last executing test programs:

4.514776091s ago: executing program 7 (id=935):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{}, {}, {}, {}, {0x87bddc2eb7165cba}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x0, 0x80}, {0x0, 0x1}, {}, {}, {0x0, 0x8001}, {0x1, 0x1}, {0x0, 0xb}, {}, {0x0, 0x4}, {0x0, 0x2}, {0x3}, {0x0, 0x40000000}, {}, {0x3, 0xffffffff}, {}, {}, {}, {0x1, 0xffffffff}, {0x2}, {0x0, 0x5}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{}, {}, {}, {}, {0x87bddc2eb7165cba}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x0, 0x80}, {0x0, 0x1}, {}, {}, {0x0, 0x8001}, {0x1, 0x1}, {0x0, 0xb}, {}, {0x0, 0x4}, {0x0, 0x2}, {0x3}, {0x0, 0x40000000}, {}, {0x3, 0xffffffff}, {}, {}, {}, {0x1, 0xffffffff}, {0x2}, {0x0, 0x5}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) (async)

4.476473056s ago: executing program 7 (id=937):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000001c0)="8d6bb80f7357202bc33143f65551ec8430877ae32fe9bbe47a3eba8e1969ad1be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e090005a5bc23ea08f8940cf27cfcb92e013200000000000000006b0a", 0x59}], 0x2)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

4.432755196s ago: executing program 7 (id=941):
r0 = socket$unix(0x1, 0x0, 0x0)
r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000340))
socketpair(0x6, 0x1, 0x36, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x150)
sysctl$hw(&(0x7f0000000000)={0x6, 0xf}, 0x2, &(0x7f0000000100)="8207", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000480)={0x1, 0x1a}, 0x2, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0)
mknod(0x0, 0x2000, 0x1e5f)
mkdir(&(0x7f0000000100)='./file0\x00', 0x51)
setuid(0xffffffffffffffff)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$VNDIOCGET(r4, 0x20006473, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000001c0)=[{&(0x7f0000000080)="4d6fd92ff2d7f5b005abc08900ed76e2e93a27efd799aa89136a4a9aa88deb98cedab941d6a5218071b948bb109c9422cba087e054747427d010ebd7467344891bb533c9f5759d76d3a49d9962f8a470455b288683a796c5f7198fa3e6adc9ecc0c29f1cf02e5874b2e231d720692de6fd64b4bde82ac4ff41dde697930556e327bb8d79627478c820b83de14e1ef27c18d84213aa31978f4f4a3ba9f3adb42623316ec1b35208956a6db510b5a01e02bce26ad4fd7198d8d0bcf6fe56b208ec440f16775ee6c5cf9ab33149fed21b2e76fb353c341e9adc769ab082fb4c1f1154077bfbf61f3310dfec5df7a2ec36c616", 0xf1}, {&(0x7f0000000240)="f5ed90770f6d9317ca094d646d54877af63abe1d0e7d73a00f7a6822bed164b9db7bdd6c4a76e263c7fbcb543a09828952ddcbc7fd945c920a3f8580f973468f6bca607ca80afbabc3bdf273f50335ecc5c45b0546589d0b746a3cab93b063b77f78c3ff318cb18153e704822e1b32a211a9110be6bbf54abf4a85de2843d6673540eb2e62b78ce654ad6389979b66c61ead2d37e8b2b6270ba6682463648acd58fc7dfc83be060a3a00658f6e80066f227360e7e99c80c330025eea5779e82e6a9176ee6a54f243e34eb27a0e7312518aa5e10c35659ed66c3b3384775c0aaf82c453032ed94d0a4a92c26b85eee966ab3f3b9a25959528", 0xf8}], 0x2, &(0x7f0000000400)=[@rights={0x20, 0xffff, 0x1, [r0, r1, r0, r2]}, @rights={0x20, 0xffff, 0x1, [r0, r0, r0, r5]}], 0x40, 0x405}, 0x4)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
chmod(&(0x7f0000000180)='./file0\x00', 0x27f)
lseek(0xffffffffffffff9c, 0xc, 0x1)
setuid(0xee01)
r6 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)

3.562938704s ago: executing program 7 (id=953):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xd488f792c8835060)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x2, 0x71000}, {0x7, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x9d38, 0x5, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x9, 0x4, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8)
getsockopt(r0, 0x0, 0xa, 0x0, 0x0)

3.514628812s ago: executing program 7 (id=959):
r0 = syz_open_pts()
syz_open_pts()
syz_open_pts()
pipe(&(0x7f00000001c0))
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x100000003})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0xfffffffa, [{}, {0x1}, {0x0, 0x2}, {}, {0x2}, {0x0, 0x8}, {0x2}, {0x0, 0x10001}, {0x0, 0x41}, {0x2, 0xffffffff}, {0x2}, {0x0, 0x2}, {0x3}, {0x0, 0x88}, {0x3, 0xffffffff}, {0x0, 0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x10000}, {}, {}, {0x0, 0x10000000}, {}, {0x1}, {0x0, 0x6}, {0x3}, {0x0, 0x401}, {}, {0x4}, {0x1, 0x5}, {0x1}, {0x0, 0x20000000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x2, 0x4001, 0x0)
r4 = dup(r3)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
close(r5)
socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)="258b300ad151140900000000000000f3e8347a217a866229d1633579e2fae94a66b76f8f4cf33cd932e3987039", 0x2d}], 0x1, 0x0, 0x0, 0xb}, 0x403)
sysctl$kern(0x0, 0x0, &(0x7f0000000280)="71cb42008037c30caef9efff587d454cadda00800000ff60df80b4c46a006200000000000000000082006963099dd901c8ce28040827d781fa6adc94ad214276f15b9ba9", &(0x7f0000000080)=0x44, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f00000000c0)={0x9, &(0x7f0000000300)=[{0x6, 0x6, 0x9, 0x4, 0x800}, {0x3ff, 0xe, 0x0, 0x1000, 0x6}, {0x6, 0x0, 0x8001, 0x3, 0x6}, {0x8, 0x9eeb, 0x2, 0x1, 0x10}, {0x8, 0x40, 0x7, 0x61, 0x5f54}, {0x7, 0x7, 0x4, 0x4c2, 0x3}, {0x1000, 0x9, 0xff80, 0xb, 0xffff}, {0x5a8e, 0x8, 0xf000, 0xfffe, 0x4c0}, {0x0, 0x2, 0xfd7, 0xfffc, 0xfa}]})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_extract_tcp_res(0x0, 0x4, 0x7)
close(r0)

2.912199778s ago: executing program 3 (id=977):
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000004c0)={0x10, 0x7f, [{&(0x7f0000248000/0x3000)=nil, &(0x7f0000487000/0x1000)=nil, 0x4}, {&(0x7f000060c000/0x1000)=nil, &(0x7f00006bf000/0x3000)=nil, 0x1}, {&(0x7f00002d2000/0x2000)=nil, &(0x7f00002e6000/0x1000)=nil, 0x125}, {&(0x7f0000177000/0x3000)=nil, &(0x7f0000661000/0x3000)=nil, 0x8001}, {&(0x7f0000665000/0x3000)=nil, &(0x7f0000775000/0x3000)=nil, 0x4948}, {&(0x7f00005b0000/0x2000)=nil, &(0x7f00000ea000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000017000/0x12000)=nil, &(0x7f0000544000/0x1000)=nil, 0x2}, {&(0x7f0000503000/0x1000)=nil, &(0x7f0000483000/0x2000)=nil}, {&(0x7f000045f000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x81}, {&(0x7f0000140000/0x3000)=nil, &(0x7f00001dc000/0x3000)=nil, 0x7}, {&(0x7f0000695000/0x3000)=nil, &(0x7f000009c000/0x2000)=nil, 0x9bf4}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5fd8}, {&(0x7f00007e1000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5}, {&(0x7f00006fc000/0x4000)=nil, &(0x7f00004f8000/0x1000)=nil, 0x1}, {&(0x7f0000087000/0x3000)=nil, &(0x7f00006cd000/0x1000)=nil, 0x80}, {&(0x7f00006a4000/0x4000)=nil, &(0x7f00003ed000/0x2000)=nil, 0x3}], './file0\x00', 0x10001})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x6, 0xc0000000, 0x3, 0x2f, "1800e6234f5d7a0000005409456200", 0x1, 0x5})
setuid(0xffffffffffffffff)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
r3 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0))
write(r0, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf5c4b75c4c160f4acfe629a5717f5f5b7cad5c4e10a76103ea7945a70ea5a8999b18da379b691138c7d8a1529b81a7fb4540022f1324c3dda210f6f132101dfe0acc149685fdaca2fe92b8d4327e9872642c818370d60e800e0f8b2a66ead8ef0ddc9f0258f2275a9a0aefa8edd053e80a46946b0c0df080bb0d9c214c6a2393db966f0c0ace000", 0xc0)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x10000, 0x9)
sendto$inet(r4, &(0x7f00000002c0)="c52620d569f507a52a718117e9d5174f5a931d12c608c18b5fe8dd1f6bb79337cb1d10bee4f916f22289a3f3563ff792fab8f034542e2d9b2a21bae48d82db32ec116ded6b31bde1c43bbb980a470c14164e8eabf379a3ea85ce6fcea4a3a2f0291a9760e9cb276e4d90c6c4347a92ed80a89c455ca234d710ffa6975b8ccbb8dbee6aebd40df5e7d246355335c6468edbe7fce49673fffbf4c34a55b9eabe4498273e2c0f38bf7e6cda684665defca2f978d2dddaf36b811c51f3f37aa1710e310017f1eb5fdd11cd9b74d67d8158e909b1e96101e65a8e43923b33f378d997c85a8d456f71c31884cb41408a2e8dc5cc99f2b1", 0xf4, 0x1, &(0x7f00000003c0)={0x2, 0x0}, 0xc)
sysctl$fs(&(0x7f0000000000), 0x2, &(0x7f0000000040)="a1eaf2e2c48b143a1949941e621d7195f070876a1bcbea90db2da03a0da8f539cac9e497d457e3b6ebc60d5fac9cdb5cc3c8a456c31ac52bae543841110a9f30c9c84a25b64cba1c980678291e85e3362b6caafa8d5b75899ff99bc2c219ce0312df3984f7aef411aa3f109abb61aadabbc36cb06b85b3e4132c7798bc2b66be469fffcc70f1536bddf44ae9c2c6eee0a0e89bb3cf23246dcbb02b1a3e777618135cc327e2aee9c2d6940c2edd9326f87906213fdc79453aaeb3b3c167f4c7a36aba7480c4af641fd6dfc32cdf8dead31dec27635c34c8ffd05e", &(0x7f0000000140)=0xda, &(0x7f0000000180)="2a1aac45eff6799eeede4d3a97918d97767408819d40b656fcfcaacd8889449cb7dd2f84e8adce75798ab3e247c160f304bd7019918cef46a25f9a3d55952af7fedf7053b3a0a1949005f8b765de5e074dce20c0f8c0a2106968c9bbb8d272bf27fea8d7b873b50f7d4f7c762660803353fce06371c7208c2d4547c99ac625dd0f8a6d582f89ce5ae216f8ec318319fff4b4874393ee822810dbeb182541fe96a7b877fa30d9b475c3b9f8bf06e74b2e14488375be8ac265c0e29187cbdb1eaf2e229897add77dee3a9e2c98cb2ba16db1394a464a92961de386", 0xda)
fchmodat(0xffffffffffffffff, 0x0, 0x69, 0x0)

2.685332115s ago: executing program 3 (id=979):
r0 = socket$inet(0x2, 0x4, 0x8)
dup2(r0, r0)
pwrite(r0, &(0x7f0000000000)="757e2036669fcbeda156f8e3a4d8c2b6e6b9c6662e9e07b286e4a38d0ec42f1f4b7adb2e466e9acf2027f3916294601df504c48fb64dc0846b9bd0cb7491fd107b0fef40abf42347eb6cfd0d2494223177a683e70118c0f5ed9ee19159e075677d4d70ca376253ad3de30a2fd79305b8b731a9fac61a8820d62f04f6013a1bc75b86d14df448a374a144fb9a287a6c30b716ca7d37f4688a14ea88eb32b379cc2cdd6d2796cd25706bddd1669eeba10930eb08670c6b9c543515747c1476d805744fbac0d8030009", 0xc8, 0x10001)
openat$wsmouse(0xffffffffffffff9c, 0x0, 0x400, 0x0)

2.677672935s ago: executing program 3 (id=980):
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x166, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}})
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x2}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}})

2.677175347s ago: executing program 3 (id=981):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffa, 0xffffffffffffffff})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x118)
sysctl$hw(&(0x7f0000000080)={0x7, 0xc}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa43029cb73dbf1a1f7a2065ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031faef03e56ad0e24dfc4f97b8b7f81499647e6", 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0xffffffffffffff2c}], 0x1, 0x0, 0x0, 0x5}, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r2 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r2, 0xc0206922, &(0x7f00000001c0))
sync()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

2.590641575s ago: executing program 7 (id=982):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000080)="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", 0x102}], 0x1, 0xffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)}], 0x1, 0x0, 0x0, 0xf}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x27}], 0x1, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffa, 0xffffffffffffffff})
getrlimit(0x3, &(0x7f00000001c0))
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x118)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
sync()
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r0, 0x0)

2.266900303s ago: executing program 5 (id=986):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00004e8000/0x1000)=nil, 0x2000080000000002}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000417000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb938}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfdfffffffffffff9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000086000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil, 0xc6}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51a}, {&(0x7f0000349000/0x1000)=nil, &(0x7f0000392000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f000063c000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x9e}], './file0\x00', 0xfffffffa})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async, rerun: 64)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xffffffff, 0x5, "210d0000000800000500", 0x2000000, 0x5})

2.205576002s ago: executing program 5 (id=989):
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="c60005136000009f05", 0x9, 0xa, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
r0 = socket(0x18, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async)
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='r\x00')
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x20, 0x0)
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0)

1.332277393s ago: executing program 0 (id=1012):
r0 = socket$inet(0x2, 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000040)="b1000501000000ae05000701070000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd00)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)
ioctl$VNDIOCSET(r2, 0x80086d01, &(0x7f0000000500)={0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet(0x2, 0x3, 0x0)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0x3}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007, 0x4}, {0x401, 0x200727, 0x2800, 0x1}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0xfe}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x7f, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x208, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x3, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r6)
ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
ioctl$TIOCSETA(r7, 0xc148445e, &(0x7f0000000000)={0x10001, 0x2, 0x8, 0xd5, "00000000f8feff3d000000e7ff61aa9f4f00", 0x2, 0x101})
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040), 0x0)
syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800455c00780000000000019078ac1400bbe00000010c02907800080000476cfff80000000008010000e00000017f00000100940600000062440409630717037f000001ffffffff00000001ac1400bb7f000001892303ac1400aa7f000001ffffffffac1400aae0000002ac1400bb7f000001ffffffff00000086219de1b3127b61c3cba9bcf3239aa3160667cccd9f8318310e2ff4d81fc458c69d3aa8d7c8b6f9949c95d2ed20b2e9da4b6c9650126768dc224efc156f2330c972e58fa70aa447bc539a06c16ed7c26a70630c9681e4299e2c041dfc555076c31d750bdf2b2658b9824d33"])

1.249911061s ago: executing program 5 (id=1013):
r0 = socket(0x800000018, 0x1, 0x0)
r1 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3, 0x3}, {0x3, 0x300}, {0x39531011ee919cae, 0x100070b4}, {0x2, 0x11}, {0x2}, {0x0, 0xe}, {0x3, 0x5}, {0x0, 0x400000}, {0x3, 0x2}, {0x1}, {}, {0x0, 0x47}, {}, {0x2, 0x1}, {0x3, 0x8}, {0x1}, {}, {0x1, 0xfffffffc}, {0x6, 0x1fe}, {0x2, 0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x2}, {0x3}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x103}, {0x3, 0x80000000}, {0x3, 0x9}, {0x2}, {0x2, 0x400}]})
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
readv(r2, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/178, 0xb2}], 0x2)

1.249506889s ago: executing program 0 (id=1014):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080))
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x6, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f00004d8000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8000000000b936}, {&(0x7f00001da000/0x4000)=nil, &(0x7f000072c000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000363000/0x3000)=nil, &(0x7f0000704000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0xa}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xd000)=nil, 0x5}, {&(0x7f000072c000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f0000581000/0x4000)=nil, 0xd}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000071b000/0x1000)=nil, 0x12b}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x9}, {&(0x7f000071e000/0xc000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x7fffffffffffffff}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000135000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x5}], './file0/file0\x00', 0xfffffffe})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
connect(r1, &(0x7f0000000300)=@in6={0x18, 0x3, 0x2, 0x200000}, 0xc)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

1.248766896s ago: executing program 5 (id=1016):
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c50000201201", 0x8b, 0x808, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
minherit(&(0x7f0000573000/0x4000)=nil, 0x4000, 0x1)
shmget(0x3, 0x4000, 0x8, &(0x7f0000540000/0x4000)=nil)

1.238217312s ago: executing program 2 (id=1017):
mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4)
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81aa, 0x10003, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x7, 0x1, 0x8007}, {0xfffffffa, 0x200727, 0x2800, 0x7}, {0x1, 0x3, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x800, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8002, 0xd1b, 0x4}, {0x1c8, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x5}, {0xb8c, 0x87, 0x8, 0x4}, {0x29a71f17, 0xfffffffa, 0x1, 0x6}, {0x501, 0x5, 0x5, 0x10000000}, {0x0, 0x49, 0xfff, 0x30004}]})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
setsockopt(0xffffffffffffffff, 0x0, 0x66, 0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="ec682529000000fb7a8c653d77a49036e02013b6d238c1ba7c041efef80cbef404191b8662ed2c36e57e2111752b56d2d2898bd445dc50aac1c9861e543e1dac2622bdf26796eddec4b363699bc5a2fb", 0x50}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5a9da4070000006ebb807e7fa1d2498be1bf90f22d70fa567b224fae8f4317bf235600", &(0x7f0000000080)=0x3d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})

1.164159137s ago: executing program 2 (id=1019):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
link(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x7, &(0x7f0000000180)="674cd6e5", 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
seteuid(r3)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000a40)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000b80)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000bc0)={<r6=>0x0, <r7=>0x0}, &(0x7f0000000c00)=0xc)
getgroups(0x6, &(0x7f0000000c40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff])
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000c80), 0x80, 0x0)
r9 = socket(0x18, 0x2, 0x0)
sendmsg$unix(r9, &(0x7f00000015c0)={&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x40b}, 0x408)
r10 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x20000, 0x0)
r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c)
r12 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0)
r13 = getpgrp()
fcntl$setown(r12, 0x6, r13)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000d00)={0x0, <r14=>0x0}, &(0x7f0000000e40)=0xc)
r15 = getgid()
r16 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000e80))
r17 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200, 0x0)
r18 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000540)=[{&(0x7f0000000440)="cb7ed3523dab2d9d93d717103b026925a8f38d11b88c3bdb6a4c92e95a7dc00d42e03de0a6870856accc1a97536323bf304ac7b192059d18c32adfe3cdf51a130170cec1c294467c26dfcbac106052b0822592b3817b6d66703fbc279450308348671b26da35cb6ad99e7b814c86c5ef831521df7c3cc893ad251d7830f77560f2b724569896b9aaa2ebdd3cc0a543e835d8", 0x92}, {&(0x7f00000007c0)="d35097bb6ec27248405b7245f5cbb4cf1ae4d2bcaa0d76485fb18339a1a0d180310988dc19638c4f3a79f9848ac16804bd831e56156881905cdcfad7cd63f637faedbb319d4cde90431b803415376446bfa54c330ce9dc6a613639779e08a6b36253d1146c60c2e062f81154156b22a838397b7b695b533f2559998ce08e20c6110d77102bb51e91c80d", 0x8a}, {&(0x7f0000000880)="9f6ee6cbb419d479a0f9997f7c9ab41766d76f480a644ca5527ea5602e1622c3e17c8206aca8978a8b8a9cd36cc566b13973a7f7163f7006dc6b0eb60d15c71c6679af728b579b70aed03039005306e56c8b9f4c91b635e4bbcb3e898af3994bdee52b0d3d9554037ce364edba3bf596dc25f8b61a69dc85f32aab837d149135ea715cb1bce6585f3eac4508785d895559408e7522a8977b731a1e45e93d5b4e0eb9db8934d4ad1a8fed564882bffc25cf69505e17523a4988de5d2e37652a2a0c728fd1824c0eadd8b1e61f5313d6de71f258633f0a392c17cdc56021144225b0be13dd5c3bf7ccb6ac", 0xea}, {&(0x7f0000000500)="e1000c2551e16ca87cef6a787687", 0xe}], 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="2000000000000000ffff000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002800000000000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=r17, @ANYRES32, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000002800000000000000ffff000001000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=0xffffffffffffff9c, @ANYRES32=r18, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT=r6], 0x130, 0x3}, 0x0)

1.163230252s ago: executing program 5 (id=1020):
sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) (async)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x93) (async)
rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0xd4e688a67930cd) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x1}, {0x3, 0xfffffffd}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2, 0xc3f}, {}, {}, {0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {}, {}, {0x1, 0x57fd}]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
execve(0x0, 0x0, 0x0)
mkdir(0x0, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0)

1.020984654s ago: executing program 0 (id=1025):
sysctl$hw(&(0x7f00000000c0)={0x6, 0x5}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000001c0)="33b5b976", 0x4)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x1, 0x5, 0xffffffff, 0x1000000, "0000000000000000000000000100", 0x6, 0x1000a})
select(0x0, 0x0, &(0x7f0000000040)={0x50, 0xfffffffffffffffc, 0x7}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xca3, 0x0, 0x7}, &(0x7f00000000c0))

1.007160583s ago: executing program 6 (id=1027):
setitimer(0x1, &(0x7f0000001fc0)={{}, {0x5}}, &(0x7f0000002000))
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x27}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000780), &(0x7f00000007c0)=0xc)
getegid()
getpid()
getuid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000800), 0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1}, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r0 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0206925, &(0x7f00000001c0))
getpid()
getuid()
r1 = socket(0x2, 0x1, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r2 = dup2(r1, r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r1, &(0x7f0000000000), 0x10)
sendto$unix(r2, &(0x7f0000000100)="5757ab377e3f0a347fcfed", 0x7fcc, 0x407, 0x0, 0x0)
shutdown(r2, 0x2)
getgroups(0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0])
getuid()

899.182301ms ago: executing program 2 (id=1029):
r0 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r0, 0x0, 0x9, 0x0, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000000)=0x7, 0x4)

897.058282ms ago: executing program 2 (id=1031):
socket(0x18, 0x1, 0x0) (async)
r0 = socket(0x18, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) (async)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10) (async)
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10)
r4 = socket(0x18, 0x3, 0x0)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r5, &(0x7f00000006c0)=[{&(0x7f0000000200)="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", 0x117}], 0x1, 0x942)
execve(0x0, 0x0, 0x0)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
socket(0x2, 0x1, 0x0) (async)
r6 = socket(0x2, 0x1, 0x0)
connect$unix(r6, &(0x7f0000000000), 0x10)
shutdown(r6, 0x1)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r7 = socket(0x18, 0xc003, 0x3a)
setsockopt(r7, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
r8 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
close(r8)
close(r6)

833.078575ms ago: executing program 6 (id=1034):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x17, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xfffff5c7, 0x8013ea, 0xfff5, 0x0, 0x6, 0x27, 0x7, 0x0, 0x2, 0x63e, 0x4000000000f19})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
close(r1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
connect$unix(r1, 0x0, 0xffffffffffffff5f)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

702.624292ms ago: executing program 4 (id=1039):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x189)
symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32)
socket(0x18, 0x5, 0xc) (rerun: 32)
socket(0x18, 0x3, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCLOCK(r1, 0x20004276) (async)
setuid(0xee01)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x0, 0x0}) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) (async)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
fcntl$lock(r2, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) (async)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)='./file0\x00')
open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x142)

697.938988ms ago: executing program 6 (id=1040):
clock_gettime(0x3, 0xfffffffffffffffe)
open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc)
r0 = socket(0x18, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0))
r1 = socket(0x18, 0x3, 0x0)
r2 = open(0x0, 0x80, 0x28)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r3 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0x808c694e, &(0x7f0000000100))
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)

696.740761ms ago: executing program 1 (id=1041):
setreuid(0xee00, 0x0) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xa, 0xd, 0x803c, 0xffffffff, "4d5e3e3faddfd20d2105fa4d16646f93af301165", 0x6, 0x200077f}) (async)
mprotect(&(0x7f0000319000/0x2000)=nil, 0x2000, 0x1)
sysctl$net_mpls(&(0x7f0000000000)={0x4, 0x21, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="91a6e341d8bbaaaaaaaaaabb08004500001c00000061481bca0e46556e67a45300003a9078ffffffff00"]) (async)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222fa0e426c391383fc60344ded7b16e91f0be1fc6097f27ac401febfc4bd9113c0971d966bf1907b67dd09c6c9a75c57412aebc2e8f9a35c1036fdf1bdac62eadda", 0x81}], 0x1)
rename(&(0x7f0000000040)='./file0/file0\x00', 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3, 0x7f, 0x5, 0x81}, {0x5, 0x0, 0x0, 0x4}]}) (async)
sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f00000001c0)={0x1, 0x38}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
sysctl$net_inet6_icmp6(&(0x7f0000002780)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async)
r0 = getuid()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setuid(r0)
chflags(&(0x7f0000000180)='./file0/file0\x00', 0x10000) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x40) (async)
setreuid(0xee00, 0x0) (async)
r1 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x23, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8008001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffc0001, 0x400000002000000, 0x0, 0xffffffffffffffa9, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0x0, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0x5, 0x5, 0xfffffffffffffffa], [0x103, 0x1ffffffffff, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x8000, 0x0, 0xfffffffffffffff8}, {0xfffc, 0x2, 0x7fffffff, 0x10}, {0x0, 0x0, 0xfffffffe, 0x7e}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0xec3b, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x965, 0x9, 0x8}], {0x3ff, 0x6, 0x8}, {0x1, 0x6, 0x100000b0, 0x2}}}) (async)
kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
r2 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r2, 0x0) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000000)={0x4, &(0x7f0000000280)=[{0x80, 0xff}, {0x7, 0xff, 0x32, 0x7}, {0x4, 0x8, 0xaa, 0x7084}, {0x6, 0x6, 0x7, 0x800}]}) (async)
write(r3, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async)
setreuid(0xee00, r2)

696.134061ms ago: executing program 4 (id=1042):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r2 = socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r2, &(0x7f0000000000), 0x10)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xd5, 0x200c0, 0xfffe, 0x1, 0x407ff, 0xffffffff, 0x2, 0x1, 0x2, 0x80000, 0xf16})
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x4f4, 0x3ea, 0xfff6, 0x0, 0x9, 0x5, 0x1, 0x1, 0x1, 0x640, 0x4000000000f1a})
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000003340)="2c47a1e0", 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a)
sendmmsg(r0, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc)

522.285128ms ago: executing program 4 (id=1043):
socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x18, 0x4, 0xa1)
setsockopt(r0, 0x1000000029, 0x3e, &(0x7f0000000080)="6700d6e5", 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0])
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x80044809e9a, 0xffffffffffffffff, 0xfffffffffffffffd, 0x9, 0x181c, 0x10000000000008, 0x1}, 0x0, 0x0, 0x0)
r1 = socket(0x2, 0x2, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2e}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x2, 0x100040000000000b, 0x3, 0x8000000000000002})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x0}, 0x8)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x14, 0x0, 0x0)
pipe2(0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="c3", 0xffffffed)
unveil(0x0, &(0x7f00000001c0)='c\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, &(0x7f0000000400)=""/119, 0xfd4c)
r3 = socket(0x18, 0x3, 0x3a)
setsockopt(r3, 0x29, 0x6c, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x4000000000, 0x6, 0xb})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
execve(0x0, 0x0, 0x0)

514.871363ms ago: executing program 1 (id=1044):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x403}, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x80146953, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket(0x2, 0x2, 0x0)
setuid(0xffffffffffffffff) (async)
bind(r2, &(0x7f0000000000), 0x10)
r3 = socket(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000000), 0x10)
setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000000600)={&(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000004c0)=""/45, 0x2d}], 0x5, &(0x7f0000000580)=""/63, 0x3f}, 0x3c08e16}, 0x10, 0x1002, &(0x7f0000000640)={0xffffffffffffffff, 0x157708eb}) (async)
r4 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000200)={0x7f, 0x4, 0xfffffff8, 0xa, 0x6, 0x8a7, 0x0, 0x10, [{0x2, 0x1, 0x9, 0x8}, {0x4, 0x8, 0xffffffc0, 0x8}, {0x5, 0x80200003, 0x1, 0xfffffff7}, {0x7, 0x2, 0x8, 0x8}, {0x7fffffff, 0xe3a, 0x0, 0x3}, {0x7ffa, 0x7ff, 0x9, 0x4}, {0x3, 0x6, 0x1, 0xa3}, {0x80000000, 0xfff, 0x0, 0x7}, {0x121, 0x7, 0x1, 0x5}, {0x1, 0x7fffffff, 0xffffffff, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x3}, {0x0, 0x6, 0x6, 0x2}, {0x200062, 0x4, 0x7, 0x8}, {0x6, 0x7fff, 0x8, 0x1}, {0x2, 0x0, 0x3, 0xa}, {0x3, 0x6, 0x200002, 0x5}]}) (rerun: 32)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async)
setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc)

494.91909ms ago: executing program 6 (id=1045):
mknod(&(0x7f0000000080)='./file0/file0\x00', 0x2000, 0x5c4a)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf86, 0x0, 0xaf9}, {0x5, 0x800, 0x7}, {0x6, 0x80000003, 0xe, 0x7}, {0x2, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0xb}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]})
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0xb, 0x3, 0xfff6, 0x1, 0x9, 0x2d, 0x8, 0x1, 0x2, 0x644, 0x4000000000f19})
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="ea", 0x1)
chmod(&(0x7f0000000240)='./file0\x00', 0x120)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00')
r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
open(&(0x7f0000000040)='./file0\x00', 0x800, 0x146)

494.381901ms ago: executing program 1 (id=1046):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010005, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc}, {0x4, 0x9, 0x640, 0x7}, {0xb8c, 0x1, 0x8, 0x4}, {0x400, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0xffffffc}, {0x1, 0xfffffffd, 0xfff, 0x30004}]})
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r0 = socket$inet(0x2, 0x4, 0xb)
fcntl$setflags(r0, 0x2, 0x1)
r1 = syz_open_pts()
close(r1)
syz_open_pts()
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4)
ioctl$TIOCSBRK(r1, 0x2000747b)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0x820e, 0x6, 0xffffdf82, 0xffffff90, "08955c1cfac164e261150e00000009ffe600", 0x4000000, 0x1a7})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

482.746174ms ago: executing program 4 (id=1047):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x2e)
ftruncate(r0, 0x80002)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)='#!', 0x2}], 0x1)
r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0)
r3 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x0, r3)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0)

252.402777ms ago: executing program 3 (id=1048):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setown(r1, 0x6, 0xffffffffffffffff)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
ftruncate(r3, 0x40000000007) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x100000000) (async)
sendmmsg(r2, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r4, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r4, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r5 = syz_open_pts()
close(r5) (async)
r6 = syz_open_pts() (async)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async, rerun: 32)
writev(r5, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (rerun: 32)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000040)={0x733, 0x8, 0x1, 0x5, "d100d5a5010082015f78839a62bfc48d00", 0x3, 0x1ff})
read(r6, &(0x7f00000009c0)=""/4096, 0x1000) (async, rerun: 64)
execve(0x0, 0x0, 0x0) (async, rerun: 64)
setsockopt(r0, 0x0, 0x69, 0x0, 0x0)

252.112043ms ago: executing program 5 (id=1049):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000})
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
flock(r0, 0x1)
flock(r0, 0x3)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001})
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x1c, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xbd, 0x0, 0x1, {[@mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x4}]}}}}}}}})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0)

249.56962ms ago: executing program 6 (id=1050):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x3, 0xdc, 0xfd, 0x4}, {0x8, 0x8, 0x7, 0x6}]})

249.045216ms ago: executing program 4 (id=1051):
syz_emit_ethernet(0x76, &(0x7f0000000100)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x40, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffc, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x88, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0xfffffffe}]}]}}}}}}})
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="7004f5b37527", [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x8, 0x3a, 0x0, @rand_addr="3be1e300", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@echo_request}}}}})
r0 = socket(0x2, 0x3, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIONREAD(r0, 0x80146951, &(0x7f0000000100))
r1 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@remote, @local, [], {@arp={0x806, @generic={0xf, 0x3c07, 0x6, 0x8, 0x2, @empty, "be06bcef08730bea", @broadcast, "f9ff01f96be690b7457e47ffb3143fed"}}}})
setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000480)={0x6, 0x7fff}, 0x10)
getsockopt$sock_timeval(r1, 0xffff, 0x1006, 0x0, 0x0)

163.57749ms ago: executing program 1 (id=1052):
fchdir(0xffffffffffffffff) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88}, {0x1, 0x7, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0x4f8, 0x8000006d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x9, 0x5, 0x5}, {0x6a75, 0x8001, 0xd17, 0x401}, {0x1cc, 0x8010001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
sysctl$kern(&(0x7f0000000000)={0xa, 0x4}, 0x7, &(0x7f0000000040)="fe747e421f032be37006e10e39246c2df91905f823d85bb54ae3d4a91f541c46502e59a8d054fe7d6a93c0bfec6382b43ee9d7b9df2f9943fc2c25b6bbd6358b2fd20a7cbc9a40301525e116", 0x0, 0x0, 0xfffffffffffffff4) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 64)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x36}, 0x4, &(0x7f0000000140)="3998a035daa227d0ce40394f044ed954", &(0x7f00000000c0)=0x10, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32)
setreuid(0xee00, 0x0) (async)
r2 = getuid()
setreuid(0xee00, r2)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000000029, 0x27, 0x0, 0x0) (async)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea000001", 0x4)
sysctl$kern(&(0x7f0000000380)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="71f91e", &(0x7f0000000000)=0x3, 0x0, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 64)
r4 = socket(0x1, 0x2, 0x0) (rerun: 64)
ioctl$FIONREAD(r4, 0x80206913, &(0x7f00000001c0)) (async)
accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r5 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154)
ioctl$TIOCSFLAGS(r5, 0x8004745c, &(0x7f0000000300)=0xf5e) (async)
r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r6, 0x800c5709, &(0x7f00000002c0)={0x8, 0x3, 0x2}) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000217000/0x4000)=nil, 0x4000, 0x5)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xbffd, 0x8, 0x1, 0x3}, {0x6, 0x0, 0x0, 0x800}, {0x8, 0x0, 0x0, 0x5}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), 0x0, 0x0, 0x0)

163.238418ms ago: executing program 0 (id=1053):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x11}, 0x2, &(0x7f0000000040)="3c6f874c409efe9523347a4580eec32678a8928214fae6b93c206ff46ff3a1eeb3486bc3eaba8c528c602c75cadb5873c7937515fe95edda437e1641bf42c5ab4573cda505374ccf652b6f18496b2123e2349fff398b9bb623a14a0bd2c341963a07f833c1884f8fd6c7a0c7e8ae0627d0b72fc0d40246c34f8f9f8df5dc9a9268580c8684200b1729765342ba3e2112b8fa", &(0x7f0000000100)=0x92, &(0x7f0000000140)="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", 0xfe)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)={{0x8968, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x80000005a7, 0x4, 0x8})

162.987508ms ago: executing program 0 (id=1054):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="bf3b684c5ae963b4567084e096cf9739", 0x10}], 0x1}, 0x1)
socket$unix(0x1, 0x1, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000000140))
ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000240))
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}], 0x1)
write(r0, &(0x7f00000009c0)="09cf200700000a", 0x7)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

157.389282ms ago: executing program 3 (id=1055):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = getppid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1, 0x0, 0x4, 0x0, 0x400000002})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$getown(r2, 0x5)
ktrace(0x0, 0x5, 0x128, r3)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
r4 = semget(0x0, 0x0, 0x0)
semctl$GETPID(r4, 0x2, 0x4, 0x0)
semctl$GETPID(r4, 0x3, 0x4, &(0x7f0000000200)=""/18)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
clock_getres(0x2, &(0x7f0000000000))
syz_emit_ethernet(0x66, &(0x7f0000001540)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900303a003bcc3f0600000058132fa13a8be186e3df8000000000000000000000000000aa02009078000000006006c33e00f8500000000000000000000000000000000000ff020000000000000000000000000001"])
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f00000001c0))
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r6 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x258f, 0x800c0, 0xfff6, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x2, 0x80000, 0xf1a})
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1040000", 0x4)
socket$inet6(0x18, 0x8000, 0x29)

157.121742ms ago: executing program 1 (id=1056):
r0 = getuid()
setreuid(0x0, r0)
r1 = semget(0x0, 0x0, 0x30)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x0, r0, 0x0, r0, 0x0, 0x80, 0x3}, 0x2, 0x3})
semctl$IPC_RMID(r1, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0)
ioctl$TIOCSETA(r2, 0xc2084415, &(0x7f0000000000)={0x2002, 0x5, 0xfffffffe, 0xfffffffe, "b6d04b0a0a00", 0x9, 0x4})

33.000601ms ago: executing program 0 (id=1057):
r0 = socket(0x18, 0x2, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r1, 0xffff, 0x1007, 0x0, 0x0) (async)
getsockopt$sock_int(r1, 0xffff, 0x1007, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x28, 0x8, 0x80, 0x40, 0x10, [{0x5, 0x0, 0xfffff115, 0x80000001}, {0x3, 0x1, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x8001}, {0x4, 0xe2, 0x7, 0x100}, {0x3, 0x40b, 0xf15, 0x2}, {0x9cb, 0xfffc, 0xc, 0x5}, {0x4, 0x800, 0x3, 0x9}, {0x1, 0x9, 0x28000, 0xb7}, {0x9, 0x0, 0x6, 0x8003}, {0x3, 0xfffffffc, 0x80000001, 0x28bfd}, {0x0, 0x2, 0x8, 0x7}, {0x3, 0xc7cb, 0x7ffffe, 0xa67}, {0x403, 0x10, 0xd, 0xa2}, {0x3, 0x1006df, 0x0, 0x6f5fc48b}, {0x1000, 0x101, 0x8, 0xff}, {0x9be2, 0x2, 0x2, 0x69}]})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
syz_open_pts() (async)
r2 = syz_open_pts()
close(r2) (async)
close(r2)
syz_open_pts() (async)
syz_open_pts()
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x9)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8)
writev(r0, &(0x7f0000001900)=[{0x0}], 0x1)
socket$unix(0x1, 0x2, 0x0)

30.964746ms ago: executing program 1 (id=1058):
setreuid(0xee00, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = getuid()
r1 = msgget(0x0, 0x240)
msgsnd(r1, 0xffffffffffffffff, 0x0, 0x800)
r2 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r2, 0xffffffffffffffff)
setreuid(0xee00, r0)
getgroups(0x7, &(0x7f00000002c0)=[0x0, 0x0, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0])
chown(&(0x7f0000000280)='./file0\x00', r2, r3)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x166, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x0, 0xfffc, {[@nop, @mss={0x2, 0x4, 0x3b4}, @timestamp={0x8, 0xa, 0x3, 0x8}]}}}}}}})

30.547365ms ago: executing program 2 (id=1059):
r0 = getpid()
syz_emit_ethernet(0x17a, &(0x7f00000001c0)=ANY=[@ANYRES16=r0])
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
setgroups(0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1f6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$VNDIOCSET(r1, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mknod(&(0x7f0000000480)='./file0\x00', 0x6000, 0x400)
writev(0xffffffffffffffff, &(0x7f0000000180), 0x0)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4)
setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000040), 0x0)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='W\x00')
syz_open_pts()
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='x\x00')

30.126364ms ago: executing program 4 (id=1060):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x0, 0x9, 0x2, 0x2}, {0xa, 0x12, 0xe4, 0x100}, {0x101, 0x81, 0xfb, 0xffffffff}, {0x0, 0x6, 0x5, 0xa5}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="258b34f9d92d15867fdb7b3ea6c26149654d3094b5ab47240700000087f85465688b453d5b6535a805142c2eacb15498a3675a8dd50800ba55a37b93b7130a69b7ad64250ee87ce204c5b3ce33059d40b90b4727c15805c9cb64b128cab23aae1f", 0x61}], 0x1, 0x0, 0x0, 0x2}, 0xe)
kqueue()
accept$inet(0xffffffffffffff9c, 0x0, &(0x7f00000001c0))
poll(&(0x7f0000000200)=[{r0, 0x20}, {0xffffffffffffffff, 0xb67f0cd37c300f53}, {r0, 0x20}], 0x3, 0xff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
r3 = dup2(r2, r1)
accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl$WSKBDIO_SETBACKLIGHT(r4, 0x800c5712, &(0x7f0000000040)={0xc2e0, 0x84, 0x1})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x0, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000})
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r7 = socket$inet(0x2, 0x4000, 0x5)
ioctl$FIONREAD(r7, 0x80206979, &(0x7f0000000000))
mmap(&(0x7f0000706000/0x1000)=nil, 0x1000, 0x1, 0x811, r3, 0x8)
fcntl$setstatus(r3, 0x4, 0x4)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})

19.508387ms ago: executing program 6 (id=1061):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0xffffffff)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48)
openat(r1, &(0x7f0000000100)='./file0\x00', 0x40, 0x81)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x102)
fcntl$setstatus(r2, 0x4, 0xc4)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xfffffffc, '\x00', 0x11, 0x1100a})
ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r1, 0x0)
ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000000000)=0x2)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)

0s ago: executing program 2 (id=1062):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff8, 0x0, 0x2, 0xc, 0x8000000000000000}], 0x17, &(0x7f0000000240)=[{{}, 0xfffffffffffffff8, 0x8, 0x1, 0x2, 0x800f4f4}], 0x200, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c50000201201", 0x8b, 0x808, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x10b)
pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0)
kqueue()
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
syz_emit_ethernet(0x4c6, &(0x7f0000000b80)=ANY=[@ANYRES8=r2])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
open(0x0, 0x0, 0x8)
ioctl$TIOCSETA(r2, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3})
sysctl$ddb(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000280)={0x8, 0x46, 0x4, {[0x8000000000000000, 0x8000000000000000, 0x1, 0xfffffffffffffff6, 0x0, 0x9, 0xda, 0x7, 0x6, 0x3, 0x5ec, 0x2, 0x6, 0x8, 0x2, 0x5, 0x7fffffffffffffff, 0x7], [0x5, 0x7, 0x80000001, 0x79, 0x1, 0x547, 0xdb, 0xa601, 0x4f, 0x9], [0x0, 0xdf2c, 0x1, 0xfffffffffffeffff, 0x0, 0x4, 0x1], [0x7, 0x40000000000000, 0x3, 0x800, 0x2, 0x80000000], [{0x0, 0xff, 0x40000000, 0x80000000}, {0xfffc, 0x4, 0x7f, 0x800000000000000}, {0x3, 0x5, 0x100, 0x7}, {0x2000, 0x6, 0xa, 0x5}, {0x2, 0x54, 0x1, 0xf}, {0xf3, 0x5, 0x1, 0x9ad}, {0x200, 0xffffffff, 0x0, 0x1000}, {0x5, 0x81, 0x1, 0xfffffffffffffc00}], {0x6, 0xb, 0x2, 0x52e58e1a}, {0xf801, 0x2, 0xffffffff, 0x7}}})
getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x6, 0x1, 0x1)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb938}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfdfffffffffffff9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil, 0xc6}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51a}, {&(0x7f0000349000/0x1000)=nil, &(0x7f0000392000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f000063c000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x9e}], './file0\x00', 0xfffffffa})
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r4 = socket(0x18, 0x4003, 0x0)
setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
close(r3)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r5, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xffffffff, 0x5, "210d0000000800000500", 0x2000000, 0x5})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts.
pckbd_enable: command error
malloc(): allocation too large, type = 6, size = 287762939904
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
denied attempt to set clock forward to 7381507745249584175
WARNING: thread `nfsio' (139434) exits with status -1
WARNING: thread `nfsio' (152943) exits with status -1
WARNING: thread `nfsio' (279838) exits with status -1
WARNING: thread `nfsio' (183088) exits with status -1
WARNING: thread `nfsio' (211811) exits with status -1
WARNING: thread `nfsio' (424630) exits with status -1
WARNING: thread `nfsio' (118949) exits with status -1
WARNING: thread `nfsio' (520961) exits with status -1
WARNING: thread `nfsio' (254759) exits with status -1
WARNING: thread `nfsio' (221812) exits with status -1
WARNING: thread `nfsio' (105723) exits with status -1
WARNING: thread `nfsio' (176066) exits with status -1
WARNING: thread `nfsio' (34443) exits with status -1
WARNING: thread `nfsio' (81428) exits with status -1
WARNING: thread `nfsio' (246015) exits with status -1
WARNING: thread `nfsio' (481924) exits with status -1
WARNING: thread `nfsio' (367220) exits with status -1
WARNING: thread `nfsio' (339373) exits with status -1
WARNING: thread `nfsio' (95129) exits with status -1
WARNING: thread `nfsio' (266868) exits with status -1
K�\����	�������@�L��a���dהB�BdI�����J��/~6��J�Y�B�'^C1�?(��E
C�b�o�.�@���O��a��#k���O������Q�+�b�
��D�-��~rr��&���R�{�؀1'�L-b��[F���.��	���	x5�d�/: bad dir ino 2 at offset 0: mangled entry
panic: bad dir
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*294182  13560  60929        0x10  0x4000000    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff832e48e2) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b0396c0,ffff80003c4c9350,ffff80003c4c9380) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c4c9320) at vfs_lookup+0x93a
namei(ffff80003c4c9320) at namei+0x7ca
domkdirat(ffff80003c4fa038,ffffff9c,200000000340,180) at domkdirat+0x8b
syscall(ffff80003c4c9500) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf5303737a60, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: bad dir
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff832e48e2) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b0396c0,ffff80003c4c9350,ffff80003c4c9380) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c4c9320) at vfs_lookup+0x93a
namei(ffff80003c4c9320) at namei+0x7ca
domkdirat(ffff80003c4fa038,ffffff9c,200000000340,180) at domkdirat+0x8b
syscall(ffff80003c4c9500) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf5303737a60, count: -9
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c4c8f10
rbx               0xffff8000299eeddf
rdx               0xffff800001471940
rcx               0xffff80003c4fa038
rax               0xffff8000299edff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x5a6520ec269f91bc
r11               0x6c00da155a60df91
r12               0xffff8000299eebe0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff811b1895    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c4c8f00
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=294182 pid=13560 tcnt=2 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=17, usrpri=50, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4fb260,0xffffffff8388ff48
    process=0xffff80003c4c0ec8 user=0xffff80003c4c4000, vmspace=0xfffffd805f2de7c8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 13560  494800  10764  60929  2        0x10                syz-executor
*13560  294182  10764  60929  7   0x4000010                syz-executor
 17536   72366  88375      0  2           0                syz-executor
 17536  440548  88375      0  3   0x4000080  fsleep        syz-executor
 86699  283176  93182      0  2           0                syz-executor
 86699  270499  93182      0  3   0x4000080  kqpoll        syz-executor
 11172  107021  86455      0  2       0xc80                syz-executor
 11172  244158  86455      0  3   0x4000080  ttyout        syz-executor
 11172   95920  86455      0  3   0x4000080  fsleep        syz-executor
 11172   40569  86455      0  3   0x4000080  fsleep        syz-executor
 25628  418766  82859      0  2       0xc80                syz-executor
 25628  449581  82859      0  3   0x4000080  kqsel         syz-executor
 25628    8821  82859      0  3   0x4000080  fsleep        syz-executor
 71611   37478  88021      0  2       0xc80                syz-executor
 71611  170446  88021      0  3   0x4000080  lockf         syz-executor
 71611   69778  88021      0  3   0x4000080  lockf         syz-executor
 71611  101289  88021      0  3   0x4000080  fsleep        syz-executor
 33471  212713      0      0  3     0x14200  bored         sosplice
 87867  243660  27865      0  3        0x82  nanoslp       syz-executor
 10764  391578  27865      0  3        0x82  nanoslp       syz-executor
 88021  435309  27865      0  3        0x82  nanoslp       syz-executor
 93182  500240  27865      0  2       0xc82                syz-executor
 82859   19992  27865      0  2       0xc82                syz-executor
 87225  480991  27865      0  2  0x10000c82                syz-executor
 88375   53765  27865      0  2         0x3                syz-executor
 86455  314239  27865      0  2         0x3                syz-executor
 27865   51101  50315      0  3        0x82  kqread        syz-executor
 50315   39404  96816      0  3    0x10008a  sigsusp       ksh
 96816  270718  68479      0  3        0x98  kqread        sshd-session
 68479   23994  52503      0  3        0x92  kqread        sshd-session
 36150  507159      1      0  3    0x100083  ttyin         getty
 52503  475962      1      0  3        0x88  kqread        sshd
 75908  467046  80102     74  3   0x1100092  bpf           pflogd
 80102  268059      1      0  3        0x80  sbwait        pflogd
 31297  312161  85218     73  3   0x1100090  kqread        syslogd
 85218  502018      1      0  3    0x100082  sbwait        syslogd
 66635  445736      1      0  3    0x100080  kqread        resolvd
  1964   10622  83328     77  3    0x100092  kqread        dhcpleased
 84012  484254  83328     77  3    0x100092  kqread        dhcpleased
 83328  310724      1      0  3        0x80  kqread        dhcpleased
 88667   59786      0      0  3     0x14200  bored         smr
 41783   39021      0      0  2     0x14200                zerothread
  7326  502869      0      0  3     0x14200  aiodoned      aiodoned
  1060  183724      0      0  3     0x14200  syncer        update
 45321   65311      0      0  3     0x14200  cleaner       cleaner
 80035  228817      0      0  3     0x14200  reaper        reaper
 95666  454016      0      0  3     0x14200  pgdaemon      pagedaemon
 87441   50293      0      0  3     0x14200  bored         viomb
 13744   80738      0      0  3  0x40014200  acpi0         acpi0
 81652  354528      0      0  3  0x40014200                idle1
 88844  278048      0      0  3     0x14200  bored         softnet7
 41559  351775      0      0  3     0x14200  bored         softnet6
 80241  391148      0      0  3     0x14200  bored         softnet5
 36755  112082      0      0  3     0x14200  bored         softnet4
 89586  351295      0      0  3     0x14200  bored         softnet3
 60946  486229      0      0  3     0x14200  bored         softnet2
 32306   32993      0      0  3     0x14200  bored         softnet1
 15309  389077      0      0  3     0x14200  bored         softnet0
 96464  372584      0      0  3     0x14200  bored         systqmp
 23728  374843      0      0  3     0x14200  bored         systq
 22157   73164      0      0  2     0x14200                softclockmp
 92931  252676      0      0  2  0x40014200                softclock
  9023  422340      0      0  3  0x40014200                idle0
     1  281945      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff838ff668)
#0  witness_lock+0x5f1
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  uvm_pageclean+0x28e
#4  uvm_pagefree+0x26
#5  uvm_anfree_list+0x1e5
#6  amap_wipeout+0x248
#7  uvm_unmap_detach+0x8a
#8  uvm_map_teardown+0x360
#9  exit1+0x6fc
#10 sys_exit+0x1a
#11 syscall+0xb17
#12 Xsyscall+0x128
Process 13560 (syz-executor) thread 0xffff80003c4fa038 (294182)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83886c28)
#0  witness_lock+0x5f1
#1  __mp_acquire_count+0x58
#2  sleep_finish+0x2d8
#3  biowait+0xc6
#4  ffs_bufatoff+0x16f
#5  ufs_lookup+0x58e
#6  VOP_LOOKUP+0x6e
#7  vfs_lookup+0x93a
#8  namei+0x7ca
#9  domkdirat+0x8b
#10 syscall+0xb17
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807e4bae80)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  domkdirat+0x8b
#8  syscall+0xb17
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10209  11045K   11739K 166960K     12055        0
            pcb    17     15K      17K 166960K       265        0
         rtable   215     10K      10K 166960K       430        0
             pf    37     18K      82K 166960K       169        0
         ifaddr    39      7K       7K 166960K        98        0
        ifgroup    51      2K       2K 166960K       176        0
         sysctl     4      1K       9K 166960K        14        0
       counters    66     36K      37K 166960K       198        0
       ioctlops     0      0K       4K 166960K      1851        0
            iov     0      0K      29K 166960K       123        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1438     90K      91K 166960K      2339        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        14        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       111        0
        dirhash    12      2K       2K 166960K        27        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    16     57K      97K 166960K      1194        0
          sigio     1      0K       0K 166960K        23        0
           proc    72    115K     180K 166960K       655        0
        subproc    72      4K       4K 166960K        73        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       224        0
       in_multi    88      6K       7K 166960K       141        0
    ether_multi     1      0K       0K 166960K         8        0
            mrt     2      0K       0K 166960K         6        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    97    440K     440K 166960K        97        0
           exec     0      0K       1K 166960K       527        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   244    151K     171K 166960K     12973        0
       UVM aobj    30      5K       5K 166960K        31        0
     pinsyscall    41     82K     104K 166960K      2337        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        99        0
            NDP    11      0K       2K 166960K        69        0
           temp    81   8652K    8902K 166960K     45175        0
         kqueue    14     22K      29K 166960K       220        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      119    0      115     1     0     1     1     0     8    0
rtentry    176      135    0       48     5     0     5     5     0     8    0
unpcb      144      675    0      654     6     5     1     4     0     8    0
syncache   336       12    0       12     5     5     0     1     0     8    0
tcpqe       32        3    0        3     2     2     0     1     0     8    0
tcpcb      736      555    0      548    11     9     2     7     0     8    0
arp        128       20    0        6     1     0     1     1     0     8    0
inpcb      328     1321    0     1309    11     7     4     7     0     8    2
nd6        144       19    0        2     1     0     1     1     0     8    0
pkpcb       40        7    0        7     3     3     0     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
mppekey    1024       3    0        3     1     1     0     1     0     8    0
ppxss      1192      52    0       52     3     2     1     1     0     8    1
pppxif     1504       5    0        5     2     1     1     1     0     8    1
pfstscr     40        5    0        5     1     1     0     1     0     8    0
pffrag     232       26    0       20     2     1     1     1     0   482    0
pffrnode    88       26    0       20     2     1     1     1     0     8    0
pffrent     40       47    0       41     2     1     1     1     0     8    0
pfosfp      40     1429    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1429    0      714    21     0    21    21     0     8    0
pfrktable  1344       1    0        1     1     1     0     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pfstitem    24       91    0       19     1     0     1     1     0     8    0
pfstkey    128       99    0       29     3     0     3     3     0     8    0
pfstate    384       95    0       23     8     0     8     8     0     8    0
pfrule     1344      25    0       20     2     1     1     2     0     8    0
art_heap8  4096       4    0        1     4     1     3     3     0     8    0
art_heap4  256      555    0      160    29     3    26    28     0     8    0
art_table   40      559    0      161     5     0     5     5     0     8    0
art_node    32      134    0       63     1     0     1     1     0     8    0
sysvmsgpl   40       12    0       10     2     1     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112      107    0       97     1     0     1     1     0     8    0
shmpl      112       28    0        1     1     0     1     1     0     8    0
dirhash    1024      27    0       10     3     0     3     3     0     8    0
dino2pl    256     3590    0     2087    95     0    95    95     0     8    0
ffsino     296     3590    0     2087   117     0   117   117     0     8    0
nchpl      144     5371    0     4825    63    39    24    63     0     8    0
rtmask      32       11    0       11     3     2     1     1     0     8    1
uvmvnodes   80     4261    0        0    87     0    87    87     0     8    0
vnodes     216     4261    0        0   237     0   237   237     0     8    0
namei      1024   18117    0    18116     6     5     1     2     0     8    0
percpumem   16      114    0       66     1     0     1     1     0     8    0
kstatmem   264      108    0       84     4     1     3     3     0     8    1
scsiplug    72        5    0        5     2     2     0     1     0     8    0
scxspl     216    60128    0    60128    12    10     2     7     1     8    2
plimitpl   152      319    0      299     1     0     1     1     0     8    0
sigapl     424     1537    0     1482     9     1     8     9     0     8    0
knotepl    120      604    0        0    19     0    19    19     0     8    0
kqueuepl   224      408    0      394     6     4     2     5     0     8    1
pipepl     344      259    0      231    10     7     3     9     0     8    0
fdescpl    528     1490    0     1460     3     0     3     3     0     8    0
filepl     160     9389    0     9157    25    13    12    19     0     8    1
lockfpl    104      488    0      482     2     1     1     2     0     8    0
lockfspl    48      152    0      149     1     0     1     1     0     8    0
sessionpl  144       29    0       20     1     0     1     1     0     8    0
pgrppl      48       63    0       46     1     0     1     1     0     8    0
ucredpl    104     1271    0     1257     1     0     1     1     0     8    0
zombiepl   144     1510    0     1508     1     0     1     1     0     8    0
processpl  1248    1537    0     1482     6     1     5     6     0     8    0
procpl     664     3427    0     3361     8     1     7     8     0     8    1
sosppl     168        9    0        9     3     3     0     1     0     8    0
sockpl     752     2160    0     2123    24    17     7    17     0     8    2
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      3    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     110    0        0    14     0    14    14     0     8    0
mcl2k      2048      23    0        0     3     0     3     3     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      236    0        0    15     0    15    15     0     8    0
bufpl      280    26662    0    20519   440     0   440   440     0     8    0
anonpl      32    14921    0        0   121     0   121   121     0   246    0
amapchunkpl 152   44089    0    43567    56    26    30    34     0   158    7
amappl16   200     8833    0     8700    79    55    24    33     0     8    6
amappl15   192       70    0       70     1     1     0     1     0     8    0
amappl14   184      125    0      113     1     0     1     1     0     8    0
amappl13   176       21    0       21     1     1     0     1     0     8    0
amappl12   168     2170    0     2140     4     2     2     3     0     8    0
amappl11   160       72    0       58     1     0     1     1     0     8    0
amappl10   152        9    0        9     1     1     0     1     0     8    0
amappl9    144      253    0      253     1     1     0     1     0     8    0
amappl8    136       22    0       19     1     0     1     1     0     8    0
amappl7    128      115    0      102     1     0     1     1     0     8    0
amappl6    120      191    0      188     1     0     1     1     0     8    0
amappl5    112      135    0      125     1     0     1     1     0     8    0
amappl4    104      329    0      309     1     0     1     1     0     8    0
amappl3     96     8669    0     8555     5     1     4     4     0     8    0
amappl2     88      725    0      658     2     0     2     2     0     8    0
amappl1     80    14263    0    13660    16     2    14    15     0     8    0
amappl      88    12039    0    11867     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32       10    0       10     3     3     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       30    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1490    0     1460     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1490    0     1460     1     0     1     1     0     8    0
vmmpekpl   168    14211    0    14170     4     1     3     3     0     8    0
vmmpepl    168   105258    0   103183   144    28   116   121     0   357    1
vmsppl     488     1489    0     1459     6     2     4     5     0     8    0
rwobjpl     80    36587    0    31239   117     1   116   116     0     8    0
pdppl      4096    2988    0     2918   118    46    72    88     0     8    2
pvpl        32    24755    0        0   200     0   200   200     0   265    0
pmappl     256     1489    0     1459     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      314    0       73     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837feff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_const_cmp4(20,20) at __sanitizer_cov_trace_const_cmp4+0x3a
pool_cache_put(ffffffff83877f60,fffffd805cfec068) at pool_cache_put+0x5e
amap_wipeout(fffffd805b1701d8) at amap_wipeout+0x248
uvm_unmap_detach(ffff800038821a50,0) at uvm_unmap_detach+0x8a
uvm_map_teardown(fffffd805f2deb98) at uvm_map_teardown+0x360
exit1(ffff8000ffff2a70,0,0,1) at exit1+0x6fc
sys_exit(ffff8000ffff2a70,ffff800038821c20,ffff800038821b70) at sys_exit+0x1a
syscall(ffff800038821c20) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7d40add39900, count: 3
ddb{0}> trace
x86_ipi_db(ffffffff837feff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_const_cmp4(20,20) at __sanitizer_cov_trace_const_cmp4+0x3a
pool_cache_put(ffffffff83877f60,fffffd805cfec068) at pool_cache_put+0x5e
amap_wipeout(fffffd805b1701d8) at amap_wipeout+0x248
uvm_unmap_detach(ffff800038821a50,0) at uvm_unmap_detach+0x8a
uvm_map_teardown(fffffd805f2deb98) at uvm_map_teardown+0x360
exit1(ffff8000ffff2a70,0,0,1) at exit1+0x6fc
sys_exit(ffff8000ffff2a70,ffff800038821c20,ffff800038821b70) at sys_exit+0x1a
syscall(ffff800038821c20) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7d40add39900, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff832e48e2) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b0396c0,ffff80003c4c9350,ffff80003c4c9380) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c4c9320) at vfs_lookup+0x93a
namei(ffff80003c4c9320) at namei+0x7ca
domkdirat(ffff80003c4fa038,ffffff9c,200000000340,180) at domkdirat+0x8b
syscall(ffff80003c4c9500) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf5303737a60, count: 6
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff832e48e2) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b0396c0,ffff80003c4c9350,ffff80003c4c9380) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c4c9320) at vfs_lookup+0x93a
namei(ffff80003c4c9320) at namei+0x7ca
domkdirat(ffff80003c4fa038,ffffff9c,200000000340,180) at domkdirat+0x8b
syscall(ffff80003c4c9500) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf5303737a60, count: -9