last executing test programs:

1.295844907s ago: executing program 5 (id=1274):
r0 = socket(0x800000018, 0x3, 0x0) (async)
r1 = syz_open_pts()
close(r1) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r2 = syz_open_pts()
close(r2) (async)
r3 = syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x4) (async)
ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000040)={0xfffffffb, 0xb, 0x2000d, 0x7fffffff, "d0ec170000000000ee0d009c0000a17d002000b1", 0x5, 0xf}) (async)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000009c0)="f284547ec87ae3ad1aad0ee27ee88eacb67a08038280f2a01ae7a48358ae16e2fba4ee0ddad57fa2b502658b5723516552c4349404b44e61906eb367dd016164244e321c3f3fa4a301cca907a63fe5682806e86f7b9ed732b01c843a7c13b71430810706a94f10d2cb6414e1fffa7b8cceb21a5bb7f7e286998196fa9ddbf1180a09", 0x82}], 0x1) (async)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async)
r4 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40002344, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x17b) (async)
dup2(r0, r4)

1.151365514s ago: executing program 3 (id=1280):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100))
r1 = syz_open_pts()
r2 = syz_open_pts()
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="23ac8f313e774ea95a98b7a70e54baf985ecbe9b759f169649a882ab03d406166845f3d823010ff1b12f81785ee46b0e1d845737487d3ab636f208c89f05023d52153f6269e75f6eae428691f8b7b88dfa2182ba0200000000000000b994fee8184895c5c84b798b27d1a4ca779b1495818aa06c86c6cd8849575280", 0x7c}], 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
setuid(0xffffffffffffffff)
r3 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0))
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
dup(r3)
poll(&(0x7f0000000200)=[{r4, 0x1c4}], 0x1, 0x1ff)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5)
close(r4)
syz_open_pts()
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000240)={0xd, 0x0, 0x3, 0x76b9, 0x7}, 0xc)
pread(r1, &(0x7f0000000140)="9cb5dfb9891e7b562ab3bec055be00cf64967f90d8106c5b0a53bb8478e81a4445e0830f0b95d6707a604c1b3ae48f946cf690d51e1170ef393cfcd0cca71bf98747", 0x42, 0x2)

1.076564015s ago: executing program 3 (id=1282):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0xfffffffffffffffc, 0x2, 0x100200004, 0x3, 0x7, 0xdf60, 0x3, 0xfffffffffffffffe, 0x20002f01, 0x93, 0x20000100000003, 0xfffffffffffffffe, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffffffffffd, 0x20000001, 0x7, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0x0, 0x542e0373, 0xffffffff00000000], [0x104, 0x1fffffffffc, 0x7ffffffffffffffc, 0x100000002, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x7}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0x4}, {0x20, 0x2, 0x7f, 0x8}, {0xffff, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x8000, 0x100, 0xf, 0xb}], {0xddd, 0x5, 0x7, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) (async, rerun: 32)
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='y', 0x1) (rerun: 32)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async, rerun: 64)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) (rerun: 64)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async)
ioctl$WSMUXIO_ADD_DEVICE(r1, 0x8004667d, &(0x7f00000000c0)={0x2}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async, rerun: 32)
execve(0x0, &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async)
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f00000000c0)) (async, rerun: 64)
ioctl$VNDIOCCLR(r3, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (rerun: 64)

1.074139957s ago: executing program 3 (id=1285):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bc00", 0x0, 0xd})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
pwrite(r1, 0x0, 0x0, 0x5)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc9e", 0x1d}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09", 0x48}], 0x2)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000140)={0xfffffffd, 0x4f, 0x8001, 0x9, "3d2503a7912d8782ffef38ee1750c8e76f0f9270", 0x10, 0x80})
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x57a, 0x8, 0x4, 0x3, "f888e838e099a8d4356d8a98f6712095289dda7c", 0x43, 0x8})
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0)
kqueue()
openat$pf(0xffffffffffffff9c, 0x0, 0x200, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setuid(0xee01)
semget$private(0x0, 0x2, 0x53)
r2 = socket(0x2, 0x2, 0x0)
bind(r2, &(0x7f0000000000), 0x10)
mknod(0x0, 0x8000, 0x501)

935.31981ms ago: executing program 7 (id=1296):
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000040)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0)
shutdown(r1, 0x2)
r2 = dup2(r1, r1)
getpeername$inet(r2, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
close(r0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

770.740834ms ago: executing program 3 (id=1297):
open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5013, 0xffffffffffffffff, 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
r1 = getuid()
getgroups(0x7, &(0x7f0000000040)=[0x0, <r2=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0])
chown(&(0x7f0000000080)='./file0\x00', r1, r2)
sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f00000000c0)="db03003c936ab9ad05a023c3c15bd1945c511e72201ab1c10d057b0ada8150135fd86ecc1f349b5a7483f2af52b3d88543ebfbbb0d199f212f06c9b5d7b471c108b80ea3fa7fe3b9f648", 0x0, 0x0, 0x0)
setreuid(0xee00, r0)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff", 0x2)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

770.247425ms ago: executing program 3 (id=1298):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80)
r1 = fcntl$dupfd(r0, 0xa, r0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="cc", 0x1}], 0x1000000000000204)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4)
sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil)
shmctl$IPC_RMID(r2, 0x0)
r3 = semget$private(0x0, 0xc, 0x581)
semctl$GETZCNT(r3, 0x0, 0x7, &(0x7f00000001c0))
semctl$SETVAL(r3, 0x5, 0x8, &(0x7f0000000080)=0x7)
setuid(0xee01)
r4 = getpid()
ktrace(0x0, 0x1, 0x928, r4)
semctl$GETVAL(r3, 0x2, 0x5, &(0x7f0000000000)=""/83)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00')
unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00')
open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1)
r5 = syz_open_pts()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000740)={0x804, 0xbcb, {[0x9, 0x1, 0x5, 0x7, 0x1, 0x6, 0x9d1, 0x1, 0xa000000000000000, 0x2, 0x4, 0x3, 0x5, 0x1, 0xdf, 0x2, 0x5, 0x80000001], [0x80000001, 0xfffffffffffffffc, 0xe, 0xd83, 0x1, 0xc, 0x30ac00000, 0x2fc6476f], [0xffffffffffffff01, 0x5, 0xc, 0xa, 0x5, 0x6e, 0x6], [0xfffffffffffffff8, 0x6, 0x8c, 0x5, 0x400, 0x6], [{0x4, 0x0, 0xfffffff8, 0x800}, {0xc1c8, 0x3, 0x8, 0xdff}, {0x1000, 0x8cd4e02, 0x2b2, 0x8}, {0x0, 0x5, 0x10000, 0xdd}, {0x1, 0x8, 0x3, 0x4}, {0x200, 0x4, 0x9, 0x2}, {0x1, 0xe40b, 0x6, 0xff}, {0x9, 0x401, 0xb, 0x2}], {0x0, 0x8, 0xf7, 0x7}, {0xc1, 0x116dc000, 0x6, 0x510b}}})
close(r5)
syz_open_pts()

732.900732ms ago: executing program 7 (id=1303):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x8, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1, 0x7}, {0x2, 0xff04}, {0x1}, {}, {0x3}, {0x3}, {0x0, 0xaa59}, {0x1, 0xb3d0}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0xf}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x1, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x3, 0xfffffffe}, {0x0, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) (async)
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x112, 0x0)
ioctl$WSDISPLAYIO_GVIDEO(r1, 0x40045744, &(0x7f0000000180))
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mknod(&(0x7f00000002c0)='./bus\x00', 0x1, 0xd01) (async)
chflags(&(0x7f0000000240)='./bus\x00', 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) (async)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x4) (async)
r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105727, &(0x7f0000000300)={&(0x7f00000000c0)=[{0x2, 0x400005}], 0x1}) (async)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0)
mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x2006da) (async)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async)
ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f00000002c0)={0xeca0000, 0x300000000000}) (async, rerun: 64)
ioctl$WSMOUSEIO_GTYPE(r3, 0x40045720, &(0x7f0000000200)) (async, rerun: 64)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) (async)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000006c0)={'tap', 0x0}) (async, rerun: 64)
ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xc, 0x5, 0x2c, 0xfffffffc}, {0x7, 0xb6, 0xf7}, {0x6, 0x5, 0x7c, 0x101}]}) (async, rerun: 64)
syz_emit_ethernet(0x1000e, &(0x7f00000003c0)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async, rerun: 64)
sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)

732.061649ms ago: executing program 3 (id=1305):
r0 = kqueue()
kevent(r0, &(0x7f0000000000), 0x80000001, 0x0, 0xdd, 0x0)
kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0)
kqueue() (async)
kevent(r0, &(0x7f0000000000), 0x80000001, 0x0, 0xdd, 0x0) (async)
kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) (async)

731.040547ms ago: executing program 4 (id=1307):
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000380000000000019078ac1300bbe00000010c009078000000084500007d00000000004f7600e000000100000000fe80205c50d99296"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x2, 0x0) (async)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0xe5)
pread(r1, &(0x7f0000000280)="f3130634", 0x4, 0x7fffffffffffffff) (async)
bind(r0, &(0x7f0000000000), 0x10) (async)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xe5, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x1}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x25, 0x9, 0x2}]})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000000029, 0x3f, &(0x7f0000000040)="00fb534f", 0x4) (async)
setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
select(0x40, &(0x7f0000000080)={0x7fffffffffffffff, 0x8000, 0x7, 0x4, 0x4302d39d, 0x4, 0x8000000000000001, 0xd}, 0x0, 0x0, 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c50000201201", 0x8b, 0x808, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000000)="b100050400fe04000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
write(r2, &(0x7f0000000140)="766cd46c6606fe2f", 0x8) (async)
connect$unix(r0, &(0x7f0000000000), 0x10)

634.657167ms ago: executing program 4 (id=1308):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x4})
r0 = socket(0x18, 0xc003, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75)
r1 = syz_open_pts()
r2 = dup2(r1, r1)
recvfrom$inet6(r2, &(0x7f0000000080)=""/217, 0xd9, 0x60, &(0x7f0000000000)={0x18, 0x3, 0x3, 0x53c4746b}, 0xc)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
syz_open_pts()
r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$TIOCSETA(r3, 0x20004401, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x4}) (async)
socket(0x18, 0xc003, 0x3a) (async)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) (async)
syz_open_pts() (async)
dup2(r1, r1) (async)
recvfrom$inet6(r2, &(0x7f0000000080)=""/217, 0xd9, 0x60, &(0x7f0000000000)={0x18, 0x3, 0x3, 0x53c4746b}, 0xc) (async)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) (async)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async)
syz_open_pts() (async)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
ioctl$TIOCSETA(r3, 0x20004401, 0x0) (async)

634.224454ms ago: executing program 7 (id=1309):
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x0, 0x40000000000000, 0xfffffffffffffff9})
flock(0xffffffffffffffff, 0x1) (async)
flock(0xffffffffffffffff, 0x3) (async)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x40047473, &(0x7f0000000080)=0xb)
syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0]) (async)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async)
setrlimit(0x1, &(0x7f00000000c0)={0xfffffffffffffffa, 0x20000000006}) (async)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="00006885ac14a71fadde584c5a395aefd0ba7ddd38a63fbcb4"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000180)={0xcb7, 0x3, {0xc2d00000, 0x65}}) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async)
r1 = dup(0xffffffffffffffff)
write(r1, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r2 = socket(0x2, 0x3, 0x2) (async)
syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0000000000000800455c003800000000002c9078ac1400bbffffffff0c02907800080000456cfff80065000008010000ffffffff7f0000010b525579e5b145d89904e34261269147205a415d61349defe1845a271e7a3b37cc61c0b33fa20a0ab01fbff0a002c90b09509ebfb1e3ea00"]) (async)
mknod(&(0x7f0000000240)='./file0\x00', 0x2060, 0x205710)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000280)=[{{}, 0xfffffffffffffff8, 0x16, 0x10, 0x7ff8000000000, 0x2}], 0x8, &(0x7f00000001c0), 0x15, 0x0)
close(r2) (async)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x23, 0x11)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x8) (async)
ioctl$BIOCSRTIMEOUT(r3, 0xc0307004, &(0x7f00000000c0)={0xfffffffffffffffc, 0x7}) (async)
open(&(0x7f0000000000)='./bus\x00', 0x440, 0x10)
connect$unix(r2, &(0x7f0000000000), 0x10)

608.210786ms ago: executing program 7 (id=1310):
r0 = msgget$private(0x0, 0x730)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5200)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x2)
read(r1, &(0x7f0000000040)=""/30, 0x1e)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x3, 0x1)
setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc)
connect$unix(r2, &(0x7f0000000000), 0x10)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(r2, &(0x7f00000013c0)=[{0x0}], 0x1)
msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0xee01)

606.768374ms ago: executing program 4 (id=1313):
r0 = socket(0x1e, 0x3, 0x0)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ec8d6121fe1ca0556d35470aa0ee0cc85796e96a2029d85d94e726d76b576bf0bd095d2eda987e0052830eab363b3021837fa906edaeea869431606f0d73374085b230787ca0fb4f36ce8255341b484b820d3704952843a0b582a9b7a4256efc439e1053768ee1b5536d5c9508a0f9bf", 0x70}, {&(0x7f00000008c0)="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", 0xf91}], 0x2)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="4c7cd07bebfb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @multicast1}}}}}})
syz_emit_ethernet(0x3b, &(0x7f0000000040)={@random="aa1118bfb983", @broadcast, [], {@arp={0x806, @generic={0xf, 0x3c07, 0x6, 0x9, 0x4, @broadcast, "0c1075cfdd4ada34b1", @local, "8c54911871cae0fa65bd3bb90d4b49c0"}}}})

569.990472ms ago: executing program 7 (id=1315):
mknod(&(0x7f00000000c0)='./bus\x00', 0x10, 0xd02)
r0 = open(&(0x7f0000000300)='./bus\x00', 0x2, 0x8)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
unlink(&(0x7f0000000000)='./file0\x00')
ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000040)={0x0, 0x81, 0x0, 0x33})
mknod(&(0x7f00000000c0)='./bus\x00', 0x10, 0xd02) (async)
open(&(0x7f0000000300)='./bus\x00', 0x2, 0x8) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
unlink(&(0x7f0000000000)='./file0\x00') (async)
ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000040)={0x0, 0x81, 0x0, 0x33}) (async)

562.826726ms ago: executing program 4 (id=1316):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000ffff000001", @ANYRES32=r1, @ANYRES64=r0, @ANYRES64=r1], 0x10, 0x8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg(r2, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) (async)
recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, 0x0}, 0x1000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
r4 = socket(0x18, 0x2, 0x0)
sendto(r4, &(0x7f0000000000)="fa636b67da5f6a2c8aecfdc07e4a67b7602be8e4", 0x14, 0x406, &(0x7f0000000080)=@in={0x2, 0x2}, 0xc) (async)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)

562.332938ms ago: executing program 6 (id=1317):
syz_emit_ethernet(0x87, &(0x7f0000000140)=ANY=[@ANYBLOB="00dfa2b30000000000ffffffffffff86dd605f6ad900512b0000000000000000000000000000000000ff02000000000000000000000000000102009078000000006006c33e0006ff00fe8000000000000000000000000000bb0000000000000000000000000000000168098ae53da90a622a92bb141d47a242bd233de0db89fb90637c283e88d0a10000"])
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
r0 = shmget(0x0, 0x4000, 0xb0, &(0x7f0000ff9000/0x4000)=nil)
r1 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
r4 = getegid()
r5 = fcntl$getown(0xffffffffffffff9c, 0x5)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x447, r1, r3, 0x0, r4, 0x30, 0x200}, 0x7, 0x2, 0xffffffffffffffff, r5, 0x6, 0x2000000000000, 0x401})
r6 = dup(0xffffffffffffffff)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
fchownat(r7, &(0x7f0000000140)='./file0\x00', r2, r4, 0x3)
r8 = semget(0x2, 0x3, 0x422)
r9 = msgget$private(0x0, 0xe4)
r10 = geteuid()
r11 = getuid()
r12 = fcntl$getown(r6, 0x5)
r13 = fcntl$getown(0xffffffffffffff9c, 0x5)
msgctl$IPC_SET(r9, 0x1, &(0x7f0000000180)={{0x2, r10, r4, r11, r3, 0x1d0, 0xff7f}, 0x7e, 0x8000, r12, r13, 0x3ff, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x8})
r14 = msgget(0x0, 0x120)
getpgid(r12)
shmctl$IPC_RMID(r0, 0x0)
mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4)
semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000200)={{0x6, r11, r4, r11, r4, 0x112, 0xff}, 0x3, 0x0, 0xffffffff})
readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/12, 0xc)
r15 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VMM_IOC_TERM(r15, 0x80045604, &(0x7f0000000340)={0x1})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000380)={<r16=>0x0}, &(0x7f00000003c0)=0xc)
fcntl$setown(r15, 0x6, r16)
sendto$inet(r6, &(0x7f0000000400)="93f4cbd137cb5a4cdd22c82932cc0d95f545afd8b4a10ce0e7000106ea1c4d086b11bab020bb2333e6c77aaf7b6af465bc088d23f0cb95ff3c9887483ba257eea6e4a7f450729f981d8056acc9bed9cf6d6a9c98a565e43eca4acc6a945e99c291e0746e7ec2af4fc0a3ad7128f6ac4bf657c25c5e", 0x75, 0x4, &(0x7f0000000480)={0x2, 0x3}, 0xc)
msgrcv(r14, &(0x7f00000004c0)={0x0, ""/79}, 0x57, 0x0, 0x924e36b53d6b5a46)

437.019413ms ago: executing program 7 (id=1318):
r0 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x8, 0x7ff, 0x42000201, 0x81, "11001000000000e500", 0x2000, 0x49e22})
r1 = syz_open_pts()
r2 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000510, r2)
fcntl$lock(r1, 0x7, &(0x7f0000000840)={0x3, 0x0, 0xe, 0x10000fffffffc, r2})
setitimer(0x0, &(0x7f0000000280)={{0xffffffff}, {0xffffffff}}, 0x0)
getitimer(0x0, 0xfffffffffffffffe)
bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0)
r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$PCIOCWRITE(r3, 0xc00c7007, &(0x7f00000005c0)={{}, 0x2, 0xfffffffe, 0x2})
r4 = syz_open_pts()
readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
lseek(r1, 0x6, 0x0)
ioctl$PCIOCWRITE(r3, 0xc00c7007, &(0x7f00000005c0))
getrlimit(0x3, &(0x7f0000000080))
r5 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa)
close(r5)
getdents(r5, &(0x7f0000000180)=""/8, 0x8)

435.107093ms ago: executing program 5 (id=1320):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x7fff, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x2, 0x6, 0x5, 0xd2}, {0x238ab, 0x9, 0x8, 0xfffffff8}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x7, 0x8007, 0x7}, {0x401, 0x200003, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x86}, {0xce1, 0xb, 0x3b2, 0x10002}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x6}, {0x6a76, 0x8001, 0xffe, 0x4}, {0x1, 0x10003, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0x9, 0x40, 0x4, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x1000c, 0x5, 0x5, 0x4}, {0x0, 0x6, 0x6, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
sysctl$hw(&(0x7f0000000140)={0x6, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
sysctl$kern(&(0x7f0000000340)={0x1, 0x56}, 0x2, 0x0, 0x0, &(0x7f0000000640), 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000040)={0x0, 0x0})
munlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000)

359.544477ms ago: executing program 1 (id=1322):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r0, &(0x7f00000000c0)="c3", 0xffffffed)
read(r1, &(0x7f0000000400)=""/119, 0xfd4c)
r2 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000140)={<r3=>0x0}, &(0x7f0000000280)=0xc)
ktrace(0x0, 0x5, 0x128, r3)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
r4 = socket(0x18, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f4601faa903493e339865dce0f225d", 0x2f}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r4, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0)
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x4, 0x2}, {0x8000000000000001, 0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={<r5=>0xffffffffffffffff})
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00')
r6 = socket(0x800000018, 0x1, 0x0)
listen(r6, 0x1)
shutdown(r6, 0x0)
select(0x40, &(0x7f0000000000)={0x7c, 0x0, 0x2, 0x4, 0x0, 0x98, 0x7b}, 0x0, 0x0, 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00')
bind$unix(r5, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
r7 = socket$unix(0x1, 0x5, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, 0xffffffffffffffff)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x80000001, @rand_addr}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x1, 0x40, 0x1, 0x4, 0x416}}}}})
connect$unix(r7, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)

358.80575ms ago: executing program 2 (id=1323):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100))
sysctl$kern(&(0x7f0000000240)={0x1, 0x4f}, 0x2, 0x0, 0x0, &(0x7f0000000600), 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x8, 0x0, 0x31, 0xdf8a, 0xfff}, 0xc)

358.410375ms ago: executing program 2 (id=1324):
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x100400001})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x192)
acct(0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, 0x0)
acct(&(0x7f0000000080)='./file0\x00')
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x18, 0x3, 0x0)
r2 = socket(0x2, 0x3, 0x5)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r2, 0xc0206923, &(0x7f0000000100))
setsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x3)
sysctl$net_inet6_icmp6(&(0x7f00000002c0)={0x4, 0x18, 0x3a, 0x9}, 0x4, &(0x7f0000000300)="3ae5ee9a82fe", &(0x7f0000000140)=0x6, 0x0, 0x0)

356.066175ms ago: executing program 4 (id=1325):
syz_extract_tcp_res(&(0x7f0000000000)={<r0=>0x41424344}, 0x3, 0x101)
syz_extract_tcp_res(&(0x7f0000000080)={<r1=>0x41424344}, 0x9, 0x4)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$TIOCSETA(r2, 0xc4504447, &(0x7f0000000000)={0x2f, 0x8, 0x2, 0xfffffffe, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x3})
syz_emit_ethernet(0x28b, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x5, 0x6, "577b01", 0x255, 0x2e, 0x7f, @rand_addr="989f9117dcfc7e8d933992653808a17c", @ipv4={'\x00', '\xff\xff', @rand_addr=0x5}, {[@hopopts={0x2b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2ad60}]}, @dstopts={0x29, 0x6, '\x00', [@generic={0x0, 0x18, "026ae8e6e7cc42235a3c10a9737fb844548971e5ae7881f6"}, @padn, @enc_lim={0x4, 0x1, 0xe}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xd}, @pad1]}, @fragment={0x2f, 0x0, 0x4, 0x1, 0x0, 0x1f, 0x65}, @fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x68}, @dstopts={0x4, 0x1b, '\x00', [@generic={0x3, 0xd4, "430e1a35d5a6585b59d5e220c97fba91078be9ff4b76afb99d45c320ea6a1f081131fdec2ee74d18c2ecc3dbd36e200ff740cd38bb2c9a3db4ce38a51046cc2f0b7cc83217f273b2f7795286917dcc346dcc9a268c57a847d5d9296af33c902b480f5d8339879b305694feafd3a75e3b21d9539ae8349c93f67fd8820b59d643d54408f6dabf8fd0a06a3d1fb15a11d08abe1c4b4aa967d9dd84b9ca2577138478a824de2cd295322e7b2e11f63ed3654c6622af1089d771bc6fb35a46ce9d24b3be3890bb6b59fb323eb41246d9669283e5360f"}, @pad1]}], @tcp={{0x2, 0x1, r0, r1, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x25, {[@eol, @nop, @eol]}}, {"4d904433ab0abe5e470cf360b400bb3a0840380c92d017e9dbf8e7e98dec2fd1f0962a8b6d9e2167de0205ef2844e41bba60caceafa4c977c867b2257a23fbd08965581dca40a1e2234281b52503ff0ab0d5bd6ac37c6a316a61500acf59e08692721b150dbd73a6064a5eb31f1ed1900fd90920fbacc44ac183ceb9c0baee17a4f1bf9df0a8e04ee1919b725673c64c9116e46bcb579dd1c2757d4de17b76cb64ac0e2bfabca430d0399e54079fd52052cead83ac5204aa1841f520c80fde9432d0998d6a12d2ccfd4249543b01f7321c854f4493ac8c16d30db5cebbe5292dd7df4545591b747277ffd60a4a3165375b7c4761f2"}}}}}}})
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
r3 = syz_open_pts()
close(r3)
fchown(r3, 0x0, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00000dc000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7f9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffff9}, {&(0x7f0000125000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0x8}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000048d000/0x2000)=nil, 0xffd}], './file0\x00', 0xfffffffa})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket(0x18, 0x3, 0x50)
ioctl$FIONREAD(r4, 0x8020699f, &(0x7f00000001c0))
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x2, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@dest_unreach={0x3, 0x2, 0x0, 0x0, 0x46, 0x9, {0xc, 0x4, 0x1, 0x2e, 0x40, 0x66, 0xff, 0xa, 0x2b, 0x2, @remote={0xac, 0x14, 0x0}, @multicast2, {[@noop, @noop, @generic={0x0, 0x7, "f32bd9ce19"}, @ssrr={0x89, 0x3, 0x3a}, @rr={0x7, 0x3, 0xa2}, @lsrr={0x83, 0x7, 0xf, [@remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0x3, 0x89}]}}}}}}})

355.924073ms ago: executing program 2 (id=1326):
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000083a01fe5e00000000000800bbff020000000000000000000000000001822d7e2c320d83"])
unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='x\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

309.704723ms ago: executing program 0 (id=1327):
syz_emit_ethernet(0xc9, &(0x7f0000000000)={@local, @random="53587d4407b3", [], {@generic={0x7005, "0f78e74697016b0a3e6b0eae6f4663fc109f560b01628b213240f3c3ab30036e92d2084ddc30485752fed90a33edc9d08814e6df116c966f154198fd6de31ef1ac2f09c657e9d9f4861ce047c11c63a534636d3ad0e65b8546eea810ed08dcaacb860800000037361b814933a88d8b25f81f4fb5423a52aad041588453ba07c039fd6535eb8693fafb58dd2934c49407594b502e494aa183c9f8e8dcaeb683ae4ede6c9554be8d2423432a9a9643f3ea5c185a0000000000000000"}}})

309.060785ms ago: executing program 4 (id=1328):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r0, &(0x7f00000000c0)="c3", 0xffffffed)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x9)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x2a)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x9}, 0x1ff, 0x5, 0x0, 0x0, 0xffffffffffff75ba, 0xfffffffffffffff9, 0x8abd, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
close(r2)
execve(0x0, 0x0, 0x0)
read(r1, &(0x7f0000000400)=""/119, 0xfd4c)
pipe2(&(0x7f0000000100), 0x0) (async)
write(r0, &(0x7f00000000c0)="c3", 0xffffffed) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x9) (async)
open(&(0x7f0000000080)='./file0\x00', 0x10, 0x2a) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x9}, 0x1ff, 0x5, 0x0, 0x0, 0xffffffffffff75ba, 0xfffffffffffffff9, 0x8abd, 0x5}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
close(r2) (async)
execve(0x0, 0x0, 0x0) (async)
read(r1, &(0x7f0000000400)=""/119, 0xfd4c) (async)

308.45069ms ago: executing program 0 (id=1329):
socket(0x2, 0x2, 0x0) (async)
r0 = socket(0x2, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa)
sysctl$hw(&(0x7f0000001580)={0x6, 0xc}, 0x2, &(0x7f00000015c0)="fd8b5fa92d", &(0x7f0000001640)=0x5, &(0x7f0000001680), 0x0)
recvfrom(r0, &(0x7f0000000000)=""/41, 0x29, 0x801, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x3}, 0x8)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)=0xc)
fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x6) (async)
fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x6)
r4 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x80606955, &(0x7f00000001c0))
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="585a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x2)
ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3}) (async)
ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3})

308.11947ms ago: executing program 6 (id=1330):
r0 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4)
r1 = fcntl$getown(r0, 0x5)
syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x7ff, 0x3a, 0x80, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, [@hopopts={0x2}]}}}}}}})
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x8000000000, 0xc4, r1})
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000300)={&(0x7f0000000080)=[{0x5, 0x2}, {0x81, 0xc}], 0x2})
r2 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
socket(0x800000018, 0x2, 0x0) (async)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) (async)
fcntl$getown(r0, 0x5) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x7ff, 0x3a, 0x80, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, [@hopopts={0x2}]}}}}}}}) (async)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x8000000000, 0xc4, r1}) (async)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000300)={&(0x7f0000000080)=[{0x5, 0x2}, {0x81, 0xc}], 0x2}) (async)
socket(0x800000018, 0x2, 0x0) (async)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) (async)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)

241.520743ms ago: executing program 6 (id=1331):
r0 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c)
r1 = socket(0x1e, 0x3, 0x0)
setuid(0xffffffffffffffff)
ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) (async)
ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff)
shutdown(r1, 0x2)
ioctl$VT_GETACTIVE(r0, 0x40047607, &(0x7f0000000000))
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r2 = syz_open_pts()
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="0300108901f89115ff92248d21c07fd7e2d2b8c4637cdb25c114deccbc51026e0528c7da33ae83e20100db2fde7e8b4944b150af7dfdba98f0ffeff532d81160260e6858262fecff8787af826de2ff89a8e91669a41a84", 0x57}], 0x1)
poll(&(0x7f0000000140)=[{r2, 0x20}, {r0, 0x4}, {r2, 0x20}, {0xffffffffffffffff, 0x10}, {r2, 0x8}, {r1, 0x10}], 0x6, 0x77) (async)
poll(&(0x7f0000000140)=[{r2, 0x20}, {r0, 0x4}, {r2, 0x20}, {0xffffffffffffffff, 0x10}, {r2, 0x8}, {r1, 0x10}], 0x6, 0x77)
close(r2) (async)
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200005, 0x9}) (async)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200005, 0x9})
setrlimit(0x7, &(0x7f0000000980)={0xb, 0x5c})
getuid()
r4 = socket(0x2, 0x3, 0x2f)
r5 = dup(r1)
setsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSETA(r6, 0xc0284414, &(0x7f0000000740)={0x80000000, 0x2, 0x4, 0x6088, "010000000000000000006768b7e14024874e00", 0x9, 0x10000001}) (async)
ioctl$TIOCSETA(r6, 0xc0284414, &(0x7f0000000740)={0x80000000, 0x2, 0x4, 0x6088, "010000000000000000006768b7e14024874e00", 0x9, 0x10000001})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f000073b000/0x2000)=nil, 0x2000, 0x1)
sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) (async)
sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0)
open(0x0, 0xc7c33b77c67d15a7, 0x0) (async)
r7 = open(0x0, 0xc7c33b77c67d15a7, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0)
ioctl$TIOCNXCL(r7, 0x2000740e) (async)
ioctl$TIOCNXCL(r7, 0x2000740e)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

241.223973ms ago: executing program 2 (id=1332):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {0x3}, {0x2}, {}, {}, {0x2}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {0x0, 0xfffffffd}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x1, 0xfffffffd}, {0x3, 0x8}, {0x3}]})
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xf)
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000040)="be0673a8", 0x4)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$lock(r0, 0x0, &(0x7f0000000640)={0x1, 0x1, 0x0, 0x100000000002})
ioctl$WSDISPLAYIO_SVIDEO(r0, 0x80045745, &(0x7f0000000000)=0x1)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b)
setuid(0xee01)
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)=0x10004)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e)

240.698159ms ago: executing program 0 (id=1333):
r0 = syz_open_pts()
ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000040))
fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd})
flock(r0, 0x1)
getrusage(0x1, &(0x7f0000000000))
r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8)
getsockname$unix(r1, &(0x7f0000000100)=@file={0x0, ""/94}, &(0x7f0000000180)=0x60)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001})
sysctl$kern(&(0x7f00000016c0)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000002740), 0x0)

240.344168ms ago: executing program 2 (id=1334):
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000002c0)={<r0=>0x0}, 0xc)
ktrace(&(0x7f0000000240)='./file0\x00', 0x0, 0x208, r0) (async)
r1 = socket(0x18, 0x3, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCGDIRFILT(r3, 0x4004427c, &(0x7f0000000000)) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000280)=[{0x4, 0x62, 0x8}, {0x20, 0x5, 0x8, 0xc}, {0x6, 0x80, 0x2, 0xe6}]})
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[]) (async)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000000c0))
setitimer(0x1, &(0x7f0000000140)={{0x3, 0x8}, {0x30e, 0x4}}, 0x0) (async)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000003c0), &(0x7f0000000400)=0xc) (async)
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12b) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x6, 0x1000, 0x40008, 0x5, 0x18002, 0x10, [{0x40006, 0x2, 0xfffeffff, 0x200a24}, {0xc5c, 0x7fff, 0x8, 0xffffdff9}, {0x800008, 0x20f89, 0x7d, 0x9}, {0xfffffff9, 0x800, 0x3, 0x6}, {0x4, 0x803, 0xfffffff7, 0x4d89}, {0x1ff, 0x3, 0x3, 0xb4}, {0x8000008, 0x7, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x100002}, {0x2, 0x87e, 0x5, 0x9}, {0x4, 0x40000090, 0xd1d, 0x88}, {0x1c1, 0xd, 0x4, 0x101}, {0x10001, 0x6, 0x20004, 0xc}, {0xb8d, 0x1453, 0xa, 0x2c4}, {0x29a71720, 0x474d, 0xd, 0x6}, {0x6, 0xb, 0xfffffff9, 0x7}, {0x0, 0x8, 0x1002, 0xc}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
ioctl$VNDIOCSET(r4, 0x41406474, 0x0)
sysctl$ddb(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="19512c709dd8ff2d9560deba76d6398cd3ac58d2dfd72ff06dc29d0dc5114fd4331cd4464156f749bc5fe2ad25b522c37490595f6f13", 0x36) (async)
r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$WSDISPLAYIO_DELFONT(r6, 0x8058574f, &(0x7f0000000340)={'./bus/file0\x00', 0x80, 0xe5, 0x3, 0x0, 0x7, 0x6, 0x8, 0x1, 0x2, 0xa59d, 0xfffffffffffffbe1})

221.09385ms ago: executing program 0 (id=1335):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
fcntl$getown(r0, 0x5)
r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0xc)
getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000140)=0xc)
socket(0x18, 0x1, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x108)
select(0x40, &(0x7f0000000300)={0x7, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0xc, 0x101}, 0x0, &(0x7f0000000380)={0x5d4b, 0x2, 0xffff, 0x5, 0x2, 0x2f5, 0xb682, 0xded}, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000980)={&(0x7f0000000040)=[{0x3, 0x5}, {0x24, 0x26}], 0x2})

169.255475ms ago: executing program 0 (id=1336):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x60, 0x7, 0x6, 0x43}]})
ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000100)={0x100, 0x3, 0x40})
ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000080)={0x5, 0x7, 0xcb, 0x4})
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00')
sysctl$vm(&(0x7f0000000000)={0x2, 0x2}, 0x1, 0x0, 0x0, 0x0, 0x40)

168.710752ms ago: executing program 6 (id=1337):
setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffffd, 0x2}, {0x4, 0x8}}, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, 0xffffffffffffffff) (async)
setpgid(0x0, 0xffffffffffffffff)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x8, 0x100, {0x102, 0xffffffffffffffb7}})
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
select(0x40, &(0x7f0000000040)={0x40009, 0x5, 0x4008, 0x5, 0x3, 0x1000000000090, 0x89ce, 0x40000000000}, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202)
mknod(&(0x7f0000000200)='./bus\x00', 0x2000, 0x202)
rmdir(&(0x7f0000000340)='./file0\x00') (async)
rmdir(&(0x7f0000000340)='./file0\x00')
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4)
sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sysctl$vm(&(0x7f0000000000)={0x4, 0x2}, 0x7, &(0x7f0000000040)="c06d154be3aee5f8787f8b9cda7554335b763bb5deea5ccecb4d1b57a9f6fa18e47fc7b119db587e58811e666e84a806495b45c36164bd5b135280243ed0a01466056e93082876ba33ee8cf2b0b3907f236f38175101000000d7e39544aea098d19ee63d03cbf92380dbe904538135f09e408bbe17a54a364b04ee64b0ad54e6d4e38114ced38c328aff2e224239ba29eb0796e8c3e8344a2cd9e663bb21035ebf391872f3015c164556e4a5b966122c56edd85fc996f12fa1b92e47aa", 0x0, 0x0, 0xfffffffffffffe8f) (async)
sysctl$vm(&(0x7f0000000000)={0x4, 0x2}, 0x7, &(0x7f0000000040)="c06d154be3aee5f8787f8b9cda7554335b763bb5deea5ccecb4d1b57a9f6fa18e47fc7b119db587e58811e666e84a806495b45c36164bd5b135280243ed0a01466056e93082876ba33ee8cf2b0b3907f236f38175101000000d7e39544aea098d19ee63d03cbf92380dbe904538135f09e408bbe17a54a364b04ee64b0ad54e6d4e38114ced38c328aff2e224239ba29eb0796e8c3e8344a2cd9e663bb21035ebf391872f3015c164556e4a5b966122c56edd85fc996f12fa1b92e47aa", 0x0, 0x0, 0xfffffffffffffe8f)
recvmmsg(r0, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/82, 0x52}], 0x1, &(0x7f0000000140)=""/3, 0x3}, 0x1c}, 0x10, 0x40, &(0x7f0000000200)={0x5, 0x4aa6}) (async)
recvmmsg(r0, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/82, 0x52}], 0x1, &(0x7f0000000140)=""/3, 0x3}, 0x1c}, 0x10, 0x40, &(0x7f0000000200)={0x5, 0x4aa6})

168.126519ms ago: executing program 1 (id=1338):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)
r1 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r1, 0xf3)
setuid(0xffffffffffffffff)
unveil(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='W\x00')
ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xbffd, 0x72, 0x1}, {0x6, 0x0, 0x0, 0xa3}, {0xadef, 0x0, 0x0, 0x6}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)

160.69459ms ago: executing program 5 (id=1339):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c})
getpeername$unix(r0, &(0x7f0000000380)=@file={0x0, ""/510}, &(0x7f0000000000)=0x200)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00')

159.325921ms ago: executing program 0 (id=1340):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f0000000080)='./file0\x00', 0x2, 0x1c0)
socket(0x11, 0x3, 0x0) (async)
r0 = socket(0x11, 0x3, 0x0)
r1 = geteuid()
setuid(r1)
r2 = msgget$private(0x0, 0x144)
msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x2, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x1ff, 0x14, 0x0, 0x0, 0xffffffffffff75ba, 0xfffffffffffffff9, 0x9, 0x5}) (async)
msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x2, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x1ff, 0x14, 0x0, 0x0, 0xffffffffffff75ba, 0xfffffffffffffff9, 0x9, 0x5})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, r1, 0x0, 0xc0, 0x4}, 0xf0ffffffffbfffff, 0x6}) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, r1, 0x0, 0xc0, 0x4}, 0xf0ffffffffbfffff, 0x6})
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000100)=0xffffffff, 0x4)
r3 = socket(0x2, 0x2, 0x0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0)
ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f00000002c0)={0xeca0000, 0x300000000000}) (async)
ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f00000002c0)={0xeca0000, 0x300000000000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="d9050095ed89a20cb18200004100000000cc0008bbe00000962d27d573c6825781017c23adfb976aa1dab33b35e3460167c7b2b0f770508ee247b8f0847bc76da55593b0d358c0c5b352a42f6ce42ba1078d28874d36872cd88106339fd33f0cf941984ef31a4f"]) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="d9050095ed89a20cb18200004100000000cc0008bbe00000962d27d573c6825781017c23adfb976aa1dab33b35e3460167c7b2b0f770508ee247b8f0847bc76da55593b0d358c0c5b352a42f6ce42ba1078d28874d36872cd88106339fd33f0cf941984ef31a4f"])
sendmmsg(r5, &(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x4) (async)
sendmmsg(r5, &(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x102)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x4) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x4)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = kqueue()
r9 = dup(r8)
r10 = kqueue()
kevent(r10, &(0x7f0000001140)=[{{r9}, 0xfffffffffffffffa, 0xc7, 0x0, 0x7ffffbff, 0x800000000000008}], 0x30, 0x0, 0x57d, 0x0)
close(r6) (async)
close(r6)
kevent(r10, 0x0, 0x0, &(0x7f0000000500), 0x2, 0x0)
writev(r7, &(0x7f0000000200)=[{0x0}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0))

157.873136ms ago: executing program 6 (id=1341):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000005c0)="0587c918e688de80f1ab029df4e4a273f44d366d742460f3b61fe9897d8756596b4a1aa7a7ec7835419b7efe0b687b047aa02a4876e8003da73ba5d89a43125ff2bd0f74ce4db35f864c16fc761ad77767af9cf3a64b9259336062d56d90d23e266fd2f51e8ff135789e917b71d8617dedd27823e1cba8927ef89d49e49bb1eaca7c6f5aa2a8b84e412f1046d6c466f8c156d2134fe09e81fd157dafb5dfd90b40da8d98f738001f68ec71b48922d7bc3f4a68a53e993468bee522e6a6db181aec75ff849fc584bb9c2f411b840e950338b84ac56fc464a9fcb37b422ac399034017854240fec7998376071729c0fa8336be99a55e213a3474e50f462b579030c2e456a9ee1aebee30834528619afc9f60a52ae18cf7968c07e1ce5b9bf52c8dacd0ef243a05c75432febc9a7f798e13cd1d6ca31455e2eb4f26ed77e354b1adfa24a9c9a499f0da0f25c1acace89060bf5e5cb337dba07076db6c354fa2e74ed08d83f52a9feaf1c964ee165c31b45b559c72d272493300d6be87eb61bea82a37e51f5c9fad85ab901edbf9647b871cc71e8d8b2103a9a49a65661211170e99208c851898c4b995d44299cafd3567dcf1767ca5f3c60257fdb1507153182bcc5dbb3d293af105d98c92379f314ae54c472377b9b1ed5f4b084b2e3dc05ce46ce26560a790a1cc1b1f362bfd18447df8ac5965199b447c9806315bd441225dc8425c75144c59b292f2df652bee764d64764c74d251a15cab1d416e82c62ffb198ded4e04e3e7b4f93569316e84207d89b29f9b475ee2ece16979abb861915d2a6c7f46dd57a24150330ce9c152cf1593b9774eef9ca8a4dba876f133a8a7d396e88876433c165c911c7878611af216db9b06fbf7198b93a111b3ed6c9db28a1fa670431abeea7f749b54bc9253dcc323cb622d95449fea2ce735f6753d77db7ad9d7925bd9d46230f0b162dc2de98e7648bc802c632a1eedf53718075acf748e4bc36c9a35e5fc7bf58e2dc14ab595199fd5df1ff4e38383d229dc1b3ae334b0c9b67e1962693ba07b199105012754a5c3b479b0872f23ca309de5e0ddf14fbdd339f25d529c63e48477e6e5f718de9d12aa02b3ae80c1717815c50c0706903ad975d11498d55df9db5f5df2905b3233d2d7b3bdc84891b0acb0ab5b311e23bda137e2db45257c6f587090d4795b1494e90624a5ff92d6b53543531418e200d8770f213d0a8797d45eed9f53cea447333b1369033bd2a26373ead41356467fc3ac8b2a35fde0dfc5a0cd4d6de52bc5573d13135870a1d6cf9b88cc9fe7048abd48752cd22f357af952a8e2a25eced89ad8358ac9377944d80b5de7b27f14375f04cbb1aacb4e1ce751e44d74380e2bca2abe96dfe468e5d2397d798e80f2dfcdfebe317ecc798e14a2ad234197c2fffcce57429f1c0c0ed606e22ca31c10c0743149cc117441c4f80cca67e21644cd40344fdee52455f46196d5e839fd23e43b5950d33da4b35a4e04afb4f657ec53d85e502f8201f82165440a9c1d4e75c81499327f435f9564b1e7d8aec39faf16d01607517d20c2be82a1b344d1f6d62357f15e1a70ffb125c9949b6e418b66477624ece172df6633b416cc706582c9bed42189174deaefcbd8cca4585934d3d0326247d28918e9c2483f4b86aefe435632d684f06bfab1f10adb84491f6efc9743359664c87bd310227044dc8a4a3164c0234f79c6e0930b605183be02a496f0d365ffc3ca355fef2d9a3f51ea26c22dd23a6dd954c964dc8027f50fcd6b4416ab2f2b54761eb7a6764a982360b8723cd8d361b21b737f3cff8868bf598cab870930b175303c922fba2f24d1c1b28bd31904a1ea14cb20d0e9f0c39732ef933c8311386fc82028372c77e0cbefda8c9d1d8edc6a91ec3d999c7fd60f9e44a21a8bc912e30672825f954ecdb88bb4ef6ce9090964a41a83a643fa87993bead5743502f312c8f1c0239ddf5aa876481ca020ecf5007a483c600e1473be01c1b5fd91abd446e0967ca0788978ff8a7758917169452317ae94591ab9d01fff0913d84038fb29effdd167274d2e9862026ed40e5257d46e5012a86e100f97aa2f91659fd38d52b49983f67e4b2597154824599d5e9035c1ab152590fbe8ac3616ec1a6ae54dc54af6a0337809f394f7d1f5025e205bfe83ab99b1f91f2c3b812e900d150e5e2be995b858475c701a3e6dc40a8bd5e15c407e5879819e7c990ad0de56fdd89a80cf7cb0f209666a521825ce603a4242b73c42af3cd9da9b2162b1d9886b74d07b869dfa14a07fab7a2baf05174cd496235748367a6c5fb5b0cfd0822fa139e8ef88f90ee43d18e2c1965ece11ce85d530b77c4c0e274c9351ff629bf4ff711b7802736aa2a518b1910c7689ca96c42b17a576fa2d8850373c9f398d28a879bac243d96d17fbcefda216d62d6bc99e536c28a1229bfcc3bc7024c849e5f9fb34c9b3d583c7bf3a80751a74ed668628ebda3ca4645bc323a37ecce91856bce530194dab6d5e64db8296ab7a6d1ef1eed5b8c0fbe7aa0ffc521203f3683838f585247957bbbb213dfbb685b39251306487250b7da119a9cb1a72bed55e97708b99ac91a06e8614c0ef67bfcdfeb0906bb1ef4a33593119fe7637bd5c3c7a8f6696b8d6f3e9258672fdfbdad5eeb25ccd26ecef06d9f99c083e0407d6360e48fe4ac65fea77f1aa913177625ba39b344223fdbaa9c9f7d401b015b0299b522206f59e50dfb478860817822b8b00b883dbdbad643f0d06217c274fd5af911593a8a7328a28d5907b5509c2f08ea67632b1dd5eddc780b0118267398cec4b626dbcb11b5ee9c4c07a566c32b840696ad1effbaf12f03592db32f98136d0727f125a6fcc71b844dde43c232ef5247a8abf010848c8e204871734fb82a0bf52ad57ec18c5b692630ff83e95b41472c8778b8fcaf3748b0029cb31d5a6e617183125bdb63cbe8e741f64ce6330bae32efbf500c05a57a7c5fe82fc6c267eace76896de31fce5ea67d13a0d936d08b35e9b9aeb641a636fa4e244b3ad7f2a6be203c1bbf81081a85e21560c237c71cbe1c1e42a5b8b45b864f98f272a3b4741b1a173cec2f3796b9bd35e3e54c83b7f8ad59465be31e0ff1c8d52212a7a3404146c2d5457624a5f54ad85ccf653fedbc7deea29ccfe7ac1a342f03105d99273be48af1ba06658ebacbec9f443fe985afe19e843ed6898aaf8eb0c0ea86b95533468dbed67fd227c92dbaa8cc306f8c09a09433d7215426ce6cc2d1c78c268834d22037ac44c2235f9ff5515d61259cd2a1b4cab594166d92e5fd3b5aeba7d5e58c172bf597ec9f853bf644ca6f01ad37d9e5a1098f3e023ea3843084d2f19d339eae0251a0e05c4052ad9049318a1ebcad9576c97f2f8cd9576ce8d1f976171eb9691200fdd721f2ac62040693332bcbc136848e0048e22c107ec717fe251d062514c7dd6ed2bb33e78b97f8eea0845f2420d25bd0d27d29db5d2d576122578f91a3b2b1d9425c925a300501d044f22b77039544047682458f0b5c4d0fe2935e90fdd34f02be9f2b24ed321a96834360ef28ad3185a0f22e381bf790af42833ad2020dee13e484c227ef32491d3f7960cb744b69acc3d2f83b457d2dc99b689d62db1ea6ffd3e18fc622237de68510ff980d4e1d9a114a2e60a82bc4e63fea43097d8fdc6b72b2b99a8b63fe866fae6c82ab16e6f6b6eff8a2ef25eceddc08d538ff9cadc09ac2500ce7466364253935df8ece96ee3f00a4b1c5fd58734d7f39922c670314e855bdc8eb56442340a2ae977265b1484697249f6f7f6e64f4a4aeee1d01e859e93024225d64fa139c580cb57520dd82d94f1b2c17426a60d96f0ae88213e21a3f88ea4d7c266437ec5831394059f458104caac6a57adcf47703225782b3265c2efc645affdd84042c90bf6ce3938bf35e44deb4275fe5cf1a9e5d782c04dc792c6abf542c014424673b2094186de10c13e64da75a01e9fc5d80b02390c9c19e52b91dc09804d25db747d67c1577ee9e9bee15aec94271071dc0f57a99b7447318cc061afffc6bae7bdfcbe19dac6655f612316a6b75eab7eba2f4fa417186b91e801da35bbb664c69d5b9696cd6bdf1f7592f12eeaec299fc5a1b66073b0369018ea09a03136e7e001010fe5cd1fb29827b3bbb044641ebf9362eb5b377fdadd7cbc32ad429de60123c8e849f2681265c17d3a862e237eba0dfe6bac7d6c1bddf1991b8cc5083e47f961c906f5b83119708e057265e2fea5f0b11aa5b4157db7a12f90ccaac0e102042d458dc10c37f3e5b0ce32207cbb92122c5c434b0f25ebe923c5a5c104e865369c28e4a87e5bee656360c817362667be6ccc456da373368b6408dac5bd22efe78f7c3b8e4ce48109848292cd514c4f105e8c45f547a9d2dc71302e0e3d9044a7ea02e27db4cf56546f41212809bae21b6b1ddff8bc05adab84a20acb4832a214c7e7935ab2e4a9c16cb53108974f1b50748948803c681d3772f41365c9557aafbf218a414d514a33fef58c5d8099e5853299e8e294d6ddc3c05c71ef2cca18a55b8c9dc9a6eb48dd07ea240c107aa78e7658e213cf72be8ac24caeec6466d24d6af75795eb4f0ce83db57b614c3c163b928390772606b6754d1cbad7a71708cfd9284001c89ae62aea2588c290102c4cf30f16ac46aacaf528d6a481c1b68013de84af50233cb9dc9ce43acc68117e55e5254923ca21537c093b232f5bb4ebebd201d2e4b325780037ce5f88950593220d08a86ef30fd3484f33806b0e94155b072cc57db5", 0xd41}], 0x1)
sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xbffd, 0x72, 0x1}, {0x6, 0x0, 0x0, 0xa3}, {0x2, 0x0, 0x0, 0x6}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)

57.214172ms ago: executing program 1 (id=1342):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1)
write(r0, &(0x7f00000003c0)="0d2020c9c5e943ca8bf2eeebece66b7e4229ba53cde5e4090900db00d2bf000000a11f077f9575159a6b5aba577d4b8fceb300000000000000005d15131df1c130874dcfe18da489c40c42ef9aea5c536e9b67d07600a9930a", 0x59)
execve(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0)

55.709313ms ago: executing program 6 (id=1343):
socketpair(0x1e, 0x4, 0x2, 0x0) (async)
r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x1}, 0xc) (async)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000080)=0x74, 0x4) (async)
recvfrom$unix(r1, &(0x7f0000000180)=""/29, 0x1d, 0x0, 0x0, 0x0)
getsockname$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

55.490867ms ago: executing program 1 (id=1344):
sysctl$hw(&(0x7f00000000c0)={0x6, 0x2}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000000)=0x100)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x86}]})
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000500)={0x2, &(0x7f0000000000)=[{0x64, 0x80, 0x34, 0x1}, {0x84, 0x0, 0x0, 0x3}]})
sysctl$hw(0x0, 0x0, &(0x7f0000000240)="50041b000f3e8095043fa8ca3a51b89fff784718985d012c000001003d0817c53fcb7c7d40b5bf66108039750000007ab791f608f7", &(0x7f0000000000)=0x35, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}})
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0)

54.452955ms ago: executing program 5 (id=1345):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x91, 0x7f, 0x40000007}, {0x2c, 0xf, 0x6, 0x6}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="441e1030456a733b2ea67c83eeb7f252265ec347cd3852914a90ff2ec4f59aba", 0x20}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f0000000240)="50041b000f3e8095043fa8ca3a51b89fff784718985d012c000001003d0817c53fcb7c7d40b5bf66108039750000007ab791f608f7", &(0x7f0000000000)=0x35, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x7, 0x94, 0x7f, 0x5}, {0x74, 0xf, 0x6, 0x3}, {0x6, 0x9, 0x1, 0x1}]}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000540)={'tap', 0x0}) (async)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

51.266367ms ago: executing program 2 (id=1346):
r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = getpgid(0xffffffffffffffff)
fcntl$setown(r0, 0x6, r1)
r2 = dup2(r0, r0)
close(r2)
sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x1}, 0x4, &(0x7f0000000080)="6e9a4ced63dc45d3c79ac4afa59596150f43aae4ad65cb8f55a78e931b128e90cbbfebf6da818b988d245a07f0685e2c7d70a052a34f867991ea274badbffbe8280c401175001bcfc24b296f71092876f988764b4404cc3a0109e90fb542acd2cc5f02aea731b2896a248d7db0f6702798412915b5067b9064c177cb3ccd1d5e785c77162b1cd06d5daaab0da4b48aafafbf5b7cbb0f33c86f7b2766d6a606a543d5ab087003c1f1e879de68e4b115ab2efe85c19049a1479e56da96ac11394f8cd1f85902ce2a15b4fcc876da70f2af46b9adc2e827a70a249c819bbe497dd9c7e1fab01fe5be9dd8601efbf13bedbe8d7b33fb7a95c8790259741f81d7", &(0x7f0000000180)=0xfe, &(0x7f00000001c0)="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", 0xfa)
ioctl$WSMOUSEIO_GTYPE(r2, 0x40045720, &(0x7f00000002c0))
r3 = accept$inet(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc)
pwritev(r3, &(0x7f0000000580)=[{&(0x7f0000000380)="92ecade5dc4863dfb61ca7d868a1671c9be05279c4b44e9e67dd78c7b7ed43d16182c971ebd7555c0458", 0x2a}, {&(0x7f00000003c0)="34a2949d372b319744cdde71b89fd70ac1209fdc303e3da6af25ac6c79d8caebe340e7523b2eb9f191a7550c81843d47fc8d8aa987813fef02476136f9e1dc0ab1679f63bdb99444313dd8012084cdec2384d43d1a4023f01bc22a33c135d1dd2ee965cb982b8217d4346c94dee019c6", 0x70}, {&(0x7f0000000440)="2adccc0993c94872a76fe1429d1c4be2fc5586f36fc13dbed01fffe3619821e5310ad7b0bcfb6109864a77a06d8fe01caf97395184a5cc4ed21ebe2b982c50b295c67712461011afcf35c7cde1a3bdfe4f0286d8e27a316be65e2bca3b229cd1e2f9286df949fc1cc3f807114e7f78ecdf8fb424c04d3a132570ca6ac0904972403761ed370d32286649d728e69cabe0aac1a1c46326c514e9808b9a8605fd1c96f6ac4bb36f701c766b1b1a1ab9328945077b271745e23b51b8bac8e57384aee76d3e229e1bed8f4799848749dc79b8d9fa606363b2d24a153217fd4074f66edf43f36bfffb4eb239924fdaf3fc7b14b28f5b765d9e1a", 0xf7}, {&(0x7f0000000540)}], 0x4, 0x4948e95d)
r4 = accept$inet(r3, 0x0, &(0x7f00000005c0))
recvfrom$inet(r4, &(0x7f0000000600)=""/176, 0xb0, 0x40, &(0x7f00000006c0)={0x2, 0x1}, 0xc)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
pipe2(&(0x7f0000000700)={<r5=>0xffffffffffffffff}, 0x10000)
poll(&(0x7f0000000740)=[{r5, 0x20}, {r3, 0x10a}], 0x2, 0x7d77)
ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000780)=0x81)
r6 = msgget$private(0x0, 0x28)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000007c0)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, 0xc)
r10 = getgid()
r11 = geteuid()
getgroups(0x1, &(0x7f0000000800)=[<r12=>0x0])
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000840)={{0x8, r8, r10, r11, r12, 0x0, 0x400}, 0x3, 0x3, r1, r1, 0x7, 0x1, 0xfffffffffffff801, 0x4})
r13 = dup(r0)
getgroups(0x5, &(0x7f00000008c0)=[r9, r12, r9, <r14=>r12, r10])
r15 = getegid()
getgroups(0x4, &(0x7f0000000900)=[r14, r9, r15, r9])
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000940)={0x0, <r16=>0x0}, &(0x7f0000000980)=0xc)
seteuid(r16)
fcntl$setown(r13, 0x6, r7)
socket$unix(0x1, 0x5, 0x0)
openat$wskbd(0xffffffffffffff9c, &(0x7f00000009c0), 0x400, 0x0)

3.721542ms ago: executing program 1 (id=1347):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) (async)
r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000140)=""/209, 0xd1}], 0x2, 0x0}, 0x40) (async)
sendmmsg(r1, &(0x7f0000001440)={0x0}, 0x10, 0x0) (async)
ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80047476, &(0x7f00000001c0)={0x3})

1.888663ms ago: executing program 5 (id=1348):
r0 = msgget$private(0x0, 0x4)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/79}, 0x57, 0x1, 0x1000)
r1 = msgget(0x1, 0x410)
msgrcv(r1, &(0x7f0000000080), 0x8, 0x2, 0x800)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='+(&{^\'][\x00', &(0x7f0000000140)='<%#)\xba&\x00'], &(0x7f0000000240)=[&(0x7f00000001c0)='!^\x00', &(0x7f0000000200)='-{/\x00'])
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1)
pipe2(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
ioctl$WSDISPLAYIO_ADDSCREEN(r3, 0x80245753, &(0x7f00000002c0)={0x1, './file0\x00', './file0\x00'})
getsockname$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000000340)=0x8)
msgget$private(0x0, 0x3cdf5fd647b49084)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x28550, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f00000003c0)={0x1, 0x7, './file0\x00', 0x5, 0x2, 0xf6eb, 0x1})
pwrite(r2, &(0x7f0000000400)="8135e09c282f3f95c1c9ff88a1f2b4fba9b938ed4f3c172e75a98d1b04c45794d43641a24269245438e05bdcd537358833c4f992817f8f6cd0beca29086331c50854ec9dc58a59604dadcf1339c9b950bb50f88107268ed5496d379a21bb45daaa3c3ef8651c14d0523353aa11376e9fb92d4794ef5ce8361a37bb84a26be9", 0x7f, 0x3)
r4 = msgget$private(0x0, 0x0)
msgsnd(r4, &(0x7f0000000480)={0x3, "4bcffdc2f727089c7bed26b500ccd8595ebadcbe5b0a52e6fbc56d9bdc2b348bfc10dadbd2c4fe8fa18377c9d47b43e71a011bd050ff698d5f12ecec7f34ba3326045414317b3cdc62c210c133e89e492d4bb71b9d9772ab3100188d70142137976d76100523ce6a59728a9ce1e49b518f3a412ec62804d320e2170ece949269ef4cfb09e893aa6382a500e6b2fed335ce28db6ff31aa5c5096161193c0044a22eccc038543a887e183211704d27f9b5e289b6c0faa2d4c5ebabeadd00ae4326a11304ac8f1e4fc9517b3393b7202e8c2a7756"}, 0xdb, 0x800)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0)
ioctl$WSKBDIO_SETKEYREPEAT(r5, 0x800c5707, &(0x7f00000005c0)={0x4, 0x8})
ioctl$WSDISPLAYIO_GETSCREEN(r2, 0xc0245755, &(0x7f0000000600)={0x4f63, './file0\x00', './file0\x00'})
utimes(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x7ff, 0xf5}, {0x3ff, 0x80000000}})
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
ioctl$BIOCLOCK(r3, 0x20004276)
r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
dup2(r6, r5)
fcntl$getflags(r2, 0x0)
ioctl$WSKBDIO_GETDEFAULTBELL(r2, 0x40105706, &(0x7f0000000700))
openat$vmm(0xffffffffffffff9c, &(0x7f0000000740), 0x8, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0)
sysctl$vm_swapencrypt(&(0x7f00000007c0)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000800)="bc7773129351f778ab1e890f8d286ead8be5a8b0e4bc7a0c2ec68af2d15c7248f66526458bca2a056da6ee3045e45b2c88ff0a71cd01e1c0ca350510f5f354a3edf8549ce18be8b7ea6a5e58f89d456de1", &(0x7f0000000880)=0x51, &(0x7f00000008c0)="82bb63dd0435301103c5fa346b80075c46baa020e37d6e6f98f6d5aeded069e52d5030c7d4614b383d9abdcec2b539c3dd593111c9b1ae47230a08f96f26e36f01232727e86cd66e655dfb38b50becc4fd4b2a8fbd50c3ed0b481f279e3d44411ef2cd84efec03bd5c0dc8eac7b765e6f8e1f75aa8ac75b2b39d8a45fad22a31831b75f5e58dcea6e9084eee5308d7bc0d50fd679bab8681f9c9fc51ca2cb188a92cbd3c1b4fa370c75b880ec7e6757fb936d8ae5e3f6e06d9252c1a91f2b6faad531348fb1df39cec3a5a990a1963e40bc1cf206041c7cf331f820a2a4d", 0xde)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000a00))

1.666885ms ago: executing program 1 (id=1349):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r0 = socket(0x11, 0x3, 0x0)
shutdown(r0, 0x0)
r1 = socket$inet(0x2, 0x4002, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000000c0)="89144c0129ea94f77ea66ed006e3bc58e261c99a", 0x14)
setsockopt$inet_opts(r1, 0x0, 0x1, 0x0, 0x0)
sysctl$kern(&(0x7f0000000100)={0x1, 0x41}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000080)="cbc2cf57afd763da4b621b232b27f5a6cad175374c5cf90eb275f933dd781d2e4c5960902320c4b6189420172f6aa0c1878b9cb4f15e4655d7b1584d69b744ba7ab2dbc717f0de70fa80df847fd7e4ea381c071dc775041b2997bae2a04bdd07f6172403c531a98266894a16012298a6de1661b0b08051", &(0x7f0000000100)=0x77, &(0x7f0000000140)="95", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00')
sendto$unix(r0, &(0x7f0000000100)="b1000501000000ae05000701070000000000000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce94e2f0ad3ebbc23de4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11ffffffffffffffffffffffffff800000ed007f62b60be8b90000000000000000", 0xb1, 0x8, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x15)
socket(0x5, 0x3, 0x5)

0s ago: executing program 5 (id=1350):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x3, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="2ea67c83ee080052265ec347cd3852914a90ff2ec86300d690a7524d30f0ca0bc2ab793d453863d3", 0x28}], 0x1)
openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3})
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000200)="5814ddfbcd87e6c390f0f1b71b127a6a64b34d9a4ef4fa07305c232e67a5e4b8778c20df033aa315355c9a9130aca59b702a1391ad6f15ca49b569e4a6e69f321b3325e591d508535546492d2175a579c3b16234246a5d460ecf2843578810abde9fa340586c", 0x66}], 0x1)
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x0, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe)

kernel console output (not intermixed with test programs):


OpenBSD/amd64 (ci-openbsd-multicore-9.us-central1-b.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts.
login: 
OpenBSD/amd64 (ci-openbsd-multicore-9.us-central1-b.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
wskbd0: can't attach mux (error=5)
pckbd_enable: command error
0#+"$%.!",%: #/--!.$ %22/2
73+"$0: #!.'4 !44!#( -58 (%22/2=5)
uvn_flush: obj=0xfffffd8065a3c790, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
denied attempt to set clock back 1763210289 seconds
malloc(): allocation too large, type = 29, size = 16796513700
malloc(): allocation too large, type = 29, size = 16796513700
pppx: unable to set addresses for pppx1, error=17
šj	



	

	
	

;@
OpenBSD/amd64 (c) (tty00)

login: vm_create: uvm_map failed: 12
denied attempt to set clock back 4263431313 seconds
malloc(): allocation too large, type = 29, size = 16796513700
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 144
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
  33167  62247      0           0          0    1  syz-executor
* 14304  28272      0           0          0    0  syz-executor
db_enter() at db_enter+0x25
panic(ffffffff833a3608) at panic+0x1e5
__assert(ffffffff833de253,ffffffff833d13b3,90,ffffffff83378d36) at __assert+0x29
uvm_pagealloc_pg(fffffd8008b73048,fffffd806c93c558,1fb2000,0) at uvm_pagealloc_pg+0x54b
uvm_pagealloc(fffffd806c93c558,1fb2000,0,3) at uvm_pagealloc+0x252
pmap_get_ptp(fffffd806c93c500,7eca4ef5000) at pmap_get_ptp+0x1d0
pmap_enter(fffffd806c93c500,7eca4ef5000,6cdf8000,4,20) at pmap_enter+0x386
uvm_fault_lower_lookup(ffff80003c4251b0,ffff80003c4251e8,ffff80003c425130) at uvm_fault_lower_lookup+0x3d6
uvm_fault_lower(ffff80003c4251b0,ffff80003c4251e8,ffff80003c425130) at uvm_fault_lower+0x89
uvm_fault(fffffd8074750b98,7eca4ef6000,0,4) at uvm_fault+0x274
upageflttrap(ffff80003c425350,7eca4ef62cb) at upageflttrap+0xa9
usertrap(ffff80003c425350) at usertrap+0x42f
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x72169aa8ba80, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 144
ddb{0}> trace
db_enter() at db_enter+0x25
panic(ffffffff833a3608) at panic+0x1e5
__assert(ffffffff833de253,ffffffff833d13b3,90,ffffffff83378d36) at __assert+0x29
uvm_pagealloc_pg(fffffd8008b73048,fffffd806c93c558,1fb2000,0) at uvm_pagealloc_pg+0x54b
uvm_pagealloc(fffffd806c93c558,1fb2000,0,3) at uvm_pagealloc+0x252
pmap_get_ptp(fffffd806c93c500,7eca4ef5000) at pmap_get_ptp+0x1d0
pmap_enter(fffffd806c93c500,7eca4ef5000,6cdf8000,4,20) at pmap_enter+0x386
uvm_fault_lower_lookup(ffff80003c4251b0,ffff80003c4251e8,ffff80003c425130) at uvm_fault_lower_lookup+0x3d6
uvm_fault_lower(ffff80003c4251b0,ffff80003c4251e8,ffff80003c425130) at uvm_fault_lower+0x89
uvm_fault(fffffd8074750b98,7eca4ef6000,0,4) at uvm_fault+0x274
upageflttrap(ffff80003c425350,7eca4ef62cb) at upageflttrap+0xa9
usertrap(ffff80003c425350) at usertrap+0x42f
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x72169aa8ba80, count: -13
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c424c30
rbx               0xffffffff83870e07    cpu_info_full_primary+0x2e07
rdx                                0
rcx               0xffff80003c40cd18
rax               0xffffffff8386fff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10                0xc5d8532224571b2
r11               0x95cb47423ff02fc5
r12               0xffffffff83870c08    cpu_info_full_primary+0x2c08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81f52ef5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c424c20
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=14304 pid=28272 tcnt=3 stat=onproc
    flags process=0 proc=0
    runpri=32, usrpri=82, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000fffeed10,0xffff80003c40d788
    process=0xffff80003c42a6a0 user=0xffff80003c420000, vmspace=0xfffffd8074750b98
    estcpu=32, cpticks=7, pctcpu=0.6, user=5, sys=2, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 76168   38011  24083      0  3        0x80  nanoslp       syz-executor
 76168  228906  24083      0  3   0x4000080  fsleep        syz-executor
 76168  372531  24083      0  3   0x4000080  fsleep        syz-executor
 76168  263494  24083      0  3   0x4000080  fsleep        syz-executor
 62247   33167  60065      0  7           0                syz-executor
 62247  271070  60065      0  3   0x4000080  pipewr        syz-executor
 36159  328678  10959      0  3        0x80  nanoslp       syz-executor
 36159  123360  10959      0  3   0x4000080  kqpoll        syz-executor
 36159  363923  10959      0  3   0x4000080  fsleep        syz-executor
 44252  189552  25235      0  3        0x80  nanoslp       syz-executor
 44252  510491  25235      0  3   0x4000080  fsleep        syz-executor
 44252  492675  25235      0  3   0x4000080  sbwait        syz-executor
 81640  254227  21557      0  3        0x80  nanoslp       syz-executor
 81640  152697  21557      0  3   0x4000080  kqread        syz-executor
 81640  131860  21557      0  3   0x4000080  fsleep        syz-executor
 81640   90726  21557      0  3   0x4000080  fsleep        syz-executor
   552  280661  24378      0  3        0x80  nanoslp       syz-executor
   552  478214  24378      0  3   0x4000080  pipewr        syz-executor
   552  323976  24378      0  3   0x4000080  fsleep        syz-executor
   552  261388  24378      0  3   0x4000080  fsleep        syz-executor
 91180  394730      0      0  3     0x14200  acct          acct
*28272   14304  63354      0  7           0                syz-executor
 28272  253905  63354      0  3   0x4000080  ttyin         syz-executor
 28272  205385  63354      0  3   0x4000080  fsleep        syz-executor
 15102  139677  26574      0  2       0xc80                syz-executor
 15102  302457  26574      0  3   0x4000080  kqread        syz-executor
 15102   17204  26574      0  3   0x4000080  kqread        syz-executor
 15102  133109  26574      0  3   0x4000080  fsleep        syz-executor
 60065  108032  21231      0  3        0x82  nanoslp       syz-executor
 24378  309215  21231      0  3        0x82  nanoslp       syz-executor
 63354  175597  21231      0  3        0x82  nanoslp       syz-executor
 24083  366376  21231      0  3        0x82  nanoslp       syz-executor
 56954  155374      1      0  3    0x100083  ttyin         getty
 25235  235546  21231      0  3        0x82  nanoslp       syz-executor
 26574  196694  21231      0  3        0x82  nanoslp       syz-executor
 10959  404876  21231      0  3        0x82  nanoslp       syz-executor
 21557  426076  21231      0  3        0x82  nanoslp       syz-executor
 21231  454133  36299      0  3        0x82  kqread        syz-executor
 36299  158615   8648      0  3    0x10008a  sigsusp       ksh
  8648  230698  88424      0  3        0x98  kqread        sshd-session
 88424  463610  45520      0  3        0x92  kqread        sshd-session
 45520  167725      1      0  3        0x88  kqread        sshd
 86895   28654  19075     74  3   0x1100092  bpf           pflogd
 19075  119018      1      0  3        0x80  sbwait        pflogd
 13789  302163  75339     73  3   0x1100090  kqread        syslogd
 75339  117202      1      0  3    0x100082  sbwait        syslogd
 30284  189547      1      0  3    0x100080  kqread        resolvd
  1021  453489  32441     77  3    0x100092  kqread        dhcpleased
 31032  270442  32441     77  3    0x100092  kqread        dhcpleased
 32441  401084      1      0  3        0x80  kqread        dhcpleased
 31954  198992      0      0  3     0x14200  bored         smr
 71241  221839      0      0  3     0x14200  pgzero        zerothread
 40972   72956      0      0  3     0x14200  aiodoned      aiodoned
 21817  258652      0      0  3     0x14200  syncer        update
 61557  283309      0      0  3     0x14200  cleaner       cleaner
   950  137023      0      0  3     0x14200  reaper        reaper
 65682  461186      0      0  3     0x14200  pgdaemon      pagedaemon
 55800   77606      0      0  3     0x14200  bored         viomb
 93872  513172      0      0  3  0x40014200  acpi0         acpi0
 24644  309676      0      0  3  0x40014200                idle1
 89009  190793      0      0  3     0x14200  bored         softnet1
 50088  420033      0      0  3     0x14200  bored         softnet0
 76791   44627      0      0  3     0x14200  smrbar        systqmp
 99790  352016      0      0  3     0x14200  bored         systq
 58419  313021      0      0  3     0x14200  tmoslp        softclockmp
 63376  406119      0      0  3  0x40014200  tmoslp        softclock
 16619  405052      0      0  3  0x40014200                idle0
     1  447733      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806c93c510)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  pmap_enter+0x24b
#3  uvm_fault_lower_lookup+0x3d6
#4  uvm_fault_lower+0x89
#5  uvm_fault+0x274
#6  upageflttrap+0xa9
#7  usertrap+0x42f
#8  recall_trap+0x8
Process 28272 (syz-executor) thread 0xffff80003c40cd18 (14304)
exclusive rwlock uobjlk r = 0 (0xfffffd806db0cf00)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  uvm_fault_lower_lookup+0x53
#3  uvm_fault_lower+0x89
#4  uvm_fault+0x274
#5  upageflttrap+0xa9
#6  usertrap+0x42f
#7  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffd8074750c98)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x42f
#7  recall_trap+0x8
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806c93c510)
#0  witness_lock+0x5f1
#1  mtx_enter+0x4b4
#2  pmap_enter+0x24b
#3  uvm_fault_lower_lookup+0x3d6
#4  uvm_fault_lower+0x89
#5  uvm_fault+0x274
#6  upageflttrap+0xa9
#7  usertrap+0x42f
#8  recall_trap+0x8
Process 76791 (systqmp) thread 0xffff8000ffffe530 (44627)
shared rwlock systqmp r = 0 (0xffffffff837a7848)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10265  11258K   12098K 166960K     13554        0
            pcb    18     16K      18K 166960K       406        0
         rtable   246     12K      12K 166960K       662        0
             pf    39     18K      24K 166960K       193        0
         ifaddr    43      8K       8K 166960K       136        0
        ifgroup    63      2K       2K 166960K       234        0
         sysctl     4      1K       9K 166960K        21        0
       counters    72     37K      37K 166960K       312        0
       ioctlops     0      0K       4K 166960K      1896        0
            iov     0      0K      24K 166960K        76        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1426     90K      90K 166960K      2724        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K         9        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       1K 166960K        51        0
        dirhash    12      2K       2K 166960K        45        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     240K 166960K      1566        0
          sigio     0      0K       0K 166960K        38        0
           proc    73    115K     180K 166960K       794        0
        subproc    72      4K       4K 166960K       109        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       191        0
       in_multi    88      6K       7K 166960K       186        0
    ether_multi     1      0K       0K 166960K        12        0
            mrt     0      0K       0K 166960K        11        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   229   1023K    1023K 166960K       229        0
           exec     0      0K       1K 166960K       639        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   271    161K     174K 166960K     15727        0
       UVM aobj    39      6K       8K 166960K        42        0
     pinsyscall    43     86K     102K 166960K      2797        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K        73        0
            NDP    14      0K       2K 166960K        93        0
           temp    77   8672K    8922K 166960K     76291        0
         kqueue    14     20K      32K 166960K       304        0
      SYN cache     2      8K      16K 166960K         3        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      201    0      195     3     0     3     3     0     8    2
rtentry    176      203    0      108     6     1     5     6     0     8    0
unpcb      144      962    0      938     8     6     2     6     0     8    1
syncache   336        8    0        8     2     1     1     1     0     8    1
tcpqe       32        4    0        4     2     1     1     1     0     8    1
tcpcb      736      750    0      742    10     3     7     7     0     8    6
arp        136       35    0       18     1     0     1     1     0     8    0
inpcb      328     1755    0     1740    10     3     7     7     0     8    5
nd6        152       41    0       18     1     0     1     1     0     8    0
pkpcb       40       11    0       11     2     1     1     1     0     8    1
kcovpl      48       12    0        4     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     0     1     1     0     8    1
ppxss      1192      97    0       97     1     0     1     1     0     8    1
pppxif     1504      12    0       12     2     1     1     1     0     8    1
pffrag     232       11    0        1     1     0     1     1     0   482    0
pffrnode    88        9    0        1     1     0     1     1     0     8    0
pffrent     40       17    0        7     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       4    0        0     1     0     1     1     0     8    0
pfstitem    24       94    0       27     1     0     1     1     0     8    0
pfstkey    128       94    0       27     3     0     3     3     0     8    0
pfstate    448       93    0       27     8     0     8     8     0     8    0
pfrule     1344      22    0       17     2     1     1     2     0     8    0
rttmr      136        2    0        2     2     2     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      806    0      413    31     6    25    31     0     8    0
art_table   40      809    0      413     5     0     5     5     0     8    0
art_node    32      202    0      118     1     0     1     1     0     8    0
sysvmsgpl   40       16    0        9     1     0     1     1     0     8    0
semupl     112        4    0        4     3     2     1     1     0     8    1
semapl     112       48    0       38     1     0     1     1     0     8    0
shmpl      112       35    0        1     1     0     1     1     0     8    0
dirhash    1024      40    0       23     3     0     3     3     0     8    0
dino2pl    256     4450    0     2933    96     0    96    96     0     8    0
ffsino     296     4450    0     2933   118     0   118   118     0     8    0
nchpl      144     6529    0     4813    64     0    64    64     0     8    0
rtmask      32       12    0       12     3     2     1     1     0     8    1
vnodes     216     5185    0        0   289     0   289   289     0     8    0
namei      1024   22247    0    22247     2     0     2     2     0     8    2
percpumem   16      171    0      120     1     0     1     1     0     8    0
vcpupl     3968       3    0        1     1     0     1     1     0     8    0
vmpool     840        4    0        2     1     0     1     1     0     8    0
kstatmem   264      144    0      110     4     1     3     3     0     8    0
scsiplug    72       12    0       12     2     1     1     1     0     8    1
scxspl     216    49276    0    49276    12     9     3     8     1     8    3
plimitpl   152      543    0      526     1     0     1     1     0     8    0
sigapl     424     1857    0     1808     7     1     6     7     0     8    0
knotepl    120      553    0        0    17     0    17    17     0     8    0
kqueuepl   224      895    0      878     6     1     5     5     0     8    3
pipepl     344      344    0      313     4     1     3     4     0     8    0
fdescpl    528     1835    0     1803     3     0     3     3     0     8    0
filepl     160    12488    0    12240    23     7    16    18     0     8    5
lockfpl    104      601    0      596     2     1     1     2     0     8    0
lockfspl    48      262    0      258     1     0     1     1     0     8    0
sessionpl  144       31    0       22     1     0     1     1     0     8    0
pgrppl      48       71    0       54     1     0     1     1     0     8    0
ucredpl    104     2107    0     2094     1     0     1     1     0     8    0
zombiepl   144     1808    0     1808     1     0     1     1     0     8    1
processpl  1232    1857    0     1808     5     1     4     5     0     8    0
procpl     664     4267    0     4199     6     0     6     6     0     8    0
sosppl     176        5    0        5     2     1     1     1     0     8    1
sockpl     752     2991    0     2946    19     8    11    17     0     8    6
mcl64k     65536      8    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     111    0        0    14     0    14    14     0     8    0
mcl2k      2048      92    0        0    10     0    10    10     0     8    0
mtagpl      96       76    0        0     2     0     2     2     0     8    0
mbufpl     256     1167    0        0    73     0    73    73     0     8    0
bufpl      280    21403    0    15266   439     0   439   439     0     8    0
anonpl      32    11012    0        0    89     0    89    89     0   246    0
amapchunkpl 152   53653    0    53075    33     2    31    31     0   158    8
amappl16   200     7616    0     7575    41    22    19    22     0     8    8
amappl15   192       10    0       10     1     1     0     1     0     8    0
amappl14   184       11    0       11     1     1     0     1     0     8    0
amappl13   176      469    0      468     1     0     1     1     0     8    0
amappl12   168     2250    0     2207     3     0     3     3     0     8    0
amappl11   160       19    0       18     2     1     1     1     0     8    0
amappl10   152       64    0       50     1     0     1     1     0     8    0
amappl9    144      255    0      254     2     1     1     1     0     8    0
amappl8    136       26    0       24     1     0     1     1     0     8    0
amappl7    128       97    0       95     1     0     1     1     0     8    0
amappl6    120      333    0      319     1     0     1     1     0     8    0
amappl5    112       78    0       68     1     0     1     1     0     8    0
amappl4    104      457    0      428     1     0     1     1     0     8    0
amappl3     96     9476    0     9364     3     0     3     3     0     8    0
amappl2     88     1958    0     1878     2     0     2     2     0     8    0
amappl1     80    16363    0    15766    14     0    14    14     0     8    0
amappl      88    14684    0    14490     5     0     5     5     0    92    0
uvmvnodes   80      157    0        0     4     0     4     4     0     8    0
dma65536   65536      3    0        3     2     1     1     1     0     8    1
dma32768   32768      1    0        1     1     0     1     1     0     8    1
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma1024    1024       2    0        1     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      257    0      257     3     2     1     1     0     8    1
dma64       64        7    0        7     2     1     1     1     0     8    1
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       41    0        3     1     0     1     1     0     8    0
uaddrrnd    24     1836    0     1804     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1836    0     1804     1     0     1     1     0     8    0
vmmpekpl   168    15616    0    15560     3     0     3     3     0     8    0
vmmpepl    168   122843    0   120811   107     5   102   103     0   357    5
vmsppl     488     1835    0     1804     6     1     5     5     0     8    0
rwobjpl     80    35176    0    34000    31     1    30    30     0     8    0
pdppl      4096    3687    0     3614   107    34    73    85     0     8    0
pvpl        32    19556    0        0   159     1   158   158     0   265    0
pmappl     256     1839    0     1806     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      373    0       48    10     0    10    10     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25
panic(ffffffff833a3608) at panic+0x1e5
__assert(ffffffff833de253,ffffffff833d13b3,90,ffffffff83378d36) at __assert+0x29
uvm_pagealloc_pg(fffffd8008b73048,fffffd806c93c558,1fb2000,0) at uvm_pagealloc_pg+0x54b
uvm_pagealloc(fffffd806c93c558,1fb2000,0,3) at uvm_pagealloc+0x252
pmap_get_ptp(fffffd806c93c500,7eca4ef5000) at pmap_get_ptp+0x1d0
pmap_enter(fffffd806c93c500,7eca4ef5000,6cdf8000,4,20) at pmap_enter+0x386
uvm_fault_lower_lookup(ffff80003c4251b0,ffff80003c4251e8,ffff80003c425130) at uvm_fault_lower_lookup+0x3d6
uvm_fault_lower(ffff80003c4251b0,ffff80003c4251e8,ffff80003c425130) at uvm_fault_lower+0x89
uvm_fault(fffffd8074750b98,7eca4ef6000,0,4) at uvm_fault+0x274
upageflttrap(ffff80003c425350,7eca4ef62cb) at upageflttrap+0xa9
usertrap(ffff80003c425350) at usertrap+0x42f
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x72169aa8ba80, count: -13
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7a886d3a2290, count: 12
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7a886d3a2290, count: -3