last executing test programs:

10.008320523s ago: executing program 6 (id=205):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf8b, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a72, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
setrlimit(0x8, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc})
ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x4000000, 0x400000, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc, 0x14})
sendmmsg(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0xa8, 0xffff, 0x6, "fad286f0333e051e705eb02c68da967cab2486606b350f4a71955c4e552b79809c4d81b2b3a4e7a9cd25c3de8ae664fc52b31a9e5aa009e7713ada419ddd2e9ae62e234d1e1f2e61b9fb4934a26710ed2a3859da1dd4422920f92e6aeecdb555a62cedb06f8b612f265ed04447ceadfe54e773c5c2486e8c5d893742f32860c53f3589371b9efbddcdf9a470894252e495"}], 0xa8}, 0x3}, 0x10, 0x40e)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x104c)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3})
r5 = socket$inet(0x2, 0x2, 0x0)
getppid()
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c00002000040090780000000000f1ff001200907800000006"])
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000180), 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kqueue()

7.074791454s ago: executing program 6 (id=205):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf8b, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a72, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
setrlimit(0x8, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc})
ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x4000000, 0x400000, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc, 0x14})
sendmmsg(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0xa8, 0xffff, 0x6, "fad286f0333e051e705eb02c68da967cab2486606b350f4a71955c4e552b79809c4d81b2b3a4e7a9cd25c3de8ae664fc52b31a9e5aa009e7713ada419ddd2e9ae62e234d1e1f2e61b9fb4934a26710ed2a3859da1dd4422920f92e6aeecdb555a62cedb06f8b612f265ed04447ceadfe54e773c5c2486e8c5d893742f32860c53f3589371b9efbddcdf9a470894252e495"}], 0xa8}, 0x3}, 0x10, 0x40e)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x104c)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3})
r5 = socket$inet(0x2, 0x2, 0x0)
getppid()
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c00002000040090780000000000f1ff001200907800000006"])
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000180), 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kqueue()

4.028517552s ago: executing program 6 (id=205):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf8b, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a72, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
setrlimit(0x8, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc})
ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x4000000, 0x400000, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc, 0x14})
sendmmsg(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0xa8, 0xffff, 0x6, "fad286f0333e051e705eb02c68da967cab2486606b350f4a71955c4e552b79809c4d81b2b3a4e7a9cd25c3de8ae664fc52b31a9e5aa009e7713ada419ddd2e9ae62e234d1e1f2e61b9fb4934a26710ed2a3859da1dd4422920f92e6aeecdb555a62cedb06f8b612f265ed04447ceadfe54e773c5c2486e8c5d893742f32860c53f3589371b9efbddcdf9a470894252e495"}], 0xa8}, 0x3}, 0x10, 0x40e)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x104c)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3})
r5 = socket$inet(0x2, 0x2, 0x0)
getppid()
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c00002000040090780000000000f1ff001200907800000006"])
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000180), 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kqueue()

3.448251268s ago: executing program 6 (id=205):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf8b, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a72, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
setrlimit(0x8, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc})
ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x4000000, 0x400000, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc, 0x14})
sendmmsg(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0xa8, 0xffff, 0x6, "fad286f0333e051e705eb02c68da967cab2486606b350f4a71955c4e552b79809c4d81b2b3a4e7a9cd25c3de8ae664fc52b31a9e5aa009e7713ada419ddd2e9ae62e234d1e1f2e61b9fb4934a26710ed2a3859da1dd4422920f92e6aeecdb555a62cedb06f8b612f265ed04447ceadfe54e773c5c2486e8c5d893742f32860c53f3589371b9efbddcdf9a470894252e495"}], 0xa8}, 0x3}, 0x10, 0x40e)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x104c)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3})
r5 = socket$inet(0x2, 0x2, 0x0)
getppid()
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c00002000040090780000000000f1ff001200907800000006"])
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000180), 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kqueue()

2.747660688s ago: executing program 1 (id=326):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
r2 = socket(0x18, 0x1, 0x0)
r3 = dup2(r1, r2)
setsockopt(r3, 0x1000000029, 0x23, 0x0, 0x0)
getsockopt(r0, 0x29, 0x32, 0x0, 0x0)
r4 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)
read(r4, &(0x7f0000000300)=""/245, 0xf5)
open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x1e2)
setuid(0xffffffffffffffff)
chflags(&(0x7f0000000000)='./file0\x00', 0x80000)
read(r4, &(0x7f0000000000)=""/119, 0x77)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1e5f)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x28)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(r5, 0xc0184406, &(0x7f0000000000)={0x0, 0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="73070000000000f70004000086dd6000000000003a01fe9be99df5b5b5ff2e1aaef48000000000000000000000000000bb"])
ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000140))

2.556174528s ago: executing program 4 (id=337):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)=0x6)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000380))
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000040)='./file0\x00', 0x8}) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x8) (async)
socket(0x2, 0x2, 0x0)
mknod(0x0, 0x1ffa, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIONREAD(0xffffffffffffffff, 0x80206910, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="005a4f47c21e6ed7e5a0f5903abf65b18d7c51d78b06cc4dd9ae34b7c927660000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1}, 0x406)
sysctl$kern(&(0x7f0000000180)={0x1, 0x39}, 0x2, &(0x7f00000003c0)="ca0d823c8cb3be5b0cdecd964c613d0added407e80b6fb5f6d1cd0b1394089fb5d0de0d1ca358036952e8ce14ab2178c07c73575fe468af1f8e002c17d90554964d952479ee7d383110358d0516e7e149c22cf26a548e51a81fa74c3a81b0246b508cbc537037a6fe93a9b115a67708e2f3dc9ab523a9b643053d02e33f124c2ba509e0eedd0577b4093d2d9ff0487530689d56fd913ace32630c88911cb4097a19e3cb0e9488c952e043bd01116215969265d68ab13c4686e026b5fd452a9c70b252485a85a8e86d392c47e4bc1681a4c64d5b6dc542cfad87a66192f5ed8577d7787f30aa46e9201ec2692ae12a62f35ac7fa6d59844", &(0x7f0000000240)=0xf7, &(0x7f00000004c0)="3d2634e690ed85b6c22296e301acf2083f620c655a4df692e520836dc3955b56abb14afde5cdeb574c5af6c65c2d6e5ee41db5310b9ca82c19c9d315d3e3f8e1b7b7d99f56d5dbc35054d8896268bf22f02f7280e565e7333b7499c1f1362e7d067ccc2209487f276a985589e81f461f19343059454da9d2ee49bf7330a2929f525d1111ccc4b8b5a6bfe44c7884e8e7fd86e2a5df9ac071a8d75902b7a2712f4ee02dcd", 0xa4) (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async)
r4 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async)
r6 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) (async)
ioctl$TIOCSETA(r3, 0xc4504444, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "00000000c4772075dcea87e800", 0x40000, 0x3}) (async)
syz_emit_ethernet(0x1380, &(0x7f0000000580)=ANY=[@ANYBLOB="07495486ac7cffffffffffff86dd60000000134a3aff20f4372e0865915f577ee80000008000ff02000000000000000000000000000186009078ae9c07000e00000002000000181b6b4117d6fc0f0d1e6afb31bf4ebc434a69f5cfa8df73241d73f9c8a65356b282adb499a5d7fa15ac66e4dba043f79d54b069799473ac2a35cab3bddbabf1a0818874c65c5d73b694cd8eec319a10b2ba52da2422c8f3e206b1dcfda539165adadfd3b1fbf022f5a18847549f8c0ef392db00b5c9b46144952f1a0613441a0849f557adc9e3733ea7f914ed17243f8feb139325e9b76d4f3e60fa02c770a4db43f8e64b34f5c96157e9bd146c3dd038849d4814f3e8e928a41e765b3e16c84be0db6de87a1ac126b64f40ccd41fd44e2bfa068de1a86d259b80957708d903062706844881b618e337cfef004f8859a5b6e37ab570c0428df0e24794e5008a53ac419d41f7086e4e30dc0e95ecb9aa86021308c9957bec1353be445f8734d8bc99f56d8cc8e71ee7f226f4c40727bacadf4e33d67268255b631bc3b4ee8a4e4763cdbf48a017bd5d681a64982891a292b253b06bac022685b3c4b156aeece20f28f975933ec24c34a48ff4bad85c5051bd4e9cb0682d76df0e747ceecbc20b3ae2859c92e8ff8efb53d591576bdc5b6466974de18845fb59af036fea7ddc5e3bc97f03f52b74af8f216021d609bffa1a11679caa853a91ef32b8c36a1da3319d18e2111497e1d454ac8b9c451265eae381f98a8c80d2bc9ac7cf8db120900a598b89a845195de46ac54b7ba9aaee37e65fba2f15e35bd14293cc91bd0fe2a1d454b24928e02f8faea3b5b62089de8d5a02b3764a0d23b445249ccc32b22c6bc0a7c8522f1bab29e98b71dbb205b4e1353c77af6200c1e149687affc40300661e5fdccc670a13ee1db7d6a8e39187723a91c6d4891ffbee2b071b64d85ca07cb4fff38b3fa5a728d4e786910f89c6c9e630fac6e533e033bbb9661d705437d29640f95226b58d7a2deee54411bdb680872e8b2fe73921f8ffe819c9c45daf0f36baa2f896b3bb032fae6f1468e4c0afad6fba7c46b25b3d7cd52b0e420de215658ef87839e947a6da8e5c331cb1ac07facb053113b4a78e63b5b6402edc6845be824933148484e4f9eef0c88ff7d39d9c2e038689883ba7bac0723a17c2cca3a930a5818892d39965dde330ccce5b3f2bd14e542b2e382dbefac976b2a334cbf92d07086cec4f39b11ce2547144ef490948ffe3f8d98bc0630baa6bc5b0f1e86fa48eb1c491fc5f004e05d58c2f9bc26e8cae0ca976a000a8c73d11235293400f435a5c5075324fac6f66a298b1183971228cbb725e8c9a4ec8ab8eb8ca53a61719076d2e0b8e444f7e6d55a7be9c9a9f5688996ae413f69592860dd6b45069d3379a37320ebfd5bdb03fc7b5a66cd808ac4de1bbe3e75f9323694771b9367dfe491f22a9bc9269b2f8c4f7d14e47c59a0220e077c7e59a7b6ce6c70f7815129e47ac8e770e0e5791d3a0341c8c1832c5c17774a8c313a6451bc5f9888ada8ef6d4de86c6bff1ccb8c0b989c57f5e7728e3c195b341553eb6080e8149aee06fd70da5a201b6ca7d3f23e5adf7ac2ec04bcce9a2d03c79015941263cdffaec3563672d69a84354356a524291cb80df07ccca76d0449122ba6ee2efda293e79c4a39d1c5caf5f2cc18986559813d7c8dd4e33f8a081ec426401d9da2649600448551d4b7547e3393f9f03aae0ca3079b5a6d8fb50d5a90b52f677c900b07325bbfa7b23f0a47ed230ad6b3a6a9f5e268afb9a0c23562efceadcd8151823562320d8fb378d86620bbc4719b478d137821cadf90f05558af04d231915344c0821de05935547960542128861b1f885c6f89c40297794c898070d3faa9c6491cc9c4eec68ba0e2763c74355b42f2ede483a87feb050243922fd6da1e4cffb96a894c405205bfa7efae730cd123c2a32f5b5da3add3fb957a9452e33f664138a60f1ec429400fd26542173f0490ab633b398886366edb6f1e4ea0ff5dc8d5a5397238937714bfe62182b87975213bba9857ea496f2f2488ae88ceabb53fc083c47a2c20b563c658cd025f380e42e4c6b39aa0e905400444ed3a49d4a4a6f7091bb18e85a348ac0e2d2080ba0fb4c552f4c369347a888cc66447e7bf8eb7d5ebc329e36cd55f65d99887da959437badc93c8f944364b7a9eb13fd5a85f2a86d4224de9a36b4663e10e4ce3fcc906ebdf2e8a2c1348e2cc02ba9fcd7a40f6e87acd52fccd4db61aaa2876dc4be7f72520bfda5a5fa3a4975f10fc35a66befca1e814c638d01ed3fae1cc8caf6565dca04add6d2ec62601d3c26395639cb3da4ba247075422e76bb6c76500d601d32a81a0a292b7aeba09a8c13afb668eb64392400e428f5d41ecb475e2b1a3cfae6653d9b10f4c6df806ff40b756e190a5d35c6a89f456b13c95f4fe5565cc0ea101f4b46a08ed8ef4f80ca106d27f35a7210e47576e0e75bdbda988a2080ef08cdb3af070c2e4b3d005cf52048c76ee90d57694a811da316404382c920608014e8391358410ed6ac5f67749dbed7f83346ac50ece84e4b18fd9ff8d24529c5d30d3729dbcda847331053ce71c36c4b795911f3018a39c3d577ed13efedaa943df790ee5d35f2a67e0feb7d89f714a9dd39796a82e1e7da032c8cfd8fccb0a731a36cdd96a317331e0232984d219afc87b9a28a96bbb72c21c6d98d905761dc44eab5f129be4487e9a7c334ecf7340819e38bc4e3cf17f1f68c8300b887d501bbee421da7a96403fad6626d7735053889faafcfb6d76146dc9f385fa28e723f4cdcf055220642f33f0f5ec9d438399c373b48b55a6574b828ef21f61c279c2c93f5e55c1dfe0d1746373af8e73b1feeb7de62ed214fafa56ffcf68e77d8c24c8014b7ffb124da7cc24ac8e20b97dc25cfe56c0d9d7461b44a62a83486fce6e64b180d5feb9dc1539b1d427d232c29ce6cca0642eb5a434b9fdf1e70fef27d7c004ebc06b66aceb44c524e416bd79d295c03d3541840a2d805d3d97405649cb8e188161d338c262e158dbb3e2d55651fd1b8879f2b7056728981e340d5212e64037388d114c2cf000efdc9842d5dc1a2d33d558354268b824df441fbabc9431bff3f043baf3e1ecba68deb940cfe2e30e175fcc36a1b2665e13a747f26322b5b96540f4da689c3d3a6e9cb5e8908b84d7ce19724d597486169fa6bd519e1a856ceef4542de75d05058b37b35a5c2907780cd29e63036e3d136117e9923f1681ad51d0c0e0e16067f25dfe0f203d5e1cc99c5eb608f069ffe36118abe486858c635df30b2ae1c4d5103db3cc891aef041685c0c72d6dc752d3f65b5ccada40b228c10690d4f19a5805bfcc43ec9c661667957b7f687c40dd5049fd51771cc57a21185272ba517274f376d587732dd5ccfff9dd9030571d74f1bb5769d83472b481d08e2535cc3c78992ed406504317c97bd15668a5b4e86a487fc01b961c7f20f9a642bb2c956ccf9923961cbe2c073105578a9972d8"])

2.430828224s ago: executing program 4 (id=343):
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
r0 = socket(0x18, 0x5, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078fffffffffffffffb070b1effffffff00000010000e009078000b0008000003ff0000000100000009"])
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f00000000c0))

2.422485982s ago: executing program 6 (id=205):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf8b, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a72, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
setrlimit(0x8, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc})
ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x4000000, 0x400000, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc, 0x14})
sendmmsg(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0xa8, 0xffff, 0x6, "fad286f0333e051e705eb02c68da967cab2486606b350f4a71955c4e552b79809c4d81b2b3a4e7a9cd25c3de8ae664fc52b31a9e5aa009e7713ada419ddd2e9ae62e234d1e1f2e61b9fb4934a26710ed2a3859da1dd4422920f92e6aeecdb555a62cedb06f8b612f265ed04447ceadfe54e773c5c2486e8c5d893742f32860c53f3589371b9efbddcdf9a470894252e495"}], 0xa8}, 0x3}, 0x10, 0x40e)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x104c)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3})
r5 = socket$inet(0x2, 0x2, 0x0)
getppid()
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c00002000040090780000000000f1ff001200907800000006"])
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000180), 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kqueue()

2.219573644s ago: executing program 5 (id=345):
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) (async)
sysctl$vm(&(0x7f0000000000)={0x2, 0x3}, 0x2, &(0x7f0000000080)="8dc91121b747af", &(0x7f0000000040)=0x7, 0x0, 0x0)

2.219295254s ago: executing program 5 (id=346):
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000180), 0xfffffdd9)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
chmod(&(0x7f0000000000)='./file0\x00', 0x0) (async)
sysctl$net_inet_etherip(&(0x7f0000005080)={0x4, 0x2, 0x61, 0x1}, 0x4, &(0x7f00000050c0), 0x0, 0x0, 0x0)
setuid(0xffffffffffffffff) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0xd8)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f00000008c0)='c\x00')

2.218641459s ago: executing program 4 (id=347):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x4, 0x9, &(0x7f0000000040)="03000000", 0xfffffffffffffd24) (async)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000140), 0x4) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000180)={0x6, 0x100000000}, 0x10) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x80) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="c24cd1036647c3a8", 0x8}], 0x1, 0x8) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async)
r2 = socket(0x18, 0x3, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e3471ac0058bc5a9146dec3708200006a177900000000000000000000a41387469da2d251e46b64b2e60e40856539fca8970003", &(0x7f0000000080)=0x36, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async)
write(r4, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)
sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b10004", 0x3, 0x40a, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r5 = syz_open_pts() (async)
accept$inet(0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r6 = kqueue()
kevent(r6, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffb, 0x0, 0x20, 0x2, 0x1}, {{r5}, 0xfffffffffffffffe, 0x5d, 0x10, 0xb, 0xe93}, {{}, 0xfffffffffffffff9, 0xbfe7f146e349ee4f, 0xf0000000, 0xf39, 0x8001}, {{r5}, 0xfffffffffffffffe, 0x2, 0x1, 0x7, 0x4bd5}, {{r5}, 0xfffffffffffffffa, 0x43, 0x1, 0x0, 0x40}], 0xd3, 0x0, 0x3, 0x0) (async)
socket(0x18, 0x1, 0x0)
openat$klog(0xffffffffffffff9c, &(0x7f0000000340), 0x8, 0x0)

1.654157162s ago: executing program 1 (id=349):
socket(0x2, 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0xf, 0x9, 0xfffffff9}, {0x8, 0x8000b86, 0xffffff7c, 0x9}, {0xfff, 0x8800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x7, 0x9}, {0x4, 0x8101, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x4dae, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0x1}, {0xfffffffd, 0x9, 0x4, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
minherit(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x374)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r0}, 0x2, 0x0, 0x8, 0x5, 0x5}], 0x3, 0x0, 0x6, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0)

1.566691096s ago: executing program 4 (id=352):
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x2}, 0x4, &(0x7f0000000040)="e0ad2286", &(0x7f0000000140)=0x4, 0x0, 0x0)
rename(&(0x7f0000000280)='./file0\x00', 0x0) (async)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0xd6)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) (async)
mknod(&(0x7f0000000480)='./file0\x00', 0x6000, 0x400)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') (async)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1.565786666s ago: executing program 5 (id=353):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
chdir(&(0x7f0000000180)='./file0\x00')
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000000)={0x20, &(0x7f0000000140)=[{0xaec, 0xfd, 0xae, 0xff}, {0x6, 0x7, 0x9, 0x10}]})
write(r2, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080))
openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
r3 = kqueue()
ioctl$KDENABIO(r0, 0x20004b3c)
kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0)

1.561364911s ago: executing program 1 (id=356):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
pwrite(r1, &(0x7f00000000c0)="a7", 0x1, 0x40007)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0)
r3 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write(r3, &(0x7f0000000100), 0xfffffe5d)
ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000240)={0x10, 0x2, [{&(0x7f000000e000/0x4000)=nil, &(0x7f00000fb000/0x1000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00000c9000/0x4000)=nil, 0x7}, {&(0x7f0000125000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x8}, {&(0x7f00000db000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00001c7000/0x1000)=nil, 0x7}, {&(0x7f0000144000/0x1000)=nil, &(0x7f0000018000/0x1000)=nil, 0x1000}, {&(0x7f0000020000/0x3000)=nil, &(0x7f00001dd000/0xc000)=nil, 0x1}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000014000/0x3000)=nil, 0x285c}, {&(0x7f000002a000/0xa000)=nil, &(0x7f0000004000/0x1000)=nil, 0x10}, {&(0x7f0000032000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000137000/0x2000)=nil, &(0x7f00000c7000/0x1000)=nil, 0x80}, {&(0x7f0000068000/0x1000)=nil, &(0x7f0000060000/0x4000)=nil, 0x10001}, {&(0x7f0000114000/0x400000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x6}, {&(0x7f0000409000/0x2000)=nil, &(0x7f0000019000/0x3000)=nil, 0x3}, {&(0x7f00000f7000/0x3000)=nil, &(0x7f0000200000/0x3000)=nil}, {&(0x7f00002ca000/0x3000)=nil, &(0x7f00001cc000/0x3000)=nil, 0xff}], './file0\x00', 0x80000001})

1.441264141s ago: executing program 4 (id=358):
r0 = msgget$private(0x0, 0x180)
msgrcv(r0, 0x0, 0x0, 0x1, 0x0)
msgctl$IPC_SET(r0, 0x1, 0x0)
ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2dfa7f0000000400"}) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x3, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async)
sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x44}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4)

1.399290519s ago: executing program 5 (id=362):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6)
connect(r0, &(0x7f0000000480)=@in={0x2, 0x0}, 0xc) (async)
r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0)
preadv(r1, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f000091c000/0x4000)=nil}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f00008fb000/0x2000)=nil}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x6}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$TIOCSETA(r2, 0xc0104419, &(0x7f00000000c0)={0xcd7, 0x806, 0x200, 0x8000, "0148320ac5e4e8060095fc7b00", 0xfffffffb, 0x6}) (async)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x5}, 0x4, 0x0, 0x0, &(0x7f0000000080)="aaa09c1301aa4af172b31763e6a4943e83ddc0614c49d72180fbe81531aba9d73b17f11f1e0edbb2602065b0dc691c2909998900ee71023d0000013c94cdeded35742e9572c3757109dfdb39951f615465f9fbe2667403cf9802f9e750e1ed97a460c5e34c3896925ad7df10adfb236f0e4afe3639b1d8348baef2b92249b04a8b198fd1a2951db50d352bbcb25627fc67", 0xfffffffffffffd9b) (async)
sysctl$kern(0xffffffffffffffff, 0x2, &(0x7f0000000140)="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", 0x0, 0x0, 0xfffffffffffffef4) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f0000000280)={0x10, 0x7, [{&(0x7f0000913000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000f93000/0x2000)=nil, 0x4}, {&(0x7f0000c22000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000a74000/0x3000)=nil, 0xcd}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1ff}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000c6d000/0x4000)=nil, 0xfff}, {&(0x7f0000c65000/0x4000)=nil, &(0x7f00003b5000/0x2000)=nil, 0x8}, {&(0x7f0000c73000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8897}, {&(0x7f0000c77000/0x1000)=nil, &(0x7f0000c6f000/0x4000)=nil, 0x18}, {&(0x7f0000913000/0x3000)=nil, &(0x7f0000e4e000/0x3000)=nil, 0x8000000000000001}, {&(0x7f0000c6d000/0x4000)=nil, &(0x7f0000c6c000/0x3000)=nil, 0x3}, {&(0x7f0000f93000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000e0f000/0x3000)=nil, &(0x7f0000c6f000/0x4000)=nil, 0x4}, {&(0x7f0000f94000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xfff}, {&(0x7f0000ca4000/0x4000)=nil, &(0x7f0000c64000/0x4000)=nil, 0x7}, {&(0x7f0000c6b000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xad}], './file1\x00', 0x9})

1.393363353s ago: executing program 7 (id=363):
r0 = socket(0x11, 0x3, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64)
sysctl$kern(&(0x7f0000000000)={0x1, 0x35}, 0xb, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) (async, rerun: 64)
sendto$unix(r0, &(0x7f00000000c0)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3357a282a01006070ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebba2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea4f56c58904000000008d9810361b1257aba8c500002012410000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0x0, 0x0, 0x0) (rerun: 64)

1.317206499s ago: executing program 7 (id=370):
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000400), &(0x7f0000000080), 0x0, 0x0)
r0 = kqueue()
syz_emit_ethernet(0x149, &(0x7f0000000780)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13b, 0x0, 0x5}, @udp={{0x0, 0x0, 0x8}, {"d29682a2b2803ccaf0ec7def313ea22c30f248ba618fab32871ef17407fd95a1b8b364bfc07636a73813b92e4880026c36bd3af967735fb91aee573516b6672ad4cd360d8ec14127bf87681455fd6c094c70168b43265ac692a825c2ea2b6cedc5017b61652052307ab773a56ccb831629f368712b990c784627cfbae68dc261e6b0c7a15c01bf0f106c906155994fbd815e99cd5f0b9754e1ef87c47da791c0a7a0b241c74ec06ad5eac2302c64fb7a522bea2d91470790c5d3bd7bbd3b188b754f298dab6a1b735df798b9d7d5d569263d42569b6e2de5b92bfcbdbb85f56c66a753561ad40a4d65a9627c1dc5600794e394c9c2e34d275fd5cb7560b46e3929b2edf86df49ffeda1ae6f62d8101a5b5d4af003bfabe3b0985f84bf573a7"}}}}}})
syz_emit_ethernet(0x122, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x114, 0x0, 0x2000, 0x4, 0x0, 0x0, @rand_addr}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xf3}, {"a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b42301fbce20dca03b048c1f7d03ef0c1695badab700c5bd7ffafeab2cafc67e4ee6bc4b704da7f72bd92dc8ca145ab196319a64fba250c317ac4ce2c0e3c4e2afbc156f50f848b7e45e8133dbd035e7e2fc2847f9751d836de04e527c46587a830fff210efd250da4f72dfde1b0ee3f77ea5efa03015857225e13612f518c39feab00a51c323d2509829fb72b5af2e23bdbc4a22196a14a7a175e38b1aa5333e657ba7e7c770144b4250c7e92558d04f0c0939c2dfdfedc38c4d0f6a894342cbc97a116e106ae2be206b538d3dbc5ab23296712e22"}}}}}})
kevent(r0, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x62, 0x4, 0x10fd, 0x14000}], 0x1, 0x0, 0x5, 0x0)
kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)

1.316768712s ago: executing program 5 (id=372):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
dup(r0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
poll(&(0x7f0000000480)=[{r0, 0x40}], 0x1, 0x4fe)
r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = accept$unix(0xffffffffffffff9c, &(0x7f0000000140)=@file={0x0, ""/64}, &(0x7f0000000200)=0x42)
r4 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x41)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
r6 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0))
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r7, &(0x7f0000000000)="bb89a7a58919b0f928e41c8a84e1", 0xe)
r8 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0)
r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r9, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r9, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r9, &(0x7f00000006c0)="bb89a7a58919b0f928e41c8a84e1", 0xe)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffd, 0x80, 0x40000000, 0xec8, 0x8000000000000000}, {{r1}, 0xfffffffffffffff9, 0x20, 0xfffff, 0x1, 0x1}, {{r2}, 0xfffffffffffffffe, 0x10, 0x10, 0x3, 0xc}], 0x4, &(0x7f0000000300)=[{{r3}, 0xfffffffffffffffa, 0x1, 0xf0000000, 0x1000, 0x5580}, {{r4}, 0xfffffffffffffff8, 0x80, 0x4, 0x7}, {{r5}, 0xfffffffffffffffa, 0x20, 0x8, 0x7fff, 0x7}, {{r6}, 0xfffffffffffffffe, 0x52, 0x2, 0x100000001, 0x1}, {{r7}, 0x6, 0x0, 0x2, 0xffffffff, 0x8001}, {{r8}, 0xffffffffffffffff, 0x40, 0xf0000000, 0x9, 0x7fffffffffffffff}, {{r9}, 0xfffffffffffffff8, 0x8a, 0x80, 0x8, 0x100}], 0x6, &(0x7f0000000400)={0xfa, 0x9})
pipe(&(0x7f0000000100)={<r10=>0xffffffffffffffff})
fcntl$setstatus(r10, 0x4, 0xc0)
r11 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r11})
pipe(&(0x7f00000001c0)={<r12=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r12, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r13 = fcntl$getown(r12, 0x5)
fcntl$setown(r10, 0x6, r13)
close(r10)

1.16453555s ago: executing program 0 (id=373):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x7c, 0x2, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0xb}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="000400d949a5f0450c22afbe70eebb2f3400000000e5ffffffffffffffe40f86775d05df", 0x24}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="000400d949a5f0450c22afbe70eebb2f3400000000e5ffffffffffffffe40f86775d05df", 0x24}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)='\x00\x00', &(0x7f0000000080)=0x1d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
setrlimit(0x8, 0x0) (async)
setrlimit(0x8, 0x0)
syz_open_pts()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
symlink(0x0, 0x0) (async)
symlink(0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @local, [], {@ipv6={0x86dd, {0x2, 0x6, "ff4a2e", 0x30, 0x0, 0x1b, @mcast2, @loopback, {[], @icmpv6=@dest_unreach={0x1, 0x3, 0x0, 0x1, '\x00', {0x6, 0x6, "fed222", 0x200, 0x2c, 0xf2, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}})
r2 = dup(r0)
open(&(0x7f0000000080)='./file0\x00', 0x500, 0x80)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000100)={0x1, 0x5a}, 0x2, 0x0, 0x0, &(0x7f0000000080)="13108a5b", 0x4) (async)
sysctl$kern(&(0x7f0000000100)={0x1, 0x5a}, 0x2, 0x0, 0x0, &(0x7f0000000080)="13108a5b", 0x4)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
recvfrom$inet6(r3, &(0x7f00000014c0)=""/227, 0xe3, 0x3000, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async)
setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
r4 = socket(0x2, 0x3, 0x0)
r5 = dup(r2)
dup2(r5, r4)
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="06d3b01c182c4052b47c110a1ee898926676d1db00abeef631a97fd9485cd6e8c2f951547b985318bc6a7ec940b962e12d9e220b31f2582e0f234b258061a7c2f47d3278abbdcd4ba9e17e1636fc0836598691a1ce7b461f3aeebb1cb9a3ec11b14bd6429157ef2b28a6043c525d642369cdeb67c31fdc67f321f38e76516195c4eab0d281ec9a5feea6e331b85df13b0b83f513f961818dccf4be9b94adce7e583659a51663e84c41dc49271d205e9f660dc4c1851cd7cf47073d8b92ac0cc6563f4efa46869c621ce50be8aca5cb617d78e75ee88b941fefa3beff5d3940f5994e175b225c0766e24f705fd019d81802676cdd0f4b55178b340ffcd137d288c8db4dc3a875ef0081714a7cdd7f9a70845a165493b979007f27e6e5ad6b2566ff1e2662d3405c73122e3f9dc2f288eca6a46e44314667f9fbe0eb6de3dc7671408605f950ce24709d4c347af69afe3d3da7c26bd0f64e0572d7be20d0e1b94f8ad936075e5e91f7366d3a2b7e2d385f4291994daed16013c9515eceb0c7a38ae87726a95d3049ebc1a830ec96571f6fb35d87f049426334e3b82624f34757d68bf3e3a5689320c867d98207dee628070812aef2a3b663d265c1b8e3c2c80a79782edb22d9985f09f2251e48ff28be1bc9e99c98c2ec22ebee012f4c26f829b323c280f6eaa32e1388947973f20bb503c5aa9292762e5f0c5ea9e271c7b442f1f5b83d3048687d29477d4f099fac29c3456e8eca745369b823ecb565bccc66087d142fd126249a4c873f91d94b2b0113d7945a924e6fe02f79af81607ea2315004a948cbce7027aadce64db1517a674daef34ef94b05caf07b7afa6adb44ab0410eec3db971148028283e2dc0968741fc65bb437b34d55c3a0b64682875415fb5993e614e502ea1d7e481b9e8712a9d0290b82579cb65e580e0ccdb14e3d1a13ece6d633ad178e0d1662ce5d21fb7db05d1c95b221afb35ab622f53cabcaf8d953de543f4a93e28b786afd0b4027eb744764959f42b600522be5b3949961be82057abc1d845c4c1192d232e8a91734343618d57a576c31fb08462f0e20c08a0d391f4fa8f65f7ba1e8a7d100922654a9ffb97ac34d2037c4308409e1b5ab7380039369d55010b5859d2fd5620b882de3816472185cbb448aef463eef128c209b61efef7dee55d5c27fe90f517956ba33b8708757172487b3dfece31ee824033029fcb7f66f3a064b61c5f7d8e976b52f5e274257941011c729696890482ecf733eecbe88770fc067f2df5409750f41bca0c7d7175a4cfbe5fd69b6fe7afe84ea572f04d226c027fca44387c44b4c7a57bbaf51a62afc1c00e5d5839e3fda4b088a9424f410b2a7e9c7f04e746ae42a3a6bec2b0311aaa6abdcd638aed3e3b2d4eb6d0ef3cf8ba1c2fa5cd24aecb9d071df8d6b0560e8912fcab8f6262f01eec0281abe3d0d773498d48b4e0ef449c89220e812f25f5931e062a18b94c89ca0cdd8dadb535cac2a29ea4ecd080a74c73d699f2c2bc173fca387cc7cfb5b343b50a5025a5dbc8bcfcd1e68b930fac88fe645f38265ac4e61346c625bd706bc48afecf6a1d0bf954dcf312ff583ca12e8489eb7c62b4ad8f22a37172bb4a4507f33448ef8687c2e5c9906bb42b4bb4a42a707997e0cf7583f39177340d2aba6604566e893a68782f7d8cb4a1b0779e14b33dda52950d8f0b1a2779fad6308f6508b457e8ae9b872fe9f83c8b28d06b3fa11643fcbd7416676479f0e73d6c980e083ce51011105fbc724f4f874bfc07cb4dbdf6dc4aaaa2ee3b0cfc80d208706cdbd57b5c1181ceff6a89298161721acb24cddbdccdfecc0d2eabbcac7f9d9ed221b7174275c8541e5aa4a60accbbbb310e7326e791e0a5cff550f9de36669c9f6ccb726bdb0880d858e76bab426138f6872697a7cb2c9ed86d7134e77d9f085d5c905949c79c427ef49dc3d62edfd5b65476866b9eef0f7597e533a11ab2e3e93ebdc088d173cff5e8f5a0c7a373dd2330197b7a75524c0b94cdf44aa5440dce5a396f6166c61cd1abf2326c5b92865da18b6ed40abca0f35d6c4ae68032c7c11752f949c988bdf3b13686e7797d9be26afb287d61ef9c9392808ec58fabcd62639fd22c742e702ce6827f317e8e50a3c804ba5685b5d00e0c58daaf6efbd45660b0be440ea6ad12a88f3568c586c025d886ca95ceb1539efdb7d153755f16db43ce001b1dd9294a999db0a3f32dd03278e089d7738072cedc280820e80af6d87fc54406249a9ab1ffab1e1e8cf203a3bd55a222b1d991a3d50476ce0e427014f918d28b8892afd855b62625c6b22b918f5b11787fbd3f60752eb67d12a8a9d283e2244ba159b1a2143cd20431b1ff57bfd8b08344e8b38a3e55cd608d56b7823d903f21463e0f38dd7b59875a51cd0c22b97195cc2bbc20287217ffecc767115c60e57beff4018de6705ba31331614c4b02df6c0e6717d0a732a94231be858f16b3dabf0524d566240e44aa01444fe7d2dd27b2ebe9a263ce5dc67c6c28e454fa268df4befde55d8ac0fa9b26fd1097844b1343518db1b73a227a1b9954fbd8ea307f792145e13d873a32fa33e08ec7e187babd9f34408db49a84ee008b2bd86f5df09ae7c34cf50e1baf542cffc6349676918ea0c778d5beec2be0270d6edf7938b1c3b480d8fc2cfe95e830290d94d2d4e5908a549fce841262a5b355945d4896ad9740d3db8a051b298338dde9b845aac9b62c4729a7031e1b087ace515c2322348b9bc5c11c719a011fc1b64d4eb8d537fa4de5067caa1252c72652bf29ac8c0349221e9ab0cdec5836dfb27dcb87e2dc846aff79a9732a116666072a900a0b9ba0dfce5cf0d6480a5cb60ee1b598922e500141207a242858f9fe1f02aa11324e8e8908cb5e65f0ca221ee28685e0690a88a16ff142c9d5b78acdeebe27ea7d94dccc0f8162fdc119f399353766c402bdd168cde983ce060fc2a5f142f257b3b43eec1f51271033dbf36c513ef3dd19b47640c7d1594de8cb0e4ff14636f544caa0355dda2154f444e176e723476643ce8085082fc6b40e520b3756f45152e2fff379a39f396c34b655d393880d3dd27e1127b392a7a21d3c118e3fa6697d89a0ee50c7091942112ca80a7e620eb1d554e6652d699610f8680f5241db46579b50c08cedbd6c22d038298941e43e84be0482f6518f0fdf74697aef7984f1adac2e8dee1ca19de6453e4328556eda68ba8ed09993489b56a3a887a37d911f45c7b3748e008a0de57dafa35bcb1b256392c81aba4528e3d08de0b6e985f3d2f6c5d4ea8cb2fde7b31578cacc3f3af93ab9e99343d3e0289597134bb21ec45e1aaeb1c2f64e341d8202b01106f5d915cf7f7690289e831f84d6b0382c50b6391a6b0e737436156c1a4873e1fb5098da8208881c2de7151443df1fee3672b00d77d5ccffc66645a700f70885fbc62ee5e91d908f27ba3153d3e122b6e0ff6bf76b2e6d65e464a8a0b34161690154743cd01f1851a5c99cb8056e0153a5695deb3773a919773e299694a6d0a8386fd6be1b4d3bdb152cbc417e9585eb7f1daf3cd522554566c1eb842b0907a248c931daac67625ac507b3a4ac015db91179b1920c9d361aa65aafca2557c37a4df0cc59e48dc20159947d34104834d6060ae4b7a166dbfa3954f5f6d038b4c06967418bb5c35a3fda065c6101c48bded1e6df4504c66ab961a0d4c6609ff3c95a93d46ce048fec31426b86835db0cae2009affa581e0e0f98e3fce9105ef8df2aa2e6a69214f3bfe37578ef31d1d341c0b988735816e5441bbf5a02d55dc2a9137dd9841035a725bdafea13bd00b9ae774eb886999d5c8cae88e15197afe48f181fe349112fa4be3dc5cde6898e5fb15a578b6981aabf5dbf7feaf1bc5a4f883ad8b0b43ef5f42e119704dd94e6b2080f2cc139910b40a58eb466187634fb597f071aed0f43337cf909798d91671a85d1ff22af645d45b321de2105c5d8a96827837873775183ab480ff0c0b28d6725bc294723e5455e5eef16f0a0044861ce27fa397975b5f9d25bb854d57b39a3a439fe58ef27e441385c7b9442a63017b43430c137ff83a6f45caa3c3b6a1927a746eba32a2493cd7cc39e24ade5e58e58694b2f038d2028c844c1c7cd670105e2552e85dd7c670f7062d15d2c04ba9c9f710bb2c33d31ba29280bd7ffa9f89984c7e7cbf422d1f8ad63f1bd6c166d11b0a4506487f6103d752b2198662847e810efde590db41f9328e45321e83efd605b11f3221d7209b6ed34c4943ed0cc3885fafad62899fbe5ca84674e05c49d7cbdce2e02aa57319a686fc0083a0998ebdc58eafe861b7cb927d1a1aa3cdf02c02bda463c02ce7caefb8cce863673c72c4ec1857eaff7106afad961a6957783359f8592d762611110737bab587f359a33e0dbc7270e9bdafb50a4373c8fee72dbfc6d6bc905568a4f16401010304403e9293df5d2cdd535ae4d5f0c6461933d937598033597b7f6a5171140d244e61abb84535e02d07a592a521d4ac897f62bc16f4996aa3ba0c6a6d986cf425ef080997e865040b79997fb1bd9fcc2489f9db1e418ac44ac4d11950cc42c59e347231b41ba444abc96041fd669180aa8b5212712b3c674eb22a7df769e5d3263ba024f3104aa767a24575dd29c9ed7798ca3655bf3d47ef66e3121a36a6e7afb167e4bf3fc86a4ac47a3ce38f141119fe9fe2803fc3c340fa5c02ae6ed9f8833bb3eb42a7365bfbdad8dca6e7b77b04280c35f57178249ada5eb3e8c81de3f4b8c399b34cc46cc787da1b6af27d1c3dea420e3b2f7e6b43651df47e45a1dc4dde70908bdfb801b3d52ac4d60e47115e618ed6c10bcb6694a1f68d0e65d5fdd26fefa534f9eef372add0645843e11e0e68d57d8d37e8cc78886642b761a622033d1a9cffb6da285d21ff1ff03551b01f89f0844ddbf4798403b308c47c606383c61c74508dfcbc679400a9e68aaf8ca3fd8c57b849ce947d7eccecc649830e571a9cb137c3149a3e15222284257eb79371e5691c03cb76da3abde8075de748e816226283d33cfd8a1d856ee85a527da9168283ee044510eaacc7528e95a89a749e7d20f17d24549e82f38e90f3a0f77b7311b89d61d957321b7646b0f330fa6810ec9495a51fdaad3a99ba5b2f3dfd403e8f8e75952def113ba181a266f201bcd77900d3c9de67ccfa30af72985f44a93d0a724d2f42782e9aa0197ca2f7aa789bd353c3da62b56505a8a63ba47f3e544aa2499e8d27651a83bfd79b13f96812670c148b4aaa59b535381b4cfad46f21eb6bd962d6736a7dc6c5f183f13755b55fc883172c382057d85e97deb543a77cb69f53ced1c15537e6fe521afb97d3db05a8459ced29fc9b2210720d9af50d8eb9d7b3a5d12eb7554a7f90baf119a4a79c7b7c528107d6f074ba6fa5a72a0cd2e2f241a30d9787c15b37d63b2b1ff1b11b48379f9249f1da4aedc4b81f165326c7b0ee4c2ee47306c800ebf775c6c7331b9704c9e70841fa7791537079e0a79332464154d2ed0f41914cb4f10116ecafa8224fcd3e0077b38c778511b6780c005bbaf940978c1f6128fcdf1e4c91e37f5d294d19848a3e5306774601331efcd284d0c9c53bfefc90c4b9916f588873f617e3559562faefecf49f29c9192f3653557547430ab5edbfd329b760eed6214d917bf6b81bd8263fa78a9c00ca0395b744358a8fe293cdc24d666cfcb3b215166b5bd44dbcc43303084a5795fb1aa53cb083367c85b9a2850165c7d3b4bdf94aa856d76980fa8bd95569", @ANYRESOCT=r5])

1.149856454s ago: executing program 2 (id=374):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)})
r1 = socket$inet(0x2, 0x3, 0x2)
getsockopt(r1, 0x0, 0x6b, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x7}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x4, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x4, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
close(r0)

1.141915543s ago: executing program 0 (id=375):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xe, 0x83, 0x400f}]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000a80)={@random="fd0e82c89452", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x22, 0x1c, 0x68, 0x0, 0x2, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x5}, @icmp=@info_request={0xf, 0x0, 0x0, 0xb, 0x2}}}}})
ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000080))
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1495)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000040))
ioctl$WSKBDIO_SETBELL(r1, 0x80105703, &(0x7f0000000000)={0x4, 0xfffff331, 0xff})

1.141614241s ago: executing program 3 (id=376):
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x4})
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f00000000c0)="b10005136000009f0000000000070000001c130500000000fef96ecfc72fd3357ae380b37b6730397804be78164991f7c8cf5f882b295be1aa5b23edeb51e2f0ac3ebbc215000000eeffffff74b0da4f59dd028ea8af630037282102000000720fd38bfbb770c1f572c881ea772ec592040000000000ff0c2300008abfba0900000008e371a3f834371b6e90dfb71d89e0462c5e52000080042000"/177, 0xb1, 0x406, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)

1.137063481s ago: executing program 7 (id=377):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r1 = getpid()
ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r1)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
ftruncate(r0, 0x48001000007)
truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0)

1.136807767s ago: executing program 3 (id=378):
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async, rerun: 32)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async, rerun: 32)
socketpair(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001dc0)={0x0}, 0x10, 0x0, 0x0) (async)
fchmod(0xffffffffffffff9c, 0x127)
setsockopt(0xffffffffffffffff, 0x1000000000029, 0x9, &(0x7f0000000040)="03", 0x1)
r1 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1})
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040), 0x2b}) (async)
ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)=[{0x23, 0x2}, {0x25, 0xc}], 0x2}) (async)
fcntl$lock(r2, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x10, 0x4, r1})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r3 = socket(0x18, 0x1, 0x0)
close(r3) (async)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES64=r0]) (async)
pledge(&(0x7f0000000200)='&:\\&-.^}][-', &(0x7f0000000280)='&-+!}./]\x00') (async)
execve(0x0, 0x0, 0x0) (async)
setuid(0xee01) (async, rerun: 64)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x1}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x7, 0xf15, 0x4}, {0x7890, 0xffff, 0x8, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x800, 0x8bfd}, {0x0, 0x0, 0xa, 0x7}, {0x3, 0x8, 0x800000, 0xa6a}, {0x401, 0x6, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x2, 0x2, 0x69}]}) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async, rerun: 32)
r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 32)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BIOCSRTIMEOUT(r6, 0x8010426d, &(0x7f00000001c0)={0x5, 0x8}) (async)
ioctl$WSMOUSEIO_GTYPE(r5, 0x40045720, &(0x7f0000000040))

1.081824178s ago: executing program 0 (id=379):
kevent(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)=[{{}, 0x0, 0xa0, 0x2, 0x100020000, 0x3}], 0x4, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2207f981aa6a78ef1d35e6abbbdabb26a52ad7f46003d52c000f06c166b28e8db79f70168121bb1e5f628121375941ba69", 0x3e}], 0x1)
r0 = socket(0x18, 0x2, 0x0)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff})
r2 = socket(0x2, 0x3, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r2, &(0x7f0000000000), 0x10)
write(r2, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xb90)
ioctl$VMM_IOC_INFO(r1, 0xc0185603, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)})

1.081563086s ago: executing program 0 (id=380):
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x0, 0x80000001, 0xfffd, 0x10, [{0x0, 0x5, 0x4, 0xa28}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0xf86, 0x0, 0x9}, {0x80000000, 0x800, 0x8007}, {0x401, 0x200726, 0x1002803, 0x17}, {0x2, 0x86, 0x3, 0xb4}, {0xce1, 0xffffffff, 0x4f9, 0x2d}, {0x2, 0x803, 0x17, 0x408}, {0x2, 0x3, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0xb, 0x10001, 0x2, 0x3}, {0x7ff, 0xa, 0x8, 0xcc60}, {0xb9c, 0x4, 0x8, 0x2c4}, {0x29a7171a, 0xfffffffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9}, {0x0, 0x1, 0x1002, 0x9}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6)
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x6, 0x10012e7ffffff, 0xffffffffffffffff})
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
open(0x0, 0x0, 0x80)

1.081279543s ago: executing program 3 (id=381):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000260000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000290000/0x1000)=nil, &(0x7f0000417000/0x3000)=nil, 0x80000000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00002b1000/0x2000)=nil}, {&(0x7f0000000000/0x1000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x1}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000004e000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xf7}, {&(0x7f000055e000/0x4000)=nil, &(0x7f0000493000/0x4000)=nil, 0x8}, {&(0x7f0000561000/0x12000)=nil, &(0x7f000008c000/0x2000)=nil, 0x403}, {&(0x7f00005b4000/0x1000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil, 0xffff}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x20008}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000689000/0x2000)=nil, 0x35}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000053a000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f00002b2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000001000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000232000/0x1000)=nil, 0x4}], './file0\x00', 0xfffffffa})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f000056b000/0x4000)=nil, 0x4000, 0x0)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r1 = socket(0x18, 0x1, 0x0)
setuid(0xffffffffffffffff)
close(0xffffffffffffffff)
r2 = getppid()
r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TIOCSTOP(r3, 0x2000746f)
r4 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000240)={<r5=>0x0}, &(0x7f0000000280)=0x2)
setpgid(0x0, r5)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x22, 0xfffe}, 0x1, 0x68, r2, 0x0, 0x0, 0x4, 0x0, 0x1})
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r7 = fcntl$getown(r6, 0x5)
ktrace(0x0, 0x1, 0xd30, r7)
close(r1)
socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

1.079089605s ago: executing program 3 (id=382):
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x451d)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket(0x18, 0x2, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="000000d860a82060dec3e59be543bfcb449377b76614632250b46f16a822dabfe1792314b1ed12705beea02875758ce32405ccc046fcc745bf8c54e0610c14dd677cae275cf8cff389c01d23bd2facf2", 0x0, 0x0, 0x0) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="000000d860a82060dec3e59be543bfcb449377b76614632250b46f16a822dabfe1792314b1ed12705beea02875758ce32405ccc046fcc745bf8c54e0610c14dd677cae275cf8cff389c01d23bd2facf2", 0x0, 0x0, 0x0)
ioctl$FIONREAD(r1, 0x8020697a, &(0x7f00000001c0))
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000001180)={0x2, &(0x7f0000000000)=[{0x48, 0x7b, 0x14, 0x4a}, {0x1ae, 0x1d, 0x8, 0x9}]})
syz_emit_ethernet(0x4b, &(0x7f0000000100)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x1, 0x15, 0x3d, 0x67, 0x101, 0xb4, 0xb2, 0x0, @empty, @rand_addr=0x7}, @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xd, 0x0, 0x5}, {"5b212e8f238949e6c7e0c6d53e2fa7cf9410bc4d14"}}}}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
syz_open_pts() (async)
r3 = syz_open_pts()
close(r3)
syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5)
poll(&(0x7f0000000040)=[{r3, 0xddffc9e7712129e5}], 0x1, 0x2)
getsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) (async)
getsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
syz_open_pts() (async)
r4 = syz_open_pts()
close(r4)
r5 = syz_open_pts()
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x28, 0x5, 0xffffdf82, 0xffffff90, "08ed95990008ffffffffffffffffe600", 0x4000000, 0x10020000})
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)="01", 0x1}], 0x1) (async)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)="01", 0x1}], 0x1)
unveil(0x0, &(0x7f0000000040)='c\x00') (async)
unveil(0x0, &(0x7f0000000040)='c\x00')
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)

1.058925679s ago: executing program 6 (id=205):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf8b, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a72, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
setrlimit(0x8, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc})
ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x4000000, 0x400000, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0xfffffffc, 0x14})
sendmmsg(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0xa8, 0xffff, 0x6, "fad286f0333e051e705eb02c68da967cab2486606b350f4a71955c4e552b79809c4d81b2b3a4e7a9cd25c3de8ae664fc52b31a9e5aa009e7713ada419ddd2e9ae62e234d1e1f2e61b9fb4934a26710ed2a3859da1dd4422920f92e6aeecdb555a62cedb06f8b612f265ed04447ceadfe54e773c5c2486e8c5d893742f32860c53f3589371b9efbddcdf9a470894252e495"}], 0xa8}, 0x3}, 0x10, 0x40e)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x104c)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3})
r5 = socket$inet(0x2, 0x2, 0x0)
getppid()
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c00002000040090780000000000f1ff001200907800000006"])
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000180), 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kqueue()

861.866865ms ago: executing program 2 (id=383):
r0 = syz_open_pts()
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0xcec1)

861.174222ms ago: executing program 7 (id=384):
r0 = socket(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{}, 0xfcffffffffffffff, 0x0, 0xfffffffffffffffe})
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))
select(0x40, &(0x7f0000000000)={0x9, 0xbff, 0x0, 0x9, 0x800000000000, 0xb, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0xc8, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

205.232063ms ago: executing program 0 (id=385):
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
r0 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0}, &(0x7f0000000280)=0xc)
setreuid(0x0, r2)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r4=>0x0}, &(0x7f0000000180)=0xc)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, r4, 0x0, r3, 0x0, 0x0, 0x3}, 0x85c, 0x2, 0x0, r1, 0x3, 0x7b, 0x3, 0x8000004})
setreuid(r2, r3)
chmod(&(0x7f00000000c0)='./file1\x00', 0x164)
setreuid(0x0, 0xee01)
unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00')
r5 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1013, r5, 0xfffffffffffffffd)

205.052423ms ago: executing program 1 (id=386):
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x48}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0)

204.927436ms ago: executing program 2 (id=387):
r0 = socket(0x18, 0x3, 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async)
fcntl$lock(r1, 0x9, &(0x7f0000000140)={0x3, 0x1, 0x9, 0x269000004}) (async)
ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) (async)
mknod(&(0x7f0000000980)='./file0\x00', 0x2020, 0x4000)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)

204.468079ms ago: executing program 3 (id=388):
mknod(&(0x7f0000000300)='./file0\x00', 0x1, 0xffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x510, 0x106)
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
ioctl$TIOCSCTTY(r0, 0x20007461)
mknod(&(0x7f0000000300)='./file0\x00', 0x1, 0xffffffff) (async)
open(&(0x7f0000000040)='./file0\x00', 0x510, 0x106) (async)
ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async)
ioctl$TIOCSCTTY(r0, 0x20007461) (async)

203.405153ms ago: executing program 4 (id=389):
mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x3ff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x5012, 0xffffffffffffffff, 0x0)
r0 = socket(0x18, 0x3, 0x8)
shutdown(r0, 0x2)
r1 = openat(0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x10000, 0x62)
ioctl$BIOCPROMISC(0xffffffffffffffff, 0x20004269)
setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50})
r2 = syz_open_pts()
close(r2)
syz_open_pts()
ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000240)={0x2df57366, 0x2001, 0x5, 0x980e, "0064004c2860267eccc7020000060000008700", 0xfff, 0x3})
writev(r2, &(0x7f0000000000)=[{&(0x7f00000009c0)="1a1845ec07", 0x5}], 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000001980)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYBLOB="c462c606be9c59d0c23d7e2e2ca541edc7544e4e048de28ae321a894059db3c4835321246457608d3ee2d910741ef2e7141aacb1e70f27928212df0107cb7d1fc746f87d4701fcacc38a29e28584aa129f97f5f7ea732cc451d6e459204ea2723637e77c767a38d11f0178b1edde276d5a7e96", @ANYRESHEX=r2])
r3 = getgid()
setregid(0x0, r3)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0), 0xc)
r4 = socket$unix(0x1, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001680)={&(0x7f0000001640)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/94, 0x5e}], 0x7, &(0x7f0000001580)=""/171, 0xab}, 0x66}, 0x10, 0x42, &(0x7f00000001c0)={0x75d7, 0x1})
getgid()
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x1fe, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x557a, 0x7, 0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0x1ff, 0xfffffffffffffffc})
connect$unix(0xffffffffffffffff, &(0x7f0000001940)=@file={0x1, './file0\x00'}, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r5 = socket(0x20, 0x5, 0x1)
close(0xffffffffffffffff)
r6 = socket(0x20, 0x0, 0xff)
setsockopt(r4, 0x1000000000029, 0x4, &(0x7f0000001800)="fa97000022cbb8f5611609a4ebd8c691345c3f0ae308a200daa92f21ac6217036d875329d1e8f483921ee4588fc20088eb99362cddbf41140749f7800627cb9a30f60f98c28c7967e9d46db49844a8c33063ecfa67e31237d835ca263c42c7016a82b7270d39b948a971610392819ced63220ed4fb1e1c0af21b94bf574711b91dbd96c2819ca5870bb81c604c3ab362c2a73e964781ac8b717b2015874557c287559d0777621f4e4a02c2a0be4b04dedab7f1ddfd9dd6884165e8716a2c76e65864ceff5a0f8c01535936dc4b2f9a40109efc53bbcacd3714c4281d73e4d85dd8f894ba91807e40c0c4e130d9ff14ba8e22f157f8e46f32b0", 0xf9)
setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000001700)="ebffcbff13b9fd812eaa4e713048e699319296480ab10193e9a87fbfc7cc25c9d2dd605b6aed01d420356b7b1753ca55162107e2e8eae8126589ec52bd9ec55508f5845f80595ce6308ee509c811fa864e38e8dbec2666e12e385b7e1cae7ddc7c4e69aeab3ce2f121c00c6894531fd5479dee25d4dce10519039e41bb1c9611b649d5c152447643ee31eae472b9d298442a59bffc610e254e350ec469694b655a4d33940cd3f7957439ae4eff7b8e1649b4a6d0986604579506c4d90314eb80e9a8e893a7ce56dafdc4cfa6f75920c0f73537ce825e5a8b93e7f9d853326ab8602925a294e0e1c4f5f8f5ec", 0xec)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

199.478556ms ago: executing program 5 (id=390):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff)
r0 = socket(0x18, 0x3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r2}})
r3 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000040)=0xc)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000080), 0xc)
r6 = openat(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x200, 0x10)
ioctl$KDSETRAD(r6, 0x20004b43)
ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000001580))
r7 = kqueue()
r8 = socket(0x2, 0x2, 0x6)
ioctl$TIOCCHKVERAUTH(r6, 0x2000741e)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f00000016c0)={<r9=>0x0}, 0xc)
sendmsg$unix(r6, &(0x7f00000017c0)={&(0x7f0000001600)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000001640), 0x0, &(0x7f0000001700)=[@rights={0x18, 0xffff, 0x1, [r7, r7]}, @rights={0x18, 0xffff, 0x1, [r8]}, @cred={0x20, 0xffff, 0x0, r9, r4, r5}], 0x50, 0x40c}, 0x6)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000080)=0xc)
r11 = getgid()
setgroups(0x1, &(0x7f0000000000)=[r11])
r12 = getgid()
r13 = getegid()
setgroups(0x7, &(0x7f00000000c0)=[r2, 0x0, r5, r10, r11, r12, r13])
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_emit_ethernet(0x3a, &(0x7f0000003a80)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x39, 0x2c, 0x65, 0x0, 0x1, 0x2, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}, {[@end]}}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x7, 0x0, 0x5}}}}}})
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x201)
open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)
open$dir(&(0x7f0000000100)='./bus\x00', 0x100, 0x120)

198.955185ms ago: executing program 7 (id=391):
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x3}, 0x8)
r0 = socket(0x3e, 0x0, 0x3)
setsockopt(r0, 0x101, 0xd, &(0x7f0000000200)="36b3a1edafa30475d546290147318288ebd8dc9a83de11a2dffb9582e70d32e55fe938c13c33f30e54219de97a9ed9a6cf9d4e4e8eeb03c38c2bd3cae71485a5d0f45fbdf90cb865ee7a752b4a4ae6b01eee1b08346507608408cf45bdc7669d42a296f812881a426672a927c46974a33e4dddb85a7c5ba517e4d669b3b3a26e1fd96b66f4bb83f85b750e0ad8cf0b2f938c09c7168dca0e273aaf20928b32382a6a452d87ce", 0xa6)
sysctl$hw(&(0x7f0000000040)={0x6, 0x9}, 0x2, &(0x7f0000000080)="59865852945b32ea49810ef46485cd5212e10e7c7504c31c062f816f65964eaec6f158dea8cd985755fd99bc876e6d881ab1fec472efd012f18a92dfa68c116c8486912cbee508be3df6710e3dc29e00522c42c9601188b527821746c65708f80c3fc7d39296b89cb6f57cf012ba44ddfe37694c04d461c74f0828ba84c35ceebd4a2e59e1c9bd5e847f2c692af4f7175247baf01a43d4ee5324333616007737e33c39c58c419e78156c35e9", &(0x7f0000000140)=0xac, &(0x7f0000000180)="f4b9d926039f7ade7b2df72a9916baf1610db126", 0x14)
sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, 0xfffffffffffffffe, &(0x7f0000000300)=0x3b, 0x0, 0x0)

86.021561ms ago: executing program 1 (id=392):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f00000001c0)=[{0x4, 0x0, 0x3, 0xfffff4b2}, {0x30, 0x78, 0x4, 0x8001}, {0x6, 0x7, 0xb, 0x10801}]})
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
poll(0xffffffffffffffff, 0x0, 0x80000)
socket(0x1, 0x2, 0x0)
clock_getres(0x6, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0, 0xfffffd57})
fchown(r0, 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x1)
execve(0x0, 0x0, 0x0)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0)
ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000300))
sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02)
open(&(0x7f0000000340)='./file0\x00', 0x800, 0x130)
open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0)
r3 = socket(0x2, 0x3, 0x0)
shutdown(r3, 0x1)
setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f0000000100)=0x1fffd, 0x4)
mknod(0x0, 0x2000, 0x5498)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
r4 = semget(0x0, 0x0, 0x400)
semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000140))

83.505262ms ago: executing program 2 (id=393):
r0 = semget(0x0, 0x1, 0x281)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x126b, 0xf9, 0x0, 0x5}]})
r2 = getgid()
setgid(r2)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
syz_open_pts()
semctl$GETVAL(r0, 0x3, 0x5, 0x0)

79.450216ms ago: executing program 7 (id=394):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000000980))
sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x404)
r1 = semget$private(0x0, 0x2, 0x0)
semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000180)=""/4096) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0)
ioctl$DIOCMAP(0xffffffffffffff9c, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r2, 0x7})
r3 = socket$inet6(0x18, 0x3, 0x8)
r4 = shmget$private(0x0, 0x4000, 0x40b, &(0x7f0000ffa000/0x4000)=nil)
r5 = shmat(r4, &(0x7f0000ffd000/0x3000)=nil, 0x3000)
shmctl$IPC_RMID(r4, 0x0) (async)
shmdt(r5) (async)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
r6 = socket(0x2, 0x4001, 0x0)
recvmmsg(r6, &(0x7f0000001700)={0x0, 0xfffeffff}, 0x10, 0x82, 0x0) (async, rerun: 32)
socketpair(0x18, 0x3, 0x6, 0x0) (rerun: 32)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
socket(0x2, 0x1, 0x0) (async, rerun: 64)
r8 = socket(0x18, 0x1, 0x0) (rerun: 64)
recvmsg(r8, &(0x7f0000000900)={&(0x7f0000000180)=@in, 0xc, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000540)=""/136, 0x88}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f00000003c0)=""/39, 0x27}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000600)=""/130, 0x82}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001180)=""/4, 0x4}, {&(0x7f00000011c0)=""/89, 0x59}, {&(0x7f0000001240)=""/211, 0xd3}, {&(0x7f0000001340)=""/83, 0x53}], 0xc, &(0x7f0000000800)=""/251, 0xfb}, 0x1000) (async, rerun: 64)
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x2000000000000}) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = syz_open_pts()
fcntl$setstatus(r11, 0x4, 0x80) (async)
sendmsg$unix(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async)
recvmmsg(r9, &(0x7f0000000000)={0x0}, 0x10, 0x0, 0x0)
ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000140)={0x0, 0x0})
write(r7, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0x40b)

74.08207ms ago: executing program 3 (id=395):
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
chmod(&(0x7f00000000c0)='./file1\x00', 0x164)
setreuid(0x0, 0xee01)
unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00')

73.012647ms ago: executing program 1 (id=396):
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r0 = kqueue()
r1 = socket(0x18, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
sync()
kevent(0xffffffffffffffff, &(0x7f0000000380)=[{{r2}, 0xfffffffffffffffb, 0x0, 0x40, 0x2ef5, 0x6}], 0x1005, 0x0, 0x8, 0x0)
kevent(r0, &(0x7f0000000000), 0x80, 0x0, 0xffffffff, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
getppid()

72.342999ms ago: executing program 2 (id=397):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x0, "b77da47e00000500000000000000000000000010", 0xfffffffc})
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x6) (async)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "e600000f0000ae000000000000000007abc0788a", 0x0, 0x800000}) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2) (async)
ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f00000005c0)={""/16, @ifru_index})
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x18, 0x2, 0x0) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async)
r4 = socket(0x18, 0x3, 0x0)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0x8020560b, &(0x7f00000000c0)={0x0, 0x0, 0x0})
socket(0x18, 0x2, 0x0) (async)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
writev(r3, &(0x7f0000000300)=[{0x0}], 0x1)
setsockopt$inet_opts(r2, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4)
setsockopt(r2, 0x0, 0x67, 0x0, 0x0) (async)
ioctl$BIOCLOCK(r1, 0x20004276)
ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000080)=0x7)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x29a, 0x0, 0x0, 0x0, 0x4f) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) (async)
execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000180)='/dev/rvnd0c\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000280)='/dev/bpf\x00', &(0x7f00000002c0)='/dev/pf\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='--[}^[*,\xba\x00', &(0x7f00000003c0)='/\x00', &(0x7f0000000400)='/dev/rvnd0c\x00'], &(0x7f0000000580)=[&(0x7f0000000480)='/dev/pf\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='/dev/bpf\x00'])

2.210341ms ago: executing program 0 (id=398):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xd4e688a67930cd)
r2 = getppid()
fcntl$setown(r1, 0x6, r2)
r3 = socket(0x18, 0x3, 0x0)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987aa9feb13ec99e805e6e84010003582a835702", 0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
close(r1)

0s ago: executing program 2 (id=399):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x10, 0x2a)
ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0})
select(0x40, &(0x7f0000000000)={0x1b, 0x3, 0xfffffffffffffffc, 0x2, 0x3ff, 0x9a, 0x0, 0x6}, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="fffd640000000000000000000a"])
r1 = socket(0x6, 0x8000, 0x44)
socket(0x18, 0x1, 0x2)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000040)=0x30) (async)
getgroups(0x9, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0x0, 0x0, 0x0])
setgroups(0x3, &(0x7f0000000100)=[r2, 0xffffffffffffffff, r3])
sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) (async)
ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17

OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-b.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
pmap_unwire: wiring for pmap 0xfffffd806a9d0b00 va 0x20000000f000 didn't change!
panic: pool_do_get: shmpl free list modified: page 0xfffffd8068381000; item addr 0xfffffd8068381a10; offset 0x40=0x682fb7a2
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 19230  71380      0           0  0x4000000    1K syz-executor
 449266  50066      0     0x14000      0x200    0  reaper
db_enter() at db_enter+0x25
panic(ffffffff833cda51) at panic+0x1e5
pool_do_get(ffffffff83a04220,1,ffff80003c4210e8) at pool_do_get+0x5ea
pool_get(ffffffff83a04220,1) at pool_get+0x149
shmget_allocate_segment(ffff80003c4162c8,ffff80003c421340,73,ffff80003c421290) at shmget_allocate_segment+0x1a7
sys_shmget(ffff80003c4162c8,ffff80003c421340,ffff80003c421290) at sys_shmget+0x1b2
syscall(ffff80003c421340) at syscall+0xb08
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x63f2e63cc10, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: pool_do_get: shmpl free list modified: page 0xfffffd8068381000; item addr 0xfffffd8068381a10; offset 0x40=0x682fb7a2
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff833cda51) at panic+0x1e5
pool_do_get(ffffffff83a04220,1,ffff80003c4210e8) at pool_do_get+0x5ea
pool_get(ffffffff83a04220,1) at pool_get+0x149
shmget_allocate_segment(ffff80003c4162c8,ffff80003c421340,73,ffff80003c421290) at shmget_allocate_segment+0x1a7
sys_shmget(ffff80003c4162c8,ffff80003c421340,ffff80003c421290) at sys_shmget+0x1b2
syscall(ffff80003c421340) at syscall+0xb08
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x63f2e63cc10, count: -8
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c420f20
rbx               0xffff8000299dedd7
rdx               0xffff800001457c80
rcx               0xffff80003c4162c8
rax               0xffff8000299ddff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x44984f6b12520555
r11               0x6c4b4ba09f92124b
r12               0xffff8000299debd8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff810e22e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c420f10
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=19230 pid=71380 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=50, usrpri=50, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4167e8,0xffffffff83a0bcc8
    process=0xffff80003c41b408 user=0xffff80003c41c000, vmspace=0xfffffd806a9d13e0
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 71380   26132  37980      0  2           0                syz-executor
*71380   19230  37980      0  7   0x4000000                syz-executor
 90135   95012  50610      0  2           0                syz-executor
 90135   44595  50610      0  3   0x4000080  fsleep        syz-executor
 90135   79887  50610      0  2   0x4000000                syz-executor
 65300  505821  68981      0  2           0                syz-executor
 65300   28161  68981      0  3   0x4000080  pipewr        syz-executor
 89764  318859  88119      0  2           0                syz-executor
 89764   73160  88119      0  3   0x4000080  fsleep        syz-executor
 89764  404946  88119      0  3   0x4000080  fsleep        syz-executor
 69488  370170  58589      0  2           0                syz-executor
 69488  187641  58589      0  3   0x4000080  fsleep        syz-executor
   918   37721  16418      0  2           0                syz-executor
   918   40469  16418      0  3   0x4000080  fsleep        syz-executor
   918  113665  16418      0  3   0x4000080  fsleep        syz-executor
   918  315969  16418      0  3   0x4000080  fsleep        syz-executor
 34761  456520  34577      0  3        0x82  wait          syz-executor
 58869   71935      0      0  3     0x14280  nfsidl        nfsio
 48507   48431      0      0  3     0x14280  nfsidl        nfsio
 60235  246511      0      0  3     0x14280  nfsidl        nfsio
 89049  173882      0      0  3     0x14280  nfsidl        nfsio
 65567  356016      0      0  3     0x14280  nfsidl        nfsio
 64539   72473      0      0  3     0x14280  nfsidl        nfsio
 74597   46199      0      0  3     0x14280  nfsidl        nfsio
 19669  230322      0      0  3     0x14280  nfsidl        nfsio
 11762  478625      0      0  3     0x14280  nfsidl        nfsio
 89600  210875      0      0  3     0x14280  nfsidl        nfsio
 27873  494882      0      0  3     0x14280  nfsidl        nfsio
  3084  170723      0      0  3     0x14280  nfsidl        nfsio
 98230  523212      0      0  3     0x14280  nfsidl        nfsio
 99471  299374      0      0  3     0x14280  nfsidl        nfsio
 23357  107930      0      0  3     0x14280  nfsidl        nfsio
 91544    3257      0      0  3     0x14280  nfsidl        nfsio
   704   47986      0      0  3     0x14280  nfsidl        nfsio
 62151    6911      0      0  3     0x14280  nfsidl        nfsio
 20160   69154      0      0  3     0x14280  nfsidl        nfsio
 28510   21849      0      0  3     0x14280  nfsidl        nfsio
 85015  331390      1      0  3    0x100083  ttyin         getty
 73283  517576      0      0  3     0x14200  bored         sosplice
 16418  454035  34577      0  3        0x82  nanoslp       syz-executor
 50610  112548  34577      0  3        0x82  nanoslp       syz-executor
 37980  469723  34577      0  3        0x82  nanoslp       syz-executor
 58589  428505  34577      0  3        0x82  nanoslp       syz-executor
 54203   12791  34577      0  2         0x2                syz-executor
 88119  181182  34577      0  3        0x82  nanoslp       syz-executor
 68981  432572  34577      0  3        0x82  nanoslp       syz-executor
 34577  248085  13470      0  3        0x82  kqread        syz-executor
 13470  256098  36507      0  3    0x10008a  sigsusp       ksh
 36507  260292  75301      0  3        0x98  kqread        sshd-session
 75301   82632  67200      0  3        0x92  kqread        sshd-session
 67200   61771      1      0  3        0x88  kqread        sshd
 29226  497379  89978     74  3   0x1100092  bpf           pflogd
 89978  111476      1      0  3        0x80  sbwait        pflogd
 90769    6441  31996     73  3   0x1100090  kqread        syslogd
 31996  520673      1      0  3    0x100082  sbwait        syslogd
 93885   43186      1      0  3    0x100080  kqread        resolvd
 50320  358894  29774     77  3    0x100092  kqread        dhcpleased
 26962  232276  29774     77  3    0x100092  kqread        dhcpleased
 29774  154009      1      0  3        0x80  kqread        dhcpleased
 68251  282893      0      0  3     0x14200  bored         smr
 83025  480949      0      0  2     0x14200                zerothread
 20991  133605      0      0  3     0x14200  aiodoned      aiodoned
 90404  120694      0      0  3     0x14200  syncer        update
  3049  312173      0      0  3     0x14200  cleaner       cleaner
 50066  449266      0      0  7     0x14200                reaper
 38103  312986      0      0  3     0x14200  pgdaemon      pagedaemon
 21985  341641      0      0  3     0x14200  bored         viomb
 68684   65503      0      0  3  0x40014200  acpi0         acpi0
 51616  425653      0      0  3  0x40014200                idle1
 60726  425095      0      0  3     0x14200  bored         softnet3
 29292  136994      0      0  3     0x14200  bored         softnet2
 65087  234938      0      0  3     0x14200  bored         softnet1
 67005   96358      0      0  3     0x14200  bored         softnet0
 25213  342463      0      0  3     0x14200  bored         systqmp
 62603  159681      0      0  3     0x14200  bored         systq
 94310  109086      0      0  3     0x14200  tmoslp        softclockmp
 16731  146950      0      0  3  0x40014200  tmoslp        softclock
  2325  265891      0      0  3  0x40014200                idle0
     1  405493      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff838c4838)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  uvm_pmr_freepages+0x1a8
#4  uvm_anfree_list+0x1e3
#5  amap_wipeout+0x248
#6  uvm_unmap_detach+0x8a
#7  uvm_map_teardown+0x358
#8  uvmspace_free+0xcd
#9  reaper+0x213
#10 proc_trampoline+0x10
CPU 1:
exclusive mutex shmpl r = 0 (0xffffffff83a04238)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  pool_get+0x10b
#4  shmget_allocate_segment+0x1a7
#5  sys_shmget+0x1b2
#6  syscall+0xb08
#7  Xsyscall+0x128
Process 71380 (syz-executor) thread 0xffff80003c4162c8 (19230)
Process 50066 (reaper) thread 0xffff8000ffffccd8 (449266)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10206  11044K   11489K 166960K     11958        0
            pcb    17     13K      14K 166960K       180        0
         rtable   220      7K       8K 166960K       563        0
             pf    35     17K      19K 166960K        89        0
         ifaddr    39      6K       7K 166960K        82        0
        ifgroup    55      2K       2K 166960K       109        0
         sysctl     4      1K       9K 166960K        11        0
       counters    68     36K      37K 166960K       116        0
       ioctlops     0      0K       4K 166960K      1536        0
            iov     0      0K      14K 166960K        87        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1403     88K      89K 166960K      1960        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       5K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem    13      5K       5K 166960K        25        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    16     57K     110K 166960K       625        0
          sigio     0      0K       0K 166960K        14        0
           proc    72     91K     140K 166960K       733        0
        subproc    72      4K       4K 166960K       126        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        41        0
       in_multi    84      6K       7K 166960K       167        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       516        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   232    159K     176K 166960K      7127        0
       UVM aobj     8      2K       3K 166960K        11        0
     pinsyscall    41     82K     102K 166960K      1866        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        24        0
            NDP    12      0K       1K 166960K        55        0
           temp    45   8676K    8798K 166960K     22243        0
         kqueue    14     20K      31K 166960K       102        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      135    0      132     3     2     1     3     0     8    0
rtentry    176      184    0       85     6     0     6     6     0     8    0
unpcb      144      306    0      285     4     3     1     4     0     8    0
syncache   336        6    0        6     2     2     0     1     0     8    0
tcpcb      808      325    0      320    12     1    11    11     0     8   10
arp        128       32    0       15     1     0     1     1     0     8    0
inpcb      384      692    0      683     8     0     8     8     0     8    6
nd6        144       42    0       20     1     0     1     1     0     8    0
pkpcb       40        4    0        4     2     1     1     1     0     8    1
kcovpl      48       14    0        6     1     0     1     1     0     8    0
ppxss      1192      15    0       15     1     0     1     1     0     8    1
pppxif     1504       3    0        3     1     0     1     1     0     8    1
pffrag     232        2    0        0     1     0     1     1     0   482    0
pffrnode    88        2    0        0     1     0     1     1     0     8    0
pffrent     40        3    0        1     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       41    0       12     1     0     1     1     0     8    0
pfstkey    128       41    0       12     2     0     2     2     0     8    0
pfstate    384       41    0       12     4     0     4     4     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      716    0      319    29     1    28    29     0     8    0
art_table   32      717    0      319     4     0     4     4     0     8    0
art_node    16      181    0       92     1     0     1     1     0     8    0
sysvmsgpl   40        4    0        4     2     1     1     1     0     8    1
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112       21    0       10     1     0     1     1     0     8    0
shmpl      112        8    0        3     1     0     1     1     0     8    0
pool(0xffffffff83a04220:shmpl): page inconsistency: page 0xfffffd8068381000; 29 on list, 5 missing, 35 items per page
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     2449    0      938    95     0    95    95     0     8    0
ffsino     288     2449    0      938   109     0   109   109     0     8    0
nchpl      144     3227    0     1515    64     0    64    64     0     8    0
rtmask      32        4    0        4     1     1     0     1     0     8    0
uvmvnodes   80     2863    0        0    59     0    59    59     0     8    0
vnodes     216     2863    0        0   160     0   160   160     0     8    0
namei      1024   10704    0    10704     1     0     1     1     0     8    1
percpumem   16       73    0       24     1     0     1     1     0     8    0
kstatmem   264       60    0       34     2     0     2     2     0     8    0
scsiplug    72        1    0        1     1     1     0     1     0     8    0
scxspl     216     9833    0     9833    11     3     8     8     1     8    8
plimitpl   152      208    0      189     1     0     1     1     0     8    0
sigapl     424      933    0      863    10     1     9     9     0     8    0
knotepl    120      597    0        0    19     0    19    19     0     8    0
kqueuepl   224      177    0      167     3     2     1     3     0     8    0
pipepl     336      193    0      165     6     3     3     6     0     8    0
fdescpl    520      894    0      864     3     0     3     3     0     8    0
filepl     160     4670    0     4452    16     2    14    16     0     8    4
lockfpl    104      124    0      122     1     0     1     1     0     8    0
lockfspl    48       57    0       55     1     0     1     1     0     8    0
sessionpl  144       32    0       23     1     0     1     1     0     8    0
pgrppl      48       50    0       33     1     0     1     1     0     8    0
ucredpl    104      816    0      802     1     0     1     1     0     8    0
zombiepl   144      864    0      863     1     0     1     1     0     8    0
processpl  1208     933    0      863     6     0     6     6     0     8    0
procpl     656     1609    0     1529     8     0     8     8     0     8    1
srpgc       96        2    0        2     1     1     0     1     0     8    0
sosppl     168        2    0        2     1     1     0     1     0     8    0
sockpl     728     1146    0     1114    14     5     9    10     0     8    5
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      5    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       1    0        0     1     0     1     1     0     8    0
mcl4k      4096     115    0        0    15     0    15    15     0     8    0
mcl2k      2048      29    0        0     4     0     4     4     0     8    0
mtagpl      96       14    0        0     1     0     1     1     0     8    0
mbufpl     256      310    0        0    20     0    20    20     0     8    0
bufpl      280     3162    0      129   217     0   217   217     0     8    0
anonpl      32    10368    0        0    84     0    84    84     0   246    0
amapchunkpl 152   22678    0    22175    28     2    26    27     0   158    4
amappl16   200     2629    0     2596    17     6    11    14     0     8    8
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184      128    0      116     1     0     1     1     0     8    0
amappl13   176        5    0        5     2     2     0     1     0     8    0
amappl12   168     1662    0     1632     4     1     3     3     0     8    0
amappl11   160       50    0       36     1     0     1     1     0     8    0
amappl10   152        7    0        7     1     1     0     1     0     8    0
amappl9    144      246    0      245     1     0     1     1     0     8    0
amappl8    136       28    0       25     1     0     1     1     0     8    0
amappl7    128      120    0      108     1     0     1     1     0     8    0
amappl6    120      235    0      232     1     0     1     1     0     8    0
amappl5    112      249    0      240     1     0     1     1     0     8    0
amappl4    104      352    0      328     1     0     1     1     0     8    0
amappl3     96     4157    0     4052     5     1     4     4     0     8    0
amappl2     88      735    0      671     2     0     2     2     0     8    0
amappl1     80    11247    0    10642    16     0    16    16     0     8    0
amappl      88     6272    0     6111     5     0     5     5     0    92    1
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        7    0        7     2     1     1     1     0     8    1
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       10    0        3     1     0     1     1     0     8    0
uaddrrnd    24      894    0      864     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      894    0      864     1     0     1     1     0     8    0
vmmpekpl   168     8973    0     8927     3     0     3     3     0     8    0
vmmpepl    168    62563    0    60629    98     0    98    98     0   357   10
vmsppl     480      893    0      864     5     0     5     5     0     8    0
rwobjpl     72    21845    0    18043    70     0    70    70     0     8    0
pdppl      4096    1795    0     1728   115    42    73    85     0     8    6
pvpl        32    16426    0        0   133     0   133   133     0   265    0
pmappl     256      893    0      864     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      421    0       51    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0