0213f85fdb821ba0cd39b5872d44f174439ae7e91c3d5bd59599faea1c834b9303b93346fb64a116852f228d5be114502cd6770a07902a3e0500ddf5a13d6baecc1a340fead125b37e2a9ca28a43cec1e240b9ca8b16c78f56626a23099a4382c08319f613134d5d69116d3a37609d3fd9e1056a7b4712d692d94e57e3800d054fefb75a8fdb89311483ab5e93b78293cd0ef55cd6cf", 0xb4}, {&(0x7f0000000d00)="f564fa944ce59618aeff13ea2c5b68bcb5e5f42b97a8fe294de751766677342631d13ff4f70672f64a24ffa5140151a1ef7a973dcf3cd848bd24aa2f786607bad0b7ed645b84044dedc8a4b7642bc593ed995c4e18465bc4b819029ed39f6f01525871649a1f2aec73698b0cef6e84b0f6ffbb615f39611b0ed6fac508c68714e10e7bcb25aa1d9a2f69bc5ee3790e5fde08d9ee19dec180a11bce", 0x9b}, {&(0x7f0000001500)="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", 0x1c2}, {&(0x7f0000001700)="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"/281, 0x119}, {&(0x7f0000001380)="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", 0x173}, {&(0x7f0000000b00)="4325e265d32ddc456761e5e185483620b1905576062ed5f406ed7e5b8d13e7fa7fa74f294b40508bb3bfe7dc6639eac110b765a5ea10eb528f9a32609411a474e10060", 0x43}], 0xa)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r1, 0x0)

24.39428ms ago: executing program 7 (id=403):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000000)="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", 0x128)
execve(0x0, 0x0, 0x0)

24.183741ms ago: executing program 7 (id=404):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x8000, 0x0)
setuid(0xffffffffffffffff)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r1=>0x0}, 0xc)
fchown(r0, r1, 0x0)
setsockopt(r0, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4)

23.599976ms ago: executing program 7 (id=405):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mprotect(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0}, 0xc)
fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r1, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
madvise(&(0x7f0000783000/0x2000)=nil, 0x2000, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
clock_gettime(0x0, 0xfffffffffffffffe)

23.436007ms ago: executing program 7 (id=406):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) (async)
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x40978b, 0x10101, 0x7, 0x506, "3b082001f78b67af9e3bb0c49d73230100040c00", 0x202, 0xf}) (async)
socket$inet(0x2, 0x3, 0x7) (async)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async)
unveil(0x0, &(0x7f00000001c0)='r\x00') (async)
sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffee1)

23.20398ms ago: executing program 7 (id=407):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xa, [{&(0x7f00001af000/0x2000)=nil, &(0x7f0000260000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f000068a000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00002b1000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000318000/0x2000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x9}, {&(0x7f000024d000/0x1000)=nil, &(0x7f00007ed000/0x2000)=nil, 0x8}, {&(0x7f000045e000/0x4000)=nil, &(0x7f0000095000/0x3000)=nil, 0xf5}, {&(0x7f0000034000/0x1000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f00001cb000/0x1000)=nil, &(0x7f000050d000/0x4000)=nil, 0x603}, {&(0x7f000036f000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil, 0x3}, {&(0x7f0000730000/0x1000)=nil, &(0x7f00001b5000/0x2000)=nil, 0x119}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x8000007fffffff}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00004d0000/0x4000)=nil, 0xfffffffffffff800}, {&(0x7f000015a000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000155000/0x3000)=nil, 0x2000001000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000073000/0x7000)=nil, 0x2}], './file0\x00', 0xfffffffa})
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setreuid(0x0, 0xee01)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x0)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0xc0000000, 0x4003, 0x420001ff, 0x81, "afa40f3c00", 0x0, 0x49e22})
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8)
faccessat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x3c, 0x0, 0x0)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f00000000c0)="b1000504000004000000000007000000331c13fecea10500fef96ec0c79f050000e30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba220f54f4fcf668246c0900e1937c727a4bdb8d000008e371a3f034371205", 0xb1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0x18, 0x4, 0xf)
poll(&(0x7f0000000300)=[{r0, 0x20}, {r3, 0x1}, {r1, 0x4}, {r0, 0x1}, {r2, 0x9ce192f5405dfde3}], 0x5, 0x4)
r4 = socket$unix(0x1, 0x5, 0x0)
pledge(&(0x7f0000000100)='tty V\xef\x86\xce3|#\xcb\x13\x12\xc0\r\x9c\xe6\x00E\xbd\x81+r9\xbc\xda\f\xeb\x13\x96\xdbY\x91\x0e\x17\x95 \x00\xa6\x9ca\x00\x00\x00\x00\x00\x00\xbe\xa4kG\x01\x00\x00\x00\x00^\x00\x01\x04\x00\xeb\x91vr)\\\xf2:\'2.\xee\xb6\xd9P#\x0f\xcd\x80\x8b\xa3 \x06\xe6{\xc3\x8e\xd7bN\x81\x9ess\x13\x06\xc6\x9b\xd4\r\xfc\x85\xf8}\x9c\xc6S\xe7\x1c\xfc\xec\xb0\x18\xf5\xb4H\xf8\x9el\x03(r\xd4\x9a\x0f\f\xdb', 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b03356d0140558d3dfd766d0a62aab10b9bfe4d1aafbaf5c2c66da2acf4faeb1e580100907828"])
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
chmod(&(0x7f0000000280)='./file0\x00', 0x27f)
close(r5)
setuid(0xee01)
r6 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r6, &(0x7f0000000240)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r7 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x62)
ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x3)
connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)

22.938382ms ago: executing program 7 (id=408):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
ftruncate(r1, 0x40002)
pwrite(r1, &(0x7f0000000100)="93d4", 0xfffffeca, 0x5)
mknod(&(0x7f0000000100)='./file1\x00', 0x100, 0xd02)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r3, 0x0)
r4 = geteuid()
setuid(r4)
ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})

0s ago: executing program 3 (id=409):
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x3, 0xfffffff9, 0x0, 0x0, 0xfffffff8, 0xffffffff, 0x2, 0x1, 0x3ffd, 0x10})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
setrlimit(0x7, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5dee, 0x91, 0xfd, 0x802}, {0x6c, 0xf2, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="fe6cfae4850000dbf6a29f03246491fdb547541a9c7d804afa730092bb89403a30ea3bf60f1eb308", 0x28}], 0x1) (async)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="fe6cfae4850000dbf6a29f03246491fdb547541a9c7d804afa730092bb89403a30ea3bf60f1eb308", 0x28}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f0000000140)="0021054d3d00000004346ff1234cb715de5ee647b7230e9b93a8f33376f3a025f643aa5151e6c6af1fe33acba438fb80fc00000000000000000000000061b17dbdb3edcb8b3d17897c8a5132581966d1a43d0101000000000000a7d903e126661afb62319e2adb61e2015235", &(0x7f0000000000)=0x6c, 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x83, 0x2d, 0x33, 0x8}, {0x60, 0xf, 0x9, 0xb}, {0xe, 0x2, 0x8, 0xfffffffe}]})
sysctl$hw(0x0, 0x0, &(0x7f0000000080)="50060000003e807447ff000800000000000000e3cc3499aa4765d4db1103000000d0af3a01809b31008d7d2c73420af37d0f1393fe6f0a87b4fe9f4bceb2e2efba076468ae", &(0x7f0000000000)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff000000000000080045f0001c000000000001907800000007e00000011100907807b38c4395f23990fd25264c72d200008001"]) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff000000000000080045f0001c000000000001907800000007e00000011100907807b38c4395f23990fd25264c72d200008001"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[]) (async)
syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[])
poll(&(0x7f0000000000)=[{}], 0x1, 0x80000)
setitimer(0x2, &(0x7f0000000140)={{0x8003, 0x100800000000009}, {0xffdfffbfffffffff, 0xfff7}}, 0x0) (async)
setitimer(0x2, &(0x7f0000000140)={{0x8003, 0x100800000000009}, {0xffdfffbfffffffff, 0xfff7}}, 0x0)
socket(0x18, 0x3, 0x0) (async)
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100))
ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffffff, 0x801c4903, 0x0)
socket(0x2, 0x1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts.



pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-multicore-4.us-central1-b.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
uvm_fault(0xfffffd800f7b5b90, 0x7fbefc8ddef8, 0, 2) -> e
kernel: page fault trap, code=2
Stopped at      pmap_page_remove+0x45d: xchgq   %rax,0(%r14,%rcx,1)
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
  29732  71984      0           0  0x4000000    0  syz-executor
pmap_page_remove(fffffd80088502b0) at pmap_page_remove+0x45d
uvm_anfree(fffffd806482aec8) at uvm_anfree+0xd8
amap_wipeout(fffffd806ba087a8) at amap_wipeout+0x246
uvm_unmap_detach(ffff800034bdb770,0) at uvm_unmap_detach+0x8a
uvm_map_teardown(fffffd800f7b5b90) at uvm_map_teardown+0x360
exit1(ffff80003bbfc2b8,b,0,1) at exit1+0x6fc
sys_exit(ffff80003bbfc2b8,ffff800034bdb940,ffff800034bdb890) at sys_exit+0x1a
syscall(ffff800034bdb940) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7df91bbdfcb0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd800f7b5b90, 0x7fbefc8ddef8, 0, 2) -> e
ddb{1}> trace
pmap_page_remove(fffffd80088502b0) at pmap_page_remove+0x45d
uvm_anfree(fffffd806482aec8) at uvm_anfree+0xd8
amap_wipeout(fffffd806ba087a8) at amap_wipeout+0x246
uvm_unmap_detach(ffff800034bdb770,0) at uvm_unmap_detach+0x8a
uvm_map_teardown(fffffd800f7b5b90) at uvm_map_teardown+0x360
exit1(ffff80003bbfc2b8,b,0,1) at exit1+0x6fc
sys_exit(ffff80003bbfc2b8,ffff800034bdb940,ffff800034bdb890) at sys_exit+0x1a
syscall(ffff800034bdb940) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7df91bbdfcb0, count: -9
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff800034bdb670
rbx               0xfffffd806471d5f0
rdx                                0
rcx                   0x7f8000000000
rax                                0
r8                                 0
r9                           0x65400    acpi_pdirpa+0x51271
r10                0xea3d20394b40b3f
r11               0xa53346c8c39fe816
r12                                0
r13                                0
r14                     0x3efc8ddef8
r15               0xfffffd8008850318
rip               0xffffffff828af21d    pmap_page_remove+0x45d
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff800034bdb5f0
ss                                 0
pmap_page_remove+0x45d: xchgq   %rax,0(%r14,%rcx,1)
ddb{1}> show proc
PROC (syz-executor) tid=353886 pid=81741 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=75, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80003bbfc2b8 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff8000ffffc7d0,0xffff80003c42f4f8
    process=0xffff80002a3c04e8 user=0xffff800034bd6000, vmspace=0xfffffd800f7b5b90
    estcpu=25, cpticks=9, pctcpu=0.1, user=0, sys=6, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 71984  492528  22200      0  2           0                syz-executor
 71984  453060  22200      0  2   0x4000080                syz-executor
 71984   29732  22200      0  7   0x4000000                syz-executor
 46600  198634  95210      0  2           0                syz-executor
 46600  375096  95210      0  2   0x4000000                syz-executor
 83626   87097  31370      0  2       0xc80                syz-executor
 83626  125690  31370      0  3   0x4000080  msgwait       syz-executor
 83626   68613  31370      0  3   0x4000080  fsleep        syz-executor
 34256  149387      0      0  3     0x14200  acct          acct
 95945  397892      1      0  3    0x100083  ttyin         getty
 95210  498857  83849      0  3        0x82  nanoslp       syz-executor
 31370  521892  83849      0  2       0xc82                syz-executor
 53759  410836  83849      0  2       0xc82                syz-executor
   659   63441  83849      0  2       0xc82                syz-executor
 22200  364216  83849      0  3        0x82  nanoslp       syz-executor
 73583  276000  83849      0  2       0xc82                syz-executor
 84948  302538  83849      0  3        0x82  wait          syz-executor
 92112  282642  83849      0  3        0x82  wait          syz-executor
 83849   94214  96247      0  3        0x82  kqread        syz-executor
 96247  235268  41408      0  3    0x10008a  sigsusp       ksh
 41408  107500  54402      0  3        0x98  kqread        sshd-session
 54402   28198  74161      0  3        0x92  kqread        sshd-session
 74161  439848      1      0  3        0x88  kqread        sshd
 99689  108008  51661     74  3   0x1100092  bpf           pflogd
 51661  301259      1      0  3        0x80  sbwait        pflogd
 64931  107708  19450     73  3   0x1100090  kqread        syslogd
 19450  110535      1      0  3    0x100082  sbwait        syslogd
 23179  356254      1      0  3    0x100080  kqread        resolvd
 20762  386335  26480     77  3    0x100092  kqread        dhcpleased
 95225  507602  26480     77  3    0x100092  kqread        dhcpleased
 26480  419879      1      0  3        0x80  kqread        dhcpleased
 97790  146274      0      0  3     0x14200  bored         smr
 61103  145013      0      0  2     0x14200                zerothread
 43418  255492      0      0  3     0x14200  aiodoned      aiodoned
 30990  429872      0      0  3     0x14200  syncer        update
 88654  454082      0      0  3     0x14200  cleaner       cleaner
   334  132022      0      0  3     0x14200  reaper        reaper
 33243  379608      0      0  3     0x14200  pgdaemon      pagedaemon
  6171  150338      0      0  3     0x14200  bored         viomb
 38868  341596      0      0  3  0x40014200  acpi0         acpi0
 58908  510572      0      0  3  0x40014200                idle1
 38899  227609      0      0  3     0x14200  bored         softnet1
 39272  421408      0      0  3     0x14200  bored         softnet0
  8528  216386      0      0  3     0x14200  bored         systqmp
 36941    6888      0      0  3     0x14200  bored         systq
 40866   73989      0      0  3     0x14200  tmoslp        softclockmp
 49506  479554      0      0  3  0x40014200  tmoslp        softclock
 40580  376564      0      0  3  0x40014200                idle0
     1   99142      0      0  3     0x80082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd800f8cfd10)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  pmap_page_remove+0xca
#3  uvm_anfree+0xd8
#4  amap_wipeout+0x246
#5  uvm_unmap_detach+0x8a
#6  uvm_map_teardown+0x360
#7  exit1+0x6fc
#8  sys_exit+0x1a
#9  syscall+0xb17
#10 Xsyscall+0x128
Process 46600 (syz-executor) thread 0xffff80003bbfdca8 (375096)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10200  11095K   11360K 166960K     11858        0
            pcb    18     12K      12K 166960K       104        0
         rtable   241      9K      10K 166960K       589        0
             pf    34     17K      21K 166960K        90        0
         ifaddr    41      7K       7K 166960K        67        0
        ifgroup    55      2K       2K 166960K       105        0
         sysctl     4      1K       9K 166960K        13        0
       counters    70     37K      38K 166960K       132        0
       ioctlops     0      0K       4K 166960K      1652        0
            iov     0      0K      16K 166960K        35        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1422     89K      89K 166960K      1768        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem     8      0K       0K 166960K         9        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      89K 166960K       539        0
          sigio     0      0K       0K 166960K        45        0
           proc    72    115K     180K 166960K       600        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        32        0
       in_multi    89      6K       7K 166960K       106        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     0      0K       0K 166960K         7        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    97    440K     440K 166960K        97        0
           exec     0      0K       1K 166960K       512        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   261    168K     186K 166960K      6935        0
       UVM aobj    50     70K      70K 166960K        52        0
     pinsyscall    42     84K     102K 166960K      1670        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        31        0
            NDP    12      0K       2K 166960K        46        0
           temp    50   8672K    8740K 166960K     29269        0
         kqueue    13     20K      30K 166960K        95        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       67    0       64     1     0     1     1     0     8    0
rtentry    176      133    0       30     5     0     5     5     0     8    0
unpcb      144      272    0      254     2     0     2     2     0     8    1
syncache   336        3    0        3     1     1     0     1     0     8    0
tcpcb      736      107    0      103     1     0     1     1     0     8    0
arp        136       23    0        4     1     0     1     1     0     8    0
inpcb      328      500    0      491     7     5     2     7     0     8    1
nd6        152       26    0        0     1     0     1     1     0     8    0
pkpcb       40        6    0        6     1     0     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192      26    0       26     1     0     1     1     0     8    1
pppxif     1504       2    0        2     1     0     1     1     0     8    1
pffrag     232        7    0        2     1     0     1     1     0   482    0
pffrnode    88        7    0        2     1     0     1     1     0     8    0
pffrent     40       10    0        5     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344      57    0       57     1     1     0     1     0     8    0
pfanchor   1288       1    0        1     1     1     0     1     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       42    0        1     1     0     1     1     0     8    0
pfstkey    128       42    0        1     2     0     2     2     0     8    0
pfstate    448       42    0        1     5     0     5     5     0     8    0
pfrule     1344      24    0       19     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     1     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      503    0       90    29     1    28    29     0     8    1
art_table   40      506    0       90     5     0     5     5     0     8    0
art_node    32      132    0       41     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        1     1     0     1     1     0     8    0
semapl     112        7    0        1     1     0     1     1     0     8    0
shmpl      112       13    0        0     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     2342    0      829    96     0    96    96     0     8    0
ffsino     296     2342    0      829   118     0   118   118     0     8    0
nchpl      144     3094    0     1392    64     0    64    64     0     8    0
rtmask      32        9    0        9     1     0     1     1     0     8    1
vnodes     216     2689    0        0   150     0   150   150     0     8    0
namei      1024   10774    0    10774     2     1     1     2     0     8    1
percpumem   16       81    0       31     1     0     1     1     0     8    0
vcpupl     3968      36    0        2     5     0     5     5     0     8    0
vmpool     848       36    0        2     4     0     4     4     0     8    0
pfiaddrpl  120        1    0        1     1     1     0     1     0     8    0
kstatmem   264       60    0       34     3     0     3     3     0     8    1
scsiplug    72        2    0        2     1     0     1     1     0     8    1
scxspl     216    19296    0    19296    10     2     8     8     1     8    8
plimitpl   152      161    0      143     1     0     1     1     0     8    0
sigapl     424      850    0      801     7     1     6     7     0     8    0
knotepl    120      322    0        0    10     0    10    10     0     8    0
kqueuepl   224      148    0      139     2     0     2     2     0     8    1
pipepl     344      221    0      193     9     3     6     9     0     8    3
fdescpl    528      833    0      802     3     0     3     3     0     8    0
filepl     160     4458    0     4229    15     3    12    15     0     8    1
lockfpl    104      191    0      188     1     0     1     1     0     8    0
lockfspl    48       90    0       87     1     0     1     1     0     8    0
sessionpl  144       23    0       14     1     0     1     1     0     8    0
pgrppl      48      107    0       90     1     0     1     1     0     8    0
ucredpl    104      608    0      594     1     0     1     1     0     8    0
zombiepl   144      806    0      801     1     0     1     1     0     8    0
processpl  1232     850    0      801     5     1     4     5     0     8    0
procpl     664     1542    0     1488     6     0     6     6     0     8    0
sosppl     176        1    0        1     1     1     0     1     0     8    0
sockpl     752      861    0      831    11     5     6    11     0     8    2
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     119    0        0    15     0    15    15     0     8    0
mcl2k      2048      51    0        0     7     0     7     7     0     8    0
mtagpl      96       32    0        0     1     0     1     1     0     8    0
mbufpl     256      202    0        0    13     0    13    13     0     8    0
bufpl      280     8919    0     2783   439     0   439   439     0     8    0
anonpl      32     9802    0        0    80     0    80    80     0   246    0
amapchunkpl 152   25508    0    24954    37     0    37    37     0   158   11
amappl16   200     4049    0     4009    25     9    16    18     0     8   11
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184       13    0       13     2     1     1     1     0     8    1
amappl13   176      496    0      495     1     0     1     1     0     8    0
amappl12   168     1203    0     1161     3     1     2     3     0     8    0
amappl11   160       10    0       10     1     1     0     1     0     8    0
amappl10   152      114    0      100     1     0     1     1     0     8    0
amappl9    144      245    0      245     1     1     0     1     0     8    0
amappl8    136       45    0       43     1     0     1     1     0     8    0
amappl7    128       76    0       74     1     0     1     1     0     8    0
amappl6    120      279    0      265     1     0     1     1     0     8    0
amappl5    112       87    0       76     1     0     1     1     0     8    0
amappl4    104      426    0      395     1     0     1     1     0     8    0
amappl3     96     4100    0     3980     5     1     4     4     0     8    0
amappl2     88      531    0      470     2     0     2     2     0     8    0
amappl1     80    10764    0    10184    14     2    12    14     0     8    0
amappl      88     6132    0     5949     5     0     5     5     0    92    0
uvmvnodes   80      131    0        0     3     0     3     3     0     8    0
dma16384   16384      2    0        2     1     0     1     1     0     8    1
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      255    0      255     2     1     1     1     0     8    1
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       51    0        2     1     0     1     1     0     8    0
uaddrrnd    24      833    0      802     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      833    0      802     1     0     1     1     0     8    0
vmmpekpl   168     8639    0     8604     3     0     3     3     0     8    0
vmmpepl    168    61149    0    59204    99     0    99    99     0   357    0
vmsppl     488      832    0      801     5     1     4     5     0     8    0
rwobjpl     80    20061    0    18925    29     0    29    29     0     8    0
pdppl      4096    1745    0     1640   129    23   106   106     0     8    1
pvpl        32    18287    0        0   149     1   148   148     0   265    0
pmappl     256      868    0      803     5     0     5     5     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      316    0       28     9     0     9     9     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8389eff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838bcd00) at __mp_lock+0x192
doopenat(ffff80003bbfca80,ffffff9c,200000000440,10,0,ffff80003c471b10) at doopenat+0x345
syscall(ffff80003c471bc0) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd7480a9c4a0, count: 8
ddb{0}> trace
x86_ipi_db(ffffffff8389eff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838bcd00) at __mp_lock+0x192
doopenat(ffff80003bbfca80,ffffff9c,200000000440,10,0,ffff80003c471b10) at doopenat+0x345
syscall(ffff80003c471bc0) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd7480a9c4a0, count: -7
ddb{0}> machine ddbcpu 1
Stopped at      pmap_page_remove+0x45d: xchgq   %rax,0(%r14,%rcx,1)
pmap_page_remove(fffffd80088502b0) at pmap_page_remove+0x45d
uvm_anfree(fffffd806482aec8) at uvm_anfree+0xd8
amap_wipeout(fffffd806ba087a8) at amap_wipeout+0x246
uvm_unmap_detach(ffff800034bdb770,0) at uvm_unmap_detach+0x8a
uvm_map_teardown(fffffd800f7b5b90) at uvm_map_teardown+0x360
exit1(ffff80003bbfc2b8,b,0,1) at exit1+0x6fc
sys_exit(ffff80003bbfc2b8,ffff800034bdb940,ffff800034bdb890) at sys_exit+0x1a
syscall(ffff800034bdb940) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7df91bbdfcb0, count: 6
ddb{1}> trace
pmap_page_remove(fffffd80088502b0) at pmap_page_remove+0x45d
uvm_anfree(fffffd806482aec8) at uvm_anfree+0xd8
amap_wipeout(fffffd806ba087a8) at amap_wipeout+0x246
uvm_unmap_detach(ffff800034bdb770,0) at uvm_unmap_detach+0x8a
uvm_map_teardown(fffffd800f7b5b90) at uvm_map_teardown+0x360
exit1(ffff80003bbfc2b8,b,0,1) at exit1+0x6fc
sys_exit(ffff80003bbfc2b8,ffff800034bdb940,ffff800034bdb890) at sys_exit+0x1a
syscall(ffff800034bdb940) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7df91bbdfcb0, count: -9