last executing test programs:

3.469479952s ago: executing program 2 (id=463):
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x25) (async)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x25)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0)

3.468840789s ago: executing program 2 (id=464):
sysctl$kern(&(0x7f0000000400)={0x1, 0x1b}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) (async)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x2010, r0, 0x0) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)={0x0}, 0x10, 0x0, 0x0) (rerun: 64)

3.467003306s ago: executing program 4 (id=465):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
readv(r0, &(0x7f0000001900)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000001440)={0x0}, 0x10, 0x0)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r2)

3.465967357s ago: executing program 2 (id=466):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
sendto(r0, &(0x7f0000000040)="b28d3f1ddf5a100c6e45d6b0fd31ee53ee1c4d046fcc91804a93c0886cb5b63625701cde9d7ef34c1e89fa4d37b33045aaed235ff45e9dddeb7fc7f68192afcc95af0c70a6cc", 0x46, 0x9, &(0x7f00000000c0)=@in6={0x18, 0x3, 0xb5f, 0x5}, 0xc) (async)
r1 = socket(0x11, 0x3, 0x0)
read(r1, &(0x7f0000000100)=""/30, 0x1e)

3.386520657s ago: executing program 4 (id=467):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x18a)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1)
dup2(r1, r0)
execve(0x0, 0x0, 0x0)
rename(0x0, 0x0)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0xffff, &(0x7f0000000080)='./file0\x00', 0x8})
ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0))

3.38519343s ago: executing program 2 (id=468):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000640)={<r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xd4e688a67930cd)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0xffd0}], 0x1)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r1, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0})
close(r0)
r2 = socket(0x2, 0x2, 0x2)
setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20002, 0x4)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r2, &(0x7f0000000000), 0x10)
execve(0x0, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) (async)
pipe(&(0x7f0000000640)) (async)
write(r0, &(0x7f0000000340), 0xd4e688a67930cd) (async)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0xffd0}], 0x1) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) (async)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async)
ioctl$VNDIOCSET(r1, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
close(r0) (async)
socket(0x2, 0x2, 0x2) (async)
setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20002, 0x4) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
execve(0x0, 0x0, 0x0) (async)

3.290179811s ago: executing program 1 (id=473):
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="91a6e34dd8bbaabfaaaaaabb0800450000280000000000019078000000175bf246bee324f8f608ccc714d021d300000000000d00907800000200"/70])
socket(0x18, 0x3, 0x2f)
socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
kevent(0xffffffffffffffff, &(0x7f0000000400)=[{{r0}, 0xfffffffffffffffb, 0xce, 0x2, 0x2, 0x6}], 0x4, &(0x7f0000000480)=[{{r1}, 0x0, 0x4, 0x4, 0x3, 0x200}, {{r0}, 0xfffffffffffffff8, 0x64, 0x1, 0x8}, {{r0}, 0xfffffffffffffffb, 0x8a, 0xfffff, 0x8, 0x8001}, {{r2}, 0xfffffffffffffff8, 0x10, 0x40000000, 0x650d116f, 0x5}], 0xc1a8, &(0x7f0000000500)={0x7, 0x6})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = dup2(r4, r3)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x4}, {0x2, 0x0, 0x0, 0x40803}]})
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, r5})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r6, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3", 0x3}], 0x1)
close(r6)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000000)={0x5, &(0x7f0000000340)=[{0x0, 0x1, 0x1, 0x200000}, {0x35, 0x0, 0x2, 0x1}, {0x24, 0x1, 0x3}, {0x2, 0xfd, 0x9, 0x1}, {0x6, 0x0, 0x5, 0x801}]})
write(r7, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
r8 = socket(0x18, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f00000003c0), 0x2, 0x4000)
r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
close(r9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
sendmsg(r10, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0xe0}, 0x0)
ioctl$VMM_IOC_CREATE(r9, 0xc2585601, &(0x7f00000000c0)={0x10, 0x10, [{&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x40}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xa}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffff}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000000000006}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x9}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xa1}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xf9e5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffdaf}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x7f}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xc}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x3d}], './file0\x00', 0x140000})

2.227778501s ago: executing program 1 (id=476):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
pwritev(r0, &(0x7f0000000200), 0x0, 0x3fffd)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000300)='q', &(0x7f0000000080)=0x1, 0x0, 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x134, 0x0)
madvise(&(0x7f00003e0000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f00003e0000/0x2000)=nil, 0x2000)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
syz_emit_ethernet(0x557, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRES8, @ANYRESDEC=r2])
open(&(0x7f00000006c0)='./file0\x00', 0x205, 0x43)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x112, 0x0)
recvmmsg(r3, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000480)=@un=@file={0x0, ""/537}, 0x21b, 0x0, 0x0, 0x0}, 0x5}, 0x10, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x842, 0x0)
sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x10, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0)
socket(0x18, 0x2, 0x0)
execve(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setregid(0x0, r4)
ioctl$WSKBDIO_GETDEFAULTBELL(r1, 0x40105706, &(0x7f0000000480))
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/186, 0xba}], 0x1)
sysctl$net_inet_ip(&(0x7f00000004c0)={0x4, 0x2, 0x0, 0x1f}, 0x4, 0x0, 0x0, &(0x7f0000000400), 0x28)

2.084994747s ago: executing program 6 (id=487):
open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0)
munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
mlockall(0x0)
sendto$unix(r1, &(0x7f00000000c0)="b100051360000004000000000700000008008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x4f)

2.062094761s ago: executing program 6 (id=488):
setgid(0xffffffffffffffff)
setuid(0xffffffffffffffff)
r0 = msgget$private(0x0, 0x200)
msgsnd(r0, &(0x7f0000000380)={0x3}, 0x8, 0x800)
msgrcv(r0, 0xffffffffffffffff, 0x0, 0x3, 0x1000)
msgsnd(r0, &(0x7f0000000000)={0x2, "8ddfdd15cc73b88f2b99657adcd019d08492a23f7a05f6fabee9e85d154030d5fe0bf70d6ef08a9cb6baf58e3cc025f275089b899c4c32d703ec2493b1767526c7f0756fcf1962802de57c39d55aa29f0774f84eae90dee6c751424a94cac081208dbab6cd6172dc0233a943a488b6faab927b5d71"}, 0x7d, 0x800)
setegid(0x0)
setgid(0xffffffffffffffff) (async)
setuid(0xffffffffffffffff) (async)
msgget$private(0x0, 0x200) (async)
msgsnd(r0, &(0x7f0000000380)={0x3}, 0x8, 0x800) (async)
msgrcv(r0, 0xffffffffffffffff, 0x0, 0x3, 0x1000) (async)
msgsnd(r0, &(0x7f0000000000)={0x2, "8ddfdd15cc73b88f2b99657adcd019d08492a23f7a05f6fabee9e85d154030d5fe0bf70d6ef08a9cb6baf58e3cc025f275089b899c4c32d703ec2493b1767526c7f0756fcf1962802de57c39d55aa29f0774f84eae90dee6c751424a94cac081208dbab6cd6172dc0233a943a488b6faab927b5d71"}, 0x7d, 0x800) (async)
setegid(0x0) (async)

2.028042606s ago: executing program 6 (id=492):
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x508)
open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) (async)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x7)
socket(0x2, 0x2, 0x0) (async)
r1 = socket(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)="10cb9947b53482", 0x7}], 0x1)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f00000001c0))
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000040)={&(0x7f00000000c0)=[{0x1, 0x2}], 0x1})
open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) (async)
open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0)

2.025938225s ago: executing program 6 (id=495):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) (async)
r1 = syz_open_pts()
syz_open_pts() (async)
syz_open_pts() (async)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
select(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0xd, 0x899f, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) (async)
close(r1)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x10005, 0x146)
setreuid(0x0, 0xee01) (async)
ioctl$TIOCEXCL(r3, 0x2000740d) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @rand_addr}, @icmp=@generic={0x5, 0x0, 0x0, "4c1f8ba32f5b201b7300"/24}}}}}) (async)
ioctl$TIOCSWINSZ(r2, 0x80087467, &(0x7f0000000180)={0x6, 0xf96a, 0xdc16, 0xd995})
r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000000029, 0xa, &(0x7f0000000040)='\t\x00\x00\x00', 0x4) (async)
r6 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x100, &(0x7f0000000000)=0x7, 0x1) (async)
setsockopt(r5, 0x1000000029, 0xc, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000001480)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x8001, 0xfd, 0x4}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8cf7f46ded8ccb0c0428dad06004805606ce37de53a1c521024a8f0ceda203c740de9737c7ac751f481c86f408518dae30b61525081f1b2f011a0e7585b0d24fdb6f5d3cc4f71b7f2f7aeb80c1a5b60e7446c27e5704a43e2d50529081c5411ea355d1c482416ff8fc8dfdbb749234cf059af94e5cfbe8445d0a020b30c3b079269843436ca772ccda03b0e", &(0x7f0000000080)=0x10, 0x0, 0x2) (async)
renameat(r4, &(0x7f00000000c0)='./bus\x00', r3, &(0x7f0000000100)='./bus\x00') (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{0x74, 0x3, 0xff, 0x20002}, {0x74, 0x6, 0x9, 0x8}, {0x6, 0x5, 0xf9, 0x4}]}) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[]) (async)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000400)=""/105, 0x69}, {&(0x7f0000000480)=""/149, 0x95}], 0x4)

1.953004311s ago: executing program 6 (id=498):
sysctl$kern(&(0x7f0000000000)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa22f3c"])
sysctl$net_inet_ip(0x0, 0x0, &(0x7f00000000c0)="045a46235696b50c256e4c76699408262a4e66fc21a53aa3b569717faaa4d6552e623cb07994eeb3fff6dbb1a22494eb677bcfc7e9cdfbdc547010f382e2579cd2a220e8f340a0cca0f67ce50d7e8de11966dbc1a665222dfa824578df90d0fa6c4eccac6a1a7e09c4cc9a5ef7232350708e9b7a6fd02853b219c121d499418ec554ab594be565a03fa9f1055e18be5a6473a2de2a0857dee36331e2217780f7b96c399611ddf5c459cf219bb19012eede0efe3755176075ce181debefaddd28ae49", 0x0, 0x0, 0x0) (async)
sysctl$net_inet_ip(0x0, 0x0, &(0x7f00000000c0)="045a46235696b50c256e4c76699408262a4e66fc21a53aa3b569717faaa4d6552e623cb07994eeb3fff6dbb1a22494eb677bcfc7e9cdfbdc547010f382e2579cd2a220e8f340a0cca0f67ce50d7e8de11966dbc1a665222dfa824578df90d0fa6c4eccac6a1a7e09c4cc9a5ef7232350708e9b7a6fd02853b219c121d499418ec554ab594be565a03fa9f1055e18be5a6473a2de2a0857dee36331e2217780f7b96c399611ddf5c459cf219bb19012eede0efe3755176075ce181debefaddd28ae49", 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x3, 0x2f)
r1 = dup(r0)
setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async)
setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x2, 0x3, 0x0) (async)
r2 = socket(0x2, 0x3, 0x0)
r3 = dup(r1)
dup2(r3, r2)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
connect$unix(r2, &(0x7f0000000000), 0x10)
sendto(r1, &(0x7f0000000180)="e7c94c3c526a7f2a", 0x8, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x20)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')

1.913979517s ago: executing program 6 (id=501):
sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, &(0x7f0000000080)="44e531ad", &(0x7f00000000c0)=0x4, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
r1 = kqueue()
r2 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x3402)
r3 = syz_open_pts()
close(r3)
syz_open_pts()
writev(r3, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
fcntl$setstatus(r3, 0x4, 0x4)
write(r3, &(0x7f0000000280)='\x00', 0x1)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4)
open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
kevent(r1, &(0x7f0000000540)=[{{r0}, 0xfffffffffffffff8, 0x19, 0x4, 0x7fffffff, 0x5}], 0x724, 0x0, 0xd1c, 0x0)

1.692332232s ago: executing program 7 (id=505):
r0 = socket(0x2, 0x2, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
r1 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4)
kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffffa, 0x0, 0x40000000, 0x3, 0x3ff}, {{}, 0xffffffffffffffff, 0x20, 0x8, 0x5, 0x9}, {{}, 0xfffffffffffffffe, 0xc, 0x4, 0x7, 0x1}], 0xe6, 0x0, 0x7, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f00000000c0)="9b1809c3dd7d3f81670e53473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0xfff9, 0x0, 0x0) (async)
sendmmsg(r0, &(0x7f0000000640)={&(0x7f0000000600)={&(0x7f0000000240)=@in6={0x18, 0x3, 0x3, 0x7fff}, 0xc, 0x0, 0x0, 0x0}, 0x9}, 0x10, 0x8)

1.645165787s ago: executing program 7 (id=506):
r0 = socket(0x10, 0x3, 0xfd)
ioctl$FIONREAD(r0, 0x80047308, &(0x7f0000000100))

1.630390503s ago: executing program 5 (id=507):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x30, 0x8, 0x0, 0x4}, {0x74, 0x8, 0x7, 0x1}, {0xe, 0x0, 0x7, 0x80}]})
syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[])
syz_emit_ethernet(0x22, &(0x7f00000001c0)={@random="135f9d81975c", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x1, 0x11, 0x14, 0x66, 0x3, 0x0, 0x2, 0x0, @local={0xac, 0x14, 0x0}, @loopback}}}}})

1.628276198s ago: executing program 7 (id=509):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r0 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0xb3, &(0x7f0000000000)=[{{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x4c, 0x40, 0x10, 0x6}], 0x6, 0x0)
r2 = socket(0x2, 0x2, 0x0)
r3 = kqueue()
r4 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
kevent(r3, &(0x7f0000000040)=[{{r4}, 0xfffffffffffffffc, 0x7}], 0x7fffffff, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202)
mknod(&(0x7f0000000440)='./bus\x00', 0x8, 0x202)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00')
ioctl$FIONREAD(r2, 0x80206997, &(0x7f00000001c0))
sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000240)="ed9a192215008f617fa22490b95b679000aee86b22e96eb41c519571b0ab559d8361f9f89e447787d0caf75b7dfd3fd4158f02542fd5e2764089aad75d2b27e3c81dd0e2c65efd50c70f6e8c921db416ce1438f439df52c36eec7e647a8df00d0f6a4f7835e4d0361ee90e6ac2106a750fc0f567efc4e2811ee2be7e6f521c7c9fc51e8cb1c7b73a666e436c76f9bbd0e109936612f6dc2f9e7df9f0e4daf75583747f1bee6f1f7243636684c2338ff9c2b68a06a51d5692ed84beb268be2e9947d9fd9dcada6d33bec1bfcf44453d948f5400fb5e36f9954d946ddd890cf19dab9766fc8d3b0eeb794c4f1cb9b5983f169b65", 0xf3}, {&(0x7f0000000340)="95ebf1ed801ce43dd4f130badd312a1f5fb276526ddef4d4a7947a33230152d8124326c6702c896df930dcaa7bf427348176e8f3aa90fc6f928163ac1317648d6c93ca", 0x43}], 0x2, 0x0, 0x0, 0xb}, 0x4)

1.620592261s ago: executing program 5 (id=510):
getgid()
r0 = socket$inet(0x2, 0x1, 0xe)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000900)="7cc5fc509c4a8abdbb7751dbacea69843ce8a5a5f1cd29cd54639257dc8a04c3bcc4846e5fbbbbcbcbfb22814006a017c74a9dc03299f6061c951acc18a15c521c055ba16b31cf51ad2b1b52ebb20ad737050214bee1c559b8746c9eca0d746731e476e4c23b88b745419f51074d6987331bf6a786e1e2268aa7b554dd235c83eb2be01e4afa82ed5077bb6908cf63e39c42e6179c89a66f51234845aa4eeb9251e8cd13e735bb72db2ecdb415513e843a02a331f8fe1e9684f1d29121130496", 0xc0)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, 0x0, 0x0)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000a40), 0x200, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000ac0)={0x0})
utimensat(r1, 0x0, 0x0, 0x2)
sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0)
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, 0x0, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4000000000000049, 0x0, 0x0, 0x0, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r1, 0xc028575d, &(0x7f0000000080)={0x800, 0x5, './file0\x00', 0xe, 0x1000, 0xc, 0x7})
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3)
ioctl$WSMOUSEIO_SRES(r1, 0x80045721, &(0x7f0000003840)=0x8)

1.619331858s ago: executing program 7 (id=511):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000240)="b100051660000000000000000d000000331c13fecea10500fef96ecfc72fd3357ae321b37b673039d2d2360737058e04be38070091f7c8cf5f88b5d117bbff685b3eeb51e2b0ac3ebbc25769b05f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a81d5181ea6e69e0be76d907c400000200361b1257aea8c5000020020000fc0000008abfba0900000008e371a3f8343712051eadb71d89e000e20681e4b2e0fc5ac900", 0xb1, 0x20a, 0x0, 0x0) (async)
r1 = socket(0x18, 0x1, 0x0) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x49)
setreuid(0xee00, 0x0)
r2 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r2, 0xffffffffffffffff) (async)
setreuid(0xee00, r2) (async)
unveil(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='c\x00')
close(r1) (async)
syz_extract_tcp_res(&(0x7f0000000040), 0x9, 0x10000)
r3 = open(&(0x7f0000000300)='./file1\x00', 0x400, 0x2) (async)
r4 = syz_open_pts()
readv(r4, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1) (async)
syz_open_pts()
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
setreuid(0x0, 0xee01) (async)
r5 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r5, 0x8020699d, &(0x7f0000000100)) (async)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000140)="ba", 0x1}], 0x1) (async)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) (async)
r6 = kqueue()
kevent(r6, &(0x7f0000000000), 0x1, 0x0, 0x57d, 0x0) (async)
kevent(r6, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (async)
openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async)
ioctl$BIOCGRSIG(r3, 0x40044273, &(0x7f0000000180)) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000f40)={0x0, [{0x2}, {0x0, 0xffff}, {0x1, 0x3}, {}, {0x0, 0xfffffff7}, {}, {0x2, 0x800009}, {0x1, 0x80001}, {0x1, 0x367b}, {0x2, 0xfffffffd}, {0x0, 0x3}, {0x2, 0x7f}, {0x0, 0x6cb}, {0x1, 0x3}, {0x0, 0xffffffff}, {0x2}, {0x3, 0x34a}, {0x1, 0xfffffffe}, {0x3, 0x1000004}, {0x2}, {0x0, 0xfffffff9}, {0x0, 0x8000}, {0x3}, {0x0, 0x800004}, {0x3, 0x4}, {}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x1}, {}, {0x506448b5f9fd2f46}]}) (async)
r7 = kqueue()
kevent(r7, &(0x7f00000000c0), 0x138, &(0x7f0000000100), 0xffffffff, 0x0)

1.618047853s ago: executing program 5 (id=512):
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000008c0)='W\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x3d, 0x1, 0x1, 0x4}, {0x8, 0x0, 0x2, 0x3f}, {0x6, 0x4, 0xd, 0xffffffff}]})
write(r0, &(0x7f0000000000)="23c37e6186125fd5b48bd9e3b181", 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept$unix(r1, &(0x7f0000000000)=@file={0x0, ""/5}, &(0x7f0000000280)=0x7)
sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x300}, 0x0)

1.616311427s ago: executing program 5 (id=514):
r0 = socket(0x8, 0x0, 0x7f)
setsockopt(r0, 0x11, 0x3, 0x0, 0x0)
setgroups(0x0, 0x0) (async)
r1 = geteuid() (async)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r2=>0x0}, 0xc)
lchown(&(0x7f0000000000)='./file0\x00', r1, r2)

1.615619799s ago: executing program 5 (id=516):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = socket(0x2, 0x3, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000340)=[{0x4, 0xa, 0xfc, 0x603}, {0x25, 0x1, 0x2, 0x41}, {0x5c, 0x0, 0xfa}, {0x53, 0x0, 0x9, 0x5}, {0x6, 0x40, 0xb4, 0x1}]})
write(r1, &(0x7f0000000000)="03000000000000009b0500bd1a30", 0xe)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
sysctl$vfs_ffs(&(0x7f0000000500), 0x3, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r0, &(0x7f0000000000), 0x10)
write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0x2000)

1.576676479s ago: executing program 5 (id=518):
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1f}, 0x4, 0x0, 0x0, &(0x7f0000000080)="fc864141bdeee593a8b2b5378f17e05200d063547bb13b18443599a5019c472d81030d0f8c88747d4ba4a4e155221efd0c0e65bee6d53c7c4eb39d195cb8d4a4485c921700000000000000000000000000b3", 0x52)
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x2, 0x4, 0x6, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff)
write(r3, &(0x7f0000000100), 0xfffffe5d)
r4 = accept(0xffffffffffffffff, &(0x7f0000000140)=@in, &(0x7f0000000180)=0xc)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000200), 0xa5de1bc9a24a4b56, 0x0)
r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
poll(&(0x7f0000000280)=[{r0, 0x20}, {r1, 0x10}, {}, {r3, 0x40}, {r4, 0x100}, {r5, 0x20}, {r6, 0x4}, {r7, 0x20}, {0xffffffffffffffff, 0x42}], 0x9, 0x3)

1.275939955s ago: executing program 3 (id=534):
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
r1 = getppid()
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x4, 0xffffe, r1})
setitimer(0x1, &(0x7f0000001fc0)={{}, {0x5}}, 0x0)
getegid()
rmdir(&(0x7f0000000180)='./file0\x00')
clock_getres(0x4, &(0x7f0000000040))
r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8, 0x18)
fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x1, 0x6, r1})
ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000140)={0x0, 0x1000})

1.070145214s ago: executing program 3 (id=535):
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000))
bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8)
chmod(&(0x7f0000000080)='./file0\x00', 0xa9)
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@in6, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/153, 0x99}], 0x5, &(0x7f0000000340)=""/61, 0x3d}, 0x1001)
r1 = socket(0x30, 0x1, 0xb)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0)
ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f0000000400)={'./file1\x00', 0x0, 0x1000, 0x8})
ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f0000000840)=r1)
syz_emit_ethernet(0xa5, &(0x7f0000000880)={@remote, @random="5b1330a401cd", [], {@ipv4={0x800, {{0x19, 0x4, 0x0, 0x1a, 0x97, 0x66, 0xd66c, 0x6, 0x6c, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x13, 0x5, [@multicast2, @broadcast, @multicast1, @remote={0xac, 0x14, 0x0}]}, @timestamp={0x44, 0x1c, 0xff, 0x3, 0x1, [{[], 0x6}, {[@multicast1], 0xbc83}, {[@loopback], 0x9}, {[], 0x80000000}]}, @timestamp={0x44, 0x20, 0x3, 0x0, 0x0, [{[@broadcast], 0x8}, {[@loopback], 0x8}, {[@remote={0xac, 0x14, 0x0}], 0x3}, {[], 0x9}]}]}}, @udp={{0x0, 0x2, 0x8}, {"028100ef1ea3522cfebc7886e15f9fae665ce143fead0ee6314a38a1419cbbdfc8528e42265fbbd13a32d5"}}}}}})
fcntl$getown(r1, 0x5)
r3 = socket(0x2, 0x0, 0x8)
select(0x40, &(0x7f0000000940)={0xfffffffffffffff3, 0x8, 0x837c, 0x8, 0x0, 0x0, 0x4, 0x4000000000000}, &(0x7f0000000980)={0x3, 0x81, 0xfffffffffffffffc, 0x4, 0x2, 0x101, 0xffff, 0xd2}, &(0x7f00000009c0)={0x80, 0x9, 0x2, 0x7, 0xa, 0x2, 0xffffffffffff2a6f, 0x6000000000}, &(0x7f0000000a00)={0x8, 0x7fffffff})
r4 = accept$inet(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0xc)
getpeername$inet(r4, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc)
r5 = open(&(0x7f0000000b40)='./file0\x00', 0x0, 0x1e6)
close(r5)
r6 = socket(0x6, 0x5, 0x1)
setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000b80)={0x6, 0x4}, 0x10)
getsockopt(r2, 0x60238277, 0x7, &(0x7f0000000bc0)=""/193, &(0x7f0000000cc0)=0xc1)
ioctl$TIOCGTSTAMP(r5, 0x4010745b, &(0x7f0000000d00))
accept$inet(r6, 0x0, &(0x7f0000000d40))
ioctl$TIOCDRAIN(r2, 0x2000745e)
setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000d80)={0x40, 0x6}, 0x10)
write(r1, &(0x7f0000000dc0)="01ef34855a7ad1f163fbe209ac7a12127f2ffd19276486a9331d463f5b273f90ba5cd2fcae48f8c4f46229fd44e47dcdcdf5c2d1dc2de6c6a62b8b4b4fa82deb334f4856a749de58ad29c356fc32fe552a92d9114bd19b5b9e12eb86c10fc345a1529af0d90674480adaaa8acbb07754d2886865a0e10126b2b4a45aa79da143b964cb279deb0cb10bea0d6cc599443a327fe46de50c1031c1490f17482c9d8396be31b71a437f5aa1a4a7b2622143aede83d46805ab13411a9adbbb12", 0xbd)
ioctl$TIOCSBRK(r5, 0x2000747b)
r7 = syz_open_pts()
ioctl$TIOCMSET(r7, 0x8004746d, &(0x7f0000000e80)=0x6)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000f00)={0x2, &(0x7f0000000ec0)=[{0x0, 0x66, 0x80, 0x10001}, {0x1, 0x6, 0x7, 0x200}]})
ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000f40))
ioctl$PCIOCWRITE(r2, 0xc0107003, &(0x7f0000000f80)={{0x9, 0x9, 0x81}, 0xfffffff8, 0x6, 0x2d0b})

1.069778165s ago: executing program 3 (id=536):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e)
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040)=[{0x24}, {0x101}], 0x2})
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = getpid()
fcntl$setown(r1, 0x6, r2)
r3 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r3, 0x6, 0x8, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@generic={0xb, 0x0, 0x0, "fe339657"}}}}})
fcntl$setown(r1, 0x6, r2)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="3f3b684c5ae9631ed2702816be31447d3756639e0c8a31000000009405095e7acbf4419893cfd424b75262dc5ade2ab6278ab80849177964f55be2796672f9ed186987b8c19d9295a17b98020f", 0x4d}], 0x1}, 0x75460a86b2489ea8)

820.209735ms ago: executing program 3 (id=537):
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x8968, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x80000005a7, 0x4, 0x8})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000002880)={'tap', 0x0}) (async)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/150, 0x96}], 0x2, 0x2) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async)
preadv(r0, &(0x7f0000001600)=[{&(0x7f00000011c0)=""/18, 0x12}, {&(0x7f0000001200)=""/78, 0x4e}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000001340)=""/216, 0xd8}, {&(0x7f0000001440)=""/175, 0xaf}, {&(0x7f0000001500)=""/244, 0xf4}], 0x6, 0x3)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x4)

819.171675ms ago: executing program 3 (id=538):
openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)="a9a8a9595e236830adcecc2832a2dae3682dc973f131335fc3580cecc90d0a098b1538fb7417e137c89fa8f19a2ba68fac1cf2494c8ed88e91af80cb3820101f5411255b4ed57b3429f1ec3346c2452de0dc241ae19e3cf35fc70d4a4f484855683c7e38cb1822c5aaba19227f79e6d7cf48e813329fd1a52fcfc6b48aeaf523f3ecfe0889d0fb10", 0x88}, {&(0x7f0000000200)="2f17d594d3ed826047", 0x9}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0)
r1 = socket(0x11, 0x3, 0x8)
sendto$unix(r1, &(0x7f0000000100)="b10005016000009f05000e0007000000001813fecea10500fef96ecfc72fd3357ae302b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821020000000000008bfbb770c116a972c881ea772ec5890400000000ff0000361b1257aea8c500002002fbff0c1300008a09000000000008e37195f800040700000080042000"/177, 0xb1, 0x0, 0x0, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0)
r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x0)
ftruncate(r3, 0x80002)

818.699296ms ago: executing program 3 (id=539):
r0 = socket(0x800000018, 0x4000, 0x4)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
fcntl$getown(r0, 0x5) (async)
r1 = fcntl$getown(r0, 0x5)
fcntl$setown(r0, 0x6, r1)
r2 = shmget$private(0x0, 0x3000, 0x102, &(0x7f0000ffa000/0x3000)=nil)
r3 = kqueue()
kevent(r3, &(0x7f0000000040)=[{{r3}, 0xfffffffffffffffa, 0xd2, 0x80, 0x9}], 0x8, 0x0, 0x6f76, 0x0)
r4 = shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x1000)
shmctl$IPC_RMID(r2, 0x0) (async)
shmctl$IPC_RMID(r2, 0x0)
r5 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f00000015c0)="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", 0xa42}], 0x2) (async)
writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f00000015c0)="17284e1b9ad9ddc636b055d562c2f788317cc0d379ae2a50c15e2e72c6749ea7afd11d6d24be2a04334593a91a621fc06e7e1faa6d1a6af1a9133925b6c39c049af8114aa94774297b56c5201ae38af1e871e47762de4a6e1458c8f2ed28d33a1c3038311b0456b786cc77c68c1bc38df6a1d84926943b323ce94bcd3ae8cfb5864de63b983f52291526df06d488a8087d3f6a85121fb879f60d80ba57dca18ddceb00f2624a82ba531cead2d4ec63cbb99cd2f434970a82e23323067f094823ef7c2be420041b596d637b9e6ec69ca7f36392d989cee59f13f2e8ce926dfff1525cdfda201ef44e524f46353f03be835870fc46d7fb059d65d2f68757a8a66f5eeaec82c14e1bc24b3c7a98d111288223aea605eecf801d1cd3b1b1b0f97c1ddff3fb1b65cb4ec6554851a6683daaf873ade47b87e165ad9b8ce66347dbc0e162d768a5d2bcd4159029d1c7c2da9d444b6ef1ce491ef71e370ec3779a3c606fd1e6a14082e9381f84109a308d526084dd1c7b90690ba017269ddb7fd495b81306076a91bb04cdfbe82a5c3030a488ddf15a3fdb5dea98e4e74eea979bb245335f846b689f1a907a29fd12b020cad17f33f70b2f5df9f6ce311b5b61dd38b875f5ce10dbc479c4ea136bdfcee962391827caa2d72d37fa3661312a5b979b8fbf0115e21d2a60af8e1d260ed6695cc237b908b99177f2cbf19e320d932fa3fa57309adcebbcc7a1ab434ba3b6d465b59c3ea01239fd28f47d0a390f8214ee702ec2d7d9cdb34b88ac37fa5d24807aab85565c533001f070aab469287c4caaef087d8a0f03b4fca9cbb33bf4d2f33b07003c56769b96e2a54b6aea197745c75fb46c9a8a8ba727e52ecf8ce3253a91c491ec92b91befad39f97eb28261a52bf90f55fb899f4f9410d45cb947f5e2f356279126b2d7ab26f5760e225012f4cca823d603a5e823d214143bad6f057b26a42ea444fcce47e989a4d2f1efffd9f405edb06b282733b3b17c9ba9e1e77ca1c5ae17cd183670ffac00d45e3919b7b917bf660d063a177f600f5c4038fee33fa30dff6b9bf53ce2daa69b9de165b20be99e23bafa1cdcf9ad1f0e8905e27f936eb3f3028e1183c74a84de675222c01d88a4186985323e198261e185d87d48b1954f9154b0639b99ea9b9f20c9f0917f6cfee23536734ef63fc2fafb9f687f0a2d48787ad0e6ffba990f9ea9c34b7b99abb6cb28d838eab1a5f088e482eb886d4a8363139f785a27440102803e931eb7afa385e7ad1fe63e738e42d059eb9f4f236dbd3a761180b541ac61431d8fd0a3d5b8fffacb8493803b869fe0e912ed9110f392c7d1ee071bf04b22fe250942db95751446857eb77f090db46d227d513978e3092bfc9233d4cad71a7628b67d35b4ccb6815ed33a3efb942b308f69bd40960819a5e86325b064485e47d8d4b1297203916bd33a10cd5c03a36e0a613bad4d012f838a1c952fea5715d2c8df3b69eae31a3708638204de538a48b25ef0bd353b85f936af6eba41b269394fe3930be06f18d77196657471dbc34a2708c2adf6324c53b726069cc7ad651ae7def4078ecf0b7a615de254668daea165dd5a416098b03035e956de61d561de2faf2a976697d9e59b0c5a3ce153c4e2d47cfc5fa4be0eca3d0500d818af0f57e828f86b4ca6958f57a1f8cc3d2b0e2a81f5e7551610ca2885110f7695626739cba670b9582ed94c457d8d1c537916ed49c0d806245f9b066d8207ce61742bf17988c037cfc7a84b49cedf93ca4b2643a82791626b0baad35d46f2685909f930b50ab67b42833666636d0bbe8e0b3639c4a0f5cd4d53fa565717488d391a2399712ff593ad27f535713a88be561d0bc74e63881d516784dfe61f319a3a4f53364986bd2ad6edf49cb89cbc74f55832ca49ac24cb09c4afbce47101006aaebd9df1c2a5a412a83d36f2dae000b8a3a7133af568f9e90e63792d55607165e955f9254344ac6420b539d44e53dc11a0efe34010350214af496f352d600aa07cecae7e739cc550363e7bc91f3b374b67a54f19e32398d3ccb1c3d7cf1bc9b33de6a7391f9eaaa191aa75de5039e7ae80140c2a538af3a4e19c23cfa9912d95ada15bee4b40179a43174aaaf26ab5ed48b29e7fbb581a226e17ccb9060856a54a0068ef096aaff13cae7f8c5c40beeded8935b654eaa08e2f144659f534ddac96262785e79e1ad78f2e90cb6c5dcd0bf19a2da7269d1710fe606e197b6584518af2d69e69dab1d3ce9d38ab9ca1906e758d4eca74b74c94942d8ba5d142a5d71a089712a7f3fc9fbbec22c076ddd53a7a7c1aa19570f3a5422cc753880aca62ce756ff2755f52dd03466cddb0593fc4ef32075716017ae8e91aece94308958e7bd93fc7d31b16722d86bb059aa2d2e664c713b7412093f89d89f5a1d0bc02e5b1818d2d0deab267de461320ba24825661de4c859460ff4251c2e05f352f9bbd0f5e44bb54eaf18b7ec6372f29e57280599075d7ebabe5d5a90e5450aacb8264fd9f9bc67827a5c0b7fd6e6db1d34682b375815dd75f81c0bc6433909bd3d620542755db260e42cf687c5ac4e7118756c3836fe75deec27a72959c12d33abe4137e213b6685d6cdfb94aaa3df80e30cf77ce9afd30cb46bc7da2fb7f9e05fb9968a6425881f0facfcafa90f8b090d0b00e53cd370875415099114539080317f05e14ee4a97291d1a9b789d02db4660e86495c4d37a92b0ba61e32c8c0f4b948e17267b8e1440d767dd86d389a5b7feedc14522ebec9e25da22ea6b2d079b0c81a401b8d65ce5323b35d47cd082d175a58cc4bb839507d4c1cb587468812b8a6cab5a0490c940c51ff88a972eb311403bacf39f55f057ffa0d4edfc65903486ef6c080fe873b0fb1b1424d7748be117e90a4cb87eea10fa71717bd53e897ac2b38684685baea0fc8200136a324384c9838156356051a9661ab3246b8c4c035615a635f71e72bb2774890591bc3f8f7c882807f3d662cf0e8280daf68604b0464eb47bd0e0bea468dfbc836bfc2e58bf5cf2e9239e5c9743227f2ae41154852d8e3c66d735d8b5d6224cd07f2addb197d60f088b8cbc14e7af391c7b0a9118686098eada3a342dae2b657f58998fc92e9fba0a1c66f0f04560d46c94682ba4cb4b8f18f65858cadfe93ee1c844aae16eddd586fdbea34e46508b7568fd2704da4c2a431afcb631e3e8e4d707373625c2c0f07a9eb3b21b914429af3ae473da3748a0bb14ebbb727107c92c2790f39707621aeab780bf500807a899a509c5a7318ec7c86b9879c6689c78d9b8859b8f630bd1e763b4e04201fbc552d54a9278b4644191b5791ca69358a531eba3bc75e9c99500c66df55d660d4a3213e60dea5affed26a68f9ddaf6b34338d865f4b6848dd067f0523d9504eaa079e89f8cca2b957d4611797a83a586f1e7a63fd53c97b5e500e9461c36a4989dbe661b3db0ec551747eb9e422472548ef3672548892798300fb9753865f8f4e8e32153182dce293922b05ebe72e13f309e662461dc359bfb9d6cc39060402039d7f30e7eb3e521ce339beb093b77646b27ed0500034b3b358ed9ded031c393a246bb34c34570564f07a01941c65b69ab06350d6d19923535610137d7a71197e2eb1793bdfb3213e3bfec70541b363b42de6d21da4778a633538d271b0fce3d5e43332ced1dbbed777d426845aa83c71bbddd", 0xa42}], 0x2)
shmdt(r4) (async)
shmdt(r4)
openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
fcntl$lock(r6, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd})
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
fcntl$lock(r7, 0x9, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000300000004})
openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0xe8, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r8, 0x9, &(0x7f00000003c0)={0x0, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) (async)
fcntl$lock(r8, 0x9, &(0x7f00000003c0)={0x0, 0x0, 0x7fffffffffffffff, 0x1ffffffff})

610.106347ms ago: executing program 7 (id=540):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000180)={0x9, 0x400})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x10)
ioctl$TIOCSDTR(r1, 0x20007479)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x2196, &(0x7f0000000080)=[{0xb3, 0x0, 0xff, 0xfffffffe}, {0x2, 0xfc, 0xfe}, {0xa6, 0x8, 0x0, 0xfffffffd}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8000, 0x1) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8000, 0x1)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x84, 0x2b, 0x1, 0x41b}, {0x2779, 0x3, 0x22, 0x1}, {0x406, 0x46, 0x80, 0x20000000}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x11, 0x3, 0x0) (async)
socket(0x11, 0x3, 0x0)
r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
getpid() (async)
getpid()
setrlimit(0x1, &(0x7f0000000980)={0xff, 0xd21})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$WSKBDIO_GETBACKLIGHT(r3, 0x400c5711, 0x0) (async)
ioctl$WSKBDIO_GETBACKLIGHT(r3, 0x400c5711, 0x0)
ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, &(0x7f00000000c0)=0x4)
poll(&(0x7f0000000100)=[{r4, 0x80}, {r1, 0x20}, {r1, 0x10}], 0x3, 0x6)
syz_emit_ethernet(0x17a, &(0x7f00000004c0)=ANY=[])

609.496043ms ago: executing program 7 (id=541):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xd4e688a67930cd)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket(0x2, 0x3, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x112, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x810, r3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt(r2, 0xffff, 0x2, &(0x7f0000000140)=""/206, &(0x7f0000000040)=0xce)
ioctl$BIOCLOCK(r1, 0x20004276)
setreuid(0x0, 0xee01)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x80, 0x9, 0x1, 0x720}, {0x0, 0x0, 0xbb, 0x9}, {0x3a, 0x56, 0x3, 0x42fe}]})
ioctl$BIOCGRTIMEOUT(r1, 0x20007461, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f0000000140)="b85dfe3a229c1a61bb4ec09d42431254fc52c25d13afe24eec4d54c887933189ba476f01708eed4afccbc408f3b61f2d7d8ce993a162ccfe88bcfad79e4d3fccc696ff0fff1ad861a898629c1335d3f9670f48803ce3607db932862fe67792fc6d04207d2f5d8c29ccb8bc1e", 0x6c}, {&(0x7f00000001c0)="9f2ccabf2e24ef8e0dd7c332447ce94517fafbe5c55389585682b233d1ec266ed7af5d4602703dee3fd49f593c0af1bcfcd569882f3ee5f82e85fb2d59f6e7530d7d17c455cb419243144f6f18290f20b6bd72ebe968b02cdc80e045de9bd5de0ed564c0c734358e2d6187de7c97863656332a8a37ffdbca4f0c890e4aceb9ba7e789bdd05ebfe92b098448e19c32d3af64b0869edf9f16c81bd0516b46126b5540175636cf32594562522009f04c16d34cdaa62d4a0ac875cc45d7e1d4d0dd5cac44c884bc8a9aae1464e23bdd30275803aabb32c9fae256c916e4b7683d1849c37e98103024961712a8c093f16ec580aaafdde4c298194", 0xf8}, {&(0x7f00000002c0)="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"/4096, 0x1000}, {&(0x7f00000012c0)="0f6dce8244e7f300bf6aabf8ec38732a0384dcc88316309aee10faf7ef8ba65dacbdb507a55e11b097a16af18930b520f5c9a7580408e180aaf296ae8f4810de5144a038bd87f7b52bbe14794591db1bdd4c5fda49cfc5575092f088648c49688e4141c7b59a3abe42cc2322049e7aa4efc7525800c49717270b507f474514d4c9f9179bed50b754bee4497159f548619349209fecb87e82f6685dd3c08c38451531d6d5b2eca7779286f5a5b0d34fe8afd3ecbf0723047bc68f0ab1595327189e50473e3cc2e5d220e726d741e8b9b7eab4aec4688e5f3132544d24ea56e27e59", 0xe1}, {&(0x7f00000013c0)="095dec9a031b15268fd156a7e8f6fbdf93d8bc16b3c71b8c65e0263a9a277fa92baf7db167c71435329f0c0d3043e11c692d7ff50c1af4ea9d69a3989a81537676d13ca03098a531803cd889df98a5749f4c654187a37288256ff0c345e0a5e738942c9823979cdb4b7fdce34317f9df8d8222f86bd15759bcd2de0b35874c77c5cd4fd13349d85ea80caa9eb670fb5310b33273f4c2d527bb30664a17a2a0bb8a08a0e708353dc73eac75c272e667b250261f2c9651b8bb2ee674", 0xbb}, {&(0x7f0000001480)="5da2bc1a8a9b889e6d85ca360e93e7565c385b0158d6eb8ee436dcd79f8703761f511b4af965d5a35f828e4269b0002316e4ae7d609fcedeea87f829865c24514dffd20e993582df61dd2d77f2c08ad4c51c0715e7bc5476133a198fa6e3f840890ad3cce3bc9aecca55fb03de493059c996a7d91dae289d4ee22896c7fd2346b3b123af8b", 0x85}, {&(0x7f0000001540)="d09652405d63bc64cc2200f0c566d050c253c9cf2fc9ae0a14e93c74ee409443523c5e18adabe1d8cb2305856c92eac941b314a561eb5111993dc78083e16217c9449230fde28f1150cf8df6683ee22d40c8ea4f6a565c6b78a1b22164ca155eb45e5770515b13bffaa5c36b884ad99fe3cc0f4f8ac606121f243948dc4bebaacafe4c0a0251b6d160a7728172da2d7826d112139e9cd5281e12d295c09ba30eb0e8d5577b8f4f55cf", 0xa9}, {&(0x7f0000001600)="6121712522a6c7a21633aa17bf043565d21e83184f437d418a1aa645f13ab851918f9ee0b3216965bd08f261aa7709af8d7a43491cc40d687755b6e400902dd848a94ca49e24a8231c7c99779805598dab3d964f758fcae14db2b1d20b1b3f82e0be9b51cebbec34bfb6aba71fd67fec8bc882e5765124207618bfa9eaa7c2f88aa208b0cfb71d855348d26182f6d28237d45afffe735221b2912e332e026b46768ffc560166ad35c89764e388c6a1ca9699d7", 0xb3}, {&(0x7f00000016c0)="05c2d849ef01df17ed1862eb6d87e7d9cd4834963cb9a73239ef04ace2767b2f4ceb33cede00f2aca75b40481c420487d02b1538d903482675c153a52406d7cfdebcb2550dd07c2ec50509b45e79366c193ba19331f0105a27b79a6a57aeec61533d65881a12c9102a5492686f3cd37e2af1abfca003e8ad5542ec192d0b667d5777f9a45e4e9a0579628578082780f99cadf07bccd6361cda273e1d4dab272c6612d41ca0b05c4683ba2c7a1b81d76eb8513e7103ffd2dd2ad9b8639dfc2ffb32", 0xc1}], 0x9, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2)
open(0x0, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0))
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
r5 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r5, 0xc0206921, &(0x7f00000001c0))
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0)
kqueue()
r6 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r6, 0x80206919, &(0x7f00000001c0))
r7 = socket(0x2, 0x0, 0x0)
ioctl$FIONREAD(r7, 0x8020690c, &(0x7f00000001c0))

298.496709ms ago: executing program 2 (id=542):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r1 = getpid()
ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r1)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
ftruncate(r0, 0x48001000007)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYRES32])

294.344195ms ago: executing program 2 (id=543):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4)
sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = semget(0x2, 0x4, 0x200)
semop(r1, &(0x7f0000000100)=[{0x0, 0x7ffb, 0x1800}, {0x1, 0xa, 0x1000}, {0x2, 0xff81, 0x800}, {0x3, 0x9, 0x1000}], 0x4)
r2 = socket$inet(0x18, 0x3, 0x102)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000), 0x10)
shutdown(r2, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8)
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x3}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x67, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x4756}, 0xc)
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=0x0])

294.038309ms ago: executing program 4 (id=544):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000600)=""/209, 0xd1}], 0x1, 0x0}}, 0x10, 0x1062, 0x0)
recvmmsg(r0, &(0x7f0000000540)={0x0, 0xe03f}, 0x10, 0x80, 0x0)

292.885792ms ago: executing program 4 (id=545):
mkdir(0x0, 0x1a4) (async)
mkdir(0x0, 0x1a4)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) (async)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000400), 0x10012, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0) (async)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x462, 0x0)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f00000003c0)=[{0x3, 0x1, 0x5, 0x4}, {0x5, 0x6, 0xff}, {0x16, 0xcb, 0xa, 0x3}]})
write(r1, &(0x7f0000000140)="92f966adfd750500000063000035", 0xe) (async)
write(r1, &(0x7f0000000140)="92f966adfd750500000063000035", 0xe)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
fcntl$getown(r2, 0x5)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil, 0x4}, {&(0x7f00002a3000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil, 0xe2}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000044000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000048b000/0x1000)=nil, &(0x7f00005e9000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00002b7000/0x2000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ff}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil}], './file0\x00', 0xfffffffc}) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil, 0x4}, {&(0x7f00002a3000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil, 0xe2}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000044000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000048b000/0x1000)=nil, &(0x7f00005e9000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00002b7000/0x2000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ff}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil}], './file0\x00', 0xfffffffc})
recvfrom$inet(r2, &(0x7f0000000480)=""/35, 0x23, 0x1041, &(0x7f00000004c0)={0x2, 0x3}, 0xc)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x112, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000002880)={&(0x7f00000014c0)=@in, 0xc, 0x0, 0x0, 0x0}, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x2, 0x0) (async)
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x2, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x200, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x200, 0x0})
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r5, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})

292.399024ms ago: executing program 4 (id=546):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x202)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
acct(&(0x7f0000000180)='./file0\x00')

215.013233ms ago: executing program 4 (id=547):
semget(0x2, 0x3, 0x350) (async)
r0 = semget(0x2, 0x3, 0x350)
semop(r0, &(0x7f0000000000)=[{0x2, 0x8, 0x1800}, {0x3, 0xbb, 0x1400}, {0x0, 0x0, 0x1000}], 0x3)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
fchown(r1, 0x0, 0x0) (async)
fchown(r1, 0x0, 0x0)
r2 = getuid()
chown(&(0x7f0000000180)='./file0\x00', r2, 0xffffffffffffffff) (async)
chown(&(0x7f0000000180)='./file0\x00', r2, 0xffffffffffffffff)
getgid() (async)
r3 = getgid()
getuid() (async)
r4 = getuid()
r5 = getegid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0xe, r2, r3, r4, r5, 0x82, 0x3}, 0x4, 0x56eb35f, 0x9})
socket(0x2, 0x4001, 0x0) (async)
socket(0x2, 0x4001, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/225, 0x11e}, 0x0)
sendmsg(r6, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
socket(0x2, 0x2, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
select(0x40, &(0x7f0000000040)={0x40009, 0x5, 0x40000004008, 0x72, 0x80000000, 0x1000000000090, 0x4c, 0x6}, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r8, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000100))
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(0xffffffffffffffff)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

214.709517ms ago: executing program 1 (id=548):
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f0000000380)="ccfaef707903a0acc7bf7f3d2ebd005d930c9bbf40d60fefd1549ecc275e43c09bc88e6daf83cf1daeb08fd1b635ed08694cc7db4d2bba5584e737c7bc8b071563b7fe062b6da1b4c0130f1758165bc734e19b6a7ba69810957e268d14ea0bf971c5710486bf391f104f20791300bee042b39244cf", &(0x7f0000000080)=0x75, &(0x7f0000000400)="36b179c0b963b75db649a960d84a26200a42d898023b6ddc1f06a3d6ce50b28510a616a58bf0daa8d245594451093ed82059155be53fc7a8c5ac47d5664312907a8176dc8e0bb4e0938579ebd3259794ebb71126bf082bcd338cea42a48f88918afb034c27a07a62a4113705d9632ac32a5a4e5ca19142b2ab49a94e2201cbb887efe18cdf88c4d0382e50996e85107a6689952c312b9f111b1bb3c8f02411be1ec844864fd71c48ccdb0466e4fa3a86e1f6e81c15f26b", 0xb7)

214.386333ms ago: executing program 1 (id=549):
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
munlockall()
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000040)={""/16, @ifru_vnetid})
munlockall()
munlockall()
munlockall()
munlockall()
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x40047477, &(0x7f0000000080))

213.654852ms ago: executing program 1 (id=550):
r0 = socket(0x18, 0x3, 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005016000009f05000e00070000000018", 0x12, 0x0, 0x0, 0x0) (async)
r1 = open(&(0x7f0000000840)='./file0\x00', 0x200, 0x0)
fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffdfffffd, 0x1000300010008}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) (async)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)="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", 0x200}], 0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="96e9cf1c159f0b69904fabf735bd3794417a80412b815cdc65f445e29804d781b220a2be412d6ac25a2cca798522d34ee720ffa50f1f024908974bf955b4455f712ddffd6880726d4317fbca6655db1c287fddc06d992369bf39ae94593658284b1a54703db5462397460985e36183d1a6200ef1fd8734ac83", 0x79}], 0x1) (async)
execve(0x0, 0x0, 0x0)

0s ago: executing program 1 (id=551):
kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=[{{}, 0xfffffffffffffff9, 0x41, 0x3}], 0x0, 0x0)
setreuid(0x0, 0x0)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0, <r0=>0x0}, 0xc)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r1, 0x9, &(0x7f00000003c0)={0x0, 0x0, 0x7fffffffffffffff, 0x1ffffffff})
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
dup2(r3, r2)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0)
r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000340)=[{0x2, 0x0, 0x2, 0x7}, {0x61, 0x0, 0xfa, 0x1}, {0x6, 0xf9, 0xb4, 0x1}]})
write(r6, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
r7 = socket(0x18, 0x1, 0x0)
close(r7)
sendmsg$unix(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$unix(r7, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
r8 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0)
r9 = getpid()
ktrace(0x0, 0x1, 0x80000900, r9)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000580)={0x0, <r10=>0x0}, &(0x7f00000005c0)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r11=>0xffffffffffffffff})
getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r12}})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000000440)=[{&(0x7f0000000100)="2e356c11fc", 0x5}, {&(0x7f0000000140)="eadf36ef606d07d70ff962cb1dd1e315336f1ae6031a2497d87ee2d56b6edc2ef3e092dea3f68e2a1947c56eab31ff050f5d9de7282c58512c6805eb1847c688a0607bfbe3bcbbd3658e8cc0b0dfac56c855f6df7f0820d0b59cd009d1fe78ac87e5ccef21203aabaa33730389afdb38590ca0c177ef840e1f9044b9d1c2b44dfc315b026915ccd7b6a35f08482fdf09c60862833e1dca0a0c6950c06982e976fe1fde45d496f4506198cf13a079836c535acbde16fea41dcf1c4e84b10a2654d2721e153048a3652d59c1e3e94a91aa95d17441ef2d9ef5fa21a78d2305a4601b53aeee9eb033581b421fb45368ab", 0xef}, {&(0x7f0000000240)="3f5746aba98fb2e9d5605a8f2d6d997f97ce473771b94b1d419a8240acfced1087a1bc4c90e558170a1b02380c0f70bdf949b841c351b9479009ba35ef6bd141db039bf7fba55ca51b3cc0fb5ec98449a42cc3f27b7f7d3d7e83a52230948623a73696fbb76482af117fbe3b4e20a99282c2895b4fe5c9e11302c8aac2ff172ea0446b9665b57a2750de5485701d31", 0x8f}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, &(0x7f0000000600)=[@cred={0x20, 0xffff, 0x0, 0x0, 0x0, r0}, @rights={0x38, 0xffff, 0x1, [r1, r3, 0xffffffffffffffff, r4, r5, r6, 0xffffffffffffff9c, r7, r8, 0xffffffffffffffff]}, @cred={0x20, 0xffff, 0x0, r9, r10, r12}], 0x78, 0x404}, 0xa)
r13 = kqueue()
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0xff}], 0x0, 0x0, 0x0, 0x0)
kevent(r13, &(0x7f0000000000), 0x3ff, 0x0, 0x200000, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6099572e0008f000fe03ce20decc5471131671b37a4b7784fe"])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts.
pckbd_enable: command error
denied attempt to set clock forward to 13622315181289262

OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-b.c.syzkaller.internal) (tty00)

login: 0#+"$%.!",%: #/--!.$ %22/2
pckbd_enable: command error
pckbd_enable: command error
nd6_resolve: something odd happens
Ì`Ópanic: pool_do_get: shmpl free list modified: page 0xfffffd806a58e000; item addr 0xfffffd806a58e468; offset 0x2c=0xdead410f
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*422421  16658      0           0  0x4000000    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff83062e9d) at panic+0x1e5
pool_do_get(ffffffff835e3f60,1,ffff800037204538) at pool_do_get+0x5e6
pool_get(ffffffff835e3f60,1) at pool_get+0x141
shmget_allocate_segment(ffff8000371c1478,ffff800037204790,0,ffff8000372046e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000371c1478,ffff800037204790,ffff8000372046e0) at sys_shmget+0x1b2
syscall(ffff800037204790) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb9d5139f170, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: pool_do_get: shmpl free list modified: page 0xfffffd806a58e000; item addr 0xfffffd806a58e468; offset 0x2c=0xdead410f
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83062e9d) at panic+0x1e5
pool_do_get(ffffffff835e3f60,1,ffff800037204538) at pool_do_get+0x5e6
pool_get(ffffffff835e3f60,1) at pool_get+0x141
shmget_allocate_segment(ffff8000371c1478,ffff800037204790,0,ffff8000372046e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000371c1478,ffff800037204790,ffff8000372046e0) at sys_shmget+0x1b2
syscall(ffff800037204790) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb9d5139f170, count: -8
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800037204380
rbx               0xffff800029b7cdbf
rdx               0xffff80000129e6c0
rcx               0xffff8000371c1478
rax               0xffff800029b7bff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xb2b636f6bdc22de7
r11               0xf1e32e3520350f46
r12               0xffff800029b7cbc0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff82b3e5e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800037204370
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=422421 pid=16658 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000371c1700,0xffffffff83606f20
    process=0xffff8000fffecda0 user=0xffff8000371ff000, vmspace=0xfffffd806ce48540
    estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 16658  116209  71191      0  3        0x80  fsleep        syz-executor
*16658  422421  71191      0  7   0x4000000                syz-executor
 42787  455476   9749      0  3        0x80  fsleep        syz-executor
 42787  168448   9749      0  3   0x4000080  lockf         syz-executor
 26619   40867  40013      0  3        0x80  fsleep        syz-executor
 26619  387270  40013      0  3   0x4000080  sbwait        syz-executor
 26619  263457  40013      0  3   0x4000080  fsleep        syz-executor
 63583  224359  44010      0  3        0x80  fsleep        syz-executor
 63583  489039  44010      0  3   0x4000080  netcon        syz-executor
 46337   75813  50327      0  3        0x80  fsleep        syz-executor
 46337  122414  50327      0  3   0x4000080  pipewr        syz-executor
 94537  516822  78354      0  3        0x80  fsleep        syz-executor
 94537  266831  78354      0  3   0x4000080  lockf         syz-executor
 94537  420359  78354      0  3   0x4000080  fsleep        syz-executor
  9343  470635  58186      0  3        0x80  fsleep        syz-executor
  9343  389016  58186      0  3   0x4000080  ttyout        syz-executor
 33932  357382      0      0  3     0x14280  nfsidl        nfsio
 38283  448609      0      0  3     0x14280  nfsidl        nfsio
 20233  338954      0      0  3     0x14280  nfsidl        nfsio
 35153  115914      0      0  3     0x14280  nfsidl        nfsio
 58066  345172      0      0  3     0x14280  nfsidl        nfsio
 71751  254727      0      0  3     0x14280  nfsidl        nfsio
 28029  170601      0      0  3     0x14280  nfsidl        nfsio
 39469  163428      0      0  3     0x14280  nfsidl        nfsio
 92672    3620      0      0  3     0x14280  nfsidl        nfsio
  4348  433441      0      0  3     0x14280  nfsidl        nfsio
 81945  374024      0      0  3     0x14280  nfsidl        nfsio
 34720  139309      0      0  3     0x14280  nfsidl        nfsio
 73723  274311      0      0  3     0x14280  nfsidl        nfsio
 72964  331001      0      0  3     0x14280  nfsidl        nfsio
 84307   26323      0      0  3     0x14280  nfsidl        nfsio
 74086  194687      0      0  3     0x14280  nfsidl        nfsio
 31672   17641      0      0  3     0x14280  nfsidl        nfsio
 75345  333224      0      0  3     0x14280  nfsidl        nfsio
 28889  447663      0      0  3     0x14280  nfsidl        nfsio
 31127  244724      0      0  3     0x14280  nfsidl        nfsio
 43206   30850      1      0  3        0x80  nanoslp       init
 81363  202525      0      0  3     0x14200  bored         sosplice
 49838  479022  52451      0  3    0x100082  sbwait        ndp
 52451  274747   7713      0  3    0x10008a  sigsusp       sh
 50327   59135  89856      0  3        0x82  nanoslp       syz-executor
 58186   18705  89856      0  3        0x82  nanoslp       syz-executor
 71191  246943  89856      0  3        0x82  nanoslp       syz-executor
 40013   73437  89856      0  3        0x82  nanoslp       syz-executor
 78354   75367  89856      0  3        0x82  nanoslp       syz-executor
 44010  140383  89856      0  3        0x82  nanoslp       syz-executor
  9749   59525  89856      0  3        0x82  nanoslp       syz-executor
  7713     206  89856      0  3        0x82  wait          syz-executor
 89856  335660  12869      0  3        0x82  kqread        syz-executor
 12869  110743  49339      0  3    0x10008a  sigsusp       ksh
 49339  213970  16512      0  3        0x98  kqread        sshd-session
 16512  159482  57902      0  3        0x92  kqread        sshd-session
 57902  332798      1      0  3        0x88  kqread        sshd
 70684   49344  40598     74  3   0x1100092  bpf           pflogd
 40598  132583      1      0  3        0x80  sbwait        pflogd
 64570  431883  11284     73  3   0x1100090  kqread        syslogd
 11284  162604      1      0  3    0x100082  sbwait        syslogd
 70695  451881      1      0  3    0x100080  kqread        resolvd
 62317  190799   1446     77  3    0x100092  kqread        dhcpleased
 21941  520839   1446     77  3    0x100092  kqread        dhcpleased
  1446  127891      1      0  3        0x80  kqread        dhcpleased
 44592  512282      0      0  3     0x14200  bored         smr
 14769   74494      0      0  3     0x14200  pgzero        zerothread
 57201  282939      0      0  3     0x14200  aiodoned      aiodoned
 52221  202869      0      0  3     0x14200  syncer        update
 85545  341342      0      0  3     0x14200  cleaner       cleaner
 45736  291529      0      0  3     0x14200  reaper        reaper
 85908  191748      0      0  3     0x14200  pgdaemon      pagedaemon
 13076   92374      0      0  3     0x14200  bored         viomb
 90799  480520      0      0  3  0x40014200  acpi0         acpi0
  9967  195202      0      0  3  0x40014200                idle1
 19270  488251      0      0  3     0x14200  bored         softnet3
 41749  200785      0      0  3     0x14200  bored         softnet2
 67676   37305      0      0  3     0x14200  bored         softnet1
 88606  415270      0      0  3     0x14200  bored         softnet0
 13319  436692      0      0  3     0x14200  bored         systqmp
 82472  387544      0      0  3     0x14200  bored         systq
 59489  392073      0      0  3     0x14200  tmoslp        softclockmp
 32513  326899      0      0  3  0x40014200  tmoslp        softclock
 31097  289308      0      0  7  0x40014200                idle0
     1  301183      0      0  3     0x80082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex shmpl r = 0 (0xffffffff835e3f70)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60
#3  pool_get+0x103
#4  shmget_allocate_segment+0x1a7
#5  sys_shmget+0x1b2
#6  syscall+0xaf8
#7  Xsyscall+0x128
Process 16658 (syz-executor) thread 0xffff8000371c1478 (422421)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83526780)
#0  witness_lock+0x5bb
#1  syscall+0xad6
#2  Xsyscall+0x128
exclusive mutex shmpl r = 0 (0xffffffff835e3f70)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60
#3  pool_get+0x103
#4  shmget_allocate_segment+0x1a7
#5  sys_shmget+0x1b2
#6  syscall+0xaf8
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10228  11131K   11457K 166960K     12246        0
            pcb    18     12K      12K 166960K       100        0
         rtable   201      7K       8K 166960K       387        0
             pf    39     18K      22K 166960K       116        0
         ifaddr    40      6K       7K 166960K        63        0
        ifgroup    59      2K       2K 166960K       106        0
         sysctl     3      0K       0K 166960K         3        0
       counters    66     36K      37K 166960K        90        0
       ioctlops     0      0K       4K 166960K      1682        0
            iov     0      0K      28K 166960K        37        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1491     94K      94K 166960K      1985        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       9K 166960K        14        0
         VM map     2      1K       1K 166960K         2        0
            sem    19      3K       3K 166960K        26        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    19     69K      93K 166960K       681        0
          sigio     0      0K       0K 166960K        44        0
           proc    63     79K     140K 166960K       589        0
        subproc   104      6K       6K 166960K       105        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       196        0
       in_multi    83      6K       7K 166960K       123        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     1      0K       0K 166960K         2        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   265   1182K    1182K 166960K       265        0
           exec     0      0K       1K 166960K       439        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   241     73K      87K 166960K      8013        0
       UVM aobj    51      4K       4K 166960K        56        0
     pinsyscall    44     88K     104K 166960K      1775        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        73        0
            NDP    13      0K       1K 166960K        43        0
           temp    52   6818K    6888K 166960K     54233        0
         kqueue    13     20K      30K 166960K       113        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       58    0       54     1     0     1     1     0     8    0
rtentry    112      115    0       25     4     0     4     4     0     8    0
unpcb      144      398    0      378     4     0     4     4     0     8    3
syncache   336        7    0        7     2     1     1     1     0     8    1
tcpqe       32        2    0        2     1     1     0     1     0     8    0
tcpcb      808      249    0      240     8     6     2     8     0     8    0
arp        120       18    0        4     1     0     1     1     0     8    0
inpcb      336      751    0      737    14     7     7    10     0     8    4
nd6        136       25    0        6     1     0     1     1     0     8    0
pkpcb       40        2    0        2     2     2     0     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1168       6    0        6     1     0     1     1     0     8    1
pfstscr     40        2    0        2     1     1     0     1     0     8    0
pffrag     232        4    0        1     1     0     1     1     0   482    0
pffrnode    88        4    0        1     1     0     1     1     0     8    0
pffrent     40        6    0        3     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       4    0        0     1     0     1     1     0     8    0
pftag       88        2    0        0     1     0     1     1     0     8    0
pfstitem    24       58    0       20     1     0     1     1     0     8    0
pfstkey    128       62    0       24     2     0     2     2     0     8    0
pfstate    376       61    0       23     5     0     5     5     0     8    0
pfrule     1344      29    0       19     2     0     2     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      455    0       72    29     0    29    29     0     8    1
art_table   32      457    0       72     4     0     4     4     0     8    0
art_node    16      113    0       32     1     0     1     1     0     8    0
sysvmsgpl   40        7    0        5     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       22    0        5     1     0     1     1     0     8    0
shmpl      112       53    0        5     2     0     2     2     0     8    0
pool(0xffffffff835e3f60:shmpl): page inconsistency: page 0xfffffd806a58e000; 21 on list, 13 missing, 35 items per page
dirhash    1024      22    0        5     3     0     3     3     0     8    0
dino2pl    256     2544    0     1047    95     0    95    95     0     8    0
ffsino     272     2544    0     1047   101     0   101   101     0     8    0
nchpl      144     3560    0     1875    63     0    63    63     0     8    0
uvmvnodes   80     3098    0        0    64     0    64    64     0     8    0
vnodes     216     3098    0        0   173     0   173   173     0     8    0
namei      1024   12183    0    12183     2     1     1     2     0     8    1
percpumem   16       59    0       12     1     0     1     1     0     8    0
kstatmem   264       50    0       24     3     0     3     3     0     8    1
scxspl     216    12596    0    12596    12     6     6     8     1     8    6
plimitpl   152      187    0      171     1     0     1     1     0     8    0
sigapl     424     1009    0      937     9     0     9     9     0     8    0
futexpl     64    10658    0    10649     1     0     1     1     0     8    0
knotepl    120      577    0        0    18     0    18    18     0     8    0
kqueuepl   216      270    0      259     5     2     3     5     0     8    2
pipepl     320      150    0      122     3     0     3     3     0     8    0
fdescpl    496      967    0      934     5     0     5     5     0     8    0
filepl     152     5882    0     5619    20     7    13    20     0     8    2
lockfpl    104      493    0      487     2     1     1     2     0     8    0
lockfspl    48      134    0      131     1     0     1     1     0     8    0
sessionpl  144       27    0       19     1     0     1     1     0     8    0
pgrppl      48       73    0       57     1     0     1     1     0     8    0
ucredpl    104      907    0      893     1     0     1     1     0     8    0
zombiepl   144      937    0      937     1     0     1     1     0     8    1
processpl  1160    1009    0      937     7     1     6     6     0     8    0
procpl     648     1915    0     1834     8     0     8     8     0     8    0
sosppl     168        5    0        5     2     1     1     1     0     8    1
sockpl     664     1217    0     1179    17     8     9    12     0     8    5
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     153    0        0    20     0    20    20     0     8    0
mcl2k      2048      35    0        0     5     0     5     5     0     8    0
mtagpl      96       20    0        0     1     0     1     1     0     8    0
mbufpl     256      219    0        0    14     0    14    14     0     8    0
bufpl      280     5635    0       98   396     0   396   396     0     8    0
anonpl      24   166618    0   158018    81     4    77    77     0   185    0
amapchunkpl 152   25512    0    24933    32     7    25    28     0   158    2
amappl16   200     3621    0     3366    42    15    27    27     0     8    1
amappl15   192       66    0       66     1     1     0     1     0     8    0
amappl14   184      119    0      106     1     0     1     1     0     8    0
amappl13   176        7    0        7     1     1     0     1     0     8    0
amappl12   168     1605    0     1572     4     2     2     3     0     8    0
amappl11   160       49    0       35     1     0     1     1     0     8    0
amappl10   152        6    0        6     1     1     0     1     0     8    0
amappl9    144      159    0      159     1     1     0     1     0     8    0
amappl8    136       18    0       15     1     0     1     1     0     8    0
amappl7    128      129    0      116     1     0     1     1     0     8    0
amappl6    120      168    0      166     1     0     1     1     0     8    0
amappl5    112      137    0      124     1     0     1     1     0     8    0
amappl4    104      317    0      298     1     0     1     1     0     8    0
amappl3     96     4753    0     4658     3     0     3     3     0     8    0
amappl2     88     1257    0     1173     3     0     3     3     0     8    0
amappl1     80    10211    0     9647    14     0    14    14     0     8    0
amappl      88     7564    0     7384     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       55    0        5     1     0     1     1     0     8    0
uaddrrnd    24      967    0      934     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      967    0      934     1     0     1     1     0     8    0
vmmpekpl   168     9255    0     9217     4     1     3     3     0     8    1
vmmpepl    168    65781    0    63660   105     2   103   103     0   357    0
vmsppl     440      966    0      934     6     2     4     5     0     8    0
rwobjpl     56    23603    0    19291    66     1    65    65     0     8    0
pdppl      4096    1941    0     1868   109    36    73    85     0     8    0
pvpl        32    19437    0        0   159     2   157   157     0   265    0
pmappl     248      966    0      934     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      410    0       53    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83484ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83526578) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x5b
Xsoftclock() at Xsoftclock+0x27
acpicpu_idle() at acpicpu_idle+0x41e
sched_idle(ffffffff83484ff0) at sched_idle+0x558
end trace frame: 0x0, count: 7
ddb{0}> trace
x86_ipi_db(ffffffff83484ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83526578) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x5b
Xsoftclock() at Xsoftclock+0x27
acpicpu_idle() at acpicpu_idle+0x41e
sched_idle(ffffffff83484ff0) at sched_idle+0x558
end trace frame: 0x0, count: -8
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff83062e9d) at panic+0x1e5
pool_do_get(ffffffff835e3f60,1,ffff800037204538) at pool_do_get+0x5e6
pool_get(ffffffff835e3f60,1) at pool_get+0x141
shmget_allocate_segment(ffff8000371c1478,ffff800037204790,0,ffff8000372046e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000371c1478,ffff800037204790,ffff8000372046e0) at sys_shmget+0x1b2
syscall(ffff800037204790) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb9d5139f170, count: 7
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83062e9d) at panic+0x1e5
pool_do_get(ffffffff835e3f60,1,ffff800037204538) at pool_do_get+0x5e6
pool_get(ffffffff835e3f60,1) at pool_get+0x141
shmget_allocate_segment(ffff8000371c1478,ffff800037204790,0,ffff8000372046e0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000371c1478,ffff800037204790,ffff8000372046e0) at sys_shmget+0x1b2
syscall(ffff800037204790) at syscall+0xaf8
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb9d5139f170, count: -8