last executing test programs:

6.268007595s ago: executing program 6 (id=428):
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000200)={0x8, 0xbcb, 0x3, 0x681, "bb3e5289cd57226f7a1236c3da801ac6d7e5eb63", 0x500000, 0xb})
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000080)="428ba156491275c8b560abfde1e13c896ac5cee59d82c050e1db577bf612f400b2e1a6f8992833874709d9a7716b2b1b2f105bdd234c22680e227c1affcdfc7b3c170d685cafe6b1c685b243fb2398a92938e8357262cdae796aec303ea6bfc16af654359d072a532a3276a1c67edd183c42761eccd264fd48034b18aedbf3dc6d4e70eb11d1512195b80babee1b69c6d5d815c69495ba7230bd9b901ca1e591", &(0x7f0000000140)=0xa0, &(0x7f0000000180)="8b8dda9a7d178a91d4fe870e6524e4034b74f7411e09f301ecbc8b5fe540422b5840424abebff8aba741fea566432e4e8d95143d7b2a9000a5fc9237df67a6373e4be3fb1427422829abe2fa9d6c", 0x4e)

6.222650062s ago: executing program 6 (id=429):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000700)=[{0x84, 0x46, 0x5, 0xff}]})
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]})
r1 = socket(0x2, 0x4001, 0x0)
recvmmsg(r1, &(0x7f0000001700)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/53, 0x35}, 0x7}, 0x38, 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x82, 0x7ff}, {0x26, 0x8807}, {0x45, 0x8}, {0x100, 0x200}, {0x24, 0x5}, {0x22, 0x6}], 0x6})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x4, &(0x7f0000000100)=0x3, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x400000000000000a, &(0x7f0000000000)="71f91e3471ac0058bc501d94a34b72ba3b00e77ea84a88a0ff30b0f552cec6ea5195bcf64006bcaf82a84bddacf20c", &(0x7f0000000140)=0x6f, 0x0, 0x2e)

6.116717036s ago: executing program 6 (id=434):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
select(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7, 0x101, 0x202, 0x7ff, 0x9, 0x0, 0x6, 0x3}, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000300)={{0x0, 0x6347}, {0x0, 0xffffffffffffffff}}, 0x2f)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x80206916, &(0x7f00000001c0))
ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000080)=0x693c100f16c15fd)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0)
closefrom(r2)
ftruncate(r3, 0x6)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)

5.213760169s ago: executing program 6 (id=450):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="9f8f0fd4f58f3995174c7aac6feeec9ac3a19e92d81f9b8f7830dc17e6e91d194aa0bde7847f97075391b28f", 0x2c}, {&(0x7f00000000c0)="9be569ac3c804143b77f87581ca52343c0e89537db536c427e18d5361fa275caa24623", 0x23}], 0x2, 0x5) (async)
pwritev(r0, &(0x7f0000003480)=[{&(0x7f00000001c0)="b5ad812ed6182dedbd2d82159083c9e9d9d72d882dad1b221661bb1bc476bfd8a72986ccc5fc31f368ecf4d75779c542fbb28345beb901e5ae63f52f1c01c6efc963739c263361791ee2d34f6c", 0x4d}], 0x1, 0xfffffffffffffffc) (async)
kill(0xffffffffffffffff, 0x6) (async)
r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
setuid(0xee01) (async)
ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000000c0)) (async)
unveil(0x0, &(0x7f0000000080)='r\x00') (async)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async)
setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0)
kill(0xffffffffffffffff, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

3.383453248s ago: executing program 6 (id=450):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="9f8f0fd4f58f3995174c7aac6feeec9ac3a19e92d81f9b8f7830dc17e6e91d194aa0bde7847f97075391b28f", 0x2c}, {&(0x7f00000000c0)="9be569ac3c804143b77f87581ca52343c0e89537db536c427e18d5361fa275caa24623", 0x23}], 0x2, 0x5) (async)
pwritev(r0, &(0x7f0000003480)=[{&(0x7f00000001c0)="b5ad812ed6182dedbd2d82159083c9e9d9d72d882dad1b221661bb1bc476bfd8a72986ccc5fc31f368ecf4d75779c542fbb28345beb901e5ae63f52f1c01c6efc963739c263361791ee2d34f6c", 0x4d}], 0x1, 0xfffffffffffffffc) (async)
kill(0xffffffffffffffff, 0x6) (async)
r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
setuid(0xee01) (async)
ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000000c0)) (async)
unveil(0x0, &(0x7f0000000080)='r\x00') (async)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async)
setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0)
kill(0xffffffffffffffff, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

2.388919363s ago: executing program 1 (id=507):
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0)

2.326125049s ago: executing program 1 (id=510):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xc, 0x0, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000100), 0x0)

2.319524223s ago: executing program 1 (id=514):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
sysctl$vm(0x0, 0x0, &(0x7f0000000b80)="1b0079dd303f01c55d8a8d075df91d", 0x0, 0x0, 0x0)
sysctl$hw(&(0x7f0000000400)={0x6, 0x5}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
ioctl$TIOCSETA(r0, 0xc450444d, &(0x7f0000000740)={0x0, 0x1, 0xfffffffd, 0x4, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x3, 0x5})
mquery(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, r0, 0x5)

2.241136488s ago: executing program 5 (id=516):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async)
kqueue()
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async, rerun: 32)
r1 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil) (rerun: 32)
r2 = shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0) (async)
r3 = msgget$private(0x0, 0x0) (async)
r4 = msgget$private(0x0, 0x480) (async, rerun: 64)
ioctl$VMM_IOC_RUN(r0, 0xc0285602, &(0x7f0000000680)={0x150c08d9, {0x5, 0x8, 0x3}, 0x7f, &(0x7f0000000400)={@vee={0x7, 0x1, 0x0, "d76c356279d7e4754a4b27f5737e93", 0x3}, {[0x3, 0x4, 0x0, 0x1, 0x3, 0x8, 0x4, 0x53, 0x2, 0x9, 0x8001, 0x3, 0x8000000000000000, 0x8, 0x6, 0x40, 0x36, 0x2], [0x1, 0xd, 0x7, 0x1, 0x4, 0xa, 0x8, 0x1, 0x1ff, 0x9], [0x7, 0x8, 0xffffffffffffffff, 0x2, 0x81, 0x1, 0x2f4], [0x0, 0x6, 0x4, 0x3, 0x0, 0x9], [{0x1ff, 0x5676a14a, 0xc18d, 0x2}, {0xfd4, 0x6, 0x6, 0x20000000000000}, {0x8, 0x7, 0x6}, {0x3, 0x9, 0x7, 0x1}, {0xd, 0x1ff0000, 0x24a, 0x9505}, {0x8a9, 0x8, 0x5, 0x6}, {0x2d, 0x9, 0xf7, 0xb5}, {0x3, 0x200, 0x8, 0xb}], {0x1, 0x7, 0x81, 0x100000001}, {0xa, 0x9, 0x9, 0x3}}, 0x6}, 0x7, 0x87}) (rerun: 64)
msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe1, 0x800) (async)
msgrcv(r3, &(0x7f0000000100)={0x0, ""/219}, 0xe3, 0x0, 0x1000)
shmat(r1, &(0x7f00001a0000/0x3000)=nil, 0x2000) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
r5 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil)
r6 = shmat(r5, &(0x7f0000001000/0x3000)=nil, 0x0)
shmctl$IPC_RMID(r5, 0x0) (async)
readv(0xffffffffffffffff, &(0x7f00000025c0)=[{0x0}], 0x1)
preadv(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1, 0xfffffffffffffffc) (async, rerun: 32)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x80a, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x0, 0x8, "fffe0000fffffffffffffff200", 0x7}, 0x1c) (async, rerun: 32)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64)
r7 = socket(0x18, 0x1, 0x0) (rerun: 64)
setsockopt(r7, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
setuid(0xffffffffffffffff) (async)
kqueue1(0x4) (async)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
shmdt(r6) (async)
shmdt(r2) (async, rerun: 32)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) (rerun: 32)

2.082441408s ago: executing program 1 (id=522):
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f00000008c0)={0x0, 0x0, <r0=>0xffffffffffffffff, 0x0, 0x5})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0)
ioctl$DIOCADDQUEUE(r1, 0xc148445d, &(0x7f00000008c0)={0x2, 0x6, {'\x00', './file0\x00', './file0/file0\x00', './file0\x00', {{0x2, 0x7}, {0x9, 0x4}, 0x7}, {{0x4, 0x8}, {0x7, 0xa6e2}, 0x5}, {{0x4, 0x10}, {0xe, 0xf}, 0x81}, {0x60, 0x2dd5, 0xfffffffd, 0x46a255a3}, 0x0, 0xac, 0x1, 0x401, 0x7fffffff}})
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x50, 0x101)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000980), 0x20040, 0x0)
r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000009c0), 0x80, 0x0)
r5 = kqueue1(0x10000)
pipe2(&(0x7f0000000a00)={<r6=>0xffffffffffffffff}, 0x10004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f0000001e00)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40))
r8 = openat$dri(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x80, 0x0)
r9 = getpgid(0xffffffffffffffff)
fstat(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = semget(0x0, 0x1, 0x281)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r12=>0xffffffffffffffff})
getsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f0000000180)={0x0, <r13=>0x0, <r14=>0x0}, &(0x7f0000001e00)=0xc)
setresgid(r14, r14, r14)
semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000780)={{0x0, r14, r13, r14, 0x8f, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005})
r15 = getppid()
lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
getresgid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)=<r17=>0x0)
r18 = getppid()
fstat(0xffffffffffffff9c, &(0x7f0000000cc0))
r19 = socket(0x18, 0x1, 0x0)
getsockopt$sock_int(r19, 0xffff, 0x4, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000380)=@abs={0x3, 0x1, 0x0, 0x1}, 0x8, &(0x7f0000000800)=[{&(0x7f00000003c0)="275afeb82acfcc5e5e6979138575803fe1c26ed7e0fa1b9479f2982c51efc77564d4448574bf2d6869485181962211b2aabbc8f48815078dc1cffc5016d27736f66a3b62e08f2949aed2e010c75aa75232e7185ba4080e6c4b1ca08427014061cca001325190002aaa4cd9c6265007bccea7ed43bd5444d4baa8d2422375d82203ec63af4be6ea5d0cbe26357c2ec2e2091250cce5bc1e304f339037f25ce27b67110750", 0xa4}, {&(0x7f0000000480)="e284323a378d27fcd1556dbbfb2cb1d81205fc582b17c6b3dec141b4122b454c5134e239d4a808b3025f49903d073d289619779530178db66595d663c235901a9248b0b423a717185c52baa4a9ffc0c47ba3dadd28f217d8ccf5b1950d1ab1d64e78de23e5b362cf0c039d74caeefe8c0c0f92ff0f1a6f2974609b47ee12e4599e276aabf52afced68f62db29909d84b3113dac46b61d07091", 0x99}, {&(0x7f0000000540)="7e4bba468681f14636eb7ab0dd15d30882179e1c867af4efa4bdfaa97e6dde27a7e7edb4b9f93ec8e611991b169627cbfa37aac39007773495fa788a73a4b72d84d6d89305125154f33678f43177587b94a46df476604f3cdb65b3909f35a5a607feb7dbe9ee05615c5cb9156ebf43a955", 0x71}, {&(0x7f00000005c0)="b67dad16bc3bdf4c61868c7626a03df5c46d252f71bcd26b547e28970c7534ac6d56c85c5e926c8e959abeb70fa2a00bb21bac752bf7a2ac11f861d4962fe6809afb403e2e6d2e04935a86c57bbf76f8ad472bfcaba45c82d7b01dcef9fbcaae5f676458a58d7668adba7b51acf8e5ecd39ba5df48750ec6d0782ef5bc92b7", 0x7f}, {&(0x7f0000000640)="b7ed94a7f27ef8b89adf66763a09d159f8f56bf33ae6b580b281dedbe4f5522b86b023f8dd1fd737148b3352e3fd7bf0f40874193e398a41dbb608a103822eab926a19d5d90e80eadaac3fb964132dd858f9cab70b2a352f6cabb69add6654d40ea26bc5adaeea9cb2ba5c24cdb7a348416004360c06c3864e014a100d2426058f8a885e9c1ae20ec175fbe6310a290257733d0d439b1a0973d0347be411af6d3f6753e795f46e40e2d8e2f25f92b92c7cfed88c544f97a7ea8b9dcbc0d15be6ace46888da1e1322ffb25ab4c9c805cc3577cb5569ff59011681f12d9888", 0xde}, {&(0x7f0000000740)="571472583b4318652ffa3f471be341a13901ad4179c8f64ab958ea217c054a30d6f6d52c745ca7dcf12b4dad490b5a93da95acc04ed0b25d44de263ab5adac3720e882cb07dc6616c09c8fb2336e314e6c6386c7ea2274acde7932def00d0df00323e343b29a2688c9c8edfba1aa9856879516c34205ad9d73b618059527089cc35b9b279d8f8aa0ebf771e063e7451b448de5758bc4bea534d2fb41533197", 0x9f}], 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000ffff000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="28000000ffff000001000000", @ANYRES32=0xffffffffffffff9c, @ANYRES32=0xffffffffffffff9c, @ANYRES32=r2, @ANYRESDEC, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000ffff000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r19, @ANYRES32=r8, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="180000dffeff03080000b4ff", @ANYRES32=r18, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="10000000ffff000001000000", @ANYRES32=r19], 0xb4, 0xa}, 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000080)='M&$.}:@\x00', &(0x7f00000000c0)='^', &(0x7f0000000100)='\\{\x00'], &(0x7f0000000340)=[&(0x7f0000000180)='!\x00', &(0x7f00000001c0)='\'&^]\xe2)\x00', &(0x7f0000000200)='[-\x00', &(0x7f0000000240)='(\'{<[%\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='#\x00', &(0x7f0000000300)='\x00'])
sysctl$hw(&(0x7f0000000040)={0x6, 0x5}, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0)

1.872035891s ago: executing program 1 (id=525):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async, rerun: 32)
chmod(&(0x7f0000000040)='.\x00', 0x34b) (async, rerun: 32)
setuid(0xee01) (async)
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00') (async)
readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/158, 0x9e) (async)
ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000001540)={0x4b, &(0x7f0000000180)}) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) (async)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pread(r1, &(0x7f00000000c0)="3cd15db7", 0x4, 0x400000101)
ioctl$WSMOUSEIO_GETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000140)={&(0x7f0000000080)=[{0x7, 0x8}, {0x7, 0x8}], 0x2})
r2 = socket$inet(0x2, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000300)=@un=@file={0xe5, 0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfc, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x18}, 0x1) (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x0, './file1\x00', [{[@v6=@empty, @v6=@loopback], [0x1, 0x40], 0x0, 0x2}, {[@v6=@rand_addr="be762f745a650c4fc824f39777cbdbf1", @v4=@rand_addr=0x9], [0x46], 0x4, 0x14}], {{0x246, 0x48, 0xba, 0x100007ff}, 0x6543, 0x409, 0xfff00000, 0x8001, 0x8, 0x17, 0x7}, {{0x0, 0x7, 0x5, 0x5}, 0x51fe1b1d, 0xc86, 0x10007, 0x4, 0x3ff, 0xf2}, @v6=@empty, 0x54d5, 0xa, 0x2, 0xf23b, 0x5, [[0x8, 0xffffffff], [0x3958, 0x6]], [[0xfc000002, 0x4], [0xfffffff7, 0x3]], 0xb, [0x80001d9, 0x79], 0x1, 0x18, 0x6, 0x1, 0x0, 0x3, 0xe, 0x83, 0x5, 0x8, 0x1, 0xce57, "0600"}}) (async)
select(0x0, 0x0, &(0x7f0000000040)={0x50, 0x6, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x100000001})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe})
r4 = socket(0x2, 0x1, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x10004) (async)
r6 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r6, &(0x7f0000000000)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0xff, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="6788020000003a9af6d85edf1124c348abdd612dd68e59adfeaf93231066391632859168a1affe1c1301a20dbffe8b52", 0x30}, {&(0x7f00000001c0)="ac797473b0e131263ef536fb6f39353db56641efc3c797acf7103f23b2a928c53036bee20198dd6fe64df572f4968fc169e5a220659b2ed2bbb1ec6a8852c89a74869b958ff0d6c441fb61f883a38a8f0ccce15a7c53b6ffa76389d629b97a28a503605dff4629d8f614fdce593b30f2", 0x70}], 0x2, 0x0}, 0x402) (async)
ioctl$AUDIO_MIXER_WRITE(r5, 0xc0144d01, &(0x7f0000000240)=@set_ctrl={0x1, 0x2, 0x8})
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) (async, rerun: 64)
sendto$unix(r4, &(0x7f00000000c0)="f960b713d2922ecd93bae28993a868ff2ca5f2a45f30698f89142e3dcc6e8c0177ab51d8163567aaa5e672bec9b415d9af7f8334f3e95c83144745912eef471203e1e033ddb7ab02bed7c39c95232d2c0e438e6a8d0d4e350b825658a6dfec4202f743703f5ffa030781abd45c39ba8e3365a4fa7de8110e742b2793631d2697475e5fde5df4d1b074d8d4f1f9ce8af781ed4a4097c657ecfc29893dfb5ac138547050453423add86bcf198b53a9e480994ab061de1e21fe05e3441e37ffd551d07f5b1ee251ce7a", 0xc8, 0x40d, &(0x7f0000000200)=@file={0x2, 0x1, './file0\x00'}, 0xa) (rerun: 64)

1.505735247s ago: executing program 6 (id=450):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="9f8f0fd4f58f3995174c7aac6feeec9ac3a19e92d81f9b8f7830dc17e6e91d194aa0bde7847f97075391b28f", 0x2c}, {&(0x7f00000000c0)="9be569ac3c804143b77f87581ca52343c0e89537db536c427e18d5361fa275caa24623", 0x23}], 0x2, 0x5) (async)
pwritev(r0, &(0x7f0000003480)=[{&(0x7f00000001c0)="b5ad812ed6182dedbd2d82159083c9e9d9d72d882dad1b221661bb1bc476bfd8a72986ccc5fc31f368ecf4d75779c542fbb28345beb901e5ae63f52f1c01c6efc963739c263361791ee2d34f6c", 0x4d}], 0x1, 0xfffffffffffffffc) (async)
kill(0xffffffffffffffff, 0x6) (async)
r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
setuid(0xee01) (async)
ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000000c0)) (async)
unveil(0x0, &(0x7f0000000080)='r\x00') (async)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async)
setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0)
kill(0xffffffffffffffff, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

1.355271726s ago: executing program 5 (id=532):
r0 = socket(0x2, 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0))

1.328119715s ago: executing program 4 (id=534):
mknod(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100d02)
r0 = socket(0x2, 0x8002, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
closefrom(r1)
mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf)
open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000240), 0x0)
getpeername(r1, &(0x7f0000000200)=@in, &(0x7f0000000240)=0x10)
mknod$loop(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.306757943s ago: executing program 5 (id=535):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f0000000340)={0xffffffff, '\x00', './file0\x00'})
sysctl$kern(&(0x7f0000000240)={0x1, 0x29}, 0x2, &(0x7f0000000300), 0x0, 0x0, 0x0)

1.306383651s ago: executing program 0 (id=536):
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x40000, 0x171)
ioctl$VMM_IOC_RUN(r0, 0xc0205602, &(0x7f0000000200)={0x0, {}, 0x0, 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f00003de000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0xb}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff, 0x2}, {&(0x7f000024d000/0x1000)=nil, &(0x7f00005ff000/0x4000)=nil, 0x401}, {&(0x7f00006db000/0x4000)=nil, &(0x7f0000179000/0x1000)=nil, 0x80000002}, {&(0x7f0000338000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8, 0x2}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x3}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000084000/0x3000)=nil, 0x6b9}, {&(0x7f00006a2000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f0000630000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x2, 0x1}, {&(0x7f00001e8000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0xa, 0x1}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xfffffff7bffffff9}, {&(0x7f00004d0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f00004b3000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0x3})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9)
ioctl$FIOASYNC(r1, 0xc0107002, &(0x7f00000000c0))
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_pts()
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
r4 = socket$inet(0x2, 0x8003, 0x0)
setsockopt(r4, 0x0, 0x7, &(0x7f0000000340)="15337ac0", 0x4)
r5 = socket$inet(0x2, 0x3, 0x40)
sendto$inet(r5, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
bind$unix(r6, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa)
connect(r6, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa)
connect$unix(r6, &(0x7f0000000080)=@file={0x87, 0x1, './file0\x00'}, 0xa)
minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3)
closefrom(r2)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='c\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@random="728488b5564b", @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @remote={0xac, 0x14, 0x0}, @remote}}}})

1.249553911s ago: executing program 5 (id=538):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000040), 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f00000000c0)=@abs={0x2b, 0x1, 0x0, 0x3}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
chmod(&(0x7f0000000280)='./file0\x00', 0x3a)
setuid(0xee01)
connect$unix(r2, &(0x7f0000000080)=@file={0x87, 0x1, './file0\x00'}, 0xa)
r3 = socket(0x24, 0x2, 0x0)
connect(r3, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x1, "f211d3c3d1c99fe009df5ddea49db460", 0x6}, 0x1c)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00')
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000080)="01e60404", 0x4)
clock_gettime(0x3, &(0x7f0000000000))
setresgid(0x0, 0xffffffffffffffff, 0xffffffffffffffff)
sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0x12}, 0x4, &(0x7f0000000180)="a0c95a4c9a320196c86e00a76fd2d82d2029f371d6c614ab2acf607afab6095d4afce7bcab99a43a1057d7f651c6af8177401ff530ac8e1f3bd2654246daea6701b3fdade238a3fa76cd581a2de160defbf59a1dc07fdfa29ea48ca18a5e48731d38a2433ebae0d82ca29fefc12544bd0406a3f666552f853d779216eff8a2a7acd56ef7ba7125ba56c1ff793bca3faf71b8d115812385f5b8042438a13d2928a4fe11266058a9dc3d7960d8c41ccd5dc0cc1443def280dd74c30a2cda7fa0c90729523e99ec2171f4fb97", &(0x7f00000002c0)=0xcb, &(0x7f0000000300)="f415339aed75cb9cdecc7d7e00eff1dbac2989409e66be464b5d0772c767d963aa0d0508b001a417000aab3883dcd09ed439f01506ac65745b67ccd17b06cce41c2b23c34bacfb6828ed057b07104c8c510c21b92488eb75099b676047bad81f71853b429441f53ac44d59c0034f8d95b6b523ad049f43d74f886c0ee2179e6fe40cb4d633189e254a6b1e72b38963946b950db797cc736528f352fe10e7daf646372d392f6e3068f0d006f0c2b4d42ad8ca657ca329b2a4390698e6c6432427c6a539a9d66f15ae0d1a080b2a65d7e42f5d19ca6d52e5530e37bfea53d730e0190c6cf54e61ab48c133218ef4332391", 0xf0)

1.24703225s ago: executing program 1 (id=525):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async, rerun: 32)
chmod(&(0x7f0000000040)='.\x00', 0x34b) (async, rerun: 32)
setuid(0xee01) (async)
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00') (async)
readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/158, 0x9e) (async)
ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000001540)={0x4b, &(0x7f0000000180)}) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) (async)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pread(r1, &(0x7f00000000c0)="3cd15db7", 0x4, 0x400000101)
ioctl$WSMOUSEIO_GETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000140)={&(0x7f0000000080)=[{0x7, 0x8}, {0x7, 0x8}], 0x2})
r2 = socket$inet(0x2, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000300)=@un=@file={0xe5, 0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfc, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x18}, 0x1) (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x0, './file1\x00', [{[@v6=@empty, @v6=@loopback], [0x1, 0x40], 0x0, 0x2}, {[@v6=@rand_addr="be762f745a650c4fc824f39777cbdbf1", @v4=@rand_addr=0x9], [0x46], 0x4, 0x14}], {{0x246, 0x48, 0xba, 0x100007ff}, 0x6543, 0x409, 0xfff00000, 0x8001, 0x8, 0x17, 0x7}, {{0x0, 0x7, 0x5, 0x5}, 0x51fe1b1d, 0xc86, 0x10007, 0x4, 0x3ff, 0xf2}, @v6=@empty, 0x54d5, 0xa, 0x2, 0xf23b, 0x5, [[0x8, 0xffffffff], [0x3958, 0x6]], [[0xfc000002, 0x4], [0xfffffff7, 0x3]], 0xb, [0x80001d9, 0x79], 0x1, 0x18, 0x6, 0x1, 0x0, 0x3, 0xe, 0x83, 0x5, 0x8, 0x1, 0xce57, "0600"}}) (async)
select(0x0, 0x0, &(0x7f0000000040)={0x50, 0x6, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x100000001})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe})
r4 = socket(0x2, 0x1, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x10004) (async)
r6 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r6, &(0x7f0000000000)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0xff, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="6788020000003a9af6d85edf1124c348abdd612dd68e59adfeaf93231066391632859168a1affe1c1301a20dbffe8b52", 0x30}, {&(0x7f00000001c0)="ac797473b0e131263ef536fb6f39353db56641efc3c797acf7103f23b2a928c53036bee20198dd6fe64df572f4968fc169e5a220659b2ed2bbb1ec6a8852c89a74869b958ff0d6c441fb61f883a38a8f0ccce15a7c53b6ffa76389d629b97a28a503605dff4629d8f614fdce593b30f2", 0x70}], 0x2, 0x0}, 0x402) (async)
ioctl$AUDIO_MIXER_WRITE(r5, 0xc0144d01, &(0x7f0000000240)=@set_ctrl={0x1, 0x2, 0x8})
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) (async, rerun: 64)
sendto$unix(r4, &(0x7f00000000c0)="f960b713d2922ecd93bae28993a868ff2ca5f2a45f30698f89142e3dcc6e8c0177ab51d8163567aaa5e672bec9b415d9af7f8334f3e95c83144745912eef471203e1e033ddb7ab02bed7c39c95232d2c0e438e6a8d0d4e350b825658a6dfec4202f743703f5ffa030781abd45c39ba8e3365a4fa7de8110e742b2793631d2697475e5fde5df4d1b074d8d4f1f9ce8af781ed4a4097c657ecfc29893dfb5ac138547050453423add86bcf198b53a9e480994ab061de1e21fe05e3441e37ffd551d07f5b1ee251ce7a", 0xc8, 0x40d, &(0x7f0000000200)=@file={0x2, 0x1, './file0\x00'}, 0xa) (rerun: 64)

931.254131ms ago: executing program 0 (id=541):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
ioctl$PCIOCWRITE(r0, 0xc0107003, &(0x7f0000000080)={{0x0, 0xcb, 0x3}, 0xd, 0xfffffffe, 0x3ff})
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e)
r1 = socket(0x2, 0x8002, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket(0x11, 0x10000000000003, 0x0)
sendto$unix(r3, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00')
closefrom(r2)

928.180029ms ago: executing program 2 (id=542):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
write(r0, 0x0, 0x0)
chmod(&(0x7f0000000140)='.\x00', 0x35a)
setuid(0xee01)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
r1 = socket$inet(0x18, 0x3, 0x102)
connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x0, 0x7}, 0x7)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x1, 0x11, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xa7}}}}}})
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

927.685712ms ago: executing program 4 (id=544):
sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="b100050300000400000008b307000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002022fbfe0c2300008a", 0x91, 0x40e, 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0))
r1 = socket(0x18, 0x2, 0x0)
ktrace(0x0, 0x1, 0x3b9a, 0xffffffffffffffff)
ioctl$FIONREAD(r1, 0x8020699d, &(0x7f00000001c0))

927.215247ms ago: executing program 5 (id=545):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
select(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7, 0x101, 0x202, 0x7ff, 0x9, 0x0, 0x6, 0x3}, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000300)={{0x0, 0x6347}, {0x0, 0xffffffffffffffff}}, 0x2f)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x80206916, &(0x7f00000001c0))
ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000080)=0x693c100f16c15fd)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)

702.312089ms ago: executing program 3 (id=547):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14)
setsockopt(r0, 0x1000000029, 0xc, 0x0, 0x0)

623.810224ms ago: executing program 2 (id=548):
fcntl$lock(0xffffffffffffff9c, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x1})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="0006ee5d4915311d29cf1ac01c865a0fd90f68291d04f2421a212ae6a0daee8262b8d31452f6d557c2036c269f7548e43aeac9b46f1aa09131e2a7f6de7a5a354e1c62fc9aa7d10fb5dfe74d18f6bc42d7be5e88fb539a8b82f46ef4e2d6894154cae5bcbca93946da868784b7134d33e4f74c26e0a9ca4b09afe4cbe04dea85", 0x80}, {&(0x7f0000000200)="f997cda9e87000450380f7a4c1290130d46545fa12cb3ff02d09b374dc636b4e71", 0x21}, {&(0x7f0000000240)="5a293a040e105070bc61513a3b0883a3457f7d87e25bba814e51d33a88b2c59ae4b474a9f8314f8088a712545bb12a53b967c0c57f4f54c432040725cf755c3a6aaa760218532d928e541253241d3cb83bc76ca83cc9118a77af6671604fbc945ffe1e7c00e9625007ead5959a9c5c7145b19028fe3295e3f934dd83b2fe4a7cd925797a09cca1002d1e356d9e9c3f0302b9b0fd4d855e10329ce06151d7d814566747039f0d936599efce2f4f6ca5d58363fd3689afd2a42e227b997f15e91aa6ac8897aa4b1304b7ca20823b46488edaad18efefc458d0f36281e79a08cb1328d17dffbca571d5f9d08dec934cac", 0xef}, {&(0x7f0000000340)="15d65ba798545de63a8ca74f664b04b40871b6c7499bfe4d08", 0x19}, {&(0x7f0000000380)="6a896a3e243b43a6cd2e95b66d", 0xd}], 0x5, &(0x7f0000000440)=[{0xc0, 0xffff, 0x10001, "53fb20ba241fceefc0916da56b9bdcf6cc6dae95d07a8dfdce3d70cde5ba61b68ac212b7a439ed22f0921a5b4a364f088e43ef236df43e146aea951f3daa0b2a2ea53446c405208e029b3d033cc738b48d5d3dd337f44fefd2c13575d01a681de276e02324d29869783f35ac869b5f0405823b30a50855949f46b01bc5a1c903dc8933fb56a1063e64c655e80ff814669fde2b79649dc2fe527dbd520f0ae27d3d8ba4b683082b34c8d76f37853a9567709d35d4"}], 0xc0}}, 0x38, 0x400)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
r2 = kqueue()
pread(0xffffffffffffffff, &(0x7f0000000080)="67c16a3e368a8cb13428ae886ca9fbdf5aa865c23904d7fbd7e6d618061088582b82df1552b7", 0x26, 0x4)
kevent(r2, &(0x7f0000000040), 0x96, &(0x7f00000003c0), 0xfffa4961, 0x0)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002})
r3 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r4 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, &(0x7f0000000100))
ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000100))
ioctl$DIOCSETDEBUG(r0, 0xc0044418, &(0x7f0000000540)=0x6)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{0x1, 0x0, 0xd3, 0x4}, {0x8, 0x22, 0x10, 0x3}, {0x11a, 0x7, 0x4, 0xe08}, {0x2, 0x4, 0x7, 0xa}, {0x8f7, 0x3, 0x16, 0x80}, {0x6, 0x5, 0x81, 0xfffffffe}, {0x4, 0x1, 0x7, 0xfffff000}, {0xf5, 0x4, 0x81, 0x10}, {0x8, 0x6a, 0x5, 0x2}]})

623.584327ms ago: executing program 7 (id=549):
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0)
r0 = socket(0x2, 0x1, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, &(0x7f0000000040)="509aa5f57a03db8ffbcb65afbd8794a087c19128e8beea90dbb94b00c8fca1775082034e7f9603e1863a72772e901dcf859d1eaad0d46f42923ee42c0b3f1fd6c0ba76635817d08858a66340b98895138c1b1a2048e132e28d58fde01bb09ff24b5644fd1e6025f3755f27c358825e13b69167bdd3e9c0a21501ec0ee2fc01db0c0a23681744229376b171777707b625bdb1d445e96a1dc722b0fa0dd104bd381a4e1038f8a421869d45384dc0edf17c2c613e8e84096ddb221b4d56", &(0x7f0000000140)=0xbc, &(0x7f0000000200)="0a65b4c6709b5e027d15f6987b5133e6a6dfcd059ab884b411f01fbde155d61d1f07c6be977191a86614f2b170a0a40bc78f7ceca77b41863f2a0995d7c6387d5c90f39f6038f8cc", 0x48)
ioctl$FIONREAD(r0, 0x802069b5, &(0x7f00000001c0))
r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x100c0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffff9c, 0xc06864a2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, <r2=>0x0, 0x0, 0x0, 0x2, 0x10001, 0xfd, {0x8, 0xb519, 0x1ff, 0x9, 0x1, 0xf, 0x6, 0xc20, 0x1, 0x6, 0x1, 0x1, 0x10, 0x40, "5ad6a2f8190f39a7e4767ffe0715fe7f37d185c33f8957ada70ea10c6e7b59db"}})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000440)={r2, 0x2, &(0x7f0000000380)=[0xe, 0x6], &(0x7f00000003c0)=[0x4, 0x2, 0x5, 0x38, 0x0, 0xfffc, 0x6], &(0x7f0000000400)=[0x1, 0x800, 0x6, 0x0, 0x2, 0xb, 0x1]})

623.364304ms ago: executing program 4 (id=550):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setitimer(0x0, &(0x7f0000000100)={{0x3, 0x3}, {0x0, 0xfff}}, 0x0)
getitimer(0x2, &(0x7f0000000240))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0)
fcntl$lock(r0, 0xb, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r1, 0x7fff)
setsockopt(r1, 0x6, 0x4, &(0x7f00000001c0)="d2674561", 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @random="aa6d6500", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x2}]}}}}}}})
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
setsockopt(r1, 0x10, 0x2, &(0x7f0000000180)="a8d228a136c424caea667df6790327baf7f066d17d39c5cb69cc8bd1306a61588bf6a442db70", 0x26)
r3 = syz_open_pts()
fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x800000000400003, 0x3b, 0x7, 0x1, 0x1})
flock(r3, 0x1)
closefrom(r2)
sendto(r1, &(0x7f0000000040)="55785ca3830c053a97b84ce15928141538eb03c23c12607f1d76a716d3983f9abb8f87a333faf2c4bfb54f58d9a8ef0b6519fc5215355f4007c8a639f2222834cf18247ae3ccc51056708107fb0ff768f8d6289d4ccc730ff2ad73b9f485e49a3bbcdb2119ebf6522874a23a041ebe924e39e79a6cc317d3163ba7eba81e2d0fce40cfc524a4524fe65f8fb734766ac99a2e126d1244bbf2ce0428e752e4f7684618e8cd", 0xa4, 0x4, &(0x7f0000000140)=@un=@file={0x6, 0x0, './file0\x00'}, 0xa)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

622.803492ms ago: executing program 3 (id=551):
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b}, 0x3, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x9, 0x4}, 0x10)
syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[])
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x47)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="d62115cea181770a31f6939cd9ce797312bdcdc22a1f612d226782d555b2b2c349a9af3d35596e48498f92a43e2a6c79c3d7b083150c3fcf266dcf7fd04f6eb25dbd8673645f941da673bcb108de4e84c45aca1a98f3e47d0a1b8417e554c1bd9cd128080793a8e18117de24e5bb436256b9e7150c3b0e339ee3", 0x7a}, {&(0x7f00000002c0)="723866af", 0x4}], 0x2)
read(r2, &(0x7f0000000300)=""/133, 0xa292a4ec7a07f167)
mprotect(&(0x7f00007dd000/0x1000)=nil, 0x1000, 0x4)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9)
write(0xffffffffffffffff, &(0x7f00000004c0)="b9", 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x4ebfac6bbaf7960)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="9524", 0x2}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x24, 0x2, 0x0)
sendto(r3, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40)
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000801)
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSKBDIO_GETBACKLIGHT(r4, 0x400c5711, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24)
socket(0x18, 0x2, 0x8)
readv(r5, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/149, 0x95}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ipip(&(0x7f0000006280)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000006400)="7fe4a205", 0x4)
r6 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x40)
ioctl$DIOCRTSTADDRS(r6, 0xc0a86b07, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0x40, 0x3}, 0x0, 0x9, 0x0, 0xd, 0x8d, 0x4, 0x1, 0xc, 0x3})
getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0)

471.848855ms ago: executing program 0 (id=552):
r0 = socket(0x2, 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0))

471.49747ms ago: executing program 7 (id=553):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f00000004c0)={0x1, 0x408, &(0x7f0000000080)=[{0x0, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]})
mknod(0x0, 0x2000, 0x6381)
open(0x0, 0x100, 0x100) (async)
r1 = open(0x0, 0x100, 0x100)
acct(&(0x7f0000000080)='./file0\x00')
ioctl$DIOCGETTIMEOUT(r1, 0xc008441e, &(0x7f0000000500)={0xf, 0x9}) (async)
ioctl$DIOCGETTIMEOUT(r1, 0xc008441e, &(0x7f0000000500)={0xf, 0x9})
getegid() (async)
getegid()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = semget(0x0, 0x1, 0x281)
semget$private(0x0, 0x2, 0x5) (async)
r3 = semget$private(0x0, 0x2, 0x5)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x7})
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
setsockopt$inet_opts(r4, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8)
socket(0x18, 0xc003, 0x3a) (async)
r5 = socket(0x18, 0xc003, 0x3a)
setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x1}, 0xc)
setrlimit(0x4, &(0x7f0000000580)={0x9, 0x5}) (async)
setrlimit(0x4, &(0x7f0000000580)={0x9, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0x68, &(0x7f0000000400)={{0x1c, 0x18, 0x3, 0x5, "5fc36cecf42326e50900", 0x2}, {0x1c, 0x18, 0x3, 0x1, "f6fd71f2237b34d1c9486b99959ca9bc", 0x2}, 0x7, [0xd327, 0xb, 0x2, 0x3, 0x200, 0xe, 0xf, 0x2]}, 0x5c)
semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000540)=""/27)
semop(r2, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x2a)
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = semget(0x0, 0x1, 0x281)
semop(r6, &(0x7f0000000040)=[{0x0, 0x8, 0x1000}], 0x1)

467.765514ms ago: executing program 2 (id=554):
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x10, 0x142)
clock_getres(0x4, 0x0)
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="6a32e105da3931f4ec2ed0364e4ddf8e49b0244262ac802045b6ff78fb07f0f224fe1144ab1ef976f888215df8cb5f3b6814ab2bbbb3063a2b60c3b0f8f07238b6010170111f68c0100ba84419dd75ec289f70c679abf3777f8071a87fc2da1cf8304849494eed91a971d440dfd1f3c2c9eb7486e681eeb061cfee5c06935e6e6d64792b4f7ad8c3ec1ac4d990b81267b3627cf5d8e6be48d318f7e005ab64f7dd04ee47869d3ba654d6275332d9a7418280", 0xb2)
setitimer(0x2, &(0x7f0000000000)={{0xffffffff}, {0xffffffff}}, 0x0)

466.755819ms ago: executing program 0 (id=555):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa)
setuid(0xee01)
r1 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v6=@mcast1, @v4=@remote={0xac, 0x14, 0x0}], [0xd, 0x4], 0x1, 0x1a}, {[@v6=@mcast1, @v6=@mcast2], [0x34], 0x4005, 0x14}], {{0x1, 0x48, 0xba, 0x7}, 0x6546, 0x409, 0xffeffff8, 0x3, 0x4008, 0x8}, {{0x0, 0x9, 0x8, 0x4}, 0x4000053, 0x100c88, 0x10007, 0x0, 0x3fd, 0xf0}, @v4=@loopback, 0x6, 0x1000000a, 0x1000, 0x5, 0x5, [[0xd7, 0x142], [0x3, 0x408000]], [[0xfc000002, 0x89], [0xfffffff7, 0x9]], 0xb, [0x1d2, 0x4004807a], 0x4, 0x18, 0x7f, 0x0, 0x13, 0x3, 0x7, 0x83, 0x5, 0x9, 0x1, 0xce59}})
poll(&(0x7f0000000000)=[{}], 0x2b, 0x400)
close(r2)
connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa)
seteuid(0xffffffffffffffff)
setresuid(0x0, 0xee01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = syz_open_pts()
fcntl$lock(r3, 0x8, &(0x7f0000001140)={0xf51, 0xfffffffffffff30a, 0x0, 0x3})
fcntl$lock(r3, 0x8, &(0x7f0000001200)={0x4000006, 0x0, 0x200, 0x1, 0x2})
munmap(&(0x7f00000ef000/0x2000)=nil, 0x2000)
clock_settime(0x3, &(0x7f0000000080)={0xfffffffffffff7f8, 0x1a})

314.241132ms ago: executing program 3 (id=556):
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="8f6f77ede65500000000000086dd605f6ad900183a010000000000000000000000fe800000000000000700000000000000000090de4a8f41"])

313.956934ms ago: executing program 3 (id=557):
mknod(&(0x7f0000000600)='./file1\x00', 0x8, 0x42)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v4=@rand_addr=0x1, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x10, 0x4], 0x2, 0x1a}, {[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4=@rand_addr=0xaee], [0x34], 0x4005, 0x1a}], {{0x1, 0x63, 0x40, 0x7}, 0x8, 0x5, 0xffeffff8, 0x3, 0x4005, 0x8}, {{0x0, 0x9, 0x8, 0x4}, 0x4000050, 0x100c88, 0x1000a, 0x3, 0x3ff, 0xf0, 0x95}, @v6=@rand_addr="16e1161de1f3aad83f016b152f68173f", 0x6, 0x1000000a, 0x1000, 0x3, 0x6, [[0xd7, 0x9], [0x2003, 0x408000]], [[0xfc000002, 0x86], [0xfffffff7, 0x9]], 0xb, [0x1d2, 0x4004807a], 0x4, 0x2, 0x7f, 0x0, 0x9, 0x3, 0x7, 0x83, 0x5, 0xff, 0x1, 0xce57}})
ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d372586474f1)
ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
close(r1)
ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f0000000b80)={0x47, 0xfff, 0x1, './file1\x00', './file0\x00', 0x0, "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"})
r2 = socket$inet(0x2, 0x2, 0x18)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="00000080c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSETA(r3, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6})
setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1)
r4 = socket$inet6(0x18, 0x1, 0x6)
setsockopt$sock_int(r2, 0xffff, 0x1008, &(0x7f0000000100), 0x4)
bind$inet6(r4, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "0000000000000000000085e387560600", 0xd}, 0x1c)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)=':\x00', &(0x7f0000000240)='$}\'@,].\x00', &(0x7f0000000280)='tap', &(0x7f00000002c0)='tap', &(0x7f0000000300)='\xd0.{\'(\x00'], &(0x7f00000005c0)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='/\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)=')(}-@-\x96]./-@&\\$#]$]\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)=')\a*\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/pf\x00'])

313.545981ms ago: executing program 4 (id=558):
r0 = semget(0x0, 0x5, 0x24b)
r1 = semget$private(0x0, 0x4, 0x100)
semop(r1, &(0x7f0000000640)=[{0x2, 0x1, 0x1000}], 0x1)
semop(r0, &(0x7f0000000300)=[{0x1, 0xff, 0x1800}, {0x1, 0x7, 0x1000}], 0x2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x20, 0x41)
syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa02009078000000006006c33e10003a80fe8000000000000000000000000000aa36c6473f2c93ca0040444f165e96d1400200000000000000"])
utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x2, 0x2}, {0xffffffffffffffff, 0x3ff}}, 0x2)

313.322936ms ago: executing program 2 (id=559):
r0 = socket(0x18, 0x1, 0x0)
syz_emit_ethernet(0x6b, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "36dab7", 0x35, 0x3a, 0x25, @rand_addr="a55702eadfc9c553517dd04fcce15c79", @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x4, 0x0, 0xf9, '\x00', {0x0, 0x6, "5f7f00", 0x0, 0x2b, 0x0, @loopback, @rand_addr="48fc8d1e5546fc15e28efb6f89e72c9c", [], "2b872718ca"}}}}}}})
getpeername(r0, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000100)=0x8)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000180), 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000140)={0x10, 0x1, 0xc2af}, 0x6)
r1 = socket$inet6(0x18, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x200, "ff010000000000009af107000000f800", 0x8}, 0x1c)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="5c4d901c9398526c18e8d21455108dd044c3db79a330e67653a92e92d0f18a94ad267c1db705b764069a99373938f62117ca789724023a45d8b390d44a8fe86438b10e1a278a5c63114710057aeb2094eba7f7a301cf732ef3883219c6679d1877b89eb849ca1404148ea10cae9b94b8", 0x70}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r2, 0xc088444f, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000040000000100", 0x20004110, 0x6})
select(0x40, &(0x7f0000000000)={0x7ffffffa, 0x6, 0x42, 0x1, 0x20000000400002, 0x1, 0xd, 0xfffffffffffffffc}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
setsockopt(r0, 0xf, 0xffffffff, &(0x7f0000000000)="39b0aaf0a7241ca01acb5d886c4ef1d01bb562d1554c7e3ae68d143c932dd4bf6daf2cc863b3aa64265b8af44ea997d7b3835d87840314fd350227dcf5d486871899a8bd7abd3c019fad47a581b12c93b5aacd20189adc4db089b26a326214e61ce982b8ef53947142284e595610451a20d7060ea79a4fbdcd63a58e8e6d38da3699f77c33a02f79e2ec17b6326480714fb775acd1a6f6fb3e3d17628adbec5b57b1ed5cb0e4274ba0c70e", 0xab)

235.954647ms ago: executing program 7 (id=560):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0x20004455, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000000980))
sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0)
sendmsg(r1, &(0x7f0000001d40)={&(0x7f0000000180)=@un=@file={0x9, 0x0, './file0\x00'}, 0xa, &(0x7f0000001ac0)=[{&(0x7f0000000340)="13c4249742a3807582c1a87c966c510fd31273a4a3e47c40930278d3114361fa3a647b22683582b3ec1ca52df1febbca894fb081d8c1bdc7dae3bb9053330494c8b170170da58ff32286e88a25d801101c452a6bc1d6bca065a1c59ad68e79c15b11805bca247fc0eb41191749437efe7ab73d3612871367a6614fb4e8a8b89587b6b45f1425bdcd47f7ce28476b8287cc78e79b345f9bd3b8adf113d4e38fd9fa796cd39ee72fa212bca4332cfc249e28cf1ffd3b9b70a677b6e91e676ccab5fa8713bf", 0xc4}, {&(0x7f0000000440)="5eb193d671cae6bcb1ddad377b9e2a6b14c080d65b320475955d68874164b503c6986bbf3bb6a1005c8bb66097a3a3ba6fb3dfba2a4454de7d2addd4a899fc10cedde390c0a57e18e76881322f7e6f2a36154ac2bf1f6f146b70448f11b833fb052f2e01389cd36a5c3105f074cc99fdd6234eba9de7089cf88b15f11860730fec1fd3300d", 0x85}, {&(0x7f0000000580)="d85859ed741c92e4a2ce8e774357c98fef5fd5e34d15f4ad5a5d578ef957c8ed7dfcd1a20ef3289d076e012a70b7fbdc7da18ac49c3d8ee09e6ad946320611cf9eee85c0865182fd097f9064865cd2b58c3058dd150913339824667a70575a3908fba25ffc446dfb542d807236fdea96a3e25cff100d4081226e0971e0e403b514e0eacd16abc1ea9aaa2b67e49762a34849f0c0413cb1964dd582186aff5062d6db77449ae2342fb27941d68553d5933b8f2d330eeb14d0d3d73e70e30ceec862666e371f5b9a3227a2351a", 0xcc}, {&(0x7f0000000680)="d026bf4597081140571a02a1e7e3c72d07fb23c2bf459b3407253b99366e58abd041a72a84af79db32059fca604dfa9d00e715c22c103916e1ef6e0c5c572f9414df9c7df02f189d086763770a0eafa9d96202d37986329135415dd62ba03db9c327e277f30a4476dc8a24142f1c6f73c566cc510c9c5efa56bb8226699a660ba6974f5f9dcd2be1752090671a895f5de3d1d15ac39fecc6b3983aea0051ffd11c941a7cfe2a21c32de7964798bb7a7be9105b2092129721a72783bdbd59899d993dcb954ae13c688e31927953ae4f19ea70c0308cf4a1d8844ffac795ec4e8f295d50474be38212d6", 0xe9}, {&(0x7f00000009c0)="7503817873bc0aae2a6faa5cbb478ac05dd74fd6a3c3ea792dd288e0f8e3ba78a6e4a8779aadd3f6c135337d54179bd8fc19e83dc26464ab0424fa9ffaa090fad4ed0f58075bf808c12853334ae6e55af4a5a1d91a2bc4e96ac50c49e4bed2fecc02d5487b7d60cfac6e9f42d31db126362a7dc41449a791e532ba2d97646f5f0ec874a816f42dd2ecc0a3414cffd9dfb216250c6b517cbe6a6c0f6de7758eb33401eb32e3fef13dd3ba60108344ae07aa7253ef4d42a7b4a7d9949a2011f0c9e3581aec4e1965bc8bf152becb9ce8c1b84fb757f98a9b1fbccfa078c01201caf0c46b583c87c28c1b9b6439720ec2f6ffb08005a51ac89e469607d470a8b57538ed47879825ffaf448f507d6704c3e15572ed171b561809be38af2b7e2950fba042db05eb84adb790d893737ba30f215c3e474bc0e39e9337fee6caca2a99b343fc6a4a149edba845e7582a5174e2667f28c2a39497892c17ac3d23072124553d0193693b8199fc08c65f3e7187f4edbf88eba56e3bc3f8d8beaff75dd5be980afe5784c0380c66d78066c253d2fea6cd667344e9bd1fb182659bd647ecca3a2cadb326f38013a8cea482f15c5582ea0a6495ff11807ce16dec576877e7bcb9155a1b2c514f16203bd96bc9dc7ee71c692111dd14309058c7cf682e49efb117dd27c37dbec5dca7bb1bc9f63342386b6556cf12f08be65f5a477dd9590275dc805f0e64d776758c3e335cbb6daa93b5c737be641bb3a2fed965537e64fd4b5b9dcfeed6287676ab1b565a565302e70e552ae07442b719f899cc4122a50e1c63d0ac5731bb80142a87d9d66a19c5f22f9f918c93a864e6268cc7f92e6cc192576900a036609e45b39bc109f86b91e1822d8dd8372d25fac7ce91a758212c009ad1670085534131852e0c3c040ef8aebbb2f23b1ae924e3118bd11f6162e3ccd293ddbf7b9fe1c5e0d9d598e6bc2c46bfdfcd86ce51b86a7e6ddbee67af2f534fece0ac117d725028500c2f2a85290df3e3921f3076f9e1fb53f507022d4cddf6e4ddc927d141037c196a11b42e22ce642e03342ece3a844714cb89b16cc2f56d6d5088b311e1c8b919ba58001e080a204fd34e5ca77e2b1c65d2ce7dcd5d73770de1240d7d816f2def2c241e1b4dbe03aa5527e761c395337abcce1a6855ccd7d3c0821cfb05443594fd06b43067041c1351b2fd4c841f5bc08fae4613ce3a2a1de71925b9a8132ab6dd4560322fa3e7ca5717bc8c79a804ec4aed8722bb8d82c40892c4bbdbdd8ba0620423fb314e5dd918b3c069f1d5698314d6062ea8acf1b81d3c4fb9c5cd29f8e3fc71d5444a4cfb56815312280ddd8d16f9a008e18284c07237c24febb57345cd1960efa41c13d7d8851b4d416b29e700038cff44c217f13b17df698260b87cb9b75ad42bf2aa5c5721b3e4f1f385e1b44058a1f95cfb11e12928afe2e352ec97bce606eead00d1035099348dc335a57122d0e7dac11f7b6a00a0acbd9f66f5d09baafbb479dc981ebe393e0dda36fc585b6d0ecd659c2b6ed2e5ad3e6b514f44b2025da1c0312da3d273a8e1649e7d11d75fb6a643857c21b58974c1105d8e1d4b1bf1a6840162dc4b35d85ba6ec8f095ca95d7e8a40b7b92e3f320324c45a46a1418909cae2aca47cd57bd5d37657e184a93117941e09304a6e407e1c5d42597ff0cb21d84c8344b0e5b39feb59f1f2126832679cb44c9c8de1f257dca89f960f6432e963af1198a964e74ab28304ec253b8cef3fee7bd75dd85d7ec6993523041285adff75092d5601044c93eb8a9b1b1a3da0fe86881cd3c194aad1cc5b7a9bfd84e7b83bc898af7ae01a61512ddaff6c165a3d9ae07e15cd0c85b51342d59ba8f9f5cda5b29a9b76998db9f25cfdd2c9f6d8aa5db96246907a418af3a10e0c898fdd31939f5f9ca1203186801cd8f61ec5530e2e82b657e354709b7e58d512f567c1c69358ca7d5c07a0dd762f5c9a1878641e92e286e9c8b647889619b32777f71c813596dea19003c8369f802961099656e19da22fc178dabf0b68735d95b4103534a76fbc2e96f260d9ddedf0a093bf064bf6339d696a8dc7c9a23636524498d54f670b6459195b9a5cc9f38c1e3120bf6c28b8a45c653fc5d552e6080f206cda4c18072e98c7ca32e84aae0c2a33bb329fb892467d0fc6d1768cce860df05e87ecfadd0a6fe5eaa2875fe3541ba3de066c79ae005aff66958da61e473aee10336e1472669a620f77ae9c1346619becbc0cbee0ca7904f9f94635ac1457a6f5e98307b5db152b816ec76ca7e266ae83ebd84374c8884c8404847217d9befc0d7253e031d24f8b7018a641ef7ba5facf29e041fe596b291aa706d346ca0795cdf241b6b1a1bf27d6907e85ee742036455cb8ada468c44fce6f1985e4332bbeab57880f4075a2695a3f5e88794bbd4c5b54bbb0c92545a25703bd68fa390c913a4307aed27ed241c533b459ab92e0b0c3231606203aa48b1c7f5eb61094cda83beaa119cd357ad83b133b2d346ab1403800f95649519dd945e6902ba42efcf654937e23fc432b31afb22a677ee0ef4058fb3b39976aeb613dc74b27f6f2b94d8d41b67d115865424a181991934483c7dd4f21e9ecd03ff7e0d510e3c01859e749ec3116ec37cb7d518ce4d0d1c72e9547f36f0b23899daad5533b22e742dfeb953b27a1db24436966e655b24d1745d5574a0c345f46a05c10262ce9168b239fef9ccf93dc99cf04b7d39963d01994fd6e7850fb18f7313a6960832093fbfeaf1377ef580d400ae48054ef355dda51f012ba850ac59758f7daf5beb75d8c40250d22e7147b46814d433479ecc5955284f558d6ea34bc4689894ec9cd0cd30ad7cc4559ace5c2caa754531edfdf719e64ff1c8844488ead5498477baf8bca1fc1766da8691277e78f391fc37d1c44c1bbfca08ab1c066adb9f87854619ed1258715a762479df08447fc9a903fb31523d90df96a6e226ebea5071f6bff99a264efa22a6828188497092ac920bef0ea4b1419e8a5c45c6946924fc719b356deb88d1d34ee4d15936f874c5db21e7702e6bdf101b4d5a13524a9fef48c74f988055608c55f7f9af9a9afd3bfc33f2f7826105bfc5bb05e559dc8fefd08467728c089e6f17f05d62e22b2a830cc2b02f9a9819bebbb6421958d8ee805c7070f1cd75e63669ab7dd1523c90f8037ad320386104fee63e56de6709bf44908bfb7cc2a1f76370f878bf4e41c1a08d3b8412d09503485f2fd15a91199176dd803120b3049bb882bc9b9eaf70794f6cff5fa49167a15311d718e571a3f92f687beb628d6fcff044e5c3092a873ecacd2fff47f81e8ab2cad8381427ca1c65b50a0d381bd5ec4ae1237a49d47f9b8424d9f6a4be29df09b80b17ab55dddefbaf4c4ecece09fa8970ca108889af6447a2f9793451e1089596e85b701f5ad4e9884a811305073ffa87fc62d06786ec218851fb87c4fe3a629af4c4fd9f18a85e4a28357895f70fd8d1248e72ad3ef55e3cdd90ea6bd087d56fda38f73d8f805e352b46ee2e53fbdc28c968865fef4743eb7141e54f22ea9709afafe7e7134ef3b6a4e3956a275ac1e82407f3ceb276f8eadd9d94bca9998c632277ebc2e4d7d9e2867b340dd1cc723ddff3e1f8e92ee06a336dd64fb42034193f16112e2d1fd52ad2d813a6e249cfd4598b80fa55d730be34d5308accb55d5ef8219771c32c1b679dfd3fe574e2d04d992454cead0f4e53a301272e6bd7b4df35ac551f1df4034f2d9698a0d590a98049228624496fcb3371009aea8dc403249cc08b541936e98dbce68b9cd34b7eba00c753b49f147dfd738be350a5d6c6917a235ebab7f8e2d181fc21c6cf10d0e52c7d0e7e31b53a5a3936da39d7959a2516fb22ebc22b66e9624b8c633db3c6ba31337fefb2556b802c9b654a0d64072972eccad0ffde801b2b19c24abfaf408ef35f3a72d45f3b37b9ac66067fe7208cee0951d05ea2577d4250199d5b18a18cc0956a16fd77d4ac92b615cc178088287ff95ccae7797b50eb253b5c35fa99ef9700684dbf1523400e031074abd1300e2b37f28ab9aa77ccb9a197e282303645c7a77fd94363a956ebb0cdc4e8bd32001ee3c56e5013dcde84c3b42bca245a716ac45bd5885d5102aec228004228b280a92ea42a1d78d8471ee38dfaba8e18e8f795fb1292e3f4098cf4deaa17861656e224ef1dc0f4d9780abba7b94cf0c7fa0bb3f7ce564c2dccd836aa5ba5d8d8dbfcd7c2ec5d3d5476a8f804d424610654459f84c24009ce5062a6ad7d6bc34aaf05b152cab4abedb6113fa06c8a07fc039c534441bd1166e216a2eec075124a4543f0fe431b3299637d32326d0658b8451b50a690c5acdf351e2cbbfa1520788bb5c7d2e9a75bbd0fe380d469b7f3b9419106493c023b54eca2c0745e36ccf4398f8ee78b9cb2dbc833936d37df7db954062ef6a501a285455a4e6e417c0ea358cdb37a64a11d463fc21fbeaf916afb11f400dcae8d308e103c6b03784bfe3d89877bf278e56d8833dab2791a5a120d1c1c2a290a015e370d1c4f6e5ab007ed011a8f07be3eae4b91f6ccea538cf7d3af7b46e38c1d1f587c8921da0390f1cffda660c315c2698b4b5370d77fec4f69220e72fc1c5c2860d58733e282a83795a314d0f3ae0939978b36fe3380b8ea8d4b766965e1ef22995141f480464340996636eb1e0c3a9ff2e8de3879ade145f776b2526f2008559cc29a476c19f2907ddf403e4c68bc2c964180aa8ff9adebdab9bf35a7854f12dbd9ab58dae1ddcf1d3c2e5bd7391a92468ff6650b23fd875be798ca01cbdac7fa85749999ed2ef00aa76d67ff5547592fd79573ebc95a1d8b73fe27da77ec85c9e8e5d7ebd62019836b1b40cbc417f881693577b73962d5edd489efc9a19e18ad8636eb3724eb9a2038440eb4e2a4791ae0beb431f09ae65db4a88a585b11e8053752c481c310cef7f28330a5439ff9eded303d4d9427eb632ac202365b73237c3a1d8b8129a89ed00250b2ad0985246f8fb9152ead10b1108d390fe38681fd33248015a85b06cf317f70557736e6b8aaa41ce9bdcd370b4aa51a2eb97448685cdb1f88841f86ca21f44e854ebc5d5ccc35ca9f2b907b08e4c37ec5008c728a8d08e82e17fbcce89ae06b01f05c312cc8ed194bc554e9c9d2a98f72ad845a71745d22d535803647ccafe8871d2d0e643b67c7a706a035e74516081408b502269e4df4516df0e9c299413bc11181c39995ad69ca41a3c9d95b1461548ccdff6ce52439b9c5fe06671f7d53716b566469e0e119a42316a2a4ee36574ab3b69529ce653f1cf5adff3e4f1b6822ff09686817c7571164133e0be0fbf36fef32741e0a1a4843a599926564eaa6b47b2bb8fb5756ec8695eb3ba5aaec2c89bcbe57bc318bdf276fdea4fdb22b1c40ce1234dd9f39e16a793552ea6ebcb663d194563f2523c5e6fd4ecef6f8e115ed347bedd3a3b04be708706eefec30773a919ad4ce325379bd21d3c800abf994726309b60a15c4072bbec0e64a340149d0f3ef8eda7e1ad1999208a583300994ad8ee8244d6a5295ac8326d63dbe8f0247b715729b36c5af23b10930b3c68554448cc4e198681ee8844b1becc47c5876d35650949f63410644ac1f62e7058970389d976035fcdb9944ddc385525eb837654d462e5eff557ab3815206ad4c5bae46900b1fb4f163d91ad64fcb8aa23d43429adb9f3240fdaf32e7942cb1770c4cbf23f73b05874f920f8d187f8039feda6066193466719e3223bb71756bedeefae", 0x1000}, {&(0x7f00000019c0)="772ace0400117fab502a26ab5649beffa3a04f", 0x13}, {&(0x7f0000001a00)="d89f44adcf1fd6ba7618e341c6551138b252a3221bae34c48b79f5a0dc13bdd10a10f4ee24cf3243426cf444deb68985a3284e", 0x33}, {&(0x7f0000001a40)="97808f506f92e95e9af86c59017b9a456b107da98297e8af48f66d903e0284a384e11c740812879eb29cc09e0f821fd14410414724ed0f164dac43c022577355a54c0ff4f7ea1503cf08007f477a4e76", 0x50}], 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="a0000000ffff0000ffffffff580950c1dcce818d4931fb0dec5140b5202374f54824bba59b6b6fc8153c7395bc3546fa70a9221ae02f5b5470bc01254dbedfe54c45e6534dfbab7e0d6b17d87d5d850c98d13641039c0f95809e2352b7c59ebbb5bdbfd837f9efd9d7045c6ca7325479b42653a5e2663923539ae97f18b05d7dbfd45af1738f42e1a8da47e044802016c0362866b85e536c051dcae2b8f885e64b906ad2d8a9f1cd86000c00000002000000ee000000e00000000000010001000000d4471f1de35dffcd13e376cc9ffaaf4316460e39a2ae9dd38a927b5ebe8de9c4cbe2f0bb7bd5e77095532a88bfbc166523888eeb85e56ce61fb685e262ec44f19094f25328b05e135733738bc33f5ab51b9d1048f0669f4e6e12f65dabd8a947affd11798ec6bed3a99bceb89f052f8849ebd52c154b558edd875e5ff63f0499883115600ee60fd5950fbd305d72b82e5ce4734f2bd8be529627ac24ec3c7310b72bf308bc9a9b7b68c69b0e6d3956aa1eb31615d28801d36890fa09efb032cfce1738f75d3d92106d7e0643625c000000010000000c0c000031e03432da844a9160023111a0e9fd1101e3ac33c01d2a1c91ed1a78477d78831733ddcd9157cf0d1ebbf99d3922632ae580d16f867f1b7c48a70246959b8b57d417194a969dc1a2bcd6bdcbb2d1000000"], 0x1e8}, 0x4)
sysctl$hw(&(0x7f0000000140)={0x6, 0x14}, 0x2, &(0x7f0000000200)="60e5cb2a0e8db2c2", &(0x7f0000000300)=0x8, &(0x7f0000000340), 0x0)
setitimer(0x2, &(0x7f0000000000)={{0xffffffff, 0x4}, {0xffffffff}}, 0x0)
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x80a, 0x0)
sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{0x7fffffffffffffff, 0x6}, {0x7, 0x8000}})
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)
ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000080)={0x7fffffff, 0x80})

235.747535ms ago: executing program 3 (id=561):
r0 = socket(0x18, 0x1, 0x6)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4)
setsockopt(r0, 0x1000000029, 0x9, 0x0, 0x0)
r1 = syz_open_pts()
syz_open_pts()
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r2, 0x0, 0x20, 0x0, 0x0)
syz_open_pts()
ioctl$DIOCXCOMMIT(0xffffffffffffff9c, 0xc0104452, &(0x7f00000028c0)={0xa, 0x16, &(0x7f0000000040)=[{0x1, './file0\x00', 0x930}, {0x0, './file0\x00', 0x2}, {0x0, './file0\x00', 0x10000}, {0x1, './file0\x00', 0x3ece}, {0x1, './file0\x00', 0x8000}, {0x0, './file0\x00', 0x7ff}, {0x1, './file0\x00', 0x1}, {0x0, './file0\x00', 0x5}, {0x0, './file0\x00', 0x3}, {0x0, './file0\x00', 0x8}]})
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x80000000, 0x5, 0xffffffa6, 0x7fffffff, "e6fdfc75e91964279df41b849e1b8c028df4e480", 0xfffffffb, 0x5})
getsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000002900), &(0x7f0000002940)=0x4)

235.534159ms ago: executing program 0 (id=562):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384)
r0 = socket$unix(0x1, 0x2, 0x0)
shutdown(r0, 0x4)
open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100)

234.879835ms ago: executing program 4 (id=563):
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe82)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
mknod(&(0x7f0000000080)='./file0\x00', 0x10, 0x3)
mlock(&(0x7f0000000000/0x3000)=nil, 0x3000)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9)
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa6d6500000086dd5ef3d64c000070010000000000f80000000000000000000000000000000000000000000000000100"])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
chroot(&(0x7f00000006c0)='./file0\x00')
sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x406)
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd6018834400f8111000000000000000000000000000000000ff0200f4a27827b4c5500d00000000000000000001000000"])
setuid(0xee01)
r2 = syz_open_pts()
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000140)=0x9)
r3 = socket$inet6(0x18, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000000)=0x8000, 0x4)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000180)=0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
recvmmsg(r0, &(0x7f00000033c0)={{&(0x7f00000001c0)=@un=@abs, 0x8, &(0x7f0000003240)=[{&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000580)=""/205, 0xcd}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x6, &(0x7f00000032c0)=""/193, 0xc1}, 0x1}, 0x38, 0x0, &(0x7f0000003400)={0x5, 0x22})
socketpair(0x10, 0x2, 0x6, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000680))
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1)
setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000240)="ea0059109e57c178", 0x8)
select(0x40, &(0x7f0000000000)={0x7c, 0x0, 0x0, 0x4, 0x0, 0x98, 0x7b}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000140)={0x1, 0x34}, 0x2, &(0x7f0000000280)="6402ef58adc7be1c2289558f905db130948df6b3049a1f779a932df65b27ea83380c149c5a2c60f3b89a588d90827ff617a6b3485e418f7b373c0ed120767e27c3b9b4edace9041bb02bff29090a435c6c2f612b3be858a160df35332025aa79f75ecd33a43836e2335683a86d23d66a6189913f82e7c2c818da072f3320775c90352921c0ee0c962403079693e5f3f6df4654e5c7b7f7e1d03b5f37c130ee8fefba4471033dc7da27f7a41d000c4e99b7b5f6f17d80769475c1f5967f5d80ff626d5a5e2e1ed12ea0f2ffd9de4fb8ce9e853ab370dacea324dd9056c435fc856ea3c31ca3e6f16e30747cda7d3706d4", &(0x7f0000000380)=0xf0, &(0x7f00000003c0)="cf3b252836d3c5e8ae69f5678ea7182dcc52587b71ea24a8b9408638dac0870276ea29675ad6a92d21daf06b3491b71ca290507fc37e0dc0860dbb78839634e8df108cbcd4f8c2c72e80d5dc671bbc241c6afc7aa627c5e55da19508fdd263f5d07936fa6bcbcabd702e40bf3a146f49c0a5bf376c1f35ffaca82a61655d3bdf1ee04e2c97f98f982297cc21", 0x8c)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
write(r0, 0x0, 0x0)

124.340347ms ago: executing program 7 (id=564):
mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000000)="53000035d4", 0x5)
recvfrom(r1, &(0x7f0000000200)=""/5, 0x5, 0x40, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="673bb5b8cc0c16ed08db75817fc8add3cec4ec48a2e92e98e17c03ce4801ef1d47e6abbbdabb26a5a12af0f46003", 0x2e}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x18, 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)

124.108104ms ago: executing program 7 (id=565):
chmod(&(0x7f0000000140)='.\x00', 0x35a)
setuid(0xee01)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
rename(&(0x7f0000000140)='./file0\x00', 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

123.935801ms ago: executing program 4 (id=566):
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="8f6f77ede65500000000000086dd605f6ad900183a010000000000000010000000fe800000000400000700000000000000000090de4a8f"])
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x10}, 0x10)

123.418397ms ago: executing program 2 (id=567):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14)
setsockopt(r0, 0x1000000029, 0xc, 0x0, 0x0)

123.228711ms ago: executing program 3 (id=568):
setuid(0xee01)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0xfffffffb)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
poll(&(0x7f00000000c0)=[{r3, 0x4}], 0x1, 0x0)
write(r3, &(0x7f00000002c0)="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", 0xfffffdaf)
close(r2)
syz_open_pts()
syz_open_pts()
sysctl$net_inet6_ip6(&(0x7f0000000780)={0x4, 0x18, 0x29, 0x7}, 0x4, 0x0, 0x0, &(0x7f0000000900), 0x0)
setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0))
getsockopt(r0, 0x0, 0x6a, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
getsockopt$sock_cred(r5, 0xffff, 0x1024, &(0x7f0000000480)={<r6=>0x0}, &(0x7f0000000580)=0xc)
kill(r6, 0x13)

75.562641ms ago: executing program 7 (id=569):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xffffffff}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
r0 = open$dir(&(0x7f0000000140)='./bus\x00', 0x20, 0x1ae44c217401e030)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000004, 0xffff63de, 0x8000005, 0xa9, 0x8, 0x3, 0xf7, 0x10, [{0x8, 0xb, 0x8, 0x80000001}, {0x3, 0x400, 0x4, 0x401}, {0x4, 0x4baa, 0x2, 0xd}, {0x17, 0xe2, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0xfffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0xffffffff, 0x10027ffc, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7dff}, {0x6, 0x5ad5, 0x0, 0x8bfd}, {0xfffffffd, 0x0, 0xc, 0xe}, {0x9, 0x3, 0xa00000, 0x5}, {0x601, 0x4, 0x40000b}, {0x3, 0x6e0, 0x6d4, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x3, 0x4, 0x100000, 0x4}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8)
closefrom(r0)
socket(0x1, 0x0, 0x2)
r1 = socket$inet(0x2, 0x1000, 0xb9)
sendto$inet(r1, 0x0, 0x0, 0x2, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x4}, 0x10)

74.333804ms ago: executing program 5 (id=570):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r1 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r1, 0x20007461)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x9, &(0x7f0000000100)="5a2742e3648afdd26c25cc7f1e57833af6a3e59caf3791257e45f3eeffbc019b75ad4f31591425163f85a73d991cabe3aa89004dc2ada4daf2207407", &(0x7f00000000c0)=0x3c, 0x0, 0x0)
ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000040)=0x800)
ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f0000000240)={{'./file0\x00', './file1\x00', 0x3, 0x4}, &(0x7f0000000180)=[{@multicast1, '\x00', './file0\x00', 0x1, 0x7f, 0x19, 0x8, 0x9, 0x40, 0x2}, {@multicast1, '\x00', './file0\x00', 0x0, 0x4, 0x2, 0x85, 0x6, 0x2, 0xe6}, {@multicast1, '\x00', './file0\x00', 0xa392, 0x2, 0x2, 0x9, 0x5, 0x6}], 0x3, 0x3, 0x1, 0x2, 0xe8ef, 0x2, 0xa, 0x7})
sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$BIOCLOCK(r2, 0x20004276)
write(r2, &(0x7f00000006c0)="3afd847d2ed8682052302ee264426187e2764a8d917ee13c53eb1f16e5bb8b02a77c73f0acd93d04952e2f731e40f61e01a11ed91f2e20a6340877154121716701cdbef5f6974e1628327cc9a6547f16ca6bb5344453b63ed7c2b22af444aade099710508026653f26173b533b839d11322743095e", 0x75)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000140))
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700)
r3 = open(&(0x7f0000000300)='./bus\x00', 0x200, 0xa0)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r3}, 0xffffffffffffffff, 0x13, 0x2}, {{r3}, 0xffffffffffffffff, 0x62}], 0x6, 0x0)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
msgsnd(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f00000000c0)={0x236, 0x40, './file0\x00', 0x3, 0x7ff, 0x205, 0x1})

73.440845ms ago: executing program 2 (id=571):
setsid()
r0 = syz_open_pts()
ioctl$TIOCSCTTY(r0, 0x20007461) (async)
r1 = socket$inet(0x2, 0x8003, 0xfc)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000240)) (async)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSDIRFILT(r2, 0x8004427d, &(0x7f0000000000)=0x7ffffffe) (async, rerun: 32)
syz_emit_ethernet(0x10f, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/271]) (async, rerun: 32)
open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async)
r3 = getpid() (async)
r4 = open(&(0x7f0000000200)='./file0/file0/..\x00', 0x20, 0x23)
readv(r4, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/219, 0xdb}], 0x1)
fcntl$setown(r4, 0x6, r3) (async)
socket(0x2, 0x8002, 0x0) (async)
r5 = fcntl$dupfd(r1, 0x0, r1) (async)
r6 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1fffc0, 0x10000, &(0x7f00000007c0)="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", 0x173) (async)
sendmsg(r6, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x10, 0x2, 0x1, 0xfffffef7}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000140)="62608fd98c58a3ae", 0x8}], 0x1, 0x0}, 0x2) (async)
ioctl$DIOCGETQUEUES(r5, 0xc148445e, 0x0)
ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0)
closefrom(r5) (async)
symlink(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f0000000040)='./file0\x00') (async)
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='w\x00') (async, rerun: 64)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffb, 0x44809e9d, 0x1, 0x3, 0x2800000000000000, 0x181c, 0x7fd, 0x2000000000000004}, 0x0, 0x0, 0x0) (async, rerun: 64)
poll(0x0, 0x0, 0x8880) (async)
r7 = socket(0x18, 0x1000, 0xf9)
r8 = fcntl$dupfd(r7, 0xa, r4)
closefrom(r8)

0s ago: executing program 0 (id=572):
sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)="442f854da89f1d0601b00030631c72e0c8561aa0220fa604c8fe6d9f1c840b2d40cbcbe4f5281d0bd99cfafbf0e78f2f6c704d3f5a4a2f870bb77e09000000000000007900000000db3800004a", 0x4d}], 0x1, 0x0}, 0x2)
open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r1=>0x0}, &(0x7f0000001e00)=0xc)
setresgid(r1, r1, r1)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
truncate(&(0x7f0000000080)='./file0\x00', 0x840002ffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts.
Connection to 10.128.1.19 closed by remote host.
ktrace write failed, errno 27, tracing stopped
init: getty repeating too quickly on port /dev/tty00, sleeping
panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*321483  83992      0           0  0x4000000    0  syz-executor
 117160  97194      0         0x2          0    1  syz-executor
db_enter() at db_enter+0x25
panic(ffffffff834cebab) at panic+0x1e5
__assert(ffffffff83510466,ffffffff8350ae01,84,ffffffff83564926) at __assert+0x29
rtmap_grow(cf,21) at rtmap_grow+0x24f
rtable_add(ce) at rtable_add+0x2d9
if_createrdomain(ce,ffff80000160d800) at if_createrdomain+0x40
ifioctl(ffff8000015b25f0,8020699f,ffff80002a25b050,ffff80002a22c2a8) at ifioctl+0x1c52
sys_ioctl(ffff80002a22c2a8,ffff80002a25b230,ffff80002a25b180) at sys_ioctl+0x674
syscall(ffff80002a25b230) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb0b31c30ac0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132
ddb{0}> show kasan
No such command
ddb{0}> trace
db_enter() at db_enter+0x25
panic(ffffffff834cebab) at panic+0x1e5
__assert(ffffffff83510466,ffffffff8350ae01,84,ffffffff83564926) at __assert+0x29
rtmap_grow(cf,21) at rtmap_grow+0x24f
rtable_add(ce) at rtable_add+0x2d9
if_createrdomain(ce,ffff80000160d800) at if_createrdomain+0x40
ifioctl(ffff8000015b25f0,8020699f,ffff80002a25b050,ffff80002a22c2a8) at ifioctl+0x1c52
sys_ioctl(ffff80002a22c2a8,ffff80002a25b230,ffff80002a25b180) at sys_ioctl+0x674
syscall(ffff80002a25b230) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb0b31c30ac0, count: -10
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a25ad60
rbx               0xffffffff839c0e0f    cpu_info_full_primary+0x2e0f
rdx                                0
rcx               0xffff80002a22c2a8
rax               0xffffffff839bfff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xe95c8786345af2e4
r11               0x65f94269d022c719
r12               0xffffffff839c0c10    cpu_info_full_primary+0x2c10
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81cff665    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a25ad50
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=321483 pid=83992 tcnt=3 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=50, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a22dc98,0xffff80002a22da10
    process=0xffff800045ff44e0 user=0xffff80002a256000, vmspace=0xfffff3000b1f75b8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 83992  442633  65933     0  2           0          0           syz-executor
*83992  321483  65933     0  7           0  0x4000000           syz-executor
 83992  400304  65933     0  2           0  0x4000000           syz-executor
 54927  217367  84638     0  2         0x1          0           syz-executor
 54927  510813  84638     0  3         0x1  0x4000080 fsleep    syz-executor
 46723  220813   7435     0  2           0          0           syz-executor
 46723   23440   7435     0  2           0  0x4000000           syz-executor
 54615  269717  97194     0  2           0          0           syz-executor
 54615  309196  97194     0  3           0  0x4000080 fsleep    syz-executor
 54615  467685  97194     0  3           0  0x4000080 fsleep    syz-executor
 92661  127244   3174 60929  2        0x10          0           syz-executor
 92661    4053   3174 60929  3        0x10  0x4000080 pipewr    syz-executor
 92661  367791   3174 60929  2        0x10  0x4000000           syz-executor
 19970  449121   8541     0  2    0x100002          0           sh
 44994  148443   7142     0  2         0x2          0           syz-executor
  8541  241553   7142     0  3         0x2       0x80 wait      syz-executor
 47796  256377      1     0  3           0       0x80 nanoslp   init
 66243   35916      0     0  3     0x14000      0x280 nfsidl    nfsio
 50328    7204      0     0  3     0x14000      0x280 nfsidl    nfsio
 59832  508523      0     0  3     0x14000      0x280 nfsidl    nfsio
 23898  107062      0     0  3     0x14000      0x280 nfsidl    nfsio
 76087  505279      0     0  3     0x14000      0x280 nfsidl    nfsio
 32787  166227      0     0  3     0x14000      0x280 nfsidl    nfsio
 64369   23164      0     0  3     0x14000      0x280 nfsidl    nfsio
 98734  481231      0     0  3     0x14000      0x280 nfsidl    nfsio
 93580  124766      0     0  3     0x14000      0x280 nfsidl    nfsio
 77108  509129      0     0  3     0x14000      0x280 nfsidl    nfsio
  1238  449979      0     0  3     0x14000      0x280 nfsidl    nfsio
 77710  205173      0     0  3     0x14000      0x280 nfsidl    nfsio
 78713  139700      0     0  3     0x14000      0x280 nfsidl    nfsio
 93046  300059      0     0  3     0x14000      0x280 nfsidl    nfsio
 50473   91866      0     0  3     0x14000      0x280 nfsidl    nfsio
 45773  463169      0     0  3     0x14000      0x280 nfsidl    nfsio
 32140  391735      0     0  3     0x14000      0x280 nfsidl    nfsio
 19719  387391      0     0  3     0x14000      0x280 nfsidl    nfsio
 62163  436261      0     0  3     0x14000      0x280 nfsidl    nfsio
 10009   32343      0     0  3     0x14000      0x280 nfsidl    nfsio
 84638   14203   7142     0  3         0x2       0x80 nanoslp   syz-executor
  7435  255899   7142     0  3         0x2       0x80 nanoslp   syz-executor
 97194  117160   7142     0  7         0x2          0           syz-executor
  7362   67091   7142     0  2         0x2          0           syz-executor
  3174  365429   7142     0  3         0x2       0x80 nanoslp   syz-executor
 65933  132341   7142     0  2         0x2      0xc80           syz-executor
  7142  500768      1     0  3         0x2       0x80 kqread    syz-executor
 61858  409694      0     0  3     0x14000      0x200 bored     smr
  2946  287482      0     0  2     0x14000      0x200           zerothread
 34660  389821      0     0  3     0x14000      0x200 aiodoned  aiodoned
 92243  178723      0     0  3     0x14000      0x200 syncer    update
 46197   86429      0     0  3     0x14000      0x200 cleaner   cleaner
 83627   34700      0     0  3     0x14000      0x200 reaper    reaper
 71882  229451      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 89175  342723      0     0  3     0x14000      0x200 bored     viomb
 98683   96837      0     0  3     0x14000 0x40000200 acpi0     acpi0
 86070  320231      0     0  3     0x14000 0x40000200           idle1
 93517  190463      0     0  3     0x14000      0x200 bored     softnet1
 37464  410369      0     0  3     0x14000      0x200 bored     softnet0
 10226  223249      0     0  3     0x14000      0x200 bored     systqmp
 85061  380033      0     0  3     0x14000      0x200 bored     systq
 10003  171968      0     0  3     0x14000      0x200 tmoslp    softclockmp
 40383  228776      0     0  3     0x14000 0x40000200 tmoslp    softclock
 28862  292685      0     0  3     0x14000 0x40000200           idle0
     1  481646      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3  0x10010000      0x200 scheduler swapper
ddb{0}> show all locks
Process 83992 (syz-executor) thread 0xffff80002a22c2a8 (321483)
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff83af1800)
#0  witness_lock+0x5f1
#1  __mp_acquire_count+0x58
#2  malloc+0xe3
#3  rtmap_grow+0xb2
#4  rtable_add+0x2d9
#5  if_createrdomain+0x40
#6  ifioctl+0x1c52
#7  sys_ioctl+0x674
#8  syscall+0xbd4
#9  Xsyscall+0x128
Process 46723 (syz-executor) thread 0xffff80002a22cfa0 (23440)
exclusive rwlock vmmaplk r = 0 (0xfffff3006fbcce60)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x430
#7  recall_trap+0x8
Process 19970 (sh) thread 0xffff80002a22c010 (449121)
exclusive rwlock vmmaplk r = 0 (0xfffff3006fbcc6c0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvmspace_fork+0x12b
#4  process_new+0x583
#5  fork1+0x3f9
#6  syscall+0xb17
#7  Xsyscall+0x128
exclusive rwlock vmmaplk r = 0 (0xfffff3000b1f7a88)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvmspace_fork+0x44
#4  process_new+0x583
#5  fork1+0x3f9
#6  syscall+0xb17
#7  Xsyscall+0x128
Process 44994 (syz-executor) thread 0xffff80002a2be038 (148443)
exclusive rwlock vmmaplk r = 0 (0xfffff3000b1f72e8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvmspace_fork+0x44
#4  process_new+0x583
#5  fork1+0x3f9
#6  syscall+0xb17
#7  Xsyscall+0x128
Process 7362 (syz-executor) thread 0xffff80002a22afa8 (67091)
exclusive rwlock vmmaplk r = 0 (0xfffff3006fbcc8a8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvmspace_fork+0x12b
#4  process_new+0x583
#5  fork1+0x3f9
#6  syscall+0xb17
#7  Xsyscall+0x128
exclusive rwlock vmmaplk r = 0 (0xfffff3000b1f7e58)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvmspace_fork+0x44
#4  process_new+0x583
#5  fork1+0x3f9
#6  syscall+0xb17
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11048  12158K   12247K 166960K     12452        0
            pcb    19     12K      12K 166960K       118        0
         rtable   216     11K      11K 166960K       967        0
             pf    33     17K      22K 166960K       156        0
         ifaddr    36      6K       8K 166960K       146        0
        ifgroup    51      2K       2K 166960K       184        0
         sysctl     4      1K       9K 166960K         8        0
       counters    68     36K      37K 166960K       316        0
       ioctlops     0      0K       4K 166960K      1675        0
            iov     0      0K      16K 166960K        24        0
          mount     1      1K       1K 166960K         1        0
            log     2      0K       0K 166960K         6        0
         vnodes  1322     83K      84K 166960K      1891        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         5        0
         VM map     2      1K       1K 166960K         2        0
            sem    27      1K       1K 166960K        64        0
        dirhash    12      2K       3K 166960K        66        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    18     69K      85K 166960K      1002        0
          sigio     0      0K       0K 166960K         5        0
           proc    12     17K     148K 166960K      1132        0
        subproc    72      4K       4K 166960K       253        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        50        0
       in_multi    77      5K       6K 166960K       315        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     1      0K       0K 166960K        24        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    61    281K     281K 166960K        61        0
           exec     0      0K       1K 166960K       736        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   110     70K     190K 166960K      9767        0
       UVM aobj    75      7K       7K 166960K        77        0
     pinsyscall    20     40K     101K 166960K      2677        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        16        0
            NDP    11      0K       2K 166960K       106        0
           temp    75   9132K    9196K 166960K     47419        0
         kqueue     2      4K      28K 166960K       126        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120      115    0      115     1     0     1     1     0     8    1
rtentry    176      321    0      230     6     0     6     6     0     8    0
unpcb      144      333    0      333     1     0     1     1     0     8    1
syncache   336        6    0        6     2     1     1     1     0     8    1
tcpcb      736      213    0      212     7     0     7     7     0     8    6
arp        136       54    0       40     1     0     1     1     0     8    0
inpcb      328      663    0      659     7     1     6     6     0     8    5
nd6        152       85    0       66     2     0     2     2     0     8    0
pkpcb       40        2    0        2     2     1     1     1     0     8    1
kcovpl      48       28    0       20     1     0     1     1     0     8    0
ppxss      1192     101    0      101     2     1     1     1     0     8    1
pfstscr     40        4    0        3     2     1     1     1     0     8    0
pffrag     232        5    0        0     1     0     1     1     0   482    0
pffrnode    88        4    0        0     1     0     1     1     0     8    0
pffrent     40        6    0        1     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       83    0       25     1     0     1     1     0     8    0
pfstkey    128       88    0       30     3     0     3     3     0     8    0
pfstate    448       85    0       28     7     0     7     7     0     8    0
pfrule     1360      40    0       35     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     1329    0      959    32     3    29    32     0     8    4
art_table   40     1331    0      959     6     0     6     6     0     8    0
art_node    32      320    0      237     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        2     2     1     1     1     0     8    0
semapl      72       58    0       33     1     0     1     1     0     8    0
shmpl      120       74    0        2     3     0     3     3     0     8    0
dirhash    1024      53    0       36     3     0     3     3     0     8    0
dino2pl    256     2744    0     1230    95     0    95    95     0     8    0
ffsino     296     2744    0     1230   117     0   117   117     0     8    0
nchpl      144     3675    0     1905    66     0    66    66     0     8    0
rtmask      32        3    0        3     2     1     1     1     0     8    1
vnodes     216     3190    0        0   178     0   178   178     0     8    0
namei      1024   14682    0    14682     6     3     3     3     0     8    3
percpumem   16      174    0      124     1     0     1     1     0     8    0
kstatmem   264      109    0       84     4     1     3     3     0     8    1
scsiplug    72        4    0        4     1     0     1     1     0     8    1
scxspl     216    17193    0    17193    12    10     2     8     1     8    2
plimitpl   152      103    0       94     1     0     1     1     0     8    0
sigapl     424     1314    0     1257     9     1     8     8     0     8    0
knotepl    120      524    0        0    16     0    16    16     0     8    0
kqueuepl   224      314    0      312     5     0     5     5     0     8    4
pipepl     344      237    0      209     3     0     3     3     0     8    0
fdescpl    528     1277    0     1256     3     0     3     3     0     8    0
filepl     160     5531    0     5372    13     0    13    13     0     8    3
lockfpl    104      163    0      163     1     0     1     1     0     8    1
lockfspl    48       67    0       67     1     0     1     1     0     8    1
sessionpl  144       54    0       51     1     0     1     1     0     8    0
pgrppl      48       84    0       73     1     0     1     1     0     8    0
ucredpl    104      749    0      740     1     0     1     1     0     8    0
zombiepl   144     1371    0     1371     1     0     1     1     0     8    1
processpl  1240    1314    0     1257     7     1     6     6     0     8    0
procpl     664     2177    0     2111     8     1     7     7     0     8    0
sockpl     752     1137    0     1133     9     1     8     8     0     8    7
mcl64k     65536     15    0        0     2     0     2     2     0     8    0
mcl16k     16384     17    0        0     3     0     3     3     0     8    0
mcl12k     12288      5    0        0     1     0     1     1     0     8    0
mcl9k128   9344       5    0        0     1     0     1     1     0     8    0
mcl8k      8192      10    0        0     2     0     2     2     0     8    0
mcl4k      4096     113    0        0    15     0    15    15     0     8    0
mcl2k      2048      23    0        0     3     0     3     3     0     8    0
mextrefs    64       22    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      292    0        0    19     0    19    19     0     8    0
bufpl      272     7561    0     1430   412     2   410   412     0     8    0
anonpl      32     7599    0        0    62     0    62    62     0   247    0
amapchunkpl 152   32997    0    32691    39    12    27    31     0   158   12
amappl16   200     3035    0     3019    16    11     5    15     0     8    1
amappl15   192        1    0        1     1     1     0     1     0     8    0
amappl14   184      709    0      708     1     0     1     1     0     8    0
amappl13   176      166    0      166     1     0     1     1     0     8    1
amappl12   168     1604    0     1588     2     0     2     2     0     8    0
amappl11   160        5    0        5     1     1     0     1     0     8    0
amappl10   152       64    0       64     1     0     1     1     0     8    1
amappl9    144      273    0      273     1     1     0     1     0     8    0
amappl8    136      177    0      177     1     0     1     1     0     8    1
amappl7    128      194    0      192     1     0     1     1     0     8    0
amappl6    120      357    0      355     1     0     1     1     0     8    0
amappl5    112      122    0      121     1     0     1     1     0     8    0
amappl4    104      362    0      359     1     0     1     1     0     8    0
amappl3     96     5470    0     5419     3     0     3     3     0     8    0
amappl2     88     1330    0     1309     2     0     2     2     0     8    0
amappl1     80    15355    0    15265    14     1    13    14     0     8    7
amappl      88     8546    0     8446     5     0     5     5     0    92    0
uvmvnodes   80      124    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       76    0        2     2     0     2     2     0     8    0
uaddrrnd    24     1277    0     1256     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1276    0     1256     1     0     1     1     0     8    0
vmmpekpl   168    11221    0    11171     3     0     3     3     0     8    0
vmmpepl    168    88068    0    87331    99    12    87    97     0   357   43
vmsppl     488     1276    0     1256     6     1     5     5     0     8    1
rwobjpl     80    25750    0    25292    28     1    27    28     0     8    1
pdppl      4096    2561    0     2512   117    68    49    81     0     8    0
pvpl        32    15607    0        0   127     1   126   127     0   265    0
pmappl     256     1276    0     1256     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      735    0       80    20     0    20    20     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25
panic(ffffffff834cebab) at panic+0x1e5
__assert(ffffffff83510466,ffffffff8350ae01,84,ffffffff83564926) at __assert+0x29
rtmap_grow(cf,21) at rtmap_grow+0x24f
rtable_add(ce) at rtable_add+0x2d9
if_createrdomain(ce,ffff80000160d800) at if_createrdomain+0x40
ifioctl(ffff8000015b25f0,8020699f,ffff80002a25b050,ffff80002a22c2a8) at ifioctl+0x1c52
sys_ioctl(ffff80002a22c2a8,ffff80002a25b230,ffff80002a25b180) at sys_ioctl+0x674
syscall(ffff80002a25b230) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb0b31c30ac0, count: -10
ddb{0}> machine ddbcpu 1