last executing test programs:

802.451597ms ago: executing program 0 (id=1):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
seteuid(0xffffffffffffffff)
r1 = socket$inet(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$DIOCRGETTSTATS(r2, 0xc4504440, &(0x7f0000000700)={{'\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x0, 0x7}, 0x0, 0x4d0, 0x0, 0x5, 0xb60, 0x14000, 0x400, 0x0, 0xf})
pselect(0x40, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x1, 0xb, 0x3, 0x1, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xc987})
bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
r3 = socket(0x2, 0x3, 0xc)
getsockopt$sock_linger(r3, 0xffff, 0x80, 0x0, 0x0)
r4 = geteuid()
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000), 0x0, 0x0, 0x8, 0xeeeeeeee})
r5 = socket$inet(0x2, 0x2, 0x0)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
r6 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba)
setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000001400)="f1f856535b98fd16d4f2b5c2100c93e5bcbd986a03bac50ae499c85fc38002eb66b8871de35bb69892377b18d2686ff0a288bd4869fd", 0x36)
fstat(r6, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(0xffffffffffffffff, r4, r7)
setresuid(r4, 0xee01, 0xee00)
ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000000))
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000040)={0x0, 0x0, <r8=>0xffffffffffffffff, 0x0, 0x8})
readv(r8, &(0x7f0000001380)=[{&(0x7f00000014c0)=""/165, 0xa5}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001580)=""/24, 0x18}, {&(0x7f0000001180)=""/178, 0xb2}, {&(0x7f0000001240)=""/14, 0xe}, {&(0x7f0000001280)=""/194, 0xc2}], 0x6)
setsid()

585.410284ms ago: executing program 4 (id=9):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
mknod(&(0x7f0000000540)='./file0\x00', 0x6000, 0xffff)
open(&(0x7f00000006c0)='./file0\x00', 0x8, 0x104)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)
setuid(0xee01)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = syz_open_pts()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt(r2, 0xffff, 0x40, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2810, r2, 0x7)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
chown(&(0x7f0000000700)='./file0\x00', r0, r3)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0x6}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe18)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r5 = socket$inet(0x18, 0x3, 0x102)
setsockopt(r5, 0x5, 0x1, &(0x7f00000001c0)="dad49960c959ce6b46", 0x9)
sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="6388020000003a9a8c51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000040)="a2a62d242940a2d9f8bbcb9e8962851a4fa7019f127530cb8f2984ad4bb5", 0x1e}, {&(0x7f00000002c0)="646862e6d4320e223881f697942bb5565d0ef640c93106c43353189e88e80ad1db4f41b0b5eacd322e17898cfb75ae3694a6ae455f3de8975161cb7e96e9750261e907f34e58edf6fa445f23264a0cce84e7b9f0e83929f92b46b9c52a61a3df667fd66a6ffb67001fbc58", 0x6b}], 0x3, 0x0}, 0x402)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x94, 0x5, 0x5, 0x8000}, {0x44, 0x58, 0x26}, {0x26, 0xa3, 0x3, 0xbfffe002}]})
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200)
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x4, 0x1c, 0x68, 0x8, 0x9, 0x32, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x1, 0x8}}}}}})
sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000580)="0bb9b6f22629dfa6e924d237757ecba0a6b7e0eed3a250da74c235144dd71b9a16f763a95165c3faec50325f955b11b2defea4db658a5209d0edab4e98195536389aa1e33f6146296ad2cc979c553c9d06ae22269fd53e9320ff6d45938f2d5eb89c3bdd2f70f06a460c3ed52be5264d0f475b770682de141ee5c2c498a4388fb4108c8d5bfdbe408b7463dababa760168c48ed764b9534f9a9768248dbba7466d3e551a917aa6c4634cfe13dc10137b0a5fe7110e87664b99f826d0e120bbf508c3828279931cbe634062", &(0x7f0000000680)=0xcb, &(0x7f0000000800)="3e043281cd8a44b2902983612dbbc8d9c7694f7db703e5e9ae6d68f152a16f5c7716412d3ff898cce5f2a46096c75d2d6df605d9f89157c336c6b38e03560659f3c8266e2a1bec777a1cd331c224301138fc55752ea68a4d21f9465df4b34c7c58b13825dca89ed1e450ffb34975dea28c898fdfc3bffa04e841c57b3c8e436f8f576a11913cfd81b5ce46b88466d55ab06e1adc91f9756d3fe6b3991840e12afd8f2338dc8a443f4cb43be4055d81a77d3e61fa6aa242012d9d0b7e30c13ab56f6eceb76eff2e163bf59e35b30393e6", 0xd0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)

582.944752ms ago: executing program 3 (id=4):
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc8a, 0x0, 0x0)
sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000001c0)="8e84365b469069676d813d99c8bf3c78815d88d114e784e1dbca0b35336f84fea41dd675284b1d89015e3d6db659474382efed3001226a78e235637b9503738c6b00cbebdb22adc6cf6cb832330408b6c9d7410a4444f062f061f9ac1704a0b7f971cb3c875da80cb58a95871a238a4d3d", &(0x7f0000000040)=0x71, &(0x7f0000000280), 0x0)
r0 = shmget(0x2, 0x2000, 0x600, &(0x7f0000ffe000/0x2000)=nil)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$DIOCRDELADDRS(r1, 0xc4504444, &(0x7f0000000500)={{'./file0\x00', './file0\x00', 0x0, 0x7}, &(0x7f00000002c0)=[{@loopback, '\x00', './file0\x00', 0x2c, 0x5, 0x1a, 0x9, 0xe, 0x3, 0x6}, {@multicast2, '\x00', './file0\x00', 0x2, 0xffbc, 0x0, 0x5, 0xc8, 0x9, 0xb}, {@loopback, '\x00', './file0\x00', 0x5, 0x5, 0x1a, 0x37, 0xb, 0x80, 0x1}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xff, 0x72b, 0x18, 0x7, 0x0, 0x3, 0x8}, {@multicast1, '\x00', './file0\x00', 0x8, 0x0, 0x18, 0x9, 0x0, 0x8, 0x1}, {@multicast1, '\x00', './file0\x00', 0x81, 0x9, 0x0, 0x1, 0x9, 0x3, 0x3}, {@rand_addr=0x3, '\x00', './file0\x00', 0x202, 0x4, 0x1a, 0x6, 0x0, 0xb, 0x7}, {@multicast1, '\x00', './file0\x00', 0x6, 0x7, 0x2, 0x2, 0x1, 0x0, 0x8}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2, 0x8, 0x0, 0x7f, 0x33, 0x63}, {@multicast2, '\x00', './file0aaaaaaaaa', 0x5, 0x200, 0x1a, 0x7f, 0x3, 0x2, 0x2}], 0x38, 0xa, 0xe, 0x7, 0x10, 0x75, 0x2, 0x4})
shmget(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000)
r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r3 = socket(0x1, 0x1, 0x0)
ioctl$FIONREAD(r3, 0x80206932, &(0x7f00000001c0))
ioctl$WSKBDIO_GETENCODINGS(r2, 0xc0105715, &(0x7f0000001540)={0x40000000000000cd})
sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, &(0x7f0000000140)="cfbcef8ab4636eda69d2378c82908129975f9476dc8fd1c3da18dbc2c0c888afdc156d8f6f6bed480d460ba84309546af42dd31ec9b73979b0329fda5da8fb97ec67d5978cd5dc1dc353d0c6682fada2a35a8b74dc6f0a7860554ff198fed2dc581d9ff493ca13cdf9c83ae593312219aaf5f933caeb3a5c7e9dbe3565e16394178d2f3290baa89edcd97f6c", &(0x7f0000000200)=0x8c, &(0x7f0000000240)="63d60ba9490d49b56c696de0108021ba56289f9bffc87d388cbde64480aadb07e6c20d31726140dbf00015dce2b74198ed2810781b19a0c88f853a6aacb07465b64dc4343f40196de2498c181466ffde5e67d04ad72348ff7eaebabf324e5a7d832f4d0494bc5666bf394ac264a217db996880f3cfc034125bfc", 0x7a)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc8a, 0x0, 0x0) (async)
sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000001c0)="8e84365b469069676d813d99c8bf3c78815d88d114e784e1dbca0b35336f84fea41dd675284b1d89015e3d6db659474382efed3001226a78e235637b9503738c6b00cbebdb22adc6cf6cb832330408b6c9d7410a4444f062f061f9ac1704a0b7f971cb3c875da80cb58a95871a238a4d3d", &(0x7f0000000040)=0x71, &(0x7f0000000280), 0x0) (async)
shmget(0x2, 0x2000, 0x600, &(0x7f0000ffe000/0x2000)=nil) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async)
ioctl$DIOCRDELADDRS(r1, 0xc4504444, &(0x7f0000000500)={{'./file0\x00', './file0\x00', 0x0, 0x7}, &(0x7f00000002c0)=[{@loopback, '\x00', './file0\x00', 0x2c, 0x5, 0x1a, 0x9, 0xe, 0x3, 0x6}, {@multicast2, '\x00', './file0\x00', 0x2, 0xffbc, 0x0, 0x5, 0xc8, 0x9, 0xb}, {@loopback, '\x00', './file0\x00', 0x5, 0x5, 0x1a, 0x37, 0xb, 0x80, 0x1}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xff, 0x72b, 0x18, 0x7, 0x0, 0x3, 0x8}, {@multicast1, '\x00', './file0\x00', 0x8, 0x0, 0x18, 0x9, 0x0, 0x8, 0x1}, {@multicast1, '\x00', './file0\x00', 0x81, 0x9, 0x0, 0x1, 0x9, 0x3, 0x3}, {@rand_addr=0x3, '\x00', './file0\x00', 0x202, 0x4, 0x1a, 0x6, 0x0, 0xb, 0x7}, {@multicast1, '\x00', './file0\x00', 0x6, 0x7, 0x2, 0x2, 0x1, 0x0, 0x8}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2, 0x8, 0x0, 0x7f, 0x33, 0x63}, {@multicast2, '\x00', './file0aaaaaaaaa', 0x5, 0x200, 0x1a, 0x7f, 0x3, 0x2, 0x2}], 0x38, 0xa, 0xe, 0x7, 0x10, 0x75, 0x2, 0x4}) (async)
shmget(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) (async)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async)
openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
socket(0x1, 0x1, 0x0) (async)
ioctl$FIONREAD(r3, 0x80206932, &(0x7f00000001c0)) (async)
ioctl$WSKBDIO_GETENCODINGS(r2, 0xc0105715, &(0x7f0000001540)={0x40000000000000cd}) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, &(0x7f0000000140)="cfbcef8ab4636eda69d2378c82908129975f9476dc8fd1c3da18dbc2c0c888afdc156d8f6f6bed480d460ba84309546af42dd31ec9b73979b0329fda5da8fb97ec67d5978cd5dc1dc353d0c6682fada2a35a8b74dc6f0a7860554ff198fed2dc581d9ff493ca13cdf9c83ae593312219aaf5f933caeb3a5c7e9dbe3565e16394178d2f3290baa89edcd97f6c", &(0x7f0000000200)=0x8c, &(0x7f0000000240)="63d60ba9490d49b56c696de0108021ba56289f9bffc87d388cbde64480aadb07e6c20d31726140dbf00015dce2b74198ed2810781b19a0c88f853a6aacb07465b64dc4343f40196de2498c181466ffde5e67d04ad72348ff7eaebabf324e5a7d832f4d0494bc5666bf394ac264a217db996880f3cfc034125bfc", 0x7a) (async)

573.251056ms ago: executing program 4 (id=10):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffdff86dd6036ea0700083afffe80000000000000ffffff00000000aaff", @ANYRES16])
msgrcv(r0, &(0x7f0000000080)={0x0, ""/185}, 0xc1, 0x3, 0x1c00)
msgrcv(r0, 0x0, 0x0, 0x1, 0x0)
connect(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x10, 0x2, 0x3, 0xf}, 0x10)
msgctl$IPC_RMID(r0, 0x0)

561.183544ms ago: executing program 5 (id=6):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x81, 0x80000001, {0xfa20, 0x1}})
r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0x1c, 0x6000)
shutdown(r0, 0x1)
r1 = accept(r0, &(0x7f00000000c0)=@un=@file={0x0, 0x0, ""/503}, &(0x7f00000002c0)=0x1f9)
getpeername(r1, &(0x7f0000000300)=@in, &(0x7f0000000340)=0x10)
r2 = kqueue()
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0xacf9, 0x2c8a, <r3=>r1})
kevent(r2, &(0x7f00000003c0)=[{{r3}, 0xfffffffffffffffd, 0x0, 0x20000000, 0xe, 0x2}], 0x9, &(0x7f0000000400)=[{{r1}, 0xfffffffffffffff6, 0x10, 0x20000000, 0x4, 0x10001}, {{r0}, 0xfffffffffffffff8, 0x40, 0x2, 0x4, 0x1ff}], 0xa42a, &(0x7f0000000440)={0x9, 0x7})
mknod(&(0x7f0000000480)='./file0\x00', 0x8, 0xb52)
ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f00000004c0)=r1)
r4 = socket(0x1, 0x3, 0x14)
mkfifo(&(0x7f0000000500)='./file0\x00', 0x25)
execve(&(0x7f0000000540)='./file1\x00', &(0x7f0000000700)=[&(0x7f0000000580)='\x0f:.:\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)=':.\xe5%\x00', &(0x7f0000000680)='&!.:\x00', &(0x7f00000006c0)='!9\x00'], &(0x7f0000000880)=[&(0x7f0000000740)='+\x06{\x00', &(0x7f0000000780)='&\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='^.)\x00', &(0x7f0000000840)='{\x00'])
execve(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000b40)=[&(0x7f0000000900)=')(y\\+[\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='{\x00', &(0x7f00000009c0)='!9\x00', &(0x7f0000000a00)='\x00', &(0x7f0000000a40)='$)#!$,\x00', &(0x7f0000000a80)=':.\xe5%\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='-\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='&!.:\x00', &(0x7f0000000c00)='!9\x00', &(0x7f0000000c40)='@[\x00', &(0x7f0000000c80)='!9\x00'])
getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000d00), &(0x7f0000000d40)=0x8)
bind$unix(r4, &(0x7f0000000d80)=@abs={0x24, 0x1, 0x0, 0x1}, 0x8)
r5 = fcntl$getown(r1, 0x5)
ktrace(&(0x7f0000000dc0)='./file0\x00', 0x1, 0x4, r5)
r6 = getsid(r5)
kill(r6, 0x19)
ioctl$VT_GETACTIVE(r3, 0x40047607, &(0x7f0000000e00))
getsockopt(r1, 0x1, 0x1, &(0x7f0000000e40)=""/65, &(0x7f0000000ec0)=0x41)
ioctl$BIOCGRTIMEOUT(0xffffffffffffffff, 0x4010426e, &(0x7f0000000f00))
ioctl$KDGKBMODE(r3, 0x40044b06, &(0x7f0000000f40))
setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000f80)="0a05917484", 0x5)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000fc0), 0x10, 0x0)
ioctl$DIOCRSETADDRS(r7, 0xc4504445, &(0x7f0000001040)={{'./file1\x00', './file1\x00', 0x40, 0x20}, &(0x7f0000001000)=[{@empty, '\x00', './file1\x00', 0x0, 0x1, 0x3, 0xe8, 0x6, 0x9, 0x4}], 0x7, 0x1, 0x4, 0x9, 0x43f, 0x9, 0x8})
ioctl$BIOCPROMISC(r3, 0x20004269)
symlink(&(0x7f00000014c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002500)='./file0/../file0\x00')
fcntl$setown(0xffffffffffffffff, 0x6, r5)

555.731871ms ago: executing program 2 (id=11):
r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@in, &(0x7f0000000080)=0x10)
getsockname$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c)
sysctl$hw(&(0x7f0000000000)={0x4, 0xe}, 0x2, 0x0, 0x0, 0x0, 0x0)

555.127793ms ago: executing program 2 (id=12):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = setsid()
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000080)=0x401) (async)
fcntl$setown(r0, 0x6, r2) (async, rerun: 32)
write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) (async, rerun: 32)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x20001fffffffd}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r3 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r3, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4) (async)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 32)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) (async, rerun: 32)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x1000005, 0x5, 0x7ffffbff, 0xffffff86, "ff817d000063267be8793b8539d9ae9100", 0xc, 0x834f}) (async)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async, rerun: 64)
read(r6, &(0x7f0000000180)=""/196, 0xc4) (rerun: 64)

554.277297ms ago: executing program 7 (id=8):
r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000040)) (async)
r1 = dup(r0)
ioctl$KDENABIO(r1, 0x20004b3c)
ioctl$KDSETLED(r1, 0x20004b42, &(0x7f0000000080)=0x6)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$AUDIO_SETPAR(r2, 0xc0404125, &(0x7f0000000100)={0x1, 0x0, 0x20, 0x1, 0x0, 0xac44, 0xd, 0x4, 0x33, 0xdf81}) (async)
r3 = dup3(r0, r1, 0x0)
ioctl$DIOCRADDTABLES(r3, 0xc450443d, &(0x7f0000000580)={{'./file0\x00', './file0\x00', 0x8, 0x6}, &(0x7f0000000140)=[{'./file0\x00', './file0\x00', 0x1, 0x3}], 0x4, 0x1, 0x8, 0x4, 0x1, 0x8, 0x54, 0xa50e}) (async)
r4 = open$dir(&(0x7f0000000a00)='./file0\x00', 0x200, 0x146)
unlinkat(r4, &(0x7f0000000a40)='./file0\x00', 0x0)
ioctl$DIOCSTART(r3, 0x20004401) (async)
socket$inet(0x2, 0x4, 0x3e) (async)
r5 = socket(0x20, 0x1, 0x4) (async)
lseek(r2, 0x7ff, 0x2) (async)
r6 = openat$dri(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/card0\x00', 0x800, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000bc0)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[<r7=>0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x6, 0x2, 0x7, 0x1, 0x4, 0x1000, 0x86, 0x80000001})
ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000c00)={<r8=>0x0, 0x7ff, 0x0, 0x587f6f58, 0x6, 0x3})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000c40)={r7, r8, 0x9, 0x0, 0xfffffffffffff000})
r9 = accept(r3, 0x0, &(0x7f0000000c80))
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000cc0)={<r10=>0x0}, &(0x7f0000000d00)=0xc) (async)
r11 = dup(r6)
openat$klog(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) (async)
ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f0000000d80)=0x1) (async)
listen(r3, 0x80000000) (async)
bind$inet(r3, &(0x7f0000000dc0)={0x10, 0x2, 0x2, 0x5}, 0x10) (async)
recvmmsg(r1, &(0x7f0000000f80)={{&(0x7f0000000e00)=@in6, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/5, 0x5}], 0x1, &(0x7f0000000ec0)=""/191, 0xbf}, 0x43}, 0x38, 0x2, &(0x7f0000000fc0)={0x100000000, 0xfffffffffffffffb}) (async)
pwrite(r5, &(0x7f0000001000)="ba584f544f1fd8041dad32dbdb6cbd300d279a408cf8320f0f22836318d8bb743ef5c51546b901ca20b19f0e16f82efc96d8888dd94920fee1192f9332912b8d1edf9629e20fd8606cc10602d51dff8124014c35946624c296c75c1f345ae73bcd405bc8a576", 0x66, 0x2) (async)
ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000001080)={'./file0\x00', 0xe, 0xf0, 0x3, 0x1, 0x800, 0xffff8001, 0x3, 0x1, 0x2, 0x0, 0xb6f0000000000})
fcntl$setown(r11, 0x6, r10)

553.356059ms ago: executing program 2 (id=13):
r0 = socket$inet(0x2, 0x8003, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="80bc295db326735fc2b7e663af688961d9a5beffff937437595de95fbeeb41d50109c7c4b3dde167", 0x28}, {&(0x7f0000000040)="804e42f04dab2112c4139a6e754102dad6a69bafc1ed946547ffc1aeeb9d6cee83cec3d09e6c4d5d41d2a0ccb2b80a4d96d995db7796db234580ec668a4d68fabc3504524ab76c7e8457cafb9bd2d850", 0x50}], 0x2)
syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}})
readv(r0, &(0x7f0000000280)=[{0x0}], 0x1)

546.707381ms ago: executing program 4 (id=14):
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async)
ktrace(0x0, 0x0, 0x510, 0x0) (async, rerun: 64)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 64)
sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000340)={{'./file1\x00', './file0\x00', 0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x8, 0x0, 0x80000000}) (async)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async, rerun: 32)
setuid(0xee01) (async, rerun: 32)
sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000300)={0x4, 0x408, &(0x7f0000000c00)=[{0x1, './bus\x00', 0xe2b}, {0x1, './file0\x00', 0x80200000}, {0x0, './file1\x00', 0x40000001}, {0x0, './file2\x00', 0x5}]})

538.792113ms ago: executing program 2 (id=15):
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
setgid(0xffffffffffffffff)
setegid(0x0)
r2 = socket(0x18, 0x3, 0x7)
getsockopt(r2, 0x29, 0x3e, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
setresgid(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0x80d364, 0x5c, 0x1, 0xffffff87, "08d095190000a1c5edc91b8e9c57860bd92100", 0x80001, 0x600004})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

534.819762ms ago: executing program 4 (id=16):
syz_emit_ethernet(0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="09e46a84c3feaaaaaaaaaaaa08060013066006070002aaaaaaaaaaaaa6fa06921397bcaaaaaaaaaabb2cf1a8047b35eef0688a4d2cbd75a4e8"])
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xff}, 0x38, 0x801, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0)
ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe})

524.711598ms ago: executing program 4 (id=18):
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000801) (async)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xe0)
r1 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil)
getpeername(r0, &(0x7f0000000140)=@un=@abs, &(0x7f0000000240)=0x8) (async)
chmod(&(0x7f00000001c0)='./file0\x00', 0x10) (async)
r2 = shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x3000)
shmctl$IPC_RMID(r1, 0x0) (async)
shmdt(r2) (async)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000bc0)=[{0x1a0, 0x9}], 0x1})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) (async)
setitimer(0x2, &(0x7f0000000200)={{0x79, 0x8}, {0x0, 0x1000}}, &(0x7f0000000180)) (async)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) (async)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setuid(0xee01) (async)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfc) (async)
chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000200)='.\x00', 0x0)
close(r0)

495.3073ms ago: executing program 1 (id=19):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]})
r0 = socket$inet(0x2, 0x2, 0x0)
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
seteuid(r1)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc)

493.355556ms ago: executing program 4 (id=20):
openat$pf(0xffffffffffffff9c, 0x0, 0x8, 0x0) (async)
r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x8, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r1, 0xc0205603, &(0x7f0000000040)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff}) (async)
ioctl$TIOCSETA(r1, 0xc0205603, &(0x7f0000000040)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff})
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff2c)
select(0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)="335927e78aee6b0bebc220cb6d221599d103ccc83049e977da84af4fa522892456a4fd26e6b20af09de85732c0c9dac0409014cbc08d0932c102da7ca760ea6463a7af8da3094a4dd3770c308b1ca78a61a4b368c3deb746291cf9255f834eb81f702b7c50acced4701c28d800973b4250c6b52b909d0436cee1edcafc9062322b1453e9e868ea993ad05d51e227c1ddd99d", 0x92)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000040)={0x4, 0x2, 0x1, 0x10000, "5e0800008a00000f000000b0f0338a6b4fc6d780", 0x7, 0x49})
ioctl$DIOCRCLRADDRS(r0, 0xc1584460, &(0x7f0000000480)={{'./file0\x00', './file0\x00', 0x22, 0x5}, 0x0, 0x0, 0x0, 0xfff, 0x80000000, 0x8, 0x800, 0x48, 0x25})
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000377000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x2c93, 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x44, 0x0, 0x0, 0x0, 0x94fd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffdffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59e01a04, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000377000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x2c93, 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x44, 0x0, 0x0, 0x0, 0x94fd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffdffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59e01a04, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]})
r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
mknod(0x0, 0x2000, 0x203)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
close(0xffffffffffffffff)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff) (async)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_open_pts()
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0)
ioctl$DIOCRCLRTABLES(r4, 0xc450443c, &(0x7f0000000d00)={{'./file0\x00', './file0\x00', 0x3a, 0x3}, 0x0, 0x0, 0x0, 0x10000, 0x7, 0x3, 0xffffff8c, 0x4, 0x3}) (async)
ioctl$DIOCRCLRTABLES(r4, 0xc450443c, &(0x7f0000000d00)={{'./file0\x00', './file0\x00', 0x3a, 0x3}, 0x0, 0x0, 0x0, 0x10000, 0x7, 0x3, 0xffffff8c, 0x4, 0x3})
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000ac0)={0xf, 0x2, {[0x7fffffffffffffff, 0xe21d, 0x10000, 0x5, 0x8000000000000001, 0x8000000000000001, 0x23b, 0x0, 0x8, 0x81, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff4, 0x0, 0x100, 0x8001, 0x7, 0x7], [0x0, 0x1, 0x8d31, 0x5, 0x2, 0x9, 0x9, 0x6, 0x8000000000000000, 0x10000], [0x400, 0x0, 0xc59a, 0x9, 0x3, 0xe, 0xd], [0x40000b, 0x2, 0x8000000000000000, 0xa8d, 0x9eadd9f, 0xa], [{0x4, 0x7, 0x9, 0x1}, {0x8, 0x6, 0xffffffff, 0x1760}, {0x400, 0x6, 0x5, 0x4}, {0x5, 0x8001, 0x3, 0x28}, {0x2, 0x6, 0x7}, {0xaba, 0x9740, 0xfffffffe, 0x400}, {0x9, 0x7, 0x6, 0x2}, {0x0, 0xa6, 0x0, 0xfff}], {0x3, 0x80000000, 0x1, 0x2}, {0xbfe, 0x6, 0x2f4, 0x46}}}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000ac0)={0xf, 0x2, {[0x7fffffffffffffff, 0xe21d, 0x10000, 0x5, 0x8000000000000001, 0x8000000000000001, 0x23b, 0x0, 0x8, 0x81, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff4, 0x0, 0x100, 0x8001, 0x7, 0x7], [0x0, 0x1, 0x8d31, 0x5, 0x2, 0x9, 0x9, 0x6, 0x8000000000000000, 0x10000], [0x400, 0x0, 0xc59a, 0x9, 0x3, 0xe, 0xd], [0x40000b, 0x2, 0x8000000000000000, 0xa8d, 0x9eadd9f, 0xa], [{0x4, 0x7, 0x9, 0x1}, {0x8, 0x6, 0xffffffff, 0x1760}, {0x400, 0x6, 0x5, 0x4}, {0x5, 0x8001, 0x3, 0x28}, {0x2, 0x6, 0x7}, {0xaba, 0x9740, 0xfffffffe, 0x400}, {0x9, 0x7, 0x6, 0x2}, {0x0, 0xa6, 0x0, 0xfff}], {0x3, 0x80000000, 0x1, 0x2}, {0xbfe, 0x6, 0x2f4, 0x46}}})
ioctl$TIOCSETA(r3, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2}) (async)
ioctl$TIOCSETA(r3, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2})
ioctl$TIOCGETA(r4, 0x402c7413, &(0x7f0000000040))
sysctl$hw(&(0x7f0000000280)={0x6, 0x1}, 0x2, &(0x7f00000000c0)="08d3e79bf698", &(0x7f0000000180)=0x6, 0x0, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_GETKEYREPEAT(r5, 0x400c5708, &(0x7f0000000140)) (async)
ioctl$WSKBDIO_GETKEYREPEAT(r5, 0x400c5708, &(0x7f0000000140))

487.393707ms ago: executing program 1 (id=21):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000040)={0x20, 0x0, 0x4, 0x43f1, 0x8}, 0xc)
listen(r0, 0x0)
socket(0x1, 0x4000, 0x7)
setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4)

486.814743ms ago: executing program 6 (id=7):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x3)
syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[]) (async)
pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x7e, 0x3, 0x48}, {0x48, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x54, 0xff, 0x1, 0x9}, {0x87, 0xf, 0x4, 0x875e}]}) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="c2a6100000fcbb7ab81100000000f792d746cdcadf4c84e943e8176a", &(0x7f0000000000)=0x1c, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f00000001c0))
openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async)
write(r0, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) (async)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async)
r3 = semget(0x0, 0x3, 0x4)
semctl$GETPID(r3, 0x0, 0x4, &(0x7f0000000240)=""/121) (async)
fcntl$lock(r2, 0xb, 0x0)
ioctl$BIOCLOCK(r2, 0x20004276)

486.10877ms ago: executing program 7 (id=22):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
close(0x3)
fcntl$dupfd(r1, 0x0, r1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x4}, {}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {}, {0x1}, {0x1}, {0x3}, {0x2, 0xffffffff}, {}, {}, {0x2}, {0x1, 0x99}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]}) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x4}, {}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {}, {0x1}, {0x1}, {0x3}, {0x2, 0xffffffff}, {}, {}, {0x2}, {0x1, 0x99}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]})
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x74, 0x2, 0x0, 0x2}, {0x28, 0xf, 0x6, 0x40005}, {0x3c56, 0x6, 0x9, 0x598}]})
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[]) (async)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[])
listen(0xffffffffffffffff, 0x361)
ioctl$TIOCSETA(r3, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1d100", 0x84, 0x5})
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
ioctl$TIOCSETA(0xffffffffffffff9c, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x7c, 0xfffbfff0, 0xffc00000, "d6a24900b178926c79486b46c1d100", 0x4, 0x854}) (async)
ioctl$TIOCSETA(0xffffffffffffff9c, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x7c, 0xfffbfff0, 0xffc00000, "d6a24900b178926c79486b46c1d100", 0x4, 0x854})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TIOCSETA(r5, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
select(0x40, &(0x7f0000000180)={0xb4, 0x7, 0x200, 0x9, 0x2d, 0xfffffffffffffffa, 0x3, 0x8001}, &(0x7f0000000400)={0x386, 0x5, 0x4, 0x7, 0x9, 0x10001, 0x101, 0x4}, &(0x7f0000000440)={0x1, 0x6, 0x4, 0x3, 0xb5, 0x3f5a, 0xfffffffffffffc01, 0x100000000}, &(0x7f0000000480)={0x6b, 0x100000001})
close(r6)
r7 = socket(0x2, 0x3, 0xfc)
connect$unix(r7, &(0x7f0000000000), 0x10)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000))
select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0)

480.814695ms ago: executing program 1 (id=23):
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="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", 0xac1}], 0x1, 0x0}, 0x8)
sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$hw(&(0x7f0000000040)={0x6, 0x1}, 0x2, &(0x7f0000000080)="bd72c8f5536faa3e5920d982f938bf29bd3e659fdb7c7823f6823ad86dd413675b935649865aa87d79ef6b48682aade3206dcca88314b625105c422d6e32", &(0x7f00000000c0)=0x3e, &(0x7f0000000100)="e7c3cffc3c6a1e6d0a604c80e32b61e7958bbadaca50aa84cc42593d70fcb097ab6b6e06df03be97387abb71", 0x2c)
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)

396.812431ms ago: executing program 3 (id=24):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xcbdf4d1d31039a48, 0xdfc}, 0x10, 0x4000000000000004, 0x4, 0x0, 0x800002, 0x2, 0x1, 0x3})
r0 = socket(0x1, 0x4, 0x5)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
syz_emit_ethernet(0x26, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaeab64eaac0a99358149edacdafc95add76aaaabb0800450100000000000000c8e778ffff"])
setsockopt(r0, 0xffffff42, 0x1, &(0x7f0000000440)="f44490d22a", 0x5)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f0000000000), 0xffa8)
pipe2(0x0, 0xaf92fcc4d2338df)
r1 = shmget(0x0, 0x2000, 0x41, &(0x7f0000ffd000/0x2000)=nil)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
fstatat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xbffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000380)={0x7fffffff, 0x9, <r8=>0xffffffffffffff9c})
ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f00000003c0)={0x101, 0x6, 0x17a20000, 0x80000000, "e241fc7f3a2775259b06a1bc31951df7e055ed08", 0x1, 0x7f800000})
r9 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83)
ioctl$TIOCCONS(r9, 0x80047462, &(0x7f0000000040)=0x10004)
r10 = open(&(0x7f0000000740)='./bus\x00', 0x800, 0x0)
ioctl$TIOCSFLAGS(r10, 0x8004745c, &(0x7f0000000080))
bind$inet(r10, &(0x7f0000000400)={0x10, 0x2, 0x0, 0x5}, 0x10)
socket(0x18, 0x4000, 0x0)
r11 = socket(0x18, 0x2, 0x0)
setsockopt(r11, 0x1000000000029, 0x9, &(0x7f0000000540)="03000000f272df97ebe75f10cacfc52a3ed1a1639510cefda9020b1220a28d9f1b0b60d619070213340f08fb3f7c4c0cc502e290be06ee2b1558b10a95e9cd5fef2155cc4135fe76ef0561b511483875d3aba8d3f7c0b81042202f823c336385b8bc85f3df5940efdc0d0861ca14ac61c639547e03880c377c583e14f7ed6ee0e8f1eb9728ac1431b625dd789bfe42de6513cd02af1ef139e22338b7322dc28affe7be810335b790307295b0f1706923c98257ad30bbbd2da20f06b8222a7c79eaa1491d9bcd18a2a32bb72897df26be5a4db3d8efacfd9e67621478cdb8dc33036dc3abd37257ac64f8335515b700"/248, 0xf8)
connect(r11, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c)
sendto$inet6(r11, 0x0, 0x0, 0x6, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0xc9e, "000000000000088000", 0x1}, 0x1c)
r12 = getthrid()
r13 = fcntl$getown(0xffffffffffffffff, 0x5)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{r4, r7, 0xffffffffffffffff, r5, 0x2, 0x9}, 0x10001, r12, r12, 0x1, 0x0, 0x4, 0xb, 0x8, 0x66, 0x58, 0x6})
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{r2, r3, r6, 0x0, 0x131, 0xfffa, 0x0, 0x0, 0xffffffffffffffb8}, 0x0, r13, 0x0, 0xa, 0x0, 0x2bcf, 0x7, 0x100000200000f01e, 0x9, 0x80000000, 0x7})

396.237576ms ago: executing program 1 (id=25):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9}, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f00007df000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x75c460c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]})
select(0x40, &(0x7f0000000080)={0xc2, 0x38fc, 0x0, 0x2, 0x9, 0xfeffffffeffffffe, 0xfffffffffffffffd, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)='/\t', 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000616161610000004021800600", 0x2000000, 0x5})
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./bus\x00')
pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0)

395.779789ms ago: executing program 7 (id=26):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r0 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0))
setgid(0xffffffffffffffff)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x3, 0x0)
setegid(0x0)
msgsnd(r1, &(0x7f00000001c0)={0x1}, 0x8, 0x800)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 0x84, 0x51f}, 0x0, 0x0, 0xbe7f, 0x602298e2, 0x3a6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7})
setuid(0xffffffffffffffff)
msgrcv(r1, 0x0, 0x0, 0x1, 0x1c00)
socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0)
pwritev(r2, &(0x7f0000001840)=[{0x0, 0x5b}, {0x0}, {0x0}, {0x0}, {0x0, 0x4e}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xfffffffffffffffd)
truncate(&(0x7f0000000000)='./file0\x00', 0x100000200000204)

395.216202ms ago: executing program 1 (id=27):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x2e81, {0x100000000000000, 0x9}})
r0 = socket(0x18, 0x2, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4000000000000054})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x766a, 0x7ff, 0xcfe, 0xffffff01, "9cdc4580307e080000006b08fc5f81e6015fdd04", 0x7, 0x9})
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x8)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfd98}], 0x1)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x8, 0xfffffffc}, {0x1, 0x0, 0x0, 0x3}]})
unveil(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='x\x00')
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000140))
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x112)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a)
r4 = socket$inet6(0x18, 0x3, 0xe)
fchown(r4, 0x0, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./bus\x00')
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0xfffffffffffffff9, 0x0, 0x0, 0x200000001, 0x800000000000108, 0x24, 0x4})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106)
r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000100)='N', 0x1}], 0x1)
unveil(0x0, &(0x7f00000002c0)='r\x00')
ioctl$WSKBDIO_GETBELL(0xffffffffffffffff, 0x40105704, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[])
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000400)="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", &(0x7f0000000280)=0x10011, 0x0, 0x9c)
ioctl$VMM_IOC_READREGS(r3, 0xc2485607, &(0x7f0000000480)={0x1, 0x0, 0x5, {[0x8f, 0x3e2a, 0x3, 0x6, 0x7fff, 0x9, 0x5, 0x800000000, 0x1, 0x0, 0x7, 0xfffffffffffff6ff, 0x63c, 0x1, 0x101, 0xc, 0x6, 0x8b8], [0x1ff, 0x5, 0x7ce, 0x8000000000000001, 0x5, 0x19736715, 0x1ff, 0x40, 0x5, 0xb], [0x2, 0x1, 0x10000, 0xffffffffffffffff, 0x200, 0x0, 0x4], [0x2, 0x2, 0x6, 0x6, 0x7bb0, 0x9], [{0x2, 0x2, 0x5, 0xffff}, {0x4, 0x7, 0x0, 0x7}, {0x72a7, 0x999, 0x1, 0x4}, {0x7, 0x5, 0xfffffffb, 0x9}, {0x3, 0x7, 0x10000, 0x9}, {0x8, 0x9, 0x7, 0x80000001}, {0x6, 0x9, 0xe, 0x80}, {0x7, 0x1000, 0x8900, 0xb344}], {0xa, 0x3, 0x0, 0xf}, {0x3ff, 0x3, 0x74, 0x9}}})

325.107011ms ago: executing program 6 (id=28):
r0 = socket(0x18, 0x2, 0x0)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c)
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040)=0x3, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
fcntl$lock(r2, 0x7, &(0x7f00000003c0)={0x3, 0x0, 0x7fffffffffffffff, 0x1ffffffff})
sysctl$kern(&(0x7f0000000040)={0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x0, 0x7, 0x4}, {0x4, 0xcc, 0xe, 0x8}]})
r3 = socket(0x2, 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000000480)={&(0x7f0000000000)=@file={0x8, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000003c0)=[@rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r3, r3]}, @cred={0x18, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}], 0x38}, 0x4)
ioctl$FIONREAD(0xffffffffffffffff, 0x802069ad, &(0x7f00000001c0))

324.542729ms ago: executing program 6 (id=29):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f00000001c0)={0x0, 0x408, &(0x7f0000000c00)})

323.866696ms ago: executing program 3 (id=30):
sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$hw(&(0x7f0000000240)={0x6, 0x2}, 0x2, &(0x7f0000000400)="78f5ac158a8320e660908a9b06ecb385fff24aceb2a48ee56ffa86cb6f307524ffb1ee662b1b9059612f80a46699444c22d7cd904bcfc06b60cc94c436dddef8e3a882a9ffd508667cfb931d6609f081191b39f026f26f928971f5f42076287731f747f1d487e6142302", &(0x7f0000000480)=0x6a, &(0x7f00000004c0)="51fa5ff6e28dac7fd7db01d2e17887c2fb68d91f3291d2b373613475535a36dee56a43c2deb73729a281fda9", 0x2c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80)
mknodat(r0, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba)
ioctl$VNDIOCCLR(r1, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000c40)={0x2, 0x8, 0x9, {[0x1f8, 0x9, 0xa0d3, 0x8, 0x7501, 0x2, 0x8, 0x5, 0x0, 0xfffffffffffffff7, 0x5, 0x0, 0x9, 0x6, 0x4, 0x20000000000000, 0x80000001, 0x7], [0x101, 0x6, 0xa90, 0x100000001, 0x9, 0x7fffffff, 0x4, 0x5, 0x1, 0x3], [0x3f7d, 0x8, 0x3, 0x1, 0xd1f, 0x6, 0x6], [0x10001, 0x200, 0x8000, 0x0, 0x8, 0xffffffffffffffd1], [{0x2a4, 0x768, 0xad1, 0x7928}, {0x2, 0x80, 0x521}, {0xff, 0x7, 0x4, 0xa9e}, {0x9, 0x3, 0x6, 0x1}, {0xffff, 0x7ff, 0x1ff, 0x3}, {0xfffd, 0x1, 0x5, 0xfe}, {0x2, 0x5, 0xfffff365, 0x800}, {0xf99, 0x1, 0x7, 0x1}], {0x2196, 0x8, 0x7, 0x4}, {0x3be9, 0x3, 0x8, 0xe}}})
ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000040)={0x1, 0x2, 0xe6, 0x10000, "5e0800008a00000f000000b0f0338a6b4fc6d780", 0x7, 0x9})
recvmmsg(r1, &(0x7f0000000380)={{&(0x7f00000000c0)=@in6, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/65, 0x41}], 0x2, &(0x7f0000000300)=""/75, 0x4b}}, 0x38, 0x802, &(0x7f00000003c0)={0x5, 0x6})
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1c)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$VNDIOCSET(r3, 0xc0284408, &(0x7f0000000000)={0x0, 0x7, 0x0})

81.207776ms ago: executing program 6 (id=31):
chmod(&(0x7f0000000040)='.\x00', 0x35f) (async, rerun: 32)
setuid(0xee01) (rerun: 32)
r0 = socket$unix(0x1, 0x1, 0x0)
listen(r0, 0x4)
r1 = socket(0x2, 0x8000, 0x2)
bind$unix(r1, &(0x7f00000001c0)=@file={0x3, 0x0, './file0\x00'}, 0xa)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0)
ioctl$BIOCLOCK(r2, 0x20004276)
ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f0000000040)) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async, rerun: 64)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x0)
ioctl$VMM_IOC_RESETCPU(r4, 0x82405605, &(0x7f0000000340)={0x40, 0x2, {[0xfffffbfffffffff9, 0x2, 0x2, 0xc, 0x6, 0x0, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x2f01, 0x2, 0x0, 0xffffffffffffffff, 0x1e3, 0x8, 0x7, 0x2, 0x5], [0x5304, 0x7ff, 0xfffffffffffffffd, 0x20000001, 0x7, 0x7b98, 0x80000000001fe, 0xfffffffffffffffe, 0x0, 0x9467], [0x18c, 0x2, 0xfffffffffffffffe, 0x5, 0xffffffffffffffff, 0x7, 0xffffffff00000000], [0x100, 0xffd6, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe], [{0x1000, 0x7, 0x0, 0x7d06}, {0x0, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x8, 0xffffffffffffffff}, {0x2, 0x2, 0x9, 0xfffffffffffffffb}, {0xfffe, 0x28291c58, 0x9, 0x2000000000000004}, {0x0, 0x0, 0x3}, {0xfffc, 0x4, 0x40000, 0x7}], {0x9, 0x40005, 0x800}, {0xfffe, 0x80000000, 0x8, 0x3}}})
r5 = kqueue()
kevent(r5, &(0x7f0000000240), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) (async)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0) (async)
ioctl$TIOCSETA(r6, 0xc4504446, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) (async)
r7 = accept(r0, 0x0, &(0x7f0000000080))
connect$unix(r7, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa)

80.638079ms ago: executing program 3 (id=32):
r0 = socket$unix(0x1, 0x1, 0x0)
accept4(r0, &(0x7f0000000040)=@in, &(0x7f0000000140)=0x10, 0x6000) (async)
bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async)
listen(r0, 0x1)
accept$unix(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000ffff000001000000bb3b144167cca6795059c1628736acbb6b9342ac818c029797a8ff8041428a4eac57f2", @ANYRES32], 0x10, 0x4}, 0x2)
writev(r1, &(0x7f00000004c0), 0x28) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x807ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x3db6a122, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xfffffff9}, {0x101, 0x81, 0x8, 0x9}, {0x4, 0x10001, 0x8012, 0x7}, {0x401, 0xffff, 0x2800, 0x5}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x4}, {0x0, 0x1, 0x0, 0x30003}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
read(r3, &(0x7f00000002c0)=""/113, 0x71) (async)
sysctl$net_inet_esp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80) (async)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x6, 0x0, 0x20002001}, {0x61, 0x2, 0xff, 0x9}, {0x3c56, 0x1e, 0x5, 0x80000005}]}) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x22, 0x1c, 0x0, 0x6, 0x9, 0x1, 0x0, @broadcast, @multicast1}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x67, 0x8}}}}}) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$DIOCKILLSTATES(r5, 0x0, &(0x7f0000000180)={{0x12, 0x6, 0x2}, 0x2, '\x00', 0x2, {@addrmask={@v4=@multicast1, @v4=@local={0xac, 0x14, 0x0}, 0x0, 0x0, 0xe}, [0x1, 0x10], 0x28, 0x2, 0xe4}, {@addrmask={@v4=@rand_addr=0x8, @v6=@empty, 0x0, 0x0, 0x8}, [0x8000, 0x1], 0xf5, 0x2, 0x6}, './file0/file0\x00', './file0/file0\x00', 0x1, 0xdffc})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8001, 0xffff63db, 0x9, 0x8, 0x8, 0x8007c, 0x80000001, 0x10, [{0x8, 0x10000, 0xfffff115, 0x80000002}, {0x0, 0xffffffff, 0x200100, 0xa}, {0xcd5, 0x7, 0x4, 0x9}, {0x3, 0x8020fc, 0x6, 0x2000100}, {0x6, 0x2000007, 0x5, 0x5}, {0x3993, 0xfffd, 0x8, 0x40000009}, {0x10004, 0xa03, 0x3, 0xfffffffb}, {0x207, 0xffffffff, 0x228000, 0xffffe2e9}, {0x9, 0x1000, 0x5, 0x7fff}, {0x3, 0x1, 0x7, 0xfffffd76}, {0xb, 0x0, 0x8a3a0004, 0x2000a}, {0x10000, 0x0, 0x4, 0xa6a}, {0x401, 0x0, 0x400009, 0x4}, {0x3, 0x22, 0xfffffffd, 0x6f5fc48f}, {0x3, 0xff, 0x3, 0x2}, {0x9be2, 0x5, 0xfffffffe, 0xb}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
ioctl$TIOCSETA(r5, 0x80d04466, &(0x7f0000000140)={0xfffeffff, 0xa525, 0x5, 0x127492, "0849a2ba6300000058302a2f0e83050095ea0868", 0x20004118, 0x9}) (async, rerun: 64)
close(r2) (async)
socket$unix(0x1, 0x1, 0x0)

17.945479ms ago: executing program 3 (id=33):
r0 = socket(0x11, 0x3, 0x1)
getsockopt(r0, 0x11, 0x2, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffff9c, 0xc0084463, &(0x7f00000000c0)={0x8, 0xbfeffffc, 0x98b1, 0x1, "c9f755000000000000000000002000", 0x5, 0x1})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x1, &(0x7f0000000040)="71f91e3471ac0058bc5a91501d94a34b8e5f86cf71b59c7afec37082", &(0x7f0000000000)=0x1c, 0x0, 0x0)

11.21479ms ago: executing program 2 (id=34):
open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x2810, r0, 0x20000000)
socket(0x18, 0x1, 0x0) (async)
r1 = socket(0x18, 0x1, 0x0)
fcntl$setstatus(r1, 0x4, 0x40)
shutdown(r1, 0x2)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x510, 0x0)

10.884953ms ago: executing program 3 (id=35):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa17f7193403c6ab5, 0x0) (async)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (rerun: 32)
mprotect(&(0x7f0000dfa000/0x12000)=nil, 0x12000, 0x2)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x86475f144fa69879, r0, 0xfffffffffffffff9)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1, 0x3})
syz_emit_ethernet(0x76, &(0x7f0000000c40)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x40, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffc, {0x0, 0x6, '\x00', 0x0, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x37, 0x0, '\x00', [@pad1, @generic={0x2}]}]}}}}}}})

10.560109ms ago: executing program 6 (id=36):
r0 = shmget$private(0x0, 0x3000, 0x41, &(0x7f0000003000/0x3000)=nil)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
r1 = socket(0x18, 0x3, 0x20)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x8, "fe80050000000000000077000000fdff", 0x8}, 0x1c)
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
getresgid(0x0, &(0x7f00000000c0)=<r2=>0x0, 0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r2, 0x6, 0x7, 0x0, 0x0, 0x417}, 0x2, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x7, 0x2, 0x6, 0x2})
setuid(0xffffffffffffffff)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000)

8.108117ms ago: executing program 1 (id=37):
r0 = socket$inet6(0x18, 0x3, 0x2)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "1a1116f043000000000000fffffffffff700"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32)
bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x2, "000000000000000000000008068b00", 0x7}, 0x1c) (async, rerun: 32)
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102"]) (rerun: 32)

0s ago: executing program 2 (id=38):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x80, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@generic={0x21, 0x0, 0x0, "4cf9f5a3"}}}}})
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
mprotect(&(0x7f0000dfa000/0x12000)=nil, 0x12000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5], 0x1, 0x78a9db0e4530066, 0x0, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1810, r1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts.
panic: pool_do_get: shmpl free list modified: page 0xfffffd806b3fb000; item addr 0xfffffd806b3fbe70; offset 0x40=0x69fab4ed
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 114435  83089      0           0        0x1    0  syz-executor
*214130  83089      0           0  0x4000000    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff83446af7) at panic+0x1e5
pool_do_get(ffffffff83a14838,1,ffff80002a26c428) at pool_do_get+0x5df
pool_get(ffffffff83a14838,1) at pool_get+0x162
shmget_allocate_segment(ffff80003c4362c0,ffff80002a26c680,41,ffff80002a26c5d0) at shmget_allocate_segment+0x1af
sys_shmget(ffff80003c4362c0,ffff80002a26c680,ffff80002a26c5d0) at sys_shmget+0x195
syscall(ffff80002a26c680) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd3e44272fb0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: pool_do_get: shmpl free list modified: page 0xfffffd806b3fb000; item addr 0xfffffd806b3fbe70; offset 0x40=0x69fab4ed
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83446af7) at panic+0x1e5
pool_do_get(ffffffff83a14838,1,ffff80002a26c428) at pool_do_get+0x5df
pool_get(ffffffff83a14838,1) at pool_get+0x162
shmget_allocate_segment(ffff80003c4362c0,ffff80002a26c680,41,ffff80002a26c5d0) at shmget_allocate_segment+0x1af
sys_shmget(ffff80003c4362c0,ffff80002a26c680,ffff80002a26c5d0) at sys_shmget+0x195
syscall(ffff80002a26c680) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd3e44272fb0, count: -8
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a26c250
rbx               0xffff8000299bee07
rdx               0xffff8000015ef680
rcx               0xffff80003c4362c0
rax               0xffff8000299bdff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x8d7924a3d015e99a
r11               0xa38653adf1e43958
r12               0xffff8000299bec08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff824c8e75    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a26c240
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=214130 pid=83089 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=50, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4367f0,0xffffffff83a7b338
    process=0xffff80002efb7040 user=0xffff80002a267000, vmspace=0xfffffd806c190208
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 13857  224538  53345      0  2           0                syz-executor
 83089  114435  15104      0  7         0x1                syz-executor
*83089  214130  15104      0  7   0x4000000                syz-executor
 25965  484183   8484      0  2           0                syz-executor
 93175  319787  92124     -1  3        0x90  nanoslp       syz-executor
 93175  236405  92124     -1  3   0x4000090  msgwait       syz-executor
 93175   45076  92124     -1  3   0x4000090  fsleep        syz-executor
 78545  476358  79847      0  3        0x80  nanoslp       syz-executor
 78545  453151  79847      0  3   0x4000080  kqsel         syz-executor
 78545   22382  79847      0  3   0x4000080  fsleep        syz-executor
 78545   16556  79847      0  3   0x4000080  fsleep        syz-executor
 43215  354237  57042      0  3        0x90  nanoslp       syz-executor
 43215  415632  57042      0  3   0x4000098  kqread        syz-executor
 43215  185489  57042      0  3   0x4000090  fsleep        syz-executor
 20215  408776  78098      0  3        0x80  nanoslp       syz-executor
 20215   48508  78098      0  3   0x4000080  fifow         syz-executor
 20215  369070  78098      0  3   0x4000080  fsleep        syz-executor
 92124  245793  58313      0  3        0x82  nanoslp       syz-executor
 15104   58161  58313      0  3        0x82  nanoslp       syz-executor
 78098  198431  58313      0  3        0x82  nanoslp       syz-executor
 79847   53908  58313      0  3        0x82  nanoslp       syz-executor
  8484  153418  58313      0  3        0x82  nanoslp       syz-executor
 62431  337438  58313      0  2         0x2                syz-executor
 53345  277857  58313      0  3        0x82  nanoslp       syz-executor
 57042  132384  58313      0  3        0x82  nanoslp       syz-executor
 58313  274791      1      0  3        0x82  kqread        syz-executor
 56863  146282  13454      0  3        0x98  kqread        sshd-session
 13454  183721   5695      0  3        0x92  kqread        sshd-session
 98340  455728      1      0  3    0x100083  ttyin         getty
  5695  400362      1      0  3        0x88  kqread        sshd
 98146  240268  47524     74  3   0x1100092  bpf           pflogd
 47524  445622      1      0  3        0x80  sbwait        pflogd
 75005  154145  92270     73  3   0x1100090  kqread        syslogd
 92270  282261      1      0  3    0x100082  sbwait        syslogd
 10928   89347      1      0  3    0x100080  kqread        resolvd
 62231   21891  49918     77  3    0x100092  kqread        dhcpleased
 55870  102177  49918     77  3    0x100092  kqread        dhcpleased
 49918  397811      1      0  3        0x80  kqread        dhcpleased
 24722   45713      0      0  3     0x14200  bored         smr
 96636  352717      0      0  2     0x14200                zerothread
 26949  410799      0      0  3     0x14200  aiodoned      aiodoned
 49440   81732      0      0  3     0x14200  syncer        update
 52664  295237      0      0  3     0x14200  cleaner       cleaner
 38853   31130      0      0  3     0x14200  reaper        reaper
 71573   82469      0      0  3     0x14200  pgdaemon      pagedaemon
 23842   20313      0      0  3     0x14200  bored         viomb
 74917  233111      0      0  3  0x40014200  acpi0         acpi0
 18892  407133      0      0  3  0x40014200                idle1
 38194  455215      0      0  3     0x14200  bored         softnet1
 91714  434707      0      0  3     0x14200  bored         softnet0
 22359  105765      0      0  3     0x14200  bored         systqmp
 65865  518380      0      0  3     0x14200  bored         systq
 96820  147931      0      0  3     0x14200  tmoslp        softclockmp
  2319  356374      0      0  3  0x40014200  tmoslp        softclock
 75010  446167      0      0  3  0x40014200                idle0
     1  285076      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex shmpl r = 0 (0xffffffff83a14850)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  pool_get+0x124
#3  shmget_allocate_segment+0x1af
#4  sys_shmget+0x195
#5  syscall+0xb17
#6  Xsyscall+0x128
Process 83089 (syz-executor) thread 0xffff80003c4362c0 (214130)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a8dc40)
#0  witness_lock+0x5f1
#1  syscall+0xaf4
#2  Xsyscall+0x128
exclusive mutex shmpl r = 0 (0xffffffff83a14850)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  pool_get+0x124
#3  shmget_allocate_segment+0x1af
#4  sys_shmget+0x195
#5  syscall+0xb17
#6  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11058  12085K   12215K 166960K     12161        0
            pcb    17     12K      12K 166960K        21        0
         rtable   237      6K       7K 166960K       365        0
             pf    34     17K      21K 166960K        48        0
         ifaddr    43      7K       7K 166960K        45        0
        ifgroup    55      2K       2K 166960K        55        0
         sysctl     3      1K       9K 166960K         8        0
       counters    70     37K      37K 166960K        70        0
       ioctlops     0      0K       4K 166960K      1490        0
            iov     0      0K       1K 166960K         2        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1301     82K      82K 166960K      1375        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     3      0K       0K 166960K         4        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      93K 166960K       167        0
          sigio     0      0K       0K 166960K        33        0
           proc    71    115K     164K 166960K       556        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     2      0K       0K 166960K         7        0
       in_multi   100      7K       7K 166960K       101        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     1      0K       0K 166960K         2        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    55    254K     254K 166960K        55        0
           exec     0      0K       1K 166960K       391        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   221    142K     161K 166960K      3384        0
       UVM aobj     4      2K       2K 166960K         5        0
     pinsyscall    41     82K     106K 166960K      1334        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP    28      2K       2K 166960K        28        0
           temp    36   9074K    9140K 166960K      4302        0
         kqueue    14     22K      26K 166960K        31        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       39    0       36     1     0     1     1     0     8    0
rtentry    176      114    0        4     5     0     5     5     0     8    0
unpcb      144      312    0      293     6     0     6     6     0     8    5
syncache   336        3    0        3     1     0     1     1     0     8    1
tcpcb      736       14    0        8     1     0     1     1     0     8    0
arp        136       19    0        1     1     0     1     1     0     8    0
inpcb      328       86    0       74     2     0     2     2     0     8    0
nd6        152       24    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
pffrag     232        1    0        0     1     0     1     1     0   482    0
pffrnode    88        1    0        0     1     0     1     1     0     8    0
pffrent     40        1    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       21    0        0     1     0     1     1     0     8    0
pfstkey    128       21    0        0     1     0     1     1     0     8    0
pfstate    448       21    0        0     3     0     3     3     0     8    0
pfrule     1360      21    0       15     2     0     2     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      456    0        2    29     0    29    29     0     8    0
art_table   40      457    0        2     5     0     5     5     0     8    0
art_node    32      114    0       14     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        1     1     0     1     1     0     8    0
semapl     112        1    0        0     1     0     1     1     0     8    0
shmpl      112        2    0        1     1     0     1     1     0     8    0
pool(0xffffffff83a14838:shmpl): page inconsistency: page 0xfffffd806b3fb000; 33 on list, 1 missing, 35 items per page
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1606    0      134    93     0    93    93     0     8    0
ffsino     296     1606    0      134   114     0   114   114     0     8    0
nchpl      144     1855    0      143    64     0    64    64     0     8    0
vnodes     216     1705    0        0    95     0    95    95     0     8    0
namei      1024    5694    0     5694     1     0     1     1     0     8    1
percpumem   16       50    0        0     1     0     1     1     0     8    0
kstatmem   264       27    0        0     2     0     2     2     0     8    0
scxspl     216     6144    0     6144     4     2     2     3     1     8    2
plimitpl   152       30    0       14     1     0     1     1     0     8    0
sigapl     424      488    0      442     7     0     7     7     0     8    1
knotepl    120       88    0        0     3     0     3     3     0     8    0
kqueuepl   224       30    0       18     1     0     1     1     0     8    0
pipepl     344      130    0      103     3     0     3     3     0     8    0
fdescpl    528      472    0      442     3     0     3     3     0     8    0
filepl     160     1993    0     1772    16     0    16    16     0     8    6
lockfpl    104       14    0       10     1     0     1     1     0     8    0
lockfspl    48        9    0        5     1     0     1     1     0     8    0
sessionpl  144       25    0       15     1     0     1     1     0     8    0
pgrppl      48       33    0       15     1     0     1     1     0     8    0
ucredpl    104       98    0       82     1     0     1     1     0     8    0
zombiepl   144      442    0      442     1     0     1     1     0     8    1
processpl  1232     488    0      442     5     0     5     5     0     8    0
procpl     664      549    0      493     6     0     6     6     0     8    0
sockpl     752      439    0      405    18     0    18    18     0     8   14
mcl64k     65536      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     122    0        0    16     0    16    16     0     8    0
mcl2k      2048      15    0        0     2     0     2     2     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      141    0        0     9     0     9     9     0     8    0
bufpl      280     2315    0      105   158     0   158   158     0     8    0
anonpl      32     3861    0        0    32     0    32    32     0   246    0
amapchunkpl 152    9349    0     8893    21     0    21    21     0   158    1
amappl16   200     1786    0     1769     5     0     5     5     0     8    3
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184      439    0      439     1     0     1     1     0     8    1
amappl13   176      164    0      151     1     0     1     1     0     8    0
amappl12   168      727    0      698     2     0     2     2     0     8    0
amappl11   160       29    0       29     1     0     1     1     0     8    1
amappl10   152      111    0       97     1     0     1     1     0     8    0
amappl9    144      262    0      262     1     0     1     1     0     8    1
amappl8    136      108    0      106     1     0     1     1     0     8    0
amappl7    128      147    0      134     1     0     1     1     0     8    0
amappl6    120      159    0      158     1     0     1     1     0     8    0
amappl5    112       96    0       86     1     0     1     1     0     8    0
amappl4    104      307    0      285     1     0     1     1     0     8    0
amappl3     96     1652    0     1546     4     0     4     4     0     8    1
amappl2     88      529    0      469     2     0     2     2     0     8    0
amappl1     80     9521    0     8926    15     0    15    15     0     8    1
amappl      88     2646    0     2493     5     1     4     5     0    92    0
uvmvnodes   80      101    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        4    0        1     1     0     1     1     0     8    0
uaddrrnd    24      472    0      442     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      472    0      442     1     0     1     1     0     8    0
vmmpekpl   168     5617    0     5583     2     0     2     2     0     8    0
vmmpepl    168    38262    0    36412    86     0    86    86     0   357    2
vmsppl     488      471    0      442     5     0     5     5     0     8    0
rwobjpl     80    14087    0    13082    24     0    24    24     0     8    1
pdppl      4096     951    0      884   101    16    85    85     0     8   18
pvpl        32    11370    0        0    92     0    92    92     0   265    0
pmappl     256      471    0      442     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      270    0       18     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8392dff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83a8d440) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x125
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff83a8d440) at __mp_lock+0x192
ktrstruct(ffff80003c436d20,ffffffff834d84cc,ffff80003c3d6560,10) at ktrstruct+0xdf
sys_clock_gettime(ffff80003c436d20,ffff80003c3d6690,ffff80003c3d65e0) at sys_clock_gettime+0x15f
syscall(ffff80003c3d6690) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7cb4e899a110, count: 3
ddb{0}> trace
x86_ipi_db(ffffffff8392dff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83a8d440) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x125
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff83a8d440) at __mp_lock+0x192
ktrstruct(ffff80003c436d20,ffffffff834d84cc,ffff80003c3d6560,10) at ktrstruct+0xdf
sys_clock_gettime(ffff80003c436d20,ffff80003c3d6690,ffff80003c3d65e0) at sys_clock_gettime+0x15f
syscall(ffff80003c3d6690) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7cb4e899a110, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff83446af7) at panic+0x1e5
pool_do_get(ffffffff83a14838,1,ffff80002a26c428) at pool_do_get+0x5df
pool_get(ffffffff83a14838,1) at pool_get+0x162
shmget_allocate_segment(ffff80003c4362c0,ffff80002a26c680,41,ffff80002a26c5d0) at shmget_allocate_segment+0x1af
sys_shmget(ffff80003c4362c0,ffff80002a26c680,ffff80002a26c5d0) at sys_shmget+0x195
syscall(ffff80002a26c680) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd3e44272fb0, count: 7
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83446af7) at panic+0x1e5
pool_do_get(ffffffff83a14838,1,ffff80002a26c428) at pool_do_get+0x5df
pool_get(ffffffff83a14838,1) at pool_get+0x162
shmget_allocate_segment(ffff80003c4362c0,ffff80002a26c680,41,ffff80002a26c5d0) at shmget_allocate_segment+0x1af
sys_shmget(ffff80003c4362c0,ffff80002a26c680,ffff80002a26c5d0) at sys_shmget+0x195
syscall(ffff80002a26c680) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd3e44272fb0, count: -8