last executing test programs:

1.547149161s ago: executing program 0 (id=1402):
openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
r0 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setrlimit(0x1, 0xffffffffffffffff)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959)
faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="c7a2e46f05fa", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7}}}}})
ioctl$TIOCSETAW(r1, 0x80085761, &(0x7f0000000740)={0x101, 0x0, 0x1, 0xa1, "717f70b29b56c3e7d1998a51e318858818c15a93", 0x2, 0x82d})
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xffffff7d}], 0x1)
r2 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000240), &(0x7f0000000280)=0x2)

1.48438509s ago: executing program 0 (id=1407):
r0 = socket$inet(0x2, 0x5, 0x5)
accept(r0, &(0x7f0000000340)=@un=@file={0x0, ""/508}, &(0x7f0000000140)=0x1fe)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
close(r1)
syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="91a6e34dd8bbaaaaaaaaaaaa08004c000044000000000000907800000000acfcffffff00000000000007ba0000000000ac1400aaffffffff7f00000100000d00907800000000000000001000000000000000"])
syz_open_pts()
syz_open_pts()
r2 = syz_open_pts()
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
sysctl$net_inet_ipip(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f000075a000/0x4000)=nil, 0x4000, 0x0)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='\x00\x00\x00\x00', 0x4)
kqueue()
sysctl$hw(&(0x7f00000002c0)={0x7, 0x10}, 0x2, &(0x7f0000000540), 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
r3 = socket(0x18, 0x1, 0x0)
close(r3)
semop(0x0, 0x0, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x18, 0x1, 0x0)
close(r4)
socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0)
setsockopt(r0, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r4, &(0x7f0000000040)="8595ba160959868f0861ce925493a6f33415dbdc0531f0f9e252d394b08597d62257c7eeb6ef3209cece2a92773b28085e3c238c291f46fbe9", 0x39)
ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000000040))

1.266666516s ago: executing program 3 (id=1420):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r0 = socket(0x2, 0x4001, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
r2 = socket(0x2, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080), 0x4) (async)
poll(&(0x7f00000000c0)=[{r2, 0x100}], 0x1, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="bf3b684c5ae963b4567084e096cf973983ff0f0000000000009405095e7acbf4419893cfd424b75262dc5ade2ab6278ab80849177964f55be2796672f9ed186987b8c19d9295a17b98020f600200"/91, 0x5b}], 0x100000000000033c}, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x3, 0x0)
close(r3)
socket(0x18, 0x2, 0x0)
setreuid(0x0, 0xee01) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000010b000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000154000/0x1000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000495000/0x1000)=nil, &(0x7f000007a000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f0000000000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f00002e5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000470000/0x2000)=nil, &(0x7f00002db000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000ad000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x56}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f0000371000/0x1000)=nil, &(0x7f000034d000/0x3000)=nil}, {0x0, &(0x7f0000ff9000/0x4000)=nil}], './file0\x00'}) (async)
execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) (async)
r4 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r4, 0xc028698a, &(0x7f0000000100)) (async)
r5 = getppid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r5}) (async)
pipe(&(0x7f00000001c0)={<r6=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$VNDIOCSET(r7, 0xc0384600, &(0x7f0000000240)={&(0x7f0000000180)='./bus\x00', 0x80000001000, &(0x7f0000000200)='./bus\x00', 0x6}) (async)
fcntl$getown(r6, 0x5) (async)
ktrace(0x0, 0x0, 0x4000022a, r5)

1.264518619s ago: executing program 6 (id=1421):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x18, 0x2, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000001040), 0x1, 0x0)
setsockopt(r0, 0x7, 0xd, &(0x7f0000001180)="ebffcbfb13b9812eaa4edd1d4dfc7b9411b16ff9df4add62e741a2fce1628b2adab5fdd23d98f50fcee3af7e3a8cfa37e093aed00478c88bfb3f69cb29c5ede9632db89531e0ff532f6366e8b5b32832e47db2887ff691b020d82650269e1ead041f58699ef438eb150457cb0f03f938a8fd77064b2277e51ce29d66b241a5b187c2fee587b891e779ad348c44fe0c0a66fac0017da61ee24c50a6a2c240e6c102dca82acdb0a82a48befad77f8673297797c4732ba553bf98de4c0aa8b40287ee7ad95a67ba99f394e3e4d6f862817f514441c3ece190277b69018938a922f202436013a8ad9d0e40d6a10aca1bb7e700"/251, 0x73)
recvfrom(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x0, 0x0)

1.18651668s ago: executing program 3 (id=1422):
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x200000000, &(0x7f00000001c0)='./file0\x00', 0x8})
mquery(&(0x7f0000132000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x9c)
ioctl$VNDIOCGET(r0, 0x81946467, &(0x7f00000006c0)={'./file0\x00'})
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
r2 = dup(r1)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffa5ffffff000000000800080022000000e001000209004e", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="50080007907800f3a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b4230"])
ioctl$FIONREAD(r3, 0x80206979, &(0x7f00000000c0))
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000100)={0x2})
r4 = socket(0x18, 0x2, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f000013d000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000590000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f000060f000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil, 0x2}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f0000402000/0x2000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000013e000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, 0x6f6}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000620000/0x3000)=nil, 0x1000000000}], './file0\x00', 0xfffffffc})
close(r4)
r5 = socket(0x800000018, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r6 = socket(0x800000018, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x2}, 0x8)
getrusage(0x1, &(0x7f0000000100))
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180))

1.18205864s ago: executing program 0 (id=1423):
r0 = socket(0x2, 0x3, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x186)
ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000080)=0x4)
r2 = socket(0x2, 0x3, 0x3)
setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = dup2(r2, r3)
setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000100), 0x0)
r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$VNDIOCGET(r5, 0xc4104603, &(0x7f0000000540)={'./bus/file0\x00', 0xfffefffe, 0x7ff, 0x20000000005})
sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=ANY=[], 0xb0}, 0x0)

1.104668474s ago: executing program 0 (id=1427):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='#', 0x1}], 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0)
fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
open$dir(&(0x7f00000004c0)='./file0\x00', 0x20, 0x6c)
open(&(0x7f0000000200)='./file0\x00', 0x20, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x20, 0x1d4)
execve(0x0, 0x0, 0x0)
pwrite(r1, &(0x7f00000000c0)="a7", 0x1, 0x40007)
ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000000))

825.840705ms ago: executing program 5 (id=1440):
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @icmp=@echo}}}})
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x3, 0x2f)
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x3, 0x0)
bind(r1, &(0x7f0000000000), 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[])

757.171185ms ago: executing program 5 (id=1443):
r0 = syz_open_pts()
sysctl$kern(&(0x7f00000001c0)={0x1, 0x26}, 0x2, &(0x7f0000000100)="50eb3b1f", &(0x7f0000000080)=0x4, 0x0, 0x0) (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x0, 0x8, 0x8d, 0xfffffffe, "3c00510900000000000015000000000000002000", 0xe422, 0x3f}) (async)
ioctl$TIOCSTART(r0, 0x2000746e)

745.678208ms ago: executing program 5 (id=1446):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x0, 0x7fffffff, 0x100000000000000, 0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0x8020690c, &(0x7f00000000c0)={0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60006f3300383a008a211dd14508000000ec000000740040fe8000000000000000000000000000aa02009078000000006000000000003a00fe8000000000000000000000000000aaff0100000000000000000075fe0000018c"])
r2 = socket(0x18, 0x1, 0x0)
close(r2)
socket(0x18, 0x2, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x40978b, 0xffff, 0xfffffc00, 0x80a19d, "bb08f9460080685910508b00"})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)

741.572852ms ago: executing program 2 (id=1447):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x1ffffffffff}) (async)
r0 = syz_open_pts()
close(r0) (async)
syz_open_pts() (async)
read(r0, &(0x7f0000002a00)=""/4117, 0x1016) (async)
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x18b79) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
ioctl$FIONREAD(r1, 0x8020699d, &(0x7f00000001c0)) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@remote, @empty, [{[], {0x8100, 0x5, 0x0, 0x1}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="152667bd9aea", @multicast1, @empty, @broadcast}}}}) (async)
execve(0x0, 0x0, 0x0) (async)
r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
read(r2, 0x0, 0x0)
ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x6) (async)
syz_open_pts()

694.591435ms ago: executing program 5 (id=1449):
syz_emit_ethernet(0x215a, 0x0)
pipe2(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0206917, &(0x7f00000001c0))
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r0)
ioctl$BIOCSHDRCMPLT(r2, 0x40047309, &(0x7f0000000000))
syz_extract_tcp_res(&(0x7f0000000000), 0x2cb, 0x8001)

694.07778ms ago: executing program 2 (id=1450):
r0 = syz_open_pts()
r1 = syz_open_pts()
syz_open_pts()
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000040)=0xfa)
pipe(&(0x7f0000000100))
select(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0xd, 0xb, 0x9, 0x0, 0x400, 0x4}, 0x0, 0x0, 0x0)
close(r0)

682.02991ms ago: executing program 5 (id=1452):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r0, &(0x7f0000001480)=[{&(0x7f0000000240)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d61112633696de6cc28b10fa891e470400000090a611889032ac793581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xb3}, {&(0x7f0000000080)="b389", 0x2}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13049996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba111d000000", 0x3b}, {&(0x7f00000014c0)="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", 0xf11}], 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="6aab0d39fa00fa80404c424f01000000000000004fbace19bc53ad50", 0x1c}], 0x1, 0x6)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8cf7f46ded8ccb0c0428dad06004805606ce37de53a1c521024a8f0ceda203c740de9737c7ac751f481c86f408518dae30b61525081f1b2f011a0e7585b0d24fdb6f5d3cc4f71b7f2f7aeb80c1a5b60e7446c27e5704a43e2", &(0x7f0000000080)=0x7c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}})
r2 = socket(0x800000018, 0x3, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa7fd67572210786dd6007558300183701fe8000000000000000000000000000aaff020000000000000000000000000001"])
setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51})
r3 = syz_open_pts()
close(r3)
syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047469, &(0x7f00000000c0)=0x5)
syz_open_pts()
writev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)="fd", 0x49}], 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x1010, 0xffffffffffffffff, 0x0)

606.6246ms ago: executing program 2 (id=1454):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$TIOCSETA(r0, 0xc148445e, &(0x7f0000000040)={0x0, 0x0, 0x5241afde, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
r1 = socket(0x18, 0x2, 0x0)
getpeername$inet(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc)

605.559077ms ago: executing program 5 (id=1455):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000002c0)={0x0}, 0x10, 0x0, &(0x7f00000003c0)={0x8, 0x101}) (async, rerun: 64)
r2 = socket(0x11, 0x3, 0x0) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
sendto$unix(r2, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc210200b10000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd1257aea8c500002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x402, 0x0, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x200, 0x8, 0x1, 0x3}, {0x8, 0x9, 0x0, 0x2}, {0x4, 0x6, 0x6, 0x4}]}) (async)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x1}, 0x0)
lseek(r0, 0x6, 0x0)

601.901625ms ago: executing program 2 (id=1456):
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r1 = socket(0x800000018, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x1, 0xffffffffffffffff, 0x20001ffffffff})
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4b}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xee)

529.26296ms ago: executing program 2 (id=1457):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async)
unveil(&(0x7f0000000080)='.\x00', 0x0) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0xffffff49, 0x7, 0x5bc, "225e00d1554709aa0900fa4ab1896c04aec100"}) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007", 0xd, 0x400, 0x0, 0x0) (async)
r0 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async)
socket$inet(0x18, 0x3, 0x102)

527.921366ms ago: executing program 2 (id=1459):
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x7, 0x1, 0x1, 0xffffc}, {0x14, 0xdc, 0x9, 0x1}, {0x6, 0x5, 0x2, 0x7ff}]})
write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async)
write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000000))
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0))
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x8020690c, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0}, 0x0)

328.709531ms ago: executing program 6 (id=1471):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000002c0)={0x1, 0x3, 0xfffffeff, 0x100, "0bb1f8822bf78841a80f3409a615d44b7f8aad5e", 0x7ff, 0x1})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xffffffffffffffa8)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x6)
r2 = msgget$private(0x0, 0x202)
msgrcv(r2, &(0x7f0000001880)={0x0, ""/123}, 0x83, 0x3, 0x1000) (async)
msgrcv(r2, &(0x7f0000001880)={0x0, ""/123}, 0x83, 0x3, 0x1000)
msgrcv(r2, &(0x7f0000001ac0)={0x0, ""/22}, 0x1e, 0x2, 0x800) (async)
msgrcv(r2, &(0x7f0000001ac0)={0x0, ""/22}, 0x1e, 0x2, 0x800)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8", &(0x7f0000000080)=0x24, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaa0500000000000000000807ec"])
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
rename(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file2\x00')
symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000140)="81a712d8325132675cc13adde8fa0d3905f2c13565373dafccf47f97b950047c580adc1fff156bf762e09c5238fb447843654b089ebb8fa9708ffc83ce2bb02ffe61040000004c97635ec169915626e4aa21d59b4c0f1a0d2d43ab52f06b41d6b8bcda5d2b833bd1bdaaf679fee8344ab578d03375c93449ebc260e8563519561a53dd47e3b6db152734dfcb5e3a3e3ceb7a887190ca1a4b5bdc03ea467760a8fcb90081e4ccacc03a32e93878ba070878341285568a43b960e5c746cc81e5981bc8c4ce8b5afef7ee00feff800793a225bbcc626b8b273919f2dea7a8dd020e0a9842df8db01f8e5af4ade0b80a1ffc9b438aa48aeb5dc8e3e237d8c61e475f4336027290b0de1c77238c242ec03f28240e0cda12f136ac06c7a84893f06c1ad10414000000000000", &(0x7f00000000c0)=0x129, &(0x7f0000000040)="4d2dcafc7aacdc0d961d632abf7d3924", 0x10)
ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = semget(0x0, 0x1, 0x281)
semop(r3, &(0x7f0000000680)=[{0x0, 0xeffa, 0x1000}], 0x21) (async)
semop(r3, &(0x7f0000000680)=[{0x0, 0xeffa, 0x1000}], 0x21)
semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000240)) (async)
semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000240))
syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004104008c006400bf0f679078000003ffe0000001891306000000070000000000000000e0000001820f315765361b346e41fc9ee5b8238307f6e00000010004c2de0000004e214e226f8a9d8b67ad14a1a045506abd86b4e660daefd2ec56fabf5dc62aff0a130ec0931e5b6fe691873561b6b518d3477938", @ANYRES16, @ANYRES32])
open(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x109) (async)
open(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x109)

326.492033ms ago: executing program 7 (id=1472):
sysctl$kern(&(0x7f0000000080)={0x1, 0x29}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000080)={0x1, 0x29}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000300)={'./bus\x00', 0x8, 0x8001, 0x7})
sysctl$kern(&(0x7f0000000100)={0x1, 0x26}, 0x2, &(0x7f0000000140)="a248a8b1ba94cc8f9bec782c2781fd63f7c901f9f4fa7d0968c584964ed4636eb2beb7ca1527a570e3fceb689d5eebc2e7fda76395c7341d", &(0x7f0000000180)=0x38, &(0x7f00000001c0)="27769da3d6002f38584cc64ed4cc055837dc1bff1dadfa16946d3f42b169eb3795e5dac290ee588b7745ee65ca2b3255d3c699fdfaa9bc607b16612e9acd5da7f7e8b8d7c65a5c0d4771db4c1e9bc39ca378a68fbfc06e06f365fd786f5bf13ee26410dae578cb037fe276f335e8bb2767d60ba1203087875236c8fd7540728c634c982ccc390287f928050c6cbed7d171f549acbc11e287baa0469310293ed1f54eaf8c32c0c5689ddf85d7ab1962a16f9caf6310b382a08ebe4498bc93ef9b2df189c67a8f9821dd880de0033c42ca27505924a3aefd83c9964d49208670461e3e1266e9a5bc6a25050b8839727ead96e7", 0xf2)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
poll(&(0x7f00000000c0)=[{r1}, {r1, 0x80}, {r1, 0x80}], 0x3, 0x0) (async)
poll(&(0x7f00000000c0)=[{r1}, {r1, 0x80}, {r1, 0x80}], 0x3, 0x0)

325.522901ms ago: executing program 3 (id=1474):
openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) (async)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FIOASYNC(r2, 0x80047470, &(0x7f00000000c0)=0x400) (async, rerun: 32)
fcntl$dupfd(r2, 0x0, r0) (rerun: 32)
ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000180)) (async)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x2810, 0xffffffffffffffff, 0x0) (async)
fcntl$getown(r2, 0x5) (async)
select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x3ff}, 0x0) (async)
sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x19}, 0x4, &(0x7f0000000000)="251551f38439b80aef7f154a2c50ec237652efb6b0e656bc375cf3979d91ee15ec7f1d8178aee4c3d823be12352070d3b9942f4d4eaf1410b1c6b7748d4cfeae2869d1c3a7ffac2f8b8bca56ac4a435b9b4dae79d2651ce5196bd4e28c0f7781b4cb51db1e2774d9b0c961ae32cab48ef9d80333663007ca82", 0x0, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000080), 0x3, &(0x7f00000000c0)="59ef89f8e1011affc0bebcac5e47a44c3cb53bd7b1c6e812d40ad570092af9cf615cf48bd8a8b5b4e44fa9b1db070c6757c8e1e6c1e0f424a32eb5611e87d16a5059e253edb3881ccfd62d64cc23589d57d266cc48afbb9ae3072553c8470e6dc29c5e74613f88f021615ee5496958ceb7269be691b5f67ee2f2c8455073f295", &(0x7f0000000140)=0x80, &(0x7f0000000200)="d40f33797dbacd3b41299494315638b0e52a6b613d3708d4538e439acc80e547a368145199a37b47c7005ba14d855b42b7fd911702288b3df2c550673fba109604b62659ded8429c86cba258871d0dfe81e2c9c87a9709428aad91f8f9dcde227747c2aae534c7161ac2dab37b16a7d8962bd9", 0x73)

325.25449ms ago: executing program 1 (id=1475):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="8d6bb85551ec843087", 0x9}], 0x1)
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) (async, rerun: 64)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040), 0xc) (rerun: 64)

324.598735ms ago: executing program 7 (id=1476):
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x2})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="9da8e3e9ed", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
pledge(0x0, &(0x7f00000002c0)='tty\x00!\a\x9bj\xb6\x00\x00\x00\x00\x00\x00\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xd7\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=<l\x8c\x01\xe3\x05$\x1c\x04B\x00\xa4P\x04\xcf\x87\xaa\x96iP\x14{4\xe6\x87\x9d\x8f\bz9$\x10_\xd8E\x93\x92\xf5\x8au\xab\xf1)\xf5\xa6\xc7\xc8\xed\xb9\x1f2\x03K\xa2\xdbUshx\xbe\\\x19\xdax\xeb_\x10|r\x1e\x06p>\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x1an\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\f\x00\x00\x00\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\xeb\xb4\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x9b^\xae\x9f\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0_FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&[(j1\x98-\xfc\xf9\xb5\xa5d1t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0hD\xf4\x1a\x8eJ\xa6\xd9\x8c7~\xea\xceW^\x03\x18\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x8b\x80\xa5A\xf1\x95>\xd8G\xf0\xe25\xba\x95z\x14/(\x02\xb3a\x88`|/7Q\x1by}\x13\xd6\xaf\x01\xa2m\xceYn\x91\xb5\xb76\xfb\xc4\xf2\x1c\x999\x81\xc1\x98\x83\\\x8f5\x1d\xd5i#\x18\x12\x17C\xef\xea\xb8<\xa1\xe5w\xad\xf3[\xa7\x87\xa9\xe2\f\x97p\xe8O\xa9\xae\xd5\x8d\xe0|I\xb0\x96\x13\xd3\x8f#\xd0,\x9f\xc0\xc3\xdc\x12\\\xec\x10y\xd2\xbcx\xf8;f\xb1\x93\xa4\x90+\x89\xa6\xe0\xa3C4\x8b\\X\xb7\xc7\x13\x97\xa2\xe7\xfcp\xa3\xb1d\xdf\a1\xc7\x9b\x02\x1b\x98T\xfa\xfa\xf9Q.=\xf4')
clock_gettime(0x2, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0xff, 0xf0000000, 0xfffffffffffffffc}], 0x5, 0x0, 0x1, 0x0)
r2 = kqueue()
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='@', 0x1}], 0x1)
kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
dup2(0xffffffffffffffff, r2)
r3 = socket(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000000), 0x10)
dup2(r3, r1)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
dup2(r1, r0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
r5 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r5)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r6, 0x0)
ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0)

318.930367ms ago: executing program 3 (id=1477):
r0 = syz_open_pts()
flock(r0, 0x1)
flock(r0, 0x3)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x14)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000140)='./file3\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
fcntl$lock(r1, 0xb, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
chdir(&(0x7f0000000100)='./file0\x00')
open(&(0x7f0000000480)='./file0\x00', 0x80, 0x0)
sysctl$kern(&(0x7f0000000140)={0x1, 0x3d}, 0x6, 0x0, 0x0, 0x0, 0x9c8bce8ce70f2362)
r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
poll(&(0x7f0000000300)=[{r2, 0x1}, {r2, 0x4}, {r3, 0xe0}], 0x3, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x1000203, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4}, 0xfffffffffffffffc, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x4, 0xffffffffffffffff})
sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000240)='./file3\x00', &(0x7f00000002c0)='./file2\x00')
rename(&(0x7f0000000280)='./file2\x00', &(0x7f0000000040)='./file0\x00')

309.231602ms ago: executing program 1 (id=1479):
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x57)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000000c0)={<r1=>0x0}, 0xc)
fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x3, 0x1, 0x9, 0x8000000000000001, r1})
ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000040)={0x1e, 0x0, &(0x7f0000000000)=""/30})
sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, &(0x7f0000000480)="f1f138e1", &(0x7f0000000180)=0x4, &(0x7f00000005c0), 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)

261.468606ms ago: executing program 1 (id=1480):
r0 = semget$private(0x0, 0x4, 0x160)
semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000000)=""/177)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
r1 = semget$private(0x0, 0x2, 0x203)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x54e}], 0x1)
getdents(0xffffffffffffffff, 0x0, 0x0) (async)
getdents(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0)
ioctl$TIOCSETA(r2, 0xc0504417, &(0x7f0000000740)={0xdf2, 0x0, 0xfffffffd, 0x4, "0000000200000100000000000052fab427ec00", 0x40002, 0xffffbffc})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open(0x0, 0x800, 0xee5d056fe16de12e)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
pledge(0x0, 0x0)
semctl$GETNCNT(r1, 0x1, 0x3, &(0x7f00000002c0)=""/224)
unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='W\x00') (async)
unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='W\x00')
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00')
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x36}, 0x2, 0x0, 0x0, &(0x7f0000001440)="cca410df", 0x4)
sysctl$kern(&(0x7f0000001200)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x7c}, 0x2, &(0x7f0000000100)="11472f5d79347c3146900086726b8cfb0cce7d900db060f1a90481b902194ea250eb6ce6fa1311028da3a9b0ec89e4b70e8616f8127f10b21e5572c47c370b9d1ce25dda063f4bb534bf327734865aea1d86f53193bd50e98171da5b0ee0709a43047793461d3cc3023cae55f0efaadf4b879803ff4b670dfb96f8bd810d64455528c285c32669bd2527e643bd2352504edc4599f87d7b4dd24da605e8d7a6561669d3a7d14944b08ee07bbace0af866c877b64eb300c837ce4de4ed376b2039f686ed39d12cb080d4a395", &(0x7f0000000200)=0xcb, &(0x7f0000000240)="e150a46fcc1ebd1d16db606973b10f64d513b680ae76301141ee46014f70a3b1def36639c8c05b5951804a3485f174e5dfc2bef750a7066c51c7f42037daebbd94ac0d3aa54018c4a15684f8a15f0b1f793c45387a1aabba4b9232b1d74ac6598bfa339eeb7f", 0x66) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x7c}, 0x2, &(0x7f0000000100)="11472f5d79347c3146900086726b8cfb0cce7d900db060f1a90481b902194ea250eb6ce6fa1311028da3a9b0ec89e4b70e8616f8127f10b21e5572c47c370b9d1ce25dda063f4bb534bf327734865aea1d86f53193bd50e98171da5b0ee0709a43047793461d3cc3023cae55f0efaadf4b879803ff4b670dfb96f8bd810d64455528c285c32669bd2527e643bd2352504edc4599f87d7b4dd24da605e8d7a6561669d3a7d14944b08ee07bbace0af866c877b64eb300c837ce4de4ed376b2039f686ed39d12cb080d4a395", &(0x7f0000000200)=0xcb, &(0x7f0000000240)="e150a46fcc1ebd1d16db606973b10f64d513b680ae76301141ee46014f70a3b1def36639c8c05b5951804a3485f174e5dfc2bef750a7066c51c7f42037daebbd94ac0d3aa54018c4a15684f8a15f0b1f793c45387a1aabba4b9232b1d74ac6598bfa339eeb7f", 0x66)

260.58615ms ago: executing program 0 (id=1481):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="6aab", 0x2}], 0x1, 0x6)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb6", &(0x7f0000000080)=0x20, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r1, 0x0, 0x3, 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}})
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0)
mknod(&(0x7f0000000480)='./file0\x00', 0x6000, 0x400)
r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000180)=0x100)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x2d, 0x51, 0x7f, 0x8}]})
r4 = syz_open_pts()
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
close(r4)
syz_open_pts()
syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="03e9ff080000000080d3054fef8b1c304ac58f1b1b2729e5a569940b738582ba35a8fe1c8c5fa31d936df55380bfa144978acc50070983409bbc081e84a90f7bc6fc4cc79a77bf1e8078b75b4816f69942f7e7e0ac3bdb3213d362b5da04d9a18ee20189e3cc0c6924df60d5f70b709ca49f"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = socket(0x2, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4)
sendto(r5, &(0x7f0000000080)="01", 0x1, 0x1, 0x0, 0x0)

253.398128ms ago: executing program 7 (id=1482):
setrlimit(0x6, &(0x7f00000000c0))
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
r1 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r1)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, &(0x7f0000000340), 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f00000006c0)=@file={0x170, './file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x40d}, 0x0) (async)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x10010, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r3, 0x0) (async)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000180)={<r4=>0x0}, 0xc)
wait4(r4, &(0x7f00000001c0), 0xb, &(0x7f0000000200)) (async)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000140)) (async)
mlockall(0x1)

199.855017ms ago: executing program 1 (id=1483):
r0 = syz_open_pts()
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000006c0)=0x9) (async)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000006c0)=0x9)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000200)={0x27ffb, 0xa, 0x8000085, 0xfffffffe, "102e260a007be2dfe7d62007f533e2942b7a3ceb", 0x5, 0x16})
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="4b916c35d75b", 0x6}], 0x1) (async)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="4b916c35d75b", 0x6}], 0x1)
syz_open_pts() (async)
syz_open_pts()
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0)
r3 = syz_open_pts()
fcntl$dupfd(r0, 0xa, r3)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r4, &(0x7f0000000000)="d871819e2673b7e5c70000000000", 0xe)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000029, 0x41, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
close(r2)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x1ee0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r6 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0))
kqueue() (async)
r7 = kqueue()
kevent(r7, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async)
kevent(r7, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
socket(0x2, 0x3, 0x0) (async)
r8 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r8, 0xc0206921, &(0x7f00000001c0)) (async)
ioctl$FIONREAD(r8, 0xc0206921, &(0x7f00000001c0))
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r9 = socket(0x2, 0x4, 0x1)
ioctl$FIONREAD(r9, 0x80206916, &(0x7f00000001c0))
syz_open_pts() (async)
syz_open_pts()

198.945334ms ago: executing program 7 (id=1484):
r0 = socket(0x18, 0x8000, 0x6)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc)
connect$unix(r0, &(0x7f0000000000), 0x10)
sendto(r0, &(0x7f00000003c0)="98edc1cf9d242ff3974da44a7d14135bd098af851ac34c348faee1962d6c46b5fdbf461bf830a2d834290b52db8735d481097ea72d58dcbbef900c3ed549c7192281bc76da78ce4c85e55fa404cdbc535b0485af21dfce6c292f3d52d20554deead0144122194c4436c8f0a44df1934abda30e74769c50a935523c86fe42670bff1b0f21b5b1e988cb089546e638466cef54f5ebdb9239804183f4cbbe33603849607bc789bec4ec666e043790e51705bbd3d93930bb4d438c0ae48425fe5d5182b2cf507672e709bfb50688b40123b5cfa3c4d18dd7c668771ffc2d2318742b2be985932b51d702404d5c1c74559a884b06b316d805b3102b96b57360cccddc225faf85756fce553cae364fb5311df4bae08fcad3448a8f17e1c841e429ded2b97f36e9d27208096ea3668b2f4bbf379d2bf9a768aa78fb5471d8dcccbad159059c3efe5e5576ece7b8e1dbf3f0dbf10bf3a1bf775091c2c800a74b84247db5ec002e55d7dee183682348bd60c41c83ca", 0x171, 0x40a, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f00000000c0)="b1000502000001000000000001010000331c130200004e3003000000acf20b7804bec256699a1f1352aa339bac9e8b68c56cce220c032bfa896443b72102000000720fd18bc5aa0400000000008704031b4cc702fac500002021fbfa0c0f00008abf3a2271a3f8922e1205d3660400000000000000000000000000000012e62450616e6f0cc7e467a54c4666c4e743e2183eaf0f9d60a73b269f5e98515ae069846a489b4080b2a6dd28f97d3fff74f7faac04250975d8481554a24965b6cbe9762fe1c33dc5c78881cf17c3bf0bf9e35b0f64d09f5053179d14b9b14cadcfce6a497a6f61001b2da24dd42aecfba577bc638e8a1d00"/257, 0x119, 0x4, 0x0, 0x0)
r2 = socket(0x18, 0x1, 0x0)
getsockopt(r2, 0x29, 0x9, 0x0, 0x0)
r3 = accept$inet(r0, &(0x7f0000000540), &(0x7f0000000580)=0xc)
setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000005c0)="86e72499a88d874e9d27a539547a4e42b1f65105f3b9b45d34f7110dacec3499999e50ea59864a2da89eb0bb31fc1cdb012d7a977e513bbc6ff26301f423c143a13ae59a4f3e4ba656324d34629dea", 0x4f)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x4)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x100000000, {[0x7, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20, 0xf3, 0x0, 0x0, 0x558f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100], [{}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x800000000000}, {}, {}, {}, {0x0, 0x0, 0x72}, {0x0, 0x3, 0x0, 0x3}], {0x0, 0x1, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xef}}})
syz_extract_tcp_res(&(0x7f0000000680)={<r5=>0x41424344}, 0x401, 0x6)
syz_emit_ethernet(0x1492, &(0x7f00000006c0)={@broadcast, @local, [{[], {0x8100, 0x2, 0x1}}], {@ipv6={0x86dd, {0xb, 0x6, "2e978b", 0x1458, 0x1, 0x8, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0xf0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}, @routing={0x1d, 0xc, 0x0, 0x4, 0x0, [@mcast2, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, @empty, @loopback, @empty]}, @hopopts={0x6c}, @fragment={0x3a, 0x0, 0x4, 0x1, 0x0, 0x4, 0x68}, @dstopts={0x2f, 0x8, '\x00', [@pad1, @pad1, @generic={0x0, 0x2f, "46c6af86b599d3fd891a942dd544b10faba039b9b771ef71cec1885de439c01c241a33511b4a330e2d6f498e0c6055"}, @jumbo={0xc2, 0x4, 0xff}, @pad1, @pad1]}, @dstopts={0x33, 0x228, '\x00', [@generic={0xff, 0x1000, "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"}, @ra={0x5, 0x2, 0x100}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xe, 0x1e, "a7c022f10be2e3ef2713e0af7faddcc7ee70fe97e21e195b5e4abdaad20b"}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x0, 0xfe, "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"}]}, @dstopts={0x11, 0x1b, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0xb7, 0xc8, "9531fc999c4acf4abdd0cd35d71001a9029db190e35d9b41a8ec703a31f531880f86d85baa871a6ac817f62fcaa7d30d3ad318ad8003604ff2498bd284cc2d89a62f3ddcfd6670bdde10d2df967af65f1c14cfbf6c94891ea857f148958abb4dc181ad5ee77e2b0d33c94260e2b202830bad92db14e3334ae125c7ca7739a8ba63cbd8e1ecb2fe5c9a523bc796f80535ce26e5b3ce6a8a97c6814b757a972b230848c89f47cb05754a9092fba5b2074e2e6cd804c9456aaf543916caebeb91843673c3f069d86aea"}, @enc_lim={0x4, 0x1, 0xc}]}, @fragment={0x62, 0x0, 0x0, 0x0, 0x0, 0x17, 0x68}, @fragment={0x1c, 0x0, 0x7, 0x0, 0x0, 0x2, 0x64}, @dstopts={0x11, 0x20, '\x00', [@generic={0x9, 0xf3, "6be8e22fa969258ebd72c64dc354899bf0e70ebc1ff90d1dbb79c4e379b485c2c93ba0ce4c0c186bd704e0059348c7477cffb093a47fb2f878a142266815f07bc6c010b570950a798af93d9469e993e3a26fa5d42f7f93a1cead38aac762776c21f76b56ba4fb248dec30d289f69ddabdcbd7afad5c06e06c0499cc40163489c58807dd07d6ff4d8e4adada6624fc58d4fa90d1ab53b675c80b122cb193533e53a544035775e86321cff520f6f11eb0fa18c293294376957e2aae4a5627596e7950d636e59b8652c4af15a6e9e306a37dc7ad83e0df6cba489f79adf5717ef3f5eb7d1afc4c94f94e56c72014fa7049161b00e"}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}], @tcp={{0x3, 0x0, r5, 0x41424344, 0x1, 0x0, 0x9, 0x2, 0xe6, 0x0, 0x27f, {[@eol, @timestamp={0x8, 0xa, 0x8001, 0x77befc00}, @eol, @mss={0x2, 0x4, 0xdd}]}}, {"11fb2cdb2e921bc893c01070"}}}}}}})
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f00000001c0)={0x9, 0x2, {0xc, 0x3}})
open(&(0x7f0000000640)='./file1\x00', 0x200, 0x100)
r7 = kqueue()
kevent(r7, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0)
close(r4)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2000, 0x6d9845ad)
open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)

198.490399ms ago: executing program 4 (id=1485):
r0 = socket(0x18, 0x2, 0x0)
getsockopt(r0, 0x29, 0xd, 0x0, 0x0) (async)
ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f0000000000)={0x9, 0x4})
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1) (async)
r1 = socket$inet(0x2, 0x4, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)

195.358406ms ago: executing program 3 (id=1486):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x200020}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r1 = dup(r0)
setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x24)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')

149.395897ms ago: executing program 6 (id=1487):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x0, 0xff, 0x8000001}, {0xb1, 0x10, 0x2, 0x80000004}, {0x16, 0xf2, 0x7f, 0x400b}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="6aab0d39", 0x4}], 0x1, 0x6)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}})
r0 = semget$private(0x0, 0x2, 0xd1)
semctl$GETVAL(r0, 0x3, 0x5, &(0x7f00000000c0)=""/175)
sysctl$hw(&(0x7f00000002c0)={0x7, 0x10}, 0x2, &(0x7f0000000540), 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0xfff}, 0xc)
r1 = socket(0x18, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa)
getsockname$unix(r1, 0x0, &(0x7f00000010c0))

141.275656ms ago: executing program 4 (id=1488):
shmget(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async)
r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
syz_open_pts() (async)
r1 = syz_open_pts()
close(r1) (async)
close(r1)
kqueue() (async)
kqueue()
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000044000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00004b4000/0x4000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x1000000000}], './file0\x00', 0xfffffffc}) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000044000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00004b4000/0x4000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x1000000000}], './file0\x00', 0xfffffffc})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
socket(0x18, 0x2, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000027c0)={0x0, 0xffffffff}, 0x10, 0x400)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
close(r3)
r4 = kqueue()
kevent(r4, &(0x7f00000002c0)=[{{r1}, 0xfffffffffffffff8, 0x25, 0x8, 0x401, 0x7}], 0x9, 0x0, 0x9, 0x0) (async)
kevent(r4, &(0x7f00000002c0)=[{{r1}, 0xfffffffffffffff8, 0x25, 0x8, 0x401, 0x7}], 0x9, 0x0, 0x9, 0x0)
shmctl$SHM_LOCK(r0, 0x3)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37)

127.107125ms ago: executing program 6 (id=1489):
sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x3, 0x0, 0x0, &(0x7f0000001300), 0x0) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x3, 0x0, 0x0, &(0x7f0000001300), 0x0)
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000007c0)={0x0, 0x1, 0xffefbff6, 0x0, "4b06a6bcff0300dba800000000000800", 0xffffffff})
setitimer(0x1, 0x0, 0xffffffffffffffff)

125.573582ms ago: executing program 7 (id=1490):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff) (async)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000040)={'./file0\x00', 0x1, 0xd, 0xf})

114.611485ms ago: executing program 4 (id=1491):
ioctl$WSDISPLAYIO_GETSCREEN(0xffffffffffffffff, 0xc0245755, &(0x7f0000000000)={0x4, './file0\x00', './file0\x00'})
syz_emit_ethernet(0x61, &(0x7f0000000040)={@local, @random="c7a2e46f05fa", [], {@generic={0x806d, "826dba92bf4d39b7b49872a648d40eb7845713668a1347d20b23821e432c164dd95b4578c3b62ce644e6b0eefcfed199d5a2e3cd36444f97ae3b568afd251cec464931c4b2961214e38db2fc0a7764ae96012a"}}})

89.836258ms ago: executing program 7 (id=1492):
setrlimit(0x7, &(0x7f0000000000)={0x7, 0x53})
mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async)
chdir(&(0x7f00000001c0)='./file0\x00')
setreuid(0xee00, 0x0)
r0 = getuid()
r1 = msgget$private(0x0, 0x730)
msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) (async)
msgsnd(r1, 0x0, 0x401, 0x0)
msgsnd(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000002243f433b2262145f58c5924b509ce93981a6b42a5b3de22559b99ffa08e94d856288a0bd512c28bd2e85bb7a62192f7c97b3a2306fccc75e5f450566eaa764fd9a2b9d72128a644280b16683a00ee452311657af5c024f0ca7349e5636c39d14cfe573bb5bb48b7ad521db2d580de0eda2e1e32d3fa21b25713679124ad608dd68bfaa9dc8efb61ec909f532435228bba4c17fda4657e9c0d35cc15b99d68d5432b"], 0xac, 0x0)
msgctl$IPC_RMID(r1, 0x0) (async)
setreuid(0x0, r0)
r2 = socket$unix(0x1, 0x2, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
dup2(r4, r4)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
dup(r5)
bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) (async)
sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x100, &(0x7f00000002c0)=0x2, 0x4) (async)
r6 = syz_open_pts()
close(r6)
r7 = syz_open_pts()
ioctl$FIOASYNC(r6, 0x80047460, &(0x7f00000000c0)=0x1000) (async)
ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000380)={0x0, 0x20c0, 0x7, 0x2000aab, "ff0000000000008e82159464ab5b8a00", 0x3, 0x400})
writev(r6, &(0x7f0000000140)=[{&(0x7f00000004c0)="c3", 0x1}], 0x1)

89.03822ms ago: executing program 0 (id=1493):
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
r0 = getpgid(0x0)
r1 = getpid()
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1)
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e)
execve(0x0, 0x0, 0x0)
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1)
r2 = shmget(0x3, 0x2000, 0x24c, &(0x7f0000000000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0x3)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x11e, r0)

85.491731ms ago: executing program 4 (id=1494):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x40, 0x0, 0x0) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0xba9322d5054d6e2e, &(0x7f000000b000/0x1000)=nil)
r2 = shmat(r1, &(0x7f0000002000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0) (async, rerun: 64)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (rerun: 64)
shmdt(r2) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0xfd, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1}]}) (async, rerun: 64)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfdf1, 0x0, 0x2e) (rerun: 64)

53.268704ms ago: executing program 6 (id=1495):
shutdown(0xffffffffffffffff, 0x0) (async)
syz_emit_ethernet(0x41, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @generic={0x18, 0x8005, 0x6, 0xf, 0x2, @random="5f3c9a9bdeaf", "817d5fc46d029f7272ea16c1a38582", @local, "f62c55bb9ada13f157a6cf4009ed5e1e"}}}})

50.365387ms ago: executing program 1 (id=1496):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x10000)
mquery(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0, r0, 0x7)

6.364867ms ago: executing program 6 (id=1497):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}})
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, <r0=>0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x0, r0, r1, 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffffd, 0x0, 0x7ff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000029, 0x35, &(0x7f0000000000)="5ab7776a", 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x120, 0x0)
faccessat(r5, &(0x7f0000000140)='./file0\x00', 0x89, 0x1)
socket$inet(0x2, 0x1, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
r6 = fcntl$dupfd(r3, 0xa, r3)
ioctl$WSDISPLAYIO_DELSCREEN(r6, 0x80085754, &(0x7f0000000040)={0xfffffff8, 0x1})
sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)

5.620053ms ago: executing program 3 (id=1498):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = kqueue()
kevent(r0, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000000029, 0xb, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="6aab0d39fa00000200000000000000009715aa25f7690989f8eb5663ceb90babb78a19cb3fd2f78280dab8864b2072355de62e9d9e833376b7671c7c587eeef62c7d9d2b7bf6de042e221ca762057506946be709e5ea917be439d06d733769b5bcbb5e76", 0x64}], 0x1, 0x4)
sysctl$kern(0x0, 0x0, &(0x7f0000000000)="02170300000e00001a2af175e75360a2472fc39c46", &(0x7f0000000080)=0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000180)={@remote, @empty, [], {@generic={0x807}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r2 = syz_open_pts()
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100051300000000000000dd03000000000013fecea10500fe3c9df96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f", 0x51, 0x0, 0x0, 0x0)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d})
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
fcntl$lock(r4, 0x8, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x1000300010008, 0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
pipe(0x0)
close(r2)
r5 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000200)={0x27ffb, 0x7, 0x8000085, 0x1, "102e260a007be2dfe7d620078bda00", 0x0, 0x100081b})
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000400)="83d83f6f1ded45eba79a3263a95a0187536b4d4a17dc7f55a0ba1f62d811477c514514ff16bb5494ab4b422cc2749f81c48b09f27ea7289d2d91abda12aca2189e0c27cc9406a731b867fec83d9ae799dd9fbc14dc2845", 0x57}], 0x1)
socket(0x18, 0xc001, 0x0)
kevent(r0, &(0x7f0000000280)=[{{}, 0xfffffffffffffff8, 0x0, 0x8, 0x5, 0x4}, {{}, 0xfffffffffffffff8, 0xa5, 0x10, 0x6, 0x9}], 0x400, &(0x7f00000001c0), 0xffffffff, 0x0)
socket(0x11, 0x3, 0xa)
mkdir(&(0x7f0000000180)='\x00', 0x101)

4.498234ms ago: executing program 4 (id=1499):
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @rand_addr, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x0, 0x200, 0x6}}}}})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0)
clock_gettime(0x67f3248105b4e004, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0)
r0 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)

241.787µs ago: executing program 1 (id=1500):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8)
accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8)
socket$inet(0x2, 0x2, 0x0)
r2 = semget(0x0, 0x1, 0x281)
semop(r2, &(0x7f0000000080), 0x26)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="10", 0x3}], 0x1)
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="0dd60100df45e2", 0x7)
setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0)

0s ago: executing program 4 (id=1501):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x2, 0x9, 0x2, 0x4}, {0x2c, 0x3, 0x2, 0x1}, {0xe, 0xf, 0xdd, 0xfffff000}]})
syz_emit_ethernet(0x17a, &(0x7f0000000140)=ANY=[])
mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x6)
recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000200)=""/201, 0xc9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x40)
syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6000000000703b00008000000000000000000000000000bbfe80000000000000000000bc21bd66e26f978c0500000000a13434d0719602fc00605adf9300000000fe8000000000000000000000000000aaff010000000000000000004000000001000100000000000000010001030000000800000000000000010000010000000062010000004dd509d60c485be8020000000400000007000100000000000000000100004165000000d9bac07467d40a6b6b6154f0a273224494d5b70ac5c61b916e24cc5768745e4fcde3e1101e27950ca6fb70fb89392c953268283f3048b7ca4de94d125f5acda6eade"])
dup2(r1, r2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts.
pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffffd8060522460, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
,/0: #!.'4 (!.$,% !&0
,/0: #!.'4 (!.$,% !&0

OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00)

login: nd6_resolve: something odd happens
nd6_resolve: something odd happens
denied attempt to set clock back 67108873 seconds
uvn_flush: obj=0xfffffd806447f500, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
nd6_resolve: something odd happens
panic: pool_do_get: shmpl free list modified: page 0xfffffd805f3a8000; item addr 0xfffffd805f3a8010; offset 0x40=0xfe1ecc88
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
    237  29830      0           0  0x4000000    0  syz-executor
* 42461  58954      0           0  0x4000000    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff83072b76) at panic+0x1e5
pool_do_get(ffffffff83636800,2,ffff8000371b5838) at pool_do_get+0x5e6
pool_get(ffffffff83636800,2) at pool_get+0x141
shmget_allocate_segment(ffff8000ffffd1c8,ffff8000371b5a90,4c,ffff8000371b59e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000ffffd1c8,ffff8000371b5a90,ffff8000371b59e0) at sys_shmget+0x1b2
syscall(ffff8000371b5a90) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x617515c08e0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: pool_do_get: shmpl free list modified: page 0xfffffd805f3a8000; item addr 0xfffffd805f3a8010; offset 0x40=0xfe1ecc88
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83072b76) at panic+0x1e5
pool_do_get(ffffffff83636800,2,ffff8000371b5838) at pool_do_get+0x5e6
pool_get(ffffffff83636800,2) at pool_get+0x141
shmget_allocate_segment(ffff8000ffffd1c8,ffff8000371b5a90,4c,ffff8000371b59e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000ffffd1c8,ffff8000371b5a90,ffff8000371b59e0) at sys_shmget+0x1b2
syscall(ffff8000371b5a90) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x617515c08e0, count: -8
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000371b5680
rbx               0xffff800029b7cdbf
rdx               0xffff8000012900c0
rcx               0xffff8000ffffd1c8
rax               0xffff800029b7bff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x9329b08ddeaecf21
r11               0x3c5feb56d50f4a1b
r12               0xffff800029b7cbc0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff82eab345    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff8000371b5670
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=42461 pid=58954 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000371e6cd0,0xffff80002a03f1e8
    process=0xffff8000371a04a8 user=0xffff8000371b0000, vmspace=0xfffffd806c7d1558
    estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 47928  256295  59295      0  2           0                syz-executor
 47928  373912  59295      0  3   0x4000080  fsleep        syz-executor
 47928  456312  59295      0  3   0x4000080  fsleep        syz-executor
  4480  146580  89953      0  2           0                syz-executor
  4480   30613  89953      0  3   0x4000080  fsleep        syz-executor
 29830  502435  26655      0  2           0                syz-executor
 29830     237  26655      0  7   0x4000000                syz-executor
 29830  367793  26655      0  2   0x4000000                syz-executor
 58954  480320  51957      0  2           0                syz-executor
*58954   42461  51957      0  7   0x4000000                syz-executor
 58954  130634  51957      0  2   0x4000000                syz-executor
 58954  180032  51957      0  2   0x4000000                syz-executor
 35952  367762  59082      0  2       0x480                syz-executor
 35952  387663  59082      0  3   0x4000080  sbwait        syz-executor
 35952  298704  59082      0  3   0x4000080  fsleep        syz-executor
 20837  225478  70109      0  2       0x480                syz-executor
 20837   19414  70109      0  3   0x4000080  sbwait        syz-executor
 20837  425466  70109      0  3   0x4000080  fsleep        syz-executor
 71538  340477      0      0  3     0x14200  acct          acct
 59082  471361  45830      0  2       0x482                syz-executor
 89953   46511  45830      0  2       0x482                syz-executor
 45101  157915      1      0  3    0x100083  ttyin         getty
 68975   62710      0      0  3     0x14200  bored         sosplice
 38800  422495  45830      0  2         0x2                syz-executor
 52863  479816  45830      0  2         0x2                syz-executor
 70109  484228  45830      0  2       0x482                syz-executor
 26655  134438  45830      0  2       0x482                syz-executor
 59295   58380  45830      0  2       0x482                syz-executor
 51957  146737  45830      0  2       0x482                syz-executor
 45830  134902  45092      0  3        0x82  kqread        syz-executor
 45092  512157  24731      0  3    0x10008a  sigsusp       ksh
 24731  404596  14634      0  3        0x98  kqread        sshd-session
 14634  355023  16603      0  3        0x92  kqread        sshd-session
 16603  287679      1      0  3        0x88  kqread        sshd
 51389  348504    549     74  3   0x1100092  bpf           pflogd
   549  106977      1      0  3        0x80  sbwait        pflogd
 55680   93986  12683     73  3   0x1100090  kqread        syslogd
 12683  408363      1      0  3    0x100082  sbwait        syslogd
 81897  165501      1      0  3    0x100080  kqread        resolvd
 64105  176535   6028     77  3    0x100092  kqread        dhcpleased
 80346  321882   6028     77  3    0x100092  kqread        dhcpleased
  6028  196040      1      0  3        0x80  kqread        dhcpleased
 17445  463761      0      0  3     0x14200  bored         smr
 79822  407096      0      0  2     0x14200                zerothread
 80042  112841      0      0  3     0x14200  aiodoned      aiodoned
 78559  243607      0      0  3     0x14200  syncer        update
 34560  340049      0      0  3     0x14200  cleaner       cleaner
 57178  282052      0      0  3     0x14200  reaper        reaper
 42582  110309      0      0  3     0x14200  pgdaemon      pagedaemon
 35621   80727      0      0  3     0x14200  bored         viomb
 28310  147520      0      0  3  0x40014200  acpi0         acpi0
  2394  432219      0      0  3  0x40014200                idle1
 45996  491377      0      0  3     0x14200  bored         softnet3
 56499  326270      0      0  3     0x14200  bored         softnet2
 60862  487408      0      0  3     0x14200  bored         softnet1
  5420  221799      0      0  3     0x14200  bored         softnet0
 36043   73548      0      0  3     0x14200  bored         systqmp
 79387  197224      0      0  3     0x14200  bored         systq
 64297  235891      0      0  2     0x14200                softclockmp
 90820  241304      0      0  2  0x40014200                softclock
 35961  518628      0      0  3  0x40014200                idle0
     1   31886      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex shmpl r = 0 (0xffffffff83636810)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60
#3  pool_get+0x103
#4  shmget_allocate_segment+0x1a7
#5  sys_shmget+0x1b2
#6  syscall+0xaf8
#7  Xsyscall+0x128
Process 58954 (syz-executor) thread 0xffff8000ffffd1c8 (42461)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835780f8)
#0  witness_lock+0x5bb
#1  syscall+0xad6
#2  Xsyscall+0x128
exclusive mutex shmpl r = 0 (0xffffffff83636810)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60
#3  pool_get+0x103
#4  shmget_allocate_segment+0x1a7
#5  sys_shmget+0x1b2
#6  syscall+0xaf8
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10234  11274K   11584K 166960K     13614        0
            pcb    17     17K      19K 166960K       335        0
         rtable   231      8K       8K 166960K       738        0
             pf    37     18K      19K 166960K       129        0
         ifaddr    41      7K       8K 166960K        94        0
        ifgroup    55      2K       2K 166960K       140        0
         sysctl     4      1K       1K 166960K         6        0
       counters    64     36K      36K 166960K       118        0
       ioctlops     0      0K       4K 166960K      1763        0
            iov     1     16K      16K 166960K       136        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1521     96K      96K 166960K      2880        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2     10K      14K 166960K        34        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        62        0
        dirhash    12      2K       2K 166960K        60        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    17     61K      93K 166960K      1680        0
          sigio     0      0K       0K 166960K        38        0
           proc    72     91K     152K 166960K       810        0
        subproc   104      6K       6K 166960K       146        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       208        0
       in_multi    88      6K       7K 166960K       204        0
    ether_multi     1      0K       0K 166960K         7        0
            mrt     1      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   241   1076K    1076K 166960K       241        0
           exec     0      0K       1K 166960K       754        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   260     74K      88K 166960K     17279        0
       UVM aobj    86      5K       7K 166960K        90        0
     pinsyscall    42     84K     102K 166960K      2870        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       171        0
            NDP    12      0K       1K 166960K        64        0
           temp    76   6828K    6924K 166960K     67108        0
         kqueue    14     22K      32K 166960K       305        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      363    0      293     5     2     3     3     0     8    0
rtentry    112      212    0      108     4     0     4     4     0     8    0
unpcb      144     1380    0     1357    10     4     6     6     0     8    5
syncache   336       10    0       10     5     4     1     1     0     8    1
tcpqe       32        2    0        2     2     1     1     1     0     8    1
tcpcb      808      745    0      739    21    13     8     8     0     8    6
arp        120       38    0       18     1     0     1     1     0     8    0
inpcb      336     2616    0     2605    32    22    10    15     0     8    8
nd6        136       40    0       16     1     0     1     1     0     8    0
pkpcb       40       38    0       38     1     0     1     1     0     8    1
kcovpl      48       11    0        3     1     0     1     1     0     8    0
ppxss      1168      17    0       17     3     2     1     1     0     8    1
pfstscr     40       10    0        8     1     0     1     1     0     8    0
pffrag     232        8    0        3     2     1     1     1     0   482    0
pffrnode    88        8    0        3     2     1     1     1     0     8    0
pffrent     40       85    0       80     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24      128    0       34     1     0     1     1     0     8    0
pfstkey    128      133    0       34     4     0     4     4     0     8    0
pfstate    376      126    0       34    10     0    10    10     0     8    0
pfrule     1344      27    0       18     2     0     2     2     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      803    0      390    32     6    26    30     0     8    0
art_table   32      806    0      390     4     0     4     4     0     8    0
art_node    16      203    0      112     1     0     1     1     0     8    0
sysvmsgpl   40       12    0        8     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       58    0       48     1     0     1     1     0     8    0
shmpl      112       87    0        4     3     0     3     3     0     8    0
pool(0xffffffff83636800:shmpl): page inconsistency: page 0xfffffd805f3a8000; 21 on list, 13 missing, 35 items per page
dirhash    1024      49    0       32     3     0     3     3     0     8    0
dino2pl    256     4379    0     2868    95     0    95    95     0     8    0
ffsino     272     4379    0     2868   102     0   102   102     0     8    0
nchpl      144     6764    0     5072    64     0    64    64     0     8    0
uvmvnodes   80     5432    0        0   111     0   111   111     0     8    0
vnodes     216     5432    0        0   302     0   302   302     0     8    0
namei      1024   23966    0    23966     4     3     1     1     0     8    1
percpumem   16       73    0       27     1     0     1     1     0     8    0
kstatmem   264       78    0       54     2     0     2     2     0     8    0
scsiplug    72        9    0        9     3     2     1     1     0     8    1
scxspl     216    19597    0    19597    14    11     3     8     1     8    3
plimitpl   152      530    0      511     1     0     1     1     0     8    0
sigapl     424     1984    0     1933     7     1     6     7     0     8    0
futexpl     64    23861    0    23856     1     0     1     1     0     8    0
knotepl    120      584    0        0    18     0    18    18     0     8    0
kqueuepl   216      763    0      752    17    13     4     8     0     8    3
pipepl     320      294    0      265     5     2     3     5     0     8    0
fdescpl    496     1963    0     1932     5     0     5     5     0     8    0
filepl     152    14813    0    14488    33    12    21    24     0     8    7
lockfpl    104      659    0      656     2     0     2     2     0     8    1
lockfspl    48      203    0      200     1     0     1     1     0     8    0
sessionpl  144       34    0       25     1     0     1     1     0     8    0
pgrppl      48       60    0       43     1     0     1     1     0     8    0
ucredpl    104     2357    0     2343     1     0     1     1     0     8    0
zombiepl   144     1934    0     1933     2     1     1     1     0     8    0
processpl  1160    1984    0     1933     5     1     4     5     0     8    0
procpl     648     4425    0     4362     6     0     6     6     0     8    0
srpgc       96        7    0        7     3     3     0     1     0     8    0
sosppl     168        4    0        4     2     1     1     1     0     8    1
sockpl     664     4428    0     4324    46    33    13    21     0     8    4
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       6    0        0     1     0     1     1     0     8    0
mcl4k      4096     152    0        0    19     0    19    19     0     8    0
mcl2k      2048      30    0        0     3     0     3     3     0     8    0
mtagpl      96       55    0        0     2     0     2     2     0     8    0
mbufpl     256     1526    0        0    94     0    94    94     0     8    0
bufpl      280     6210    0      137   434     0   434   434     0     8    0
anonpl      24   361725    0   355789   104    24    80    83     0   185   33
amapchunkpl 152   57998    0    57352    46    11    35    35     0   158    8
amappl16   200     9669    0     9574    46    29    17    29     0     8    8
amappl15   192       43    0       43     1     1     0     1     0     8    0
amappl14   184      139    0      127     1     0     1     1     0     8    0
amappl13   176       13    0       12     1     0     1     1     0     8    0
amappl12   168     2668    0     2637     4     2     2     3     0     8    0
amappl11   160       62    0       48     1     0     1     1     0     8    0
amappl10   152       54    0       54     1     1     0     1     0     8    0
amappl9    144      148    0      146     1     0     1     1     0     8    0
amappl8    136       29    0       26     1     0     1     1     0     8    0
amappl7    128      129    0      117     1     0     1     1     0     8    0
amappl6    120      203    0      202     1     0     1     1     0     8    0
amappl5    112      165    0      153     1     0     1     1     0     8    0
amappl4    104      352    0      331     1     0     1     1     0     8    0
amappl3     96    10505    0    10398     3     0     3     3     0     8    0
amappl2     88     2350    0     2264     3     0     3     3     0     8    0
amappl1     80    14165    0    13606    14     0    14    14     0     8    0
amappl      88    16690    0    16493     5     0     5     5     0    92    0
dma16384   16384      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      257    0      257     4     3     1     1     0     8    1
dma64       64        7    0        7     2     1     1     1     0     8    1
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       89    0        4     2     0     2     2     0     8    0
uaddrrnd    24     1964    0     1933     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1964    0     1933     1     0     1     1     0     8    0
vmmpekpl   168    16520    0    16472     3     0     3     3     0     8    0
vmmpepl    168   129015    0   127049   119    14   105   108     0   357   12
vmsppl     448     1963    0     1933     6     2     4     5     0     8    0
rwobjpl     56    43408    0    36863    94     1    93    93     0     8    0
pdppl      4096    3935    0     3866   111    40    71    85     0     8    2
pvpl        32    20452    0        0   167     2   165   165     0   265    0
pmappl     248     1963    0     1933     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      541    0       96    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83421ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
sys_kevent(ffff8000371e62b0,ffff80002d97abb0,ffff80002d97ab00) at sys_kevent+0x3da
syscall(ffff80002d97abb0) at syscall+0xbb6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xe06fd7b0e50, count: 8
ddb{0}> trace
x86_ipi_db(ffffffff83421ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
sys_kevent(ffff8000371e62b0,ffff80002d97abb0,ffff80002d97ab00) at sys_kevent+0x3da
syscall(ffff80002d97abb0) at syscall+0xbb6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xe06fd7b0e50, count: -7
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff83072b76) at panic+0x1e5
pool_do_get(ffffffff83636800,2,ffff8000371b5838) at pool_do_get+0x5e6
pool_get(ffffffff83636800,2) at pool_get+0x141
shmget_allocate_segment(ffff8000ffffd1c8,ffff8000371b5a90,4c,ffff8000371b59e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000ffffd1c8,ffff8000371b5a90,ffff8000371b59e0) at sys_shmget+0x1b2
syscall(ffff8000371b5a90) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x617515c08e0, count: 7
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83072b76) at panic+0x1e5
pool_do_get(ffffffff83636800,2,ffff8000371b5838) at pool_do_get+0x5e6
pool_get(ffffffff83636800,2) at pool_get+0x141
shmget_allocate_segment(ffff8000ffffd1c8,ffff8000371b5a90,4c,ffff8000371b59e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000ffffd1c8,ffff8000371b5a90,ffff8000371b59e0) at sys_shmget+0x1b2
syscall(ffff8000371b5a90) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x617515c08e0, count: -8