last executing test programs:

17.059574179s ago: executing program 5 (id=16):
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, 0xffffffffffffff9c, 0x800)
sysctl$hw(&(0x7f0000000000)={0x6, 0x7}, 0x2, &(0x7f0000000040)="481999873571d3c82a1c28982e6454a7a6d8c50e39c189f86b381d07379f24dc8891ee76caac9dafc6b2af7bf0951939ef56f030e4dca5eb788e5b646f9efb88f1bb0f06902989911cc254f48be17d81d4a521a1d451a8e16c057a0c7f891c145464d3bcb7f24f85432c1fc1b7359e2c5647967f379c6a7d56e038bc1864569e41e4205b82c91414b452d9a6b06a90609c53da83bc89f50ea48414e767c7fbf3d7c58b3e50fb509f4351cb83f1c9917156a6c1b19904e5fc63fc25d3507c17418ae315a33e3c61b0e1bcc4c137c819d390644d93800b9ba45460", &(0x7f0000000140)=0xda, &(0x7f0000000180)="03218e66b3bd0bc51b9ddb3563daf49586e062f32ac9ef9f2b0fcc93cab3cf49647874fa3b17b36298076c20b84f8a1e7f727b1731d7b523165d61908b8e3b253396e27c871bc84b8b84fd69beae0237bdd6023496405c1606e9b8f38888066005ef4cbd16010d795a34b61531f90e5d6e79529b1db4c711fb56a6f1e98d5957172d0be011e2754b976110f27839f49317c0bf4e7b181beb857b2404da5810bd941032d439942954ce88ebc0ad0c2507693df9a928ba4e0c9ab9", 0xba)
minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
r0 = socket$inet6(0x18, 0x2, 0xd)
shutdown(r0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async)
r1 = dup(r0)
ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x54, 0x7f}, &(0x7f0000000240)=[{@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x6, 0x0, 0x58, 0x4, 0x7, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x12a, 0xe38, 0x1a, 0x8, 0x80, 0x86, 0x96}, {@loopback, '\x00', './file0\x00', 0x741, 0x0, 0x2, 0xd, 0x7, 0xfd, 0x6}], 0x23a, 0x3, 0x0, 0x71d19bb3, 0xe1, 0x10, 0x2e, 0x7fffffff}) (async)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000001c00)={{&(0x7f0000000780)=@in, 0x10, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/149, 0x95}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/31, 0x1f}, {&(0x7f0000001a40)=""/136, 0x88}], 0x7, &(0x7f0000001b80)=""/95, 0x5f}, 0x8}, 0x38, 0x6040, &(0x7f0000001c40)={0xe, 0x6}) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xa010, r1, 0x2000000000000000) (async)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000001c80)={{0x1800000, './file0\x00', [{[@v4=@multicast1, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}], [0x8, 0x4], 0x8, 0x6}, {[@v6=@rand_addr="9ae2f616be77cade2e44a865fa13a799", @v6=@mcast1], [0x0, 0x5], 0x7, 0x2}], {{0x8000, 0x7c, 0xf, 0x6}, 0x3, 0xe000, 0x9, 0xe, 0x0, 0x8, 0x1}, {{0x0, 0x8, 0xf0, 0xc5b}, 0x7, 0xa46, 0x1, 0x8, 0x8001, 0x40, 0x18}, @v4=@broadcast, 0x7ff, 0x7, 0xe7b7, 0xffffffff, 0xd, [[0x1, 0xffffffff], [0x8, 0x3]], [[0x1, 0x7], [0x6, 0x8]], 0x3, [0xffffa2c6, 0x1556d10e], 0x4, 0xae453c32f1d3116c, 0x5, 0x1, 0x0, 0x6, 0x7, 0x3, 0xb0, 0x7, 0x9, 0xf001, "aacd"}}) (async)
shmget(0x2, 0x4000, 0x120, &(0x7f0000ff9000/0x4000)=nil)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001e00)={0x7, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000001e40)={r2}) (async)
sysctl$hw(&(0x7f0000001e80)={0x6, 0x4}, 0x2, &(0x7f0000001ec0)="63e55797a39a409584ba0b284daad5f5fdebcce6052b42b995fd09721df22457", &(0x7f0000001f00)=0x20, &(0x7f0000001f40), 0x0)
mknod(&(0x7f0000001f80)='./file0\x00', 0x2, 0x45) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) (async)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
fstat(r1, &(0x7f0000001fc0)) (async)
r3 = accept$inet(r1, &(0x7f0000002040), &(0x7f0000002080)=0x10)
mquery(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4, 0x0, r3, 0xcd29)

16.849054542s ago: executing program 4 (id=38):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x5, 0xfffffff9, 0x95, 0x1, 0x0, 0x81, 0x3, 0x0, 0x2, 0xb3, 0xef})
open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80)
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet(0x2, 0x2, 0x11)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r3, 0x0, 0xb, &(0x7f0000000040)='Y', 0x1)
setsockopt(r3, 0x0, 0xa, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xac1407ff}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x10, 0x2, 0x1, 0x9006}, 0x10)
truncate(&(0x7f0000000080)='./file0\x00', 0x7ffffffffff)

16.466174996s ago: executing program 4 (id=39):
madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x5)
semctl$GETALL(0x0, 0x0, 0x6, &(0x7f00000005c0)=""/241)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x20)
accept4(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f00000002c0)=0x8, 0x9000)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000000)=""/49, 0x31}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x5, 0x2)
connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x3, 0x10009}, 0x56)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f00000003c0)={0x0, 0x2, <r3=>0xffffffffffffffff, 0x0, 0x8})
r4 = open$dir(&(0x7f0000000440)='./file0\x00', 0x400, 0x2)
kevent(0xffffffffffffffff, &(0x7f0000000300)=[{{}, 0xffffffffffffffff, 0x40, 0x2, 0xd, 0x2}, {{r0}, 0xfffffffffffffff8, 0x66, 0xf0000000, 0x6, 0xfffffffffffffffa}, {{r0}, 0xfffffffffffffffe, 0x18, 0x8, 0x100000001, 0x1}, {{r1}, 0xfffffffffffffffc, 0x10, 0x2, 0x1, 0x7}, {{r2}, 0xfffffffffffffffb, 0x4, 0x1, 0x0, 0x2}, {{0xffffffffffffff9c}, 0xfffffffffffffffe, 0x20, 0x4, 0xffffffffffffff2c, 0x8}], 0x7ff, &(0x7f0000000480)=[{{r3}, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x7}, {{r4}, 0xfffffffffffffffd, 0x15, 0x2, 0x6, 0x7fffffff}], 0x3, &(0x7f00000004c0)={0xa8, 0x6714})
r5 = socket$inet6(0x18, 0x3, 0x7)
poll(&(0x7f0000000000)=[{r5, 0x100}], 0x1, 0x3)
syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffce50cafcfaf5080045c6001d0068001205119078e0000001000000004e224e22000890785e"])
syz_emit_ethernet(0xfff9, &(0x7f0000000000)=ANY=[])
mkdir(&(0x7f0000000400)='./file0\x00', 0x148)
rmdir(&(0x7f0000000000)='./file0\x00')
r6 = semget(0x2, 0x1, 0x20)
semctl$GETZCNT(r6, 0x4, 0x7, &(0x7f0000000040)=""/15)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffff43, 0xffffff01, 0xff, 0x401, 0x60a, 0x3], 0x6, 0x10000, 0x0, <r7=>0xffffffffffffffff})
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r8 = socket$inet(0x2, 0x3, 0xb4)
setsockopt(r8, 0x0, 0xa, &(0x7f0000000040)='Y', 0x1)
setsockopt(r5, 0x0, 0x9, &(0x7f0000000080)="ecdae374b76e10fe6191d828", 0xc)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000140)={0xa, 0x0, &(0x7f0000000100)=[0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000180)={r9})
ioctl$FIOASYNC(r5, 0x81206919, &(0x7f0000000580)=0x8)

16.21348506s ago: executing program 4 (id=42):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7)
sendmmsg(r1, &(0x7f0000002280)={{&(0x7f0000000100)=@in={0x10, 0x2, 0x2, 0x1800000}, 0x10, &(0x7f00000021c0), 0x0, 0x0}}, 0x38, 0x404) (async)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = dup2(r2, r2)
ioctl$DIOCXBEGIN(r3, 0xc00c7007, &(0x7f0000000080)={0x0, 0x1ffffd, 0x0}) (async)
r4 = getthrid() (async)
lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) (async, rerun: 64)
r6 = getpgid(0xffffffffffffffff) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000100)={0x0, <r8=>0x0}, &(0x7f0000000000)=0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r10=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r10, 0xffffffffffffffff) (async, rerun: 64)
setresuid(r10, r8, r8) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r12=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r12, 0xffffffffffffffff) (async)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
sendmsg$unix(r3, &(0x7f0000000a80)={&(0x7f00000004c0)=@abs={0xe, 0x1, 0x0, 0x0}, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000500)="e4cd3abe00d06859e609ebba67b47cffd461fba8e6d1cdcb8ee74f9f1a2e034c678ccb76542aee290c732ee4ec131a5bc7d3c9ef2a2efb571255d5ac0381795acbeb30fcc232576f402cee1e95bbfb6e30a8d46b7f60c7a5cf9617b081c7ddd08435b91643801927124108dac9200ab89fd84c7d3b38c332f13a799cd9bfa8593828", 0x82}], 0x1, &(0x7f0000000980)=[@cred={0x18, 0xffff, 0x0, 0xffffffffffffffff}, @rights={0x14, 0xffff, 0x1, [r3, r2]}, @cred={0x18, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x18}, @cred={0x18}, @cred={0x18, 0xffff, 0x0, r4, 0xffffffffffffffff, r5}, @rights={0x10, 0xffff, 0x1, [r2]}, @cred={0x18, 0xffff, 0x0, r6, r10, 0xffffffffffffffff}, @cred={0x18, 0xffff, 0x0, 0x0, r12, r13}], 0xcc, 0x20b}, 0x0) (async)
r14 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
r15 = syz_open_pts()
write(r15, &(0x7f0000000180)='B', 0x1) (async)
ioctl$TIOCSETAF(r15, 0x802c7416, &(0x7f0000000000)={0xffffbb4a, 0x49f7, 0x2, 0xb1, "700edb386615055c793ca3fe7115192627d10ea7", 0xd59, 0x6})
mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x4cc2) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
ioctl$DIOCXBEGIN(r14, 0xc00c7007, &(0x7f0000001900)={0x0, 0x0, 0x0}) (async, rerun: 32)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async, rerun: 32)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

16.210871371s ago: executing program 7 (id=8):
mkdir(&(0x7f0000000540)='./file0\x00', 0x10c) (async)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000500)="d9a377c7c2f3af", &(0x7f00000000c0)=0x7, 0x0, 0x0) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async)
unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00')
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

14.778252014s ago: executing program 3 (id=20):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
chroot(&(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1)
r2 = syz_open_pts()
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}})
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}})
mkdir(&(0x7f0000000080)='./file0\x00', 0x204) (async)
chroot(&(0x7f0000000000)='./file0\x00') (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async)
open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005}) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) (async)
syz_open_pts() (async)
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}}) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}}) (async)

14.777928559s ago: executing program 6 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000180)=0x40)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c})
syz_open_pts()
r2 = kqueue1(0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
seteuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
syz_emit_ethernet(0x1201, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
syz_emit_ethernet(0x2a, &(0x7f0000000cc0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @generic="11f21b9371d67a17"}}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r3 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r3, 0xc0206923, &(0x7f0000000580)=0x7)
r4 = socket$inet6(0x18, 0x4, 0x0)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7) (async)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7)
pselect(0x40, &(0x7f0000000080)={0xb, 0x9, 0x7d, 0x5, 0x7, 0x0, 0xfffffffffffffff9, 0x7}, 0x0, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0)
kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff6, 0x5, 0x10, 0x400000000c, 0x56a}], 0xf00, 0x0, 0xffff4b54, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000)
ioctl$DIOCIGETIFACES(0xffffffffffffffff, 0xc0284457, 0x0)
fcntl$getown(0xffffffffffffffff, 0x5) (async)
fcntl$getown(0xffffffffffffffff, 0x5)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3}) (async)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0)

14.777600465s ago: executing program 5 (id=16):
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, 0xffffffffffffff9c, 0x800)
sysctl$hw(&(0x7f0000000000)={0x6, 0x7}, 0x2, &(0x7f0000000040)="481999873571d3c82a1c28982e6454a7a6d8c50e39c189f86b381d07379f24dc8891ee76caac9dafc6b2af7bf0951939ef56f030e4dca5eb788e5b646f9efb88f1bb0f06902989911cc254f48be17d81d4a521a1d451a8e16c057a0c7f891c145464d3bcb7f24f85432c1fc1b7359e2c5647967f379c6a7d56e038bc1864569e41e4205b82c91414b452d9a6b06a90609c53da83bc89f50ea48414e767c7fbf3d7c58b3e50fb509f4351cb83f1c9917156a6c1b19904e5fc63fc25d3507c17418ae315a33e3c61b0e1bcc4c137c819d390644d93800b9ba45460", &(0x7f0000000140)=0xda, &(0x7f0000000180)="03218e66b3bd0bc51b9ddb3563daf49586e062f32ac9ef9f2b0fcc93cab3cf49647874fa3b17b36298076c20b84f8a1e7f727b1731d7b523165d61908b8e3b253396e27c871bc84b8b84fd69beae0237bdd6023496405c1606e9b8f38888066005ef4cbd16010d795a34b61531f90e5d6e79529b1db4c711fb56a6f1e98d5957172d0be011e2754b976110f27839f49317c0bf4e7b181beb857b2404da5810bd941032d439942954ce88ebc0ad0c2507693df9a928ba4e0c9ab9", 0xba)
minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
r0 = socket$inet6(0x18, 0x2, 0xd)
shutdown(r0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async)
r1 = dup(r0)
ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x54, 0x7f}, &(0x7f0000000240)=[{@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x6, 0x0, 0x58, 0x4, 0x7, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x12a, 0xe38, 0x1a, 0x8, 0x80, 0x86, 0x96}, {@loopback, '\x00', './file0\x00', 0x741, 0x0, 0x2, 0xd, 0x7, 0xfd, 0x6}], 0x23a, 0x3, 0x0, 0x71d19bb3, 0xe1, 0x10, 0x2e, 0x7fffffff}) (async)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000001c00)={{&(0x7f0000000780)=@in, 0x10, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/149, 0x95}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/31, 0x1f}, {&(0x7f0000001a40)=""/136, 0x88}], 0x7, &(0x7f0000001b80)=""/95, 0x5f}, 0x8}, 0x38, 0x6040, &(0x7f0000001c40)={0xe, 0x6}) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xa010, r1, 0x2000000000000000) (async)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000001c80)={{0x1800000, './file0\x00', [{[@v4=@multicast1, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}], [0x8, 0x4], 0x8, 0x6}, {[@v6=@rand_addr="9ae2f616be77cade2e44a865fa13a799", @v6=@mcast1], [0x0, 0x5], 0x7, 0x2}], {{0x8000, 0x7c, 0xf, 0x6}, 0x3, 0xe000, 0x9, 0xe, 0x0, 0x8, 0x1}, {{0x0, 0x8, 0xf0, 0xc5b}, 0x7, 0xa46, 0x1, 0x8, 0x8001, 0x40, 0x18}, @v4=@broadcast, 0x7ff, 0x7, 0xe7b7, 0xffffffff, 0xd, [[0x1, 0xffffffff], [0x8, 0x3]], [[0x1, 0x7], [0x6, 0x8]], 0x3, [0xffffa2c6, 0x1556d10e], 0x4, 0xae453c32f1d3116c, 0x5, 0x1, 0x0, 0x6, 0x7, 0x3, 0xb0, 0x7, 0x9, 0xf001, "aacd"}}) (async)
shmget(0x2, 0x4000, 0x120, &(0x7f0000ff9000/0x4000)=nil)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001e00)={0x7, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000001e40)={r2}) (async)
sysctl$hw(&(0x7f0000001e80)={0x6, 0x4}, 0x2, &(0x7f0000001ec0)="63e55797a39a409584ba0b284daad5f5fdebcce6052b42b995fd09721df22457", &(0x7f0000001f00)=0x20, &(0x7f0000001f40), 0x0)
mknod(&(0x7f0000001f80)='./file0\x00', 0x2, 0x45) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) (async)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
fstat(r1, &(0x7f0000001fc0)) (async)
r3 = accept$inet(r1, &(0x7f0000002040), &(0x7f0000002080)=0x10)
mquery(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4, 0x0, r3, 0xcd29)

13.862268409s ago: executing program 1 (id=40):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = setsid()
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400))
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9)
fcntl$setown(r1, 0x6, r2)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0)
pipe(&(0x7f0000000000)) (async)
setsid() (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2) (async)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9) (async)
fcntl$setown(r1, 0x6, r2) (async)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0) (async)

13.861913774s ago: executing program 4 (id=42):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7)
sendmmsg(r1, &(0x7f0000002280)={{&(0x7f0000000100)=@in={0x10, 0x2, 0x2, 0x1800000}, 0x10, &(0x7f00000021c0), 0x0, 0x0}}, 0x38, 0x404) (async)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = dup2(r2, r2)
ioctl$DIOCXBEGIN(r3, 0xc00c7007, &(0x7f0000000080)={0x0, 0x1ffffd, 0x0}) (async)
r4 = getthrid() (async)
lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) (async, rerun: 64)
r6 = getpgid(0xffffffffffffffff) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000100)={0x0, <r8=>0x0}, &(0x7f0000000000)=0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r10=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r10, 0xffffffffffffffff) (async, rerun: 64)
setresuid(r10, r8, r8) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r12=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r12, 0xffffffffffffffff) (async)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
sendmsg$unix(r3, &(0x7f0000000a80)={&(0x7f00000004c0)=@abs={0xe, 0x1, 0x0, 0x0}, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000500)="e4cd3abe00d06859e609ebba67b47cffd461fba8e6d1cdcb8ee74f9f1a2e034c678ccb76542aee290c732ee4ec131a5bc7d3c9ef2a2efb571255d5ac0381795acbeb30fcc232576f402cee1e95bbfb6e30a8d46b7f60c7a5cf9617b081c7ddd08435b91643801927124108dac9200ab89fd84c7d3b38c332f13a799cd9bfa8593828", 0x82}], 0x1, &(0x7f0000000980)=[@cred={0x18, 0xffff, 0x0, 0xffffffffffffffff}, @rights={0x14, 0xffff, 0x1, [r3, r2]}, @cred={0x18, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x18}, @cred={0x18}, @cred={0x18, 0xffff, 0x0, r4, 0xffffffffffffffff, r5}, @rights={0x10, 0xffff, 0x1, [r2]}, @cred={0x18, 0xffff, 0x0, r6, r10, 0xffffffffffffffff}, @cred={0x18, 0xffff, 0x0, 0x0, r12, r13}], 0xcc, 0x20b}, 0x0) (async)
r14 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
r15 = syz_open_pts()
write(r15, &(0x7f0000000180)='B', 0x1) (async)
ioctl$TIOCSETAF(r15, 0x802c7416, &(0x7f0000000000)={0xffffbb4a, 0x49f7, 0x2, 0xb1, "700edb386615055c793ca3fe7115192627d10ea7", 0xd59, 0x6})
mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x4cc2) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
ioctl$DIOCXBEGIN(r14, 0xc00c7007, &(0x7f0000001900)={0x0, 0x0, 0x0}) (async, rerun: 32)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async, rerun: 32)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

13.039393836s ago: executing program 6 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000180)=0x40)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c})
syz_open_pts()
r2 = kqueue1(0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
seteuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
syz_emit_ethernet(0x1201, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
syz_emit_ethernet(0x2a, &(0x7f0000000cc0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @generic="11f21b9371d67a17"}}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r3 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r3, 0xc0206923, &(0x7f0000000580)=0x7)
r4 = socket$inet6(0x18, 0x4, 0x0)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7) (async)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7)
pselect(0x40, &(0x7f0000000080)={0xb, 0x9, 0x7d, 0x5, 0x7, 0x0, 0xfffffffffffffff9, 0x7}, 0x0, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0)
kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff6, 0x5, 0x10, 0x400000000c, 0x56a}], 0xf00, 0x0, 0xffff4b54, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000)
ioctl$DIOCIGETIFACES(0xffffffffffffffff, 0xc0284457, 0x0)
fcntl$getown(0xffffffffffffffff, 0x5) (async)
fcntl$getown(0xffffffffffffffff, 0x5)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3}) (async)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0)

12.829292176s ago: executing program 7 (id=8):
mkdir(&(0x7f0000000540)='./file0\x00', 0x10c) (async)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000500)="d9a377c7c2f3af", &(0x7f00000000c0)=0x7, 0x0, 0x0) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async)
unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00')
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

12.159905753s ago: executing program 0 (id=47):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/142, 0x8e}, 0x5}, 0x38, 0x2040, 0x0) (async)
recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3840, 0x0) (async)
write(r1, &(0x7f0000001100)='W', 0x1) (async)
write(r1, &(0x7f0000000280)="b6833e1d0de0959e5e", 0x9)
r2 = socket$inet(0x2, 0x3, 0x2)
closefrom(r2) (async)
setsockopt(r2, 0x0, 0x15, 0x0, 0x0)
closefrom(r1)

12.136187434s ago: executing program 1 (id=40):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = setsid()
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400))
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9)
fcntl$setown(r1, 0x6, r2)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0)
pipe(&(0x7f0000000000)) (async)
setsid() (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2) (async)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9) (async)
fcntl$setown(r1, 0x6, r2) (async)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0) (async)

11.927532108s ago: executing program 3 (id=20):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
chroot(&(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1)
r2 = syz_open_pts()
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}})
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}})
mkdir(&(0x7f0000000080)='./file0\x00', 0x204) (async)
chroot(&(0x7f0000000000)='./file0\x00') (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async)
open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005}) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) (async)
syz_open_pts() (async)
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}}) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}}) (async)

11.92707582s ago: executing program 5 (id=16):
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, 0xffffffffffffff9c, 0x800)
sysctl$hw(&(0x7f0000000000)={0x6, 0x7}, 0x2, &(0x7f0000000040)="481999873571d3c82a1c28982e6454a7a6d8c50e39c189f86b381d07379f24dc8891ee76caac9dafc6b2af7bf0951939ef56f030e4dca5eb788e5b646f9efb88f1bb0f06902989911cc254f48be17d81d4a521a1d451a8e16c057a0c7f891c145464d3bcb7f24f85432c1fc1b7359e2c5647967f379c6a7d56e038bc1864569e41e4205b82c91414b452d9a6b06a90609c53da83bc89f50ea48414e767c7fbf3d7c58b3e50fb509f4351cb83f1c9917156a6c1b19904e5fc63fc25d3507c17418ae315a33e3c61b0e1bcc4c137c819d390644d93800b9ba45460", &(0x7f0000000140)=0xda, &(0x7f0000000180)="03218e66b3bd0bc51b9ddb3563daf49586e062f32ac9ef9f2b0fcc93cab3cf49647874fa3b17b36298076c20b84f8a1e7f727b1731d7b523165d61908b8e3b253396e27c871bc84b8b84fd69beae0237bdd6023496405c1606e9b8f38888066005ef4cbd16010d795a34b61531f90e5d6e79529b1db4c711fb56a6f1e98d5957172d0be011e2754b976110f27839f49317c0bf4e7b181beb857b2404da5810bd941032d439942954ce88ebc0ad0c2507693df9a928ba4e0c9ab9", 0xba)
minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
r0 = socket$inet6(0x18, 0x2, 0xd)
shutdown(r0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async)
r1 = dup(r0)
ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x54, 0x7f}, &(0x7f0000000240)=[{@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x6, 0x0, 0x58, 0x4, 0x7, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x12a, 0xe38, 0x1a, 0x8, 0x80, 0x86, 0x96}, {@loopback, '\x00', './file0\x00', 0x741, 0x0, 0x2, 0xd, 0x7, 0xfd, 0x6}], 0x23a, 0x3, 0x0, 0x71d19bb3, 0xe1, 0x10, 0x2e, 0x7fffffff}) (async)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000001c00)={{&(0x7f0000000780)=@in, 0x10, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/149, 0x95}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/31, 0x1f}, {&(0x7f0000001a40)=""/136, 0x88}], 0x7, &(0x7f0000001b80)=""/95, 0x5f}, 0x8}, 0x38, 0x6040, &(0x7f0000001c40)={0xe, 0x6}) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xa010, r1, 0x2000000000000000) (async)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000001c80)={{0x1800000, './file0\x00', [{[@v4=@multicast1, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}], [0x8, 0x4], 0x8, 0x6}, {[@v6=@rand_addr="9ae2f616be77cade2e44a865fa13a799", @v6=@mcast1], [0x0, 0x5], 0x7, 0x2}], {{0x8000, 0x7c, 0xf, 0x6}, 0x3, 0xe000, 0x9, 0xe, 0x0, 0x8, 0x1}, {{0x0, 0x8, 0xf0, 0xc5b}, 0x7, 0xa46, 0x1, 0x8, 0x8001, 0x40, 0x18}, @v4=@broadcast, 0x7ff, 0x7, 0xe7b7, 0xffffffff, 0xd, [[0x1, 0xffffffff], [0x8, 0x3]], [[0x1, 0x7], [0x6, 0x8]], 0x3, [0xffffa2c6, 0x1556d10e], 0x4, 0xae453c32f1d3116c, 0x5, 0x1, 0x0, 0x6, 0x7, 0x3, 0xb0, 0x7, 0x9, 0xf001, "aacd"}}) (async)
shmget(0x2, 0x4000, 0x120, &(0x7f0000ff9000/0x4000)=nil)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001e00)={0x7, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000001e40)={r2}) (async)
sysctl$hw(&(0x7f0000001e80)={0x6, 0x4}, 0x2, &(0x7f0000001ec0)="63e55797a39a409584ba0b284daad5f5fdebcce6052b42b995fd09721df22457", &(0x7f0000001f00)=0x20, &(0x7f0000001f40), 0x0)
mknod(&(0x7f0000001f80)='./file0\x00', 0x2, 0x45) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) (async)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
fstat(r1, &(0x7f0000001fc0)) (async)
r3 = accept$inet(r1, &(0x7f0000002040), &(0x7f0000002080)=0x10)
mquery(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4, 0x0, r3, 0xcd29)

11.31780266s ago: executing program 4 (id=42):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7)
sendmmsg(r1, &(0x7f0000002280)={{&(0x7f0000000100)=@in={0x10, 0x2, 0x2, 0x1800000}, 0x10, &(0x7f00000021c0), 0x0, 0x0}}, 0x38, 0x404) (async)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = dup2(r2, r2)
ioctl$DIOCXBEGIN(r3, 0xc00c7007, &(0x7f0000000080)={0x0, 0x1ffffd, 0x0}) (async)
r4 = getthrid() (async)
lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) (async, rerun: 64)
r6 = getpgid(0xffffffffffffffff) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000100)={0x0, <r8=>0x0}, &(0x7f0000000000)=0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r10=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r10, 0xffffffffffffffff) (async, rerun: 64)
setresuid(r10, r8, r8) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r12=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r12, 0xffffffffffffffff) (async)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
sendmsg$unix(r3, &(0x7f0000000a80)={&(0x7f00000004c0)=@abs={0xe, 0x1, 0x0, 0x0}, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000500)="e4cd3abe00d06859e609ebba67b47cffd461fba8e6d1cdcb8ee74f9f1a2e034c678ccb76542aee290c732ee4ec131a5bc7d3c9ef2a2efb571255d5ac0381795acbeb30fcc232576f402cee1e95bbfb6e30a8d46b7f60c7a5cf9617b081c7ddd08435b91643801927124108dac9200ab89fd84c7d3b38c332f13a799cd9bfa8593828", 0x82}], 0x1, &(0x7f0000000980)=[@cred={0x18, 0xffff, 0x0, 0xffffffffffffffff}, @rights={0x14, 0xffff, 0x1, [r3, r2]}, @cred={0x18, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x18}, @cred={0x18}, @cred={0x18, 0xffff, 0x0, r4, 0xffffffffffffffff, r5}, @rights={0x10, 0xffff, 0x1, [r2]}, @cred={0x18, 0xffff, 0x0, r6, r10, 0xffffffffffffffff}, @cred={0x18, 0xffff, 0x0, 0x0, r12, r13}], 0xcc, 0x20b}, 0x0) (async)
r14 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
r15 = syz_open_pts()
write(r15, &(0x7f0000000180)='B', 0x1) (async)
ioctl$TIOCSETAF(r15, 0x802c7416, &(0x7f0000000000)={0xffffbb4a, 0x49f7, 0x2, 0xb1, "700edb386615055c793ca3fe7115192627d10ea7", 0xd59, 0x6})
mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x4cc2) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
ioctl$DIOCXBEGIN(r14, 0xc00c7007, &(0x7f0000001900)={0x0, 0x0, 0x0}) (async, rerun: 32)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async, rerun: 32)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

11.092201802s ago: executing program 6 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000180)=0x40)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c})
syz_open_pts()
r2 = kqueue1(0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
seteuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
syz_emit_ethernet(0x1201, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
syz_emit_ethernet(0x2a, &(0x7f0000000cc0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @generic="11f21b9371d67a17"}}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r3 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r3, 0xc0206923, &(0x7f0000000580)=0x7)
r4 = socket$inet6(0x18, 0x4, 0x0)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7) (async)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7)
pselect(0x40, &(0x7f0000000080)={0xb, 0x9, 0x7d, 0x5, 0x7, 0x0, 0xfffffffffffffff9, 0x7}, 0x0, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0)
kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff6, 0x5, 0x10, 0x400000000c, 0x56a}], 0xf00, 0x0, 0xffff4b54, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000)
ioctl$DIOCIGETIFACES(0xffffffffffffffff, 0xc0284457, 0x0)
fcntl$getown(0xffffffffffffffff, 0x5) (async)
fcntl$getown(0xffffffffffffffff, 0x5)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3}) (async)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0)

10.358461544s ago: executing program 7 (id=8):
mkdir(&(0x7f0000000540)='./file0\x00', 0x10c) (async)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000500)="d9a377c7c2f3af", &(0x7f00000000c0)=0x7, 0x0, 0x0) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async)
unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00')
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

10.148698616s ago: executing program 0 (id=47):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/142, 0x8e}, 0x5}, 0x38, 0x2040, 0x0) (async)
recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3840, 0x0) (async)
write(r1, &(0x7f0000001100)='W', 0x1) (async)
write(r1, &(0x7f0000000280)="b6833e1d0de0959e5e", 0x9)
r2 = socket$inet(0x2, 0x3, 0x2)
closefrom(r2) (async)
setsockopt(r2, 0x0, 0x15, 0x0, 0x0)
closefrom(r1)

9.90111599s ago: executing program 3 (id=20):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
chroot(&(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1)
r2 = syz_open_pts()
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}})
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}})
mkdir(&(0x7f0000000080)='./file0\x00', 0x204) (async)
chroot(&(0x7f0000000000)='./file0\x00') (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async)
open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005}) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) (async)
syz_open_pts() (async)
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}}) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}}) (async)

9.555257533s ago: executing program 1 (id=40):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = setsid()
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400))
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9)
fcntl$setown(r1, 0x6, r2)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0)
pipe(&(0x7f0000000000)) (async)
setsid() (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2) (async)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9) (async)
fcntl$setown(r1, 0x6, r2) (async)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0) (async)

9.006729926s ago: executing program 5 (id=16):
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, 0xffffffffffffff9c, 0x800)
sysctl$hw(&(0x7f0000000000)={0x6, 0x7}, 0x2, &(0x7f0000000040)="481999873571d3c82a1c28982e6454a7a6d8c50e39c189f86b381d07379f24dc8891ee76caac9dafc6b2af7bf0951939ef56f030e4dca5eb788e5b646f9efb88f1bb0f06902989911cc254f48be17d81d4a521a1d451a8e16c057a0c7f891c145464d3bcb7f24f85432c1fc1b7359e2c5647967f379c6a7d56e038bc1864569e41e4205b82c91414b452d9a6b06a90609c53da83bc89f50ea48414e767c7fbf3d7c58b3e50fb509f4351cb83f1c9917156a6c1b19904e5fc63fc25d3507c17418ae315a33e3c61b0e1bcc4c137c819d390644d93800b9ba45460", &(0x7f0000000140)=0xda, &(0x7f0000000180)="03218e66b3bd0bc51b9ddb3563daf49586e062f32ac9ef9f2b0fcc93cab3cf49647874fa3b17b36298076c20b84f8a1e7f727b1731d7b523165d61908b8e3b253396e27c871bc84b8b84fd69beae0237bdd6023496405c1606e9b8f38888066005ef4cbd16010d795a34b61531f90e5d6e79529b1db4c711fb56a6f1e98d5957172d0be011e2754b976110f27839f49317c0bf4e7b181beb857b2404da5810bd941032d439942954ce88ebc0ad0c2507693df9a928ba4e0c9ab9", 0xba)
minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
r0 = socket$inet6(0x18, 0x2, 0xd)
shutdown(r0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async)
r1 = dup(r0)
ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x54, 0x7f}, &(0x7f0000000240)=[{@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x6, 0x0, 0x58, 0x4, 0x7, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x12a, 0xe38, 0x1a, 0x8, 0x80, 0x86, 0x96}, {@loopback, '\x00', './file0\x00', 0x741, 0x0, 0x2, 0xd, 0x7, 0xfd, 0x6}], 0x23a, 0x3, 0x0, 0x71d19bb3, 0xe1, 0x10, 0x2e, 0x7fffffff}) (async)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000001c00)={{&(0x7f0000000780)=@in, 0x10, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/149, 0x95}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/31, 0x1f}, {&(0x7f0000001a40)=""/136, 0x88}], 0x7, &(0x7f0000001b80)=""/95, 0x5f}, 0x8}, 0x38, 0x6040, &(0x7f0000001c40)={0xe, 0x6}) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xa010, r1, 0x2000000000000000) (async)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000001c80)={{0x1800000, './file0\x00', [{[@v4=@multicast1, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}], [0x8, 0x4], 0x8, 0x6}, {[@v6=@rand_addr="9ae2f616be77cade2e44a865fa13a799", @v6=@mcast1], [0x0, 0x5], 0x7, 0x2}], {{0x8000, 0x7c, 0xf, 0x6}, 0x3, 0xe000, 0x9, 0xe, 0x0, 0x8, 0x1}, {{0x0, 0x8, 0xf0, 0xc5b}, 0x7, 0xa46, 0x1, 0x8, 0x8001, 0x40, 0x18}, @v4=@broadcast, 0x7ff, 0x7, 0xe7b7, 0xffffffff, 0xd, [[0x1, 0xffffffff], [0x8, 0x3]], [[0x1, 0x7], [0x6, 0x8]], 0x3, [0xffffa2c6, 0x1556d10e], 0x4, 0xae453c32f1d3116c, 0x5, 0x1, 0x0, 0x6, 0x7, 0x3, 0xb0, 0x7, 0x9, 0xf001, "aacd"}}) (async)
shmget(0x2, 0x4000, 0x120, &(0x7f0000ff9000/0x4000)=nil)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001e00)={0x7, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000001e40)={r2}) (async)
sysctl$hw(&(0x7f0000001e80)={0x6, 0x4}, 0x2, &(0x7f0000001ec0)="63e55797a39a409584ba0b284daad5f5fdebcce6052b42b995fd09721df22457", &(0x7f0000001f00)=0x20, &(0x7f0000001f40), 0x0)
mknod(&(0x7f0000001f80)='./file0\x00', 0x2, 0x45) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) (async)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
fstat(r1, &(0x7f0000001fc0)) (async)
r3 = accept$inet(r1, &(0x7f0000002040), &(0x7f0000002080)=0x10)
mquery(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4, 0x0, r3, 0xcd29)

8.354379849s ago: executing program 6 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000180)=0x40)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c})
syz_open_pts()
r2 = kqueue1(0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
seteuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
syz_emit_ethernet(0x1201, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
syz_emit_ethernet(0x2a, &(0x7f0000000cc0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @generic="11f21b9371d67a17"}}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r3 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r3, 0xc0206923, &(0x7f0000000580)=0x7)
r4 = socket$inet6(0x18, 0x4, 0x0)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7) (async)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7)
pselect(0x40, &(0x7f0000000080)={0xb, 0x9, 0x7d, 0x5, 0x7, 0x0, 0xfffffffffffffff9, 0x7}, 0x0, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0)
kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff6, 0x5, 0x10, 0x400000000c, 0x56a}], 0xf00, 0x0, 0xffff4b54, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000)
ioctl$DIOCIGETIFACES(0xffffffffffffffff, 0xc0284457, 0x0)
fcntl$getown(0xffffffffffffffff, 0x5) (async)
fcntl$getown(0xffffffffffffffff, 0x5)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3}) (async)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0)

8.354295279s ago: executing program 0 (id=47):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/142, 0x8e}, 0x5}, 0x38, 0x2040, 0x0) (async)
recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3840, 0x0) (async)
write(r1, &(0x7f0000001100)='W', 0x1) (async)
write(r1, &(0x7f0000000280)="b6833e1d0de0959e5e", 0x9)
r2 = socket$inet(0x2, 0x3, 0x2)
closefrom(r2) (async)
setsockopt(r2, 0x0, 0x15, 0x0, 0x0)
closefrom(r1)

8.145212525s ago: executing program 7 (id=8):
mkdir(&(0x7f0000000540)='./file0\x00', 0x10c) (async)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000500)="d9a377c7c2f3af", &(0x7f00000000c0)=0x7, 0x0, 0x0) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async)
unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00')
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

7.938465828s ago: executing program 3 (id=20):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
chroot(&(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1)
r2 = syz_open_pts()
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}})
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}})
mkdir(&(0x7f0000000080)='./file0\x00', 0x204) (async)
chroot(&(0x7f0000000000)='./file0\x00') (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async)
open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005}) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) (async)
syz_open_pts() (async)
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}}) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}}) (async)

6.843439553s ago: executing program 1 (id=40):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = setsid()
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400))
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9)
fcntl$setown(r1, 0x6, r2)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0)
pipe(&(0x7f0000000000)) (async)
setsid() (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2) (async)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9) (async)
fcntl$setown(r1, 0x6, r2) (async)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0) (async)

6.633843852s ago: executing program 6 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000180)=0x40)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c})
syz_open_pts()
r2 = kqueue1(0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
seteuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
syz_emit_ethernet(0x1201, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
syz_emit_ethernet(0x2a, &(0x7f0000000cc0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @generic="11f21b9371d67a17"}}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r3 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r3, 0xc0206923, &(0x7f0000000580)=0x7)
r4 = socket$inet6(0x18, 0x4, 0x0)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7) (async)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7)
pselect(0x40, &(0x7f0000000080)={0xb, 0x9, 0x7d, 0x5, 0x7, 0x0, 0xfffffffffffffff9, 0x7}, 0x0, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0)
kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff6, 0x5, 0x10, 0x400000000c, 0x56a}], 0xf00, 0x0, 0xffff4b54, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000)
ioctl$DIOCIGETIFACES(0xffffffffffffffff, 0xc0284457, 0x0)
fcntl$getown(0xffffffffffffffff, 0x5) (async)
fcntl$getown(0xffffffffffffffff, 0x5)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3}) (async)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0)

5.629242216s ago: executing program 0 (id=47):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/142, 0x8e}, 0x5}, 0x38, 0x2040, 0x0) (async)
recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3840, 0x0) (async)
write(r1, &(0x7f0000001100)='W', 0x1) (async)
write(r1, &(0x7f0000000280)="b6833e1d0de0959e5e", 0x9)
r2 = socket$inet(0x2, 0x3, 0x2)
closefrom(r2) (async)
setsockopt(r2, 0x0, 0x15, 0x0, 0x0)
closefrom(r1)

5.436379248s ago: executing program 1 (id=40):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = setsid()
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400))
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9)
fcntl$setown(r1, 0x6, r2)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0)
pipe(&(0x7f0000000000)) (async)
setsid() (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2) (async)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9) (async)
fcntl$setown(r1, 0x6, r2) (async)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0) (async)

5.435092108s ago: executing program 3 (id=20):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
chroot(&(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1)
r2 = syz_open_pts()
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}})
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}})
mkdir(&(0x7f0000000080)='./file0\x00', 0x204) (async)
chroot(&(0x7f0000000000)='./file0\x00') (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async)
open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005}) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) (async)
syz_open_pts() (async)
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}}) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}}) (async)

5.434735345s ago: executing program 5 (id=16):
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, 0xffffffffffffff9c, 0x800)
sysctl$hw(&(0x7f0000000000)={0x6, 0x7}, 0x2, &(0x7f0000000040)="481999873571d3c82a1c28982e6454a7a6d8c50e39c189f86b381d07379f24dc8891ee76caac9dafc6b2af7bf0951939ef56f030e4dca5eb788e5b646f9efb88f1bb0f06902989911cc254f48be17d81d4a521a1d451a8e16c057a0c7f891c145464d3bcb7f24f85432c1fc1b7359e2c5647967f379c6a7d56e038bc1864569e41e4205b82c91414b452d9a6b06a90609c53da83bc89f50ea48414e767c7fbf3d7c58b3e50fb509f4351cb83f1c9917156a6c1b19904e5fc63fc25d3507c17418ae315a33e3c61b0e1bcc4c137c819d390644d93800b9ba45460", &(0x7f0000000140)=0xda, &(0x7f0000000180)="03218e66b3bd0bc51b9ddb3563daf49586e062f32ac9ef9f2b0fcc93cab3cf49647874fa3b17b36298076c20b84f8a1e7f727b1731d7b523165d61908b8e3b253396e27c871bc84b8b84fd69beae0237bdd6023496405c1606e9b8f38888066005ef4cbd16010d795a34b61531f90e5d6e79529b1db4c711fb56a6f1e98d5957172d0be011e2754b976110f27839f49317c0bf4e7b181beb857b2404da5810bd941032d439942954ce88ebc0ad0c2507693df9a928ba4e0c9ab9", 0xba)
minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
r0 = socket$inet6(0x18, 0x2, 0xd)
shutdown(r0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async)
r1 = dup(r0)
ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x54, 0x7f}, &(0x7f0000000240)=[{@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x6, 0x0, 0x58, 0x4, 0x7, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x12a, 0xe38, 0x1a, 0x8, 0x80, 0x86, 0x96}, {@loopback, '\x00', './file0\x00', 0x741, 0x0, 0x2, 0xd, 0x7, 0xfd, 0x6}], 0x23a, 0x3, 0x0, 0x71d19bb3, 0xe1, 0x10, 0x2e, 0x7fffffff}) (async)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000001c00)={{&(0x7f0000000780)=@in, 0x10, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/149, 0x95}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/31, 0x1f}, {&(0x7f0000001a40)=""/136, 0x88}], 0x7, &(0x7f0000001b80)=""/95, 0x5f}, 0x8}, 0x38, 0x6040, &(0x7f0000001c40)={0xe, 0x6}) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xa010, r1, 0x2000000000000000) (async)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000001c80)={{0x1800000, './file0\x00', [{[@v4=@multicast1, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}], [0x8, 0x4], 0x8, 0x6}, {[@v6=@rand_addr="9ae2f616be77cade2e44a865fa13a799", @v6=@mcast1], [0x0, 0x5], 0x7, 0x2}], {{0x8000, 0x7c, 0xf, 0x6}, 0x3, 0xe000, 0x9, 0xe, 0x0, 0x8, 0x1}, {{0x0, 0x8, 0xf0, 0xc5b}, 0x7, 0xa46, 0x1, 0x8, 0x8001, 0x40, 0x18}, @v4=@broadcast, 0x7ff, 0x7, 0xe7b7, 0xffffffff, 0xd, [[0x1, 0xffffffff], [0x8, 0x3]], [[0x1, 0x7], [0x6, 0x8]], 0x3, [0xffffa2c6, 0x1556d10e], 0x4, 0xae453c32f1d3116c, 0x5, 0x1, 0x0, 0x6, 0x7, 0x3, 0xb0, 0x7, 0x9, 0xf001, "aacd"}}) (async)
shmget(0x2, 0x4000, 0x120, &(0x7f0000ff9000/0x4000)=nil)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001e00)={0x7, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000001e40)={r2}) (async)
sysctl$hw(&(0x7f0000001e80)={0x6, 0x4}, 0x2, &(0x7f0000001ec0)="63e55797a39a409584ba0b284daad5f5fdebcce6052b42b995fd09721df22457", &(0x7f0000001f00)=0x20, &(0x7f0000001f40), 0x0)
mknod(&(0x7f0000001f80)='./file0\x00', 0x2, 0x45) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) (async)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
fstat(r1, &(0x7f0000001fc0)) (async)
r3 = accept$inet(r1, &(0x7f0000002040), &(0x7f0000002080)=0x10)
mquery(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4, 0x0, r3, 0xcd29)

5.43466876s ago: executing program 7 (id=8):
mkdir(&(0x7f0000000540)='./file0\x00', 0x10c) (async)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000500)="d9a377c7c2f3af", &(0x7f00000000c0)=0x7, 0x0, 0x0) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async)
unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00')
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

3.239423384s ago: executing program 2 (id=57):
mknod(&(0x7f0000000e40)='./file0\x00', 0x2000, 0x208d9)
open$dir(&(0x7f0000001880)='./file0\x00', 0x80, 0x105)

2.418107542s ago: executing program 2 (id=58):
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r0 = syz_open_pts()
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) (async, rerun: 32)
r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
closefrom(r1) (async, rerun: 32)
setrlimit(0x8, &(0x7f00000002c0)={0x9, 0x37e1790c}) (async, rerun: 32)
syz_open_pts() (async, rerun: 32)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 32)
r2 = socket$inet6(0x18, 0x1, 0x0)
getsockopt$sock_int(r2, 0xffff, 0x200, &(0x7f0000000000), &(0x7f0000000080)=0xfffffe93) (async, rerun: 64)
writev(r0, &(0x7f0000001300)=[{0x0}], 0x1) (rerun: 64)
r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@random="8dfe71328551", @local, [], {@ipv6={0x86dd, {0x8, 0x6, "595b81", 0x30, 0x2c, 0x4, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xa, {0x4, 0x6, '\x00\x00\b', 0xf000, 0x62, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0xfeff}, @mcast2}}}}}}}) (async)
writev(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)="bf9fd1fb4af14d2e147e0771d67f89426cbf32b633f34bad59634255e9ce631ac6180e530ef4eb2187dd358cc316b9d91d2a5c43933bf32d6a453dcfa40bf7dd3365f2c6ca6fca4dbd94e5aae8bd9745de1247aba391e2b1760a0184251aeae27827ae3b81cc84796032c591ee981bc8348122020731362e12e78533c1bbf381e531be768a6fbb19c12fcb795ade7f7b61146280d03ac27322b5e18ce2689db598bc0d69538b036a0cfe178885dd2eea79dc204b83da4789aca9e5d23873abc48740a6b9454d446a56d437456f4afdb6e2e46ea1e43e303797b31057459d8cb45b29958a5b2f077406ecab1414e34d1ecfc0be8771e095", 0xf7}, {&(0x7f0000000600)="6f2cf29456da0beee542c7b128f7fc854d425869341bcd2243f3fc038f395688eab1aee5c9545374916caff992f0c4d14538c1fcf64faa7aae0eb862cbe8edb7ce2a37bf390e873f0cc77b536347cc6b500f83d04d6626acabc9dceb8bf30ac4308f79226b36252b154d4bacfb1b5baa73506f6b3604991d7eac494a724d83944f37f87bbf02f7b87a8a7aa7a7ecac6dac5ae312e1cabc9469df9f43cb9326157d1a84605a25ce26c5f58eace8e5", 0xae}, {&(0x7f0000000240)="bd1b8354ffac2b4c5975da82455b41faa241f84f8853b81000a761cca2736b8c2a7cedea6f7182ea99dd8c614a21d58a71f9d4c69107444e50cd51f271b97612fc48ffbfb532244f45b2de0c0de6945edeefc47383efd6a87e74464ca935e82db4a389641bc8a11b09228655aa723a370249f0d1de965ceb546cd09a3ddaa86f035420e6791b871f27d69f91b557c4064fbae65b588235c429", 0x99}, {&(0x7f0000000300)="fce9be37e9838619680de7ea3a75b52d84c255cc31e803f821c127ee8f8b2e1330d5a4f9febb5af856121dae91ac19ac05bbc0cffbfc0f6ba7d4f0c4a197b3ae22687dec1089ebc80c06f7a7f5ba2a1aa0711236070f0265d7f558e248409659547e9e005d1ed285fc1ca8718da1346cfa2b1b855dd4d5", 0x77}, {&(0x7f0000000380)="096fdf946807ed8a99119fae39d683ed467fdb6f71ae8936591574e81432c981b92e8e2bc03dd75523", 0x29}, {&(0x7f00000003c0)="e3b73fb8b580cf1d51cb52a47f08009464c9f43654265676e80c1ef46bc8209ae24658b5ad4c32ed2f5f0dd8016288922205c52fa4c53fdf6f3ba63cf130f4e1820b5f561e293d5f3d963fc266abe39928ef0a7723c0cdd12001a633003dfc4d7b89de79a5ecc438d2ac12cf74d0544b57b149be93a21900000000", 0x7b}, {&(0x7f0000000480)="0ee20978c817d0a41f714160b5832bedc19053ea7795ba338b53c0ababa8b5bf4479bd07952f49eba4f8496370285cc3e4ecd857b84c87c59241d3871d25c4d6c15a15223077cab629ef6c1c59b1f945bd1d0de4e4b135d0ea33f8b0d358dba99570fc9ffc2f980f5cc6fb65b94e67e88f97534a58f49706793a26db9881c973c91bc2e8505c3762c91a8f9fb04b3d3c2484e863752082ae9c31f82e6860ef0e0a19e96a9910c6aef494bad1d279652bdf757d9176481ac3ff", 0xb9}, {&(0x7f0000000540)="1b4eeac6c0ef3177adade9f59391d2e0f51d4eed79f4a1373d84a58086810e2b0fd2be1b850435ea9ab941a76350c3", 0x2f}], 0x8)
unveil(0x0, &(0x7f0000000040)='w\x00')

2.417663313s ago: executing program 3 (id=20):
mkdir(&(0x7f0000000080)='./file0\x00', 0x204)
chroot(&(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1)
r2 = syz_open_pts()
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}})
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}})
mkdir(&(0x7f0000000080)='./file0\x00', 0x204) (async)
chroot(&(0x7f0000000000)='./file0\x00') (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async)
open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000100000005}) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) (async)
syz_open_pts() (async)
ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r1, 0x6}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1001}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x40}}) (async)
ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0xb, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x7, 0x4b5}, 0x1}, {{0xd, 0x6}, {0x2f1d, 0x10001}, 0x4}, {{0xc, 0x2}, {0x9, 0x1002}, 0x3ffffffc}, {0x407, 0xfffffffd, 0x6, 0x800400}, 0x0, 0x22c, 0x7, 0x80000001, 0x4}}) (async)

2.417386461s ago: executing program 5 (id=16):
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, 0xffffffffffffff9c, 0x800)
sysctl$hw(&(0x7f0000000000)={0x6, 0x7}, 0x2, &(0x7f0000000040)="481999873571d3c82a1c28982e6454a7a6d8c50e39c189f86b381d07379f24dc8891ee76caac9dafc6b2af7bf0951939ef56f030e4dca5eb788e5b646f9efb88f1bb0f06902989911cc254f48be17d81d4a521a1d451a8e16c057a0c7f891c145464d3bcb7f24f85432c1fc1b7359e2c5647967f379c6a7d56e038bc1864569e41e4205b82c91414b452d9a6b06a90609c53da83bc89f50ea48414e767c7fbf3d7c58b3e50fb509f4351cb83f1c9917156a6c1b19904e5fc63fc25d3507c17418ae315a33e3c61b0e1bcc4c137c819d390644d93800b9ba45460", &(0x7f0000000140)=0xda, &(0x7f0000000180)="03218e66b3bd0bc51b9ddb3563daf49586e062f32ac9ef9f2b0fcc93cab3cf49647874fa3b17b36298076c20b84f8a1e7f727b1731d7b523165d61908b8e3b253396e27c871bc84b8b84fd69beae0237bdd6023496405c1606e9b8f38888066005ef4cbd16010d795a34b61531f90e5d6e79529b1db4c711fb56a6f1e98d5957172d0be011e2754b976110f27839f49317c0bf4e7b181beb857b2404da5810bd941032d439942954ce88ebc0ad0c2507693df9a928ba4e0c9ab9", 0xba)
minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
r0 = socket$inet6(0x18, 0x2, 0xd)
shutdown(r0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async)
r1 = dup(r0)
ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x54, 0x7f}, &(0x7f0000000240)=[{@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x6, 0x0, 0x58, 0x4, 0x7, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x12a, 0xe38, 0x1a, 0x8, 0x80, 0x86, 0x96}, {@loopback, '\x00', './file0\x00', 0x741, 0x0, 0x2, 0xd, 0x7, 0xfd, 0x6}], 0x23a, 0x3, 0x0, 0x71d19bb3, 0xe1, 0x10, 0x2e, 0x7fffffff}) (async)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000001c00)={{&(0x7f0000000780)=@in, 0x10, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/149, 0x95}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/31, 0x1f}, {&(0x7f0000001a40)=""/136, 0x88}], 0x7, &(0x7f0000001b80)=""/95, 0x5f}, 0x8}, 0x38, 0x6040, &(0x7f0000001c40)={0xe, 0x6}) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xa010, r1, 0x2000000000000000) (async)
ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000001c80)={{0x1800000, './file0\x00', [{[@v4=@multicast1, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}], [0x8, 0x4], 0x8, 0x6}, {[@v6=@rand_addr="9ae2f616be77cade2e44a865fa13a799", @v6=@mcast1], [0x0, 0x5], 0x7, 0x2}], {{0x8000, 0x7c, 0xf, 0x6}, 0x3, 0xe000, 0x9, 0xe, 0x0, 0x8, 0x1}, {{0x0, 0x8, 0xf0, 0xc5b}, 0x7, 0xa46, 0x1, 0x8, 0x8001, 0x40, 0x18}, @v4=@broadcast, 0x7ff, 0x7, 0xe7b7, 0xffffffff, 0xd, [[0x1, 0xffffffff], [0x8, 0x3]], [[0x1, 0x7], [0x6, 0x8]], 0x3, [0xffffa2c6, 0x1556d10e], 0x4, 0xae453c32f1d3116c, 0x5, 0x1, 0x0, 0x6, 0x7, 0x3, 0xb0, 0x7, 0x9, 0xf001, "aacd"}}) (async)
shmget(0x2, 0x4000, 0x120, &(0x7f0000ff9000/0x4000)=nil)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001e00)={0x7, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000001e40)={r2}) (async)
sysctl$hw(&(0x7f0000001e80)={0x6, 0x4}, 0x2, &(0x7f0000001ec0)="63e55797a39a409584ba0b284daad5f5fdebcce6052b42b995fd09721df22457", &(0x7f0000001f00)=0x20, &(0x7f0000001f40), 0x0)
mknod(&(0x7f0000001f80)='./file0\x00', 0x2, 0x45) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) (async)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
fstat(r1, &(0x7f0000001fc0)) (async)
r3 = accept$inet(r1, &(0x7f0000002040), &(0x7f0000002080)=0x10)
mquery(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4, 0x0, r3, 0xcd29)

2.416975026s ago: executing program 2 (id=59):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x10001, 0x3, 0x200], 0x3, 0x4, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x96b4a38cd1c0bffd}) (async)
sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$hw(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="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", 0xe41) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) (async)
sysctl$vm(&(0x7f0000004180)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001100), 0x4) (async)
ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0xc0104401, &(0x7f0000000040)={0x5, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x1000000000000006, 0x13}, 0x16}, {{0x5, 0x2}, {0x7, 0x9}, 0x4}, {{0xe0, 0x5}, {0x1, 0xffe}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x2}}) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x2000100000005}) (async)
getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0xffffffffffffffff])
setresgid(r4, r3, 0x0)
getgroups(0x7, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff, <r5=>0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff])
setresgid(r5, 0x0, 0xffffffffffffffff)
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f00000002c0)="8c656a12", &(0x7f0000000240)=0x4, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (rerun: 64)
fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x5, 0x2000120000005}) (async)
ioctl$DIOCRCLRADDRS(r1, 0xc4504442, &(0x7f0000000780)={{'./file1\x00', './file0\x00', 0x64}, 0x0, 0x0, 0x0, 0xff, 0x7fffffff, 0x1ff, 0x0, 0x28, 0x5}) (async)
ioctl$DIOCRGETTSTATS(r1, 0xc4504440, &(0x7f0000000300)={{'./file1\x00', '\x00', 0x4d, 0x8c}, 0x0, 0x10001, 0x0, 0x100d3, 0x81, 0x7, 0xfffffff5, 0x0, 0x1ff}) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) (async, rerun: 64)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r7, 0x0, 0xd, &(0x7f0000000100)="9a35566918948a466191d828", 0xc)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x812, r6, 0x400000)
munmap(&(0x7f000028d000/0x3000)=nil, 0x3000) (async)
unlink(&(0x7f0000000080)='./file0\x00') (async)
sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x3, &(0x7f0000000280)="ee8f409198157e3b0d482cd811439e57ce10400716e4853368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000140)=0x5b, 0x0, 0x0) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)

2.018339607s ago: executing program 0 (id=47):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/142, 0x8e}, 0x5}, 0x38, 0x2040, 0x0) (async)
recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3840, 0x0) (async)
write(r1, &(0x7f0000001100)='W', 0x1) (async)
write(r1, &(0x7f0000000280)="b6833e1d0de0959e5e", 0x9)
r2 = socket$inet(0x2, 0x3, 0x2)
closefrom(r2) (async)
setsockopt(r2, 0x0, 0x15, 0x0, 0x0)
closefrom(r1)

1.8015837s ago: executing program 1 (id=40):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = setsid()
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400))
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9)
fcntl$setown(r1, 0x6, r2)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0)
pipe(&(0x7f0000000000)) (async)
setsid() (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x2) (async)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/228, 0xe4}], 0x5, 0x9) (async)
fcntl$setown(r1, 0x6, r2) (async)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, &(0x7f00000005c0)="2ff8b4c66903197326185256ded31ebd193e70bccad11986119e97a00079240772c3a2ddc883585bdf3697a50021aa0cd597644b209f2599dab27e3c84910744", &(0x7f0000000600)=0x40, &(0x7f0000000640)="62e698b3", 0x4) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x0) (async)

1.800626761s ago: executing program 2 (id=60):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x4ca, 0x0)
r1 = open(&(0x7f0000001980)='./file0\x00', 0x8, 0x1cc)
ioctl$TIOCSETD(r1, 0xc0785101, &(0x7f0000000080)=0x9)
ioctl$DIOCRCLRADDRS(r1, 0xc4504442, &(0x7f0000000940)={{'./file0/file0\x00', './file2\x00', 0x20, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x34, 0x86, 0xffff, 0x5e, 0x76800000})
write(r0, &(0x7f0000000080)="7471915723fea168e57bed", 0xb)
ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f00000007c0)={0x0, 0x6, {'\x00', './file0/file0\x00', './file0/file0\x00', './file0\x00', {{0x8, 0xfffffffd}, {0x3acb6bd0, 0x6}, 0x8}, {{0x2}, {0xed, 0x8}, 0x40}, {{0xe, 0x2}, {0x6, 0x8}, 0x4}, {0x9, 0x0, 0x1, 0xaa6}, 0x0, 0x80000000, 0x2, 0xfffffffb, 0x7ff}})

1.600529196s ago: executing program 4 (id=42):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7)
sendmmsg(r1, &(0x7f0000002280)={{&(0x7f0000000100)=@in={0x10, 0x2, 0x2, 0x1800000}, 0x10, &(0x7f00000021c0), 0x0, 0x0}}, 0x38, 0x404) (async)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = dup2(r2, r2)
ioctl$DIOCXBEGIN(r3, 0xc00c7007, &(0x7f0000000080)={0x0, 0x1ffffd, 0x0}) (async)
r4 = getthrid() (async)
lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) (async, rerun: 64)
r6 = getpgid(0xffffffffffffffff) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000100)={0x0, <r8=>0x0}, &(0x7f0000000000)=0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r10=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r10, 0xffffffffffffffff) (async, rerun: 64)
setresuid(r10, r8, r8) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r12=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0x0, r12, 0xffffffffffffffff) (async)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
sendmsg$unix(r3, &(0x7f0000000a80)={&(0x7f00000004c0)=@abs={0xe, 0x1, 0x0, 0x0}, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000500)="e4cd3abe00d06859e609ebba67b47cffd461fba8e6d1cdcb8ee74f9f1a2e034c678ccb76542aee290c732ee4ec131a5bc7d3c9ef2a2efb571255d5ac0381795acbeb30fcc232576f402cee1e95bbfb6e30a8d46b7f60c7a5cf9617b081c7ddd08435b91643801927124108dac9200ab89fd84c7d3b38c332f13a799cd9bfa8593828", 0x82}], 0x1, &(0x7f0000000980)=[@cred={0x18, 0xffff, 0x0, 0xffffffffffffffff}, @rights={0x14, 0xffff, 0x1, [r3, r2]}, @cred={0x18, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x18}, @cred={0x18}, @cred={0x18, 0xffff, 0x0, r4, 0xffffffffffffffff, r5}, @rights={0x10, 0xffff, 0x1, [r2]}, @cred={0x18, 0xffff, 0x0, r6, r10, 0xffffffffffffffff}, @cred={0x18, 0xffff, 0x0, 0x0, r12, r13}], 0xcc, 0x20b}, 0x0) (async)
r14 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
r15 = syz_open_pts()
write(r15, &(0x7f0000000180)='B', 0x1) (async)
ioctl$TIOCSETAF(r15, 0x802c7416, &(0x7f0000000000)={0xffffbb4a, 0x49f7, 0x2, 0xb1, "700edb386615055c793ca3fe7115192627d10ea7", 0xd59, 0x6})
mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x4cc2) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
ioctl$DIOCXBEGIN(r14, 0xc00c7007, &(0x7f0000001900)={0x0, 0x0, 0x0}) (async, rerun: 32)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async, rerun: 32)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

1.397355741s ago: executing program 6 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000180)=0x40)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c})
syz_open_pts()
r2 = kqueue1(0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
seteuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
syz_emit_ethernet(0x1201, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
syz_emit_ethernet(0x2a, &(0x7f0000000cc0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @generic="11f21b9371d67a17"}}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
r3 = socket$inet(0x2, 0x3, 0x14)
ioctl$FIOASYNC(r3, 0xc0206923, &(0x7f0000000580)=0x7)
r4 = socket$inet6(0x18, 0x4, 0x0)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7) (async)
ioctl$FIOASYNC(r4, 0x8020699f, &(0x7f0000000580)=0x7)
pselect(0x40, &(0x7f0000000080)={0xb, 0x9, 0x7d, 0x5, 0x7, 0x0, 0xfffffffffffffff9, 0x7}, 0x0, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x6c8cc395cf8f6906, 0x6, 0x400000000000005}, {{r1}, 0xfffffffffffffff8, 0x48, 0x20000000, 0x0, 0xfffffffffffffffb}], 0x2, 0x0, 0x5, 0x0)
kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff6, 0x5, 0x10, 0x400000000c, 0x56a}], 0xf00, 0x0, 0xffff4b54, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000)
ioctl$DIOCIGETIFACES(0xffffffffffffffff, 0xc0284457, 0x0)
fcntl$getown(0xffffffffffffffff, 0x5) (async)
fcntl$getown(0xffffffffffffffff, 0x5)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3}) (async)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0, 0x3})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async)
pselect(0x40, &(0x7f0000000280)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, 0x0, 0x0, 0x0, 0x0)

1.396880143s ago: executing program 2 (id=61):
open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0)
ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x7fdf, 0x7fd, 0x8, 0x6, 0xa}]})
mprotect(&(0x7f00001c4000/0x3000)=nil, 0x3000, 0x1)
r1 = kqueue()
futimens(r1, &(0x7f00000002c0)=[{0xfffffffffffffff9, 0x13c40}, {0x1, 0x6}])
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f00000000c0)=0x1)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
sysctl$net_inet_carp(&(0x7f0000001240)={0x4, 0x2, 0x70, 0x1}, 0x2, &(0x7f0000000000)="b11efad0f20dac5904a1", 0x0, 0x0, 0x0)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f00000000c0)={0x2, 0x1})
sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0x18, 0x1, 0x6)
setsockopt(r3, 0x6, 0x6, &(0x7f0000000140)="04000000", 0x4)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000023c0), &(0x7f0000000000)=0x19, 0x0, 0xfffffffffffffe99)
r4 = socket$inet6(0x18, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x6c, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x1dc8, 0x6f9}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x67, &(0x7f0000000080)={0x4, 0x0, 0xf, 0x5ded, 0x3e6a}, 0xc)
sysctl$hw(&(0x7f0000000040)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$vfs_nfs(&(0x7f0000000180)={0xa, 0x2, 0x3}, 0x3, &(0x7f00000001c0)="e3658ee897baf343b91041ca53faa6ba2101528bae4a526fa090da8f8514a2f9b19061624561100d8a32833fffe6010a39063ff4f695d509d0", &(0x7f0000000200)=0x39, &(0x7f0000000240)="7d2aef05c94dc4025258cd5d58b183267b59d9c61885636a67e63424280ebd27f791735b1ebf0b9d6716b3bfcbb4fe70836ed14c66569f83ede9d9d86f6d4efb5125d0081bc7b09223c5242febe63e458cbc5d629f0821a16a74bc22e6fdc031220ee276f028e55421b3f186cac7f51a8e39656b", 0x74)

1.395827483s ago: executing program 7 (id=8):
mkdir(&(0x7f0000000540)='./file0\x00', 0x10c) (async)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000500)="d9a377c7c2f3af", &(0x7f00000000c0)=0x7, 0x0, 0x0) (async)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') (async, rerun: 32)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async)
unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00')
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

1.035347457s ago: executing program 2 (id=62):
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0}, 0xc)
lchown(&(0x7f0000000000)='./file0\x00', r0, r1)
ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffffff, 0x8058574f, &(0x7f0000000140)={'./file0\x00', 0x3, 0x80, 0x20, 0x0, 0xfffff000, 0x3, 0x6, 0x1, 0x2, 0x1, 0x8})
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x80, 0x0)
mkfifo(&(0x7f0000000200)='./file0\x00', 0x1)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1)
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f00000002c0)='./file0/../file0\x00')
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
futimens(r4, &(0x7f0000000340)=[{0xa7, 0x98e322f}, {0x8, 0xf6}])
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000380)={0x1, 0x0, 0xa, 0x8bde}, 0xc)
unveil(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='w\x00')
shutdown(r3, 0x1)
r5 = socket(0x6, 0x2, 0x1)
accept(r5, &(0x7f0000000440)=@in, &(0x7f0000000480)=0x10)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f00000004c0)={0x10, 0x1, './file0\x00', 0x501a, 0x0, 0x92, 0x6})
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0)
r7 = shmget$private(0x0, 0x10000, 0x208, &(0x7f0000fec000/0x10000)=nil)
shmat(r7, &(0x7f0000fed000/0x3000)=nil, 0x5000)
ioctl$DIOCRGETADDRS(r4, 0xc4504446, &(0x7f0000000600)={{'./file0/../file0\x00', './file0\x00', 0x40, 0x2}, &(0x7f0000000540)=[{@broadcast, '\x00', './file0/../file0', 0x6, 0x1, 0x1c, 0x0, 0x81, 0x81, 0x6}, {@multicast2, '\x00', './file0\x00', 0x7ff, 0xfffa, 0x18, 0x7c, 0x1, 0xbc, 0x4b}, {@broadcast, '\x00', './file0\x00', 0x3, 0x8, 0x1, 0x0, 0x0, 0x8, 0x2}], 0x1, 0x3, 0x8, 0x3ff, 0x1ff, 0x8, 0x22, 0x3})
ioctl$TIOCMBIC(r3, 0x8004746b, &(0x7f0000000a80)=0x5)
r8 = open$dir(&(0x7f0000000b00)='./file0\x00', 0x8, 0x24)
symlinkat(&(0x7f0000000ac0)='./file0\x00', r8, &(0x7f0000000b40)='./file0\x00')
msync(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2)
futimes(r6, &(0x7f0000000b80)=[{0x8001, 0x9d}, {0x0, 0x26}])
mkfifo(&(0x7f0000000bc0)='./file0\x00', 0x100)
shmctl$IPC_RMID(r7, 0x0)
munmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000)

0s ago: executing program 0 (id=47):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/142, 0x8e}, 0x5}, 0x38, 0x2040, 0x0) (async)
recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3840, 0x0) (async)
write(r1, &(0x7f0000001100)='W', 0x1) (async)
write(r1, &(0x7f0000000280)="b6833e1d0de0959e5e", 0x9)
r2 = socket$inet(0x2, 0x3, 0x2)
closefrom(r2) (async)
setsockopt(r2, 0x0, 0x15, 0x0, 0x0)
closefrom(r1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
uvm_fault(0xffff800001be9d78, 0x8, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      knote_processfork+0x287:        movq    0x8(%r15),%r14
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 163147   6934      0           0          0    1  syz-executor
*182020   6934      0           0  0x4000000    0  syz-executor
knote_processfork(ffffffff85e32ee0,1203b) at knote_processfork+0x287
fork1(ffffffff85e32b80,f0,ffffffff8349e060,0,0,ffff800029a1e1c0) at fork1+0x1225
kthread_create(ffffffff8349e060,0,0,ffffffff84c49da0) at kthread_create+0xa8
nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7
nfs_sysctl(ffff800029a1e3c8,1,0,ffff800029a1e3a0,200000000200,0,ffff800029a1e620) at nfs_sysctl+0x102
sys_sysctl(ffff8000298f2fa8,ffff800029a1e620,ffff800029a1e580) at sys_sysctl+0x54f
syscall(ffff800029a1e620) at syscall+0x1089
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1d816eb090, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xffff800001be9d78, 0x8, 0, 1) -> e
ddb{0}> show kasan
kasan: no report recorded this boot
ddb{0}> trace
knote_processfork(ffffffff85e32ee0,1203b) at knote_processfork+0x287
fork1(ffffffff85e32b80,f0,ffffffff8349e060,0,0,ffff800029a1e1c0) at fork1+0x1225
kthread_create(ffffffff8349e060,0,0,ffffffff84c49da0) at kthread_create+0xa8
nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7
nfs_sysctl(ffff800029a1e3c8,1,0,ffff800029a1e3a0,200000000200,0,ffff800029a1e620) at nfs_sysctl+0x102
sys_sysctl(ffff8000298f2fa8,ffff800029a1e620,ffff800029a1e580) at sys_sysctl+0x54f
syscall(ffff800029a1e620) at syscall+0x1089
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1d816eb090, count: -8
ddb{0}> show registers
rdi                              0x8
rsi                              0x1
rbp               0xffff800029a1e090
rbx               0xffff800001c9964a
rdx                                0
rcx               0xffffffff850c7ff0    cpu_info_full_primary+0x1ff0
rax                              0x1
r8                               0x8
r9                               0x1
r10                                0
r11               0xffffffff835906e0    filt_proc
r12               0xffff800029a1df40
r13               0xffff800029a1df40
r14               0xffffffff85e33020    process0+0x140
r15                                0
rip               0xffffffff8359eaf7    knote_processfork+0x287
cs                               0x8
rflags                       0x10286    __ALIGN_SIZE+0xf286
rsp               0xffff800029a1dee0
ss                              0x10
knote_processfork+0x287:        movq    0x8(%r15),%r14
ddb{0}> show proc
PROC (syz-executor) tid=182020 pid=6934 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=77, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000298f34d8,0xffff8000298f2028
    process=0xffff8000336ff9e8 user=0xffff800029a13000, vmspace=0xffff800001be9d78
    estcpu=27, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 73787  418419      0     0  2     0x14000      0x200           swapper
  7302  412366  62521     0  2         0x2          0           sh
  6934  163147  30480     0  7           0          0           syz-executor
  6934   34120  30480     0  3           0  0x4000080 fsleep    syz-executor
  6934  332511  30480     0  3           0  0x4000080 fsleep    syz-executor
* 6934  182020  30480     0  7           0  0x4000000           syz-executor
 62521  150769   9421     0  3         0x2       0x80 wait      syz-executor
 30480  252970   9421     0  3         0x2       0x80 nanoslp   syz-executor
  9421  264985   5595     0  3         0x2       0x80 nanoslp   syz-executor
  5595  384504  29699     0  3    0x100002       0x88 sigsusp   ksh
 29699  464871  53130     0  3        0x10       0x88 kqread    sshd-session
 53130  469197  81640     0  3        0x12       0x80 kqread    sshd-session
 13149  392521      1     0  3    0x100003       0x80 ttyin     getty
 81640  494147      1     0  3           0       0x88 kqread    sshd
 59764  116149  39874    74  3   0x1100012       0x80 bpf       pflogd
 39874  179918      1     0  3           0       0x80 sbwait    pflogd
 50954   82616  75941    73  3   0x1100010       0x80 kqread    syslogd
 75941  140961      1     0  3    0x100002       0x80 sbwait    syslogd
 30088   49417      1     0  3    0x100000       0x80 kqread    resolvd
 37891   92492  51773    77  3    0x100012       0x80 kqread    dhcpleased
 98277  120192  51773    77  3    0x100012       0x80 kqread    dhcpleased
 51773  303120      1     0  3           0       0x80 kqread    dhcpleased
 68957  226967      0     0  3     0x14000      0x200 bored     smr
 90937  205109      0     0  2     0x14000      0x200           zerothread
 85419  413352      0     0  3     0x14000      0x200 aiodoned  aiodoned
 99552  152816      0     0  3     0x14000      0x200 syncer    update
 60300  515904      0     0  3     0x14000      0x200 cleaner   cleaner
 55335   25015      0     0  3     0x14000      0x200 reaper    reaper
 25940  485826      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
  9299  347441      0     0  3     0x14000      0x200 bored     viomb
 56547  255029      0     0  3     0x14000 0x40000200 acpi0     acpi0
 28869  266217      0     0  3     0x14000 0x40000200           idle1
 80130  486095      0     0  3     0x14000      0x200 bored     softnet1
 64357  301026      0     0  3     0x14000      0x200 bored     softnet0
 36280   14055      0     0  3     0x14000      0x200 bored     systqmp
 57885  330178      0     0  3     0x14000      0x200 bored     systq
 44547  153446      0     0  3     0x14000      0x200 tmoslp    softclockmp
 53407   30497      0     0  3     0x14000 0x40000200 tmoslp    softclock
 16561  456671      0     0  3     0x14000 0x40000200           idle0
     1   84461      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pr->ps_mtx r = 0 (0xffffffff85e32ff8)
#0  witness_lock+0x632
#1  mtx_enter+0x683
#2  knote_processfork+0x666
#3  fork1+0x1225
#4  kthread_create+0xa8
#5  nfs_getset_niothreads+0xe7
#6  nfs_sysctl+0x102
#7  sys_sysctl+0x54f
#8  syscall+0x1089
#9  Xsyscall+0x128
Process 6934 (syz-executor) thread 0xffff8000298f2fa8 (182020)
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff85449c80)
#0  witness_lock+0x632
#1  sysctl_vslock+0x72
#2  sys_sysctl+0x460
#3  syscall+0x1089
#4  Xsyscall+0x128
exclusive rwlock sysctllk r = 0 (0xffffffff853d3ef8)
#0  witness_lock+0x632
#1  rw_do_enter_write+0x53e
#2  sysctl_vslock+0x37
#3  sys_sysctl+0x460
#4  syscall+0x1089
#5  Xsyscall+0x128
exclusive mutex &pr->ps_mtx r = 0 (0xffffffff85e32ff8)
#0  witness_lock+0x632
#1  mtx_enter+0x683
#2  knote_processfork+0x666
#3  fork1+0x1225
#4  kthread_create+0xa8
#5  nfs_getset_niothreads+0xe7
#6  nfs_sysctl+0x102
#7  sys_sysctl+0x54f
#8  syscall+0x1089
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11050  12236K   12463K 166960K     12385        0
            pcb    17     24K      24K 166960K        23        0
         rtable   225     20K      28K 166960K      1851        0
             pf    30     21K      26K 166960K       151        0
         ifaddr    36     10K      14K 166960K       249        0
        ifgroup    48      2K       2K 166960K       255        0
         sysctl     3      1K      13K 166960K         7        0
       counters    68     42K      44K 166960K       170        0
       ioctlops     4      2K     194K 166960K      1550        0
            iov     1      0K      16K 166960K         8        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1348     87K      88K 166960K      1906        0
      UFS quota     1     36K      36K 166960K         1        0
      UFS mount     5     44K      44K 166960K         5        0
            shm     2      2K       6K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     6      0K       0K 166960K         7        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1734    201K     413K 166960K     11964        0
      file desc    15     43K     121K 166960K       997        0
          sigio     0      0K       0K 166960K         7        0
           proc   148    132K     211K 166960K      1999        0
        subproc    72      9K      15K 166960K       531        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     20K      20K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         8        0
       in_multi    77      5K       8K 166960K       649        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K        20        0
    ISOFS mount     1     36K      36K 166960K         1        0
  MSDOSFS mount     1     20K      20K 166960K         1        0
           ttys    43    303K     303K 166960K        43        0
           exec    45     11K      16K 166960K      1041        0
   fusefs mount     1     36K      36K 166960K         1        0
            tdb     3      1K       1K 166960K         3        0
        VM swap    14    124K     124K 166960K        15        0
       UVM amap   487    313K     356K 166960K      8224        0
       UVM aobj     5      4K       4K 166960K         7        0
     pinsyscall   182    308K     362K 166960K      3455        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         1        0
            NDP    21      1K       2K 166960K       178        0
           temp   398   9394K    9453K 166960K     10612        0
         kqueue    14     41K      84K 166960K        43        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120      133    0      130     1     0     1     1     0     8    0
rtentry    176      661    0      573     6     1     5     6     0     8    1
unpcb      144      147    0      129     2     0     2     2     0     8    1
syncache   336        4    0        4     2     2     0     1     0     8    0
tcpcb      736       13    0        9     1     0     1     1     0     8    0
arp        136      118    0      104     1     0     1     1     0     8    0
inpcb      328      300    0      293     2     0     2     2     0     8    1
nd6        152      174    0      156     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     1     0     1     0     8    0
kcovpl      48       59    0       52     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       35    0        5     1     0     1     1     0     8    0
pfstkey    128       35    0        5     2     0     2     2     0     8    0
pfstate    448       35    0        5     4     0     4     4     0     8    0
pfrule     1360      24    0       19     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     2668    0     2300    33     7    26    29     0     8    3
art_table   40     2669    0     2300     5     0     5     5     0     8    0
art_node    32      661    0      581     1     0     1     1     0     8    0
semapl      72        5    0        1     1     0     1     1     0     8    0
shmpl      112        4    0        2     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1774    0      189   100     0   100   100     0     8    0
ffsino     296     1774    0      189   122     0   122   122     0     8    0
nchpl      144     2140    0      244    71     0    71    71     0     8    0
vnodes     216     2391    0        0   133     0   133   133     0     8    0
namei      1024   13704    0    13704     4     3     1     3     0     8    1
percpumem   16      101    0       52     1     0     1     1     0     8    0
kstatmem   264      127    0      104     2     0     2     2     0     8    0
scxspl     216     7884    0     7884    12     7     5     8     1     8    5
plimitpl   152      121    0      105     1     0     1     1     0     8    0
sigapl     424     1213    0     1171     7     1     6     7     0     8    0
knotepl    120      135    0        0     5     0     5     5     0     8    0
kqueuepl   224       71    0       60     2     1     1     2     0     8    0
pipepl     344      298    0      271     3     0     3     3     0     8    0
fdescpl    528     1196    0     1171     3     0     3     3     0     8    0
filepl     160     3560    0     3367    12     0    12    12     0     8    2
lockfpl    104       86    0       84     1     0     1     1     0     8    0
lockfspl    48       43    0       41     1     0     1     1     0     8    0
sessionpl  144       85    0       76     1     0     1     1     0     8    0
pgrppl      48      147    0      131     1     0     1     1     0     8    0
ucredpl    104      146    0      133     1     0     1     1     0     8    0
zombiepl   144     1176    0     1171     1     0     1     1     0     8    0
processpl  1232    1213    0     1171     6     1     5     5     0     8    1
procpl     664     1499    0     1454     6     0     6     6     0     8    1
sockpl     752      584    0      556     7     0     7     7     0     8    4
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     115    0        0    15     0    15    15     0     8    0
mcl2k      2048      23    0        0     3     0     3     3     0     8    0
mextrefs    64       23    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      170    0        0    11     0    11    11     0     8    0
bufpl      272     2674    0      106   172     0   172   172     0     8    0
anonpl      32     4216    0        0    34     0    34    34     0   222    0
amapchunkpl 152   21402    0    21089    20     1    19    20     0   158    4
amappl16   200     2018    0     2008     6     4     2     5     0     8    0
amappl15   192        3    0        3     1     1     0     1     0     8    0
amappl14   184     1086    0     1082     1     0     1     1     0     8    0
amappl13   176      227    0      215     1     0     1     1     0     8    0
amappl12   168     1737    0     1714     2     0     2     2     0     8    0
amappl11   160      102    0      102     1     1     0     1     0     8    0
amappl10   152       65    0       51     1     0     1     1     0     8    0
amappl9    144      276    0      276     1     1     0     1     0     8    0
amappl8    136      369    0      367     1     0     1     1     0     8    0
amappl7    128      242    0      229     1     0     1     1     0     8    0
amappl6    120      659    0      656     1     0     1     1     0     8    0
amappl5    112       96    0       86     1     0     1     1     0     8    0
amappl4    104      456    0      436     1     0     1     1     0     8    0
amappl3     96     4027    0     3963     3     0     3     3     0     8    0
amappl2     88     1139    0     1068     2     0     2     2     0     8    0
amappl1     80    17165    0    16595    16     1    15    15     0     8    2
amappl      88     6635    0     6527     4     0     4     4     0    92    0
uvmvnodes   80      101    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        6    0        2     1     0     1     1     0     8    0
uaddrrnd    24     1196    0     1171     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1196    0     1171     1     0     1     1     0     8    0
vmmpekpl   168    11563    0    11526     3     0     3     3     0     8    0
vmmpepl    168    86112    0    84565    89     5    84    88     0   357    9
vmsppl     488     1195    0     1171     5     0     5     5     0     8    1
rwobjpl     80    26672    0    25728    27     3    24    24     0     8    1
pdppl      4096    2401    0     2342   137    68    69    87     0     8   10
pvpl        32    10550    0        0    86     0    86    86     0   265    0
pmappl     256     1195    0     1171     3     0     3     3     0     8    1
extentpl    40       47    0       29     1     0     1     1     0     8    0
phpool     120      497    0       83    13     0    13    13     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
knote_processfork(ffffffff85e32ee0,1203b) at knote_processfork+0x287
fork1(ffffffff85e32b80,f0,ffffffff8349e060,0,0,ffff800029a1e1c0) at fork1+0x1225
kthread_create(ffffffff8349e060,0,0,ffffffff84c49da0) at kthread_create+0xa8
nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7
nfs_sysctl(ffff800029a1e3c8,1,0,ffff800029a1e3a0,200000000200,0,ffff800029a1e620) at nfs_sysctl+0x102
sys_sysctl(ffff8000298f2fa8,ffff800029a1e620,ffff800029a1e580) at sys_sysctl+0x54f
syscall(ffff800029a1e620) at syscall+0x1089
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1d816eb090, count: -8
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x19:        leave
x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19
x86_ipi_handler() at x86_ipi_handler+0x112
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x753930a7fbc0, count: 12
ddb{1}> trace
x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19
x86_ipi_handler() at x86_ipi_handler+0x112
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x753930a7fbc0, count: -3