last executing test programs:

6.606919315s ago: executing program 4 (id=159):
rename(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(0x0, 0x0) (async)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240), 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, &(0x7f0000000100), 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async, rerun: 32)
ioctl$BIOCGETIF(0xffffffffffffffff, 0x4020426b, &(0x7f0000000200)={""/16, @ifru_broadaddr=@un=@abs}) (async, rerun: 32)
ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047476, &(0x7f0000000000)=0x8) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
sendto(r0, &(0x7f0000000240)="164997b1ae45a5f7727153b8bc970a9ca91579335468cb32e1b836fdb567a93e046c11bcd0425f48cc5839f7b2b9fa699324f586fe8791e5c5996ce8e8c834ad6c30ca06e12f20c1897367264d5f78660ddc661b978e69806147cdf3c7cdb3cf893a4a1bc99b87acb34d22787e3a3564ef509fa4e5060a37c1aa9ab67077e9db2c5f284b95d5686d30efd750f697b5b954b964b0eabf47de2c8f54d05935dadd930b0358ed18f3eec379a644efdc69cdf9bbd4c1a65a2cd368943e817c481e5d95caceb727145f40ed92a2834ded50d510f1d657f84faa43a531343fbff0cc27beae37cc1e1f978cda64ba519290", 0xee, 0x40d, &(0x7f0000000100)=@in6={0x18, 0x2, 0x10001, 0x6}, 0xc) (async)
kevent(r1, 0x0, 0x57e4, &(0x7f0000000840)=[{{r1}, 0xfffffffffffffffd, 0x97, 0x2, 0x851, 0x8}, {{r1}, 0xfffffffffffffffc, 0x83, 0x1, 0x2, 0xff}, {{}, 0xfffffffffffffffc, 0x80, 0x20, 0x6, 0xc9}, {{r1}, 0xfffffffffffffff9, 0xcd, 0x10, 0xcb1, 0x4}], 0x41a0, 0x0)
ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "ee000000000023000000000000001400", 0x7ffe, 0x8})

6.601290559s ago: executing program 4 (id=160):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x7f299811)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0))
r1 = shmget$private(0x0, 0x4000, 0x101, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x3000)

6.600792667s ago: executing program 4 (id=162):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
r1 = socket(0x2, 0x1, 0x0) (async)
r2 = kqueue() (async)
r3 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
kevent(r2, &(0x7f0000000040)=[{{r3}, 0xfffffffffffffffc, 0x7, 0x2, 0x0, 0x2}], 0x7fffffff, 0x0, 0x0, 0x0) (async)
kevent(r2, 0x0, 0x0, 0x0, 0x4, 0x0) (async)
setreuid(0x0, 0xee01)
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd01)
setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x2) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r4)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="ea5baf2cce8f360213ec341cd2dc7a092efdcab4170459dde31f89474826372fd04e27eacb015ce5859ec1e172e7cb64917acddf81544a2586ccf2e1394c8c6b6351e2fc91b1a80d700adb16edc8b61e46f04d1a7797caddd926f318c3dd0e8a2256ab4aa387d606345e6e13f002ec", 0x6f}], 0x1) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r5 = socket(0x11, 0x3, 0x0)
sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
r6 = socket(0x2, 0x2, 0x0)
bind(r6, &(0x7f0000000000), 0x10) (async)
connect$unix(r6, &(0x7f0000000000), 0x10)
sendto$inet(r6, 0x0, 0x39, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
r7 = socket(0x2, 0x4001, 0x0)
r8 = dup(r7)
fcntl$dupfd(r8, 0x2, 0xffffffffffffffff)

6.545491239s ago: executing program 4 (id=164):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async)
r1 = getuid() (async)
r2 = getuid()
setreuid(0xee00, r2) (async)
setreuid(r1, r2) (async)
fcntl$getown(r0, 0x5) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async, rerun: 32)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) (async, rerun: 32)
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000340)={0xff, 0x2, 0x4, 0xfff, "86d3724bbc983c00120000000700", 0x10, 0x7}) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="000400d949a5f0450c22afbe70eebb2f3400000000e5ffffffffffffffe40f86775d05dfc9998a88e72f535a18f8d5ec344d83388b", 0x35}], 0x1) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e3471ac0058bc5a9146dec3708200006a177900000000000000000000a41387469da2d251e46b64b2e60e40856539fca89700033aa3dedaf6c4e21991e18909d153a60373ed", &(0x7f0000000080)=0x48, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
r6 = syz_open_pts()
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000100)={0x27ffb, 0x1, 0xffff, 0x21d8b788, "102e087bf533e2942b6e3ceb00", 0x5, 0x4}) (async)
write(r6, &(0x7f00000000c0)="e28ccd117c341724ec156aa308c2827425f49a1c4b4281b5006415a11099e6538f2e60af13691249d65c374efdd952acca256350026232d4feabef6f9e8fa8da7d10ae4a3aab0bc6c38db8c7c7bff7156b56752a4276c3f1611dbad4a0f6da69dde25f6330738b8a280186585e8812b57ddbecc5e86f3859b1441cc1", 0x7c)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r7, &(0x7f0000000040)=@file={0xd19450564dee018c, './bus\x00'}, 0x8) (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x212) (async)
setuid(0xffffffffffffffff)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') (async)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async)
write(r5, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)
ioctl$TIOCSETA(r0, 0x0, 0x0)

4.629477971s ago: executing program 6 (id=215):
r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
fchmodat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x4)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)="c5eabfed43b76adfe26b82a6e201dc9271000000000000b6396d296b83e7bd94", 0x20}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee72e2feb4363843ad056b0f079f8697b7b983c0359778d9c06a9803d7ed0a4a760bf7ca8ecd78721f56840f", &(0x7f0000000080)=0x2c, 0x0, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r4 = socket(0x2, 0x2, 0x0)
poll(&(0x7f0000000000)=[{r4, 0xb}], 0x1, 0xa4a)
close(r4)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="000400d949a5f0450c22afbe70eebb2f3400000000e5ffffffffffffffe40f86775d05dfc9998a88", 0x28}], 0x1)
sysctl$kern(&(0x7f0000000080)={0x1, 0x3b}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r5, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)
ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, 0x0)
sendto$unix(r2, &(0x7f00000001c0)="c11161031b72192d98d0ae710ac1ec2ee0acefa931aa38065fe54259bbd8814a89da49724a644f5f32b08b9c17e0aeb24b318a9e9b2729ef1784d249505dd879d7c2676dbb4249be654282efa94b9df31184f5553db834833fa9e56a6fe16002e83d1a197f", 0x65, 0x402, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
r6 = socket(0x11, 0x3, 0x0)
sendto$unix(r6, &(0x7f0000000300)="b1000503000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba353e537e2ba37f50b60900000008e371a3f8343712051eeab71d1889e000", 0xb1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[])

2.429322321s ago: executing program 6 (id=222):
r0 = socket(0x2, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FIOASYNC(r2, 0x8004667d, 0xfffffffffffffffe)
r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
fcntl$lock(r3, 0x8, &(0x7f0000000280)={0x3, 0x0, 0x3b5, 0x1000381210089})
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x2f2, 0x0)
setrlimit(0x0, &(0x7f0000000040)={0x5469, 0x4})
execve(0x0, 0x0, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0))
r5 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r5, 0x8020690c, &(0x7f00000001c0))

2.058815092s ago: executing program 7 (id=234):
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c2", 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x8000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
ioctl$FIONREAD(r0, 0x80286987, &(0x7f00000001c0))

2.058392352s ago: executing program 7 (id=235):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee72e2feb4363843ad056b0f079f8697b7b983c0359778d9c06a9803d7ed0a4a760bf7ca8ecd78721f56840f2b47ae4b3a5180436fe7562a449721cf58f027e2330d527a71fd612ce2968f6771d56cb593ea26ee3879eff27ad8c355e30b85818181326ae464a0f504cda71f9e4e05aa7b61921f7e43eb8bd67371744d904598", &(0x7f0000000080)=0x80, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)
select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
kevent(0xffffffffffffffff, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10005}, {{}, 0xfffffffffffffffe, 0xc4, 0x20000000, 0x8000000000000001, 0x46ad}, {{}, 0x7ffffffffffffffc, 0x1, 0xf0000000, 0x1, 0x8}, {{}, 0xfffffffffffffffe, 0x20, 0x2, 0x80000001, 0xc3d}, {{}, 0xfffffffffffffffb, 0x40, 0x40000000, 0x9}, {{}, 0xfffffffffffffffa, 0x6, 0x20, 0xff, 0x10000}, {{}, 0xfffffffffffffffd, 0x6a, 0x10, 0x2, 0xfff}, {{}, 0xffffffffffffffff, 0x28, 0x8, 0x100, 0xfffffffffffffffb}], 0xff, 0x0)
sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0)
ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2)
close(r4)

2.046690627s ago: executing program 7 (id=239):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xd6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x3}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="d3d4830c43066adfe26b91a6e201dca08600000006000000396d296b83e7bd94be90d61ff4f1c2d6bce8b867a170ba2dc1ba9c8933209ab674f2b846357e01184c996e76e46b684ddd73dccedcaf1329d422cf6d130a11a9358f81af7f22c15554bfa91d3c09d0aeb774918b", 0x6c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000840)="a612", &(0x7f0000000080)=0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, 0x0, 0x0)

2.013339766s ago: executing program 7 (id=243):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xff12, 0x9, 0x2, 0x2000002}, {0xb1, 0x10, 0xe4, 0x3}, {0x6, 0xa, 0x83, 0xc000400f}]})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5eabfed43b76adfe26b82a6e201dca071000000000000b6396d296b83e7bd94be90d61ff4f1c2d6bc60766a5e90aaf20b47415607", 0x35}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000840)="a612", &(0x7f0000000080)=0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x7c, 0x2, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0xb}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="000400d949a5f0450c22afbe70eebb2f3400000000e5ffffffffffffffe40f86775d05df", 0x24}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000d860", &(0x7f0000000080)=0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket(0x18, 0x2, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd62ff4a2e0030001bff020000000000000000000000000001000000000000000066fed22202002cf200000000000000000000ffffe0000001fe8000000000000000000000000000bb00000000000000000000000000000000c221326df6faf2"])
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
syz_open_pts()
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000000)=0x8)
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0})
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x301, 0x0, 0x6, 0x0)
socket(0x2, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x100000000000000})
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)
mprotect(&(0x7f000076c000/0x2000)=nil, 0x2000, 0x1)
r3 = socket(0x18, 0x1, 0x0)
close(r3)

1.973512509s ago: executing program 7 (id=248):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000040)=0x7)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000))

1.784792937s ago: executing program 3 (id=261):
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0x0, 0x64, 0x0, 0x0)
mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202)
mknod(&(0x7f0000000200)='./bus\x00', 0x2000, 0x202)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00')
getrusage(0xffffffffffffffff, &(0x7f0000000040))

1.704274685s ago: executing program 3 (id=263):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r1 = socket(0x18, 0x2, 0x0)
getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x2, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)="c5eabfed43b76adfe26b82a6e201dc9271000000000000b6396d296b83e7bd94", 0x20}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee72e2feb4363843ad056b08079f8697b7b9830bf7ca00"/36, &(0x7f0000000080)=0x24, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r3, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)
fcntl$getown(r0, 0x5)

1.699624684s ago: executing program 3 (id=264):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)="c5eabfed43b76adfe26b82a6e201dc9271000000000000b6396d296b", 0x1c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee72e2feb4363843ad056b0f079f8697b7b983c0359778d9c06a9803d7ed0a4a760bf7ca8ecd78721f56840f2b47ae4b3a5180436fe7562a449721cf58f027e2330d527a71fd612ce2968f6771d56cb593ea26ee3879eff27ad8c355e30b85818181326ae464a0f504cda71f9e4e05aa7b61921f7e43eb8bd67371744d904598f7909cf5", &(0x7f0000000080)=0x84, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fsync(r1)

1.691452933s ago: executing program 0 (id=267):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000380)="233fbd59b12885b57ea2707636bd6e389b0dab1d6c", 0x15}], 0x1)
execve(0x0, 0x0, 0x0)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x3ff, 0x219, 0x5, 0x1, 0x9}]})

1.690221264s ago: executing program 3 (id=268):
mknod(&(0x7f0000000040)='./bus\x00', 0xc000, 0x200) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0xc000, 0x200)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
getsockopt(r1, 0x0, 0x65, 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @broadcast, @remote={0xac, 0x14, 0x0}}}}})
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
mprotect(&(0x7f0000355000/0x3000)=nil, 0x3000, 0x2) (async)
mprotect(&(0x7f0000355000/0x3000)=nil, 0x3000, 0x2)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
mknod(&(0x7f0000000100)='./file0\x00', 0x80, 0x202)
setrlimit(0x8, &(0x7f0000000980)={0x44, 0x5c})
syz_open_pts() (async)
r3 = syz_open_pts()
close(r3)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0) (async)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00')
syz_open_pts() (async)
r4 = syz_open_pts()
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x3da9c361, 0xffffffff, 0x8000085, 0x5773c549, "102e260a060660c7df7cd1c5f900008000", 0x3, 0x4}) (async)
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x3da9c361, 0xffffffff, 0x8000085, 0x5773c549, "102e260a060660c7df7cd1c5f900008000", 0x3, 0x4})
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)="b4e5f314df52d4ebc66995da692f902b524f72d2b20b442497ebd6ddb2edfd54d9e604a94189ebb1bc071e02d2c49421188f6889ac0a8cfd8b0813da7a4e113f558162b1ddab2026ae69e17dc634ab236cfe54e8d6185199016cbc9266c8f3f17298ae80eeb3b8e042bf3d6a89c8df680e95277fa88b884192807f3d4f6a156c20cb7361627f6a21b76e6844f77b3aa76715ea4c2d55b5c2fe232eea3b39ba9606db4c8b17727b12fb87717e1ca72fdfe012f3a99ab48e468477066ca8", 0xbd}], 0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000001780)="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", 0x28b}], 0x1)

1.627958291s ago: executing program 1 (id=270):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="d3d4830c43066adfe26b91a6e201dca08600000006000000396d296b83e7bd94be90d61ff4f1c2d6bce8b867a170ba2dc1ba9c8933209ab674f2b846357e01184c996e76e46b684ddd73dccedcaf1329d422cf6d130a11a9358f81af7f22c15554bfa91d3c09d0aeb774918b", 0x6c}], 0x1)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)

1.627239545s ago: executing program 1 (id=271):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xd6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x3}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="d3d4830c43066adfe26b91a6e201dca08600000006000000396d296b83e7bd94be90d61ff4f1c2d6bce8b867a170ba2dc1ba9c8933209ab674f2b846357e01184c996e76e46b684ddd73dccedcaf1329d422cf6d130a11a9358f81af7f22c15554bfa91d3c09d0aeb774918b", 0x6c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000840)="a6", &(0x7f0000000080)=0x1, 0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)

1.58586064s ago: executing program 1 (id=272):
pledge(0x0, &(0x7f00000000c0)='\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o', 0x1}], 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4)
r0 = syz_open_pts()
r1 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000200)="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", 0xb1, 0xe, 0x0, 0x78)
readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1)
shutdown(r1, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000240)={0xffffffff, 0xa, 0x1, 0x6, "bb25313fca88eed6a6dc166f59680ae8c14f5f74", 0xc67, 0x2})
pledge(&(0x7f0000000000)='tty   \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=<l\x8c\x01\xe3\x05$\x1c\x04B\x00\xa4P\x04\xcf\x87\xaa\x96iP\x14{4\xe6\x87\x9d\x8f\bz9$\x10_\xd8E\x93\x92\xf5\x8au\xab\xf9)\xf5\xa6\xc7\xc8\xed\xb9\x1f:\x03K\xa2\xdbUshx\xbe\\\x19\xdax\xeb_W\xbb\'\x00G\xbb\xfd\xe2\xd58\xf4:)\x10|r\x1e\x06p>\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', &(0x7f0000002840)='tty   \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=<l\x8c\x01\xe3\x05$\x1c\x04B\x00\xa4P\x04\xcf\x87\xaa\x96iP\x14{4\xe6\x87\x9d\x8f\bz9$\x10_\xd8E\x93\x92\xf5\x8au\xab\xf9)\xf5\xa6\xc7\xc8\xed\xb9\x1f:\x03K\xa2\xdbUshx\xbe\\\x19\xdax\xeb_\x10|r\x1e\x06p>\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659)

1.585525771s ago: executing program 0 (id=273):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x3d, &(0x7f0000000000), 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)

1.585116277s ago: executing program 1 (id=274):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="db226ca6", 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
connect$unix(r0, &(0x7f0000000000), 0x10) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7fff, 0x3e, 0x3, 0xd304}, {0x4, 0xf4, 0x7, 0xb38f}, {0x206, 0x5, 0x0, 0x48a8}]}) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="c509d8eabfedf9e2011c5dc175b20d8e87cea6f14b7167accdfcfa6ec9ec33d40251d947ad4d0414", 0x28}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="b56ad8e3cf1f2c1b41e55b99655e02818444e411de18e1a31d28e6b2106694baef368a06000000000000001d152dc3ec1686e7b674e8891dcb68634acaa3d753430b51fa0c8ea758a669e24d1e739004000000000000001d6d83a57854970f57a9cfa02d2a516dd54836bd6525ce6fd828dd384910000972a8070b8ccd9d44e3d1beb444409d7b", &(0x7f0000000080)=0x87, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x4000400f}]}) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee72e2feb4363843ad056b0f079f8697b7b983c0359778d9c06a9803d7ed0a4a760bf7ca8ecd78721f56840f2b47ae4b3a5180436fe7562a449721cf58f027e2330d527a71fd612ce2968f6771d56cb593ea26ee3879eff27ad8c355e30b85818181326ae464a0f504cda71f9e4e05aa7b61921f7e43eb8bd67371744d904598f7909cf5ef266ee079bff054", &(0x7f0000000080)=0x64, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r2, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) (async)
syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[])
getpeername$unix(r0, 0x0, &(0x7f0000000140))

1.583954337s ago: executing program 2 (id=275):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000780)="f0410323dab1f55c99882e4c5304e9ca453d7e59ae70c0f6ce00000085ced296a8a0b27660dd15349a62a21ea9defb4d8627dfb4f42b74fbc071519976e1f967a9e34eb390c860e5e0fa88aa99d365a515a9d0764cacd1e5187494e28d2b257b4470c3e61f76cd877eed9e9659650fa8ce94890f954bc6eaaedba29999cbeb6a2ae4a3eedc1d956fb72ea5b1a10b6d70280600000000000000a37e054fbdbc46", 0xa0}, {&(0x7f0000000200)="3453ce57d061845115169e09de16c9dfce5ec957c551dbd48a86f576544cda5f7872774ee11f0373990ce6b08dc32dce5e251ba5bfbf11c5cfc17a5e48322ff8a869b5d41f19ec4070217cbb2598e4156c4f94bd67ce07582ef9d23b1abb3c253008", 0x62}, {&(0x7f0000000000)="7f54df9c983bf2b7f678d589a9eab3de2e000a6a82a63df09cfb697bcf9e58bfee53f4d60a2ce6b944b947fd78cdbabbea7874bd", 0x34}, {&(0x7f0000000640)="657d78e1665d53177cbbd0074e4015555b805718f7b7b1ede3563f785fcd039d5e47a5ee603e92423ae7796cbfb62460b2328f7e87bc07c92d3d9b6f4f376c10c93e91ba5281261f696cba01b66ef5170df6acbc04798e1c81309dbac82981050f25472eb6a11c05b95af271159942ce93d3ec04bb8d70548ff4860b764a00"/136, 0x10}, {&(0x7f00000002c0)="8d636a68688888f4f208d3030691312c215e957d0e57cf6e94d3af2aa44b4a8afad4f344c6d043c308b69768d7aa6721fbd90f38b60adf395bcabda3d15bd8aea79849c387cc6f4ed12e2592112d5b27743b386f1cc6f0b7dac4a89b23ec56504b6fcd3410fbe45c989806dac60c4a347159e596ca0e3d9eda9fd21fa84111a290908b31b8e27a521407298ad8ab11add8773bd852599c95f2740bbdb38b80cbf0a4738d395afa7c2a5092f8d4017bc30d056dc861a3d30dab68c48624", 0xbd}, {&(0x7f0000000380)='?p3', 0x3}, {&(0x7f0000000540)="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", 0xfe}, {&(0x7f00000003c0)="a898325d3ada70aa1c7bb2e78264280128ea8e18cf58bbb16581c8087a67e4571d80dbb609df3bece29923b8aa41c77ecb8ef43437578b978a34c1da9c114913584504124eff33714c2538243fd327be8674576accc610d3f4ebb4b0497b2f58d4f699744aad6b47372c55a2df1561995c093a47883a040633fa79286dc463", 0x7f}, {&(0x7f0000000100)="c0aaa6f833d5b4ad33431b00ee47837f13e802667139cb89cca0c932325cb900cc6e081c6953f789323df66124a2d0594a92941862f257ee2bb0ac6bfe52f0398a5ad5c1eab69bad533e5bb660b245aaf4173d186281cd4dda3135ec10bee14e294825c35627808285f7808a2a5fd7e043dd55b45b221552cd7783c642f777e4991cb5a8211f3db4760299d3cb515a486a51057cec133bad07db9f65df7b15301419f1d2de2e", 0xa3}, {&(0x7f0000000700)="8addbda05bd304794a918b996a946007dc860db1f2053c44a91c20ec0939d24fa48fa28a3c40e557bec00a8b361dbd36b0bd59bb2c3e887940b9932263515d3376e1c05dd58ed3e07211a1317c06975b023b01775070a07f6c14866c3a3bb0cd7879d923a278c37ae3", 0xfffffffffffffe04}, {&(0x7f0000000840)="85a8c605b35a21015d85d345911f69a221fcbe74870e883c54eb19d8fb1088b13cc957d2ebfbcb52e1045ef3b2a134290c9ee434a2ce1e0f3393318c8bb1d772d23292851857ab21b95789e305ae85da9db308b74c50b4804c9a81c5416a8f4cb4c5b0f93fd010f5bc1175598138683211afc5ea69e2af9f4a49f5644358228312bdab88ceb428dbd9a1a0a4a85b28841076ff7fcb44aa13f187afb5124180da02d120148bc3539d3b5e42071ff9d80f8de487d6ea0bbcc3f4052de0105e6717efbf8ef0f11d4566a7c7dab262a4db205540b163ced2627a1e03c3b43eea3bc5b9e5f0604ec8ab11b8f379", 0xeb}, {&(0x7f0000000940)="abb917ef6c0e6049bec3c6d23b013a547635ec8b1bc0e8f904a5564b6d4d3fa59fa513432f3a5d1e27e7113179bffa4268e4d17ad1b50dfb5836a79b22462e9def9e12d525610d32840657e738596cdb0ef88ce54587f54c7416430947debfcecdd86019b6129800591193f32212b0a678b70cfa6d0984ba58d1eaa0920bf87f61f17057960a44d2652957ae69648431e5d33164a0ff75c3b8708901e5a3b782b4d8e4c503567de5f2413d5b6fee7fd9901595cf574ea914696e691907313b09c20a0562a80057691808f85d7495d4977c9e52855b6c7006c165e41342e15713f83be3411ad65b4323c152ba0287ba46434000", 0xf3}], 0xc)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000040), 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000d40)="4f6c6ef37429", 0x6}, {&(0x7f0000000d80)="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", 0x361}], 0x2)
execve(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x1, 0x5, 0x4000003})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000480)="71f91e3471ac0058bc5a91501d94a34b8e5f84c871b5a45d3bac7082299870f35ff0fa21801d245fb1c3c445cf2ef9163ca3e15a7276ca4d2147e8365aaf4620dcd9a55cb64958432ae303209a53944afb95217a2f30a5f97d3a3dc667d7fef3a0dd4475ff202aa3abc8436bbb280d0e9e3c37b354625d501d113360556ec7ad7309bcd1e8c8c68de7b54d441fa1ba06", &(0x7f0000000080)=0x28, 0x0, 0x37)

1.549434109s ago: executing program 6 (id=276):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xd6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x3}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="d3d4830c43066adfe26b91a6e201dca08600000006000000396d296b83e7bd94be90d61ff4f1c2d6bce8b867a170ba2dc1ba9c8933209ab674f2b846357e01184c996e76e46b684ddd73dccedcaf1329d422cf6d130a11a9358f81af7f22c15554bfa91d3c09d0aeb774918b", 0x6c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000840)="a612", &(0x7f0000000080)=0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480), 0x0)

1.548197871s ago: executing program 7 (id=277):
select(0x40, &(0x7f0000000000)={0x1b, 0x6, 0x400000000004, 0x8, 0x0, 0xfffffffffffffff9, 0x2, 0x8}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x23}, 0x2, 0x0, 0x0, 0x0, 0x0)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x23}, 0x4, 0x0, &(0x7f0000000100), 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
getrlimit(0x3, &(0x7f0000000140))
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x5})
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000))
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x900)

1.54700302s ago: executing program 1 (id=278):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "e600000f0000ae000000000000000007abc0788a", 0x0, 0x800000}) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x29a, 0x0, 0x0, 0x0, 0x4f) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x20, 0xa1)
renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00')
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000340), 0x0) (async)
setgid(0xffffffffffffffff)
r2 = getgid()
setgroups(0x1, &(0x7f0000000000)=[r2])
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0)

1.512181642s ago: executing program 3 (id=279):
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
r0 = syz_open_pts()
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x385, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x0, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6e75, 0x8001, 0xd1b, 0x4}, {0x6, 0x10001, 0xd, 0x4}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x6, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0x4, 0x30004}]})
r2 = accept$inet(r1, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
bind(r2, &(0x7f0000000840)=@in6={0x18, 0x0, 0x3, 0x8}, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f0000000240))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000340)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)
close(r0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x29f56361, 0x7fffffff, 0x3, 0xfffffff8, "09000000000104787d900a56d864d3c3a3f4d3c9", 0x29})
writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000080)="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", 0xffffffffffffffca}, {&(0x7f0000000880)="9639b21e591057de6bceab8bc9b4c0b81d5c270cf2d3e15cdf9aee260a05c378d9f1bbdc62403d66d9d7968c6f3ac4abe5b3ae914758bc0b1e0b2a75c13562dda1a376e9b2c0dc29de8cbc289df7553d1067519f097bff8cf4ba9bee8a24a87d43e2b43708ea823f6f2d00354b62599b60ff5ebaea5ce7f0f37d2740d87dbb4fe8ecbaa45adebc9bf7311bed94df77aea815675443"}, {&(0x7f0000000940)="d7751da98d7e213f9a642a28e943683b6f291089afa05db1c781bebf854411a02ba18b420d64755fd6b0499a8c72b46120c85af767cfac5c7d98bc701dd16106e61edf9fabbaee1ae28c506f533c31d46dfe0ebc1c115852ac91183a039af10f68729f917dea95c41d03e5fbfb9c375547281111d60ce6a3710203c64e265115bd592f2ca24b0c9305a7bfdc"}, {&(0x7f0000000a00)="26f454e709f2dc843af68effe43301bb2c220023bd94a0347e3ed7f7f254a843498968d2d1461aacc31f73efa1025ffde5b6916f474d1a99beb5a37184a2994b6c09530fe071656fb0cb08299ee299b2dd5864d0a19a1f6de4d46bed5ec7a26742ded5f5674849cf7057c619e06a8522087145b9a68f4dbdcc2d08831e7313924f0f9225cfe5b3b50b52bf5aef5413a30dd62b5ec5d3297eb68cb714b2e3e3afec7a342c2f4e386437a66f4f00e1a181d0b68efa7fd98f787b0f0cb61b6fae63ba38216ace7835dda5e838059729c301af0e93"}], 0x118)

1.320582687s ago: executing program 0 (id=280):
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]})
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="ee72e2a78adf8f6a18a22afeb4363843ad056b0f079f8697b7b983c035970700000098840f2b00"/53, &(0x7f0000000080)=0x35, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[])
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1.316817558s ago: executing program 1 (id=281):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4, 0x1, 0xfc, 0x1}, {0x3, 0x6, 0x9, 0x7}, {0x1ae, 0x6b, 0x9, 0x2008}]})
r0 = open(0x0, 0x2, 0x0)
kevent(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7ffffffb})
r1 = kqueue()
kevent(r1, 0x0, 0x0, 0x0, 0x2, 0x0)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffff3d000000000018dd0b1bc6c94f6900640000ff019078ac1400aaffffffff040690786d9864a1"])
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = socket(0x18, 0x2, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f0000000140)={0xab, './file0\x00'})
setsockopt(r3, 0x1000000029, 0x2e, 0x0, 0x0)
sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x64, &(0x7f0000000000)="01", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000280)="b1000503000004000000000003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x400)
ioctl$VT_OPENQRY(r0, 0x40047601, &(0x7f0000000180))
r5 = socket$inet6(0x18, 0x3, 0x0)
getsockopt(r5, 0x29, 0x41, 0x0, 0x0)

1.315913335s ago: executing program 4 (id=282):
socket(0x11, 0x3, 0x0) (async)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x409, 0x0, 0x0)
r1 = getpid()
r2 = getuid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r4) (async)
setregid(0x0, r4)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
r6 = socket(0x11, 0x3, 0x0)
sendto$unix(r6, &(0x7f00000000c0)="b100050160000004000000000700000012df8106cfa10500fef96ecfc73fd3357ae36caa0416fa4f376b36acf00b7804be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257169ed0d44a699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x0)
r7 = socket$inet6(0x18, 0x5, 0x4)
r8 = getuid()
setreuid(0xee00, r8) (async)
setreuid(0xee00, r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async)
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000080)=0xc)
r11 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ftruncate(r11, 0x8001) (async)
ftruncate(r11, 0x8001)
setregid(0x0, r10)
r12 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r12, 0x0, 0x21, &(0x7f00000000c0), 0x0)
sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000180)=[{&(0x7f0000000100)="8fd46c33ee610346c62365b46c71bb319f557b5dc1bcdfd73459fdaabd52ee222d6afe1de15929d3ef61cfe363eb4091f7b3dd489b6dc86ef6896dca08311ff09ba148bf8c6d97babb97146d", 0x4c}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000000003800000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="000000002000000000000000ffff000000803913084952aa8dbb37f082750760ea4980d2ff7aa4fa106d77aa5881fb2f66792aa856c1079aef9d11da87564c8375098a24", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x403}, 0x408) (async)
sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000180)=[{&(0x7f0000000100)="8fd46c33ee610346c62365b46c71bb319f557b5dc1bcdfd73459fdaabd52ee222d6afe1de15929d3ef61cfe363eb4091f7b3dd489b6dc86ef6896dca08311ff09ba148bf8c6d97babb97146d", 0x4c}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000000003800000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="000000002000000000000000ffff000000803913084952aa8dbb37f082750760ea4980d2ff7aa4fa106d77aa5881fb2f66792aa856c1079aef9d11da87564c8375098a24", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x403}, 0x408)

1.314607516s ago: executing program 6 (id=283):
sysctl$hw(&(0x7f0000002bc0)={0x6, 0x9}, 0x2, &(0x7f0000002c00), 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000005c0)="c5eabfed", 0x4}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="ce8ced0ef912a750f63db0317d1957514c1b8e9d", &(0x7f0000000080)=0xffffffffffffff56, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@dest_unreach={0x3, 0xd, 0x0, 0x0, 0x46, 0x3, {0x5, 0x4, 0x1, 0x3, 0x5, 0x66, 0x5, 0x5, 0x67, 0x7ff, @broadcast, @rand_addr=0x3}}}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[])

216.900681ms ago: executing program 6 (id=285):
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
ioctl$VNDIOCSET(0xffffffffffffff9c, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', 0x9, &(0x7f0000000040)='./file0\x00', 0x8})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37)

216.354ms ago: executing program 5 (id=286):
mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x6)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11", 0x2}], 0x1)

211.663057ms ago: executing program 6 (id=287):
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
chdir(&(0x7f00000001c0)='./file0\x00')
setreuid(0xee00, 0x0)
geteuid()
r0 = getuid()
setreuid(r0, r0)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00')

145.258573ms ago: executing program 0 (id=288):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="d3d4830c43066adfe26b91a6e201dca08600000006000000396d296b83e7bd94be90d61ff4f1c2d6bce8b867a170ba2dc1ba9c8933209ab674f2b846357e01184c996e76e46b684ddd73dccedcaf1329d422cf6d130a11a9358f81af7f22c15554bfa91d3c09d0aeb774918b", 0x6c}], 0x1)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)

144.771212ms ago: executing program 5 (id=289):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xd6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x3}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="d3d4830c43066adfe26b91a6e201dca08600000006000000396d296b83e7bd94be90d61ff4f1c2d6bce8b867a170ba2dc1ba9c8933209ab674f2b846357e01184c996e76e46b684ddd73dccedcaf1329d422cf6d130a11a9358f81af7f22c15554bfa91d3c09d0aeb774918b", 0x6c}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe)

122.060527ms ago: executing program 2 (id=290):
setuid(0xffffffffffffffff) (async)
socket(0x24, 0x2, 0x0) (async)
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 64)
sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x25, 0x2}, 0x6) (async, rerun: 64)
recvfrom(r0, &(0x7f0000000000)=""/110, 0x6e, 0x40, &(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0xa)

121.487298ms ago: executing program 5 (id=291):
r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000400)="56cf5daa", 0x4}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
setitimer(0x2, &(0x7f0000000140)={{0x0, 0x200000000000001}, {0x100000000}}, 0x0)
socket(0x2, 0x1, 0x0)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0xc0206981, &(0x7f0000000300))
r2 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x2)
r3 = open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
write(r0, &(0x7f0000000200)="89143ec92453382355e910e936d037887a0cfc221f608459251034508aec3469b80d130568ce2e", 0x27)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0)
setrlimit(0x0, &(0x7f0000000180)={0x1, 0xffffffffffffffff})
truncate(&(0x7f0000000340)='./file0\x00', 0x4000000002)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x32, &(0x7f0000000000)="ebff", 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0)
accept$unix(r3, 0x0, &(0x7f00000002c0))
connect$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0xa)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffff5a)
recvmmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0}, 0x10, 0x1402, 0x0)

101.071365ms ago: executing program 2 (id=292):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="f11fcc7ceafbefa0400f211bf382f47c4c2023e56a303100d00d6f3fe2833c5f", 0x20)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="789b38c701ab8c", 0x7)
r1 = socket(0x18, 0x1, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x65)
fcntl$setown(r2, 0x6, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmmsg(r3, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc)
setsockopt(r1, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x2, 0x2, 0x0) (async)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="f11fcc7ceafbefa0400f211bf382f47c4c2023e56a303100d00d6f3fe2833c5f", 0x20) (async)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="789b38c701ab8c", 0x7) (async)
socket(0x18, 0x1, 0x0) (async)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x65) (async)
fcntl$setown(r2, 0x6, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
sendmmsg(r3, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc) (async)
setsockopt(r1, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) (async)

83.769597ms ago: executing program 0 (id=293):
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[B'])
r0 = socket$inet(0x2, 0x8003, 0x0)
open(&(0x7f0000001800)='./file0\x00', 0x75f493fec6515f78, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00004500001c0000000000009078e0000002000000000800907800000000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000140)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x4, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@end]}}}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
recvmmsg(r0, &(0x7f0000000040)={0x0, 0x6}, 0x10, 0x2, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])

82.87293ms ago: executing program 4 (id=294):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x100], [0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffffffffffb, 0x20000000, 0x0, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x0, 0x0, 0x0, 0x11000], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe, 0x10000000], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0xfffffffe, 0x2}, {0x0, 0x0, 0xfffffffe, 0x1}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x4, 0x0, 0x800000000000008}, {0x0, 0x2004, 0x40000, 0x2000000000000000}, {0x0, 0x0, 0xffff8a21}, {0x5, 0x965, 0x0, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}}})
kqueue()
mknod(0x0, 0x2000, 0x3)
write(0xffffffffffffffff, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x10, 0x0)
r0 = kqueue()
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff})
r1 = kqueue()
kevent(r1, 0x0, 0xfffffffd, &(0x7f0000000100), 0x5, 0x0)
kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000040), 0x400, &(0x7f00000002c0), 0x5f, 0x0)
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$SPKRTUNE(r3, 0x20005302, 0x0)
kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
r5 = socket(0x18, 0x2, 0x0)
fcntl$setstatus(r5, 0x4, 0xc4)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)

37.441425ms ago: executing program 5 (id=295):
socket(0x18, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x20)
fcntl$lock(r2, 0x7367b6a931c4843c, 0x0) (async)
syz_emit_ethernet(0xe, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESOCT]) (async)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[]) (async, rerun: 32)
r3 = socket(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000040)=0x6, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r3, &(0x7f0000000000), 0x10) (async)
sendto$inet(r3, &(0x7f0000000280)="338313de80feea", 0x7, 0x2, 0x0, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x5, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="000400d949a5f0450c22afbe70eebb2f3400000000e5ffffffffffffffe40f86775d05dfc9998a88e72f535a", 0x2c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5a9146dec3708200006a1779000000000000002000856539fca897", &(0x7f0000000080)=0x24, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r4, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) (async)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80000801, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x70ffc}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x2000000, 0x9}, {0x0, 0x800, 0x1}, {0x3fd, 0x726, 0xe, 0x1}, {0x2, 0x6, 0x2, 0x99}, {0xcdf, 0xe2e, 0x4f8, 0x8006d}, {0x6, 0xf, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x5}, {0x4, 0x8001, 0xd1b, 0x88}, {0x0, 0x4010001, 0xc, 0x3}, {0x7ff, 0x4, 0x3, 0x5}, {0xb8c, 0x88, 0x3, 0x6}, {0x29a71717, 0xfffffffa, 0x4, 0x6}, {0x4, 0x7, 0xc}, {0x0, 0x1, 0x4, 0x30004}]}) (async)
utimes(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0xf, 0x40008}, {0x5, 0x5}}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})

37.030916ms ago: executing program 2 (id=296):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x40d}, 0x40e) (async)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0xa63, 0x2}, {0xfffffffffffffffb, 0x8000100000000002}}, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
r0 = socket(0x18, 0x3, 0x0) (async)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000200)=0xdd) (async)
ioctl$FIONREAD(r0, 0x80206997, &(0x7f0000000100)) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37)
sysctl$hw(&(0x7f0000000000)={0x6, 0x10}, 0x2, &(0x7f0000000040)="344ed202430c6d24", &(0x7f0000000180)=0x8, 0x0, 0x0)
pipe2(0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x20, 0x12) (async)
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0xd02) (async)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VNDIOCSET(r2, 0xc0285108, &(0x7f0000000140)={0x0, 0x0, 0x0})

18.533977ms ago: executing program 0 (id=297):
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[])
sysctl$hw(&(0x7f0000001240)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$hw(&(0x7f0000000000)={0x6, 0xe}, 0x2, &(0x7f0000000040)="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", &(0x7f0000000140)=0xfe, &(0x7f0000000180)="7d5905b9ba9eef512ac9b0fce21cfd729d1496e828", 0x15)

17.610222ms ago: executing program 5 (id=298):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa)
setsockopt(r0, 0x10001, 0x1, &(0x7f0000000000)="c4760efb36942451c3fc3b79f99946a739844b838918a6a57a0692f8f57568a5b5aaa5b938ac9c9b39460a5885df626af43a66ca7850b669eaa9387b", 0x3c)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="ea000001000000001ecbfc00", 0xc)
bind(r0, &(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x0}, 0x8)

17.227342ms ago: executing program 3 (id=299):
r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f00002f2000/0x3000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000340)=""/19)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xa9)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x7, 0x80000001, 0x81ac, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xc, 0x7, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x400009}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x98}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x208}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x7, 0x10000, 0xf, 0x4}, {0x9, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71713, 0xfffffffa, 0x1, 0xa}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0xaf7, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff0800450000280000c9970a33907800000000000000000e00907801ff0800000007ff00007fff00000081"])
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
syz_extract_tcp_res(0x0, 0x9, 0x800)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd)
open(0x0, 0x70e, 0x0)
unveil(0x0, &(0x7f0000000000)='r\x00')
recvmmsg(r2, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00')
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x1, 0x62})
r3 = socket$inet(0x18, 0x4, 0x102)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000000), 0xc)
acct(&(0x7f00000002c0)='./file0\x00')
getpeername$inet(r3, &(0x7f00000000c0), &(0x7f0000000240)=0xc)
setgid(0xffffffffffffffff)
setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000040)={0x7, 0x10001}, 0x8)

16.679784ms ago: executing program 2 (id=300):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xd6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x3}, {0x6, 0xa, 0x83, 0x4000400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="d3d4830c43066adfe26b91a6e201dca08600000006000000396d296b83e7bd94be90d61ff4f1c2d6bce8b867a170ba2dc1ba9c8933209ab674f2b846357e01184c996e76e46b684ddd73dccedcaf1329d422cf6d130a11a9358f81af7f22c15554bfa91d3c09d0aeb774918b", 0x6c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000840)="a612", &(0x7f0000000080)=0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480), 0x0)

2.447208ms ago: executing program 5 (id=301):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0)
ioctl$DIOCMAP(0xffffffffffffff9c, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r0, 0x7})
r1 = socket$inet6(0x18, 0x3, 0x8) (async)
r2 = shmget$private(0x0, 0x4000, 0x40b, &(0x7f0000ffa000/0x4000)=nil)
r3 = shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x3000)
shmctl$IPC_RMID(r2, 0x0) (async, rerun: 64)
shmdt(r3) (async, rerun: 64)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r4 = socket(0x2, 0x4001, 0x0) (async)
r5 = semget(0x0, 0x4, 0x0)
shmget$private(0x0, 0x2000, 0x51, &(0x7f0000ffd000/0x2000)=nil) (async, rerun: 32)
semctl$SETALL(r5, 0x0, 0x9, &(0x7f0000000100)=[0x12a, 0x4e, 0xc22e, 0x800, 0x1000]) (rerun: 32)
recvmmsg(r4, &(0x7f0000001700)={0x0, 0x40000000}, 0x10, 0x80, 0x0) (async, rerun: 32)
socketpair(0x18, 0x3, 0x6, 0x0) (rerun: 32)

0s ago: executing program 2 (id=302):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
r0 = dup(0xffffffffffffffff)
dup2(r0, 0xffffffffffffffff)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0xfffffffffffffe3e}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x2, 0x0)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r4)
r5 = socket(0x2, 0x2, 0x0)
bind(r5, &(0x7f0000000000), 0x10)
connect$unix(r5, &(0x7f0000000000), 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
r6 = socket(0x18, 0x2, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4)
close(r2)
r7 = socket$inet(0x2, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="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"])
setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1)
connect$unix(r2, &(0x7f0000000000), 0x10)
write(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.47' (ED25519) to the list of known hosts.




OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00)

login: îîpckbd_enable: command error
îpanic: pool_do_get: shmpl free list modified: page 0xfffffd8068ee5000; item addr 0xfffffd8068ee55b0; offset 0x40=0x682f86c3
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 389215  97064      0           0          0    0  syz-executor
* 59869  97064      0           0  0x4000000    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff833cc972) at panic+0x1e5
pool_do_get(ffffffff839caa68,1,ffff80003c452fd8) at pool_do_get+0x5ea
pool_get(ffffffff839caa68,1) at pool_get+0x149
shmget_allocate_segment(ffff8000383fe558,ffff80003c453230,51,ffff80003c453180) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000383fe558,ffff80003c453230,ffff80003c453180) at sys_shmget+0x1b2
syscall(ffff80003c453230) at syscall+0xb08
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x19fccc5e5c0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: pool_do_get: shmpl free list modified: page 0xfffffd8068ee5000; item addr 0xfffffd8068ee55b0; offset 0x40=0x682f86c3
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff833cc972) at panic+0x1e5
pool_do_get(ffffffff839caa68,1,ffff80003c452fd8) at pool_do_get+0x5ea
pool_get(ffffffff839caa68,1) at pool_get+0x149
shmget_allocate_segment(ffff8000383fe558,ffff80003c453230,51,ffff80003c453180) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000383fe558,ffff80003c453230,ffff80003c453180) at sys_shmget+0x1b2
syscall(ffff80003c453230) at syscall+0xb08
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x19fccc5e5c0, count: -8
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c452e10
rbx               0xffff8000299dedd7
rdx                                0
rcx               0xffff8000383fe558
rax               0xffff8000299ddff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xff1ca8e36d6aaae4
r11               0xfe1ca1383f2cd2f0
r12               0xffff8000299debd8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff82cba885    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c452e00
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=59869 pid=97064 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000383fe7e8,0xffff8000383ff238
    process=0xffff8000fffe4e50 user=0xffff80003c44e000, vmspace=0xfffffd806d49b010
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 91884   41434  40790      0  2           0                syz-executor
 91884  241147  40790      0  3   0x4000080  fsleep        syz-executor
 97064  389215   8167      0  7           0                syz-executor
*97064   59869   8167      0  7   0x4000000                syz-executor
 97064  494457   8167      0  2   0x4000080                syz-executor
 97064   82173   8167      0  3   0x4000080  fsleep        syz-executor
 60993  419339  13442      0  2           0                syz-executor
 82312   44359  18018      0  2           0                syz-executor
 82312  175257  18018      0  3   0x4000080  fsleep        syz-executor
 62643  499907  39712      0  2           0                syz-executor
 62643  111005  39712      0  3   0x4000080  fsleep        syz-executor
 52206  104024  14703      0  2           0                syz-executor
 52206  415859  14703      0  3   0x4000080  kqread        syz-executor
 52206  176901  14703      0  3   0x4000080  fsleep        syz-executor
 65495  357088  67740      0  2           0                syz-executor
 65495  437962  67740      0  3   0x4000080  fsleep        syz-executor
 37436   57756      0      0  3     0x14200  acct          acct
 86471  235209      1      0  3        0x80  nanoslp       init
 64890   20471      0      0  3     0x14280  nfsidl        nfsio
 80080  324141      0      0  3     0x14280  nfsidl        nfsio
 93827  484262      0      0  3     0x14280  nfsidl        nfsio
 67713   24285      0      0  3     0x14280  nfsidl        nfsio
 90898  436230      0      0  3     0x14280  nfsidl        nfsio
 21663   86145      0      0  3     0x14280  nfsidl        nfsio
  6226  154620      0      0  3     0x14280  nfsidl        nfsio
 19624  158040      0      0  3     0x14280  nfsidl        nfsio
  5079   87265      0      0  3     0x14280  nfsidl        nfsio
   293  254150      0      0  3     0x14280  nfsidl        nfsio
 82036   51334      0      0  3     0x14280  nfsidl        nfsio
 60004  454615      0      0  3     0x14280  nfsidl        nfsio
 94438   54994      0      0  3     0x14280  nfsidl        nfsio
 20306   73542      0      0  3     0x14280  nfsidl        nfsio
 12171  418457      0      0  3     0x14280  nfsidl        nfsio
  6829  364872      0      0  3     0x14280  nfsidl        nfsio
 43911  168665      0      0  3     0x14280  nfsidl        nfsio
 15330  416940      0      0  3     0x14280  nfsidl        nfsio
 42248  461396      0      0  3     0x14280  nfsidl        nfsio
  1168  364671      0      0  3     0x14280  nfsidl        nfsio
 14703  346512  77017      0  3        0x82  nanoslp       syz-executor
 94977  238213      0      0  3     0x14200  bored         sosplice
 67740  204142  77017      0  3        0x82  nanoslp       syz-executor
 97354  344628  77017      0  2         0x2                syz-executor
  8167  127775  77017      0  3        0x82  nanoslp       syz-executor
 39712  340678  77017      0  3        0x82  nanoslp       syz-executor
 13442  286736  77017      0  2         0x2                syz-executor
 40790  380438  77017      0  3        0x82  nanoslp       syz-executor
 18018  483733  77017      0  3        0x82  nanoslp       syz-executor
 77017  178666  96018      0  3        0x82  kqread        syz-executor
 96018  488644  54038      0  3    0x10008a  sigsusp       ksh
 54038  360654  59445      0  3        0x98  kqread        sshd-session
 59445   26052  71367      0  3        0x92  kqread        sshd-session
 71367  286021      1      0  3        0x88  kqread        sshd
  3190  218100  72196     74  3   0x1100092  bpf           pflogd
 72196   12550      1      0  3        0x80  sbwait        pflogd
 17215  351952  60796     73  3   0x1100090  kqread        syslogd
 60796  299984      1      0  3    0x100082  sbwait        syslogd
 25408  296454      1      0  3    0x100080  kqread        resolvd
 50626  217262  21800     77  3    0x100092  kqread        dhcpleased
 22556  313123  21800     77  3    0x100092  kqread        dhcpleased
 21800  478981      1      0  3        0x80  kqread        dhcpleased
 64199  414646      0      0  3     0x14200  bored         smr
 20518   28767      0      0  2     0x14200                zerothread
   123  392322      0      0  3     0x14200  aiodoned      aiodoned
 60728  117560      0      0  3     0x14200  syncer        update
 82866  284141      0      0  3     0x14200  cleaner       cleaner
 66693   56198      0      0  3     0x14200  reaper        reaper
 38566    9690      0      0  3     0x14200  pgdaemon      pagedaemon
 89479  154751      0      0  3     0x14200  bored         viomb
 59348  428852      0      0  3  0x40014200  acpi0         acpi0
 95361  116496      0      0  3  0x40014200                idle1
 39859  327230      0      0  3     0x14200  bored         softnet3
 51114   32420      0      0  3     0x14200  bored         softnet2
 50348  422928      0      0  3     0x14200  bored         softnet1
 10921   19748      0      0  3     0x14200  bored         softnet0
 67153   92978      0      0  3     0x14200  bored         systqmp
 55435  209979      0      0  3     0x14200  bored         systq
 54536  118086      0      0  3     0x14200  tmoslp        softclockmp
 73769  164856      0      0  3  0x40014200  tmoslp        softclock
 43921  278254      0      0  3  0x40014200                idle0
     1  389061      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex shmpl r = 0 (0xffffffff839caa80)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  pool_get+0x10b
#4  shmget_allocate_segment+0x1a7
#5  sys_shmget+0x1b2
#6  syscall+0xb08
#7  Xsyscall+0x128
Process 97064 (syz-executor) thread 0xffff8000383fe558 (59869)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839e43d8)
#0  witness_lock+0x5bb
#1  syscall+0xae6
#2  Xsyscall+0x128
exclusive mutex shmpl r = 0 (0xffffffff839caa80)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  pool_get+0x10b
#4  shmget_allocate_segment+0x1a7
#5  sys_shmget+0x1b2
#6  syscall+0xb08
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10212  11096K   11539K 166960K     11920        0
            pcb    18     12K      13K 166960K        93        0
         rtable   164      6K       8K 166960K       420        0
             pf    34     17K      18K 166960K        71        0
         ifaddr    35      5K       8K 166960K        64        0
        ifgroup    55      2K       2K 166960K        92        0
         sysctl     3      1K       9K 166960K         7        0
       counters    68     36K      37K 166960K       102        0
       ioctlops     0      0K       4K 166960K      1528        0
            iov     0      0K      12K 166960K        15        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1341     84K      85K 166960K      1695        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       5K 166960K         9        0
         VM map     2      1K       1K 166960K         2        0
            sem     4      0K       0K 166960K         4        0
        dirhash    15      2K       2K 166960K        18        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      93K 166960K       447        0
          sigio     0      0K       0K 166960K        16        0
           proc    63     79K     128K 166960K       599        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        40        0
       in_multi    69      4K       7K 166960K       126        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       411        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   228    171K     189K 166960K      5730        0
       UVM aobj    12      4K       4K 166960K        15        0
     pinsyscall    41     82K     104K 166960K      1596        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        79        0
            NDP    12      0K       2K 166960K        41        0
           temp    43   8675K    8742K 166960K     11687        0
         kqueue    14     22K      30K 166960K        60        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       53    0       50     1     0     1     1     0     8    0
rtentry    176      127    0       57     6     0     6     6     0     8    0
unpcb      144      180    0      161     2     1     1     2     0     8    0
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpcb      808       72    0       67     1     0     1     1     0     8    0
arp        128       21    0        8     1     0     1     1     0     8    0
inpcb      384      356    0      347     5     0     5     5     0     8    4
nd6        144       28    0       12     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     1     0     1     0     8    0
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1192      11    0       11     1     0     1     1     0     8    1
pppxif     1504       1    0        1     1     0     1     1     0     8    1
pffrag     232        4    0        1     1     0     1     1     0   482    0
pffrnode    88        4    0        1     1     0     1     1     0     8    0
pffrent     40        7    0        4     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       34    0        0     1     0     1     1     0     8    0
pfstkey    128       34    0        0     2     0     2     2     0     8    0
pfstate    384       34    0        0     4     0     4     4     0     8    0
pfrule     1344      31    0       16     3     1     2     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      545    0      232    29     0    29    29     0     8    3
art_table   32      546    0      232     4     0     4     4     0     8    0
art_node    16      126    0       65     1     0     1     1     0     8    0
semapl     112        2    0        0     1     0     1     1     0     8    0
shmpl      112       12    0        3     1     0     1     1     0     8    0
pool(0xffffffff839caa68:shmpl): page inconsistency: page 0xfffffd8068ee5000; 25 on list, 9 missing, 35 items per page
dirhash    1024      21    0        2     3     0     3     3     0     8    0
dino2pl    256     2081    0      572    95     0    95    95     0     8    0
ffsino     288     2081    0      572   109     0   109   109     0     8    0
nchpl      144     2662    0      974    64     0    64    64     0     8    0
rtmask      32        4    0        4     1     0     1     1     0     8    1
uvmvnodes   80     2405    0        0    50     0    50    50     0     8    0
vnodes     216     2405    0        0   134     0   134   134     0     8    0
namei      1024    8451    0     8451     1     0     1     1     0     8    1
percpumem   16       66    0       17     1     0     1     1     0     8    0
kstatmem   264       50    0       22     3     0     3     3     0     8    0
scsiplug    72        1    0        1     1     0     1     1     0     8    1
scxspl     216     8042    0     8042     3     2     1     2     1     8    1
plimitpl   152       89    0       72     1     0     1     1     0     8    0
sigapl     424      778    0      707    10     1     9     9     0     8    0
knotepl    120      543    0        0    17     0    17    17     0     8    0
kqueuepl   224       91    0       79     2     0     2     2     0     8    1
pipepl     336      125    0       98     3     0     3     3     0     8    0
fdescpl    520      738    0      707     3     0     3     3     0     8    0
filepl     160     3253    0     3034    11     0    11    11     0     8    1
lockfpl    104      138    0      134     1     0     1     1     0     8    0
lockfspl    48       34    0       30     1     0     1     1     0     8    0
sessionpl  144       26    0       18     1     0     1     1     0     8    0
pgrppl      48       41    0       25     1     0     1     1     0     8    0
ucredpl    104      311    0      298     1     0     1     1     0     8    0
zombiepl   144      707    0      707     1     0     1     1     0     8    1
processpl  1208     778    0      707     6     0     6     6     0     8    0
procpl     656     1284    0     1204     9     1     8     8     0     8    0
srpgc       96        8    0        8     1     0     1     1     0     8    1
sockpl     728      592    0      561     7     1     6     7     0     8    2
mcl64k     65536      8    0        0     1     0     1     1     0     8    0
mcl16k     16384      3    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     114    0        0    15     0    15    15     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      20    0        0     3     0     3     3     0     8    0
mtagpl      96       29    0        0     1     0     1     1     0     8    0
mbufpl     256      167    0        0    11     0    11    11     0     8    0
bufpl      280     2714    0      124   185     0   185   185     0     8    0
anonpl      32     5592    0        0    46     0    46    46     0   246    0
amapchunkpl 152   17823    0    17357    27     0    27    27     0   158    7
amappl16   200     1999    0     1969     5     3     2     5     0     8    0
amappl15   192        8    0        7     1     0     1     1     0     8    0
amappl14   184      122    0      111     1     0     1     1     0     8    0
amappl13   176        3    0        3     1     1     0     1     0     8    0
amappl12   168     1411    0     1382     4     2     2     3     0     8    0
amappl11   160       52    0       38     1     0     1     1     0     8    0
amappl10   152        1    0        1     1     1     0     1     0     8    0
amappl9    144      263    0      263     1     1     0     1     0     8    0
amappl8    136       20    0       18     1     0     1     1     0     8    0
amappl7    128      112    0      101     1     0     1     1     0     8    0
amappl6    120      195    0      191     1     0     1     1     0     8    0
amappl5    112      130    0      120     1     0     1     1     0     8    0
amappl4    104      328    0      310     1     0     1     1     0     8    0
amappl3     96     3302    0     3197     4     0     4     4     0     8    0
amappl2     88      672    0      613     2     0     2     2     0     8    0
amappl1     80    10138    0     9553    15     0    15    15     0     8    0
amappl      88     4956    0     4798     5     0     5     5     0    92    1
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       14    0        3     1     0     1     1     0     8    0
uaddrrnd    24      738    0      707     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      738    0      707     1     0     1     1     0     8    0
vmmpekpl   168     7739    0     7700     3     0     3     3     0     8    0
vmmpepl    168    52401    0    50465    96     0    96    96     0   357    6
vmsppl     480      737    0      707     5     0     5     5     0     8    0
rwobjpl     72    18705    0    15400    61     0    61    61     0     8    0
pdppl      4096    1483    0     1414   101    30    71    87     0     8    2
pvpl        32    13060    0        0   107     1   106   106     0   265    0
pmappl     256      737    0      707     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      383    0       33    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0