last executing test programs:

3.596440043s ago: executing program 5 (id=209):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0)
ftruncate(r0, 0x79c8)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001100)="7cd75e", 0x3}], 0x1)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
close(r0)

3.59580232s ago: executing program 5 (id=210):
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="fffffffffeffaaaaaaaaaabb86dd6000000000102c00000000000000000000000000000000002800000000000800001a003ffe00000504000007feff000081009078ecff000a"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/201, 0xca}], 0x1, 0x0, 0x41}, 0x1000)
r2 = socket$inet(0x2, 0x2, 0x0)
syz_extract_tcp_res(&(0x7f0000000080), 0x634dc3a3, 0x3)
r3 = socket$inet(0x2, 0x8003, 0x0)
setsockopt(r3, 0x0, 0x7, &(0x7f0000000340)="15337ac0", 0x4)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @icmp=@echo}}}})
syz_emit_ethernet(0x7e, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES32=r3, @ANYRES8=r3, @ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB="4a198a9928b57b43273f4c449eb4690d72bce92a470635a3ce6dd6ca310a011fe98b6dd81e68cd9bdb6a3e2f81fd8c9cc0354ae229ef277ec07f0dcd3b12d38c526b8ded3ca47af1d56175dacb5a002c58dac147fa3e2737c48abca0c495ccc55c50d9a7813534b0047ee48941a5dfdae3dd3ee0e9669a9d1a18aa61bbe8665a658f85bf349b907cec0b5c17c95a7510edcc8fb9bc93b7a6255b94baf5ada5f65694ba9c31623bce950d390740767f4fd9df95e57136c209003c500cbaf0325ae3c6e3a39a036318de987224b453c0373ff3a30302459bcf0be9"])
recvmmsg(r3, &(0x7f0000000040)={0x0}, 0x10, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0)
sendmmsg(r1, &(0x7f00000000c0)={0x0}, 0x10, 0xe)
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="fffffffffeffaaaaaaaaaabb86dd6000000000102c00000000000000000000000000000000002800000000000800001a003ffe00000504000007feff000081009078ecff000a"]) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/201, 0xca}], 0x1, 0x0, 0x41}, 0x1000) (async)
socket$inet(0x2, 0x2, 0x0) (async)
syz_extract_tcp_res(&(0x7f0000000080), 0x634dc3a3, 0x3) (async)
socket$inet(0x2, 0x8003, 0x0) (async)
setsockopt(r3, 0x0, 0x7, &(0x7f0000000340)="15337ac0", 0x4) (async)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @icmp=@echo}}}}) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES32=r3, @ANYRES8=r3, @ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB="4a198a9928b57b43273f4c449eb4690d72bce92a470635a3ce6dd6ca310a011fe98b6dd81e68cd9bdb6a3e2f81fd8c9cc0354ae229ef277ec07f0dcd3b12d38c526b8ded3ca47af1d56175dacb5a002c58dac147fa3e2737c48abca0c495ccc55c50d9a7813534b0047ee48941a5dfdae3dd3ee0e9669a9d1a18aa61bbe8665a658f85bf349b907cec0b5c17c95a7510edcc8fb9bc93b7a6255b94baf5ada5f65694ba9c31623bce950d390740767f4fd9df95e57136c209003c500cbaf0325ae3c6e3a39a036318de987224b453c0373ff3a30302459bcf0be9"]) (async)
recvmmsg(r3, &(0x7f0000000040)={0x0}, 0x10, 0x0, 0x0) (async)
setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0) (async)
sendmmsg(r1, &(0x7f00000000c0)={0x0}, 0x10, 0xe) (async)

2.533181017s ago: executing program 5 (id=211):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x4}, {0x5, 0x0, 0x8, 0x5}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x8, 0x0, 0x2e)

2.532749618s ago: executing program 5 (id=212):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000040)) (async)
ioctl$WSKBDIO_GETMODE(0xffffffffffffff9c, 0x40045714, &(0x7f00000000c0)) (async)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f0000000140)=0x8) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
setreuid(0xee00, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000fd00083a00fe0900050000000000000000000000aafe8000000000000000000000000000bb81009078c2a9edd8"]) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
chown(&(0x7f0000000200)='./file0\x00', 0x0, r3) (async)
r4 = getuid()
setreuid(0x0, r4) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd)

2.431923281s ago: executing program 5 (id=219):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="4000fec26bbf5a44b19aa2e5f42db5d3a380b7a244bbef574d8e8d4ff8028205d9c0c74a5695df3fe8bee7ef1b01365f2763c4bbf03773dd7615ddabd2a53a135b95bc6dbf778d02b06561bb6804c217823d46ed4b4076192f3c865ef1a7b30000", 0x61}], 0x1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0x125b, 0x8e62, 0xffffffc0, "ffff0900870000000000000000000b00"})
close(r0)
sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000040)="b914f05a97cfe2811b523fac037f2653fca73bb9381276b8fca6d019213242a8df1debd8fdbdaf5772babc482c371a2f079f32887e59c1599a34c0d4aba0b52782492a", 0x0, 0x0, 0x0)
syz_emit_ethernet(0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="8f787321e3cfb000080000000008004f00008400820000030190787f000001000000004404000044400893ffffffff0000040000000080e000000226000002ac1400aa00000003ffffffff00000008ac1400aa0000ee40000000070000003aac1400bb00000003820ea63cd607782659e2506c2ee5440c09907f00000100008001"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0x2c)
poll(&(0x7f0000000240)=[{r1, 0x68}], 0x1, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0)
pwritev(r3, &(0x7f0000003600)=[{0x0}], 0x1, 0xb0c6)
r4 = socket(0x18, 0x3, 0x0)
close(r4)
r5 = socket(0x800000018, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/183, 0x82}], 0x1)
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000140)=0x7, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8}, 0xfffffffffffffffb, 0x149e, 0x0, 0x0, 0x7, 0x8000000000000001, 0x6, 0x2})
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
dup2(r4, r4)

2.397533387s ago: executing program 5 (id=225):
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async)
ioctl$TIOCDRAIN(r0, 0x2000745e) (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000000))

1.015611908s ago: executing program 3 (id=290):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x5}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000000280)={0x1, 0xd70}) (async)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0) (async)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x2, 0x3, 0x0)
r2 = kqueue() (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setregid(0x0, r4)
r5 = fcntl$getown(r2, 0x5) (async)
r6 = getppid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x1, 0x68, r6, r6, 0xfa15, 0x4})
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x0, 0xffffffffffffffff, 0x0, 0x0, r4, 0x88, 0x7}, 0x3, 0x80, r5, r6, 0x5, 0x6}) (async)
kevent(r2, 0x0, 0xff840000, &(0x7f0000000240)=[{{}, 0xfffffffffffffffa, 0x91, 0x2, 0x2, 0x9}], 0x36, 0x0) (async)
kevent(r2, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) (async)
kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r7 = socket(0x18, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff)
close(r8) (async)
socket(0x2, 0x1, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
setrlimit(0x0, &(0x7f0000000200)={0xc, 0x100})
shutdown(r8, 0x2) (async)
shmget$private(0x0, 0x3000, 0x24, &(0x7f0000ffa000/0x3000)=nil) (async)
r9 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ff9000/0x2000)=nil)
msgget(0x3, 0x413) (async)
shmat(r9, &(0x7f0000ffa000/0x2000)=nil, 0x96dba8100d9a18bd)

1.014742208s ago: executing program 0 (id=291):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x3a, 0x0, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x37, 0xf6, 0x33, 0x1}, {0x50, 0x3, 0x8a, 0x2361}, {0x6, 0xed, 0x2, 0xfffffffe}]})
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[])
sysctl$hw(&(0x7f0000000140)={0x6, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x0)

1.013584813s ago: executing program 3 (id=292):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
r0 = socket(0x18, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x100000000000000})
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4)
dup2(r1, r0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r2 = semget(0x0, 0x1, 0x281)
semctl$GETNCNT(r2, 0x3, 0x3, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x28)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
msgsnd(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000fdeedc3d14261e8011bd0007e197c2f85726f3a50f5a60dda2f4add4500c395a2e14aafdf463fa32694ecb09c95a851ccab94ea0d6cb8b53dd703cfdeec4f0a7524c801e7b38590755c7e2ad8213c9fab25a34f7b64b278e3bd029ec3d44dde0b87fe8745e5571cac6a74cf3a35c3b9e539207d341b396738dcd7770167f7e93bbd5b67cb2e858edea74437999e9d2d00c9d158463c644a1f81bc8ff9c26bc2f63976f1a7803a2cdb2044eb0018397f1ae043139e2503edd3ccdcdfaaf10c4b733c04fda95c46895fa7454e633dd6905cb97016b92d4ad9165374d2fc42b9ca0df7276c7e1badf310e1136a8746a46175946c2d9720a364679c2889c1d30f49e8696829e8f4e84b72070de2082e48309ff72320382fa2ddc3c782427e00a26b1526bd765beeb2336761a8d0e3b73cb75afc18f08f218b27f9be52e406c3b1a6149382f99b6833bb361bf9fd766f5fa3156dfaf0edb38d3b87d2009e3c556790539196fe3ead3b2c9a0d0a743c51cbe79cabc083c3f15fbfa9eb513a0"], 0x805, 0x800)
ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000940)={'./bus\x00', 0x100, 0x8, 0x7})
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0)
ioctl$TIOCSETA(r4, 0xcd504404, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x0, "d6a249ebb178926c79486b47c1d100"})
r5 = open$dir(&(0x7f00000000c0)='.\x00', 0x28a00, 0x0)
r6 = openat(r5, &(0x7f0000000080)='.\x00', 0x0, 0x0)
mknodat(r6, &(0x7f0000000040)='./bus\x00', 0x2000, 0x3361)
wait4(0x0, 0x0, 0xc, 0x0)
r7 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r7, 0x80384601, &(0x7f0000000200)={0x0, 0x10000, 0x0})
open(&(0x7f0000000740)='./file0\x00', 0x10000, 0x100)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)

956.969259ms ago: executing program 0 (id=293):
socket$inet(0x2, 0x8003, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
pwrite(r0, &(0x7f00000000c0)="a7", 0x1, 0x40007)
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x4)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0)
truncate(&(0x7f0000000480)='./file0\x00', 0x7)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
pwrite(0xffffffffffffffff, 0x0, 0x0, 0x40000040007)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
flock(r3, 0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0)
r4 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
write(r4, &(0x7f0000000100), 0xfffffe5d)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @empty, [], {@ipv4={0x88e7, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@mask_reply}}}})

953.570857ms ago: executing program 3 (id=294):
setrlimit(0x5, &(0x7f0000000980)={0x3, 0x22800})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x61, 0x2}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="6aab0d39fa0000000000a3000000009715dab868580ffae8a3c93c7a3c453476b664559cb2bd5723945af5112ac3534a4c4f44012007c21e419d10a3453eed4bbd0d6c442fabc186daaa6a0b3a37306e8525c481", 0x54}], 0x1, 0x4)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8cf7f46ded8ccb0c0428dad06004805606ce37de53a1c521024a8f0ceda203c740de9737c7ac751f481c86f408518dae3", &(0x7f0000000080)=0x54, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
sysctl$kern(&(0x7f0000000100)={0x1, 0x3d}, 0x2, &(0x7f00000002c0)="c662df1232a404a6e1b67954dc365335837ece0ab7bef6bee1b7bc88c68ba44dee7908dbd9b3ca6c8b39b41cf9f0d2af7b4c9a72bcf5a181f530893a4f44ec4b1a3525eeffe33f0098cafdb316a5537615e025e88933e6f222adba2054d1dd9cb13f7782f3cb948274a0643d8c544647ad256a498a2ba24b84fe2fb934b143b71c811af6c95c1d1a7da3b73f3c633bd8f881bb", &(0x7f00000001c0)=0x93, &(0x7f0000000380)="b179e4c3d74ea8d23d869fa55789ddd25ba46e33b992fd51d042b85e1375e23e47a63fcd13e96ca3291e21dada21c7a85ead94c7347082eec414289e5c98c58e1e1e628bbe4700261fe947fca273c7e642e935571d4010539881b5679ae6cb54b7c071b38afc0b0590aff1f4dde5ed3a594ceb98b954736b481302b44e5882b4fbe9ca3abccae9495ab140699913d83ffacb24324cb1221d127cf0dc649ed23bf7a5944336731babf501ccecfcc816b0275b4093c4eb18f395b002723ae7ee401929ea0663d62302", 0xc8)
syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[])
setrlimit(0x5, &(0x7f0000000040)={0x40000000000007, 0x9})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfbfffffe, 0x0, "d76c1f46000000ef1f0160fbf520000002000f00"})
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
r3 = kqueue()
kevent(r3, &(0x7f0000000000)=[{{r1}, 0xfffffffffffffffe, 0x21, 0x80, 0x0, 0x6}], 0x5, 0x0, 0x2dbc, 0x0)

953.136649ms ago: executing program 6 (id=295):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f, 0x400f}]}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f, 0x400f}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='j', 0x1}], 0x1, 0x5)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71fff75c9dd60733d7af511cf28e36bc753606012980247870a093e6eb2008f0cbfa899ca42871f0e516dce4962f629596cf08d36a65cbe9971f832de7fbc58443c01483daae8fd6", &(0x7f0000000080)=0x48, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000240)={@remote, @random="92b650680483", [], {@generic={0x8180}}})
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0)

950.541249ms ago: executing program 0 (id=296):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async)
r1 = getuid()
setreuid(0x0, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
setregid(0x0, r3)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) (async)
r5 = kqueue() (async)
r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
r7 = fcntl$getown(0xffffffffffffffff, 0x5) (async)
r8 = getuid()
setreuid(0x0, r8) (async)
r9 = getgid()
sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000040)="4fdd85a76052eec07887e49b396f48a498906b09fc6d8a3227421e11dd71979d009783ae714bf29951e41235a3ba986609db5ffbcd120e7ff3f86a113079d05447d6d3aeee8ed275c7218fd208626e31f778528ea33b81af74ed9fd4a993a32a4a9fe35b8d3bef9a7308d2a6a87963", 0x6f}, {&(0x7f0000000140)="df7b68b4541563b279b02a82146f995e005d886e72795cf55eeac80587a7f0b12087411fca57c7e1a16d2afa0b978de788df694d7073054122b785fc059eaa01305ca12c6c8cbc47", 0x48}, {&(0x7f00000001c0)="0460ff865d115704b91eea61632b491ea0e091180b13313714bbc5d060a08e7c4dd759917a29dae64a5ca4f5baa26e55d3a4cf1c92ecaf07228556615c27fbda6fe171832e362f45f4344f048d155bee4436d5f589bb003ad29722296198e459e9237e4299cbe961a78a097b5b658d2283d95e301179fa23a5be", 0x7a}, {&(0x7f00000000c0)="ee5af7bfd1b7420626368465e085dd84c8094a6c782945fe42c74b2c0f9f69d52cd21be751e9b8886284695169", 0x2d}, {&(0x7f0000000240)="a22454c545408fbed2f4330869cf02d07d606b387e9432c4643971d972dfb9a8775661739be5f1cf03a28c43fdde9d17569ba1f3c7a1b87ab0", 0x39}], 0x5, &(0x7f0000000340)=[@cred={0x20, 0xffff, 0x0, 0x0, r1, r3}, @rights={0x18, 0xffff, 0x1, [r5, r6]}, @cred={0x20, 0xffff, 0x0, r7, r8, r9}], 0x58, 0x40c}, 0x6)
rename(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='./file0/file0\x00') (async)
semget(0x1, 0x0, 0x250)

881.869872ms ago: executing program 6 (id=297):
r0 = socket(0x18, 0x3, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x10000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0xfffffffffffffff7})
r1 = socket(0x18, 0x3, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x8)
accept$unix(r4, 0x0, &(0x7f0000000180))
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1, 0x0}, 0x1042)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r2, &(0x7f0000000740)="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", 0x171, 0x400, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff})
ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f0000000000))
ioctl$VMM_IOC_INFO(r5, 0xc0185603, &(0x7f00000001c0)={0xc3, 0x0, &(0x7f0000000240)=""/195})

881.275704ms ago: executing program 3 (id=298):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r0, &(0x7f0000002100)=[{&(0x7f0000000180)="968ce1c69d9498126527e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a", 0x2b}], 0x1)
sysctl$vfs_fuse(&(0x7f0000000180)={0xa, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x18, 0x3, 0x5)
setsockopt$sock_timeval(r1, 0xffff, 0x1005, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4810, r0, 0x7f)
writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="ce5ad3be6e2037058ca316d7b4f2825431d6cccb43adc3f7c4f704310aca2b04135b87cc02609a9d702e0d314c", 0x2d}, {0x0}, {0x0}, {0x0}], 0x4)
execve(0x0, 0x0, 0x0)
r2 = getpid()
open(&(0x7f0000001800)='./file0\x00', 0x75f493fec6515f78, 0x108)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, r2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
mmap(&(0x7f000017f000/0x1000)=nil, 0x1000, 0x1, 0x810, r3, 0x0)
r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)

668.18311ms ago: executing program 6 (id=300):
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
r0 = socket(0x2, 0x4001, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x31, 0x0, 0x0, &(0x7f0000000180)=""/225, 0xe1}, 0x800)
sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
r4 = getppid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x68, r4, r4, 0x0, 0x4, 0x6, 0xffffffffffffffff})
r5 = getppid()
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
ioctl$TIOCSETA(r6, 0xc4504444, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97cf11dfcd75a74d9b04e3ffffff00f40000f4e7"})
pipe(&(0x7f0000000400)={<r7=>0xffffffffffffffff})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8efdb4cf71c37082", &(0x7f0000000000)=0x2, 0x0, 0x37)
setpgid(0x0, 0x0)
setpgid(0x0, r5)
ioctl$WSKBDIO_GETMAP(r7, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0xd30, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async)
socket(0x2, 0x4001, 0x0) (async)
fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async)
close(r1) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x31, 0x0, 0x0, &(0x7f0000000180)=""/225, 0xe1}, 0x800) (async)
sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async)
getppid() (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x68, r4, r4, 0x0, 0x4, 0x6, 0xffffffffffffffff}) (async)
getppid() (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async)
ioctl$TIOCSETA(r6, 0xc4504444, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97cf11dfcd75a74d9b04e3ffffff00f40000f4e7"}) (async)
pipe(&(0x7f0000000400)) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8efdb4cf71c37082", &(0x7f0000000000)=0x2, 0x0, 0x37) (async)
setpgid(0x0, 0x0) (async)
setpgid(0x0, r5) (async)
ioctl$WSKBDIO_GETMAP(r7, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0xd30, 0x0) (async)

667.551081ms ago: executing program 3 (id=301):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
flock(r0, 0x9)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x20, 0x0)
fchflags(r1, 0x1)

666.17768ms ago: executing program 3 (id=302):
r0 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x8020699f, 0x0)
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(0xffffffffffffffff, 0x29, 0x6c, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r3 = syz_open_pts()
mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x65b3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
close(r3)
syz_open_pts()
r5 = socket(0x11, 0x3, 0x0)
sendto$unix(r5, &(0x7f0000000240)="b100051300000000000000400220000000000000ceb65a33f2398ba99fc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0540000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032b0c8a6443a42118000000720fd38bfbb770c1f5a872b906b63ef23a03ba0000000c0000348a1b1257aea8c500002002fbfe0c2300008abfba0900afb7515871a3f8343712051eeab7196fcb050407000000c011200000", 0xb1, 0x0, 0x0, 0x0)
socket(0x2, 0x2, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0xfff, 0x8003, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0)
close(r3)
syz_open_pts()
setsockopt(r1, 0x33, 0x4, &(0x7f0000000080)="fe15254e1fc6bdd09a0b8874a65cbe8a8b22b39297ac35f3d929463e129031e5c7b89d05d5ddbd15fd20068294ad165361ed33473fd04b7524c3cb162e", 0x3d)
socket(0x18, 0x2, 0x0)
preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1, 0x4)
socket(0x2, 0x2, 0x0)
select(0x40, &(0x7f0000000140)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000000029, 0x2b, 0x0, 0x0)
setsockopt(r2, 0x6, 0x1, &(0x7f0000000280)="e9f2d779", 0x4)
syz_open_pts()

659.048482ms ago: executing program 6 (id=305):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r0 = socket(0x18, 0x1, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x80, 0xa, 0x0, 0xfffffffd}, {0x3d, 0x1, 0x2, 0x1}, {0x7ff, 0x0, 0x2, 0x209}, {0x50, 0x1, 0xc, 0x5}, {0x6, 0xe, 0xa, 0x80000001}]})
write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2)
r2 = socket(0x18, 0x2, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0xffff, 0x5}], 0x10}, 0xe)

552.921837ms ago: executing program 6 (id=306):
r0 = socket(0x18, 0x1, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff}, 0xe0ffffffffffffff})
r1 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r2 = socket(0x11, 0x3, 0x0)
setsockopt(r2, 0x11, 0x1, &(0x7f00000000c0)="f3ffff73", 0x4)
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))
setsockopt(r0, 0x11, 0x3, &(0x7f0000000340)="12000000", 0x4)
sendto$unix(r0, &(0x7f00000000c0)="b100050160000004000000000700000008008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x802, 0x0, 0x0)
sysctl$net_inet_ah(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0)

551.873383ms ago: executing program 6 (id=307):
select(0x40, &(0x7f0000000000)={0x4, 0x4, 0xd56b, 0xa, 0x3, 0xffff, 0x3, 0x3}, &(0x7f0000000040)={0x9, 0x8, 0x1a9, 0xfffffffffffffff9, 0x8, 0xb, 0x100, 0x2}, &(0x7f0000000080)={0x54, 0xfffffffffffffffb, 0x7, 0x6, 0x3, 0x3, 0x1, 0x8}, &(0x7f00000000c0)={0x800, 0x2})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000140))
select(0x40, &(0x7f0000000180)={0xfffffffffffffff4, 0x2, 0xfffffffffffffff8, 0x636f4832, 0x5, 0xffffffffffffffff, 0x8000, 0x1}, &(0x7f00000001c0)={0x8, 0x2, 0x9, 0x7ff, 0xff, 0x100000000, 0x8, 0x950d}, &(0x7f0000000200)={0x7, 0x5, 0xf5b, 0x9, 0x5, 0x3ff, 0x3ff, 0x6}, &(0x7f0000000240)={0x6, 0x2})
r1 = socket$inet(0x2, 0x2, 0x6)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x3}, 0xc)
setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f00000002c0)=0xd46, 0x4)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x20000, 0x0)
ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f0000000340))
select(0x40, &(0x7f0000000380)={0xffff, 0x2, 0x9, 0x45, 0x5, 0x4, 0x7fffffffffffffff, 0x5}, &(0x7f00000003c0)={0x6, 0x100000000, 0x2, 0x9, 0x6, 0x100000000, 0x200, 0x9}, &(0x7f0000000400)={0xf, 0xd4, 0x0, 0x3ff, 0x1, 0x5, 0x8, 0x4}, &(0x7f0000000440)={0x40, 0x289a})
r3 = socket$inet(0x2, 0x4, 0x6)
kqueue()
select(0x40, &(0x7f0000000480)={0x9, 0x6, 0x9, 0x2, 0x461, 0xac, 0x10, 0x7}, &(0x7f00000004c0)={0x8, 0x8000000000000001, 0x3, 0x1, 0x81, 0x7fffffffffffffff, 0x9, 0xf}, &(0x7f0000000500)={0x6, 0x2, 0x3, 0x1000, 0x13, 0x800, 0x1, 0x9}, &(0x7f0000000540)={0x7fffffff, 0x6})
select(0x40, &(0x7f0000000580)={0x2, 0xffffffffffffff00, 0x2, 0x4, 0x2, 0x0, 0x0, 0x100000000}, &(0x7f00000005c0)={0x7, 0x1, 0x5, 0x10001, 0x5, 0x8, 0x5, 0x1}, &(0x7f0000000600)={0x4, 0x0, 0x10000, 0x400, 0x80, 0x5, 0x8, 0x8000000000000000}, &(0x7f0000000640)={0xfff})
getsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000680), &(0x7f00000006c0)=0x10)
setsockopt$sock_timeval(0xffffffffffffff9c, 0xffff, 0x1006, &(0x7f0000000700)={0x2, 0xfcf}, 0x10)
ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000740)={0x5, 0x9})
chmod(&(0x7f0000000780)='./file0\x00', 0x10)
dup2(r2, r2)
getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000007c0), &(0x7f0000000800)=0x10)
setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000840)={0x3, 0x8}, 0x10)
r4 = socket(0x18, 0x1, 0x9)
sendto$unix(r4, &(0x7f0000000880)="44e75634b054dc959cc232275559c32426b91697fd26059d9503ad785edeb2309cd8641134e3e8ea793691b577e7eb0f40a8a2b8273457e8dfb6228b02b3c34cfe419a81652bf97da4a28c6038fb677b524414c1008f00c67187e2d403ecbca3ecd8a18b1666c26d56ef05007fb9bf1d8974d4adcc08a7c77acfacb572f375e5ad3b3be13ec8899fcf5b21ed02", 0x8d, 0x46f9b54693b8bdc5, 0x0, 0x0)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000940)={0x0, <r5=>0x0}, 0xc)
setuid(r5)
socket$inet(0x2, 0x1, 0xde)
shmget$private(0x0, 0x2000, 0x44c, &(0x7f0000ffb000/0x2000)=nil)
ioctl$VNDIOCGET(0xffffffffffffff9c, 0xc4104603, &(0x7f0000000980)={'./file0\x00', 0x2, 0x5, 0x7})
getsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10)
minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

456.60979ms ago: executing program 1 (id=311):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x5, 0x0, 0xdf, 0x38}, {0x40, 0x0, 0x4, 0x20002008}, {0xfffe, 0xfe, 0x4, 0x100}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040)=[{0x26, 0x1000}], 0x1})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f00000002c0)={&(0x7f0000000200)='./file0\x00', 0x5, &(0x7f0000000280)='./file0\x00', 0x8})
r3 = socket$inet(0x2, 0x3, 0x2)
getsockopt(r3, 0x10001, 0x2, 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f, 0x400f}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="6aab", 0x2}], 0x1, 0x5)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71fff75c9dd60733d7af511cf28e36bc753606012980247870a093e6eb2008f0cbfa899c", &(0x7f0000000080)=0x24, 0x0, 0x0)
r4 = socket(0x18, 0x3, 0x0)
setreuid(0x0, 0xee01)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x134, 0x0)
madvise(&(0x7f00003e0000/0x1000)=nil, 0x1000, 0x0)
mmap(&(0x7f00003e1000/0x1000)=nil, 0x1000, 0x1, 0x10, r5, 0x1000)
ioctl$FIONREAD(r4, 0x8028698c, &(0x7f0000000100))
utimensat(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x2)
r6 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r6, 0x0, 0x20, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x1}, 0x8)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabb92b9506804838180"])

454.649143ms ago: executing program 1 (id=313):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0)
writev(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="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", 0xf12}], 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
getrlimit(0x7, &(0x7f0000000040))
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2)

418.00313ms ago: executing program 1 (id=315):
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)

417.343975ms ago: executing program 1 (id=317):
r0 = getgid()
r1 = socket(0x2, 0x3, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
r3 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0)
r4 = syz_open_pts()
fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x1000300000000})
setsockopt(r1, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4)
write(r1, &(0x7f0000000100)="f92a9bd300000000000027a03440ee884d9e7a3e", 0x14)
sendto$inet(r1, &(0x7f0000000000)="d1218558ce431f81", 0x8, 0x2, &(0x7f0000000040)={0x2, 0x2}, 0xc)
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, <r5=>0x0}, 0xc)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)={{0x4008928, 0x0, r0, r5, r0, 0x0, 0x2}, 0x80000005a7, 0x4, 0x8})

360.888455ms ago: executing program 1 (id=320):
setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="5ab777", 0x3)
r0 = socket(0x18, 0x3, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x1000, 0x0, 0x0)
munmap(&(0x7f00003c2000/0x3000)=nil, 0x3000)
syz_emit_ethernet(0x138, &(0x7f0000000900)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="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"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x4001, 0x0)
r2 = dup(r1)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
close(r3)
r4 = socket(0x2, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x4, 0x8000001}, {0x81, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0xffff}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000440)="71f91e3471ac0058bc5491503ffb75d18fd3e31652b61ee373b8cf9e67d2ab814ba412c3012b5a395a08776448", &(0x7f0000000080)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[])
r6 = socket(0x2, 0x1, 0x0)
setsockopt(r6, 0x6, 0x4, &(0x7f0000000140)="aef43c05", 0x4)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r6, &(0x7f0000000000), 0x10)
r7 = socket(0x2, 0x4001, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd60cbe52000303afcfe806aa4b415293500000000000000000000000000aa"])
r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff)
close(r8)

323.722803ms ago: executing program 2 (id=323):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0xff}, {0x16, 0x2, 0x7f, 0x400b}, {0xb0, 0x4, 0x4, 0xfffffffc}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="5307fd85ed28a890fab136de9c9fec99daf569607c47596a4146e053", 0x1c}], 0x1, 0x9) (async)
r1 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa81003305000000b90d9e8d1c6ba611cfad9cb2"])
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x7fff, 0x1)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
nanosleep(&(0x7f0000000280)={0x1ff, 0x1}, 0xfffffffffffffffe) (async)
execve(0x0, 0x0, 0x0) (async, rerun: 32)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async, rerun: 32)
r3 = shmget$private(0x0, 0x1000, 0x382, &(0x7f0000ffc000/0x1000)=nil)
r4 = shmat(r3, &(0x7f00002a6000/0x1000)=nil, 0x3000)
shmdt(r4) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="02170300000e00001a020000de6649ed0ca799191f6c410c634692fcdcad46e4ca2688bb19a0c056f315ec2226f44bb1a9ac80cde93e6136149b217ba8eb9e92a4ebcb7e13fd31b4bad19b89", &(0x7f0000000080)=0x4c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@random="00001a000006", @random="a82d7abc487e", [], {@ipv6={0x86dd, {0x0, 0x6, "0afb00", 0x8, 0x3a, 0x0, @rand_addr="20f4372e0865915f577ee80000008000", @mcast2, {[], @icmpv6=@ndisc_rs}}}}}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async)
mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) (async)
seteuid(0xffffffffffffffff)
faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$VNDIOCSET(r5, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
write(r0, &(0x7f0000000000)="d871819e2673b7e5c70000000000", 0xe) (async, rerun: 64)
sysctl$net_mpls(&(0x7f0000003b40)={0x4, 0x21, 0x6}, 0x3, &(0x7f0000003b80)="75d1f2ba", &(0x7f0000003c80)=0x4, 0x0, 0x0) (rerun: 64)
r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000440)="3e76f3c1aeb37cb9dfbd178b0b824097b0ddae43736e0fdd1401000000000000001130", 0x23}], 0x1)

322.859374ms ago: executing program 1 (id=324):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r0 = open(&(0x7f0000000400)='./file0\x00', 0x800, 0x1d0)
ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfff, [{&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x10001}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x6}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xbfe}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x9d9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xb}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x1985}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x27}, {&(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x2}, {&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fed000/0x4000)=nil, 0x3}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0xba8}, {&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x100000001}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xf7ed}, {&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x974c}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x8000)=nil, 0x8}], './file0\x00', 0x8})
clock_settime(0x100000000000000, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r2, &(0x7f00000002c0)=""/31, 0x1f)
recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000300)=0xa0000000)
mmap(&(0x7f000017f000/0x1000)=nil, 0x1000, 0x1, 0x810, r4, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x0)
getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, <r6=>0x0}, 0xc)
fchown(r1, r6, 0x0)
write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
write(r3, &(0x7f0000000300), 0x0)
execve(0x0, 0x0, 0x0)

266.658641ms ago: executing program 2 (id=327):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0xf, 0x1, 0x8000001}, {0x2, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0xffff}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000440)="71f91e3471ac0058bc5491503ffb75d18fd3e31652b61ee373b8cf9e67d2ab814ba412c3012b5a395a08776448ad1113447214a0de37aacf26947692598100fe50934cd3b2c816a198bc908829a27363dca56086e569e9f736513b89519427ca607e35e29e80e6c4c468d97ec1a1ffaaf3a4ae79", &(0x7f0000000080)=0x74, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[])
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
unveil(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="71fff7ffff87e537dc3d33d7af511cf28e36bc753606002980247821e93bf6a24f562404be9931d0eef39a243da0f9b7", &(0x7f0000000080)=0x30, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r2, &(0x7f0000000000)="d871819e2673b7e5c70000000000", 0xe)
setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1)
setsockopt(r0, 0x0, 0x9, 0x0, 0x0)

255.539131ms ago: executing program 4 (id=330):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0}, 0x1042)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async)
sendto$unix(r0, &(0x7f00000002c0)="b100050400000400000000002101000000000000cea18500fef96ec0050000007ae30200004e3039d2d236acf20b7804be38164991f7aacf5f882b295dbdaa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfb695564b6700000008000361b1257aea8c500002002fbfe0c2300008abfba65c08f4d08e371a3f8343732051eeab71d89e000040502000000140000003e4b45a827dde6d6be812292692c592a628f52d469f566fb252e6378", 0xc2, 0x400, 0x0, 0x0) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000180)=[{0x4c, 0x6, 0x3, 0x4}, {0x64, 0x3, 0x0, 0x9}, {0x6, 0x0, 0x0, 0xaf}]}) (async, rerun: 64)
write(r2, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (rerun: 64)

255.245331ms ago: executing program 2 (id=331):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0xb436, 0x100000000, 0x1, 0x2000000000000000, 0x1818, 0x8, 0x9}, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

136.551853ms ago: executing program 7 (id=334):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000040)) (async)
sysctl$net_inet6_icmp6(&(0x7f0000000400)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000440), 0x0, 0x0, 0x0)
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 64)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x1d, 0x1, 0x1, 0xfffff4b4}, {0x64, 0xff, 0x3, 0x5}, {0x82, 0xb, 0xb2, 0x200f}, {0x6, 0x40, 0x7, 0x800}]}) (async, rerun: 64)
write(r0, &(0x7f00000002c0)="d81ad3ede1f3bd8558d5c7364888", 0xe)

97.582357ms ago: executing program 4 (id=335):
mkdir(&(0x7f0000000640)='./file0\x00', 0x0) (async)
r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x10002, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaa5ef372696a486dd606aa63f00000600fe80000000bbb6b770d37b605720d8b24f", @ANYRES16=r0, @ANYBLOB="a0b9dff55d8ed8dc30984e65c8d162ba36d2f53b10d85cdf3fc2709ae7ef0b70b3d006a9ce4c9d57d25a06aec725eec325efd804f06b4057678fc43a7555930eef49f849c028155823603b7b1891cf04545063a4b03f251f780d277e0d5a7e0cc13aa96ead1c137ef4a443b58fcd2d295286cf6ea6ce"])
setreuid(0xee00, 0x0) (async)
r1 = getuid()
chown(&(0x7f0000000180)='./file0\x00', r1, 0x0)
r2 = getuid()
setreuid(0x0, r2) (async)
mkdir(&(0x7f0000000040)='./file2\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0)
open$dir(&(0x7f00000001c0)='./file2/file0\x00', 0xae828e137847f62, 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async)
chdir(&(0x7f0000000140)='./file0\x00')
symlink(&(0x7f0000000200)='./file2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
open(&(0x7f0000000180)='./file0\x00', 0x6d84b028b6b26ff2, 0x0) (async)
rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') (async)
sysctl$net_inet_esp(&(0x7f00000005c0)={0x4, 0x2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x1b)

96.497722ms ago: executing program 7 (id=336):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
r1 = socket(0x18, 0x1, 0x0)
getsockopt$sock_int(r1, 0xffff, 0x1004, 0x0, 0x0)
r2 = socket(0x18, 0x3, 0x0)
close(r2)
r3 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8}, 0xfffffffffffffffb, 0x149e, 0x0, 0x0, 0x7, 0x8000000000000001, 0x6, 0x2})
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
dup2(r2, r0) (async)
r4 = dup2(r2, r0)
sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

95.226829ms ago: executing program 4 (id=337):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x0)
socket$unix(0x1, 0x0, 0x0) (async)
r0 = socket$unix(0x1, 0x0, 0x0)
close(r0)
unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='W\x00')
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000028000006000d00907800000000000006004e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="40f0052000d70c08"])
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000)='c\x00') (async)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000)='c\x00')
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async)
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000140)={{0x18, 0x1, 0xfffffff0, 0x8}, {0x18, 0x0, 0x2, 0x14000000}, 0x101, [0x8, 0x5, 0x0, 0x8, 0x400, 0x9, 0x5, 0x3]}, 0x3c)
sendmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket(0x2, 0x2, 0x0)
r3 = socket(0x2, 0x5, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r3, 0xc0206923, &(0x7f00000001c0))
socket$inet6(0x18, 0x4000, 0x6) (async)
socket$inet6(0x18, 0x4000, 0x6)
syz_open_pts()
ioctl$FIONREAD(r2, 0xc0206922, &(0x7f00000001c0))
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async)
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)

94.957135ms ago: executing program 7 (id=338):
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
r1 = socket$inet(0x2, 0x2, 0x0)
chflagsat(0xffffffffffffffff, 0x0, 0x0, 0x2)
setsockopt$inet_opts(r1, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4)
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000040)=0xfffffffc)
r2 = semget$private(0x0, 0x2, 0x6a8)
semctl$GETALL(r2, 0x0, 0x6, &(0x7f0000000000)=""/13)
poll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x7)

94.675684ms ago: executing program 4 (id=339):
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000000c0)="9b180bc3", &(0x7f0000000080)=0x4, 0x0, 0xfffffd40)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000000c0)="9b180bc3", &(0x7f0000000080)=0x4, 0x0, 0xfffffd40) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)

93.656207ms ago: executing program 7 (id=340):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="dbf08251", 0x4)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="dbf08251", 0x4) (async)

92.389598ms ago: executing program 2 (id=341):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = socket(0x800000018, 0x1, 0x0)
getsockopt(r0, 0x29, 0x37, 0x0, 0x0) (async)
open(0x0, 0x0, 0x0) (async)
write(r0, &(0x7f0000000000)="f38b6bb0e3e38cc9856334fb182f645480160e00df0b00b2f4610d5bb06e579fc9b42deac7", 0x25)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

92.12764ms ago: executing program 7 (id=342):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getdents(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
getdents(r1, &(0x7f0000000080), 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0)
sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4)
syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600feffffff0200000037f87ccdc0c4a92cfe0000000001ea443d080000000001004e204e22", @ANYBLOB="c854c69c26dc4fc47f1a"])
getppid()

91.78876ms ago: executing program 0 (id=343):
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0x312, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6)
sysctl$kern(&(0x7f0000000640)={0x1, 0x2c}, 0x2, 0x0, 0x0, 0x0, 0x0)

85.732273ms ago: executing program 4 (id=344):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a)
r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000140))
read(r0, &(0x7f0000000300)=""/145, 0x91)
socket$inet(0x2, 0x1, 0x8)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r1=>0x0}, 0xc)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987aa9feb1", 0x0, 0x0, 0x0)
openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x6, 0x2e, 0x0, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000080), 0x0)
getgroups(0x2, &(0x7f0000000080)=[r1, r1])
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r4, &(0x7f0000000000)="d871819e2673b7e5c70000000000", 0xe)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r6, &(0x7f0000001480)=[{&(0x7f0000001240)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="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", 0xf12}], 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000022c0)="edd4", 0x2}], 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x400)

78.671804ms ago: executing program 7 (id=345):
r0 = geteuid()
getgroups(0x4, &(0x7f0000000080)=[<r1=>0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff])
r2 = getuid()
getgroups(0x5, &(0x7f00000000c0)=[<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff])
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={<r4=>0x0}, &(0x7f0000000140)=0xc)
r5 = getpgrp()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x80000000, r0, r1, r2, r3, 0x8, 0x2}, 0xfffffffe, 0x1, r4, r5, 0x2, 0x26492e4a, 0x5})
mknod(&(0x7f0000000500)='./file0\x00', 0x1000, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
setuid(0xee01)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r6, 0x80206918, &(0x7f00000001c0))
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56})
r7 = syz_open_pts()
setrlimit(0x8, &(0x7f0000000980)={0x9, 0x51})
r8 = syz_open_pts()
close(r8)
r9 = syz_open_pts()
ioctl$FIONBIO(r8, 0x8004667e, &(0x7f0000000280)=0xffffffff)
ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f0000000040)={0x9, 0xc0fa, 0x1, 0x6, "fa3924cefebc6bb389bf485f3ebe56053315dc20", 0x800, 0x8001})
writev(r8, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0xfff3, 0x40, 0x1, 0x7ff}, {0x8, 0x70, 0x0, 0x4}, {0x7, 0xe, 0xfb, 0x1}, {0x5, 0x1, 0x1, 0x9}, {0x9, 0x6, 0xc1, 0xb2a}]})
write(r8, &(0x7f0000000240)='c', 0x1)
close(r9)
close(r7)
r10 = syz_open_pts()
ioctl$TIOCSETA(r10, 0x802c7414, &(0x7f0000000040)={0x0, 0x9, 0x7ffc, 0x200498, "d88c28fa8797d9bdca0988d11554620900", 0x896, 0x2})
mkdir(&(0x7f0000000180)='./file0\x00', 0x2)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000380)="7e746376ecb3f4b7c3b9648dde9d8c13de18b9e215c4a9cac7034ab89ebf86868d83590bbbc0d90ba99e59ac2ac3a2812db4a42c910ec132c100ff7f737c911d105ade6f74489113b68abf53fec3be6aeb96d1dd0b41272e9a67087a7fbcf181a77e72520b7622324acd62aee319cf3e29c7534ed4beb03e67ea8902030d8222e539564932f2040000000000003e8baddb5ec102383f95df148f2944152806cfcb731235c9b66b30ab00daec0ec87a189a8d240141070000008de968692f4a942984cd03000000000000000b17e13cd9b51d0900000000000000005dee44094817f0371f5dbed0a1360ec95a7ca9c35fc7a4b4053392eb7600f107f3c4337737a7040ea2322bb3d97fb26b218f86637f46c1f649194828bf85b1b5b3504eb7595c53cace06191b6ef66778617ea9c2500ac0fb51a8acd0a28900775565e90a8948d4e135bfa9443ec80e200809736e36f1d2e6fa70a18a645e191e81307c4247050fa07b160471f7d67efa0573046f92e7fe688a048af645668782b094e610876461dc7435dfb23e4275fabb9d24e24ce323f21527f027c6e818c045ea2a9586fd7105e89570d8c33a8455b1d62781d6563c7a2ad57df0f649ce8bc440e8c26693b45319867472884620e65344b01d2eb8eee502324af03719f08a077ee9d57ceae9510c0158899b4d44322006e94fbc6319aa9ed42caf4a1ead787952832b97057a4611a83d721cc389a134bacfc1253f157052ae6b56dfe53c018d74b21085537a7c00d29411a83460a50b4cd94d26542a626f87eceac528b523c3cf047b70b6699c456b9a4d90a2f3b0968809", 0x24e}], 0x1)

48.345536ms ago: executing program 2 (id=346):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0)
pwrite(r0, &(0x7f0000001080)='q', 0xfe, 0x9)

12.125945ms ago: executing program 0 (id=347):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x1000, 0x6f, 0x1, 0xfffffffd, "1a1116f0d0a64b000000000000fffffffffff700", 0x8})
close(r0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r1, 0x8040000000000000)
r2 = socket(0x18, 0x1, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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", 0x111)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r2, 0x801169ab, &(0x7f00000001c0))
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc)
select(0x40, &(0x7f0000000100)={0x0, 0x2}, &(0x7f00000024c0)={0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0)

9.221608ms ago: executing program 4 (id=348):
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe01)
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(r0, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0)
r1 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r1, 0x0)
r2 = getegid()
r3 = getpgrp()
getgroups(0x8, &(0x7f0000000980)=[0x0, <r4=>0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff])
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000009c0)={<r5=>0x0}, 0xc)
r6 = getuid()
setreuid(0x0, r6)
r7 = getgid()
r8 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000a00)={&(0x7f00000003c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfe, &(0x7f00000008c0)=[{&(0x7f00000004c0)="3f20f2fa1c1ef1ee2b3e2e44bf3cf57bd782b6140f7476c2f8bd51b7b13634fc7bd42686a57a17af25c8429b26482e8755f2ce676358b58458bcf8d3bc724fa632a55bbbba45a5359329f688ccbc7cf89a7cda4e4eeb90873cb01ba679f1395f3100d3a2b7a542d95e878cbd04c2f90d50325db66106b74f24bb9bf23dc3500cf51d599f9a44b032ee2d898c919567e07394cd4fc332061e21425e502af86338d65850b4d65cf7b5bed0f84d95545dc0394d41d72cb0a718f6e7d761e716df81f03ec78ad51dd2732dbfab744c", 0xcd}, {&(0x7f0000000640)="ee438f998da052a2d91d2144b3f6bb7a773254cd14213c0bb649688552a9b3314a04341f0a55bb638e0564f9880849eaa7657df4c84ff60a5733fcf5e37b221562afaafdb84a9d8b056db8c0e5f22f4e7ee35aec668aa6fe7b74153b3f55eaf0baccac5a89cc6e227a1a645321bd76a3570e6d4407ee352cc5801f5703c37803ece894d28b386e1dd140648337b18f2577b33b70923dd88e5fe06c73d79ed1cfb178ac5fafc822b23bdec8cc824151357ebd78fd90775c0cd66eb267c3a747459662e1eddb7b1c008cbcf4eb986e71f8ab1e077a1e7f6769231103b24d150f9c90b654252977451d", 0xe8}, {&(0x7f0000000740)="7397ec84335ea6701836d48293c182ce58561ec89cfdd4f93be27e2080fdb3b29aac52b8a9a84c954dbeccf8a61da45e12061c85e16a422e98b5d6aeeedd68dd5d0a17ff5a8893f419fbf7dbb6bd8bdf7489e1375ae6eeb1", 0x58}, {&(0x7f00000007c0)="202495cff0250631f37635ea2eef0fdc993be57fc76e455740d9010ebae969f9ff903b4e7ccc3d3fc0c8742633382e63596599109b1459eba3e4ad0aa3a75ed9a58d08603a2c720590b823dfe2b1f07c26995bff8524bf2c2d66a82dc84be40900d14cb0981daa0b9a4da3d7ff51dac778487b7d79ee15b0c9a7284d25db5546fbb5c8ce426ed9134d7aebf11e9b3281b1af2a8245c1a815670b75856d5665ae07a3193eb87da48675409c64580ccb6b50a4a5292e5d3691f9d566bb5cd21fed23a74f5c750c1ca62abdba5673947f93b0", 0xd1}, {&(0x7f0000000100)}, {&(0x7f00000005c0)="14332b3d759b5880c5ea19e87cf4890a6a555b3abbf604f5ac8b6dbed6b572b167d838a7c96b20c9a310d19e95edc6", 0x2f}], 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="2000000000000000ffff000000000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000aadeb8001800000000000000ffff000001000000b385c6ea7253489d2b19f19900246602afee4ee530fa2c56955cd29cfac19e3d968884588db037e966d53b8f31af5e4974e213a80bb40fa8e3da95980d1be76324234c130e0178ad8b2f57e6b9707d67c4c26b51e419750aa6e6c197b95bb35c9c575913e6f0f01d1739c199655784164b7a52d490cbc6f06512e75bfc116febce9a9d91eeea7e0a5ae38620371c85a608797efbf7f71d9c3d5459211d71e6f28646065636cc8e6672553138756b2626ba262e31a1a7203fb813a61b7222323af51124812fd00947d9d5121f", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="3000000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xc8, 0x400}, 0x8)
unlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

8.976486ms ago: executing program 0 (id=349):
r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x3, 0x0, 0x4000000000000001, 0x1000381010089})
r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r2 = getuid()
setreuid(0x0, r2)
r3 = getuid()
setreuid(r2, r3)
r4 = getuid()
setuid(r4)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x4c0, 0x269000000, 0xffffffffffffffff})
r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x3, 0x2}, {0x1, 0x1}})
write(r5, &(0x7f0000000500)="7139f812c8a8f98e8e35f9183bc3a4984837871f54c483a31202a7a76b86baa1e7c19af7b1e8b03e8e1ce24d3d2f48442ece583b1de0930aeeef3f6491bca3752647ab2df4ca92b48e81df0a072f59c6a19e86855404f3a69c40a9a0143efeda4e", 0x61)

0s ago: executing program 2 (id=350):
r0 = socket(0x2, 0x3, 0x2f)
r1 = dup(r0)
setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000002c0)=@file={0x0, './bus\x00'}, 0xfe90, 0x0, 0x0, 0x0, 0x0, 0x98e1b9091fad1daa}, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
bind$inet6(r0, &(0x7f00000005c0)={0x18, 0x1, 0x6, 0xfd}, 0xc)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
r2 = semget(0x0, 0x1, 0x281)
semctl$GETNCNT(r2, 0x3, 0x3, 0x0)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
nanosleep(&(0x7f0000000180)={0x5, 0x1000}, &(0x7f0000000200))
mprotect(&(0x7f00002ec000/0x1000)=nil, 0x1000, 0x2)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
open(&(0x7f0000000740)='./file0\x00', 0x10000, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0xbd, 0x15543863, 0x800003, 0x400000, 0x0, 0x7fffffffffffffff, 0x8}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000538000/0x3000)=nil, 0x3000, 0x0)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0x16, 0xf2, 0x7f, 0x400b}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e34712611fd238d2c7d5a1b9b3f000a7475acaff487f89cd73053004b8e93ba66b3adcc5f84cf418d5eb3388847ea850497f95624e2ac030000", &(0x7f0000000080)=0x3c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x16, &(0x7f00000001c0)=ANY=[])
ftruncate(r3, 0x20008002)
open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/163, 0xa3}], 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts.
load: 1.04  cmd: getty 59036 [ttyin] 0.00u 0.00s 0% 328k
pckbd_enable: command error
vnd0: sloppy write from proc 13442 (syz-executor): blkno 0 bcount 97
witness: lock order reversal:
 1st 0xfffffd806bf772d8 vmmaplk (&map->lock)
 2nd 0xfffffd806bcb5b40 inode (&ip->i_lock)
lock order [1] vmmaplk (&map->lock) -> [2] inode (&ip->i_lock)
#0  rw_enter+0x122
#1  rrw_enter+0xbe
#2  VOP_LOCK+0xa6
#3  vn_lock+0xa4
#4  vn_rdwr+0xd1
#5  vndstrategy+0x4ff
#6  physio+0x2f6
#7  spec_write+0x120
#8  VOP_WRITE+0x102
#9  vn_write+0x1d1
#10 dofilewritev+0x23c
#11 sys_write+0xa2
#12 syscall+0xbb6
#13 Xsyscall+0x128
lock order [2] inode (&ip->i_lock) -> [1] vmmaplk (&map->lock)
#0  rw_enter_read+0xab
#1  uvmfault_lookup+0x122
#2  uvm_fault_check+0x49
#3  uvm_fault+0xf5
#4  kpageflttrap+0x2d0
#5  kerntrap+0x14a
#6  alltraps_kern_meltdown+0x7b
#7  copyout+0x57
#8  ffs_read+0x422
#9  VOP_READ+0x102
#10 vn_rdwr+0x15b
#11 vmcmd_map_readvn+0x142
#12 exec_process_vmcmds+0xfb
#13 sys_execve+0xbe4
#14 start_init+0x3c6
#15 proc_trampoline+0x10
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd806bcb5b40,9,0) at witness_checkorder+0x1047
rw_enter(fffffd806bcb5b30,1) at rw_enter+0x122
rrw_enter(fffffd806bcb5b30,1) at rrw_enter+0xbe
VOP_LOCK(fffffd8062c158b8,2001) at VOP_LOCK+0xa6
vn_lock(fffffd8062c158b8,2001) at vn_lock+0xa4
vn_rdwr(1,fffffd8062c158b8,ffff800011a26500,61,0,1,41b4ec4c8d70a476,0,ffff800000b3e000,1) at vn_rdwr+0xd1
vndstrategy(fffffd805ffe88c8) at vndstrategy+0x4ff
physio(ffffffff8210a140,2902,0,ffffffff81005cc0,ffff8000371d86a8) at physio+0x2f6
spec_write(ffff8000371d8500) at spec_write+0x120
VOP_WRITE(fffffd806e717d08,ffff8000371d86a8,1,fffffd807f7d3618) at VOP_WRITE+0x102
vn_write(fffffd8063f1e0a0,ffff8000371d86a8,0) at vn_write+0x1d1
dofilewritev(ffff8000ffff11e0,6,ffff8000371d86a8,0,ffff8000371d8760) at dofilewritev+0x23c
sys_write(ffff8000ffff11e0,ffff8000371d8810,ffff8000371d8760) at sys_write+0xa2
syscall(ffff8000371d8810) at syscall+0xbb6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x47ef377e240, count: -16
ddb{1}> show registers
rdi                                0
rsi                          0x40000    acpi_pdirpa+0x2be71
rbp               0xffff8000371d7fc0
rbx               0xfffffd80042c6c68
rdx               0xffff800001290c40
rcx               0xffff8000ffff11e0
rax                          0x3ffff    acpi_pdirpa+0x2be70
r8                0xffff8000371d7ea0
r9                0x8080808080808080
r10               0xeb968699cc9012d0
r11               0xde964181bbafe9ee
r12                                0
r13               0xfffffd8003adee00
r14                              0x3
r15                       0xffffffff
rip               0xffffffff81ac00e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff8000371d7fb0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=392724 pid=13442 tcnt=3 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff1978,0xffff8000ffff0a58
    process=0xffff8000ffff71f0 user=0xffff8000371d3000, vmspace=0xfffffd806bf771e0
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 96657  250262  72419      0  2           0                syz-executor
 96657  284048  72419      0  3   0x4000080  fsleep        syz-executor
 88651  216948  27175      0  7           0                syz-executor
 88651  384606  27175      0  3   0x4000000  biowait       syz-executor
 88651  113235  27175      0  3   0x4000080  fsleep        syz-executor
 13442  515127  54521      0  2           0                syz-executor
 13442  439084  54521      0  3   0x4000080  lockf         syz-executor
*13442  392724  54521      0  7   0x4000000                syz-executor
 78400  355388  42046      0  2           0                syz-executor
 78400   61834  42046      0  3   0x4000080  fsleep        syz-executor
 15828  279584  34459      0  3        0x80  nanoslp       syz-executor
 15828   47224  34459      0  3   0x4000080  fsleep        syz-executor
 15828  488218  34459      0  3   0x4000080  sbwait        syz-executor
 15828  133847  34459      0  3   0x4000080  fsleep        syz-executor
 86728  409667  36204      0  3        0x80  nanoslp       syz-executor
 86728  425449  36204      0  3   0x4000080  kqread        syz-executor
 86728  235060  36204      0  3   0x4000080  fsleep        syz-executor
 87981  242048  63544      0  3        0x80  nanoslp       syz-executor
 87981  444483  63544      0  3   0x4000080  kqsel         syz-executor
 87981    8525  63544      0  3   0x4000080  kqsel         syz-executor
 87981   52907  63544      0  3   0x4000080  fsleep        syz-executor
 27175  338388  43544      0  3        0x82  nanoslp       syz-executor
 79341  406011      0      0  3     0x14200  bored         sosplice
 59976   60387      0      0  3     0x14200  acct          acct
 72419  396340  43544      0  3        0x82  nanoslp       syz-executor
 36204  263201  43544      0  3        0x82  nanoslp       syz-executor
 86472  329928  43544      0  3        0x82  nanoslp       syz-executor
 42046  258064  43544      0  3        0x82  nanoslp       syz-executor
 63544  334807  43544      0  3        0x82  nanoslp       syz-executor
 34459  401755  43544      0  3        0x82  nanoslp       syz-executor
 54521  486661  43544      0  3        0x82  nanoslp       syz-executor
 43544  487150  43605      0  3        0x82  kqread        syz-executor
 43605   52429  15737      0  3    0x10008a  sigsusp       ksh
 15737  310359  20678      0  3        0x98  kqread        sshd-session
 20678  341236  38373      0  3        0x92  kqread        sshd-session
 59036   58147      1      0  3    0x100083  ttyin         getty
 38373   86141      1      0  3        0x88  kqread        sshd
 88690  305236   9184     74  3   0x1100092  bpf           pflogd
  9184  343549      1      0  3        0x80  sbwait        pflogd
 96655   49469  93943     73  3   0x1100090  kqread        syslogd
 93943  327355      1      0  3    0x100082  sbwait        syslogd
 10951  236038      1      0  3    0x100080  kqread        resolvd
 90040  260173  66943     77  3    0x100092  kqread        dhcpleased
 61608  170733  66943     77  3    0x100092  kqread        dhcpleased
 66943  295974      1      0  3        0x80  kqread        dhcpleased
  1771   30201      0      0  3     0x14200  bored         smr
 44107  154755      0      0  3     0x14200  pgzero        zerothread
 82958  297725      0      0  3     0x14200  aiodoned      aiodoned
 78439  383544      0      0  3     0x14200  syncer        update
 51442  415169      0      0  3     0x14200  cleaner       cleaner
   617  177728      0      0  3     0x14200  reaper        reaper
 59442  460954      0      0  3     0x14200  pgdaemon      pagedaemon
 92581  122051      0      0  3     0x14200  bored         viomb
 48781  520594      0      0  3  0x40014200  acpi0         acpi0
 77145  309328      0      0  3  0x40014200                idle1
 80548  249983      0      0  3     0x14200  bored         softnet3
 50627   19114      0      0  3     0x14200  bored         softnet2
 47812  506012      0      0  3     0x14200  bored         softnet1
  5169  114503      0      0  3     0x14200  bored         softnet0
 26996  334203      0      0  3     0x14200  bored         systqmp
 87115  188772      0      0  3     0x14200  bored         systq
 58225   34829      0      0  3     0x14200  tmoslp        softclockmp
 41451  426954      0      0  3  0x40014200  tmoslp        softclock
 68559  370236      0      0  3  0x40014200                idle0
     1  410610      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 88651 (syz-executor) thread 0xffff8000ffff1978 (384606)
exclusive rrwlock inode r = 0 (0xfffffd806bcb50a0)
#0  witness_lock+0x5bb
#1  rw_enter+0x41b
#2  rrw_enter+0xbe
#3  VOP_LOCK+0xa6
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x283
#7  ufs_makeinode+0xcb
#8  ufs_mknod+0x5b
#9  VOP_MKNOD+0x102
#10 domknodat+0x47e
#11 syscall+0xaf8
#12 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806bcb5d60)
#0  witness_lock+0x5bb
#1  rw_enter+0x41b
#2  rrw_enter+0xbe
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vfs_lookup+0x109
#6  namei+0x7aa
#7  domknodat+0xb4
#8  syscall+0xaf8
#9  Xsyscall+0x128
Process 13442 (syz-executor) thread 0xffff8000ffff11e0 (392724)
shared rwlock vmmaplk r = 0 (0xfffffd806bf772d8)
#0  witness_lock+0x5bb
#1  uvm_vslock_device+0x149
#2  physio+0x277
#3  spec_write+0x120
#4  VOP_WRITE+0x102
#5  vn_write+0x1d1
#6  dofilewritev+0x23c
#7  sys_write+0xa2
#8  syscall+0xbb6
#9  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835a0b68)
#0  witness_lock+0x5bb
#1  vn_write+0x4e
#2  dofilewritev+0x23c
#3  sys_write+0xa2
#4  syscall+0xbb6
#5  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10197  11188K   11645K 166960K     11699        0
            pcb    17     12K      12K 166960K        76        0
         rtable   209      6K       6K 166960K       440        0
             pf    34     17K      18K 166960K        57        0
         ifaddr    40      6K       7K 166960K        57        0
        ifgroup    55      2K       2K 166960K        73        0
       counters    64     36K      36K 166960K        74        0
       ioctlops     0      0K       4K 166960K      1570        0
            iov     0      0K      24K 166960K        17        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1428     90K      90K 166960K      1692        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      2K      10K 166960K         9        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        18        0
        dirhash    15      2K       2K 166960K        21        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    18     65K      93K 166960K       497        0
          sigio     0      0K       0K 166960K         4        0
           proc    72     91K     128K 166960K       608        0
        subproc   104      6K       6K 166960K       117        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        36        0
       in_multi    88      6K       7K 166960K       127        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       417        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   261     73K      91K 166960K      6241        0
       UVM aobj    17      6K       6K 166960K        20        0
     pinsyscall    43     86K     103K 166960K      1602        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        12        0
            NDP    12      0K       2K 166960K        37        0
           temp    50   6821K    6889K 166960K     17686        0
         kqueue    15     24K      28K 166960K        72        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       57    0       54     1     0     1     1     0     8    0
rtentry    112      141    0       45     4     0     4     4     0     8    0
unpcb      144      268    0      249     4     0     4     4     0     8    3
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      808       86    0       80     1     0     1     1     0     8    0
arp        120       22    0        4     1     0     1     1     0     8    0
inpcb      336      384    0      371     4     0     4     4     0     8    2
nd6        136       31    0        9     1     0     1     1     0     8    0
pkpcb       40        2    0        2     1     0     1     1     0     8    1
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1168       3    0        3     1     0     1     1     0     8    1
pffrag     232        3    0        1     1     0     1     1     0   482    0
pffrnode    88        3    0        1     1     0     1     1     0     8    0
pffrent     40        5    0        3     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       46    0        0     1     0     1     1     0     8    0
pfstkey    128       46    0        0     2     0     2     2     0     8    0
pfstate    376       46    0        0     5     0     5     5     0     8    0
pfrule     1344      21    0       15     2     0     2     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      576    0      169    29     0    29    29     0     8    3
art_table   32      578    0      169     4     0     4     4     0     8    0
art_node    16      138    0       50     1     0     1     1     0     8    0
sysvmsgpl   40        4    0        3     1     0     1     1     0     8    0
semapl     112       14    0        4     1     0     1     1     0     8    0
shmpl      112       17    0        3     1     0     1     1     0     8    0
dirhash    1024      23    0        4     3     0     3     3     0     8    0
dino2pl    256     2224    0      716    95     0    95    95     0     8    0
ffsino     272     2224    0      716   101     0   101   101     0     8    0
nchpl      144     2915    0     1224    63     0    63    63     0     8    0
uvmvnodes   80     2534    0        0    52     0    52    52     0     8    0
vnodes     216     2534    0        0   141     0   141   141     0     8    0
namei      1024    9101    0     9100     2     0     2     2     0     8    1
percpumem   16       51    0        5     1     0     1     1     0     8    0
kstatmem   264       34    0       10     2     0     2     2     0     8    0
scsiplug    72        2    0        2     1     0     1     1     0     8    1
scxspl     216     8989    0     8988     9     1     8     8     1     8    7
plimitpl   152      143    0      125     1     0     1     1     0     8    0
sigapl     424      797    0      745     7     0     7     7     0     8    1
futexpl     64     5182    0     5175     1     0     1     1     0     8    0
knotepl    120      313    0        0    10     0    10    10     0     8    0
kqueuepl   216      140    0      126     3     0     3     3     0     8    1
pipepl     320      149    0      122     3     0     3     3     0     8    0
fdescpl    496      777    0      745     5     0     5     5     0     8    0
filepl     152     3779    0     3519    16     0    16    16     0     8    5
lockfpl    104      174    0      169     1     0     1     1     0     8    0
lockfspl    48       49    0       45     1     0     1     1     0     8    0
sessionpl  144       25    0       16     1     0     1     1     0     8    0
pgrppl      48       41    0       24     1     0     1     1     0     8    0
ucredpl    104      360    0      346     1     0     1     1     0     8    0
zombiepl   144      746    0      745     1     0     1     1     0     8    0
processpl  1160     797    0      745     5     0     5     5     0     8    1
procpl     648     1386    0     1320     6     0     6     6     0     8    0
srpgc       96        4    0        4     1     0     1     1     0     8    1
sosppl     168        1    0        1     1     0     1     1     0     8    1
sockpl     664      718    0      683     9     0     9     9     0     8    5
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     133    0        0    17     0    17    17     0     8    0
mcl2k      2048      29    0        0     4     0     4     4     0     8    0
mtagpl      96        6    0        0     1     0     1     1     0     8    0
mbufpl     256      161    0        0    11     0    11    11     0     8    0
bufpl      280     3019    0       95   209     0   209   209     0     8    0
anonpl      24   189451    0   185427    48     2    46    46     0   185   16
amapchunkpl 152   20537    0    19953    30     0    30    30     0   158    7
amappl16   200     5151    0     5105    14     4    10    14     0     8    6
amappl15   192        9    0        9     1     1     0     1     0     8    0
amappl14   184      127    0      114     1     0     1     1     0     8    0
amappl13   176       10    0       10     1     1     0     1     0     8    0
amappl12   168     1438    0     1406     3     1     2     2     0     8    0
amappl11   160       70    0       56     1     0     1     1     0     8    0
amappl10   152       33    0       33     1     1     0     1     0     8    0
amappl9    144      181    0      181     1     1     0     1     0     8    0
amappl8    136       22    0       19     1     0     1     1     0     8    0
amappl7    128      115    0      103     1     0     1     1     0     8    0
amappl6    120      177    0      176     1     0     1     1     0     8    0
amappl5    112      145    0      133     1     0     1     1     0     8    0
amappl4    104      313    0      293     1     0     1     1     0     8    0
amappl3     96     3603    0     3491     3     0     3     3     0     8    0
amappl2     88     1060    0      976     3     0     3     3     0     8    1
amappl1     80     9119    0     8550    14     0    14    14     0     8    0
amappl      88     5839    0     5640     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       19    0        3     1     0     1     1     0     8    0
uaddrrnd    24      777    0      745     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      777    0      745     1     0     1     1     0     8    0
vmmpekpl   168     7681    0     7633     3     0     3     3     0     8    0
vmmpepl    168    56582    0    54614    93     0    93    93     0   357    6
vmsppl     448      776    0      745     6     1     5     5     0     8    1
rwobjpl     56    22371    0    18837    50     0    50    50     0     8    0
pdppl      4096    1561    0     1490   105    32    73    85     0     8    2
pvpl        32    13295    0        0   109     1   108   108     0   265    0
pmappl     248      776    0      745     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      388    0       35    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff834f2ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c
__mp_lock(ffffffff835a0960) at __mp_lock+0x1a3
intr_handler(ffff8000371b9ec0,ffff800000069c00) at intr_handler+0xe1
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__mp_lock(ffffffff835a0960) at __mp_lock+0x192
intr_handler(ffff8000371ba020,ffff800000079e00) at intr_handler+0xe1
Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f
__mp_lock(ffffffff835a0960) at __mp_lock+0x192
intr_handler(ffff8000371ba180,ffff800000079f80) at intr_handler+0xe1
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
end of kernel
end trace frame: 0x7df47ce89010, count: -13
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd806bcb5b40,9,0) at witness_checkorder+0x1047
rw_enter(fffffd806bcb5b30,1) at rw_enter+0x122
rrw_enter(fffffd806bcb5b30,1) at rrw_enter+0xbe
VOP_LOCK(fffffd8062c158b8,2001) at VOP_LOCK+0xa6
vn_lock(fffffd8062c158b8,2001) at vn_lock+0xa4
vn_rdwr(1,fffffd8062c158b8,ffff800011a26500,61,0,1,41b4ec4c8d70a476,0,ffff800000b3e000,1) at vn_rdwr+0xd1
vndstrategy(fffffd805ffe88c8) at vndstrategy+0x4ff
physio(ffffffff8210a140,2902,0,ffffffff81005cc0,ffff8000371d86a8) at physio+0x2f6
spec_write(ffff8000371d8500) at spec_write+0x120
VOP_WRITE(fffffd806e717d08,ffff8000371d86a8,1,fffffd807f7d3618) at VOP_WRITE+0x102
vn_write(fffffd8063f1e0a0,ffff8000371d86a8,0) at vn_write+0x1d1
dofilewritev(ffff8000ffff11e0,6,ffff8000371d86a8,0,ffff8000371d8760) at dofilewritev+0x23c
sys_write(ffff8000ffff11e0,ffff8000371d8810,ffff8000371d8760) at sys_write+0xa2
syscall(ffff8000371d8810) at syscall+0xbb6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x47ef377e240, count: -16