last executing test programs:

6.80625991s ago: executing program 6 (id=3802):
r0 = kqueue()
kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0)
kevent(r0, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0x40000000, 0xfd, 0x13fff}], 0xfffffffd, 0x0, 0xfffffff8, 0x0)
kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x174)
r2 = socket(0x2, 0x3, 0x0)
close(r2)
r3 = socket(0x18, 0x2, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2})
r4 = socket(0x18, 0x3, 0x0)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
write(r2, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c)
getdents(r1, &(0x7f0000000040)=""/151, 0x97)

6.707497202s ago: executing program 6 (id=3807):
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xf)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3})
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x1})
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r1, 0xc0285602, &(0x7f0000000040)={0x1, 0x0, 0x1})
r2 = socket(0x18, 0x4000, 0x0)
r3 = socket$inet(0x2, 0x8003, 0x0)
setsockopt(r3, 0x0, 0x3, &(0x7f0000000340)="15337ac0", 0x4)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x2, 0xfffffffffffffffe, 0xffffffffffffff, 0xffffffffffffffff})
sendto$inet(r2, &(0x7f0000000000), 0x0, 0x3, 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0)
openat$tty(0xffffffffffffff9c, 0x0, 0x400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x8000000000000001})
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
r4 = open(0x0, 0x200, 0xbe)
ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0x1, 0x7, 0xd4, 0xa, 0xffffffff, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x40}, {0xffff, 0x4, 0x6, 0x4}, {0x10000006, 0xf86, 0x0, 0x40004}, {0x5, 0x800, 0x7, 0x1000000}, {0x6, 0x10000002, 0x80e, 0x10000}, {0x6, 0x1, 0x7fffffff, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x71}, {0xa, 0x10000803, 0x14, 0x8}, {0x0, 0x81, 0x1, 0x7}, {0x6, 0x8001, 0xc7, 0x800000b}, {0x4, 0xfffb, 0x3}, {0x80000803, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x1, 0x3}, {0xffff0354, 0xfffffffa, 0x4, 0x100006}, {0x0, 0x6, 0x7, 0x1ffffffd}, {0x0, 0x1, 0xc, 0xc3}]})
select(0x0, 0x0, 0x0, 0x0, 0x0)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x80)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004)
setuid(0xee01)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000240))

5.864991092s ago: executing program 6 (id=3839):
mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) (async)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x8, 0x10)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) (async)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000280)={0x0, 0x7f}) (async)
ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000000)) (async)
pread(r0, &(0x7f0000000040)="3cd1", 0x2, 0x0)

5.80599115s ago: executing program 6 (id=3843):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x4}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x6, &(0x7f0000000240)="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", &(0x7f0000000100)=0xb115, 0x0, 0xfffffffffffffeff)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000040)=@in6={0x18, 0x0}, 0xc, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x438}, 0x2)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)

5.805114795s ago: executing program 6 (id=3845):
clock_gettime(0x2, 0xfffffffffffffffe)
ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xb61, 0x8, 0xd, 0x2}, {0x2, 0x0, 0xe, 0x800}, {0x4, 0x2, 0x6, 0x9}]})
r0 = kqueue()
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$hw(&(0x7f0000000280)={0x6, 0x1c}, 0x2, &(0x7f0000001280), 0x0, 0x0, 0x0)
kevent(r0, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0x8000, 0x10000}], 0x1, 0x0, 0x9b68, 0x0)
kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0)
r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000))
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000006c0)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x80, 0x5, 0x30, 0xd577}, {0x5, 0xb6, 0xff}, {0x6, 0x5, 0x43, 0x101}]})
r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x10)
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7d18f, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
recvmmsg(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x3}, 0x10, 0x0, &(0x7f0000002640)={0x33d, 0x304c9091})
r6 = socket(0x18, 0x2, 0x0)
getsockopt$sock_int(r6, 0xffff, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
clock_getres(0x4, &(0x7f0000000200))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x800000)
r7 = socket$inet6(0x18, 0x8000, 0x46)
kevent(r0, &(0x7f0000000100)=[{{r1}, 0xfffffffffffffffa, 0x4, 0x2, 0x7, 0x8}, {{r2}, 0xfffffffffffffff8, 0x8, 0x8, 0x200, 0xb}, {{r4}, 0xfffffffffffffffe, 0x40, 0x1, 0x4, 0x9}], 0xff7e, &(0x7f0000000180)=[{{r5}, 0xfffffffffffffff9, 0x34, 0x20000000, 0x10000, 0xfffffffffffffffc}, {{r7}, 0xfffffffffffffff7, 0x20, 0x80000000, 0x6, 0x2}], 0xfffffffc, &(0x7f00000001c0)={0x1, 0x8000000000000000})

5.795097473s ago: executing program 6 (id=3846):
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0}, 0x8) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0}, 0x8)
setrlimit(0x5, &(0x7f0000000000)={0x2, 0x9})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x9, 0x9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x42}) (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x9, 0x9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x42})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

2.679048546s ago: executing program 0 (id=3953):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
utimes(&(0x7f0000000000)='.\x00', 0x0) (async)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}) (async)
ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
select(0x51, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x2}, 0x0, 0x0)

2.676602575s ago: executing program 0 (id=3954):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x30101, 0x0)
ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000000)={0x0, 0x0})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x2d3, &(0x7f0000000080)=[{0x401, 0x7, 0x2, 0xfff}, {0x200, 0x89, 0x3, 0x3}]})

2.676275775s ago: executing program 0 (id=3955):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vfs_nfs(&(0x7f00000000c0), 0x3, 0x0, 0x0, &(0x7f0000000080), 0x0) (async)
kqueue()
open(0x0, 0x80, 0x4)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async)
r1 = socket(0x18, 0xc003, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x3, 0x2}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x7, 0x1]}, 0x3c) (async)
close(r1) (async)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
dup(r0) (async)
kevent(0xffffffffffffffff, 0x0, 0x8fcd, 0x0, 0x4000002, 0x0) (async)
r3 = kqueue()
kevent(r3, &(0x7f0000000040), 0x34, 0x0, 0x5, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
write(r4, 0x0, 0x0) (async, rerun: 64)
ioctl$BIOCSDIRFILT(r4, 0x8004427d, &(0x7f0000000080)=0x7)
kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe}], 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) (async)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 32)
getsockname(r2, 0x0, &(0x7f0000000180)) (rerun: 32)

2.666207548s ago: executing program 0 (id=3956):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$TIOCSETA(r0, 0xc0884450, &(0x7f0000000040)={0x8000, 0xd, 0x825, 0x89, "0700b4ff01000000000000000000f900", 0x0, 0x8}) (async)
sendto$unix(r0, &(0x7f0000000000)="b10005136000009f050000002010000000000924ed0a0500fef96ecfc70cd3357ae302b37b67ca0b2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118eab0000000cc001db770c1f5a872c881ea772ec5890405b3b9c2668396f4abd1182d000000002002", 0x8a, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004", 0xd, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000000c0)) (rerun: 32)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async, rerun: 64)
r1 = socket(0x18, 0x2, 0x0) (rerun: 64)
setsockopt(r1, 0x1000000029, 0xa, &(0x7f0000000000), 0x0) (async)
r2 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$VMM_IOC_RESETCPU(r3, 0xc0285602, &(0x7f0000000100)={0x4, 0x9c0, {[0x7, 0x2, 0x7, 0x2, 0x5, 0x8, 0x6bb, 0xfffb, 0x47, 0x8, 0x7, 0x7d8a, 0x6, 0x0, 0x3, 0x8e83, 0x8, 0x1], [0x8, 0xffffffffffffff68, 0xe75, 0x80000200, 0x5, 0x31e8, 0x4, 0x10000, 0x7fff, 0x401], [0x8, 0x6, 0x7ea, 0xa, 0x2, 0x5, 0x6], [0x34f7, 0xc, 0x6, 0xf10, 0x8000000000000001, 0xc8c6], [{0x8001, 0x3, 0x3, 0x4}, {0x9, 0x55, 0x42, 0x40}, {0x386e, 0xb, 0x6, 0x5}, {0x80, 0x4, 0x3, 0x5}, {0x0, 0xfffffb98, 0x3, 0x7ff}, {0x7, 0xbb, 0x8, 0x168}, {0xf, 0xb, 0x20, 0x2}, {0x1, 0x2, 0x7fff, 0x3}], {0x8, 0x7, 0x4, 0x6}, {0x5, 0x0, 0xfffffffc, 0x46a85f73}}}) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
setuid(0xee01)
ioctl$TIOCSFLAGS(r4, 0x8004745c, &(0x7f0000000280)=0x40) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412ddf) (async)
mkdir(&(0x7f0000000040)='./file2\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0) (async)
rename(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000000)='./file2\x00') (async)
sysctl$hw(&(0x7f0000000440)={0x6, 0x9}, 0x2, &(0x7f0000000480)="d020437b8b", &(0x7f00000004c0)=0x5, 0x0, 0x0) (async)
setuid(0xee01) (async)
lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)) (async)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)

2.509041948s ago: executing program 0 (id=3957):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write(r0, &(0x7f0000000280)="24b923e604d5ebda70a05d76f995a3f7b511382138a6ec5a93bff61214ac2ab0f61afe1ba2c00684268de4a251b8fa64fd59544e01297f7fa8a7f66c858ffd625e25a2a3d32cb85ab3d6fe45d237a40ca2496119b14e8bf48eeb732cd436842cc200310ad7e156ee8ab5e498fc95aee6d6fcff4bfc58b0547f305ef89e8f0526457d1b699fe452de10aa174dec2fd82b90b527e3be9393e3a86bd8d5bbfbfc498e3322624ab72f687de1887fdef51c9abf9a23ee610285bc4f3836f6ee47", 0xbe)
r1 = socket(0x18, 0x3, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4)
setsockopt(r1, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4)
recvmsg(r1, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/84, 0x54}, 0x42)
getsockname$inet(r1, &(0x7f00000004c0), &(0x7f0000000500)=0xc)
r2 = socket(0x11, 0x3, 0x0)
setsockopt(r2, 0x11, 0x3, &(0x7f0000000140)="12000000", 0x4)
sendto$unix(r2, &(0x7f0000000580)="b10005010000009f0500070105000000331c13fecea70500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297bd8aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71d808e5ed405080000fca653181afc9d3f0100"/177, 0xb1, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x3, 0x71000}, {0x101, 0x8, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x8, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e0, 0x10002, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]})
r4 = socket(0x11, 0x3, 0x0)
setsockopt(r4, 0x11, 0x3, &(0x7f0000000000), 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c})
r5 = socket(0x20, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0xd3a5, 0x1000010000, 0x0, 0x0, 0x200000001, 0x3, 0x4, 0x9})
r6 = kqueue()
r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0)
kevent(r0, &(0x7f00000003c0)=[{{r1}, 0xfffffffffffffffe, 0x0, 0x8, 0xdbb, 0xe}], 0xb7, &(0x7f0000000740)=[{{r0}, 0xfffffffffffffff9, 0x2, 0x20000000, 0xde4, 0x3}, {{r2}, 0xfffffffffffffffa, 0x4, 0x1, 0x7, 0x3}, {{r6}, 0xfffffffffffffff8, 0x4, 0x40000000, 0x9, 0x2}, {{r7}, 0xfffffffffffffffe, 0x2, 0xf0000084, 0x81, 0x6a3e}, {{r5}, 0xffffffffffffffff, 0x10, 0x40000000, 0x7, 0xef03}, {{r1}, 0xfffffffffffffffc, 0x10, 0x1, 0x7fffffff, 0x5}, {{r5}, 0xfffffffffffffffa, 0x22, 0x2, 0x0, 0xf5}, {{r5}, 0xfffffffffffffff9, 0x0, 0xf0000000, 0xac8, 0xd}], 0xfffffff0, &(0x7f0000000840)={0x1, 0x3996})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
recvmmsg(r2, &(0x7f0000000380)={&(0x7f0000000340)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000180)=""/50, 0x32}], 0x2, &(0x7f0000000200)=""/104, 0x68}, 0x3ff}, 0x10, 0x2, &(0x7f00000000c0)={0x4, 0x9})
r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000400), 0x10, 0x0)
ioctl$WSKBDIO_GETMAP(r8, 0xc010570d, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{0x9, 0x7, 0x101, 0x3, 0x10}, {0xfffa, 0x4, 0x0, 0x1, 0x8}, {0x200, 0x5, 0x6, 0xfff4, 0x9}, {0x0, 0x83, 0xd, 0x7ff, 0x8}]})
execve(0x0, 0x0, 0x0)

2.389023994s ago: executing program 0 (id=3966):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x9810, 0xffffffffffffffff, 0x0)
r0 = semget(0x0, 0x1, 0x281)
r1 = semget(0x0, 0x1, 0x281)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x108)
r3 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3)
setgid(0xffffffffffffffff)
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x4000102c, r3)
sendmsg$unix(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xc)
execve(0x0, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0)
pipe2(&(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1)
write(r6, &(0x7f0000000080)="c30516845e", 0xff55)
close(r7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x6)
semop(r1, &(0x7f00000002c0)=[{0x0, 0xff77, 0x1000}], 0x1)
clock_getres(0x4, &(0x7f0000000040))
semop(r0, &(0x7f0000000100)=[{0x0, 0x7, 0x1000}], 0x1)
execve(0x0, 0x0, 0x0)
semop(0x0, 0x0, 0x0)

1.364586101s ago: executing program 2 (id=4004):
setreuid(0x0, 0xee01)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in, &(0x7f00000000c0)=0xc)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000100), 0xc)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'})
recvfrom(r0, &(0x7f0000000280)=""/125, 0x7d, 0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00')
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0xc, 0x0, 0xffff2cc6}, {0x3, 0x3, 0x0, 0x7}, {0x6, 0x7d, 0x8, 0x2}]})
sysctl$hw(0x0, 0x0, &(0x7f0000000080)="0004a8985d0180b36dce1750d31480666351c03b7b9c41010e00000000000056494e51b5bf", &(0x7f0000000000)=0x25, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[])
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x5, 0x5, 0xa9, 0x40}]})
mknod(&(0x7f0000000140)='./file0\x00', 0x40, 0x0)

1.192528427s ago: executing program 2 (id=4008):
ioctl$VMM_IOC_RUN(0xffffffffffffffff, 0xc0205602, &(0x7f0000000040)={0x0, 0xdc2, 0x6, 0x101, 0x0, 0xff, 0x3})
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mlock(&(0x7f0000070000/0x4000)=nil, 0x4000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffdff, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x10, 0x8000000000006, 0x0, 0x0, 0x8000000080000001, 0x2008004, 0x400000000000a8, 0xfffffffffffffff9})
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0xa, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x1, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x5, 0x400003, '\x00', 0x11, 0x1000a})
setsockopt(r0, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8)
shmget$private(0x0, 0x3000, 0x1, &(0x7f00004f6000/0x3000)=nil)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

1.190230297s ago: executing program 5 (id=4010):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setreuid(0xee00, 0x0)
r2 = getuid()
r3 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r3, 0xffffffffffffffff)
setreuid(0xee00, r2)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea)
dup2(r1, r0)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff16f2b58f9227b9e1aaaa86dd60006f3300383a008a21f8d1450021b07f5a195768f30000fe8000000000000000000000000000aa02009078080000006000000000003a00fe8000000000000000002000000000aa00"])
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)

1.17602656s ago: executing program 2 (id=4012):
chmod(&(0x7f00000000c0)='./file2\x00', 0x141)
socket(0x11, 0x3, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="40008416633c69d9d1f2451d68fb6dbdb630059fe253b5fa107f1c90f7f7f1d55488b08a69ee12550f02df08b4f9928b8f3e0396805853200a28158458f079cd2bf13099c754605a282605571f2b28c6d3c87f72564af4f00e512513c25c161d88732346b05705009345e202fe8c3d9a78cb8f8ffdcfc1f52a53bf3c3c2696adba23bc0d653854cb5ebc020d68b8e17b4bdcc90207c4cbb57bd76f9ce9e4aa41488381b3fdea3040049ae745f901a31e1d9b505f934b901854c648cf"])
setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4)
setuid(0xffffffffffffffff)
r0 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x140, 0x98, 0x6}, 0x4, 0x20d, 0x0, 0xffffffffffffffff, 0xeffffffffffffffd, 0x1, 0x80000001})
ioctl$WSDISPLAYIO_GETSCREEN(0xffffffffffffffff, 0xc0245755, &(0x7f0000000080)={0x9, './file2\x00', './file2\x00'})
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000)
chmod(&(0x7f00000000c0)='./file2\x00', 0x141) (async)
socket(0x11, 0x3, 0x0) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async)
syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="40008416633c69d9d1f2451d68fb6dbdb630059fe253b5fa107f1c90f7f7f1d55488b08a69ee12550f02df08b4f9928b8f3e0396805853200a28158458f079cd2bf13099c754605a282605571f2b28c6d3c87f72564af4f00e512513c25c161d88732346b05705009345e202fe8c3d9a78cb8f8ffdcfc1f52a53bf3c3c2696adba23bc0d653854cb5ebc020d68b8e17b4bdcc90207c4cbb57bd76f9ce9e4aa41488381b3fdea3040049ae745f901a31e1d9b505f934b901854c648cf"]) (async)
setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) (async)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) (async)
setuid(0xffffffffffffffff) (async)
shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) (async)
shmctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x140, 0x98, 0x6}, 0x4, 0x20d, 0x0, 0xffffffffffffffff, 0xeffffffffffffffd, 0x1, 0x80000001}) (async)
ioctl$WSDISPLAYIO_GETSCREEN(0xffffffffffffffff, 0xc0245755, &(0x7f0000000080)={0x9, './file2\x00', './file2\x00'}) (async)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)

1.165714279s ago: executing program 5 (id=4013):
kqueue()
r0 = syz_open_pts()
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x154)
writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000002c0)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e09010000d886eafbe03881d25b7b59f701322b3a109a13436e486b0a6e", 0x61}], 0x2)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r2 = msgget$private(0x0, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000540)={0x0, <r3=>0x0}, &(0x7f0000000180)=0xc9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r6}})
r7 = geteuid()
setuid(r7)
r8 = getpid()
msgctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0xffff993e, r3, r6, r7, 0x0, 0x1, 0x1c00}, 0x10, 0x4, 0xffffffffffffffff, r8, 0x6, 0x2, 0x653c, 0xf3})
close(r0)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x40978b, 0x10101, 0x9, 0x3, "3b082001f78b67af9e3bb0c49d73230100040c00", 0x202, 0xf})
setreuid(r5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r9, &(0x7f0000000000)="ed", 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r11=>0x0}, &(0x7f0000000100)=0xc)
setuid(r11)
r12 = getpid()
ktrace(0x0, 0x1, 0x928, r12)
recvmmsg(r10, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0)
close(r10)
execve(0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0x22}, {&(0x7f0000000340)="fffc86b4937e989700efe50047a6669b7dfea260133fd07eb59287dae12030d22fce0fcb4f5e5b80087fb39c5ed183464f52ac31761b6ab79e85fe3a96e88ce736298c1d5a7328de9bf836a28dada168b9534262290334c32800aeb7c3544f24", 0x60}, {&(0x7f00000003c0)="de40a380f2fa0e3414fb1e1fb7af4f5feced576207d210edc0bf616be462dede14cdc1c98536c71d64828384bcb3bb1509d6e7ea887088e5929a3a864597903e6af503aec298e9d2535952128c90d09cf5b5c9d3094c98", 0x57}], 0x3)
r13 = syz_open_pts()
ioctl$TIOCSTSTAMP(r13, 0x8008745a, &(0x7f00000001c0)={0x3a49, 0x12})
ioctl$TIOCDRAIN(r0, 0x2000745e)

1.084052587s ago: executing program 2 (id=4015):
setegid(0xffffffffffffffff) (async)
setegid(0xffffffffffffffff)
r0 = msgget(0x1, 0x104)
msgrcv(r0, 0x0, 0x0, 0x3, 0x0)
msgsnd(r0, &(0x7f0000000240)={0x1, "dcf15efb0704ed6e8c814eb6b499ec465e3c3ff57b80b5616f85e9d85b66abdc1d01772a2b650a63848d8c0013f74473e5918ee20b120f3ecd1a5a44698b0bd6ec2426662aabf089ebb5a13735c7a345e9b6b74e0803b05532e59c63c19ea92555329347a05bec5f7570a5bbb3334512ef159bf30d512c4539a2259d4b6cf64aeccc5656d685a9a2e18dfa2c26978c3bdb6946c8eeb9e937dd405e7d5cfcd35ae9535f76337d1f53dae919240f10f2e9"}, 0xb8, 0x0)
msgctl$IPC_SET(r0, 0x1, 0x0)
r1 = getuid()
r2 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000000c0))
setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000200)={0x38000, 0x7}, 0x10) (async)
setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000200)={0x38000, 0x7}, 0x10)
setreuid(0xee00, r1) (async)
setreuid(0xee00, r1)
r3 = getegid()
r4 = geteuid()
getgroups(0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0xffffffffffffffff, <r5=>0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff])
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={<r6=>0x0}, 0xc)
r7 = getpgid(0xffffffffffffffff)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x3, r1, r3, r4, r5, 0x2, 0xc}, 0x9, 0x7, r6, r7, 0x1, 0x7, 0x7fffffff})
mkdir(&(0x7f0000000100)='./file0\x00', 0x49) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x49)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff) (async)
setuid(0xffffffffffffffff)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r8=>0x0}, 0xc)
seteuid(r8)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='r\x00') (async)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='r\x00')

1.067808306s ago: executing program 2 (id=4019):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000b40)={0x7ff, 0x17, 0x2000007, 0x20105, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffd, 0x10a6e, 0xfffff2bc, 0x1071000}, {0x7, 0x8, 0x8007, 0xfffffffb}, {0x8, 0x400005, 0x4, 0x9}, {0x4b, 0x800, 0x6, 0xfffffffc}, {0x401, 0x200726, 0x2800, 0xc}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffff8000, 0x4f8, 0x6d}, {0x203, 0x803, 0x14, 0x2d}, {0x2, 0xe, 0x285, 0xd}, {0xc, 0x95, 0xd1f, 0xc}, {0x1cf, 0x5, 0x5}, {0x7ff, 0x9, 0x744c01d5, 0x6}, {0xb89, 0x0, 0xc, 0x5}, {0x29a71717, 0xfffffffa, 0xfffffffe, 0xfffffffd}, {0xc, 0x5, 0x5, 0x7}, {0x0, 0xb1a, 0xe7, 0x30004}]})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TIOCSETA(r0, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6})

1.001010742s ago: executing program 5 (id=4020):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x10, 0x4000, 0x0)
setsockopt(r0, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)) (async)
setgid(0xffffffffffffffff) (async)
r1 = socket$unix(0x1, 0x3, 0x0)
setgroups(0x0, 0x0) (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async)
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0}, 0xc)
r3 = getegid() (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="73bbccc3000000f70004000086dd600000000090083a01fe8000000000000000000000000000aaff15000000000000000000002e5847a38a83df000000010200000000000000"]) (async)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000240)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r5}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, r7)
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, <r8=>0x0}, 0xc)
setgroups(0x7, &(0x7f0000000300)=[r2, r3, r5, 0xffffffffffffffff, r7, r8, 0x0])
r9 = getuid()
setreuid(r9, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000340)=0xc)
setregid(r11, 0xffffffffffffffff) (async)
setegid(r11) (async)
chown(&(0x7f0000000080)='./file0\x00', r9, r11)
setreuid(0x0, 0xee01) (async)
r12 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r12, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)

998.779948ms ago: executing program 2 (id=4024):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0xd4e688a67930cd)
close(r3)
r4 = socket(0x2, 0x3, 0x2f)
dup2(r4, r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async)
pipe(&(0x7f0000000040)) (async)
write(r2, &(0x7f0000000340), 0xd4e688a67930cd) (async)
close(r3) (async)
socket(0x2, 0x3, 0x2f) (async)
dup2(r4, r2) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async)

867.601207ms ago: executing program 1 (id=4026):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r1, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d7", 0x4}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4811, r1, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r2, 0xc0a86b02, &(0x7f0000000200)={0x0, 0x10000, 0x0})
sysctl$kern(&(0x7f0000000680)={0x1, 0x34}, 0x2, &(0x7f00000006c0)="954799d6", &(0x7f00000007c0)=0x4, &(0x7f0000000000)="6e2e67c8fce5d96685dc2897f1b701328f97a0bf9c", 0x15)

866.999265ms ago: executing program 5 (id=4028):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$TIOCSETA(r1, 0xc028445a, &(0x7f0000000100)={0x8, 0x0, 0x741, 0x10000002, "b3080d00", 0x900, 0x7})
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
r2 = socket$inet6(0x18, 0x4000, 0x10)
getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, 0x0)
r3 = getpid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6ae4e2c16ffbc93f, 0x8}, 0x3eb9, 0x5c, 0x0, r3, 0x0, 0x1, 0x8, 0x3})
mprotect(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0x1)
close(r2)
socket(0x2, 0x3, 0x0)
connect$unix(r1, &(0x7f0000000200)=@file={0xde59bd2819723b4f, './file0\x00'}, 0xa)
r4 = socket(0x2, 0x2, 0x0)
r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002880), 0x10000, 0x0)
ioctl$VNDIOCGET(r5, 0xc4104603, &(0x7f00000028c0)={'./file0\x00', 0xfffffffc, 0x337, 0x8000008})
close(r4)
r6 = socket(0x2, 0x3, 0xfe)
setsockopt$sock_int(r6, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4)
bind(r6, &(0x7f0000000000), 0x10)
sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, &(0x7f00000002c0), 0x0)
r7 = socket(0x11, 0x3, 0x0)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe53033af01c80731, 0x0}, 0x1040)
sendto$unix(r7, &(0x7f00000000c0)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d030100000000000000ef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f8343712050500b71d8000090005080000fca65361ba84913f01000008000000000000000000", 0xb1, 0x408, 0x0, 0x0)
writev(r4, &(0x7f0000000100)=[{0x0}], 0x1)

820.683192ms ago: executing program 1 (id=4029):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r0 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f0000000400)='./file0\x00', &(0x7f0000000300)='x\x00')
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2080, 0x1)

819.548619ms ago: executing program 5 (id=4031):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
close(r1)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000000)="30df20113723ab79090ef54fb5898fcb285fd747af062eae79a1c9411fbefb6b228d7fb5ac15579c0d9fe5d495ab92cb3b6b58ef57970b7c24c0bf31eb3f70b3605b76bc6b6f1afdcae37ef8d054c52fe479ed696f44b6cffc00b2e5826e5bcac1332877fd6f2ccf067c1bb03f2653719f5aae281b58c0629f53094debec9c0101249aed20ff3c2df9", 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x10000000000000, [{&(0x7f0000753000/0x3000)=nil, &(0x7f00007f5000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00007aa000/0x5000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000095000/0x4000)=nil, 0x20000001}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000007d000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f000068b000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f00003b7000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0x2}, {&(0x7f000055d000/0x4000)=nil, &(0x7f0000388000/0x1000)=nil, 0xb}, {&(0x7f0000787000/0x3000)=nil, &(0x7f00006e6000/0x3000)=nil, 0x4}, {&(0x7f00000b6000/0x3000)=nil, &(0x7f0000243000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000261000/0x3000)=nil, 0x51}, {&(0x7f0000245000/0x2000)=nil, &(0x7f0000160000/0x4000)=nil, 0x9}, {&(0x7f000055d000/0x2000)=nil, &(0x7f00001c0000/0x4000)=nil, 0x6}, {&(0x7f0000fed000/0x10000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffbfffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f0000246000/0x2000)=nil, 0x6}, {&(0x7f00003e3000/0x1000)=nil, &(0x7f000059c000/0x3000)=nil, 0x1000039f8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x500ffffffd}], './bus\x00', 0x3ff})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0)
close(r0)

708.028047ms ago: executing program 7 (id=4032):
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x7, 0x80000001, 0x7, 0xd7, "00000000000000000000cf8c077b00", 0x8, 0x3})
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x67569535, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x1, 0x1fe, 0x9, 0x0, 0x2], [0x120000001, 0x2, 0x3, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7ffffffffffffffe, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x2}, {0xfffc, 0x2, 0x5}, {0x4, 0x2, 0xffffffff, 0x80}, {0x3, 0x5, 0x4, 0xfffffffffffffffe}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0xa8d, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0x4, 0x80000000, 0x6d5, 0x2}}})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x1}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r0 = socket(0x18, 0x3, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="00fe00feffffff0300", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}})
setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000140), 0x0)
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1})

707.281548ms ago: executing program 7 (id=4033):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x400}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8d}, 0x10, 0x0, 0x0)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x2}, 0x8)
sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0xc90)
mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84)
r2 = socket(0x1, 0x2, 0x0)
r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x186)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x8000000000000001)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea84531c23c276514", 0x11)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r3, 0x0)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="d67b1e13", 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))

706.955821ms ago: executing program 1 (id=4034):
sysctl$kern(&(0x7f0000000040)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0xff8b)
socket(0x6, 0x0, 0x3)
syz_emit_ethernet(0x56, &(0x7f00000014c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x20, 0x3a, 0x0, @rand_addr="0029e2b96300", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x1, 0x0, 0x0, 0x7}], @icmpv6=@mld={0x82, 0x0, 0x0, 0x8, 0x0, @loopback}}}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)

703.947566ms ago: executing program 5 (id=4035):
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "0500", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xffffffff, {0x0, 0x6, "06c33e", 0x4, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}})
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
r1 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x3, 0xfffffffe, {[0xfffffffffffffffd, 0x10000000004ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x3, 0x4, 0xfffffffffffffff7, 0x800104], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0x7], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x6, 0x3}, {0x2, 0x9d1, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffe, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0x1}, {0x4, 0xfffffffc, 0x7}, {0x0, 0x95b, 0x200, 0x10000}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0xf, 0x4, 0x2}}})
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "0500", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xffffffff, {0x0, 0x6, "06c33e", 0x4, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) (async)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async)
syz_open_pts() (async)
close(r0) (async)
syz_open_pts() (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
kqueue() (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x3, 0xfffffffe, {[0xfffffffffffffffd, 0x10000000004ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x3, 0x4, 0xfffffffffffffff7, 0x800104], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0x7], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x6, 0x3}, {0x2, 0x9d1, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffe, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0x1}, {0x4, 0xfffffffc, 0x7}, {0x0, 0x95b, 0x200, 0x10000}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0xf, 0x4, 0x2}}}) (async)
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async)

696.410962ms ago: executing program 7 (id=4036):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000003c0)={0x40978b, 0x10001, 0x7, 0x800033, "3b08000100f167c99e3bb0c69d73230100040c00", 0x200, 0x81})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
write(r0, &(0x7f0000000340)='\f', 0x1)
kqueue()
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$WSDISPLAYIO_GBURNER(r2, 0x400c5752, &(0x7f00000000c0))
ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000000))
execve(0x0, 0x0, 0x0)
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0x1)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@random="2bf43505669c", @empty, [], {@ipv4={0x800, {{0x15, 0x4, 0x0, 0x2, 0x5c, 0x67, 0x1000, 0x1, 0x2e, 0x0, @local={0xac, 0x14, 0x0}, @multicast1, {[@timestamp={0x44, 0x38, 0x8, 0x3, 0x3, [{[@multicast2], 0x7fff}, {[], 0x1cb}, {[@rand_addr=0x3]}, {[], 0x1000}, {[@remote={0xac, 0x14, 0x0}], 0x6}, {[@remote={0xac, 0x14, 0x0}], 0x4}, {[@multicast1], 0x81}, {[], 0x9}]}, @rr={0x7, 0x7, 0x7f, [@rand_addr=0x5]}]}}, @udp={{0x0, 0x3, 0x8}}}}}})

620.703746ms ago: executing program 1 (id=4037):
r0 = open$dir(&(0x7f00000000c0)='.\x00', 0xf02, 0x182)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
setrlimit(0x2, &(0x7f0000000840)={0x60000000, 0x60000000})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r2 = semget(0x0, 0x1, 0x281)
socket(0x18, 0x3, 0x0)
setreuid(0x0, 0xee01)
semctl$SETVAL(r2, 0x4, 0x8, 0x0)
fcntl$setstatus(r0, 0x4, 0x8)
write(r1, &(0x7f00000002c0)="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", 0xfffffdaf)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x0, 0xffffffffffffffff)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80)
truncate(&(0x7f0000000080)='./file0\x00', 0xffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0)
execve(0x0, 0x0, 0x0)
ioctl$KDSETRAD(r3, 0x20004b43)

619.350983ms ago: executing program 4 (id=4038):
sysctl$net_inet_ipip(&(0x7f0000000100), 0x4, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xffffffffffffff8c)

405.668984ms ago: executing program 3 (id=4039):
open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1) (async)
r0 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
ioctl$FIONREAD(r0, 0x802069b5, &(0x7f00000001c0)) (async)
open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) (async)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
lchown(&(0x7f0000000100)='./file0/file0/..\x00', 0x0, 0x0) (async)
r1 = syz_open_pts()
ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000040))
setitimer(0x3, &(0x7f0000000000)={{0x401, 0x3fc}, {0x1, 0xc0000}}, &(0x7f0000000140))
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='@$/\x00', &(0x7f0000000200)='^-!.\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='](\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000340)='(#^\x00'])

405.447296ms ago: executing program 4 (id=4040):
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x10012efffffff, 0xffffffffffffffff})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x18, 0x3, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80)
faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
close(r3)

404.150969ms ago: executing program 1 (id=4041):
mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x801) (async)
mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x801)
socket(0x11, 0x4, 0x40)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
connect$unix(r2, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0) (async)
r3 = socket(0x11, 0x3, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x21}, 0x4, &(0x7f0000000080)="adfeaf5039f0cb542417c87e67c93a15aa9a7abab4deeab20af820e53bf4aca3fcaff375dd482d251b597a7396f9d63077976fd968b71a1efced3991e4f7b3ff7797d0bacd5d605b69e09db2908293600d815202d7d4cd0c85159530fb433a22192f85c65fdf200f67f624137cb032", &(0x7f0000000140)=0x6f, &(0x7f0000000180)="348b44e38ad3311d71e3c99ac7a3ab7559c33882349b666b63d9ca29c4108ff84c3229fd", 0x24) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x21}, 0x4, &(0x7f0000000080)="adfeaf5039f0cb542417c87e67c93a15aa9a7abab4deeab20af820e53bf4aca3fcaff375dd482d251b597a7396f9d63077976fd968b71a1efced3991e4f7b3ff7797d0bacd5d605b69e09db2908293600d815202d7d4cd0c85159530fb433a22192f85c65fdf200f67f624137cb032", &(0x7f0000000140)=0x6f, &(0x7f0000000180)="348b44e38ad3311d71e3c99ac7a3ab7559c33882349b666b63d9ca29c4108ff84c3229fd", 0x24)
setsockopt(r3, 0x11, 0x3, &(0x7f0000000340)="12000000", 0x4)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r4 = socket$inet(0x2, 0x4000, 0xfe)
socket(0x1, 0x2, 0x0) (async)
r5 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r5, 0xffff, 0x1022, 0x0, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100))

401.159322ms ago: executing program 3 (id=4042):
r0 = syz_open_pts()
syz_open_pts()
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x80084904, &(0x7f0000000140)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, "97a2224ff1c9513aebb1788f6cc9795a6b47c1d1"})
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x1000, 0x8, 0xfffffffe, 0x8, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40000})
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)

361.992654ms ago: executing program 3 (id=4043):
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x7297, 0x3ce, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x1, 0x86})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = socket(0x18, 0xc003, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x3, 0x6c0d}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000000)={{0x3f, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
r2 = syz_open_pts()
close(r2)
setsockopt(0xffffffffffffffff, 0x1000000029, 0x24, &(0x7f0000000000)="5ab777", 0x3)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x2, 0x1, 0x0)
r4 = socket$inet(0x2, 0x3, 0x102)
dup2(r4, r3)
bind(r3, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
pwritev(r6, &(0x7f0000002740)=[{&(0x7f0000000000)="370aea79bb", 0x5}], 0x1, 0x3fffe)
ftruncate(r6, 0x40002)
open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
pipe(0x0)

360.540461ms ago: executing program 1 (id=4044):
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x3, 0x297, 0xffff0000, 0x1, 0x5, 0xd87, 0x8000000c, 0x1, 0x0, 0x100000000644, 0xffffffffffffffc8}) (async)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SPKRTONE(r2, 0x80085301, &(0x7f0000000040)={0x3ea, 0x1})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000480)={0x4, 0x1, 0x7, 0x7, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x1, 0x5, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0x97, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x4}, {0x2, 0x81, 0xfffffff9, 0x4000009}, {0x3ff, 0x8001, 0xc7, 0x85}, {0x804, 0x5, 0x9, 0x10aeb}, {0x803, 0x400040, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x5, 0x100006}, {0x4, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x30000}]})
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (rerun: 64)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x202) (async)
mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) (async, rerun: 32)
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (rerun: 32)
preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/193, 0xc1}], 0x2, 0x8) (async)
rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00')

358.886516ms ago: executing program 3 (id=4045):
setuid(0xee01)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = socket(0x18, 0xc003, 0x3a)
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x20007606, &(0x7f0000000080))
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc)
setuid(0xee01)
r3 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1008, 0x0, 0x0)

351.407408ms ago: executing program 4 (id=4046):
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x26, 0xfffffffe}], 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00')
open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1)

258.648897ms ago: executing program 3 (id=4047):
socket(0x2, 0x8000, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x0) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r0 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) (async)
getitimer(0x0, &(0x7f0000000380))
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000340)={0x3, &(0x7f00000000c0)=[{0x0, 0x1d, 0x7, 0x81}, {0x3, 0x0, 0x0, 0x49}, {0x80, 0x0, 0x0, 0x2}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1934, 0x0, 0x94e88e483d20a485)

258.357498ms ago: executing program 4 (id=4048):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x80, &(0x7f0000000080)="6700d6e5", 0xfffffffffffffc81)

256.417385ms ago: executing program 7 (id=4049):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x18, 0x1, 0x0)
preadv(r1, &(0x7f00000002c0)=[{0x0}], 0x1, 0x80)
r2 = socket$inet(0x2, 0x3, 0x1)
setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_opts(r2, 0x0, 0x200000000000b, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
sysctl$kern(&(0x7f0000000000)={0x1, 0x2c}, 0x2, &(0x7f0000000040)="3752acc8", &(0x7f0000000140)=0x4, &(0x7f0000000280)="8ff645493548c4a1f5a31a50f1df7075919eec26ecfdbd63fc92332a671f2ade632f173ce647a52ff7d28ec54e6d80e11eac4146addef00d3ab62ef1aad82bbebabdbe55d716c14572d76de7e27bbc40a28251923561c0643cb062e877a780ee31707b0d7d0c1fc06ea7525b5ffadc47b5f46a1657781d20fb9a459f954f18639787f0676a3012a3af1042143e1caa2551455d95df59d5", 0x97)
setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
r4 = semget(0x0, 0x1, 0x281)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xc, 0xf8, 0x5, 0xffffffff}, {0x7c, 0x3d, 0x26, 0xb}, {0x6, 0x9, 0x1, 0x10001}]})
syz_emit_ethernet(0xc2, &(0x7f0000000180)={@random="0300000055e9", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "e2ffa0", 0x8c, 0x62, 0xa8, @mcast2, @loopback, {[], @generic="c327a8ca27746c03dfd346fcb7d976c2d8d7080f592e5773533368c7ff025f79f6a4744424d8832ddf84107211efcfde7bde1fc8c883ae6f4c957fe009da08a652ba720aae9da3f5e575f1ee56e5b5db38f758bf92bcc3e2ba14d7ef4e6fb024034cc5ed4cf366660989096692ea6ff9e5e44f09435a04ff6a632d6b372e5f466b86d685617adc60e3c9e359"}}}}})
semctl$SETALL(r4, 0x0, 0x9, &(0x7f00000001c0))
setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\b', 0x1)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)

255.08503ms ago: executing program 3 (id=4050):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
pwrite(r0, &(0x7f0000000100)="93", 0x1, 0x100000)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"])
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = socket(0x18, 0xc003, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x3}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000180)={0xfffd, 0x1, 0x2, 0xfa4, 0x1}, 0xc)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@empty, @random="05832816d8eb", [{[], {0x8100, 0x4, 0x0, 0x2}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @local, @loopback, @random="3faf302588f4", @local={0xac, 0x14, 0x0}}}}})
r2 = socket(0x2, 0x1, 0x0)
bind(r2, &(0x7f0000000000), 0x10)
listen(r2, 0x0)
r3 = socket(0x800000018, 0x3, 0x4)
r4 = getppid()
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x3, 0x1, 0x400000000000, 0x100000403, r4})
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_BELL(r5, 0x20005701)
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r6 = accept$inet(r2, 0x0, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x20, 0x0, 0x0)
r7 = accept$inet6(r2, 0x0, &(0x7f0000000040))
setsockopt(r7, 0x8, 0x6, 0x0, 0x0)
r8 = socket(0x2, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000000), 0x10)
close(0xffffffffffffffff)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x16, 0x0, @broadcast, @rand_addr=0xac1400ff}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x9, 0x7}}}}})
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x18, 0x0, 0x1e}, 0x4, 0x0, 0x0, 0x0, 0x0)

254.79635ms ago: executing program 4 (id=4051):
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a)
setrlimit(0x8, 0x0)
syz_open_pts()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x3, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x62, 0x7b98, 0x1fe, 0x10000000], [0x100000001, 0x2, 0x40000000, 0x0, 0xb, 0x11003, 0xffffffff00000000], [0x100, 0x1ffffffffff, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x5, 0x7d02}, {0xfffc, 0x0, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0xcf, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0xfc, 0x0, 0x8}], {0x0, 0x6, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x2}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x541, 0xf, 0x7, 0xffffffb1}]})
kqueue()
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x32)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000580), 0xc)
getuid()
r3 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3)
r4 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r4, 0x0)
setreuid(0x0, r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
setregid(0x0, r6)
readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800, 0x80})
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000380)={0x4, 0xffffffae, 0x8, 0x40000, "952e293efc7042bde75f0c00000000002200", 0x181, 0x3})
r7 = socket(0x18, 0x2, 0x7)
connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x402)
openat$klog(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0)

1.030341ms ago: executing program 7 (id=4052):
r0 = socket$inet(0x2, 0x2, 0xfc)
mprotect(&(0x7f0000b90000/0x3000)=nil, 0x3000, 0x0) (async)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async)
minherit(&(0x7f0000800000/0x800000)=nil, 0x802000000000, 0x0) (async)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400) (async)
ktrace(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x2, 0x0) (async)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00')
mkdir(&(0x7f00000003c0)='./file0/file1\x00', 0x75)
chroot(&(0x7f0000000100)='./file0/file1\x00') (async)
unveil(&(0x7f0000000340)='./file0/file1\x00', &(0x7f00000000c0)='x\x00')
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x17)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async)
ioctl$TIOCSETA(r1, 0xc4504449, &(0x7f0000000740)={0x3, 0x80000011, 0x0, 0xfffffffe, "97a2226ff1c17baf1f66786b47c1c200", 0x1000, 0x8}) (async)
unveil(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)='r\x00')
sysctl$net_inet_ipip(&(0x7f00000001c0)={0x4, 0x2, 0x4, 0x1}, 0x4, &(0x7f0000000200)="57998341", &(0x7f0000001200)=0x4, 0x0, 0x0) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x1) (async)
setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
pledge(&(0x7f0000000080)='tty V\xef\x86\xce3|#\xcb\x13\x12\xc0\r\x9c\xe6\x00E\xbd\x81+r9\xbc\xda\f\xeb\x13\x96\xdbY\x91\x0e\x17\x95 \x00\xa6\x9ca\x00\x00\x00\x00\x00\x00\xbe\xa4kG\x00\x00\x00\x00\x00^\x00\x01\x04\x00\xeb\x91vr)\\\xf2:\'2.\xee\xb6\xd9P#\x0f\xcd\x80\x8b\xa3 \x06\xe6{\xc3\x8e\xd7bN\x81\x9ess\x13\x06\xc6S\xe7\x1c\xfc\xec\xb0\x18\xf5\xb4H\xf8\x9el\x03(r\xd4\x9a\x0f\f\xdb', 0x0)
close(r0) (async)
shutdown(r0, 0x0)

563.103µs ago: executing program 4 (id=4053):
sysctl$net_inet_icmp(&(0x7f00000000c0)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xffffffffffffff1a) (async)
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
ioctl$TIOCSTOP(r0, 0x2000746f) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fcntl$dupfd(r1, 0x2, r1) (async)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async)
r4 = fcntl$getown(r2, 0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async)
r5 = getpgid(r4)
setpgid(r4, r5) (async)
r6 = syz_open_pts()
close(r6)
writev(r6, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x3, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04})
writev(r6, &(0x7f0000000580), 0x0) (async)
read(0xffffffffffffffff, &(0x7f0000000200)=""/255, 0xff) (async)
execve(0x0, 0x0, 0x0) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async, rerun: 64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pread(r7, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec370", &(0x7f0000000000)=0x1b, 0x0, 0x0) (async)
munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) (async)
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x400001) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async)
unveil(0x0, &(0x7f0000000140)='c\x00')

0s ago: executing program 7 (id=4054):
sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000000000000ffff0000070000007b97c2378d967b1288110afcf60278d34210047c9e97d5d222786317ad75e96d6de37b5fe355dca8d7e43dd99d0b15a3b4106baaed09341100b4ab2ffd978e9aa800000000000000010000000180ffff28a04997184820f2e4982879200d3b2f9cfb00aa8fd1622d25abeee89b886e486051e6e12a6d251f5c621cb157d82eaf7853a910c6bb424d42d9cec25ccc60757aa05472f0e253def5ee715b23182360dd7563b81b3909c9274bc006118352bfdba4cf49a62454bd1eec3509206d6c81c18051973b7ee3dffd7fdd7985e1ba68febb8c8a7bc04b26e7233e740a870d4d3d7e2a7be0f39b002800000000000000010000000800000001bf8093b31ecd8a3fc84d6edb936a208d18fbbf11420000f00000000000000001000000ff070000f64e1838f79726412d01c762cb5cdf14e605329ead48ada1317b3185403f29709aaa299a7932bcc6bb668a690d21cfa7c1e3f24131e71ecc9dbdac88b668d4452872b450600563f2d82e9598cc45910303510d2bcfbefd737b7d54b085a775ae7fbe573bb9289171d788461274d8ad4d7151bbb547798dcb2a05e112613cdaa89f5ca096c901501d3531bc6c4df975c8a7e4042e8bdedd86a7ac10fc405b46003c6168d0b47086ddf6e7f2c8b54bb431bff21b38372c13b2ed4a489214eb5659f68e053388df0b4a0bbcc191350255d0f2d7d258f09f000dc9de0000000000009000000000000000ffff00000600000057247fd7074069a16184aeab7fa8c8621fcc04b11ed1c59687a8d1b5207005b96164c655c32b6ee2d675c24f32818beb9c9e0483525024bc1d1804d429eba11902f597c065aae9d5fbd453499cf543cf848d72d5b751ec56e535d593807fb1bc37306adb5970dccba44fa950dceaa941e7dc18ec03e32b8b9a4519d41308ce002800000000000000ffff000064000000e292fb1d3b9195d169561562e31e897c625ddcfca8000000b000000000000000ffff0000ffff000044feff0609d15fcd54ba6b5495ed420de0f005f612240657a7b4e840993c5cf18f0dc396f55f5f6e797f563b290632955c2c183b959a49c40ac678f70b6795661fb1d0537562aecda6d71d360bd557c7c1d42bb04ede105c31e101c15088256dc20a4306a6a3e586e98b93297c0554f851a3fd86800b010dd18b3e465808f969f19f53e5b6e0413fdaa4e5d6e191014dcbf3ccb2d3bfdd788e000000000000009800000000000000010000000600000036af0dbe02"], 0x410}, 0x0) (async)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000340)=""/171, 0xab}], 0x5) (async)
r3 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3) (async)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) (async)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f00000001c0)="6e040000", &(0x7f0000000040)=0x4, &(0x7f0000000000)="0500d3cb", 0x4) (async)
ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000100)) (async)
sync()

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
pckbd_enable: command error
WARNING: thread `nfsio' (405546) exits with status -1
WARNING: thread `nfsio' (141473) exits with status -1
WARNING: thread `nfsio' (451441) exits with status -1
WARNING: thread `nfsio' (65928) exits with status -1
WARNING: thread `nfsio' (83028) exits with status -1
WARNING: thread `nfsio' (257190) exits with status -1
WARNING: thread `nfsio' (369199) exits with status -1
WARNING: thread `nfsio' (164801) exits with status -1
WARNING: thread `nfsio' (156375) exits with status -1
WARNING: thread `nfsio' (374615) exits with status -1
WARNING: thread `nfsio' (94375) exits with status -1
WARNING: thread `nfsio' (249625) exits with status -1
WARNING: thread `nfsio' (404196) exits with status -1
WARNING: thread `nfsio' (378943) exits with status -1
WARNING: thread `nfsio' (520802) exits with status -1
WARNING: thread `nfsio' (452697) exits with status -1
WARNING: thread `nfsio' (327124) exits with status -1
WARNING: thread `nfsio' (15691) exits with status -1
WARNING: thread `nfsio' (235003) exits with status -1
WARNING: thread `nfsio' (17100) exits with status -1
pppx: unable to set addresses for pppx1, error=17
uvn_flush: obj=0xfffffd806c1afb00, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
pppx: unable to set addresses for pppx1, error=17
malloc(): allocation too large, type = 6, size = 287762939904
denied attempt to set clock back 4263431298 seconds
	






OpenBSD/amd64 (Amnesiac) (tty00)

login: denied attempt to set clock back 134217744 seconds
denied attempt to set clock back 134217744 seconds
						
	



	
	

	
		


						
	



	
	

	
	



OpenBSD/amd64 (Amnesiac) (tty00)

login: �X$���vnd0: sloppy read from proc 97344 (syz-executor): blkno 0 bcount 164
pppx: unable to set addresses for pppx1, error=17
denied attempt to set clock back 49 seconds
denied attempt to set clock back 3692148921 seconds
vm_create: uvm_map failed: 12
WARNING: thread `nfsio' (313880) exits with status -1
WARNING: thread `nfsio' (5941) exits with status -1
WARNING: thread `nfsio' (412361) exits with status -1
WARNING: thread `nfsio' (249956) exits with status -1
WARNING: thread `nfsio' (55927) exits with status -1
WARNING: thread `nfsio' (139914) exits with status -1
WARNING: thread `nfsio' (167387) exits with status -1
WARNING: thread `nfsio' (490495) exits with status -1
WARNING: thread `nfsio' (6653) exits with status -1
denied attempt to set clock back 134217781 seconds
denied attempt to set clock back 109051838 seconds
denied attempt to set clock back 4263431358 seconds
denied attempt to set clock back 4263431358 seconds
denied attempt to set clock back 4263431358 seconds
denied attempt to set clock back 4263431358 seconds
�WARNING: thread `nfsio' (381820) exits with status -1
WARNING: thread `nfsio' (291436) exits with status -1
WARNING: thread `nfsio' (244512) exits with status -1
WARNING: thread `nfsio' (200611) exits with status -1
WARNING: thread `nfsio' (220902) exits with status -1
WARNING: thread `nfsio' (150609) exits with status -1
WARNING: thread `nfsio' (294903) exits with status -1
WARNING: thread `nfsio' (377059) exits with status -1
WARNING: thread `nfsio' (434383) exits with status -1
malloc(): allocation too large, type = 6, size = 287762939904
denied attempt to set clock forward to 52172937113390




OpenBSD/amd64 (>�g�r���@R�<�v���(�3�	��W��) (tty00)

login: panic: uvm_fault_unwire_locked: address not in map
Starting stack trace...
panic(ffffffff833dfad0) at panic+464
uvm_fault_unwire_locked(fffffd806bf869a8,2000000e0000,2000000e3000) at uvm_fault_unwire_locked+1262