kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd.
starting local daemons:.
Mon Dec  2 10:18:55 PST 2019

OpenBSD/amd64 (ci-openbsd-main-5.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.0.76' (ECDSA) to the list of known hosts.
2019/12/02 10:19:08 fuzzer started
2019/12/02 10:19:14 dialing manager at 10.128.15.235:19709
2019/12/02 10:19:14 syscalls: 337
2019/12/02 10:19:14 code coverage: enabled
2019/12/02 10:19:14 comparison tracing: enabled
2019/12/02 10:19:14 extra coverage: support is not implemented in syzkaller
2019/12/02 10:19:14 setuid sandbox: enabled
2019/12/02 10:19:14 namespace sandbox: support is not implemented in syzkaller
2019/12/02 10:19:14 Android sandbox: support is not implemented in syzkaller
2019/12/02 10:19:14 fault injection: support is not implemented in syzkaller
2019/12/02 10:19:14 leak checking: support is not implemented in syzkaller
2019/12/02 10:19:14 net packet injection: enabled
2019/12/02 10:19:14 net device setup: support is not implemented in syzkaller
2019/12/02 10:19:14 concurrency sanitizer: support is not implemented in syzkaller
2019/12/02 10:19:14 devlink PCI setup: support is not implemented in syzkaller
10:19:19 executing program 0:

10:19:19 executing program 1:

10:19:19 executing program 0:

10:19:19 executing program 1:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc9)

10:19:19 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/250, 0xfa}], 0x1, 0x0, 0x0)

10:19:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
sendmsg(0xffffffffffffff9c, &(0x7f00000014c0)={&(0x7f00000011c0)=@in6={0x18, 0x2, 0xfffffe00, 0xff}, 0xc, &(0x7f0000001380)=[{&(0x7f0000001280)="386d159c4077787f833cecd62e72ae2bee6dae270184ec7f9e055af870e02f92f6d758a5040404d14f88c9b2a5d329ec05", 0x31}, {&(0x7f00000012c0)="c298b608046fef0e33212a3cd7fe2c0a603e0fbff10e9edbb5e9bc1911286fb7b2b38cdee0df85f426fd9861c49560441b84c98d1fff70e86da1c2364238ecf89cb28d92a2da1103aec2d97791251e06b0c24da4fa2778b69254699fac74fc5d971fceb9b3b2cdc7fcad6b7dae5dfa4b4b8501d6f5d74511d71e5e3caefd3290436959cda57f90d733bfc7a1ee7847153c2524cc42f040aaf9d17e19f81db43e3b2b952ff433e47508dc004fde70f9472c25", 0xb2}], 0x2, &(0x7f00000013c0)=[{0xf0, 0xffff, 0x1, "953a843c19dc96d8621deb6ac103dedd3601ac23c01622ac57201153d22be4bba4af8b3f93d23e3dde3b9caeeceb1c63b06e30158e06710ffea6a1606da29564fea67097b62b97727e708bd831c91aaab4736414d4b2a17909b5d716c16232cb0e7d96c3b8ea5dfcbbce7adc0f60435697199a57d321d9faaeceace2c83aa10e5a7fa1860f14699e20d6fc51613bd5b09a290bfeaf7661bd3dc8c621420ca13d73af7598c197ee26989fa097d3b71989e69345f819d9c0eb844550b9f045db9fa1bb4b420c555965ff0c35eb4b0805e89336e8529d0dca09485996e9"}], 0xf0}, 0x2)
chroot(&(0x7f0000000000)='./bus/file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x40)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
getsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
open(&(0x7f0000001180)='./bus/file0\x00', 0x80, 0x20)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
pipe(&(0x7f0000001200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
symlinkat(&(0x7f0000001240)='./file0\x00', r4, &(0x7f0000001140)='./bus\x00')
utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0xffffffffffffffff}}, 0x0)

10:19:19 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x40, 0x6, 0x8, 0x1}, {0x7, 0x80, 0x2, 0x4}, {0x9, 0x1, 0xff, 0x9}, {0x4, 0x6, 0xc8, 0x8}, {0x7ff, 0x7f, 0x1, 0x3}, {0x8, 0xff, 0x4f, 0x101}, {0x2, 0xff, 0x9, 0x7f}]})
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612121b9], [0x0, 0x0, 0x0, 0x9, 0xffffffeeffbff7ff], [0x0, 0x0, 0x401]}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300))

10:19:19 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x15}, {0x6}]})
r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
recvfrom$inet6(r1, &(0x7f0000000140)=""/151, 0x97, 0x2, &(0x7f0000000240)={0x18, 0x0, 0x40, 0x913}, 0xc)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f00000002c0)="2351ce9c802bd9a55b03144e7b14")
ioctl$TIOCFLUSH(0xffffffffffffff9c, 0x80047410, &(0x7f0000000280)=0x4cb2691d)

10:19:19 executing program 0:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x80000001, 0x9, 0x2, 0x0, 0x3, 0x6, 0x5, 0x2, 0x3, 0x4, 0x6})
r1 = open$dir(&(0x7f0000000900)='./file0\x00', 0x40000400000002c2, 0x0)
lseek(r1, 0x0, 0x7fff, 0x0)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="15", 0x1}], 0x1, 0x0, 0x0)
writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000c40)='6', 0x1}], 0x1)
ftruncate(r1, 0x0, 0x4000)

10:19:19 executing program 1:
r0 = socket(0x400000000018, 0x3, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
getsockopt(r1, 0x9, 0x4, &(0x7f0000000180)=""/156, &(0x7f0000000040)=0x9c)
close(r0)
r2 = socket(0x400000000018, 0x3, 0x3a)
setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4)
writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000000c0)="9ba1413798752c6e4afdfe34ddc53c8c25a825feac6d3a9a70392b0076034282b12449a7fbe29f38902686fd9aa81186e38a4b850ab9e2ad9984c1801f", 0x3d}], 0x1)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x7)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f00000000c0), 0x5c)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000140)={0x3f, 0x0, 0x0, 0x1}, 0x123)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0xe5)

10:19:19 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r2 = fcntl$dupfd(r1, 0xa, 0xffffffffffffffff)
fchmodat(r2, &(0x7f0000000100)='./file0\x00', 0x100, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x30}, {}, {0x6}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
syz_emit_ethernet(0x35c, &(0x7f0000000000)="b6")

10:19:19 executing program 1:
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
setuid(0xee01)
r1 = dup(r0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
setsockopt$inet_opts(r2, 0x0, 0x3, &(0x7f0000001140)="ed370ab7e830e0b3f9a0a5e82a188e57cf6673ec45ad18b72ed7bb5125a8225e42de8435c11043dd7267633a95e70b5e57d33e955c91c7e39bf3bd189c947861b4e51bb3e7924e8c2d14745caa956b9f021d0cd1c8e584dfc5c8c135fefdbe4c491d2a64c1e861311878dbf81576ba13", 0x70)
ioctl$BIOCLOCK(r0, 0x20004276)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f0000000000)={0x0, &(0x7f0000001900)})

10:19:19 executing program 1:
socket$unix(0x1, 0x2, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x2070, 0x428ff)
ktrace(&(0x7f0000000080)='./file0\x00', 0x9, 0x8530c703183cbe7, 0xffffffffffffffff)
chflags(&(0x7f0000000000)='./file0\x00', 0x0)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyCcfg\x00', 0x2, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
write(r0, &(0x7f0000000140)="97d0765da4f9b75ba6bd591b03abba3c7ab364edeb87dbff1034d5ce1a0d0673e46576454011bd77f0b21f245974adbf47f0308de0edf83f2833a12b785067fb613b2c3b291073647869431442bd745d8c591aafa9a7cc03dc8f57dbd0db304ccef98afd7fa38abc14abe9fa21665fcb78fbbc4d9da36108c3d1ddfb859df27647fcc82b0e8307dcf3f5d48f2694d1a5d3c90b2a36eba6505127dde6a2df236eaa621c2622ca08142169e8e3b1e531bb6f8caeb4b9e81a2d396b8231ad89d7732a34e3c28b86bd", 0xc7)

10:19:19 executing program 0:
r0 = socket(0x800000018, 0x3, 0x102)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x11)
ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000040)=0xe36)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)

10:19:19 executing program 1:
mknod(&(0x7f0000000140)='./bus\x00', 0x3a0914c44f7b202c, 0x1b00)
getrusage(0xffffffffffffffff, &(0x7f0000000080))
r0 = open(&(0x7f0000000000)='./bus\x00', 0xbaa52908513bc4e7, 0x80)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="d548c294fc4b90ca7dcce2dad2e1f49af06255f23b8839f6ba372f3aa3fbc205435a82e0fb2950df8d9efc4d509e2d2cea51e1dcc75c49c51f7b1d88221cfe0df81e7c55351e677cd44a968fe610cf83ab7ad05af7c607d154510e365c72d9dc02b62e320f62bd6ee844e20c23067e33d751c9632e2e", 0x2a2}], 0x1, 0x0, 0xfffffffffffffffe)
r1 = geteuid()
r2 = getuid()
setreuid(r2, r1)
r3 = getgid()
lchown(&(0x7f0000000080)='./file0\x00', r2, r3)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x7f, r2}})
r4 = semget(0x2, 0x3, 0x18)
semctl$GETNCNT(r4, 0x1, 0x3, &(0x7f00000000c0)=""/232)
accept(0xffffffffffffff9c, &(0x7f0000000240)=@in, &(0x7f0000000300)=0xc)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6263df7f7f000001"], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket(0x2, 0x1, 0x0)
bind(r5, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10)
r6 = dup(r5)
listen(r6, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f00000001c0), 0x4)
r7 = socket(0x2, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="ff000000000000000784"], 0x10)
openat$tty(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x8004746d, 0x0)
sendto$unix(r7, &(0x7f00000011c0)='\x00', 0x14a, 0x1, 0x0, 0xfffffd7e)
r8 = accept$unix(r6, 0x0, &(0x7f0000000040))
recvfrom$unix(r8, &(0x7f0000001200)=""/4096, 0xa50, 0x40, 0x0, 0x0)
recvfrom(r8, &(0x7f00000003c0)=""/185, 0xb9, 0x480, 0x0, 0x0)

10:19:19 executing program 0:
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/wsmouse0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000000)="830446d8aaf71f9255568b4e", 0xc)
read(r0, &(0x7f00000006c0)=""/138, 0x8a)
poll(&(0x7f0000000140)=[{r0, 0x40}, {r0, 0xb3a6f52ac7efe3e7}], 0x2, 0xe57e)
close(r0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0, 0xffffffffffffffff)
setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000040)={0x3, 0x1000}, 0x8)
execve(0x0, 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x80000064, 0xb0}, {0x1}, {0x6}]})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
shmget$private(0x0, 0x1000, 0x8411894b27ff3d3c, &(0x7f0000ff8000/0x1000)=nil)
geteuid()
getegid()
r3 = open(&(0x7f0000001280)='./file0\x00', 0x280, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x6012, r3, 0x0, 0x0)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180), 0xb0)
open$dir(&(0x7f0000000280)='./bus\x00', 0x381, 0x0)
open$dir(&(0x7f0000000280)='./bus\x00', 0x381, 0x0)
r4 = socket(0x18, 0x400000002, 0x0)
close(r4)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
write(r4, &(0x7f0000000140)="ad18f05de2f4ef18", 0x70)
r5 = socket(0x18, 0x1, 0x0)
close(r5)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
r6 = dup(r5)
ioctl$WSKBDIO_SETMODE(r6, 0x8010570e, &(0x7f0000000000)=0x200000)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000001100), &(0x7f0000001140)=0xc)
semget$private(0x0, 0x4, 0xa5)

10:19:20 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="b7579a1f0100000001d10331914260d6c49aba7879e52572970c69e9401b6c2bf94519ea830057ece0b163d55acc475b339833c9f464d0bdb94db20da139ba6312ba4ac76b19c5a32b2344a23b0c12c4c5aaaa5ed48237c029d544886193b7cfe38e50ec0eb39dd56937f8104bbac57246d7c6976cb876732c6f212ede26be092e57a223a39e5a0dfa0b99601d09947d746a5ec4d99691a5ef48cdffcb6c88781d4717fd739661bd2c9c0c742b0c4683ddf13b6c271e80d947fa06b3bf3846bdc17442763174c02c27f65e2815dd1134f13557da60ec47ae10d84b56d78b6113e3d4e9863a5399e4cae2b74080bc2c21726d35f3cccfb426f55d2fd5056b8b49bc9cc0324abc444e789371c746d7e35860805c8117255a68cf56cfd58b71714b874a3a7ce888f4936314a7943865e4e3d279fabd54ba822da51bf5ad34cb87fcc2eae82d0e9bb5a9c3cf21ff7b34d080bd7e8d230c478b8bbe16bacf7c392ca425c9388296f8d3608652452bd3d6b2448ce335bda19307b9e3e7fb44e6e6196b4eb9c056ef75026c"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semop(r14, &(0x7f0000000080)=[{0x4, 0x0, 0x800000001800}, {0x3, 0x401, 0x1800}], 0x2)
r19 = dup2(r16, 0xffffffffffffffff)
ioctl$BIOCSHDRCMPLT(r19, 0x80044275, &(0x7f0000000200)=0x3)
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:20 executing program 1:
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e0000001"], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x2, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
bind(r1, &(0x7f00000001c0)=@in={0x2, 0x3}, 0xc)
r2 = socket(0x0, 0x8000, 0x0)
dup2(r0, r2)
connect$unix(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500a734bb682e25df86fa2eaf0b6de0f292a5f51716348fad9a481bf02e2417f5fdde2dfde5dc115547aabc63bb59b532f2bca7bd0c3fdf7cd436d58cb85004441a4ef768"], 0x10)
r3 = socket(0x2, 0x8002, 0x0)
connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="620222080011e0000068"], 0x10)
semget(0x2, 0x4, 0x280)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
unlinkat(r4, &(0x7f0000000080)='./file0\x00', 0x8)
write(r3, 0x0, 0x0)

10:19:20 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000180))
poll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
read(r0, &(0x7f0000000040)=""/32, 0x20)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f0000000000)=0x100)
execve(0x0, 0x0, 0x0)

10:19:21 executing program 1:
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x1ff})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCNOTTY(r0, 0x20007471)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x80000000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

10:19:21 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semop(r14, &(0x7f0000000080)=[{0x4, 0x0, 0x800000001800}, {0x3, 0x401, 0x1800}], 0x2)
r19 = dup2(r16, 0xffffffffffffffff)
ioctl$BIOCSHDRCMPLT(r19, 0x80044275, &(0x7f0000000200)=0x3)
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:21 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0xfffffffffffffffd)
open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x80, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
execve(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000001340)=[&(0x7f0000001180)='\x00', &(0x7f00000011c0)='$)^\x96[/\x00', &(0x7f0000001200)='\x00', &(0x7f0000001240)='*\x00', &(0x7f0000001480)='W7K\xdb\xa2\x96\xa5\xff\xd4\x1f\x18.\xdc\x03B\xf2\xda+g\x01\x00Z\x1f\\/\x90\xa7\xea\n1\xc7\x19\xb6\x88\xd9\xe5\x9e:\xe8\tD=\x06\xaa\x05\xcd\a4^Y\xec\xe6\xf2\x96\xce\xe3\x8f\x7fX\x80\xd9(o\x17\x8a5\xfb\xf7\xd5/\xa1\'c\x9ed7\xbci\xed\x95\xb5Y\xb7l\x93\x9f\xdbG\xc7\x03\x15K+<r]5\xf3\xa2\x9eE\xe0\r\xfc^\xd1\xd6L]\x10(\xe1i \x02\\\xb7u\x03@\n\xcc\xe8\xc1\x82\xfd\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000012c0)=',\x00', &(0x7f0000001280)='$)^\x96[/\x00'], &(0x7f0000001440)=[&(0x7f0000001380)='\xf1\x00', &(0x7f00000013c0)='}\x00', &(0x7f0000001540)='!\x00'])
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
unlinkat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x0)

10:19:21 executing program 1:
socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x100)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x10300, 0x20)
open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0)
r3 = getpid()
ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r3)
sendmsg$unix(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff00000100000000000000"], 0x10}, 0x0)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x272, 0x0, 0x0, &(0x7f0000001380)=""/232, 0xf}, 0x0)

10:19:21 executing program 1:
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{}, {0x33}]})
accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x2b)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}})
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x800, 0xeee, 0x1ff, 0x0, "000000000000000100002000000000e6ffffff00"})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x400000002, 0x0)
sendto(r0, &(0x7f0000000040), 0x0, 0xc, &(0x7f0000000080)=@un=@file={0x2, './file0\x00'}, 0xa)
close(r1)
socket(0x400000000018, 0x3, 0x3a)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r1, &(0x7f0000000140)="ad18f05de2f4ef18", 0x23c)

10:19:22 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semop(r14, &(0x7f0000000080)=[{0x4, 0x0, 0x800000001800}, {0x3, 0x401, 0x1800}], 0x2)
r19 = dup2(r16, 0xffffffffffffffff)
ioctl$BIOCSHDRCMPLT(r19, 0x80044275, &(0x7f0000000200)=0x3)
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:22 executing program 1:
nanosleep(&(0x7f0000000080)={0x0, 0x2397443c}, 0x0)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140)='/dev/wskbd0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x20000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0xc)

login: pckbd_enable: command error

pckbd_enable: command error
10:19:24 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x1c, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x200, 0x0)
fcntl$getflags(r2, 0x1)
utimes(0x0, &(0x7f00000000c0)={{}, {0x80000000, 0xfffffffffffffffd}})
ioctl$TIOCFLUSH(r1, 0xc028698d, &(0x7f00000000c0))
socketpair(0x0, 0x4004, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect(r3, &(0x7f0000000040)=@in={0x2, 0x1}, 0xc)
r4 = fcntl$getown(r3, 0x5)
r5 = msgget$private(0x0, 0x100)
msgrcv(r5, &(0x7f00000002c0)={0x0, ""/175}, 0xb7, 0x1, 0x1000)
msgctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x6, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x5, r4, r4, 0x8, 0x10000, 0x8, 0x20})
fcntl$setown(r0, 0x6, r4)

10:19:25 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semop(r14, &(0x7f0000000080)=[{0x4, 0x0, 0x800000001800}, {0x3, 0x401, 0x1800}], 0x2)
r19 = dup2(r16, 0xffffffffffffffff)
ioctl$BIOCSHDRCMPLT(r19, 0x80044275, &(0x7f0000000200)=0x3)
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:25 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bpf\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./bus/file0\x00', 0x1, 0x0)
fchmodat(r1, &(0x7f0000001300)='./bus\x00', 0x2, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x64}, {0x2d}, {0x6}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0xc600000010000000)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
fcntl$getown(r0, 0x5)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
getpeername(r7, &(0x7f0000001340)=@un=@abs, &(0x7f0000001380)=0x8)
preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
kevent(0xffffffffffffffff, &(0x7f0000001140)=[{{r3}, 0xfffffffffffffffe, 0x8, 0x40000000, 0x1f3, 0x8}, {{r0}, 0xfffffffffffffffa, 0x4, 0xe7eac077baa6726, 0x1, 0x2}, {{r4}, 0xfffffffffffffff9, 0x50, 0x40000000, 0xf97c, 0x1}, {{r5}, 0xfffffffffffffffb, 0x40, 0x20000000, 0x1, 0xff}], 0x8, &(0x7f00000011c0)=[{{r2}, 0x7, 0x0, 0x0, 0x1, 0xf98c}, {{r6}, 0xfffffffffffffffb, 0x38, 0x2, 0x4, 0x49f93c91}, {{}, 0x3, 0x4, 0x1, 0x7, 0x1}, {{r0}, 0xfffffffffffffff8, 0x20, 0x1, 0x9, 0x3ff}, {{r2}, 0x0, 0x1, 0x1, 0x12}, {{r8}, 0xfffffffffffffff9, 0x12, 0x20, 0x0, 0xdf1}, {{r9}, 0xb24b9c4b07268652, 0x40, 0x10, 0x6, 0x70d41907}, {{}, 0xfffffffffffffff9, 0x1c4, 0x1, 0x81, 0x100}], 0x4, &(0x7f0000000100)={0x40, 0x10000})
sendmsg(r1, &(0x7f0000001700)={&(0x7f00000013c0)=@in6={0x18, 0x3, 0x4, 0x9}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000001400)="1632a200955cdfe847a64a2f292b6d6a6b2c3e212bbc21649d088f522150ce875bf4fe5d73d7471692bdda28c19d1175eeb5cf4cbfbf116d1fb46c469620f4e8643737c1b2918a47239cf5e2bda3ba155c9bb438677791f5fdf63b3259b6a74936a793b1586a7e4a90b17b29e686acc8bb2d686d0523c95e7dadd31ad76ab865bd4562eb677bc3194bc345ad4ae8f3f995e0317c2bd8fbb147db1177bd9dd4a02f4d12fa129c7e7e290d41b69ba8da77c359cfdd6aec13ae26dc7ef074a4a697eccb471333d28eb18654984fce7f8a427d12b1601a40dad7a022ce93b17c5aace6a9507aa38de65ed0d083", 0xeb}, {&(0x7f0000001500)="c3501e445eec76a8b4c48db384e9b76ef6d6bb256362cd72cb1a70a21be84e7aa0a30b09d5cdb8b64ef7092c29504fca525fb3d929f4a6449ff33bf7f404132cf3f4300e291fd1e034a401a172f5c00dcb63e1cd3fc88311132671006d9111427e16231405ce325fa2ff40a8febd0ce134412ad315d360c047dda67cca8eff85d9582f96c6f111de05901d983600e398293c0ff1b1c49b8bc33e1875647b0eeabbca78ef6b8f5d1bef68453f", 0xac}], 0x2, &(0x7f0000001600)=[{0xf0, 0x1, 0x8000, "74d15642e5d4122457ba98bc505f697e348f82b453ae46bc8f1fa25594db73a2188d503a8a65df874f7968686fcd3d3f22619243c0d7c2a279535c52deba70f834c1d9214ca0bc35b0590070077d1349e673586f0eb6993fc67ab42870a9cbdb4c37011125f8949b92ec2f4df718ae37ee86e795ee0b2bb9cb8e6eb59622304380e4896c6deff644a66bebfd59ff40f20190a029b4aff43fc58a55a920b6512ab5d774c6633e8cabc89dc027723976022dcab2400bbd2d9448c6159b2b1148e9a68ad827e87a4c9f6e69f541908225e5e635ceecdfce0c344c2ef33a"}], 0xf0}, 0x0)
fcntl$setstatus(r2, 0x4, 0x8)
syz_emit_ethernet(0xe, &(0x7f0000000280)="13c5c3a6c961f30aff9e4f8e93d2")

10:19:25 executing program 1:
getrusage(0xceb80c3d712036ea, &(0x7f00000000c0))
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x3, 0x1, 0x65, 0xa3dd, 0x81}, 0xc)
open$dir(&(0x7f0000001140)='./bus\x00', 0x20, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
fchflags(r1, 0x0)
r2 = accept$unix(r1, &(0x7f0000001180)=@abs, &(0x7f00000011c0)=0x8)
r3 = socket$inet6(0x18, 0x8000, 0x9)
write(r3, &(0x7f0000001240)="029276bc", 0x4)
connect$unix(r2, &(0x7f0000001200)=@abs={0x3, 0x0, 0x3}, 0x8)

10:19:25 executing program 1:
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vmm\x00', 0x0, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000140)={0x1, 0x0, 0xa})
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x40, 0x0)
fcntl$getown(r1, 0x5)

10:19:26 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semop(r14, &(0x7f0000000080)=[{0x4, 0x0, 0x800000001800}, {0x3, 0x401, 0x1800}], 0x2)
dup2(r16, 0xffffffffffffffff)
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:26 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20}, {0x15}, {0x6}]})
syz_emit_ethernet(0x4, &(0x7f0000000100)="ddf844c2")
r1 = dup(r0)
sendto(r1, &(0x7f0000000140)="06443406ea30e33a834841405e2d52be6180e1d75e7ae2a6efac5705b1fbf744dc9d57ea283c2ce6749a9917fc80d1cb4734b455ea98f2257a724fdb2abf9d1e60531dbd56ecab6305786cd4fbdeb851c1c5cf2c4d4141db92d15b5017bc2bbe3cb9e0959f371784e72a9d681615dcb7ef874ae7a3f113b96bdcd8d7ddebdeef55a3c92266b06f21083db25cd61a4b7ee80038080b425309", 0x98, 0x0, &(0x7f00000000c0)=@un=@file={0x3, './file0\x00'}, 0xa)
r2 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r2, &(0x7f0000000240)={0x0, ""/77}, 0x55, 0x3, 0x0)
r3 = msgget(0x3, 0x100)
r4 = msgget$private(0x0, 0xf34b8e89e6f38f72)
msgrcv(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000d400000000000000000000000000000000e2ff00000000000000000000000000cd46ad359fcc62367cd8d94b29096dd9adc25accae81e0d579655a75f3609fc028db438875"], 0x31, 0x0, 0x1000)
msgrcv(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000146000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e000000000500000000000000f0ffffffff03ffff00000024ea55a600002000000000cf0000000000000000000000000000001000000000002b51a0316b8b66d9b0b11e99a937c92e8ef532e7261558777821cf891d00e7c96dd79f9d306895111c9e3999bb8c4dee99fab818cf29aa7e399dd9720f7f4a9e7cdd182ef3d0b538002727f8e064403cda2e0bdb480879e4a26bd734368f06faa804f47098b5da7f975463dd4bb1b9f0829e81a77265e0365759b5711d3d1a77dc2e66d8ab6841dee5dbe8c30a8f5fd1262ac233ebefa5bc27d729b5f3667611ae373eb34060f2ea78867c7bfc3db0"], 0x97, 0x1, 0x1000)
msgsnd(r3, &(0x7f0000000900)=ANY=[@ANYRESHEX=r0, @ANYBLOB="63ff47342bbac1c4f5dfb7611898aa977299318cba4a6ccf6b2ffbdb52fd32b50ab965c8b9fe16008af4f092dc7d9b55d90702c5ff3f6f0af581e20b33aaf1bc432952061034347d00c3cd5a2be576647444973ef72608727646f5388f4e0e3cdc04c31a96b5b1c7c3b54a97aeded1e5bdc777b18ff409387f0b51450cd8cc1fa63270315207194faef8040dfd0110f175086d39d0a51d54b293d30a1c0d226727cc866c7d3a2352083d0cc9904cc4435a6f99be4d4183182d899bba465aaab9afa32737"], 0x2, 0x800)
msgsnd(r2, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r2], 0x1, 0x800)
msgrcv(r2, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001cb800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044f540657e8ad9b9e7c8c0951a8f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d46f04e8893617b910b7ae9888643901fdedb4fb711c30103767a08bc48fcd3514b5f22bc0c481a5efa7ac76da4db2e8afc7206a7b9272022c09c0efd187dd66ce2df606cc3d2e57daaed32421595b8da5bd959e9a"], 0xf1298b3ddabd15ea, 0x1, 0x1400)
msgsnd(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000055c0d525241da3044cc41fd59e55518239494a60a417b1e3ef4074b2b6575c4dff05c240b1bdd1e3a939d96fc74d26446999dcf6e8791e88022742467db206d26b797dec5a3f2d808dd0409828484fb04ee9f05a51111344a1bb1c248c8ca240cbb23c7522a216a90157134dd8be492e63674468c70549a33e8d5cebd29cc34279e6b54eead14f154722"], 0x92, 0x800)
msgrcv(r2, &(0x7f0000000800)=ANY=[], 0x0, 0x3, 0x1800)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000580)={0x3fd, 0x0, 0x2, 0xf, 0x9, 0x3ff, 0x7d7, 0x10, [{0x9, 0xfffffffffffffffe, 0x1000, 0x8}, {0xffff, 0xffff, 0x4, 0xb6b}, {0xffffffff80000001, 0x9, 0x100, 0x9}, {0x7, 0x2, 0x2b, 0x401}, {0x82, 0x5, 0x100, 0x7}, {0x4, 0xaf26, 0x4, 0x6}, {0x0, 0x640, 0x3, 0xb6}, {0x6, 0x0, 0xe, 0x7}, {0x9, 0xffffffdd, 0x2, 0x2}, {0x1c, 0x3, 0x8, 0xc5}, {0xa64, 0x44, 0x7fffffff, 0x101}, {0xd0, 0x1, 0x100, 0xab}, {0x0, 0x3f, 0x7}, {0x2, 0x357, 0x7, 0x2}, {0x80000001, 0x0, 0x100000000, 0x40}, {0xff, 0x8, 0x403, 0x6a}]})
r5 = msgget(0x3, 0x100)
r6 = socket(0x11, 0x4003, 0x0)
sendto$unix(r6, &(0x7f00000000c0)="b100050460000000000008000701000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282921e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be608a371a3f800040000000000000001000000000000000000000000000000000001000000000000", 0xb1, 0x0, 0x0, 0x0)
msgrcv(r5, &(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r6], @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRES64=r1], 0x3, 0x1, 0x800)
msgget(0x2, 0x424)
r7 = msgget$private(0x0, 0xfffffffffffffffd)
socket(0x3b31025e40f74300, 0xc3b2813462affd90, 0x2)
r8 = socket(0x2, 0x10000000000003, 0x33)
connect$unix(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="8202c0ffffffffffffff"], 0x10)
write(r8, 0x0, 0x0)
r9 = socket(0x2, 0x10000000000003, 0x33)
connect$unix(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="8202c0ffffffffffffff"], 0x10)
write(r9, 0x0, 0x0)
r10 = socket(0x2, 0x10000000000003, 0x33)
connect$unix(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="8202c0ffffffffffffff"], 0x10)
write(r10, 0x0, 0x0)
msgrcv(r7, &(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRESDEC=r9], @ANYRESHEX=r1, @ANYRES16, @ANYPTR, @ANYBLOB="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", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16=r10], @ANYPTR, @ANYRES64, @ANYRES64, @ANYPTR64], 0xa, 0x3, 0x0)
msgsnd(r7, &(0x7f0000000000)=ANY=[], 0x0, 0x800)
msgsnd(r4, &(0x7f0000000a00)=ANY=[], 0x0, 0x800)
r11 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
pwritev(r11, &(0x7f0000000080)=[{&(0x7f00000004c0)="90c3fe67eb586898600425f2f573e0d1ac83c18d65c8e22066c0d389fe894a974c8d45aaf9d2e7ae9fed58938ea6ac68a0b0632688ca0fab3647175abf22fea120c9b3bb77ca60c128295bf234505356095dbf9e50a4a5079723b57fed8ef0a251b91e67e1f5d347d5b668", 0x6b}], 0x1, 0x0, 0x0)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x2810, r11, 0x0, 0x0)
ftruncate(r11, 0x0, 0x6a)

10:19:27 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x28}, {0x81}, {0x6}]})
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
getsockopt$sock_int(r2, 0xffff, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r3 = dup2(r1, r0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001180)='/dev/null\x00', 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000001200)={0x2, &(0x7f00000011c0)=[{0xc90, 0x80, 0x96, 0x7f}, {0x5728, 0x8, 0x2, 0x7}]})
ioctl$WSDISPLAYIO_GETSCREEN(r3, 0xc0245755, &(0x7f0000000000)={0x2, './file0\x00', './file0\x00'})
ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f0000001140)=0x4)
syz_emit_ethernet(0xe, &(0x7f0000000a80)="b6bc1fc92479ff2b783f6e8a9c81")

10:19:27 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x60}, {0x2d}, {0x6}]})
shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000280)="13c5c3a6c961f30aff9e4f8e93d2")
syz_open_pts()

10:19:27 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semop(r14, &(0x7f0000000080)=[{0x4, 0x0, 0x800000001800}, {0x3, 0x401, 0x1800}], 0x2)
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:27 executing program 1:
open(&(0x7f0000000080)='./file1\x00', 0x60e, 0x0)
r0 = socket(0x18, 0x1, 0x0)
getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000140), &(0x7f0000000240)=0xc)
setuid(0xee01)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000200)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x246)
setuid(r1)
setsockopt(r0, 0x29, 0x9, &(0x7f0000000000)="03000000", 0x4)
sendsyslog(&(0x7f0000000300)="fc5debe569fdf1ad73427f2e725a249b45b41bb740cf43f038f919f8df3b11f5a69cb34c4702564f9d893f001f60d08b6dab27a6dda40fb217043c7404c70a416ef08ca35429ca0d5797d828f2a3ed180a855959389d41c8931c456358e95c442214d17771702858d4692daaaa0dad5efd5ac9354062e5d7cfdfe7d7552d69e39ce2afe0ee0b4734f6a7559cfb3d7135aa16ef99247739", 0x97, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0xa8)
msgrcv(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xda, 0x0, 0x1000)
r3 = open$dir(&(0x7f0000000280)='./bus\x00', 0x381, 0x0)
r4 = dup(r3)
ioctl$WSKBDIO_SETMODE(r4, 0xc0105715, &(0x7f0000000080)=0x35)
ioctl$TIOCMBIC(r4, 0x8004746b, &(0x7f0000000500)=0x7)
ioctl$KDGETLED(r2, 0x40044b41, &(0x7f0000000100)=0x1)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x1, 0x2a1)
kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[{{r5}, 0xfffffffffffffffe, 0x7}], 0x0, 0x0)
r6 = kqueue()
r7 = kqueue()
select(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0)
kevent(r7, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x1}], 0x6, 0x0, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2f})
kevent(r6, &(0x7f0000000280)=[{{r5}, 0xffffffffffffffff, 0x1}], 0x66, 0x0, 0x82, 0x0)
close(r5)
setsockopt(r5, 0x9, 0x9a86, &(0x7f00000002c0)="8511d250cb6d82dec09aef9ea1de308a5c651ed67df8de00d37ba356468619daa1c4d136f03a492fc7570829a725d2d426a3", 0x32)
sendto(r0, &(0x7f0000000040)="80124aedcf2c68fa5a16ef69b621554ede04aa4609773ce58561bcf7e6a58aeed7e570d0ff109167efea6fa2a4abe155462168b8c52f1437673b90f339268f004d6268160af9bcd43a85b094eb87a5a3eac2982b187074fd44390eeab4caa3b93138fda87c3eb08d242995c11e457d14d803", 0x72, 0x1, 0x0, 0x0)
setsockopt(r0, 0x29, 0x80000000000000c, &(0x7f0000000180), 0x14)
r8 = semget$private(0x0, 0x3, 0x80)
semctl$GETALL(r8, 0x0, 0x6, &(0x7f0000000180)=""/105)
open(&(0x7f0000000d40)='./bus\x00', 0x0, 0x0)

10:19:28 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='\b\x00\xff\xff\x06\x00\x1b\xc1\xe6', 0x800, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x1ffffd4c, &(0x7f0000001140)=[{0x25, 0x2, 0x1, 0xfffffffe}, {0x84, 0x3f}, {0x6}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
socket$inet6(0x18, 0x3, 0x0)
syz_emit_ethernet(0xe, &(0x7f00000000c0)="b75d03dd00ef43f7f7c855bb7042")
r1 = open(&(0x7f00000011c0)='./bus\x00', 0x8000, 0x8)
preadv(r1, &(0x7f0000000080), 0x0, 0x0, 0xc600000000000003)
open(&(0x7f0000001200)='./bus\x00', 0x408, 0x1a1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000001240)="58efaedbd22e642cfbad8e2ebdcfd9f931bb6eefa6457bad5e938becba614780e76c438daf7d4817e6099a6e9b9418b25059dd3ee86864c32e1b6a2da60ea9453327661ae714da771cff30d9f544dc3af3335f5d27df333defa0790a20a22e3cfb97a097686d99f1efcef9375ccb2aafbf06a53429b013c9678b77b0586596270bb36115d00d9dc251c4bc2d85f5ac63d06ed8f41507fa1a1148e9f15ea6d3833c78408ccc26f71d256c73b8c9ea776a90c95137200b540f4662fc7890", 0xbd)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000001180)=0xb5cb)

10:19:28 executing program 1:
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6418214c], [0x0, 0x20, 0x0, 0x9, 0xf9ffffffffffffff], [0x0, 0x0, 0x5], [{}, {}, {0x8}, {}, {}, {}, {0x0, 0x10}]}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300))

10:19:28 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:28 executing program 1:
r0 = socket(0x6, 0x3, 0x87)
r1 = socket(0x2, 0x10000000000003, 0x1)
connect$unix(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8202f5ffffffffffffff"], 0x10)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
dup2(r1, r2)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
kevent(r2, &(0x7f0000000040)=[{{}, 0x0, 0x84}], 0x100000, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000080), 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$inet6(r1, &(0x7f0000000040)="9b3758e1b1a941f0", 0x8, 0x0, 0x0, 0x0)

10:19:28 executing program 1:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x2, 0xc003, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket(0x2, 0xc003, 0x0)
connect$unix(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8202adfdffffffffffff3f7b238bf46854d78a2a197a386207000000008295955984c87910bf093f68c11700287ebca64896819f507d0000000000002951b15801360bcd4c0a162b58fd4237b8fa4d012ae447473c2204bf554799000000ed52beb85a85f8b2fd57d60f13ad30505e8f5300a4aeef9d612f871f4385f04157795ea4a5c5fe659fa202361cd8cac7dbbc5b65c6593d287001000000000000000008000000000000000000000000df42d268ede065dc0643ec67149130acc06b47b8d7da4333ac0f994166518bed2e1977bd035f5ea1b1009e5a319d54401cb92f77420eea4173d5b6913eef9e8b0fb636710000d2df0ac8fe0d7b65b7240cf97d03126da5364082bec304ee9a498252abb7cc5bac417e2ab04fd8a9c98e958ff55d088ea537791038ff36d11b2434c929b34b0587cf25dd9e1e49f931a4193897b0a33ed3cbf6375c9a8de3dbfb80a28f5f6e000000000000005fd4117640d36acfca638b43472fea9d8ba57596b4e9e556aba83eeae13db73490246ace220934872aff1aef8ad16f386544d0d7eed8a3b6f7ef012dbeb35c0cf3294fa55d3810111280debc7f53486bebf6cd15910db4e9247f2379e06073c2476128ced07e24f49c9d5e7425d3ee2e927c867e21903e4f36010000003110670302ec9bbb5c66458d16c38871d2a833c5798b6a768cea088fee8d2cdaab3cc8a24c50379d6cb61980efe36868d77e021fcf3593d7b497e57a8f5cf6e1da"], 0x10)
r2 = dup2(r1, r0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4)
r3 = dup(r0)
ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000300)={&(0x7f0000000040)=[{0x0, 0x3ff}, {0x44, 0x7}, {0x8b, 0x80000000}, {0x47, 0x20}, {0x7, 0xfffffeff}, {0x3, 0x9}, {0x24, 0x8}], 0x7})
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r5 = accept$inet6(r3, 0x0, &(0x7f0000001140))
getsockopt$sock_timeval(r5, 0xffff, 0x1005, &(0x7f0000001180), &(0x7f00000011c0)=0x10)

10:19:28 executing program 1:
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, "f000000007005945fdbe0700", 0x0, 0x8000})
open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x60)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r1 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x15d)
ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000100)={0x3, 0x3})
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0)
ioctl$VMM_IOC_WRITEREGS(r2, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20800000, 0x200000]}})
r3 = socket(0x2, 0x1, 0x0)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0))
bind(r3, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10)
r4 = dup(r3)
listen(r4, 0x0)
accept$unix(r4, 0x0, 0x0)
ioctl$TIOCGTSTAMP(r4, 0x4010745b, &(0x7f0000000180))
ioctl$VMM_IOC_RUN(r2, 0xc0205602, &(0x7f0000000000)={0x80000000, 0x8, 0x81, 0x6c, &(0x7f0000000240)={{0x2, 0xf8, 0x4, 0x69, 0x20, 0x5, 0x1ff}, {[0x3, 0xc871, 0x100, 0x1, 0x8, 0xdf62, 0xff, 0x5, 0x7, 0x8, 0x2, 0x1ff, 0x7, 0x785023d1, 0x7f, 0x9b, 0xfffffffffffffe01, 0x7], [0x80000000, 0xffffffff, 0x40, 0x20, 0x7, 0x1, 0x400, 0x101, 0x3, 0x4], [0x10001, 0xaddf4a2, 0x75, 0xf6, 0x0, 0x2, 0x9], [0x8, 0x7fff, 0x8000000000000000, 0x0, 0x7, 0x7], [{0x8e7c, 0xc8a6, 0xffffffff, 0x7a}, {0xde6, 0x9, 0x20, 0x5}, {0x6713, 0x292, 0xfff, 0x686fe6a4}, {0x81, 0x2, 0x1, 0x1}, {0x20, 0x1f, 0x0, 0x81}, {0xd041, 0x4, 0x200, 0x7fffffff}, {0x4, 0x1f, 0x1, 0x4}, {0x0, 0x8, 0x1c5, 0x80000001}], {0x3, 0xb1, 0x1, 0x80000001}, {0x1000, 0x7ff, 0x3f, 0x8001}}}, 0x3ff, 0x81})
pipe2(&(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x0)
lseek(r5, 0x0, 0xfffffffffffff801, 0x1)
poll(&(0x7f0000000000), 0x20000000000000e3, 0x0)

10:19:29 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:29 executing program 1:
mknod(&(0x7f0000000140)='./bus\x00', 0x3a0914c44f7b202c, 0x1b00)
open(&(0x7f0000000100)='./bus\x00', 0x20, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
pwrite(r0, &(0x7f0000000400)="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", 0xfffffded, 0x0, 0x3)
execve(0x0, 0x0, 0x0)

10:19:29 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000000)=0x7)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f00000001c0)=[{0x10001, 0x0, 0x0, 0x8000000000001f}, {0x45}, {0x3c}, {0x4406}]})
syz_emit_ethernet(0xe2, &(0x7f0000000100)="b6")

10:19:29 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0)
r1 = semget$private(0x0, 0x4, 0x34)
semctl$SETVAL(r1, 0x2, 0x8, &(0x7f0000000440)=0x49)
semop(r1, &(0x7f00000005c0)=[{0x2, 0x1}, {0x0, 0x7, 0x1800}, {0x4, 0x6}, {0x4, 0x103, 0x1000}, {0x4, 0x6, 0x1000}, {0x3, 0x8000, 0x800}], 0x6)
getuid()
pipe2(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x20000)
ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f00000002c0)={0xd996, './file0\x00', './file0\x00'})
geteuid()
getgroups(0x1, &(0x7f00000003c0)=[<r4=>0x0])
ioctl$VT_GETACTIVE(r2, 0x40047607, &(0x7f0000000240))
r5 = socket(0x11, 0x4003, 0x8)
sendto$unix(r5, &(0x7f0000000000)="b10005016000009005001b0007000000050004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282118e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208", 0x9b, 0x3, 0x0, 0x0)
r6 = dup(r5)
ioctl$TIOCMBIC(r6, 0x8004746b, &(0x7f00000011c0)=0x1)
getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000002600)={0x0, <r7=>0x0}, 0xfeaf)
r8 = getgid()
lchown(&(0x7f0000001280)='./file0\x00', r7, r8)
fchownat(r3, &(0x7f0000000380)='./file0\x00', r7, r4, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000180)=0xc)
setegid(r9)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x61}, {0x15}, {0x6}]})
r10 = msgget(0x2, 0x110)
unveil(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='x\x00')
msgrcv(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000b5f86ed042907d5e3d03fa2272ed0000000000000000000000000000000000000000000000100000000000000000000000000000100000000000bf067fdf00000000ffff0000000000000000000000000000000000000000000000000000000000844f3500000000000000000000000000000000000000000000000000000000000000865c1d466b7ec7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f76951a50ef3a7c91f46cc57651ca0ab149a186fbfe44523"], 0xf8, 0x1, 0x1000)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000440)="e8b1907ff431ffcf00a9f1379a9b")
r11 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r11, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r11, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x48}, {0x3}, {0x6}]})
r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0)
open(&(0x7f0000000300)='./file0/file0\x00', 0x20000, 0x103)
ioctl$BIOCSETIF(r12, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r13 = open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x22)
ioctl$BIOCSETF(r13, 0x80104267, &(0x7f0000000400)={0xa, &(0x7f0000000600)=[{0x1000, 0x29, 0x79, 0x9}, {0x2a64, 0x7, 0x0, 0x14000}, {0xaa, 0x7, 0xff, 0x8}, {0xdf6, 0x80, 0x7, 0x2}, {0x7, 0x6, 0x7f, 0x56a8fd2d}, {0x5, 0x3, 0x2, 0x9}, {0x3f, 0x1, 0x2}, {0x9, 0x5, 0x3, 0x101}, {0x2, 0x3e, 0x26, 0x7ff}, {0x3, 0x3, 0x3f, 0x7}]})
ioctl$BIOCSETF(r12, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x48}, {0x3}, {0x6}]})
r14 = dup2(0xffffffffffffff9c, r11)
ioctl$KDGETLED(r14, 0x40044b41, &(0x7f0000000080))

10:19:30 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r17 = semget$private(0x0, 0x4, 0x0)
semop(r17, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r17, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r18 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r18, 0x0)
msgsnd(r18, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1c, 0x800)
ioctl$VT_SETMODE(r16, 0x80087602, &(0x7f00000003c0)={0x0, 0x6, 0x8, 0x2, 0xffc0})
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:30 executing program 1:
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0x0, 0x0, 0x0, 0x1}], 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x29, 0xa, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x4)
r1 = socket(0x11, 0x4003, 0x8)
sendto$unix(r1, &(0x7f0000000000)="b10005016000009005001b0007000000050004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282118e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208", 0x9b, 0x3, 0x0, 0x0)
r2 = dup(r1)
ioctl$TIOCMBIC(r2, 0x8004746b, &(0x7f00000011c0)=0x1)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000002600)={0x0, <r3=>0x0}, 0xfeaf)
r4 = getgid()
lchown(&(0x7f0000001280)='./file0\x00', r3, r4)
setuid(r3)
setsockopt(r0, 0x29, 0x80000000000000c, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

10:19:30 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0xa1, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d}, {0x3c}, {0x407ffffffe}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
syz_emit_ethernet(0x61, &(0x7f0000000000)="b6")

10:19:30 executing program 1:
r0 = socket(0x11, 0x4003, 0x8)
sendto$unix(r0, &(0x7f0000000000)="b10005016000009005001b0007000000050004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282118e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208", 0x9b, 0x3, 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f00000011c0)=0x1)
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000002600)={0x0, <r2=>0x0}, 0xfeaf)
r3 = getgid()
lchown(&(0x7f0000001280)='./file0\x00', r2, r3)
setegid(r3)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x87], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xffffffff], [0x0, 0x0, 0x2f6b6091], [], {0x0, 0x5}}})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x18, 0x2, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TIOCFLUSH(r5, 0x8080691a, &(0x7f0000000300))
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r8 = dup2(0xffffffffffffffff, r7)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r10 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r10, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r11 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r11, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r12 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r12, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r13 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r13, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r14 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r14, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
r15 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r15, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
kevent(r5, &(0x7f00000000c0)=[{{r6}, 0xffffffffffffffff, 0x46, 0x80000008, 0x1, 0x7}, {{r0}, 0xfffffffffffffffe, 0x20, 0x80000000, 0x9211, 0x59d}, {{r8}, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0x9}, {{r5}, 0xfffffffffffffffb, 0xd2, 0x8, 0x5, 0x6}, {{r9}, 0xfffffffffffffff8, 0x80, 0xcb9f3b97de585554, 0x8, 0x7fffffff}, {{r10}, 0xfffffffffffffffe, 0x4, 0x0, 0x1, 0xfff}], 0x200, &(0x7f00000004c0)=[{{r11}, 0xfffffffffffffff8, 0x4, 0x40, 0x10001, 0xff}, {{r12}, 0x0, 0x40, 0x1, 0x2, 0x5}, {{r13}, 0xfffffffffffffffe, 0x54, 0x1, 0x8000, 0x7}, {{r1}, 0xfffffffffffffffd, 0x0, 0xfffff, 0x10000, 0x47}, {{}, 0xfffffffffffffffd, 0x2, 0x0, 0x1, 0x53c7}, {{r14}, 0xfffffffffffffff9, 0x81, 0x2, 0x9, 0x8}, {{r15}, 0xfffffffffffffffb, 0xe8, 0x2, 0x1, 0x1}, {{}, 0xfffffffffffffffb, 0x1, 0x1, 0x8}], 0x9, &(0x7f0000000180)={0x1ff, 0x7ff})

10:19:31 executing program 0:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='\x03\x00\x00\x001!U\xfd{', 0x8, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x74, 0x20, 0x0, 0x9}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffe}]})
readv(r0, &(0x7f0000001bc0), 0x1000000000000336)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r2 = socket(0x2, 0x400000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCFLUSH(r3, 0x8020699d, &(0x7f0000000300))
r4 = syz_open_pts()
write(r4, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r4, &(0x7f0000000200), 0xfe72)
r5 = syz_open_pts()
write(r5, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r5, &(0x7f0000000200), 0xfe72)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x100, 0x0)
r7 = syz_open_pts()
write(r7, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r7, &(0x7f0000000200), 0xfe72)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_pts()
write(r9, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r9, &(0x7f0000000200), 0xfe72)
r10 = syz_open_pts()
write(r10, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r10, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r10, &(0x7f0000000200), 0xfe72)
r11 = syz_open_pts()
write(r11, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r11, &(0x7f0000000200), 0xfe72)
r12 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480)='/dev/speaker\x00', 0x20000, 0x0)
r13 = syz_open_pts()
write(r13, &(0x7f0000000380)="8c", 0x1)
ioctl$TIOCSETAF(r13, 0x802c7416, &(0x7f0000000100)={0x0, 0x1, 0x90d2, 0x0, "d730b40c444de400"})
write(r13, &(0x7f0000000200), 0xfe72)
kevent(r3, &(0x7f0000001580)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x1, 0xec51854e09e33925, 0x3, 0xd8}, {{}, 0xfffffffffffffff9, 0x80, 0x40, 0x6, 0x200000000000}, {{r4}, 0xfffffffffffffffe, 0x4, 0x8, 0x7, 0x2}, {{r0}, 0xffffffffffffffff, 0x14, 0x20, 0x8, 0x40}, {{r5}, 0xfffffffffffffffa, 0x95, 0x80, 0x1f, 0x5}, {{r6}, 0xfffffffffffffffe, 0x100, 0x8, 0x10001, 0x2}, {{r7}, 0x990daa61f7a90a33, 0x20, 0x2, 0x0, 0x8}, {{r8}, 0xfffffffffffffffc, 0x0, 0x63b239ffffa26a89, 0x5, 0xd85}, {{r9}, 0xfffffffffffffffe, 0xa0, 0x2, 0x0, 0x1000}, {{r10}, 0xfffffffffffffffc, 0x34, 0x8, 0x6, 0xc8}], 0x81, &(0x7f00000016c0)=[{{r11}, 0x4, 0x1e, 0x20000001, 0x2, 0xfffffffffffffffb}, {{r12}, 0xfffffffffffffffa, 0x1, 0x1, 0x8000000000000000, 0x6}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x20, 0x2, 0x1, 0x4}, {{r0}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x2, 0x2}, {{r0}, 0x0, 0xf9, 0x20000000, 0x9, 0x5}, {{r13}, 0xfffffffffffffffa, 0x2, 0xfffff, 0x2, 0x100000000}], 0x3185, &(0x7f00000004c0)={0xffffffffffff0001, 0x5})
syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0")
r14 = semget(0x0, 0x6, 0x10000020c)
semctl$SETVAL(r14, 0x1, 0x8, &(0x7f0000000380)=0x80000000000eed)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0)
getpeername$unix(r15, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x8)
openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa4a, 0x0)
r16 = semget$private(0x0, 0x4, 0x0)
semop(r16, &(0x7f0000000300)=[{0x0, 0x7, 0x8d4dfb6ebba8a611}, {0x1, 0x3, 0x800}, {0x3, 0x1d23}, {0x2, 0x9, 0x1000}, {0x150449ea86f2be8c, 0x3f, 0x3000}], 0x2aaaaaaaaaaaa9a2)
semctl$SETVAL(r16, 0x4, 0x8, &(0x7f0000000240)=0x7e76)
r17 = msgget$private(0x0, 0x4)
msgctl$IPC_RMID(r17, 0x0)
msgsnd(r17, &(0x7f0000001140)=ANY=[@ANYBLOB="b7579a1f0100000001d10331914260d6c49aba7879e52572970c69e9401b6c2bf94519ea830057ece0b163d55acc475b339833c9f464d0bdb94db20da139ba6312ba4ac76b19c5a32b2344a23b0c12c4c5aaaa5ed48237c029d544886193b7cfe38e50ec0eb39dd56937f8104bbac57246d7c6976cb876732c6f212ede26be092e57a223a39e5a0dfa0b99601d09947d746a5ec4d99691a5ef48cdffcb6c88781d4717fd739661bd2c9c0c742b0c4683ddf13b6c271e80d947fa06b3bf3846bdc17442763174c02c27f65e2815dd1134f13557da60ec47ae10d84b56d78b6113e3d4e9863a5399e4cae2b74080bc2c21726d35f3cccfb426f55d2fd5056b8b49bc9cc0324abc444e789371c746d7e35860805c8117255a68cf56cfd58b71714b874a3a7ce888f4936314a7943865e4e3d279fabd54ba822da51bf5ad34cb87fcc2eae82d0e9bb5a9c3cf21ff7b34d080bd7e8d230c478b8bbe16bacf7c392ca425c9388296f8d3608652452bd3d6b2448ce335bda19307b9e3e7fb44e6e6196b4eb9c056ef75026c"], 0x1c, 0x800)
semop(r14, &(0x7f0000000080)=[{0x4, 0x0, 0x800000001800}, {0x3, 0x401, 0x1800}], 0x2)
semctl$SETVAL(r14, 0x3, 0x8, &(0x7f0000000440)=0x8)

10:19:31 executing program 1:
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x6c}, {0x35}, {0x40000004006}]})
fcntl$dupfd(0xffffffffffffff9c, 0x0, r0)
syz_emit_ethernet(0xe, &(0x7f0000000080)="010c777cf7c7e52c32db472b74ed")

10:19:31 executing program 1:
mknod(&(0x7f0000000680)='./bus\x00', 0x2, 0x801)
mknod$loop(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2, 0x0)
writev(r0, &(0x7f0000001300)=[{&(0x7f00000006c0)="fe2471a63cdce1b864c6c920e3de4dc26675fbf42e50f38b5f54b1d8bd933c93378cdc47d555b72ff85d12a88302084a8d29c95455068f2e84162e0cda901af812ac1532073b4884fbd6c976ebf923b710acbf173ff06ac07f33076575f94b04b2cca980fc20562220eb6edff03dfdbb8aa416c8cd60c5a7d560e585a5a1a9ebe6eb71adf194c3354121fc61dd84b5c2c1f6c0760cc22f1d44b420561e1c64acdc89d51cb9b18ccbcec288039e0af2acda89d76f6b91b6d441e871cf7ccfaea5367ed27551bc27e4d68765c7373cb49ea4076464ed9a03a4443ddb112f6b6b699c65ff61bc188b83f3b9a4e8b539", 0xee}, {&(0x7f0000000f80)="611f15129bd75df20bf0197b36ad3f387fa2514299a860d06037bae42e62af5c4cdb5d0e3a2aa5bcf12e04b25bd4becf65ff4ab283fc13d713fe2a68a2a2f85df69d507c30cd9e1d36776d7f7cc5bd46c9ead44644b81e86c06374e29bca41251ef375120c6452b13028fab355e7fd6cf6cfa18789a7836c25063e8a69dbf315352a6e9ed089ab4db4222a6fdee4f4828602a5d994083b66155b20f5f8541099c32e0fdf2a454844f2e7a91dd90e6ef820310db286d4ae0e26daf6bc7be8f8c1b6b5f6d3b8ad899d1c92f03643a308de9d47b0739c20338968c68847", 0xdc}, {&(0x7f00000008c0)="784e2329f3be625e525ae7b86acf699c50634283410fe1125ca28240a9c7a13514b1205a02dba4222478e75cf466fa204e4c3b514ca1a350b01547bdf7bb3c515364f73a9688370e2fe3a68c889ebca0b21dd78d80dcd3ed250a1b72ada992f5ea355606cbb58306c69ff013d27b40ea9a237db91cccc80e9e8b19cf24965d91778bd02b138c52e999f343905cd389c96696c43052f3c4c8187b500cd800184d7367eafdf2", 0xa5}, {&(0x7f0000000600)="d71efdc4d2c6ab13b6162c53f0b2b8234d6655c4491695c6d71df9f09a1297f0eab704255a405bfba21c4bf39688", 0x2e}, {&(0x7f0000001380)="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", 0x22f}], 0x5)

10:19:31 executing program 1:
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000040), 0x9130fbf, 0x0, 0x4000000, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000)
setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000000)={0x7, 0x81}, 0x8)
munmap(&(0x7f00001ef000/0x4000)=nil, 0x4000)
ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x200000]}})


vm_impl_init_vmx: uvm_share failed (22)

failed to init arch-specific features for vm 0x0xffff8000179af658

uvm_fault(0xffffffff82513c48, 0xffff800000ac0000, 0, 1) -> e

kernel: page fault trap, code=0

Stopped at      uvm_unmap_remove+0x3eb: movq    0x100(%r15),%r15

ddb> 

ddb> set $lines = 0

ddb> set $maxwidth = 0

ddb> show panic

kernel page fault

uvm_fault(0xffffffff82513c48, 0xffff800000ac0000, 0, 1) -> e

uvm_unmap_remove(ffff800000abff00,0,1ef000,ffff80001797a870,0,1) at uvm_unmap_remove+0x3eb

end trace frame: 0xffff80001797a920, count: 0

ddb> trace

uvm_unmap_remove(ffff800000abff00,0,1ef000,ffff80001797a870,0,1) at uvm_unmap_remove+0x3eb

uvm_share(ffff800000abff00,0,7,fffffd803f012ee0,20000000,200000) at uvm_share+0x55b

vm_impl_init_vmx(ffff8000179af658,ffff8000ffff3458) at vm_impl_init_vmx+0xf1

vm_create(ffff800000a75000,ffff8000ffff3458) at vm_create+0x193

VOP_IOCTL(fffffd803c246a90,c5005601,ffff800000a75000,1,fffffd803f7c66c0,ffff8000ffff3458) at VOP_IOCTL+0x88

vn_ioctl(fffffd802d2784c8,c5005601,ffff800000a75000,ffff8000ffff3458) at vn_ioctl+0xb7

sys_ioctl(ffff8000ffff3458,ffff80001797acc8,ffff80001797ad10) at sys_ioctl+0x5b9

syscall(ffff80001797ad90) at syscall+0x507

Xsyscall() at Xsyscall+0x128

end of kernel

end trace frame: 0x1ef574cc290, count: -9

ddb> show registers

rdi                                0

rsi                                0

rbp               0xffff80001797a840

rbx                                0

rdx                           0x29ae    __ALIGN_SIZE+0x19ae

rcx               0xffff800016b4f000

rax               0xffff800000abff00

r8                                 0

r9                               0x1

r10               0x4affd69eece5d423

r11               0x67278fa7f774a882

r12                                0

r13               0xfffffd802d571828

r14                          0x10000    __ALIGN_SIZE+0xf000

r15               0xffff800000abff00

rip               0xffffffff8212be9b    uvm_unmap_remove+0x3eb

cs                               0x8

rflags                       0x10246    __ALIGN_SIZE+0xf246

rsp               0xffff80001797a790

ss                              0x10

uvm_unmap_remove+0x3eb: movq    0x100(%r15),%r15

ddb> show proc

PROC (syz-executor.1) pid=158362 stat=onproc

    flags process=0 proc=4000000<THREAD>

    pri=71, usrpri=71, nice=20

    forw=0xffffffffffffffff, list=0xffff8000ffff2f48,0xffff8000ffff27c0

    process=0xffff8000ffff7c10 user=0xffff800017975000, vmspace=0xfffffd803f012ee0

    estcpu=21, cpticks=1, pctcpu=0.0

    user=0, sys=1, intr=0

ddb> ps

   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND

 97289  116191  78333      0  2           0                syz-executor.1

 97289   44220  78333      0  2   0x4000000                syz-executor.1

*97289  158362  78333      0  7   0x4000000                syz-executor.1

 97289  131974  78333      0  3   0x4000080  fsleep        syz-executor.1

 78190  421951   4628      0  2           0                syz-executor.0

 78190  236474   4628      0  3   0x4000080  ttyout        syz-executor.0

 78190  414658   4628      0  3   0x4000080  ttyout        syz-executor.0

 78190   16219   4628      0  3   0x4000080  ttyout        syz-executor.0

 78190  269755   4628      0  3   0x4000080  ttyout        syz-executor.0

 78190  107859   4628      0  3   0x4000080  ttyout        syz-executor.0

 78190  503539   4628      0  3   0x4000080  ttyout        syz-executor.0

 78333  123854  12685      0  3        0x82  nanosleep     syz-executor.1

  4628  473285  12685      0  3        0x82  nanosleep     syz-executor.0

 12685  465103  15817      0  3        0x82  thrsleep      syz-fuzzer

 12685  216817  15817      0  3   0x4000082  thrsleep      syz-fuzzer

 12685  509597  15817      0  3   0x4000082  kqread        syz-fuzzer

 12685  320593  15817      0  3   0x4000082  thrsleep      syz-fuzzer

 12685  305598  15817      0  3   0x4000082  thrsleep      syz-fuzzer

 12685  415180  15817      0  3   0x4000082  thrsleep      syz-fuzzer

 12685  247352  15817      0  3   0x4000082  thrsleep      syz-fuzzer

 15817  182830  12205      0  3    0x10008a  pause         ksh

 12205  122410  72801      0  3        0x92  select        sshd

 81848  268017      1      0  3    0x100083  ttyin         getty

 72801  363127      1      0  3        0x80  select        sshd

 93760  510285  56016     73  3    0x100090  kqread        syslogd

 56016  289300      1      0  3    0x100082  netio         syslogd

 24872  237441      1     77  3    0x100090  poll          dhclient

 24306  294010      1      0  3        0x80  poll          dhclient

 49191  141133      0      0  2     0x14200                zerothread

 39561  483677      0      0  3     0x14200  aiodoned      aiodoned

 39433  126880      0      0  3     0x14200  syncer        update

 12500  463527      0      0  3     0x14200  cleaner       cleaner

 23581  335694      0      0  3     0x14200  reaper        reaper

 25256  319724      0      0  3     0x14200  pgdaemon      pagedaemon

 60163  121079      0      0  3     0x14200  bored         crynlk

 49646  188815      0      0  3     0x14200  bored         crypto

 61463  149829      0      0  3  0x40014200  acpi0         acpi0

  9641  282545      0      0  3     0x14200  bored         softnet

 23691    6554      0      0  3     0x14200  bored         systqmp

 32517   98753      0      0  3     0x14200  bored         systq

  6978  440060      0      0  3  0x40014200  bored         softclock

 81113   64031      0      0  3  0x40014200                idle0

 25269   95067      0      0  3     0x14200  bored         smr

     1  523541      0      0  3        0x82  wait          init

     0       0     -1      0  3     0x10200  scheduler     swapper

ddb> show all locks

No such command

ddb> show malloc

           Type InUse  MemUse  HighUse   Limit  Requests Type Lim

         devbuf  9451   6323K    6711K  78643K     10685        0

            pcb    13      8K       8K  78643K        29        0

         rtable   110      3K       4K  78643K       206        0

         ifaddr    45     11K      11K  78643K        55        0

       counters    19     16K      16K  78643K        19        0

       ioctlops     1      2K       2K  78643K        23        0

            iov     0      0K      16K  78643K       100        0

          mount     1      1K       1K  78643K         1        0

         vnodes  1219     77K      77K  78643K      1281        0

      UFS quota     1     32K      32K  78643K         1        0

      UFS mount     5     36K      36K  78643K         5        0

            shm     2      1K       1K  78643K         2        0

         VM map     5      1K       1K  78643K         6        0

            sem    12      0K       0K  78643K        28        0

        dirhash    12      2K       2K  78643K        12        0

           ACPI  1794    195K     288K  78643K     12646        0

      file desc     6     17K      25K  78643K        89        0

           proc    48     38K      63K  78643K       361        0

        subproc    32      2K       2K  78643K        34        0

    NFS srvsock     1      0K       0K  78643K         1        0

     NFS daemon     1     16K      16K  78643K         1        0

    ip_moptions     0      0K       0K  78643K         6        0

       in_multi    53      3K       3K  78643K        61        0

    ether_multi     1      0K       0K  78643K         1        0

    ISOFS mount     1     32K      32K  78643K         1        0

  MSDOSFS mount     1     16K      16K  78643K         1        0

           ttys    48    212K     212K  78643K        48        0

           exec     0      0K       1K  78643K       189        0

        pagedep     1      8K       8K  78643K         1        0

       inodedep     1     32K      32K  78643K         1        0

         newblk     1      0K       0K  78643K         1        0

        VM swap     7     26K      26K  78643K         7        0

       UVM amap   114     38K      38K  78643K      1099        0

       UVM aobj     6      2K       2K  78643K         6        0

        memdesc     1      4K       4K  78643K         1        0

    crypto data     1      1K       1K  78643K         1        0

    ip6_options     0      0K       0K  78643K         5        0

            NDP     5      0K       0K  78643K        11        0

           temp    73   3553K    3617K  78643K      4516        0

         kqueue     0      0K       0K  78643K         2        0

      SYN cache     2     16K      16K  78643K         2        0

ddb> show all pools

Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle

arp         64        6    0        0     1     0     1     1     0     8    0

rtpcb       96       27    0       25     1     0     1     1     0     8    0

rtentry    112       46    0        1     2     0     2     2     0     8    0

unpcb      120       37    0       29     1     0     1     1     0     8    0

syncache   280        4    0        4     1     1     0     1     0     8    0

tcpqe       32      272    0      272     1     1     0     1     0     8    0

tcpcb      640       26    0       22     1     0     1     1     0     8    0

inpcb      280       97    0       89     2     0     2     2     0     8    1

nd6         48        4    0        0     1     0     1     1     0     8    0

ppxss      1128       2    0        2     1     1     0     1     0     8    0

art_heap8  4096       2    0        0     2     0     2     2     0     8    0

art_heap4  256      218    0        0    14     0    14    14     0     8    0

art_table   32      220    0        0     2     0     2     2     0     8    0

art_node    16       45    0        4     1     0     1     1     0     8    0

sysvmsgpl   40        8    0        6     1     0     1     1     0     8    0

semupl     112        6    0        6     1     0     1     1     0     8    1

semapl     112       26    0       16     1     0     1     1     0     8    0

shmpl      112        4    0        0     1     0     1     1     0     8    0

dirhash    1024      17    0        0     3     0     3     3     0     8    0

dino1pl    128     1517    0      120    46     0    46    46     0     8    0

ffsino     240     1517    0      120    83     0    83    83     0     8    0

nchpl      144     1881    0      269    60     0    60    60     0     8    0

uvmvnodes   72     1587    0        0    29     0    29    29     0     8    0

vnodes     208     1587    0        0    84     0    84    84     0     8    0

namei      1024    4742    0     4742     1     0     1     1     0     8    1

vcpupl     1984       2    0        0     1     0     1     1     0     8    0

vmpool     520        4    0        1     1     0     1     1     0     8    0

scxspl     208     4875    0     4875     8     1     7     7     0     8    7

plimitpl   152       14    0        7     1     0     1     1     0     8    0

sigapl     432      259    0      245     2     0     2     2     0     8    0

futexpl     56     1650    0     1649     1     0     1     1     0     8    0

knotepl    112       55    0       36     1     0     1     1     0     8    0

kqueuepl   104        8    0        4     1     0     1     1     0     8    0

pipepl     128      166    0      145     1     0     1     1     0     8    0

fdescpl    424      260    0      245     2     0     2     2     0     8    0

filepl     120     1645    0     1535     4     0     4     4     0     8    0

lockfpl    104       19    0       18     1     0     1     1     0     8    0

lockfspl    48        8    0        7     1     0     1     1     0     8    0

sessionpl  128       17    0        7     1     0     1     1     0     8    0

pgrppl      48       17    0        7     1     0     1     1     0     8    0

ucredpl     96      256    0      249     1     0     1     1     0     8    0

zombiepl   144      245    0      245     1     0     1     1     0     8    1

processpl  896      274    0      245     4     0     4     4     0     8    0

procpl     648      423    0      379     5     0     5     5     0     8    1

sockpl     384      161    0      143     3     0     3     3     0     8    1

mcl16k     16384      1    0        1     1     0     1     1     0     8    1

mcl8k      8192      10    0       10     1     0     1     1     0     8    1

mcl4k      4096      14    0       14     2     1     1     1     0     8    1

mcl2k      2048   68697    0    68666    19    12     7    15     0     8    2

mtagpl      80        2    0        2     1     1     0     1     0     8    0

mbufpl     256   109196    0   109100    11     4     7    11     0     8    0

bufpl      280     6178    0     1398   343     0   343   343     0     8    0

anonpl      16    47393    0    23341    99     2    97    97     0    62    0

amapchunkpl 152    1260    0     1076    10     2     8     9     0   158    0

amappl16   192     1678    0      338    67     0    67    67     0     8    0

amappl14   176       55    0       47     1     0     1     1     0     8    0

amappl13   168        1    0        0     1     0     1     1     0     8    0

amappl12   160        4    0        4     1     1     0     1     0     8    0

amappl11   152       47    0       35     1     0     1     1     0     8    0

amappl10   144        8    0        7     1     0     1     1     0     8    0

amappl9    136      600    0      595     1     0     1     1     0     8    0

amappl8    128      186    0      159     1     0     1     1     0     8    0

amappl7    120       33    0       30     1     0     1     1     0     8    0

amappl6    112       63    0       51     1     0     1     1     0     8    0

amappl5    104      134    0      125     1     0     1     1     0     8    0

amappl4     96      470    0      440     1     0     1     1     0     8    0

amappl3     88      110    0      103     1     0     1     1     0     8    0

amappl2     80     1273    0     1196     3     1     2     3     0     8    0

amappl1     72    14492    0    14046    26    17     9    20     0     8    0

amappl      80      648    0      593     2     0     2     2     0    84    0

dma4096    4096       1    0        1     1     1     0     1     0     8    0

dma256     256        6    0        6     1     1     0     1     0     8    0

dma128     128      253    0      253     1     1     0     1     0     8    0

dma64       64        6    0        6     1     1     0     1     0     8    0

dma32       32        7    0        7     1     1     0     1     0     8    0

dma16       16       18    0       17     1     0     1     1     0     8    0

aobjpl      64        5    0        0     1     0     1     1     0     8    0

uaddrrnd    24      264    0      245     1     0     1     1     0     8    0

uaddrbest   32        2    0        0     1     0     1     1     0     8    0

uaddr       24      264    0      245     1     0     1     1     0     8    0

vmmpekpl   168     6186    0     6161     2     0     2     2     0     8    0

vmmpepl    168    39433    0    36856   141    12   129   135     0   357   16

vmsppl     272      259    0      245     2     1     1     2     0     8    0

pdppl      4096     534    0      494     7     1     6     6     0     8    0

pvpl        32   166807    0   138623   228     0   228   228     0   265    0

pmappl     200      263    0      246     1     0     1     1     0     8    0

extentpl    40       46    0       29     1     0     1     1     0     8    0

phpool     112      148    0       21     4     0     4     4     0     8    0