last executing test programs:

3.102143713s ago: executing program 7 (id=8):
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4)
r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
setegid(0xffffffffffffffff)
setregid(0x0, 0xffffffffffffffff)
setuid(0xee01)
setgid(0x0)
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440), 0x6a853a0453420068, 0x0)
ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f00000003c0)={'./file0\x00', 0x0, 0x6e3e, 0x23f8, 0x1, 0x1000, 0x200, 0x4, 0x0, 0x0, 0x6ff7, 0x9})
writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="e3a83f448348e7724d99697f5845611c8536d6077ed0dbdda1aaa8822c24d6fcd13affb019c6e9d1dcdf9f2f018da036620a", 0x32}, {&(0x7f0000000100)="ee86e930edb9b42be2e3d50c92eaa3ca70355fc3938a71b944897e9dc14c52c9ccace5a1ae50d672cd6365e747f712b2f391148d47956e49c6e0db5955eaacd281227fb7b5dc346996536a39f2dc9c2d9d86bb85bdd3f1f0a465eafda427c639694265096f022230f97718833a55864ef68983218a11e4a70dad50685e92bfdf0ab57ee83415b81eea30ef89812c10530771feeb9d639ed4a09d0d814303ccf269f65991d5fd7102f9dbddb568016cbc66d52d34784c22e09ebef22eaec1277ed43f946e8db34c4991f3572859e96a9be8ab8fbf66d296b94a48f79d", 0xdc}, {&(0x7f0000000200)="4005954f9f08ca81c2e349dddd1b145b3f8901267912657be820a58e1c4b3af587f6c0226f8b556e87d9a9a78f425678bdcfe587967cc10739d7c711822d", 0x3e}, {&(0x7f0000000240)="3eb81d67803bc0c14b89497181e2df9b56ebcd3a59d30d2a52c468037e89387e8db70dd3c9182621bdff76e71d3e9377ecb83aeeaffc4f64052bc6e21b999f2ab99fe242f03465137ddbf7d4db59590b08ebf154a0424a3836fc79f40c0857ada8f1776795f1c6635f1052aea69ac85165aa0f74837d0a78ed68f0760551548f3f42f5d12e494ed74c94b77500a1039112d1fd62702558e6c72de16fb106b3c48bd7a24f02507a9e887bd68d07440e46f7b6f8a6f86bb6c612a202ae56e9605cb8b8efc4893468a4c1b385c3c84111e8bfbcccba1362b5a32fdfb4b5f8d5fbbc6acb5cf5d2276b83e6b8", 0xea}], 0x4)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000340)='\x00\"\x00\x00', 0x4)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f0000000080)=r3)

2.935433053s ago: executing program 1 (id=2):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x7f, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0xfff, 0x1, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x7fffffff, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x4, 0xfffffffffffffffe], [0x5ad8, 0xc, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0xfffe, 0x400, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0x10001}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xffffdffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, 0x0}, 0x40)
sendmmsg(r0, &(0x7f0000000000)={{0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0, 0xfffffffffffffff6}}, 0x42, 0x410)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0)
syz_emit_ethernet(0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x2000, 0x20, 0x33, 0x0, @empty, @rand_addr=0xfffffc}}}}})
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0)
fcntl$lock(r3, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000023})
closefrom(r2)
r4 = kqueue()
unlink(&(0x7f0000000a80)='./file0/../file0\x00')
r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x300}, {0x2, 0x4}, {0x0, 0x4000}, {0x1, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {}, {0x3}, {0x1, 0x6}, {0x2}, {0x2}, {0x1}, {0x1}, {0x1}, {0x3, 0x10000}, {}, {0x3}, {0x1, 0x4}, {0x2}, {0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x2}]})
kqueue1(0x4)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VMM_IOC_CREATE(r5, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x800000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './file0/../file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x3ff, 0x2, 0x8, 0xfff, 0x3, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0xd, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa094, 0x2, 0x100, 0x2, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0xfffffffe, 0x81, 0xa, 0x6, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x4, 0x2, 0x1, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x6, 0x7, 0x2, 0x7, 0x6, 0x7, 0xfffffff4, 0x4, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x7, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x2, 0x1, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x6, 0x7063, 0xa, 0x6, 0x7, 0x7, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x2, 0x2, 0xfff, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x2, 0x2, 0x5, 0x5, 0xd, 0x9, 0x8001, 0x80000000, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xfffffff8, 0x5, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x2, 0x9, 0x2004, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x7fd, 0x7, 0x6, 0x7fff, 0x6, 0x800, 0x5, 0x9, 0x5, 0x10001, 0x8, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x0, 0x8, 0x1, 0x1, 0x800, 0x9, 0x75a1, 0x0, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0x8, 0x100, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0xc, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x6, 0x7, 0x9, 0x7f7fffff, 0x5, 0x0, 0x1, 0xfffffff7, 0xc74c, 0xff, 0x8, 0x6, 0x4, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x3, 0x7, 0x81, 0x3, 0x8, 0x1, 0x2, 0xb, 0x8e6, 0x5, 0x6, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x8, 0x81, 0x4c1, 0x0, 0x7, 0x4, 0xf7ffffff, 0x12000, 0x10001, 0x99, 0xba8, 0x1, 0xfffffffb, 0xa, 0x1, 0x200, 0x2, 0x0, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd6, 0x80, 0x1b, 0xe2, 0x0, 0x0, 0x1, 0x1, 0x7, 0xffff, 0x99, 0x8, 0x8, 0xe, 0xfff, 0x3, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x5, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x10, 0x4, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x6, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffffffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x800, 0x2, 0x100, 0xfffffffa, 0x2, 0x1, 0x10000, 0x3, 0x51, 0x8, 0x0, 0x1, 0x5ed, 0x2, 0x9, 0x22, 0x40, 0x8001, 0xdf, 0x67bc, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x1, 0x7ff, 0x101, 0x5c, 0x93, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x5, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x1, 0x9, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x827, 0x8, 0x81, 0x80000000, 0x9, 0x0, 0x4, 0xd, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0x80e, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0xa53d, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x2, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x208001, 0x7fffffff, 0x9, 0x4, 0x8, 0x4, 0x8, 0xffffffff, 0x9, 0x7fffffff, 0x4, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x7, 0x132, 0x80000001, 0x5, 0xa, 0x2, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xcf71, 0x1e46c000, 0x9, 0xe, 0x0, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x5, 0x80000001]})
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000001f00), 0x10000, 0x0)
ioctl$DIOCIGETIFACES(r6, 0xc0284457, &(0x7f0000002540)={'./file0/../file0', 0x0, 0x100, 0x4, 0x40})
kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)

2.550457766s ago: executing program 7 (id=14):
open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2d)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
flock(r0, 0x3)

2.500446282s ago: executing program 7 (id=15):
sysctl$vfs_fuse(&(0x7f00000000c0)={0xa, 0x12, 0x2}, 0x3, &(0x7f0000000540)="00500cfca7ef4e52755195e41142644c4aa41918d2139981178d2464c15ccc11e73a6af820fd6afb7dce2a2af0bcc9d00bb78b3d058291ce713875b9406eb792348b78f4cb4234fb19cec61afa59d7aab8317d8209b5407e0c1ba78bb28843258bf87b6f7df70298c9f069d65394fe4c476706459d22c6357bfa1ca8a657f747ed5906cff58677650b9b319ebe1a62507e9991a8a9852af7b0eaecef95dd9717e76a9f", &(0x7f0000000600)=0xa3, &(0x7f0000000640)="7d0278ea2856738db965b2135ea6", 0xe)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x1, 0x2, 0x2, 0x8001, 0xfffffffffffffffe, 0x6, 0x7fffffffffffffff, 0x0, 0x9, 0xfffffffffffffff0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa3, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000002, 0xa, 0xeed, 0x8011003, 0x4], [0xd, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x40007d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x4, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0xfffff3d8, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x7, 0xfffffffc, 0x40000000a}], {0x2000, 0x7, 0x5}, {0x29, 0x5, 0xb0, 0x2}}})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0)
ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f00000007c0)=0xfffffffc)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x56, 0x0, 0x7fff, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0)
symlink(0x0, &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffddb)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}})
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0)
select(0x40, &(0x7f0000000000)={0xffffffff7ffffffd, 0x0, 0x0, 0x564, 0x9ceb, 0x0, 0x4000000000000, 0xfffffffffffffff9}, 0x0, 0x0, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r4 = socket$inet(0x2, 0x1, 0x6)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100))
kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0)
r5 = socket(0x2, 0x8002, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$AUDIO_GETPAR_ctl(0xffffffffffffffff, 0x40404124, &(0x7f0000000000))
fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
fcntl$setstatus(r4, 0x4, 0xda495a63cac41cca)
sysctl$vfs_nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
closefrom(r5)

2.385605357s ago: executing program 3 (id=19):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$VT_RELDISP(r0, 0x20007604, &(0x7f0000000040)=0x2)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000000)="1c290129", 0x4)
open(&(0x7f00000002c0)='./bus\x00', 0x400, 0x0)
r2 = socket(0x2, 0x8002, 0x0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
closefrom(r3)

2.37385295s ago: executing program 1 (id=21):
setuid(0xee01)
r0 = socket(0x11, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="a3bac83f2c98cde2a82f284c54f753fb6c55f2cc6d7b7d77c2fce411d3134a931d914db80467abf338de245efa58fb6bd8d037908437f6623fcd324a1e87bd16", 0x40, 0x6, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x12, 0x10)
ioctl$TIOCCDTR(r1, 0x20007478)
r2 = geteuid()
lchown(&(0x7f0000000100)='./file0\x00', r2, 0x0)
setreuid(r2, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000480)={0x3, &(0x7f0000000080)=[{0x4, 0x1, 0xb8, 0x8}, {0x0, 0x3, 0x15, 0x3}, {0x80, 0x80, 0x2, 0x2}]})
syz_open_pts()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4)
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])
sendto$unix(r0, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0)

2.361506901s ago: executing program 2 (id=3):
r0 = socket(0x18, 0x2, 0x0)
connect(r0, &(0x7f0000000000)=@in={0x10, 0x2, 0x0, 0xb52}, 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x400, &(0x7f00000001c0)={0x1c, 0x18, 0x3, 0x6017, '\x00', 0x9}, 0x1c)
mlockall(0x0)
r1 = syz_open_pts()
fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080})
fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x300, 0x100000001})
fcntl$lock(r1, 0x8, &(0x7f0000000180)={0x2ff, 0x0, 0x10, 0x300000000})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xff}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37)
r2 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
read(r2, &(0x7f0000000200)=""/4096, 0x1000)

2.280392457s ago: executing program 1 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}})

2.277887771s ago: executing program 1 (id=23):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/255, 0xff)
execve(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x10000)
mquery(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x1)
socket(0x20, 0x8000, 0xff)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f00000000c0)={0x3, 0x9})
recvmsg(0xffffffffffffffff, 0x0, 0x800)

2.235712995s ago: executing program 2 (id=24):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async)
r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0x2, 0x0)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x8], 0x2, 0x10004, 0x0, <r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
poll(&(0x7f0000000240)=[{r0, 0x40}, {r1, 0x5}, {r2, 0x100}, {r3, 0x8}, {r4, 0x4}], 0x5, 0x0) (async)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setuid(0xee01) (async)
acct(&(0x7f0000003f00)='./file0\x00') (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async, rerun: 64)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
fchdir(r5)
symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64)
open(&(0x7f0000000000)='./file1/file0\x00', 0x80, 0x98) (rerun: 64)
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02)

2.194285496s ago: executing program 6 (id=26):
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') (async)
r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
utimensat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.01226994s ago: executing program 4 (id=27):
r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1})
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4000000000000})
unveil(0x0, &(0x7f0000000180)='r\x00')
r2 = syz_open_pts()
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6000000000083afbfe8000000000000000000000000000bbfe80"])
fcntl$lock(r2, 0x9, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x1000300002002})
openat$dri(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x2, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) (async)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4000000000000}) (async)
unveil(0x0, &(0x7f0000000180)='r\x00') (async)
syz_open_pts() (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6000000000083afbfe8000000000000000000000000000bbfe80"]) (async)
fcntl$lock(r2, 0x9, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x1000300002002}) (async)

1.991206068s ago: executing program 6 (id=29):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x5, 0x1, 0x1, 0xca}]})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000002c0)=[{0x7c, 0x72, 0x1, 0xf}, {0x3d, 0x0, 0x0, 0x2}, {0x9b1e, 0x4, 0x1, 0x101}]})
msgget(0x0, 0x200)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x18, 0x0, 0x0, 0x80, 0x1, 0x0, @empty, @rand_addr=0xdfffffff}, @icmp=@generic={0x9, 0x20}}}}})

1.794074695s ago: executing program 5 (id=33):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000ec0)=ANY=[@ANYBLOB="40e6c7bf5bc4096cdeebf5ac19e4420d8d7f7ebaeb1192fa75778257f58ca508e07672eac169a07a63709399ba0f81f7f3f1b7211bc8baea56c6ddef6187959d4d97ba9892be7272491c6348fd5925288ed8e633ffd344f0af2a6a2575c5081faa51fa17b8dcd43514a78fcafe3f1182c6aa45c95ba1f1d7f25e1d14bc900af0d77719c5993c12e7498f940e9ca79519d0919f7195b69f56610a2349cf362227362cdfae0d4bab09660d10fd0d79c9d5dda4cf361f6d6e480976f29d905eecb77be1030d398f2e966e442b99c837312148b0da1f6e756101fb665b1fe681a0485164a3b18f8f5790e7cfadf3cbe6d423a73d83026a1af1edc55cbb216f65bd7ad3275b1b4048100daac5e7df71d20986814471e3a94500b6cc4d800fb415f823fe48477e02c0c1ed98acbe36965bf2797e103662263d5afdae56469db68f9b213157f33e26a03d724b39db3494c3cffa1f23a323bfcc94b07512f7af77c3f00b9e560a87d7359f57890632c3d6e05707aa2bb6013f8c670ab1361dd34238774d9ccf481b4ad2bcc91bd01c6975a6f519df3256076faf83025c37f2444be4a991c1239958d09ad82692c2963ca57d7980f60172de7f9ecae18afd042cb11a83cc60af1e0b519f529317627597ed8082c8cb87c0470731314cdb2997c8ae6e7aa062b9fd0c4db4c3dcb4ea74e0dc294d27c6aaad4ce73a584c0d0912be69c80b9e271ae7c0cd61baf7d7e3e63235b8f28288738cbbb77a90d14f30ccce0da01dd7dcf532cfed31d97eeb6fc373d1d69db38ec989b1d05388ee2b3ed8a84046444cd3e82fd9b9ab1178f1408a84967532d755cd91e8cb1f5e10c2e6335cd64fb20fe0e7e2fee7c939729c6abf1093bad17e8b1d11f598693014ce0c5e274f7ce9377d1c16776ae006cb7a45d0d7e2c32f6a3e53f064e404bd138ff9bf7df00a4343b099cae8c5e122cd1fbf7fef9e700c3869a857992c148b8750fce70c02ae9c24d1f1192bbb54d3de881ac8026cc39c4a76a67879ad437745f135773127f8705940e54c598419197adc7038337044874a32012a92c3ed0a25e6d7344316ff508454a558bb979244be5a1d072038329ee843f750062e3baac46eca807691216f6d638c80c64ae511fe167aca94053fc26687b614a0454f32d4e5468faaf5711fee18327a184127e46fbed832a38f1469eb8a56ea99f4aa98d6d4ad62faea54ef06ffb0e9d131dc2c09d5a9c5a42fdfd5335352ca8c43e87f06c01c7a74268bddd0c6d39c14b55a56c8c08d42f48342f56848b47f3cb5c5ddb421c0e286677ee461c2329117042176084c6a2e5441bf05636654bd8ab5599297e0176ef7b38f7bab8e74302ececb6b158e83bfbeed59b5464f88f259b7235e8515a5ed0b3be3103919bec2c24c690c92150e9eecd71d124f8b96ecbc08071c75b2ceb4831719d6496ecb5afa2d9b149de77d14d9c0907f4786c683d8596273cfbc5f49b83abbfeff976102a1a581cec227e3626ef613e93bf423d488f87b31ec28ad4378037fdf241f84c26255092be7bf59276cd34399e598c57e61539974f178d1979b6c9ab291057116b8fbafa270b9bbdf97b2dcd678798b6ba04cc1ad7c39a278d3454db7b2298622b7bd1c676a7584904b4bc33f6b994f846c683e4881079836823ac78ec850778d38e8c63dcff5ac4579fb9a553a2f531b5d37633239ef80c705a3f3cfe64a4952a553eecc2e029f2701b1840d07c9a069c998fee03a21ecaa0f3ad691326265ff5c39beeed8cae57cd0cf6a4e4f8d0a23a7c7097d9c8cd58b8ff71b60c3e9567eb29d2ad53c3532be53f424523ff2c665860eb9236599cf8916885db451389ff23e2c2d41fbe98561b57cd70674a610dbb0e41dc6c0f79e148a66676d2a21417d58a111f60e5c60e0b3bd8bca122649178650602e12bff39d3e6b24c7ed8af18016f49857cf0e80f1cfce0b82f588557745f3a573103b393170b8224a3a05fa52b6855dbfc4f703377d1207b43f683d276807f0f14cb1042e86bd6bb1579e1468c5944cad075a3a3cc597a4b2181f3b1082e3809c127c57a62fcdeba054ea18254c39636c07e2b424f7e47927233815d5968ed2f48c4a7c144e8d8e55d3da65b41f23eec7a1c764e02d51303ed9e6e2a2b52116730f99ad6ce44eb3cb10811f2227c93e12ca06ba29cc4ffc7ec717a7e0330c2fc2b553a32a71e270d0e1b422f434527aceb1e8598d766f3da304d92bf8aa618ab357a1d7909c998c10203369d3281af1b0dbce968aeba779b6f9c00dfd8660be87a9dd11e4f8cd93d439dd8144452165fd158fd3cd5eceea6b4db40ec9da786867142e58382b8bcd0b1a578bf71dc6c2679bf39da72884a25e3f5ed9824a32b749e8713a7c3afdf22cd3c42ba07c7132d7b0a5d87002c956504a1c1c76bc5e083e26d8f2d5a95f4935b78a36f30b3186f156ce5cee590ca4631ae056b8710de7e0a6aa5a886a449c2b50aa5bcd93b2f53d6910dbc85f11ccfaee235ed21d5d6c70ce39fde61bf5e0f98e50741a8a7c5fe668bcdf26677ea4eefb649d7c598afb77014acebfcdc01fe2c9106a4c3421d85ec5557aa5dbf6ef7799811deb8d3332b4ef9d9368c84d0170066ad887326850637d3d1ea75f07e7dc9d2a56109b31978d3cb05a258207083c9f4f3ec09bb135fabcdc9b64d81d1fd3c7ff430853fe44ca97e419e955bb833ba4eda64df608ba64509a900eb4029241b12b333bdc3a8c825e3908270e8ff1cc7f81db31245b29c5a64852ee39c5c804531ddbb1f1dd9f4497a44316db269143db3b9d336a54b6d84da6c9c2a4b4e23fbe0d027be6b1a5972c8f00cda77c57df6814320c3dcfcdabd7aae1d89b72f9db948ed1c3d484a441ee6e3f6285cac32499038c24676a0a73cb0876c27dbfa7f918ca61f6fe0b197262bf630ef4531ff8d81389e9b6bdf7035ab56fc6a446e7421bdfe600da061665a9426ac9336a4bc351ff363c0f7cfad37c537ec1baf98bdb57e80d8ea948db60fc2ba902f613d3f85ebc4d7edad9436194f7da27757e86d053473072cccb73eb4d60060d4648ee0087e9f4775acdccf5b3f1729059935f8814cfe651af80bb1105272a2da84113b2751bff5b55cdeb6851f5c4f4cf8846ea8d8d7f6192e3e2d2a2b72d4bbccd9a01e2d56221d356dab5d46a72a1e5c692dff7ea0578acd3bbcb06a6def44e71bffd9749051f41a918408aca3728514ada973d42977d3ff419b51d11261cd68d9ecc9fc02e4e35075b54e7c6df422bdb1b0e41b579498370a8304bbede1f22c7f55f834ebd6d2884fd6f40bfadbc1b99b639d92fcbfaf69d9d9dadb53ed90b417237ec77ac7ab3d0438076840ac9da00653ae7b0d2539a7becc90d793a99b69af21a2ccb03970a092f431cdc5211819a01ce5cfb39a609d55144ab62b7a7e794614fe0bd936494a5293841c806e10336bf8782a4d581ab8d82bc93475a3bdd5a0365f2ed5718baffe4394e23cf8a348f1db1ddcc2c9a8dec5a2719ab1b46fbd7c4e63acb4d1b12c8dd9fae3e1b0568dba0610126ddb51f1721729aee53c75c690137cc9e37fb8066370c6596b593f7e0b37128ca84e15ace2b777993f146b8421759181974bcd868babffe6f0060e19e92f2ea7b72202bd44bf3f92addba69bd1ff74adee9e49d3a48f6d7148082d40407b36d85caa41ecd1b2aff418c553873781f4d0c3c08c9c44974488e8dd94b041c07c5be3a80fe571132eeb6e690949e24fe3d73d539bda5efb8d1833cb8595e930ae48dc201a3237c92037feb4664a093dae1e5e4ef6300d8abfa1a295ceeced77c2ec7be6e6baa0bd27aab91394c4efa1187b8e1e5fda561fe101108143469355a4eff7b0161965fe164f726c59d08887c6e2a4a0674d04dee1ff3d290c481a7182d6a3d1ae686b32bffb44b624d56dc284bf59e3783ec0dd5630d7ead5bbbf11606b2f0e67c3c783d3490c45dd50a92288c2825daae46367d6c3e87c1cefe2da4e7987b069fbb3a5c772bbabc2e7ca075c74c9c4576068a205d6bcbc281fb9c16e14f5795b859054e9cb609cef493019efd72a50c4d370da6f43669dd9f130ab662e5897bfde27a66856eaa6467ead1bcc7f40c70875aacf9f8cdf8126bb0ac65b4b7bc58aa66d63a77b0a35e804fbe1759a2fbeb86a192bd51b13c06e01bd96c09ade0db8d009e866139f4349d6106c4f3db41713faf2a815785756c39b189e1c15a0c7c60ea6e6e774baabfaf278461265297860b90d97cbdb708a75f9fd7e477a7d053dcc615f951d79bba2426d188d6c1cfd1c010bff4f305964e980dde5fcd217749c505a8a01cbd485c085e21e3045ecaaae66076c660031af8edf3bb70f5b9c2b2c6086d4f288784829993e4676f35b38ece7c5ae99a92312298cfdda19ba401bc5d9878240eb133282b833268b5194bd8fcf0666be5524900afa7052a69825400da79ae8739e67d2120b66d23cfd6a162e3b7a279d686cf8c02faddbb383a143844d34da523d58861cf8ba8f6449d9c5a92f25cad4ff733776287032b9c24461ab8a1cb91fedd067579583b277845b6aaa0d674e614ef123f38ba69cc822e5b3fc850e119373e15090b5eb0c7559794ca214fa340f2b303041e423269efe9543ba98722ddfca8fd6d47f279b9c95c963453b57210137a338a88fba2004f942f3a7ccbe2399f853fe39d921e6618af0675ef2603b9b125d17dc63db970e380602c404541dbbe87c8b801756f299b3fbf378314f78d43fb18490441ab11d2ad509a1481a85a9ee5f57f7974f7299739dc84a86b6ddb318d5e8ee41c9a391ba500c715742d9afba9b01e0a42d092528e5c024611f61bc5c1a74b204e5a54bb4adc401e1e1419a59042fd08a26fa408d5808b3ecff4aa11ee980a5d6ca189469b3354b49841f96358c6270b6426009e42309451c548bfc868bba688830f9d0c02c1b48d1a3dfa54bf537a2a097730c08f9ee39a7449d9e7305081bab7c4647e12ef3e30f78a1af196128354dc5a8b0bead4dadc3c45738e39aedd88215f8366aa372434f23bd34908aed1eb8fc096db91056eeaa74d3abf15f279942674e0c0242b675f5d957b045ce580a44a9fe0c27a066bbc1ac2fe92c72e2858d85ae6d06b939cfe990d4864deb53d70d5c981d2a27f10aad3769c6035348d8c58d4c44b0e83a28a510b8a997ae966ed06009e98e64fe6278b3b8e9e16a29d12c5b2c54b1541220bb4611fa34a4440de04b5ca8a6fd8aabd7908aeacd6b3dacce6430a490a92dd24b7f3025c4417c48d90d557a3917430441a03274cac5876cf108e8f83f2420b0d004d82a5458adb5cf6a6de73ae65a56b2f931380244b557407c5b06bd5c7e3b7e71a6daf6f92200c62ae08021b6c82318da4d912240d740b5707f7b052058d7ca7ce435195ae2836c348d7c91c54d7fba9d850c25c47e78c545b42c537d1cebfcbc08578d41ffdd744edc97754ef4cb7039e882f086103c3d6b48fca16b5b0f3def7bea69034761bd291244367a0e75170aa21c298683e3912d6191502dcfbdc8d0d16219f18d120abbeec73528372c88e0bbdb06bf7afa4a776e31ef8128f2c6966f91567cfa41381ef4d050b4cc5370241a41bbb9448818a168878da09ed2c65d3a694a1552d4fc410da44268f3b489292258fbbd3fbe127c9f0fca35889a572b4fed0fccb62b8a0a2e01edff5891c041b13434c91aa29b74a62294fef83c3804838a4c22254f7e3acce85eb6105b3ab922b5c4879ef8caeecf5a43670201a72870731d94c18d83158a639"])
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async)
setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14)
kqueue1(0x0)
r2 = socket(0x18, 0x3, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1003, &(0x7f0000000080)=0x1004, 0x3)
setsockopt(r2, 0x1000000029, 0x26, &(0x7f0000000000)="5ab7776a", 0x4) (async)
setsockopt(r2, 0x1000000029, 0x26, &(0x7f0000000000)="5ab7776a", 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="8f6f77efe655ffffffffffff86dd605f6ad9003037008fd8b0e5602493ff1f88b029e0ad0c35ff02000000000000000006ea1d8a7713488d00000000000102009078000000006006c32e00068900fe8000000000000000000000000000aa0000000000000000"])
closefrom(r0) (async)
closefrom(r0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$DIOCCHANGERULE(r3, 0xcd60441a, &(0x7f0000000140)={0x6, 0x7ff, 0x2, './file0\x00', './file0\x00', 0x0, "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"}) (async)
ioctl$DIOCCHANGERULE(r3, 0xcd60441a, &(0x7f0000000140)={0x6, 0x7ff, 0x2, './file0\x00', './file0\x00', 0x0, "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"})

1.788228698s ago: executing program 6 (id=34):
syz_emit_ethernet(0x14a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a81e00810025000800471c01340066fffd02de9078e0000002ac1400bb00890294049af1014e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"])
readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f00000002c0)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x2042, 0x0)
close(r0)
sysctl$vm(&(0x7f0000000040)={0x2, 0x7}, 0x2, &(0x7f0000000000)="0000040c6a", &(0x7f0000000540)=0x5, &(0x7f0000000580)="096c4b1a", 0x4)
sysctl$vm(&(0x7f0000000100)={0x2, 0xc}, 0x2, &(0x7f0000000140)="9b885ada9adee2684199ae3d08fbe79fc0a7af0f", &(0x7f0000000180)=0x14, &(0x7f00000001c0)="4ccf6b6e05bb5404", 0x8)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x20)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
sysctl$vm(&(0x7f0000000200)={0x2, 0x17}, 0x2, &(0x7f0000000700)="34f845530486ad846766fa34ace79f4117ac6c1766f338ecc16f5f783d4170597d6ba195b66dd6e2340bb75671c711755aa2b7c5de854a8c58c56a5746f0832285cf25a3d32505d048833779b852561d1ca4d0b150c4ba5445f343bf212ca27adf6744e4857a3d1e8ebd6debeb50f44e592e4f6bca655d7888af2f11fd0051960a2be4cce403b4af363ffea0751a", &(0x7f00000007c0)=0x8e, &(0x7f0000000800)="c8fdf908ebc2867b6de7085eeae7c217437f651109c1304c923f759f37e044062e8534548ae4", 0x26)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x7, 0x1}, {0x1, 0xb, 0xd2, 0x7}, {0x991e, 0x4, 0xd5, 0xffff}]})
syz_emit_ethernet(0x66, &(0x7f0000000640)=ANY=[])
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f00000000c0)={0x5, 0x6})

1.787264258s ago: executing program 0 (id=35):
r0 = socket(0x18, 0x2, 0x0)
r1 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r1, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0xc, '\x00', 0x8}, 0x1c)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000002480)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DIOCXCOMMIT(r2, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0})
r3 = open$dir(&(0x7f0000000100)='./bus/../file0/file0/../file0/file0/file0\x00', 0x10000, 0x20)
mknodat(r3, &(0x7f0000000200)='./bus/../file0/file0/../file0/file0/file0\x00', 0x6000, 0x9e9)
ioctl$DIOCNATLOOK(r2, 0xc0504417, &(0x7f0000000180)={@v4=@loopback, @v6=@mcast2, @v6=@mcast2, @v4=@multicast2, 0x5, 0xc16, 0x5, 0x9, 0x0, 0x1, 0x18, 0x8, 0xd4c2a94beedf9886})
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000140)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0xaaac, 0x0, 0x0)
mprotect(&(0x7f0000272000/0x4000)=nil, 0x4000, 0x4)
setsockopt(r0, 0x6, 0xb, &(0x7f0000000080)='\t\x00\x00\x00', 0x4)
socket(0x18, 0x2, 0x0) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
bind$inet6(r1, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0xc, '\x00', 0x8}, 0x1c) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000002480)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$DIOCXCOMMIT(r2, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) (async)
open$dir(&(0x7f0000000100)='./bus/../file0/file0/../file0/file0/file0\x00', 0x10000, 0x20) (async)
mknodat(r3, &(0x7f0000000200)='./bus/../file0/file0/../file0/file0/file0\x00', 0x6000, 0x9e9) (async)
ioctl$DIOCNATLOOK(r2, 0xc0504417, &(0x7f0000000180)={@v4=@loopback, @v6=@mcast2, @v6=@mcast2, @v4=@multicast2, 0x5, 0xc16, 0x5, 0x9, 0x0, 0x1, 0x18, 0x8, 0xd4c2a94beedf9886}) (async)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000140)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0xaaac, 0x0, 0x0) (async)
mprotect(&(0x7f0000272000/0x4000)=nil, 0x4000, 0x4) (async)
setsockopt(r0, 0x6, 0xb, &(0x7f0000000080)='\t\x00\x00\x00', 0x4) (async)

1.786986692s ago: executing program 4 (id=36):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x8000)
bind$inet(r0, &(0x7f0000000080)={0x10, 0x2, 0x3}, 0x10)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
listen(r0, 0x7fff)
r2 = socket(0x2, 0x4, 0x7)
setsockopt(r2, 0x1000000000029, 0x3e, &(0x7f0000000780)="00000080", 0x4)
getsockopt(r2, 0x29, 0x3d, 0x0, 0x0)
shutdown(r2, 0x2)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x3, 0x4)
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000000)=0x3)
syz_open_pts()
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d14003c0066000809089078ac1400bb0600000044200870e0000001000001ff000000020000000000000007e0000001fffffcb010009078091a0001"])

1.597536001s ago: executing program 5 (id=37):
setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="9e6e0e6a0902b7db9f6ecccc12d40bd8f09d3d40985fd094573c0053721441380bb4e50d034a0a3a3bb7c5ff4b1f090cf218ff26dc37362e8c16acbc991fcd62233a49aa8d131549f0ee86107377edae5ba0e65cae2a6f5a2afd0b8732ecbdd8e10b83c6fae8", 0x66)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
socket(0x1, 0x4, 0x1)
r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x0, 0x4}, 0x1, 0x8003, 0x2})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x2)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x87, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x3, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x7, 0x0, 0x8a3a0001, 0xfffffff7}, {0x10002, 0xfffffffe, 0xa62, 0x200a68}, {0x7f, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x7f, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]})
poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r0, 0x4}, {r2, 0x80}], 0x3, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r2, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6})
r3 = syz_open_pts()
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000100)={0x920e, 0x8, 0xffffdf82, 0xffffffd1, "08955c1cfac164eb0a07fa23b8aa291cfcf20800", 0x4000000, 0x5})
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000340)="008d974daa525a4d8f10caa15d0f8ac861ee1a600668521ec005f321b9e9204c68ce3d3f20ce00d586d858e12e688f75e52e83453ced6417e4b8d406faeefad5e958114c3ee171b91af7d2598c4c1f62a548afd2c2c0247ac6ab1497b2ef612e87c9ae9926aa43ac5ce5ff174b86", 0x6e}], 0x1)
setitimer(0x0, &(0x7f0000000240)={{0x4, 0xaf}, {0x3, 0x96f}}, &(0x7f0000000280))
readv(r3, &(0x7f0000000740)=[{&(0x7f0000000180)=""/172, 0xac}], 0x1)

1.59638908s ago: executing program 2 (id=38):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x2, 0x1, 0xa}, {0x20, 0xc9, 0xfd, 0x8}, {0x9b1e, 0x22, 0xf, 0x40203ff}]})
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x200, &(0x7f0000000000)=0x5, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f0000000140)="090000000000000000c105f801dd", 0xe)
sysctl$kern(&(0x7f0000000040)={0x1, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0)

1.595613055s ago: executing program 7 (id=39):
r0 = syz_open_pts()
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fcntl$lock(r1, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300000023})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, r2], 0x2})
close(r0)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a9900", 0x10, 0x3a, 0x69, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ni={0x8c, 0x0, 0x0, 0x3, 0x4, 0x401}}}}}})
r3 = syz_open_pts()
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x89)
rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00')
fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1001000300000000})
syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x6)
r4 = socket(0x18, 0x2, 0x0)
bind(r4, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c)
sendmmsg(r4, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x2, 0x9, "ff0100", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xd387, 0xffff63de, 0x1005, 0x2, 0x8, 0x80000ff, 0x44, 0x10, [{0x5, 0xb, 0x74b922c7, 0x80000009}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0xfffffff7, 0x9}, {0x4, 0x8, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x1}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x2028000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x100008, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x80000101, 0x3, 0x9}, {0x9be2, 0x5, 0x2, 0x400}]})
poll(&(0x7f0000000000), 0x35, 0x0)
getpeername(r4, &(0x7f0000000240)=@un=@file={0x0, 0x0, ""/507}, &(0x7f0000000440)=0x1fd)
syz_open_pts() (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
fcntl$lock(r1, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300000023}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, r2], 0x2}) (async)
close(r0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a9900", 0x10, 0x3a, 0x69, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ni={0x8c, 0x0, 0x0, 0x3, 0x4, 0x401}}}}}}) (async)
syz_open_pts() (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x89) (async)
rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') (async)
fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1001000300000000}) (async)
syz_open_pts() (async)
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x6) (async)
socket(0x18, 0x2, 0x0) (async)
bind(r4, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) (async)
sendmmsg(r4, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x2, 0x9, "ff0100", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xd387, 0xffff63de, 0x1005, 0x2, 0x8, 0x80000ff, 0x44, 0x10, [{0x5, 0xb, 0x74b922c7, 0x80000009}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0xfffffff7, 0x9}, {0x4, 0x8, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x1}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x2028000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x100008, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x80000101, 0x3, 0x9}, {0x9be2, 0x5, 0x2, 0x400}]}) (async)
poll(&(0x7f0000000000), 0x35, 0x0) (async)
getpeername(r4, &(0x7f0000000240)=@un=@file={0x0, 0x0, ""/507}, &(0x7f0000000440)=0x1fd) (async)

1.527309614s ago: executing program 4 (id=40):
syz_emit_ethernet(0x10004, &(0x7f0000000080)=ANY=[@ANYRES64=0x0])
r0 = getpid()
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4)
setsockopt(r1, 0x0, 0x68, 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x94, 0xff, 0x1, 0x9}, {0x28, 0xc9, 0x2, 0x8}, {0x9b1e, 0x22, 0xf, 0x40207ff}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
mprotect(&(0x7f000066f000/0x1000)=nil, 0x1000, 0x2)
r3 = socket(0x2, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r4 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r3, 0x802069dd, &(0x7f0000000100))
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[])
kill(r0, 0x6)

1.509846024s ago: executing program 3 (id=41):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x165)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
flock(r1, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0)
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e)
ioctl$DIOCSETSTATUSIF(0xffffffffffffffff, 0xc0284414, 0x0)
execve(0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.509372258s ago: executing program 6 (id=42):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0)
ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000080)={0x5, 0x2, 0x8, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x2})
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r0, 0x1})

1.509023887s ago: executing program 5 (id=43):
r0 = socket$inet(0x2, 0x1, 0x82)
ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000))

1.504595478s ago: executing program 0 (id=44):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 64)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) (async, rerun: 64)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async)
open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100)
open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) (async)
mknod(0x0, 0x2000, 0x0) (async)
r1 = socket(0x2, 0x8002, 0x0)
ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000100)={{0x426, './file1\x00', [{[@v4=@broadcast], [0x253, 0x3], 0xfff, 0x16}, {[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@mcast1], [0x2, 0xa02], 0x1, 0x1a}], {{0x99, 0xa, 0xfe, 0x1}, 0xfffffff8, 0x6, 0x8, 0x9, 0x1, 0xc, 0xa}, {{0x6, 0x6, 0x91, 0x3}, 0x1, 0xffff, 0x6, 0x32c, 0x101, 0x3, 0x2}, @v4, 0x6, 0xffffffd6, 0x40, 0x6, 0x8, [[0x3, 0x2]], [[0x6, 0x2], [0x7, 0x3]], 0x3, [0xffffffff, 0x8], 0x1, 0xc, 0x2, 0x0, 0xd6, 0x81, 0x57, 0x1, 0x8, 0x6, 0xfe, 0xe7, "8520"}}) (async)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)

1.415768915s ago: executing program 2 (id=45):
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8000000000000001})
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000440)={0x101, 0xfffffffb})
open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x100)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, &(0x7f0000000100)='q', 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4)

1.415181265s ago: executing program 3 (id=46):
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@un=@file={0xcd, 0x1, './file0\x00'}, 0xa)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
r0 = socket$inet(0x2, 0x8003, 0x0)
setsockopt(r0, 0x0, 0x6b, 0x0, 0x0)

1.407912273s ago: executing program 0 (id=47):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x0, 0x9}, {0xa4, 0x9, 0x6, 0x400}, {0x9b1e, 0x2, 0xa, 0x4001b8}]})
syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[])
r1 = socket(0x18, 0x3, 0x0)
setsockopt(r1, 0x1000000029, 0x27, &(0x7f0000000000)="5ab7776a", 0x4)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x10002, 0x0)
socket$unix(0x1, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
readv(r2, &(0x7f0000000500)=[{0x0}], 0x1)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x60, 0x7, 0xb}, {0x1c, 0xb, 0xff, 0x7}, {0x9b1e, 0xfc, 0x9, 0x9f}]})
openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket(0x2, 0x2, 0x0)
r4 = socket(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4)
syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[])
pread(r1, &(0x7f0000000340)="a6157ede9dffa9c323488581e8380917a0c2bacca73b27a563e395aa2c1588f1d986dce8abc33c4909795887bb23484b01c79e9b0f3717e3749177d0d32caacdd0afa7bf84b886d9481cd3a37eba18f33ce3954a34eaf5ecdbe93f29e5794ff0a97ff29af713bce01c99272b4a40da5ae5552410aa1ac7f6ff7477c9d45d49ce27d7b6fe5ad5917e1b540615e9ee06b598904ce2d97500acb1155403c366a4ff8fd832b43132dfc687b384eca64651e504769ee7ac2954ba4caf807cee65fc0f7e4631843d4b6c726baabc4a126f2b7a3b39c35a2c477aac8e3696c5b783180e4fbfb445f71f49faf629a558e2", 0xed, 0x1000)
syz_emit_ethernet(0x10004, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa00000000000086dd60db834439c11600fe000000010000ff80d1440000200000fe80bd59307c7b34f87f615800000000000000000000000000aa4e20802000089078"])

1.407616649s ago: executing program 7 (id=48):
syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}})
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000000)={0xa2a4, 0x3})
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)

1.406682033s ago: executing program 5 (id=49):
sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x6, 0x4000, 0x0)
open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
closefrom(r0)
chroot(&(0x7f0000000080)='./file0\x00')
select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
sendto$unix(r1, &(0x7f00000000c0)="b10005016000009f0500060003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e203000000c257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c58904000000006d294a19ed993c85217c000000361b1257aea8c500002002fbffec2200008abfba090000001d89e40004070000008004200000000000000000000000000000eb0e7930c66fd0c5095709612c7e9b0a07e13078fccb4a42ac0f770d", 0xd7, 0x0, 0x0, 0xffffffffffffffce)

1.405710685s ago: executing program 3 (id=50):
r0 = socket(0x2, 0x1, 0x0)
shutdown(r0, 0x2)
sysctl$kern(&(0x7f0000000380)={0x1, 0x56}, 0x2, 0x0, 0x0, &(0x7f00000003c0), 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x9, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3ff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1fffffffe0000}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xd4af}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7f}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8000000000000001}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x1}, {&(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xc000000}], './bus/\x00', 0xcc5c, 0x9, 0x6, 0x0, [0xec, 0x73888df5, 0x2, 0xbc, 0x3c, 0x7fffffff, 0x8005, 0x9, 0x5d90867e, 0x5, 0xffffffff, 0x14a0, 0x3, 0x6, 0x80000000, 0x9, 0x2, 0x6, 0x2, 0x8, 0x3, 0xfffffff8, 0xef9, 0xed3, 0xe, 0x1, 0x7, 0x5, 0x1, 0x8, 0x0, 0x1, 0x7, 0xb720, 0x0, 0x1, 0x9e, 0x8, 0x7, 0x81, 0x4, 0x100, 0x200, 0xfff, 0x3, 0x9, 0x1, 0x7, 0xfffffffd, 0x3f, 0x9, 0xdee, 0x80000000, 0x4, 0x3, 0x10, 0x5, 0x6, 0x5, 0x3, 0x7, 0x6f, 0xfff, 0x4, 0xb, 0x8000, 0x0, 0x2, 0x10001, 0x4, 0xc, 0x2ef2, 0x8, 0x7, 0xb1e, 0x3, 0x5c2b, 0x2, 0x0, 0x8001, 0x28000, 0x2, 0x8000, 0x1, 0x0, 0x5, 0x8, 0x211e, 0xfffffea1, 0x2, 0x7, 0x80000001, 0x3, 0x2, 0x5, 0x4, 0x6, 0x4, 0xc, 0x6, 0x3658, 0x7fff, 0x58, 0x6, 0x8001, 0x80000001, 0x2, 0x7ff, 0x1, 0x8, 0x9, 0x0, 0x8, 0xffffffff, 0x24000, 0x8, 0x5, 0x9, 0x1, 0xd033, 0xff, 0xfffffffa, 0x5, 0x2, 0x7, 0x6, 0xfffffa56, 0x5, 0x8, 0xf3, 0x9, 0x7dc2473b, 0x38000, 0x6, 0x9, 0x5, 0xfff, 0xd, 0x0, 0x8, 0x3, 0x3, 0x4, 0xd, 0x7, 0x6, 0xf, 0xd81, 0x5, 0x5, 0x9, 0x2, 0x0, 0xffff, 0x10001, 0x4, 0x10, 0xc96, 0x6, 0x4, 0x2, 0x5238d5a8, 0x69de670b, 0x9, 0x3, 0x7fffffff, 0x44, 0x7, 0x3, 0x2, 0x5ecf, 0xff, 0x2b7, 0x602a, 0x5, 0x2a629666, 0x380, 0x401, 0x7fff, 0x0, 0xd590, 0x2, 0x8, 0x7fffffff, 0x5, 0x0, 0x8, 0xf4e, 0x28f, 0x81, 0x57de, 0xfff, 0xad9, 0x2025, 0x81, 0x6426, 0x7, 0x7, 0x200, 0x8, 0x0, 0x1, 0x400, 0x0, 0x7, 0x3, 0x200, 0x8000000, 0x8000, 0x7, 0x3ff, 0x8, 0xa53, 0x9c5, 0x8, 0xdbc6, 0xff, 0x1ff, 0x0, 0x101, 0x7, 0xfffffff9, 0x5, 0xfffffffe, 0x7, 0x8, 0xf4, 0x9, 0xa9, 0xffff, 0x6, 0x702f, 0xd, 0x2, 0x1, 0x0, 0xffffffb0, 0x3, 0xa0b, 0x9, 0x100, 0x1b707e85, 0xa, 0xffffff81, 0x9, 0x7, 0x4, 0x2, 0xe, 0x7fffffff, 0x92, 0x737, 0xa, 0x4, 0x10000, 0x7, 0x8, 0x4, 0x7fffffff, 0xfffffff7, 0x401, 0xc6, 0xffffffff, 0x3ff, 0x5, 0x2c, 0x358d, 0x1000, 0x0, 0x4, 0x5, 0x6, 0x4a30, 0x7, 0x4, 0xdc, 0x5, 0x3, 0xf, 0x7, 0x7, 0x4, 0x0, 0x1ff, 0xfffffff9, 0x5, 0x8, 0x4, 0x7, 0x3, 0x3, 0xee88fc38, 0x7, 0x1, 0x7f, 0x2, 0x9c, 0x5130, 0x800, 0x2, 0x8, 0x3, 0x5, 0x3, 0xdf, 0xa6, 0x6, 0x80000000, 0x5, 0x5, 0x6, 0x8001, 0x38000000, 0xf, 0x0, 0x0, 0x1000, 0x8, 0xe6, 0x3, 0x2, 0x788, 0x4, 0x9, 0x6, 0x0, 0x5, 0xc3e, 0x2, 0x1, 0x4, 0x10001, 0x2, 0xc, 0x0, 0x10, 0x8, 0x8149, 0x0, 0x800, 0x9, 0x400, 0x7, 0x3, 0x508c, 0x8, 0x2, 0xd, 0x9, 0x100, 0xffffffff, 0x2, 0x7, 0x9, 0x6, 0x3, 0x1, 0x1, 0x10, 0x6, 0x1ff, 0xffff, 0x1, 0x8, 0x10001, 0x6, 0x401, 0x101, 0x8, 0x1, 0x1, 0x1, 0x81, 0x8, 0x5, 0x400, 0x3, 0xfff, 0x0, 0xfdc8, 0x7ff, 0x3, 0x401, 0xfffffff8, 0x1000, 0x3, 0x0, 0x4, 0xbb, 0xfff, 0x7cf, 0x6, 0xd3, 0xfffffffa, 0x86, 0xfffffffb, 0x4, 0x5, 0x7, 0xa305, 0x546, 0x1, 0x2, 0x7, 0x8, 0x0, 0x6, 0x9, 0xfffffe00, 0x200, 0x6, 0x8, 0x5, 0x3, 0x10000, 0x800, 0x8, 0x4000, 0x1ff, 0x200, 0x81, 0x7, 0x1, 0xb55, 0x8, 0x40, 0x20000, 0x83ef, 0x7, 0x52a1, 0x200, 0x7c, 0x1b0e6139, 0x8db5, 0xcfb, 0x1, 0x10000, 0x5, 0x3f116965, 0x9, 0x3ff, 0xa, 0xba, 0x7, 0x7, 0x100, 0x2, 0x6, 0x0, 0x5, 0x3ff, 0xcd, 0xffff9aed, 0x7, 0x4526090d, 0x7, 0x8, 0x37, 0x8, 0x42da82b1, 0x1ff, 0x913, 0x1, 0x5, 0x2, 0x80000000, 0xfffffff9, 0x92, 0xab92, 0x8, 0x3, 0xfffffff7, 0x1, 0x101, 0x3, 0x1, 0x4a7, 0x2, 0x3, 0x7, 0x8, 0x2, 0x7, 0x690, 0x3, 0x9, 0x401, 0x3, 0x1000, 0x26, 0x5, 0x1, 0xc5d, 0x12, 0x5, 0x7ff, 0x9, 0xe, 0x9, 0x3, 0xef, 0xe5, 0xb, 0x9, 0x400, 0xfff, 0x101, 0x8000, 0x0, 0x3, 0x0, 0xf0]})
shutdown(r0, 0x1)
open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0)

1.327866097s ago: executing program 3 (id=51):
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x0)
pread(r0, &(0x7f0000000040)="9a", 0x1, 0x0)

1.327386819s ago: executing program 0 (id=52):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff)
fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff)
socket(0x2, 0x0, 0x0)
ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0})

1.326807871s ago: executing program 2 (id=53):
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="aa6d6500", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}})
chmod(0x0, 0x356)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x8, 0x3b, 0x0, @rand_addr="01984b0e23742b40c3fa3d76af5fc1fa", @mcast2, {[], @udp={{0x3, 0x0, 0x8}}}}}}})
r0 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0x6, "002400007f9831408e03a7a200020026", 0x3}, 0x1c)
r1 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c)

1.325685217s ago: executing program 1 (id=54):
sysctl$net_inet_ip(&(0x7f0000002500)={0x4, 0x2, 0x0, 0x21}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x4)

1.27073244s ago: executing program 7 (id=55):
sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0xf378ced0d1c1f59e}, 0x4, 0x0, 0x0, &(0x7f0000000080)="05000000", 0x4)
closefrom(0xffffffffffffffff)

1.269741529s ago: executing program 4 (id=56):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x4, 0x0, <r0=>0xffffffffffffffff})
mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
ktrace(0x0, 0xf53ef3a4610c7765, 0x40000d10, 0x0) (async)
ioctl$DIOCCLRSTATES(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={{0x7f, 0x3, 0x1}, 0x1a, '\x00', 0x3, {@any={'\x00', 0x0, 0x6, 0x1}, [0x1, 0x3], 0xe, 0x3, 0x6}, {@table={'./file0\x00', 0x0, 0x3, 0x7}, [0x6, 0x4], 0x0, 0x7, 0xfffa}, './file0\x00', './file0\x00', 0x98}) (async)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x40000, 0x0) (async, rerun: 32)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x710, 0x7e) (async, rerun: 32)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async)
r4 = socket(0x6, 0x4, 0x8) (async, rerun: 32)
chmod(&(0x7f0000000180)='./file0\x00', 0x30) (async, rerun: 32)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x2, &(0x7f0000000a40), &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async)
kill(0x0, 0x15) (async)
fstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000140)=0xc)
setresgid(r8, r8, 0x0)
r9 = getpgid(0xffffffffffffffff) (async)
fstat(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000), 0x4) (async)
sendmsg$unix(r2, &(0x7f0000000a00)={&(0x7f0000000200)=@file={0x3, 0x1, './file0\x00'}, 0xa, &(0x7f0000000780)=[{&(0x7f0000000280)="1b98253f7d5af45a93e1c9c9a8a61b762e5da25a296b95ebb1b726397fb829bfaaff38a88d5209e1e72faa8eea067c2d2e06739c3b46e551a60f22e63ba801134a02b0132fe6ec05606f35b99cf22f65ba49d0586f7b6bfa6aa64891f9d8e49518cb7759024d71d486b0dbfe585e87ec4ecc2c25e7cfe569fb4f90c0544c452c30022af0e836e4d74a6d533332f6758c8e979e5da5b2a5e9c9ec393f8d1b4d3a7489bcd4d09b5432bac793d758a66530b630131975405d99b631700a0fc1e8ba62c2af5a802523334ac886a663d468524df4f1923693132712a1f31fefd5ec578b1be78cccfa4f6e69", 0xe9}, {&(0x7f0000000380)="2e494d0016953900a4a16399c7a7b5d7a531b6d655a3048dc6329f7c990598f692f932f33c503a667ae4a3896cc74972bbd5f29fa5634600474d25033df15944fd28732f9b34e4921f0187f0902ca4fe8c19bcafc3c3a031e1654e8ec81806fabb221f521cd346472123ad9ce675ea0865d4fae5fda4f8ac13a9904d41ace39563d593a273e6e9efc76f9f37358aed406ac97fccc46adaea10f7ea370785411768632868a309f9945fdcbfc0d47ae474d1feca9dfb3cecf0849657c4e4a72fa0ad3990a4016e92d2e9db113fb5", 0xcd}, {&(0x7f00000004c0)="013989085c2fd8b144c9541a9fb19f0557666c814d0f67e4d587033e86d2328b9a9e8a468da1cfbf64d702e6beb669e35c27f50399db5e8e8273041deec4e64fc9098bcb3af0797e6307c1f5864da01f6943e9936d8b3b7085b02eb0cdf677f009691fbb1aa554229218886a0c7afe936f8e2ea3add03ee6bd9605fe13e5bcd4992a76da7135c11be591a7d641952bfb81af2818c672e9285237012a61454455fd420c3aeb4212c3a1167e407daf3f93af804a2842a0ff2218a895410468e6624d8c943ea1ab8f7642d1518767df19d747e6f7aed338061630f5489047296c7cbf6976726a531d297a4ce21f2f0a3380660164", 0xf3}, {&(0x7f00000005c0)="945c6cf091c26a2d39287992cea86f79c895205ab097ef91c77f528926d8d58855c0812a3350693072f4519d939d837800501bb95f4eabd90565810f2a19de2cff747109c1ccd2f7f5f6feaa616a8c55b02f29d7a6bee5829c3ff52e3942fb4d0aefbfc0a07726f657b0e152fd4b551de6bb96a8e47978539cdbc471bc6caf0b388ab5a63f9a0cff9aed685be5b9bf945c0be10c056f629fb2eb1ee62a8c70ab3665bc482a6e7ef66dd12c37867ebbcbffaf5bf2b39a30fa3cd74f3036488a26a88da8459feb08c622fa68a1", 0xcc}, {&(0x7f00000006c0)="89a0476f3dacd2325eade38bc1bc2f73863eae78cac1e1b40bdea5f10396ba71736ae77c7f8310a94d23289fdfbb9345b09b3e4c28e8c8951a12985561e66128e078a705fd3dd26e4ec29cfe0c34428f58699005bf92e521dcd13149d255eb42b07365b86b613ad6ab48da577a0536a77d0c602cda7934c8904ed7644cad2655cb1c830bc9cda6740298a32f", 0x8c}], 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="20000000fffffe0001000000", @ANYRES32=0xffffffffffffff9c, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYBLOB="20000000ffff000001000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x70, 0x404}, 0xc) (async)
r11 = socket(0x2, 0x2, 0x0)
connect$inet(r11, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) (async)
connect$inet(r4, &(0x7f0000000080)={0x10, 0x2, 0x2, 0x7}, 0x10)
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40002000, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aab1aaaaaaaa000000440008110000000000fe80000000000000000000e2ffffffa94e204e200008907800"/59])
sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)

1.268846688s ago: executing program 5 (id=57):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xcf0c)
syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x34, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8200, 0x0, 0xfffc, {[@nop, @nop, @timestamp={0x8, 0xa, 0x7ff, 0x6}]}}}}}}})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xcf0c) (async)
syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x34, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8200, 0x0, 0xfffc, {[@nop, @nop, @timestamp={0x8, 0xa, 0x7ff, 0x6}]}}}}}}}) (async)

1.268287061s ago: executing program 6 (id=58):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) (async)
setresgid(0x0, 0x0, 0xffffffffffffffff)

1.078281628s ago: executing program 3 (id=59):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil)
shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x104, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x3000)
madvise(&(0x7f0000645000/0x2000)=nil, 0x2000, 0x2)
shmat(r2, &(0x7f00007a1000/0x3000)=nil, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
shmget$private(0x0, 0x2000, 0xea35650b6fbebe9f, &(0x7f000009f000/0x2000)=nil)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000100)={0x3, 0x6})
r3 = socket$unix(0x1, 0x5, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000040)={{0x1c, 0x18, 0x2, 0x400, "70222ed9e549064a7d37cfef3db3eaf9", 0x4}, {0x1c, 0x18, 0x1, 0xdb05, "83d5dc2fecb573ea19b7e6d0d39f4e9b", 0x9}, 0x7, [0x6, 0x6, 0x3ff, 0xffffffff, 0x0, 0x4083, 0x2, 0x20]}, 0x5c)
fchdir(r3)

1.077661585s ago: executing program 6 (id=60):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0)
ioctl$TIOCEXCL(r1, 0x2000740d)
readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1)
execve(0x0, 0x0, 0x0)
socket$inet(0x2, 0x8000, 0x3)
ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000100)=0x4)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x433b1f546693ce94, r0, 0x8001)

1.075865862s ago: executing program 0 (id=61):
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000200)="b100050300000400000008b307000000331c13fecea10500fef96ec0c72fd3357ae302007804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a42102000000720fd18b81ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba05d50e0008e371a3f8343712051eeab71d1889e0000407000000001300000000000000000000000050ae6a22471a82208e334e3dc8872e2fe9c5b5c6272e20c4dcfa10b1884face852825d1f4bcf49c461f3b2e4558ebb2f635ba4e4f81b1584b6e3bac02b81ef196789f52ea13c50c01031f0819dc4dd66a57789e51aba82b8e4cc7f1a89e129a7bc461850ac15b982f9fd39795b3dcb5ad574878f0032de15aa30755ba58a02dbcaba83ac351b38cf53911d18d1125891d64d22e04fd674478f85a7051a69a69f92c4a1aa9a41c8c5fde0a47e7b2330eafbfc8f0bd65da9857bf0c1232398daecb00f0d562007954e5611eb735e13c7112ece7eaf0b492adfaa576c3735", 0x186, 0x40e, 0x0, 0x0)

1.073951651s ago: executing program 5 (id=62):
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x1, 0x4, 0x100000000, 0xc8}], 0x1, 0x0, 0x80000000, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x1, 0x4, 0x100000000, 0xc8}], 0x1, 0x0, 0x80000000, 0x0)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000002}})
socket(0x10, 0x3, 0x3) (async)
socket(0x10, 0x3, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x107777, 0x82, 0x1, 0xb217, "bb080006020900d91050080000000f00", 0x2, 0x80006})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') (async)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00')
semget(0x0, 0x1, 0x281) (async)
r0 = semget(0x0, 0x1, 0x281)
openat$dri(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x10000, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x1) (async)
semop(r0, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000040)=[0x40])
semop(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="48d21768c0de1898f96b4dbd5cf012e0b8a9d83cdfc72471dac2fe7fb98d72ceb883c1ef0fde545fa315d36353ced24369f6d0c7f7ee41d54ea70ef9", 0x3c)
r1 = socket(0x18, 0x3, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x21)
ioctl$WSMUXIO_LIST_DEVICES(r2, 0xc1045763, &(0x7f0000000280)={0xfffffe59, [{0x1, 0x80000000}, {0x2, 0xfff}, {0x1, 0x6}, {0x0, 0x42}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x7fff}, {0x1, 0x2}, {0x3, 0x401}, {0x3, 0x6}, {0x3, 0xfffffc01}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x7ff}, {0x1, 0x10}, {0x1, 0x6}, {0x1, 0x8}, {0x3}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0xffffffff}, {0x2, 0x7}, {0x3, 0x1ff}, {0x3, 0x17}, {0x3, 0x101}, {0x1, 0xffffffd5}, {0x2, 0x10000}, {0x3, 0xfffffff1}, {0x2, 0xffffffc5}, {0x3, 0x5}, {0x1, 0x4}, {0x2}]})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

1.073770626s ago: executing program 1 (id=63):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(r0, 0x4004575c, &(0x7f0000000080))
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200)
sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x80, 0x1fa)

1.073382772s ago: executing program 4 (id=64):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
fchown(r0, 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x2000740e)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
select(0x40, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x1}, &(0x7f00000024c0)={0x8, 0x20008000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x40, 0x9, 0xf7, 0x10001}, {0x9b1e, 0xff, 0xf4, 0x4000800}]})
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
ioctl$BIOCPROMISC(r1, 0x20004269)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, &(0x7f0000000140)="9b3be677adf51e30a62cf8eed1e6d3ef34f19c91c8a17114a2bdf2835065494bceed7d1e267add55a4bce0ed517f9f301a3d8004ae5ffd555015a6f03062940cec07fd37f91ad7690e3e562510cab29404005dd8ac6828edca78cdca50854b590535bdf12f008ee81c876a94d7d8f4d88b3ec172c35a0d189199a4024bfe95990efcb19ac2b79c4bff51ec32a9186b23751c8a64742f", &(0x7f0000000200)=0x96, &(0x7f0000000240)="7ab3cf00b6c45ff5b928e839451220e3a250a219ceac0ed747662dd355a73ba6b19944f037622c34326ef38441aef5847f94488a8bf7116c0ef118760408de0374d69a344be0d5ef5a239bdeb3982a0b293fda027b3f3be017a34868b92c21af63a77b63425f8ac0c8ba197ecc396fbfada9804fced303c6c6a38fe495e2bda49949f966e2364d883cd43d68fdd2", 0x8e)
syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000004d0086dd60db834439c11600fe000000020000ff80d1440000200000fe8000000000000000000000000000aa4e204e2000089478"])

881.471µs ago: executing program 0 (id=65):
open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x2)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x100, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0xf0fefaacf954c130)
setresgid(0x0, r1, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003136, 0xffffffffffffffff)
setrlimit(0x1, &(0x7f0000000000))
setrlimit(0x2, &(0x7f0000000080)={0x60000000, 0x73ee1610})
clock_settime(0x100000000000000, &(0x7f0000000000)={0xf61eccfe, 0x10})

0s ago: executing program 4 (id=66):
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x20007461)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x20007461)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0x8}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000003}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000371000/0x1000)=nil, 0xf}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1ff}], './file0\x00', 0x8, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x0, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0xb27d, 0x0, 0x2, 0x2, 0x0, 0x0, 0x20000, 0x7, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0xfffffffb, 0x0, 0x6, 0xffc, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x200, 0x3, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffff6, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x0, 0x0, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x2000000, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfdf7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4000000, 0x1, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x644f, 0x0, 0x8, 0x7a1, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x7, 0x4, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0xffffffff, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x403, 0x0, 0x5]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
sysctl$hw(&(0x7f0000000280)={0x6, 0x13}, 0x2, &(0x7f0000000000)="0000e65bc39e76ec", &(0x7f0000000240)=0x8, 0x0, 0x0)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x4}, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffa0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
fchdir(r0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000001580)={&(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6, &(0x7f0000001480)='./file1\x00', 0x8})
r1 = kqueue()
kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0)
ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x2})
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, &(0x7f0000000100)={0x1, 0x8})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffdff86dd6036ea1700083afffe8000000000000000000000aaff5e14aa25c205000000d291da8fde0a0a074785"])
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket(0x2, 0x1, 0x0)
ioctl$DIOCRGETTABLES(r2, 0xc450443f, &(0x7f0000000f00)={{'./file0\x00', './file0\x00', 0x6a, 0x5}, &(0x7f0000000ac0)=[{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file1\x00', 0x40, 0xa}], 0xb3, 0x1, 0x1, 0xe4f48d6, 0x5, 0x7, 0x40, 0x6})
ioctl$FIONREAD(r4, 0x80206916, &(0x7f00000001c0))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts.
uvm_fault(0xfffff4006fa3b7a8, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      sys_shmat+0x453:        movq    0(%r15),%rdi
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 381683  33688      0           0          0    1  syz-executor
*390254   6494      0           0  0x4000000    0K syz-executor
sys_shmat(ffff80003c402fb8,ffff800038fa3140,ffff800038fa3090) at sys_shmat+0x453
syscall(ffff800038fa3140) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x727cd37d9b0, count: 12
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffff4006fa3b7a8, 0x0, 0, 1) -> e
ddb{0}> trace
sys_shmat(ffff80003c402fb8,ffff800038fa3140,ffff800038fa3090) at sys_shmat+0x453
syscall(ffff800038fa3140) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x727cd37d9b0, count: -3
ddb{0}> show registers
rdi               0xffff80002f780000
rsi                            0x20d
rbp               0xffff800038fa3060
rbx               0xfffff40064aa7e70
rdx               0xffff80002f780000
rcx                              0x1
rax                              0x1
r8                             0x180
r9                0xfffff400097fd478
r10               0x89e9cf813df43098
r11               0x35369beea4f64106
r12               0xffff80003c402fb8
r13               0xffff800001605010
r14                              0x3
r15                                0
rip               0xffffffff82007213    sys_shmat+0x453
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff800038fa2fd0
ss                              0x10
sys_shmat+0x453:        movq    0(%r15),%rdi
ddb{0}> show proc
PROC (syz-executor) tid=390254 pid=6494 tcnt=3 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=76, usrpri=76, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c403a18,0xffff80003c4022d0
    process=0xffff80002a37c9b8 user=0xffff800038f9e000, vmspace=0xfffff4006fa3b7a8
    estcpu=26, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 47118   62215  52078      0  2           0                syz-executor
  7306  425101  54558      0  3        0x80  nanoslp       syz-executor
  7306  483724  54558      0  3   0x4000000  inode         syz-executor
  7306  269741  54558      0  2   0x4000000                syz-executor
 33688  381683  83962      0  7           0                syz-executor
 33688  318311  83962      0  2   0x4000000                syz-executor
 33688  291075  83962      0  3   0x4000080  fsleep        syz-executor
 33688  462177  83962      0  2   0x4000000                syz-executor
 68542  429897  46102      0  2           0                syz-executor
 68542  339859  46102      0  3   0x4000080  fsleep        syz-executor
  6494   90697  75102      0  2           0                syz-executor
  6494   38692  75102      0  2   0x4000000                syz-executor
* 6494  390254  75102      0  7   0x4000000                syz-executor
 52332  437217  93639      0  2           0                syz-executor
 52332   46070  93639      0  3   0x4000080  fsleep        syz-executor
 93795  391501  71209      0  2         0x3                syz-executor
 46102  292320  71209      0  2         0x3                syz-executor
 83962  246032  71209      0  2         0x3                syz-executor
 15596  296523  71209      0  2         0x2                syz-executor
 75102  215651  71209      0  2         0x3                syz-executor
 93639  379753  71209      0  2         0x3                syz-executor
 54558  214596  71209      0  2         0x3                syz-executor
 52078   22617  71209      0  2         0x3                syz-executor
 71209  337087  57246      0  3        0x82  kqread        syz-executor
 57246  222382  46820      0  3    0x10008a  sigsusp       ksh
 46820  261241  36433      0  3        0x98  kqread        sshd-session
 36433  122379  70061      0  3        0x92  kqread        sshd-session
 24612  243741      1      0  3    0x100083  ttyin         getty
 70061   71926      1      0  3        0x88  kqread        sshd
 29841  361956  96668     74  3   0x1100092  bpf           pflogd
 96668  513587      1      0  3        0x80  sbwait        pflogd
 84802  366450  60302     73  3   0x1100090  kqread        syslogd
 60302  517091      1      0  3    0x100082  sbwait        syslogd
 75124  392275      1      0  3    0x100080  kqread        resolvd
 16772   77278  15153     77  3    0x100092  kqread        dhcpleased
 63094   89363  15153     77  3    0x100092  kqread        dhcpleased
 15153    3570      1      0  3        0x80  kqread        dhcpleased
 20336  424628      0      0  3     0x14200  bored         smr
 22986  307959      0      0  2     0x14200                zerothread
  8934   86348      0      0  3     0x14200  aiodoned      aiodoned
 51899  240977      0      0  3     0x14200  syncer        update
 48665  491387      0      0  3     0x14200  cleaner       cleaner
 89681   12185      0      0  3     0x14200  reaper        reaper
 10676  207139      0      0  3     0x14200  pgdaemon      pagedaemon
 83982  242531      0      0  3     0x14200  bored         viomb
 28000  242942      0      0  3  0x40014200  acpi0         acpi0
 13633  145206      0      0  3  0x40014200                idle1
 53526  422996      0      0  3     0x14200  bored         softnet1
 74939  363691      0      0  3     0x14200  bored         softnet0
 63863  214745      0      0  3     0x14200  bored         systqmp
 23733  375168      0      0  3     0x14200  bored         systq
 87127  337467      0      0  3     0x14200  tmoslp        softclockmp
 74340  155227      0      0  3  0x40014200  tmoslp        softclock
 12927  173871      0      0  3  0x40014200                idle0
     1  511666      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 7306 (syz-executor) thread 0xffff8000397b8fb0 (269741)
exclusive rrwlock inode r = 0 (0xfffff4006b7c5a08)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ufs_lookup+0x16bd
#7  VOP_LOOKUP+0x6e
#8  vfs_lookup+0x963
#9  namei+0x7c5
#10 domknodat+0xb4
#11 syscall+0xb17
#12 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffff4006b7c5568)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vfs_lookup+0x12b
#6  namei+0x7c5
#7  domknodat+0xb4
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 33688 (syz-executor) thread 0xffff80003c402a88 (318311)
exclusive rwlock fdlock r = 0 (0xffff8000397aacd0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  sys_socket+0x203
#3  syscall+0xbd4
#4  Xsyscall+0x128
Process 6494 (syz-executor) thread 0xffff80003c402fb8 (390254)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a04e80)
#0  witness_lock+0x5f1
#1  __mp_acquire_count+0x58
#2  malloc+0xe3
#3  sys_shmat+0x9f
#4  syscall+0xb17
#5  Xsyscall+0x128
Process 52332 (syz-executor) thread 0xffff8000397b94e0 (437217)
exclusive rwlock vmmaplk r = 0 (0xfffff4006cd5ce70)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  vm_map_lock_ln+0x12e
#3  uvm_map_protect+0xe0
#4  sys_mprotect+0x351
#5  syscall+0xbd4
#6  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11058  12095K   12217K 166960K     12203        0
            pcb    18     12K      12K 166960K        23        0
         rtable   239      6K       7K 166960K       361        0
             pf    34     17K      21K 166960K        53        0
         ifaddr    43      7K       7K 166960K        46        0
        ifgroup    55      2K       2K 166960K        57        0
         sysctl     1      1K       9K 166960K         6        0
       counters    70     37K      37K 166960K        72        0
       ioctlops     0      0K       4K 166960K      1556        0
            iov     0      0K      12K 166960K         2        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1294     81K      82K 166960K      1399        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       5K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     4      0K       0K 166960K         5        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    16     57K      89K 166960K       195        0
           proc    73    131K     180K 166960K       556        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         6        0
       in_multi    99      7K       7K 166960K       101        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    55    254K     254K 166960K        55        0
           exec     0      0K       1K 166960K       399        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   224    151K     160K 166960K      3806        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    41     82K     101K 166960K      1391        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP    12      0K       2K 166960K        29        0
           temp    36   9114K    9178K 166960K      6988        0
         kqueue    13     20K      27K 166960K        37        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       38    0       35     1     0     1     1     0     8    0
rtentry    176      112    0        1     6     0     6     6     0     8    0
unpcb      144      115    0       98     4     0     4     4     0     8    3
syncache   336        5    0        5     2     1     1     1     0     8    1
tcpcb      736       17    0       13     1     0     1     1     0     8    0
arp        136       18    0        0     1     0     1     1     0     8    0
inpcb      328      158    0      150     7     0     7     7     0     8    6
nd6        152       25    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192       1    0        1     1     0     1     1     0     8    1
pffrag     232        2    0        1     1     0     1     1     0   482    0
pffrnode    88        2    0        1     1     0     1     1     0     8    0
pffrent     40        4    0        3     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       26    0        0     1     0     1     1     0     8    0
pfstkey    128       26    0        0     1     0     1     1     0     8    0
pfstate    448       26    0        0     3     0     3     3     0     8    0
pfrule     1360      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      454    0        0    29     0    29    29     0     8    0
art_table   40      455    0        0     5     0     5     5     0     8    0
art_node    32      112    0       11     1     0     1     1     0     8    0
semapl      72        3    0        1     1     0     1     1     0     8    0
shmpl      112        1    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1665    0      196    93     0    93    93     0     8    0
ffsino     296     1665    0      196   114     0   114   114     0     8    0
nchpl      144     1950    0      252    64     0    64    64     0     8    0
vnodes     216     1777    0        0    99     0    99    99     0     8    0
namei      1024    6348    0     6345     3     2     1     2     0     8    0
percpumem   16       51    0        1     1     0     1     1     0     8    0
kstatmem   264       29    0        2     2     0     2     2     0     8    0
scxspl     216     6797    0     6797     4     3     1     3     1     8    1
plimitpl   152       33    0       16     1     0     1     1     0     8    0
sigapl     424      524    0      478     7     1     6     7     0     8    0
knotepl    120      103    0        0     4     0     4     4     0     8    0
kqueuepl   224       40    0       31     1     0     1     1     0     8    0
pipepl     344      134    0      106     3     0     3     3     0     8    0
fdescpl    528      508    0      478     3     0     3     3     0     8    0
filepl     160     2146    0     1931    13     0    13    13     0     8    3
lockfpl    104      106    0      104     1     0     1     1     0     8    0
lockfspl    48       49    0       47     1     0     1     1     0     8    0
sessionpl  144       24    0       15     1     0     1     1     0     8    0
pgrppl      48       32    0       15     1     0     1     1     0     8    0
ucredpl    104      149    0      135     1     0     1     1     0     8    0
zombiepl   144      519    0      519     1     0     1     1     0     8    1
processpl  1232     524    0      478     5     1     4     5     0     8    0
procpl     664      641    0      586     6     0     6     6     0     8    0
sockpl     752      315    0      287    11     1    10    10     0     8    7
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl16k     16384      5    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k128   9344       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     119    0        0    15     0    15    15     0     8    0
mcl2k      2048      18    0        0     3     0     3     3     0     8    0
mtagpl      96        1    0        0     1     0     1     1     0     8    0
mbufpl     256      145    0        0    10     0    10    10     0     8    0
bufpl      272     2490    0      106   160     1   159   159     0     8    0
anonpl      32     5376    0        0    44     0    44    44     0   247    0
amapchunkpl 152   10675    0    10230    32     0    32    32     0   158   12
amappl16   200     1842    0     1818     7     4     3     5     0     8    0
amappl15   192        6    0        5     1     0     1     1     0     8    0
amappl14   184      442    0      441     1     0     1     1     0     8    0
amappl13   176      127    0      115     1     0     1     1     0     8    0
amappl12   168      766    0      737     2     0     2     2     0     8    0
amappl11   160        4    0        4     1     1     0     1     0     8    0
amappl10   152       65    0       51     1     0     1     1     0     8    0
amappl9    144      295    0      294     1     0     1     1     0     8    0
amappl8    136      106    0      104     1     0     1     1     0     8    0
amappl7    128      149    0      136     1     0     1     1     0     8    0
amappl6    120      175    0      174     1     0     1     1     0     8    0
amappl5    112      104    0       94     1     0     1     1     0     8    0
amappl4    104      302    0      283     1     0     1     1     0     8    0
amappl3     96     1905    0     1801     4     0     4     4     0     8    0
amappl2     88      559    0      501     2     0     2     2     0     8    0
amappl1     80    10816    0    10206    14     0    14    14     0     8    1
amappl      88     3043    0     2890     5     0     5     5     0    92    1
uvmvnodes   80      103    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        3    0        0     1     0     1     1     0     8    0
uaddrrnd    24      508    0      478     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      508    0      478     1     0     1     1     0     8    0
vmmpekpl   168     6220    0     6182     2     0     2     2     0     8    0
vmmpepl    168    41926    0    40079    90     3    87    87     0   357    1
vmsppl     488      507    0      478     6     1     5     5     0     8    1
rwobjpl     80    15477    0    14455    24     0    24    24     0     8    1
pdppl      4096    1023    0      956   107    36    71    83     0     8    4
pvpl        32    11330    0        0    92     0    92    92     0   265    0
pmappl     256      507    0      478     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      441    0       43    12     0    12    12     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
sys_shmat(ffff80003c402fb8,ffff800038fa3140,ffff800038fa3090) at sys_shmat+0x453
syscall(ffff800038fa3140) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x727cd37d9b0, count: -3
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7e919c90d070, count: 12
ddb{1}> trace
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7e919c90d070, count: -3