last executing test programs:

2.539679102s ago: executing program 7 (id=2129):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$lock(r1, 0x9, &(0x7f00000000c0)={0x2, 0x0, 0x9, 0x20000300000003})
ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000740)={0x1, 0x2, 0x0, 0x0, "97a2a24ff3c14649ebb178926cc9795a6b47c1d1", 0xfffffffd, 0xfffd})

2.399157222s ago: executing program 7 (id=2131):
r0 = kqueue()
kevent(r0, &(0x7f0000000040), 0x8001, 0x0, 0xfffffffb, 0x0)
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/69, 0x45}, {&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/202, 0xca}, {&(0x7f00000012c0)=""/218, 0xda}], 0x6, 0xff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

2.01441937s ago: executing program 2 (id=2143):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x20090, 0x0)
ftruncate(r0, 0xfff)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="8f3a86da5965ffff636cc21bbf0627214d95b40ff20e6c7a97060001080004000000007f0000008ef9"])
syz_open_pts()
socket(0x2, 0x1, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000300)=""/10, 0xa}], 0x1, 0xffffffff)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0xffffff61)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_tcp(&(0x7f0000000040), 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x4)
setuid(0xffffffffffffffff)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
ioctl$TIOCSETA(r2, 0xc4504442, &(0x7f0000000740)={0x2f, 0x0, 0x0, 0x4000, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x853e, 0x81, 0xf0, 0xd9}, {0x100, 0x2, 0x3, 0x80}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="6aab1bc2bc924ee00fa655c0338675e0590d39f282bd320500e7013a", 0x1c}], 0x1, 0x4)
sysctl$kern(0x0, 0x0, &(0x7f0000000900)="02170300000e00001a2af1348c24165e869b46dd2be4000000eed6d2fb5b7400dabf5d14bd363de6", &(0x7f0000000080)=0x28, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[])
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r4, 0xc1126939, &(0x7f00000001c0))
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2c, 0xff, 0x6, 0x1}, {0x2, 0x3, 0xfe, 0x6}, {0x4006, 0x0, 0x92, 0xbf1}]})
ftruncate(r0, 0x9)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0})

1.903363467s ago: executing program 7 (id=2151):
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f00000000c0))
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x8}, 0x9, 0x1, 0xffffffffffffffff, 0x0, 0x8000000000000004, 0x0, 0x4, 0x717c})
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
sysctl$kern(&(0x7f0000000240)={0x1, 0xb}, 0x2, 0xfffffffffffffffe, &(0x7f0000000080)=0x8f, 0x0, 0xfffffffffffffdfb) (async)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) (async)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./bus\x00') (rerun: 32)
link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) (rerun: 64)
bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xa)
socket(0xb11bb85696cfcd7, 0x4, 0x0) (async)
socket$inet(0x2, 0x3, 0x2)
socket$inet6(0x18, 0x3, 0x0)
socket(0x2, 0x2, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x4, 0xfffffff9}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x101}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)

1.745917559s ago: executing program 7 (id=2162):
setuid(0xffffffffffffffff)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r0 = syz_open_pts()
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfbfffffe, 0x0, "d76c1f46000000ef1f0160fbf520000002000f00"})
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x904d, 0x7cf, 0xfffffffc, 0xfffffff7, "002100021000", 0xfffffffe, 0x4})
fchmodat(0xffffffffffffffff, 0x0, 0x0, 0x2)
pipe2(0x0, 0x21fd92804ab856ae)
r1 = getpid()
fcntl$setown(0xffffffffffffffff, 0x6, r1)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4)
r2 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r2, 0xc1126939, &(0x7f00000001c0))

1.594090821s ago: executing program 2 (id=2175):
r0 = socket(0x2, 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1}, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
ioctl$FIONREAD(r0, 0x8020690c, &(0x7f00000001c0)) (async)
kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0x6, 0x8, 0x80000000, 0x100, 0x8}, {{}, 0xfffffffffffffffb, 0x8d, 0x1, 0x9, 0x3f50}, {{}, 0x6, 0x2, 0x40000001, 0x7, 0x80007}], 0x4, 0x0, 0x3, 0x0) (async)
syz_emit_ethernet(0x17a, &(0x7f00000001c0)=ANY=[@ANYBLOB="f3a2a8908a86aaaaaaaaaabb86dd601ab5b60000100000004e95"]) (async)
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x18, 0x2, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60756aa300403a009c7e4d5081645bf0376e0865911feb7efe8000000000000000000000000000bb0302000000000000010900000000000000000004010000010000000000000000000200000000000004010001050000000000c204004e"]) (async)
ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) (async)
symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') (async)
fcntl$setown(r1, 0x6, 0xffffffffffffffff) (async)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') (async)
unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') (async)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x104, 0x0, 0x0, 0xffffffffffffffff, 0x140, 0x60}, 0xfffffffc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x80000001})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100))
link(&(0x7f00000001c0)='./file0/file0/../file0\x00', 0x0)

1.593156336s ago: executing program 5 (id=2176):
r0 = socket(0x20, 0x6, 0x6)
close(r0)
syz_emit_ethernet(0x38, &(0x7f0000000300)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6a9efb", 0x2, 0x0, 0x0, @rand_addr="cb697a653e2c6f0000005000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @generic="5701"}}}}})
r1 = socket(0x18, 0x3, 0x3a)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x10000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x200}, 0x0, 0x0, 0xfffffffffffffff7})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="100000000015e2463159cb481c000000"], 0x10}, 0x6)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
sendsyslog(0x0, 0x33, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x20, 0x0})
poll(&(0x7f00000002c0)=[{r0, 0x100}, {r0, 0x40}, {r0, 0x40}, {r0, 0x100}, {r2, 0x8}], 0x5, 0x8e2d)
ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x1000, 0x0})
r3 = syz_open_pts()
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000140)=0x5)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, 0x0}, 0x0)
preadv(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0)

1.507862074s ago: executing program 2 (id=2178):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48)
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000846, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
syz_emit_ethernet(0x16, &(0x7f0000000180)={@broadcast, @broadcast, [{[{0x88a8, 0x7, 0x1, 0x3}], {0x8100, 0x5, 0x0, 0x3}}], {@generic={0x8006}}})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x172)
ioctl$FIONBIO(r0, 0xc0307004, &(0x7f0000000140)=0x3)
r1 = semget$private(0x0, 0x1, 0x440)
semctl$SETVAL(r1, 0x3, 0x8, &(0x7f0000000100)=0xf44)
accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8)

1.108067969s ago: executing program 0 (id=2189):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000840), 0x400, 0x0)
r3 = kqueue()
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
r5 = getppid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000100)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, &(0x7f0000000300)=0xc)
chown(&(0x7f00000002c0)='./file0\x00', 0x0, r10)
getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000880)={<r11=>0x0, 0x0, <r12=>0x0}, 0xc)
r13 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x8000, 0x0)
sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000900)=[@rights={0x20, 0xffff, 0x1, [r2, r0, r1, r3]}, @rights={0x18, 0xffff, 0x1, [r4]}, @cred={0x20, 0xffff, 0x0, r5, 0xffffffffffffffff, r10}, @cred={0x20, 0xffff, 0x0, r8, r9, r12}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffff9c, r7, r0, r3, r13, r0]}, @cred={0x20, 0xffff, 0x0, r5, r9, r10}, @cred={0x20, 0xffff, 0x0, r11, r9, r10}], 0xe0}, 0x400)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000740)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000100)=""/252, 0xfc}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/198, 0xc6}], 0x9, &(0x7f00000003c0)=""/116, 0x74}, 0x40)
close(r14)

1.08989508s ago: executing program 2 (id=2192):
r0 = socket(0x18, 0x1, 0x0)
listen(r0, 0x0) (async)
r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x0, 0x8}, 0x2, 0x0, 0x80002})
accept$unix(r0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0))
r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSBRK(r2, 0x2000747b)

1.049325833s ago: executing program 6 (id=2197):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000e70000005900c707c0e6ee64a6871da5d3acb0cbf8a63004000093ef1607e4e499ba5b88cb4b5c9f7cc13bf8fd81fa1b59"], 0x39, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000040)={{0x18, 0x0, 0x9, 0x10000}, {0x18, 0x1, 0xf, 0x8}, 0x1, [0x0, 0x8, 0x9, 0x3ff, 0x80000001, 0x2731, 0x6, 0x7fffffff]}, 0x3c)
msgrcv(r0, 0x0, 0x0, 0x3, 0x800)
msgget$private(0x0, 0x0) (async)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000e70000005900c707c0e6ee64a6871da5d3acb0cbf8a63004000093ef1607e4e499ba5b88cb4b5c9f7cc13bf8fd81fa1b59"], 0x39, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000040)={{0x18, 0x0, 0x9, 0x10000}, {0x18, 0x1, 0xf, 0x8}, 0x1, [0x0, 0x8, 0x9, 0x3ff, 0x80000001, 0x2731, 0x6, 0x7fffffff]}, 0x3c) (async)
msgrcv(r0, 0x0, 0x0, 0x3, 0x800) (async)

997.274855ms ago: executing program 6 (id=2199):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x205, 0x0)
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000040)={0xfffffffe, 0x1, 0x2, 0xdb, "8a24f817820bc1b547c03ec660e1d64a47a11efe", 0x7ff, 0x200})
sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b10689ca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d12727b1e1d0cc45c7ebd5df53fb588fd0245528fe5700a5868eaf74d373197fb657a56e99cdbddbb382ad676b756d4e8b5a81c9a624348f23ffd260bf5fd344a7a30bcf96e47800acc166910bfc34ce76252dd12fac3b10dd5719aa6e420f60e3d2cbb22f5b3a6f7fa3c909e4823cdc0cdf126bc29456035b9a44ff74d852ba5c", &(0x7f0000000080), &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xffffff25)
chmod(&(0x7f0000000280)='./file0\x00', 0x3a)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0)
ioctl$TIOCSETA(r1, 0xcd504407, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x0, "aca2224ff1c14649ebb178926cc9795a6b4700d1"})
recvfrom(r1, &(0x7f0000000000)=""/74, 0x4a, 0x40, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa)
setreuid(0x0, 0xee01)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x2b2})
setrlimit(0x6, &(0x7f00000000c0))
open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
r2 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r2)
r3 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f00000006c0)=@file={0x170, './file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x40d}, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r4, 0x0)
setrlimit(0x3, &(0x7f0000000140))
mlockall(0x1)
r5 = syz_open_pts()
ioctl$TIOCSTOP(r5, 0x2000746f)
select(0x40, &(0x7f0000000000)={0xfffffffffffffff7, 0x2, 0x7b, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0xa)
accept(r0, &(0x7f0000000100)=@un=@file={0x0, ""/1}, &(0x7f0000000140)=0x3)

942.668266ms ago: executing program 6 (id=2202):
socket(0x1e, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = msgget$private(0x0, 0x100)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x60)
r3 = socket(0x18, 0x3, 0x0)
close(r3)
r4 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0xb}, 0xfffffffffffffffd, 0x1c0000000000000, 0x0, 0x0, 0x4, 0x80000000000082, 0x6})
bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = dup2(r3, r2)
sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54})
r6 = syz_open_pts()
close(r6)
r7 = syz_open_pts()
ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000000)={0x4e13, 0xab, 0x7ff, 0x20351e, "1a0000000200f900", 0x0, 0x1})
writev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)="7f2e14cf137276fc0a7482cc94affcbbaea076fe4cd6238f5700ba49cdcaf9be1a44e3abcb090b5f9198de5b9011f218034c31be525b22c1f138ef80875cfe03ad8134e24f00e5478a0fb694a65fe42e97b1f95cc24cfb0dd3e5dfad67060bae4f268765feca42689f33715a7c5e4187467ab2af26a7c10902", 0x79}], 0x1)
msgsnd(r1, &(0x7f0000000340)={0x1, "d80079e6e3b198dca164621691cab6cd012e98d054a230bc3f84ad93d78640067985ad90e2d991109cbf654f675915ccf4daf013474a857af08506a2deb7208228ef768a6e2d5ccf220448e75081b72b7ca9541edd8ff22416d6a2dc386698090cee49023dd129c32c2aebf18848aedceff9cfd865c421a5525561a71053235e29eb819ffd15abc7e103541ffc6c0d6dda7f0a9d0a3df534fdcd4958e3be0c07f6dd071331627db35ed7acaae9396030397e7205f1b9a393aede0491e1b41231b0313d739f94d1b605db716fbd6c719b85a400b2a173"}, 0xde, 0x800)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$sock_int(r8, 0xffff, 0x80, 0x0, 0x0)
msgrcv(r1, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000100)={0x7, 0x2})
r9 = socket$inet(0x2, 0x8003, 0x0)
recvmmsg(r9, &(0x7f0000000040)={0x0}, 0x10, 0x1802, 0x0)
msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xbb, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000340), &(0x7f0000000380)=0xc)

941.270008ms ago: executing program 3 (id=2204):
ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000000)={0xffffffff})
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x11, 0x2, &(0x7f0000000000), 0x4)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{}, 0xffffffffffffffff})
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000080), 0x4)
r1 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x134, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x80, 0x1)
madvise(&(0x7f0000001000/0xd000)=nil, 0xd000, 0x4)
pread(r2, &(0x7f0000000480)="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", 0x10e, 0x5)
r3 = syz_open_pts()
ioctl$TIOCNXCL(r3, 0x2000740e)
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))

883.369808ms ago: executing program 3 (id=2205):
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004", 0x7, 0x400, 0x0, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="8d5551ec8430", 0x6}], 0x1) (async)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"])
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
r0 = socket$inet(0x2, 0x1, 0x0) (async)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$WSKBDIO_GETMAP(r2, 0xc0105715, &(0x7f0000000000)={0x0, &(0x7f0000001f40)}) (async)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f00000000c0)={{0x18, 0x1, 0x1, 0x7fffffff}, {0x18, 0x0, 0x1}, 0x1c8, [0x7fffffff, 0x9, 0x4, 0x777, 0x2, 0x9, 0x4, 0x66e]}, 0x3c) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x6) (async)
getsockopt(r0, 0xffffffff, 0x1d0, 0x0, 0x0) (async)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

882.896726ms ago: executing program 6 (id=2206):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xc)
ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000000c0)=0x4)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)=0x19a49285)
syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[])
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000500)={0x0, 0x7fffffffffffffff, 0x0})
sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0x36}, 0x4, &(0x7f0000000180), 0x0, 0x0, 0x0)

882.387624ms ago: executing program 3 (id=2207):
ftruncate(0xffffffffffffffff, 0xb)
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000040))
ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000080)={0x9, [{0x3, 0x1ff}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0xfffffff7}, {0x2, 0x6}, {0x2, 0x5}, {0x3}, {0x3, 0x6}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x1ff}, {0x3, 0x80000000}, {0x2, 0x9c}, {0x2, 0x8}, {0x3, 0x2}, {0x3, 0x7}, {0x1, 0x4}, {0x3}, {0x1, 0x5}, {0x2, 0x9}, {0x2, 0x40}, {0x1, 0xae72}, {0x2, 0x10000000}, {0x3, 0x33}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x80000000}, {0x1}]})
setrlimit(0x3, &(0x7f00000001c0)={0xd47, 0x100000})
r1 = socket(0x1, 0x4, 0x58)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0xeb)
fcntl$lock(r2, 0x7, &(0x7f0000000240)={0x2, 0x1, 0x8, 0x1, 0xffffffffffffffff})
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
ioctl$VT_GETACTIVE(r3, 0x40047607, &(0x7f00000002c0))
ioctl$VT_ACTIVATE(r3, 0x20007605, &(0x7f0000000300)=0x5)
r4 = socket(0x18, 0x4, 0x9)
ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000340)=0x1)
close(r3)
recvfrom$unix(r2, &(0x7f0000000380)=""/4096, 0x1000, 0x841, &(0x7f0000001380)=@abs={0x0, 0x0, 0x3}, 0x8)
r5 = socket(0x0, 0x4, 0x1)
writev(r3, &(0x7f0000001900)=[{&(0x7f00000013c0)="22552965e11810b9bb37d95767345ee14e3a372717aa613604ef93d395e7166d3675be8d20759fd03a3ed222e3d79e9df476f1e2d4159f7feaa2486347b9d77e218373e2cbd1a83225d9016f4527dcfd69de1dc402296e663c02db84384fbb61b6805bf920267223bbc992da20fb64e71a99af7dc3f7baa9d378c6927f7c9d3c12c0fa35ba36237bf322e8517537965ebb1d5ca9d02192e65b3ccb3b233d1a691b60266f8def960389811590fb5f84b64643c5aee338eaee38112e629913eb33b2c7c02f342443aafbb5", 0xca}, {&(0x7f00000014c0)="d587892ab20196f670d65a1a341ea7d02fa56e4d3a41312be0b6b0e03d6f42478fe78b5b95d4b20d286abf5aa815940e51055f7f5a1ed58dae475cbe4ccafaa5b4ca710a3e53f110f418e0bcda73409d45a08d478bc514ed54293041dc4cb27320c5cc091d2233c7585c588a0f1f8a2781e9b2d1217c09efbdaf417fc04fe96cfa750c43b4121d1fd702", 0x8a}, {&(0x7f0000001580)="a84c4be299d9eea50355b9ce9868e5e82b9525898b5ad42191054410bf5f9c7e4a6c3607ac93ad276a84acbc0e7241894c80129a18b539bf32c705747d1ebfa1f1b08091e3c4f435548117d157bc34bc656a1559af9d923f1cb609528792fa4fd55dcd9d5cf999ad4e0187c0baf1e544f732a2db15cdd3bb7c", 0x79}, {&(0x7f0000001600)="b0004843cfbd6da04878950116e05701d2beee0c1557ade2e624cb2bd5e45134d29bfd2efe2e81cbebd0bb6bb9e834ed5d9f61bf05c110d6db88eef2ef879d5a82c23d1b0413932b4bc7dcc8d70a9f884e1458234f2ca3070cc554d23cfefd595debb9ccf4038b8fd4564bfd8dbc641b7c83efd25b007466c525bec8259f765d6a72473fdbd8c6f7c498616d19f4352f91bdb410d10f80aac3e81325cd1a001b049c5879bcc17c3cf7c2", 0xaa}, {&(0x7f00000016c0)="b27ae3e1fa9e6ea02d44d4a4a10a9f0a3f9a4c3bf9148aec9439ea183a39ada1fe99ada6a3f8c01037d85c8e4da312f957aa863893bf0f419dbad0bb651eed383ddc7c75435b8c29f55831857793492b11f9426a8e69abd676af4017278dcdf0379f9826a322319544f503fe0496f1aae602e9e72efbba483995c84c0285f19a63d3e7375b1d12bff98e0682311381199c201fdc96b090229ed5fb0a8e4faf2223abe0057d7750508ee81bb5767ade", 0xaf}, {&(0x7f0000001780)="75e2684976cb1f5b48765a00950467dfb3093e28280e3c93731a30eb20af9be5cedad62b04676a517ac64580dd9db34ebeb928be123a818c9069ced6b45e2ae94d104d9828516e5521370a73d83abb6e294b4579a42c2fe2410800dff2c6770bd73c6b0abdf9c7ae2e8676c286a9f9fc498dbab96373588eaff65c", 0x7b}, {&(0x7f0000001800)="c0d59b2add1da00d5c1971367cf2a667b32642ee1e7ceba46627452b8f87aff37d4d9cdb12c1a5f960fc05c5329efecdd8ce07b4ac17b62ce910c8f651e7c095f5ab1db7e64513e115d5d9c8f33aeb73c2b759a51beb60255d934565de41a1a7a4b55b7932abf2708c96ebff1cdf6282a15ddb10c1daa7c2c579eac9dd49cc1796ce5be04ec1460ebe2f30944a7791beb5cf4e34d1755ece7902426d4185d57a559cb24e066d26578f077e44d69ba408e488426d3b9630c677412d02b4386f643a0dd080f644c325ceac", 0xca}], 0x7)
sendto$inet6(r5, &(0x7f0000001980)="626871e755f47561e78cddafd73714cc1404126da8b8bfb79754fe6dae2b92875a2b3e66be6e2e7453453ee826205667bbd5fa953c3a5053", 0x38, 0x0, &(0x7f00000019c0)={0x18, 0x0, 0xffff, 0xb60}, 0xc)
r6 = dup(r4)
ioctl$WSDISPLAYIO_GVIDEO(r6, 0x40045744, &(0x7f0000001a00))
ioctl$VT_RELDISP(r6, 0x20007604, &(0x7f0000001a40))
syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@empty, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @multicast1, @broadcast, @loopback}}}})
syz_emit_ethernet(0x80, &(0x7f0000001ac0)={@empty, @empty, [], {@generic={0x6009, "64266b0534431d48f0ed652b2cfedf2e4eab83cc7ade84202b9ed4bfd4e7c9be1c6293650a747be4c76a7a6db11e7205911256ab3903b72ff5ff027f568b03c22e352a3b2277c19eb77c2f8bbd9764414f44f23320384d3cd40d6b192c20e6958ab05857b541280364d81dcbb9cf9b734bbb"}}})
ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000001bc0)={&(0x7f0000001b40)='./file0\x00', 0x1, &(0x7f0000001b80)='./file0\x00', 0x8})
r7 = open(&(0x7f0000001c00)='./file0\x00', 0x10, 0x23)
semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000001c40)=""/48)
readlink(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0), 0x0)
connect$inet6(r1, &(0x7f0000001d00)={0x18, 0x2, 0x634, 0x652}, 0xc)
ioctl$VNDIOCSET(r7, 0xc0384600, &(0x7f0000001dc0)={&(0x7f0000001d40)='./file0\x00', 0x8, &(0x7f0000001d80)='./file0\x00', 0x8})
semctl$GETVAL(0x0, 0x2, 0x5, &(0x7f0000001e00)=""/187)

881.770038ms ago: executing program 6 (id=2208):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0/file0\x00', 0x0, 0xfffffde2, 0xffff, 0x0, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0xf1a}) (async)
r0 = socket(0x1, 0x5, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000080)) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x3, 0x1, 0xb, 0xec3}, {0x9, 0x4, 0x20, 0x472cd796}, {0xffff, 0x3, 0x83, 0xfffffff6}]})
r1 = socket(0x18, 0x3, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async)
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) (async, rerun: 64)
writev(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {&(0x7f00000009c0)="1d2ba5ea07d54f5757", 0x9}], 0x2) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0}, 0x10, 0x0, 0x0)
r3 = getpid()
ktrace(&(0x7f0000000040)='./file1\x00', 0x4, 0x1732, r3) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000001700)={0x0, 0x1909}, 0x10, 0x1001, &(0x7f0000001740)={0x7, 0x3})

779.508121ms ago: executing program 3 (id=2209):
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r0 = syz_open_pts()
ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000080)={0x0, 0x0})
sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5ff}, 0x10)
r1 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
open(0x0, 0x710, 0x0)

778.747445ms ago: executing program 3 (id=2210):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="e33a176ed024", @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote={0xac, 0x14, 0x0}}}}})

778.276472ms ago: executing program 6 (id=2211):
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setreuid(0x0, 0xee01)
ioctl$VNDIOCGET(r0, 0x81946466, &(0x7f0000000040)={'./file0\x00', 0xffffffff})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket(0x2, 0x4001, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x3f, &(0x7f00000001c0), 0x0)
r3 = kqueue()
kevent(r3, &(0x7f0000000480)=[{{0xffffffffffffff9c}, 0xfffffffffffffffc, 0x4, 0x4, 0x1, 0x4}, {{r2}, 0xfffffffffffffff9, 0x1, 0x2, 0xf, 0x2}, {{r2}, 0xfffffffffffffffd, 0x12, 0x2, 0x1, 0x1ace1b3c}], 0x101, &(0x7f0000000180), 0x6, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r5, &(0x7f0000001480)=[{&(0x7f0000001240)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="2a5f4cd9b73c31d629e8d68e605e5940744ef138960b671d42c56f79fcb70549247e5504e02f85a6099eff9291731e94399a7e966e783d4073ecd5dc8e540f32190bb47050aee3907495ecf7708d1c295a0836f79ba03ea13db12836c2441989726ffbf7fd1da55bfe2caaf081a1ef55599935c0e60cb0866ee48d420b77a6e269bc30b2650349e16792252c6be8bcc6e9ce2b941299ab505e4779fa1960bb7cf924dcbc53c82e76bcd80731a694d12e8a139d8ecef6f5560939054b7842d25cd7396377f39bcfe2a2383feea17b87393cd892b90742631718b1877d8d83d5f66587e3e5b1e129433ead750143a4c51aa46e78e3b1a54a4634eea2846511719b1637b19ea8c96a95332abd69014f53e91a7319a36efb4052387dc6330aa00b5680142650e8dab5eb6b83ff7d0bbf1293338a8d3e8a6dcd7ed4916279eac230dda46e6fcdebe8a4c12d598883d9392da05791e153d905ce1930aebfc5dfc0fc22a88777c9fbc24c0b021189c3503466bf850f59e6649dd0b40d935ba155a9d7e065df6d90a500be9d7e1e77607d495898a8d6c9c48dda88533e75e760dceae91d670f97ebbe68b845c72eb698a9e0389b15cfe768cd4e524dbe939bc2d8363ae3b71a454a0a0378cd1f36565ab9d1b92263688195df65151ee9b8158c7a5280019a38f00ea05142b3cc832ece46e326e36a55d7a30f866ca97da61a3877612f0d9f23c052edf60a430d3a9acbae3d9f14f22f38a1eeac7df37ae17748a960b9e0d265bf6cdec73bd2a7b5f25035d845d936936cbfe6f013f8d7c73eba2bd9876ff6db3224e50e75c051979f4cdc41d28ea54e28f560fb0291cd6b6ba527e0f358ffa46b988f0bdbf801063d2024380071709ac00ed463e08fd1718a857b567d8b3eda143915e943d9530d25ed15743e117be375dc08e241328a53fa05b58c7c72a35d471a72706afce82b6c57eef81444269e06338bfd0af6f6ef6479dcc26aab0b10c7e58572aa507a69831d63c78c947cecda2c57bb8ae6b2ad7862d160b423de941be69928467db10ee4817536196ad0c5cc02a74ba1a1fb467e472f025f200846112b6b3efd298284d8c0cc498fb9203db18e48e34c137d1285120d809a774d56a62b3dbe8f202cb9cf18c33099f5b9651fc7ae41de53842f327fd40bcfaa601a791da1103351a64cc9815ff1f32cde6fbfe4c92f55a9aff41c055d4edce9c656ecd1becb9035bb8bd46cf47bca0dcb1848da94d05d1475c83a48c02f8f808597eaa9e88a4e4b12d0ef95458eeab115cb189fa7e368186bb68610af4651e27feab061c4ada46e8c12d6d33fe32cd40485b02120418a9aaba8f04c17ea1abdcb9e6801f5d8090c0780b3b5ae4382efbb64f62c825527b7e3d60ad9c73ba7f174ea7c7f2d155808052a0ef6ab2af85cf9a758a8c1227c85f2986fc06c5f54807968b18b6b5f9168d0b2de2728689d75f0efaedf79bd8bbbbc1d46b0f6072d46d46687bc92c0b16c4ad36c3fe4c7a2fde0cfec859052dd78d841464a6b4432342ea973bf18f1f5abd7b2fe7962faef39ff38bd88a40dbab0f8c08541e38efe924f9ec1addbd47362e349bfca42fd62cf18fef8db7d3cbf0b1733d37dcdae5b9c738b8426a1cfa205c9671870210508c614f256d199fb822613518b1a6fccfee08c48f0feae1ca4baaf0a02635282d4f630a8df115dc73e72d9f7b8feb4333b2c796f1d3f2cfb398ba1e9c81584185b8b578bac3c64d667da7d91062f0c2ccec0c9d09e0c15c62e7bc509c3204d054c22d4eac685626e48e25cff2fc382279d9cb941c2ca182b1f65b05ff05db880a37b1e7f9b3d8975558858352bbbea9213a885b7d43451230e0624403baa77839baa33ae92de771ca76319c2353e9f98ea8191fbb686aed6d08e87bcc2bb8084ae02fafbac1a0bba93f0f155fa2d7bc21bf77f116429c6a1373c34d080518b73481fcf012c0a9127e8f174695ccd4add75b026bf2935990d5cebc4e74b97ae67a414029252336880232635fce7ed7bf0b069e08e10f7e1cc4d2973dcd2ea0b63f9dc4f4c2db92e03c553afcb1060b12f6b9b4d1d799edceefdfafdae63ad797e400645c149b20f8a10af54db3289441499e122413495c7b32179ab6c274bbdf6dde48ce26f46f07ede9a314c1a73669ee8cb0d854c8a3206dcd4f532d36fa7affca1226962e20ca2c6ca0da1ab0848d23d6f198681911592815c080cead9fe6c81cf0d7ce3578978dbf1dc2f1902e51f740f95b02ebff4cf25ac8d28b8e16998f5e329e9a377a82b5bc227f77c2f1ad505286aac8618799c2363a2d07d229519370be62ef0dde6525df45a7b807759b9ba1c8557bdbecb429432c4e1a84094edda567f1245ba887686342d0a31b7dbe09bd2be75516b255d2bfad9337649e86a29b0a19e16b4059c7c45e9f81db6780af6487a11f9088ea265a99d6e95535e14fe839945f8f7da9bf9142dd12c305bd41bb392cae8eb81b28fda176d4b538f4ddaaed47913cd9149d934ca36879718bbd76a2d7ce11e6294398ea433af6cf53b951974ec96a9527178b6cbad3088a2e2dc75113fa88ede462e68b4d6b63020a45e94fbc6c3e6677d6cffee0e3bf606cd2d4b9fac89f91db8f3a1fb9f506708314249fa5c36912e3cb281acbdec3b080735ae24ebb4bca3c7900c21175435afbe5024a706e90f8ecf257c99cd8b67b5a9c2bdc2bb624201f55882349526f8faf463eecb183635db72a6aef5fa2048d97e6f6c513598f49158050df1efc6b13b8ae396cd6a905c26b94d1d50d361f10c0362a8c206c7dd553dd8b116694aa82ac029c64aa71b8a307793da12f93ce030d3c42443c37b91043687befb7968da97ffe91d45e4fd506ba4d9c5d7fe5ac7433fb6bb3ce471f59ade734d109d2093fa119827b65a360f2128e7e85ab494609b60d6e236ed8a72984f6c75652f5baa07e2e921365af2b819eef58343e65ffb45ba8580d62f5b8a9988f7176c1559f8ede3b1b92e0ff27978fc5225ed1512b605f1fd4fce46e768970b11a7b4802c93eb05a8571887cdc15f69929eadcd1f9d08ed2d6aab2997ffa2102c2d8983a78ad43779d03aa612ecbbdde634b14e980b176f04f99efad82a04001f34d6addb89e0ce629856f5ad401fed1a2c046e1fe18741b24d4253830af94a1defeecdf6f70b430e48d7b2e4ae2fb331322d96e1a361e4dcae1d0865e7ccc4aa58bcbb3ad1ce0b294437887e03088a6bb4c92c3044bb33d2a893975023ad979fb2f84d4842326cf058595398779116245c452e54989df0591238af63c5b187d18457f008f2759ae470282ee4640e92639a46915fb67f22967beb1f46736aa9c90df08f39ee481f6859f9eafdecd473bdc24ef3ad71b4c54dde360f2d550db18af7589c8107f29b0a713b65f039da10c2dc55e408ce75c77aba97c116ab078ed1467464fe4041668228316f0fff7c0e0f1a3cc47aae570182197cc3a030a4af7fe2d401b5a13d59b8fe55d48b0667b782cbf1c2e9e491167d87830bb25008aff93c4459a3ce9fd8655a542c6311d91ec6b6bd7935aba1cd01d10439f5e5a3883566c8538edb97c5d2a7c7533d415973729f52dc03134f3d777b7ad07c0f5b0d985ca48fde6cce9ec99f1223f476dcfbb5ef865a3f54459415b25e2031eeb469c83ac68fd77e59c6b6a4b9543a943c4461e47e94d038c63abf2734a3c0e99b95505e13af6cf7b66840dc60e96fb218436ea00b4a577c2effdba43e6adf97cb47c0ce606e87a7834dec04396c1e4f7df59ae5acedfd1d68c87e405fc5d788884686270cb08f0fb15fe8b11589792f9afc11152cd45f43fac6e758588cfaa88874267c3096bd689108bbb0296f3d182df7d46cf7e6b8bb923ba887443c3d2211785e364c1e55d4e9396d950e50cc11ba9a4da70a64f6acbbcd421183eb2c0521054c4f39650409e21a9d3b781725b0c38abce7b4615fa64a9cbf71a19f7e414279a7494d2e66e4e2b2d5ce7027109cfc763a9dcac37065ae80ec0cf3962deec0f9eba3bd7c514a9854ddec6542cf60a1e69cf5d1a73239633675d4ac1f3b0758e69d1d9fb8659f43f07ef6b0b2a7c9740649198b44f3272a8810d374b00c1d49b7f667ed538d89e91e5734f8d6e270aef0a406fcb4072497dd5f25b49d31cfd64f7af2d5b4df72b74c39a66f442ae61aebe1cdb96b660e3248dad3d05bfce3d8630902a565c3a7636220e0435679ce1c45367570dd08722ddfe7f1bf56c44bcab8ef2d0979eeaa569dade4ec34751833d455b31b55edcb9b64f3045725fcd3a08ce0c20b09a437133df5738092eba91430208814b4135b0a64331aff1847ca60426c91e96a029cff039b14462da6e5f9c545980b3712f7fa5f3958d92278194cf6b37ef76e91103d14db403956a7070d87afa81df227f2189926e1265a2872e9d64c64496083caff36dd3c27e961957acb86f0f9a3cbb5ddbb6bf9c62dc102d70d62eea969b1c2c5f42823f76827e918ffa77cc12ca8d31effd0b55529c496da762b6a95d43360ea4e811979ee316e143733f886a6eca5ac76746d4a302ec57b6b4af57c25631d7773243abd400d15274703154dfde2f1a63e075e4b22ed4516dd1496e3f7848bbf19e3215edda64140649d9b1a06975773d5dd0ca9c4bdfd5eb9fb6164aa659e2a8415098dd05496d0b2a20d966a4c9efefa964e007a3b731d3bad501fd21ca564c6155d893c3075c234af6378a12595d8a88ae0518350b75d57fb91b7610bfc3168f548a9a63432b49a9dbee2ee1a4ddd80255e2c655cc80d59d7e90e21fb090db6d59ef84c0becfda6bd01c5a806ce67bea77fdba62ba40e2114d31e6087ad67b28adc20d7cabe7911aa2db119cf5f43b2011bb92556e8e303a264f813764027fbec36f8248a667c766cfc12c80d96965f222d39b5f58a54b255d3b1eb4530952b6d251ff1f9a2cbc585d539704c8ea6884699ebc95d57cd1daef169da86cc10fe7300352e939c35bbe3104aea1b1c681f3e98be8fad7c91bb56724ffa794ea4ac7c4d51d4aad8e94087b4cdcab897e70558e6648ab42dfadab447735912af011fdbd9a47a4958b953b01d2e274449854cb7d4b44d88fb2db162b8dd664c7c32858c7714c69b838cb30b17e6a42ca760256c4c6da57ad5be955ca8c787262d8bd3f4a5f0170e70f92ee2ec9d227d066e41d0d4b640166b2f6937a66bc84506d102d3edac818b246954ba200a3057820da10b64ff99f016b42d90a29b43290d731ef23a72612d646f92acc05620068fd94edd12902197733cc9dbb55d95930ccc749c4a169b4b7056dba24f767da022eb01243353e1f4d0af2eb32e3feb331283ceab3e0112b37556749a701d11ada5cbe1b4c829fac46e12612679e47d4a066be939b886f0fdc2b4c5b4dd183ca025c5191ac67d7f992643333504da30e8300a0b40152671", 0xf12}], 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0)
mlock(&(0x7f0000000000/0x3000)=nil, 0x3000)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r6, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
connect$unix(r7, &(0x7f0000000080)=@abs={0x0, 0x0, 0x0}, 0x8)
r8 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r8, 0x8020699f, &(0x7f00000001c0))

777.947636ms ago: executing program 3 (id=2212):
r0 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x8, 0x1}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000000280)={0x1, 0xd70})
recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
r3 = socket(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000000), 0x10)
r4 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r4, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4)
r5 = dup2(r4, r0)
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040), 0x4)
pread(r5, &(0x7f00000002c0)="ade141d7e827fe22225172e3c0468eaeb8aa467185867df4cff8e708ad75d4a04590bfc72070799fe0962001d6afdaa45d278cee5d509639715fb981bba81144cb", 0x41, 0x5)
select(0x40, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x8}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r6 = socket(0x2, 0x3, 0x2f)
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0)
r7 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11d2ac4a36", 0xffffffb8}], 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmsg$unix(r6, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f00000027c0)={0x4, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000002900), 0x0)
bind(r0, &(0x7f0000000000), 0x10)

752.350139ms ago: executing program 7 (id=2213):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = socket$unix(0x1, 0x2, 0x0)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{0x10, 0x7}, {0x3777c244, 0xffffffffffffffff}}, 0x8adebb0245695061) (async)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000), 0x4) (async)
sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0}, 0x0) (async)
r1 = syz_open_pts()
close(r1) (async)
syz_open_pts() (async)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async, rerun: 64)
readv(r1, &(0x7f0000000180), 0x10000000000000a4) (async, rerun: 64)
bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x10)

616.246644ms ago: executing program 5 (id=2214):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='#!', 0x2}], 0x1)
write(r0, &(0x7f0000000100)="d862", 0x2)
utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x469cef5e, 0x8}, {0x100}})
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000040)=0x6)
r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
poll(&(0x7f0000000580)=[{r1, 0x50}], 0x1, 0x80000001)
fsync(r2)
openat$pf(0xffffffffffffff9c, 0x0, 0x80, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x843c, 0x0)
ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f0000000980)=0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=' ', 0x1}, {&(0x7f0000000640)='\t', 0x1}], 0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r3 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000c0", 0x14, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8000, 0x0, 0x7fff}}}}}}})
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"])
writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="001995a5b89bb7e2201ef0ece1df5b6c0c23c66f9ed4030e23f8922b5d7522b73d00bab5f60a", 0x26}], 0x1)
poll(0x0, 0x0, 0xb7)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x462, 0x0)
ioctl$BIOCGFILDROP(r4, 0x40044278, &(0x7f0000000100))
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = getppid()
setreuid(0x0, 0xee01)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x40}, {0xa, 0x0, 0x0, 0x85}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x1, 0x68, r5, r5, 0x0, 0x4})
setpgid(r5, 0xffffffffffffffff)

613.808322ms ago: executing program 7 (id=2215):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62})
setrlimit(0x8, &(0x7f0000000240)={0xdb, 0x101})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x3cfd, 0x90000069, 0x7, 0xa7bb, "090a070066400400000000000000100000ff00", 0x4f67, 0x5})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
execve(0x0, 0x0, 0x0)
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0}, 0x1042)
sendto$unix(r2, &(0x7f00000005c0)="b100050400000400000000002101000000000000cea18500fef96ec0050000007ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b295dbdaa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343732051eeab71d89e000040502000000140000003e4b45a827dde6d6be812292692c592a", 0xc1, 0x400, 0x0, 0x0)
chflagsat(r0, &(0x7f0000000080)='./file0\x00', 0x10000, 0x2)

588.636179ms ago: executing program 1 (id=2200):
syz_extract_tcp_res$synack(&(0x7f0000001740)={<r0=>0x41424344}, 0x1, 0x0)
setreuid(0x0, 0xee01)
r1 = socket(0x11, 0x3, 0x3)
sendto$unix(r1, &(0x7f0000000280)="b1000501600000001600000007000000041c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, <r2=>0x41424344}, 0x1, 0x0)
r3 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000040)='\t\x00\x00\x00', 0x4)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbb9fd812eaa46713048e699319296480000", 0x14)
syz_emit_ethernet(0x15f, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa04f5b375070081002f0028004622014d00660008f81d9078ac1400bbac1400bb441c0430000000000000ffff0000000001e0000001000001ff831b14e000000100000001ac1400bbe0000002ac1400aaffffffff01070bf8ac1400aae0000001004e214e6a000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0180f11b907800c5011312857ffa7595a2cd272a72fa3f1555900a040204020101011312a546888d8ef329233c5691a8237df0cc4e3f85f68e9454cf7fa300000000000000d0c40f3bb7f1b3ba7cac5a580eb9c63737093e703e10ed811b44d84a739acd1f02cc6ab6c63b3b283ea07f5cb8cb3c15bf6096a35e18d9c2400618bb2f85bbb3be7f3f80dd963f0eee4e15c275223f60772da6514bde4cad502ae02b0cfe55a2e88ccd26f93b9fc7b11d001ba541ba5696195ea0f58a6ba9c85f6e69f96d4d31d0ad94b3d7dded83bbc943a25812517f29e146da3d1d00978f8105036657d9d683c41c8c"])
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001700), 0x10000, 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x14a)
r5 = socket(0x18, 0x1, 0x0)
getsockopt$sock_int(r5, 0xffff, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{0x4d, 0x1, 0x1}, {0x44, 0x3, 0x0, 0x9}, {0x2, 0xd3, 0x9, 0x8}, {0x6, 0x0, 0x2, 0x801}]})
write(r4, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
syz_emit_ethernet(0xe, &(0x7f0000000240)=ANY=[])
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, &(0x7f0000000280)="000000007d3e187f863769213fc33d0817c53fcb7c7d40c8fbbe3b6fa516759554e82e576e", &(0x7f0000000000)=0x25, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000001780), 0x8, 0x0)
ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r6, 0x2})
close(r6)
r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r8, &(0x7f0000000540)=[{&(0x7f00000018c0)="e66d8ae833f3239e1ed731b533126c7e43b229026aff0d00007539c6c102b7e82cb3f26325e7b5b834d8c2954059b44de745cc3a56443c646fa376135c25b4eddde0df794e043670e31878fff6971e00ed6278aced3957a43ed7f87f4b2fef91007d91c4ccdc6623b671e4c3aca5dd2200", 0x71}], 0x1, 0xfffffffffffffffd)
readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000001600)=""/211, 0xd3}], 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

549.355554ms ago: executing program 1 (id=2218):
r0 = open(&(0x7f0000000280)='./file0\x00', 0x1, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r1, 0x6, 0x2, 0x0, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={<r2=>0x0}, &(0x7f0000000140)=0xc)
ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0xb1c, r2)
shutdown(r0, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080))

547.345266ms ago: executing program 1 (id=2220):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0xffff, 0x1003, 0x0, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000500)={0x4, 0x7, './file0/file0\x00', 0xc1, 0x8, 0x7, 0x9a})
open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x40)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x40001ff, 0x0, {0x0, 0x3}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r3 = semget$private(0x0, 0x5, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000029, 0xd, 0x0, 0x0)
r4 = semget(0x2, 0x4, 0x200)
r5 = semget(0x2, 0x4, 0x22)
semop(r5, &(0x7f00000000c0)=[{0x3, 0x2, 0x1000}, {0x1, 0x10, 0x1000}], 0x2)
semctl$GETPID(r4, 0x1, 0x4, &(0x7f0000000080)=""/58)
semget(0x0, 0x1, 0x281)
semop(r3, &(0x7f0000000040)=[{0x1, 0x800, 0x1800}, {0x2, 0xfa3, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x0, 0x800, 0x1800}, {0x1, 0x7, 0x1000}, {0x0, 0x2b, 0x800}], 0x6)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x20)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')

410.009998ms ago: executing program 0 (id=2221):
r0 = socket$inet6(0x18, 0x1, 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='},(-}%\x00', &(0x7f0000000080)=']:&Y\x00', &(0x7f00000000c0)='\x00'], &(0x7f0000000240)=[&(0x7f0000000140)='\x96\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='^)\x00', &(0x7f0000000200)='\x00'])
shutdown(r0, 0x1)
ioctl$VMM_IOC_READREGS(r0, 0xc028756b, &(0x7f0000000680))

403.265995ms ago: executing program 0 (id=2223):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x4}]})
sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x13, 0x2, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x100)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x6, 0x85d, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x9})
r1 = socket(0x18, 0x2, 0x0)
close(r1)
r2 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket(0x800000018, 0x1, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x7})
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000140)=0x9)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@remote, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0xffffff}, @icmp=@info_request={0xf, 0x0, 0x0, 0x7}}}}})

402.668597ms ago: executing program 1 (id=2224):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0)
ioctl$TIOCSETA(r2, 0xc444443a, &(0x7f0000000000)={0x1, 0x22f, 0x1, 0xae, "09000000f1d1d255101fe37e49a100", 0xe, 0x40004}) (async)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000100)=0x8)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r3 = socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @local, [], {@arp={0x806, @generic={0xf, 0x806d, 0x6, 0x4, 0x3, @empty, "cb963333", @local, "9c06585b33a47fd79ba4fd077126f54a"}}}}) (async)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2)

402.264438ms ago: executing program 5 (id=2225):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x80, 0x9, &(0x7f00000000c0)="03000000", 0x4)
r1 = socket$inet(0x2, 0x4, 0x11)
close(r1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
syz_emit_ethernet(0x107, &(0x7f0000000100)={@broadcast, @random="af86184ea7b6", [], {@ipv4={0x800, {{0x1c, 0x4, 0x0, 0x2, 0xf9, 0x64, 0x2, 0x3, 0x61, 0x0, @empty, @loopback, {[@ra={0x94, 0x6, 0x9}, @ra={0x94, 0x6, 0x97}, @ra={0x94, 0x6, 0x8}, @rr={0x7, 0xb, 0x6, [@broadcast, @empty]}, @rr={0x7, 0xf, 0x62, [@broadcast, @rand_addr=0x40, @rand_addr=0xef7]}, @rr={0x7, 0xb, 0x8, [@multicast1, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0x23, 0x4, [@broadcast, @loopback, @multicast2, @empty, @loopback, @loopback, @multicast1, @multicast1]}]}}, @icmp=@generic={0x24, 0xe7, 0x0, "08fad1f810af19ab1b86b82371bc38039c38e69f0e32722b9f485015af35f857fa6e334745daa6eae2d48d3bb64d259cd9f0c4b09a53f903cb2a3a0f2bc54217b55e6323640743a29ec3268399496d2cd390536d70f066194112d2076e172c3ac96288fdddecbe13d751eeab2cc377c4b16b5ab1b8ecfb37918a020f37f4685642c27f7643"}}}}})
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000100), 0x0)

253.297011ms ago: executing program 0 (id=2226):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
open(&(0x7f0000000000)='./file0\x00', 0x20, 0x1d4)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
select(0x0, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
truncate(0x0, 0x100000000)
read(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3)

252.522999ms ago: executing program 5 (id=2227):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x1, 0x0, 0xfffdfffe, 0x0, "031ffe40630000000000ff00010400", 0xfffffffc})
r0 = socket(0x18, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1)

252.239598ms ago: executing program 5 (id=2228):
fchmodat(0xffffffffffffffff, 0x0, 0xa6, 0x4)
syz_emit_ethernet(0xa5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6028aa60006f060000000000000000000000edd3b6de7b8beed300000000000000000000000000bb99da597213a061543c6c0e7f84d4"])
syz_extract_tcp_res(&(0x7f0000000000), 0x800002, 0x1ff)

246.381219ms ago: executing program 2 (id=2229):
mknodat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x800)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
utimensat(r0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000300)={{0x1ff, 0x1}, {0x5, 0x4000000400000004}}, 0x0) (async)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000340)={0x3, &(0x7f0000000080)=[{0x9, 0x0, 0x0, 0x1}, {0x2c, 0x3, 0x9}, {0x4, 0x0, 0x0, 0xfffffffe}]}) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000200)="0000030000000000000000000500313df0ddf68ede0109885c034a08ce90a84853b8ad426164a34ada12193a3150b6ce7753ece732f46a8b0000fd7800cc4f098473c5f1", &(0x7f0000000080)=0x44, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32)
syz_emit_ethernet(0x32, &(0x7f00000012c0)=ANY=[]) (async)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000540)={&(0x7f0000000340)}) (async)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async)
mknod(0x0, 0x1ffa, 0x0)
r3 = socket(0x11, 0x3, 0x80)
sendto$unix(r3, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3009d95665bc6fc211800000000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd1257aea8c500002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab7c685e000040381ecb664000000", 0xb1, 0x408, 0x0, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', 0xffc, 0x0}) (async)
r4 = socket$unix(0x1, 0x5, 0x0) (async)
acct(&(0x7f0000000080)='./file0\x00') (async)
r5 = open(&(0x7f0000000180)='./file0\x00', 0x10, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f00000001c0)={0x6, 0x200, './file1\x00', 0x4b, 0x5, 0x8001, 0xd}) (async)
bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async)
bind(r4, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0xa) (async, rerun: 64)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async, rerun: 64)
ioctl$WSKBDIO_SETKEYREPEAT(r5, 0x800c5707, &(0x7f0000000240)={0x9, 0x5, 0xffff0000})
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) (async, rerun: 32)
r6 = syz_open_pts() (rerun: 32)
close(r6) (async)
syz_open_pts()
ioctl$TIOCSETAW(r6, 0x802c7415, &(0x7f0000000000)={0x29f57365, 0x7fff, 0x1f, 0xffffffff, "8b02000300090a7848b13e13355f4fa7c2f4e300", 0x1})

241.291217ms ago: executing program 5 (id=2230):
r0 = msgget$private(0x0, 0x4e1)
msgctl$IPC_RMID(r0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0) (async)
poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0) (async)
msgctl$IPC_RMID(r0, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) (async)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) (async)
recvmmsg(r2, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0)

240.467935ms ago: executing program 4 (id=2231):
mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0xfffffffc)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x8864, {0x0, 0x6, "15f2ff", 0x0, 0x0, 0x0, @rand_addr="eee7567b28852d6d4ef8e5374c1e7b3b", @local={0xfe, 0x80, '\x00', 0x0}}}}})
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b100050160000004000000000700000008008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x802, 0x0, 0x0)

119.171423ms ago: executing program 2 (id=2232):
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x100000001}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) (async)
openat$diskmap(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async, rerun: 32)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32)
socket(0x18, 0x3, 0x0) (async, rerun: 64)
r0 = socket(0x1, 0x8000, 0x0) (rerun: 64)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r2 = getpgrp()
fcntl$setown(r1, 0x6, r2) (async, rerun: 64)
ioctl$FIONREAD(r1, 0x4004667f, 0x0) (rerun: 64)
fcntl$setown(r1, 0x6, r2)
ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000040)={""/16, @ifru_broadaddr=@in6}) (async)
ioctl$BIOCSETWF(r1, 0x80104277, 0x0) (async)
setitimer(0x0, &(0x7f0000000140)={{0x6, 0x240000009}, {0x80ffffffff, 0x7014}}, 0x0)
socket(0x18, 0x2, 0x0) (async, rerun: 64)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async, rerun: 64)
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0xc1206925, &(0x7f0000000100)) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3ecc) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x189) (rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$ddb(&(0x7f0000000000), 0x2, 0x0, 0x0, &(0x7f0000001080), 0x34)
socket(0x2, 0x3, 0x0) (async)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f0000000080)=[{0x5c, 0x9, 0x4, 0x84}, {0x2, 0x9, 0x28, 0x1}, {0x6, 0x7, 0x2, 0xfffffffe}]}) (async, rerun: 32)
syz_emit_ethernet(0xa5, &(0x7f00000004c0)=ANY=[]) (rerun: 32)

117.272594ms ago: executing program 4 (id=2233):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x22)
syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60006f3300383a008a211dd1450021b07f5a1957de740000fe800000000000000000000000aa02e28f"])
r1 = dup2(r0, r0)
listen(r1, 0x0)
utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x9, 0x6}, {0xfff, 0x2}})

114.327275ms ago: executing program 4 (id=2234):
r0 = socket(0x2, 0x3, 0x80)
shutdown(r0, 0x2)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
kevent(r2, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffc, 0xdb, 0x80, 0x7, 0x4}], 0x80, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffd, 0x0, 0x2, 0x1, 0x7}, {{r0}, 0xfffffffffffffffd, 0x56, 0x1, 0x6, 0xb}, {{}, 0xfffffffffffffff8, 0x70, 0x1, 0x10001, 0x1}, {{r1}, 0xfffffffffffffffd, 0x20, 0x4, 0x7, 0xd1c}, {{}, 0xfffffffffffffffe, 0x4, 0x4, 0x10001, 0xfa1}, {{0xffffffffffffff9c}, 0xfffffffffffffffc, 0x21, 0x1, 0x1, 0x8ab}, {{r1}, 0xfffffffffffffffc, 0x21, 0xf0000000, 0xfffffffffffffff7, 0x6}], 0x6, &(0x7f0000000180)={0x800, 0x4f})
r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
ioctl$WSKBDIO_GETMAP(r3, 0xc010570d, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0xfc00, 0x101, 0x835c, 0xfa3}, {0x80, 0x0, 0x9, 0x1, 0x7fff}]})
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x5010, r2, 0x9)
sysctl$kern(&(0x7f00000002c0)={0x1, 0x29}, 0x2, &(0x7f0000000300)="d22e2304607b6215ca00bdd4e9e15f508a933775e28290574f64346b2205de78062df54d0f5c322d0c854cfb6f896254588e8ff953c31bb4011f4938ae34839a4d484111cc", &(0x7f0000000380)=0x45, &(0x7f00000003c0)="e5e8b7d7a3abaa4c74d3d7e8edf0ec52db4fba0ff7b30c2a2aa07f840497ef", 0x1f)
sendmmsg(r1, &(0x7f00000015c0)={0x0, 0x1ff}, 0x10, 0x404)

114.026071ms ago: executing program 4 (id=2235):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000080)})
write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)

113.606885ms ago: executing program 1 (id=2236):
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2cff)
mknod$loop(&(0x7f0000000040)='./bus\x00', 0xc000, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x5, 0x0, 0x10}, {0x6c, 0x0, 0x0, 0x9}, {0x812e, 0x0, 0x0, 0x40000}]})
syz_emit_ethernet(0xe, &(0x7f0000000700)={@broadcast, @random="655b5a1b03e2", [], {@generic={0x8848}}})
setreuid(0x0, 0xee01)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x8020691f, &(0x7f00000001c0))
open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0)

66.931406ms ago: executing program 1 (id=2237):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0/file0\x00', 0x0, 0xfffffde2, 0xe2, 0x0, 0x24, 0xf, 0x1, 0x0, 0x2, 0x1, 0xf1a})
ioctl$FIONREAD(0xffffffffffffffff, 0x8020697a, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x3, 0xfe, 0xb, 0x20000ec5}, {0x9, 0x24, 0x20, 0x472cd796}, {0x8ae0, 0x1, 0x83, 0xfffffff6}]})
pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="ca75ba51a1847941459e9183e1b57fbaa163cd1b1cd2ac79580a2da4980f103c49cdde9cdf5eba2282e90a60f0543ccebb5476b4f338cf", 0x37}], 0x1, 0xfffffffffffffffd)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="33720267da89490cfdc82322e32975ea85326916e4ce1c3b0c26f62e3a09e8fcd014b743e61f644d0dd6b25bc4b00c679bcc3c38f4bf", 0x0, 0x0, 0x0)
sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000100)="d7a8aac106fa1bee91c724b89283c1477dab85e783af4189a1eaf5f6e8251b1147b330f604ff639b9acd6202c9d8b1aef98ce6eefe", 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="6c25a03ae7b27b4e7fc0924a22334b9b619f09f993c214bf34de94ee6f878793a443c48892901b940ff2189ae976bd635aa66dd55818d1ca20a7f88c2ad799df41ea701f32e36ab928f0ea3b00ddc5613e3590c04b342a5ec356d4f406e612653d7338e1b59ec0f00de4b65b3f18", 0x6e, 0x0, 0x0, 0x0)
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x3, 0xfe)
bind(r2, &(0x7f0000000000), 0x10)
connect$unix(r2, &(0x7f0000000000), 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="09d2544684be", @random="a82d7abc487e", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x314bd215cc681238, 0xff, @rand_addr="20f4372e0865915f577ee80000008000", @loopback, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}}}}}}})

63.395196ms ago: executing program 4 (id=2238):
syz_emit_ethernet(0xa9, &(0x7f0000000000)={@local, @empty, [{[], {0x8100, 0x1, 0x1, 0x2}}], {@ipv4={0x800, {{0x14, 0x4, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1, {[@timestamp={0x44, 0x4, 0x5, 0x3, 0xd}, @rr={0x7, 0x1b, 0x8, [@empty, @rand_addr=0xfffffff7, @loopback, @remote={0xac, 0x14, 0x0}, @multicast2, @local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0x1b, 0x3, [@empty, @remote={0xac, 0x14, 0x0}, @multicast2, @broadcast, @multicast2, @empty]}]}}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0xf, 0x4, 0x2, 0x9, 0x6, 0x67, 0x7, 0xb, 0xae, 0x9, @remote={0xac, 0x14, 0x0}, @rand_addr=0x8, {[@generic={0x82, 0x12, "82ecc985ec8e59c067007f72db06227e"}, @ssrr={0x89, 0x13, 0x2, [@remote={0xac, 0x14, 0x0}, @empty, @empty, @empty]}]}}, "dc337b"}}}}})

2.969631ms ago: executing program 4 (id=2239):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x200}, 0xfffffffffffffffc}) (async)
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x22}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
nanosleep(&(0x7f0000000000), 0xfffffffffffffffe)
execve(0x0, 0x0, 0x0) (async)
getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="6a2b46480496facd897997fdcea7ab1bc2bc924ee0aa6a1be816f30fa655c0338675e0592839f282bd323437e73afbf0c0c86bf88f919d720000000000000000431de5e2b045eb9b75994b55103990c1b8fb5bf88281c65b6ef01520483dd23f3cfd832cf9ba3ba0c6fb7280", 0x6c}], 0x1, 0x200)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="02a903a2a2da0993605ca5fc092cc85693d3a52af1753b249b95472fc39c4600000000000086f457307ebd09751f1b97", &(0x7f0000000080)=0x30, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[]) (async)
setreuid(0x0, 0xee01)
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
setrlimit(0x7, &(0x7f0000000980)={0xd60d, 0x300000000})

2.088784ms ago: executing program 0 (id=2240):
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000289078002e075a99ea2ef8414196dd000000ffffffff040090780000000045e10002006600000101000100000000e0000001"])
r0 = socket$inet6(0x18, 0x5, 0x5)
dup(r0)

0s ago: executing program 0 (id=2241):
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10)
r1 = socket(0x18, 0x3, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd606b9efb001197ff5d69bc83c1987a653e2c6f0000000000ff0200000000000000000000000000014e204e2300089078"])
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000080)=""/31, 0x1f}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error

OpenBSD/amd64 (Amnesiac) (tty00)

login: pckbd_enable: command error
pckbd_enable: command error
								


		


			




	




















	

	




	







	

	




	

	







	




	

	

						
	



	
	

	
	




nd6_resolve: something odd happens
nd6_resolve: something odd happens

OpenBSD/amd64 (a4H�V�����cߦ��*�Y��K��
���
2M��2ÿŘR�*
�d1�G��G��p~�Z��@) (tty00)

login: pckbd_enable: command error
nd6_resolve: something odd happens
pmap_unwire: wiring for pmap 0xfffffd806be55bb0 va 0x20001000 didn't change!
0#+"$%.!",%: #/--!.$ %22/2
.$62%3/,6%: 3/-%4().' /$$ (!00%.3
.$62%3/,6%: 3/-%4().' /$$ (!00%.3
0#+"$%.!",%: #/--!.$ %22/2
0#+"$%.!",%: #/--!.$ %22/2
.$62%3/,6%: 3/-%4().' /$$ (!00%.3




			

	


nd6_resolve: something odd happens
nd6_resolve: something odd happens
nd6_resolve: something odd happens
nd6_resolve: something odd happens
pckbd_enable: command error
nd6_resolve: something odd happens
pckbd_enable: command error
	


			

	


	




	




pckbd_enable: command error
denied attempt to set clock forward to 13622315181289262
pckbd_enable: command error
pmap_unwire: wiring for pmap 0xfffffd806be559c0 va 0x20001000 didn't change!
pckbd_enable: command error
nd6_resolve: something odd happens

OpenBSD/amd64 (Amnesiac) (tty00)

login: nd6_resolve: something odd happens
nd6_resolve: something odd happens
nd6_resolve: something odd happens
nd6_resolve: something odd happens
vnd0: sloppy read from proc 713 (syz-executor): blkno 0 bcount 31
witness: lock order reversal:
 1st 0xfffffd806bf6af20 vmmaplk (&map->lock)
 2nd 0xfffffd806bd80c50 inode (&ip->i_lock)
lock order [1] vmmaplk (&map->lock) -> [2] inode (&ip->i_lock)
#0  rw_enter+0x122
#1  rrw_enter+0xbe
#2  VOP_LOCK+0xa6
#3  vn_lock+0xa4
#4  vn_rdwr+0xd1
#5  vndstrategy+0x4ff
#6  physio+0x2f6
#7  spec_read+0x155
#8  VOP_READ+0x102
#9  vn_read+0x17b
#10 dofilereadv+0x230
#11 sys_readv+0xd8
#12 syscall+0xbb6
#13 Xsyscall+0x128
lock order [2] inode (&ip->i_lock) -> [1] vmmaplk (&map->lock)
#0  rw_enter_read+0xab
#1  uvmfault_lookup+0x122
#2  uvm_fault_check+0x49
#3  uvm_fault+0xf5
#4  kpageflttrap+0x2d0
#5  kerntrap+0x14a
#6  alltraps_kern_meltdown+0x7b
#7  copyout+0x57
#8  ffs_read+0x422
#9  VOP_READ+0x102
#10 vn_rdwr+0x15b
#11 vmcmd_map_readvn+0x142
#12 exec_process_vmcmds+0xfb
#13 sys_execve+0xbe4
#14 start_init+0x3c6
#15 proc_trampoline+0x10
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd806bd80c50,9,0) at witness_checkorder+0x1047
rw_enter(fffffd806bd80c40,1) at rw_enter+0x122
rrw_enter(fffffd806bd80c40,1) at rrw_enter+0xbe
VOP_LOCK(fffffd805f752dd8,2001) at VOP_LOCK+0xa6
vn_lock(fffffd805f752dd8,2001) at vn_lock+0xa4
vn_rdwr(0,fffffd805f752dd8,ffff800011a26080,1f,0,1,d9115a23445b67d7,0,ffff800000b3e000,0) at vn_rdwr+0xd1
vndstrategy(fffffd8076105480) at vndstrategy+0x4ff
physio(ffffffff82c28370,2902,8000,ffffffff8110bec0,ffff8000372334e0) at physio+0x2f6
spec_read(ffff8000372332d0) at spec_read+0x155
VOP_READ(fffffd806e044d08,ffff8000372334e0,0,fffffd807f7d34e0) at VOP_READ+0x102
vn_read(fffffd806cbb5c90,ffff8000372334e0,0) at vn_read+0x17b
dofilereadv(ffff80002a05b1d8,3,ffff8000372334e0,0,ffff8000372335a0) at dofilereadv+0x230
sys_readv(ffff80002a05b1d8,ffff800037233650,ffff8000372335a0) at sys_readv+0xd8
syscall(ffff800037233650) at syscall+0xbb6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x234230d9e70, count: -16
ddb{0}> show registers
rdi                                0
rsi                          0x40000    acpi_pdirpa+0x2be71
rbp               0xffff800037232d90
rbx               0xfffffd80042cb790
rdx               0xffff8000012a0ec0
rcx               0xffff80002a05b1d8
rax                          0x3ffff    acpi_pdirpa+0x2be70
r8                0xffff800037232c70
r9                0x8080808080808080
r10               0xef5bdd273e99ba7d
r11               0xcf5415a103f701ff
r12                                0
r13               0xfffffd8003ae2e00
r14                              0x3
r15                       0xffffffff
rip               0xffffffff8243d395    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800037232d80
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=335258 pid=713 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a05bbf8,0xffffffff835673b8
    process=0xffff800029fe9b38 user=0xffff80003722e000, vmspace=0xfffffd806bf6ae28
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
   713  442458  48578      0  2           0                syz-executor
*  713  335258  48578      0  7   0x4000000                syz-executor
 60393  373031  42258      0  2           0                syz-executor
 60393  433981  42258      0  3   0x4000080  fsleep        syz-executor
 60393  319888  42258      0  3   0x4000080  fsleep        syz-executor
 81936  283821  17363      0  2           0                syz-executor
 81936  455756  17363      0  3   0x4000080  fsleep        syz-executor
 75414   64435  85570      0  3        0x80  nanoslp       syz-executor
 75414  237509  85570      0  3   0x4000080  fsleep        syz-executor
 75414   89686  85570      0  2   0x4000000                syz-executor
 75414  397714  85570      0  3   0x4000080  fsleep        syz-executor
 92034  179277  52541      0  3        0x80  nanoslp       syz-executor
 92034   18540  52541      0  3   0x4000080  kqsel         syz-executor
 92034  150392  52541      0  3   0x4000080  fsleep        syz-executor
 89129  226349  76146      0  3        0x90  nanoslp       syz-executor
 89129  384103  76146      0  3   0x4000090  kqsel         syz-executor
 89129  459991  76146      0  3   0x4000090  fsleep        syz-executor
 17363   80746   5640      0  3        0x82  nanoslp       syz-executor
 48578  308928   5640      0  3        0x82  nanoslp       syz-executor
 73144  344761   5640      0  3        0x82  nanoslp       syz-executor
 60185  501128      1      0  3    0x100083  ttyin         getty
 42258  463966   5640      0  3        0x82  nanoslp       syz-executor
 52541   64275   5640      0  3        0x82  nanoslp       syz-executor
 83458  364625      0      0  3     0x14280  nfsidl        nfsio
 18874  454561      0      0  3     0x14280  nfsidl        nfsio
 16604  146144      0      0  3     0x14280  nfsidl        nfsio
  9211    8421      0      0  3     0x14280  nfsidl        nfsio
 92310  492767      0      0  3     0x14280  nfsidl        nfsio
 29657  329987      0      0  3     0x14280  nfsidl        nfsio
 93323  281899      0      0  3     0x14280  nfsidl        nfsio
 57672   79250      0      0  3     0x14280  nfsidl        nfsio
 59127  189385      0      0  3     0x14280  nfsidl        nfsio
 78989  275889      0      0  3     0x14280  nfsidl        nfsio
 52272  443632      0      0  3     0x14280  nfsidl        nfsio
 59509  144221      0      0  3     0x14280  nfsidl        nfsio
 62964  294067      0      0  3     0x14280  nfsidl        nfsio
 67203  519842      0      0  3     0x14280  nfsidl        nfsio
 76360  458145      0      0  3     0x14280  nfsidl        nfsio
 70645  162188      0      0  3     0x14280  nfsidl        nfsio
 48228  281904      0      0  3     0x14280  nfsidl        nfsio
 24487  156891      0      0  3     0x14280  nfsidl        nfsio
 98125  382505      0      0  3     0x14280  nfsidl        nfsio
 73678  456975      0      0  3     0x14280  nfsidl        nfsio
 48408   87452      0      0  3     0x14200  bored         sosplice
 76146    7227   5640      0  3        0x82  nanoslp       syz-executor
 53139  170176   5640      0  2         0x2                syz-executor
 85570  476997   5640      0  3        0x82  nanoslp       syz-executor
  5640  298506  26817      0  2         0x2                syz-executor
 26817   53697  87346      0  3    0x10008a  sigsusp       ksh
 87346   88146  52446      0  3        0x98  kqread        sshd-session
 52446  117481  22368      0  3        0x92  kqread        sshd-session
 22368  315352      1      0  3        0x88  kqread        sshd
 99878  515741  14488     74  3   0x1100092  bpf           pflogd
 14488  281450      1      0  3        0x80  sbwait        pflogd
 22976  134651  74051     73  3   0x1100090  kqread        syslogd
 74051   34108      1      0  3    0x100082  sbwait        syslogd
 69740  130620      1      0  3    0x100080  kqread        resolvd
 82507  391353  49864     77  3    0x100092  kqread        dhcpleased
  4379  324635  49864     77  3    0x100092  kqread        dhcpleased
 49864  420352      1      0  3        0x80  kqread        dhcpleased
 64777  350631      0      0  3     0x14200  bored         smr
  7906  489796      0      0  2     0x14200                zerothread
 21655  449702      0      0  3     0x14200  aiodoned      aiodoned
 20748  381124      0      0  3     0x14200  syncer        update
 14220   45859      0      0  3     0x14200  cleaner       cleaner
 47425  216502      0      0  3     0x14200  reaper        reaper
 23542  110873      0      0  3     0x14200  pgdaemon      pagedaemon
 11080  317605      0      0  3     0x14200  bored         viomb
 47059  219552      0      0  3  0x40014200  acpi0         acpi0
 48795  479706      0      0  7  0x40014200                idle1
 71844   95357      0      0  3     0x14200  bored         softnet3
 42433  271789      0      0  3     0x14200  bored         softnet2
  2880  199919      0      0  3     0x14200  bored         softnet1
 55266  274302      0      0  3     0x14200  bored         softnet0
 89776  402907      0      0  3     0x14200  bored         systqmp
 51319  471369      0      0  3     0x14200  bored         systq
 35991  503405      0      0  3     0x14200  tmoslp        softclockmp
 39881  244036      0      0  3  0x40014200  tmoslp        softclock
  2799  470306      0      0  3  0x40014200                idle0
     1  124263      0      0  3     0x80082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 713 (syz-executor) thread 0xffff80002a05b1d8 (335258)
shared rwlock vmmaplk r = 0 (0xfffffd806bf6af20)
#0  witness_lock+0x5bb
#1  uvm_vslock_device+0x149
#2  physio+0x277
#3  spec_read+0x155
#4  VOP_READ+0x102
#5  vn_read+0x17b
#6  dofilereadv+0x230
#7  sys_readv+0xd8
#8  syscall+0xbb6
#9  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835e4b08)
#0  witness_lock+0x5bb
#1  vn_read+0x56
#2  dofilereadv+0x230
#3  sys_readv+0xd8
#4  syscall+0xbb6
#5  Xsyscall+0x128
Process 53139 (syz-executor) thread 0xffff800029fd8290 (170176)
exclusive rrwlock inode r = 0 (0xfffffd806bd80b40)
#0  witness_lock+0x5bb
#1  rw_enter+0x41b
#2  rrw_enter+0xbe
#3  VOP_LOCK+0xa6
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x283
#7  ufs_mkdir+0x113
#8  VOP_MKDIR+0x102
#9  domkdirat+0x179
#10 syscall+0xaf8
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806c6151a8)
#0  witness_lock+0x5bb
#1  rw_enter+0x41b
#2  rrw_enter+0xbe
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vfs_lookup+0x109
#6  namei+0x7aa
#7  domkdirat+0x8b
#8  syscall+0xaf8
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10202  11141K   11307K 166960K     11877        0
            pcb    85     22K      22K 166960K       911        0
         rtable   164      7K       9K 166960K       755        0
             pf    42     19K     275K 166960K       213        0
         ifaddr    35      6K       7K 166960K       137        0
        ifgroup    62      2K       2K 166960K       240        0
         sysctl     4      1K       2K 166960K        12        0
       counters    66     36K      37K 166960K       172        0
       ioctlops     0      0K       4K 166960K      1880        0
            iov     0      0K      28K 166960K       278        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1388     87K      88K 166960K      2528        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2     10K      18K 166960K        51        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       110        0
        dirhash    12      2K       2K 166960K        72        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    17     61K      93K 166960K      2451        0
          sigio     1      0K       0K 166960K       170        0
           proc    72     91K     128K 166960K       938        0
        subproc   104      6K       6K 166960K       170        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       528        0
       in_multi    60      4K       7K 166960K       317        0
    ether_multi     1      0K       0K 166960K        32        0
            mrt     1      0K       0K 166960K        13        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       932        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         4        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   254     74K      91K 166960K     23933        0
       UVM aobj    30      4K       4K 166960K        31        0
     pinsyscall    42     84K     108K 166960K      3697        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       253        0
            NDP    13      0K       2K 166960K        99        0
           temp    84   6828K    7084K 166960K    115001        0
         kqueue    15     24K      33K 166960K       379        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      275    0      272     4     3     1     3     0     8    0
rtentry    112      245    0      179     4     1     3     4     0     8    0
unpcb      144     2182    0     2165    14    12     2     6     0     8    1
syncache   336       10    0       10     3     3     0     1     0     8    0
tcpqe       32        9    0        9     3     3     0     1     0     8    0
tcpcb      808     1164    0     1157    30    28     2    14     0     8    0
arp        120       41    0       27     1     0     1     1     0     8    0
inpcb      336     4381    0     4234    52    39    13    15     0     8    0
nd6        136       56    0       40     1     0     1     1     0     8    0
pkpcb       40       45    0       45     7     6     1     1     0     8    1
kcovpl      48       13    0        5     1     0     1     1     0     8    0
ppxss      1168      24    0       24     2     1     1     1     0     8    1
pfstscr     40        5    0        5     3     3     0     1     0     8    0
pffrag     232       45    0       35     1     0     1     1     0   482    0
pffrnode    88       45    0       35     1     0     1     1     0     8    0
pffrent     40      151    0      141     1     0     1     1     0     8    0
pfosfp      40     1428    0     1428     5     5     0     5     0     8    0
pfosfpen   112     1428    0     1428    21    21     0    21     0     8    0
pfrktable  1344       2    0        0     1     0     1     1     0     8    0
pfanchor   1288       2    0        1     1     0     1     1     0     8    0
pftag       88        3    0        1     1     0     1     1     0     8    0
pfstitem    24      268    0       99     2     0     2     2     0     8    0
pfstkey    128      276    0      108     6     0     6     6     0     8    0
pfstate    376      271    0      104    18     0    18    18     0     8    0
pfrule     1344      39    0       30     2     1     1     2     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256     1066    0      788    36    14    22    30     0     8    0
art_table   32     1069    0      788     4     0     4     4     0     8    0
art_node    16      235    0      181     1     0     1     1     0     8    0
sysvmsgpl   40       19    0        9     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112      105    0       95     1     0     1     1     0     8    0
shmpl      112       28    0        1     1     0     1     1     0     8    0
dirhash    1024      58    0       41     3     0     3     3     0     8    0
dino2pl    256     5860    0     4356    95     0    95    95     0     8    0
ffsino     272     5860    0     4356   101     0   101   101     0     8    0
nchpl      144     9408    0     7707    64     0    64    64     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   36733    0    36732     3     2     1     2     0     8    0
percpumem   16      100    0       53     1     0     1     1     0     8    0
kstatmem   264      132    0      106     3     1     2     3     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72       17    0       17     4     3     1     1     0     8    1
scxspl     216    29924    0    29924    15    13     2     8     1     8    2
plimitpl   152      806    0      787     1     0     1     1     0     8    0
sigapl     424     2774    0     2704    10     1     9     9     0     8    0
futexpl     64    37899    0    37892     1     0     1     1     0     8    0
knotepl    120      618    0        0    18     0    18    18     0     8    0
kqueuepl   216      779    0      765     9     8     1     5     0     8    0
pipepl     320      421    0      394     8     2     6     6     0     8    3
fdescpl    496     2731    0     2700     5     0     5     5     0     8    0
filepl     152    22707    0    22324    37    21    16    19     0     8    1
lockfpl    104     1202    0     1199     4     3     1     2     0     8    0
lockfspl    48      325    0      322     1     0     1     1     0     8    0
sessionpl  144       37    0       28     1     0     1     1     0     8    0
pgrppl      48      215    0      198     1     0     1     1     0     8    0
ucredpl    104     4489    0     4474     1     0     1     1     0     8    0
zombiepl   144     2705    0     2704     2     1     1     1     0     8    0
processpl  1160    2774    0     2704     7     1     6     6     0     8    0
procpl     648     6137    0     6056     8     0     8     8     0     8    0
srpgc       96       16    0       16     4     3     1     1     0     8    1
sosppl     168       21    0       21     5     5     0     1     0     8    0
sockpl     664     6977    0     6810    63    48    15    22     0     8    0
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl16k     16384      3    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     139    0        0    18     0    18    18     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      51    0        0     6     0     6     6     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      374    0        0    24     0    24    24     0     8    0
bufpl      280    10341    0     4166   442     0   442   442     0     8    0
anonpl      24   391154    0   379801   120    24    96    96     0   185    9
amapchunkpl 152   78244    0    77571    42     9    33    33     0   158    4
amappl16   200    10048    0     9660    51    16    35    37     0     8    4
amappl15   192        8    0        8     1     1     0     1     0     8    0
amappl14   184      142    0      130     1     0     1     1     0     8    0
amappl13   176       78    0       78     1     1     0     1     0     8    0
amappl12   168     3462    0     3431     4     1     3     3     0     8    0
amappl11   160       60    0       46     1     0     1     1     0     8    0
amappl10   152        7    0        7     1     1     0     1     0     8    0
amappl9    144      143    0      143     1     1     0     1     0     8    0
amappl8    136       29    0       26     1     0     1     1     0     8    0
amappl7    128      125    0      111     1     0     1     1     0     8    0
amappl6    120      216    0      214     1     0     1     1     0     8    0
amappl5    112      164    0      152     1     0     1     1     0     8    0
amappl4    104      352    0      334     1     0     1     1     0     8    0
amappl3     96    14586    0    14485     3     0     3     3     0     8    0
amappl2     88     3095    0     3010     3     0     3     3     0     8    0
amappl1     80    16580    0    16010    15     2    13    14     0     8    0
amappl      88    23212    0    23020     5     0     5     5     0    92    0
dma4096    4096       3    0        3     3     3     0     1     0     8    0
dma2048    2048       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        8    0        8     2     2     0     1     0     8    0
dma128     128      259    0      259     5     4     1     1     0     8    1
dma64       64        8    0        8     2     2     0     1     0     8    0
dma32       32        8    0        8     2     2     0     1     0     8    0
dma16       16       20    0       19     1     0     1     1     0     8    0
aobjpl      72       30    0        1     1     0     1     1     0     8    0
uaddrrnd    24     2731    0     2700     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2731    0     2700     1     0     1     1     0     8    0
vmmpekpl   168    21029    0    20979     4     0     4     4     0     8    0
vmmpepl    168   172855    0   170597   124    11   113   113     0   357    7
vmsppl     448     2730    0     2700     6     2     4     5     0     8    0
rwobjpl     56    51191    0    43918   107     0   107   107     0     8    3
pdppl      4096    5469    0     5400   145    72    73    85     0     8    4
pvpl        32    23114    0        0   187     1   186   186     0   265    0
pmappl     248     2730    0     2700     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      537    0      167    11     0    11    11     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd806bd80c50,9,0) at witness_checkorder+0x1047
rw_enter(fffffd806bd80c40,1) at rw_enter+0x122
rrw_enter(fffffd806bd80c40,1) at rrw_enter+0xbe
VOP_LOCK(fffffd805f752dd8,2001) at VOP_LOCK+0xa6
vn_lock(fffffd805f752dd8,2001) at vn_lock+0xa4
vn_rdwr(0,fffffd805f752dd8,ffff800011a26080,1f,0,1,d9115a23445b67d7,0,ffff800000b3e000,0) at vn_rdwr+0xd1
vndstrategy(fffffd8076105480) at vndstrategy+0x4ff
physio(ffffffff82c28370,2902,8000,ffffffff8110bec0,ffff8000372334e0) at physio+0x2f6
spec_read(ffff8000372332d0) at spec_read+0x155
VOP_READ(fffffd806e044d08,ffff8000372334e0,0,fffffd807f7d34e0) at VOP_READ+0x102
vn_read(fffffd806cbb5c90,ffff8000372334e0,0) at vn_read+0x17b
dofilereadv(ffff80002a05b1d8,3,ffff8000372334e0,0,ffff8000372335a0) at dofilereadv+0x230
sys_readv(ffff80002a05b1d8,ffff800037233650,ffff8000372335a0) at sys_readv+0xd8
syscall(ffff800037233650) at syscall+0xbb6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x234230d9e70, count: -16
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x41e
sched_idle(ffff800029b7bff0) at sched_idle+0x558
end trace frame: 0x0, count: -5