last executing test programs:

1.014351526s ago: executing program 6 (id=963):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3})
ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4)
sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x2)

970.963221ms ago: executing program 3 (id=964):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x3, 0x3)
socket$inet(0x2, 0x8003, 0x0)
connect$unix(r0, &(0x7f0000000000), 0x10)
shutdown(r0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

955.626904ms ago: executing program 3 (id=967):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)="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", 0x541}], 0x1, 0x0}, 0x47def2425d34b2d2)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$net_inet_ip(&(0x7f0000002500)={0x4, 0x2, 0x0, 0x21}, 0x4, 0x0, 0x0, 0x0, 0x0)

933.039323ms ago: executing program 3 (id=970):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
r0 = socket(0x18, 0x3, 0x0)
getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffffd, 0x0, {0x0, 0x10000000000002}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x3, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)

850.928297ms ago: executing program 3 (id=972):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0})
unveil(0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r2 = socket(0x18, 0x3, 0xfd)
ioctl$FIONREAD(r2, 0x80206979, &(0x7f00000001c0))

850.477274ms ago: executing program 1 (id=975):
mkdir(&(0x7f0000000240)='./file0\x00', 0x4)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1012, 0xffffffffffffffff, 0x0)
unveil(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000080)='c\x00')
unveil(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f00000000c0)='r\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa)

850.278672ms ago: executing program 6 (id=976):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCPROMISC(r1, 0x20004269)

713.080842ms ago: executing program 1 (id=980):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5)
writev(r0, &(0x7f0000000040)=[{0x0}], 0x1)
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x7)
writev(r0, &(0x7f0000000580)=[{0x0}], 0x1)

688.110652ms ago: executing program 1 (id=982):
r0 = socket(0x18, 0x3, 0x50)
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
r1 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaa43d0cc1aa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f000001000e009078000b0008000003fc0000000400000009"])
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0))

595.616295ms ago: executing program 2 (id=984):
r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r0, 0xf3)
setuid(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xe16be29d38029921)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80, 0x109)
fchdir(r1)

511.282761ms ago: executing program 3 (id=986):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
mmap(&(0x7f0000404000/0x1000)=nil, 0x1000, 0x1, 0x2011, r0, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000523000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0)
ftruncate(r1, 0x8531)
mmap(&(0x7f00004a3000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

511.0594ms ago: executing program 2 (id=987):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xffffffff}, {0x4bf, 0x81, 0x0, 0x1}, {0x16, 0x35, 0x0, 0x800ee68}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="c2a6d600000000ecfe746fc6d6f77bf1aeb47b7f66", &(0x7f0000000000)=0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x3, 0x8}}}}}})

510.908101ms ago: executing program 2 (id=988):
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
setsid()
syz_open_pts()
ioctl$TIOCSCTTY(r1, 0x20007461)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000480)={0x80978c, 0x7, 0xef7fff01, 0x80a19a, "bf08000100f1675910812cc900", 0x2, 0x100})

510.714458ms ago: executing program 2 (id=989):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x81, 0x3, 0x48}, {0x48, 0x8, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]})
pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0xfffffffffffffff8)
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6d6000000005ae49d73988d800f00ecfe746fb8112b2ed765f7793296ac25e009881c3406fd0ee73b0971c2ccfc1a632a0991b36db83bb65cde5a2806b8d91dad4fdc48e08be888e2c09d1bf2d4858793ddd2", &(0x7f0000000000)=0x54, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)

500.527026ms ago: executing program 3 (id=991):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
syz_emit_ethernet(0x26, &(0x7f0000000080)={@random="a50a1b311724", @random="b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x18, 0xfffd, 0x0, 0x7, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@generic={0xe, 0xdf}}}}})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x6503, 0x2a3d, 0xe3, 0xfffffbff, "e8a5973b95390d23119fd164229399c8076429d3", 0x3, 0xffffff1c})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

437.740443ms ago: executing program 2 (id=992):
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8)

437.124764ms ago: executing program 1 (id=994):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2)
readv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/1, 0x1}], 0x1)
writev(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9b", 0x1}], 0x1)

398.243414ms ago: executing program 0 (id=996):
select(0x5b, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xe, 0x4, 0x2800000000000000, 0x181c, 0x8, 0x423f}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0xc, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FIONBIO(r0, 0x80487008, &(0x7f0000000140)=0x2)

390.644248ms ago: executing program 6 (id=998):
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd})
r0 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
setuid(0xffffffffffffffff)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x10080000000000d}, {0x7ffff7ffffffffff, 0xc}}, 0x0)

338.513114ms ago: executing program 4 (id=1001):
r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r0, 0xf3)
setuid(0xffffffffffffffff)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')

329.337238ms ago: executing program 7 (id=1002):
r0 = socket(0x2, 0x4001, 0x0)
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x2, r0)
dup2(r1, r2)
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r4)

327.781749ms ago: executing program 6 (id=1003):
ioctl$TIOCSETA(0xffffffffffffffff, 0xc008441e, &(0x7f00000000c0)={0x10000002, 0xfffffffb, 0xfeefffff, 0x8000002, "080054d1000000010000000100000f1e0400", 0xffffffff, 0x10000})
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

324.260413ms ago: executing program 5 (id=1004):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x81, 0x3, 0x48}, {0x48, 0x8, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6d6000000005ae49d73988d800f00ecfe746fb8112b2ed765f7793296ac25e009881c3406fd0ee73b0971c2ccfc1a632a0991b36db83bb65cde5a2806b8d91dad4fdc48e08be888e2c09d1bf2d4858793ddd26e513a52656b6a28c11ea47c", &(0x7f0000000000)=0x60, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[])

289.143454ms ago: executing program 4 (id=1005):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x81, 0x4, 0x48}, {0x4c, 0x6, 0xff}, {0x6, 0x82, 0x6, 0xfffff805}]})
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x3, 0x1, './file0\x00'}, 0xa)
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6d6000000005ae49d73988d800f00ecfe746fb8112b2ed765f7796e07009fa79397063296ac25e009881c3406199e7cdd0971c2cdfc1a632a0991b36db83bb65cde5a2806b8d91dad4fdc48e08be888e2c09d", &(0x7f0000000000)=0x54, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[])

283.148271ms ago: executing program 6 (id=1006):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x3c, 0xf0, 0xff}, {0x6, 0x8, 0x12, 0xfffff802}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a6d680148b2bbfe0b5c472f1b941cda4cf0000", &(0x7f0000000000)=0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f00000001c0)="e21ad30000000000000004a41386", 0xe)

201.054841ms ago: executing program 5 (id=1007):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x5, 0x101, 0x80000001, 0x81b0, 0x8, 0x10, [{0x0, 0x2890, 0x352c, 0x71002}, {0x6, 0x9, 0x6, 0xfffffff9}, {0x104, 0xa, 0x0, 0x7f}, {0x4, 0x7fe, 0x8009, 0x7}, {0x401, 0x8, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x0, 0x800, 0xff, 0x8}, {0x2, 0x6, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1c9, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x2, 0x8, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x5e})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0))

200.700222ms ago: executing program 4 (id=1008):
chroot(&(0x7f0000000740)='.\x00')
rmdir(0x0)
select(0x40, &(0x7f0000000080)={0xc2, 0x9, 0xa7d1, 0x2, 0x9, 0xfefffffffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

200.506773ms ago: executing program 7 (id=1009):
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x10000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7fe, 0x16, 0x3, 0x5fe, 0x80000004, 0x80008003, 0x10001, 0x10, [{0x6, 0x2, 0x4, 0x71002}, {0x10000, 0x8, 0x8, 0x8001}, {0x7, 0x0, 0x3, 0x3b}, {0x8000001, 0x80c, 0x5}, {0x5, 0x4, 0x2840, 0x3}, {0x2, 0x0, 0xfffffffe, 0x99}, {0xa1, 0x1, 0x6, 0x2000006d}, {0x106, 0x1803, 0x14, 0x8}, {0x0, 0x80, 0x5, 0x8683}, {0x0, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x1000, 0x3}, {0x7ff, 0xb, 0x6, 0x9}, {0x400, 0x4, 0x40000008, 0x4}, {0x29a71717, 0xfffefffa, 0x1, 0x6}, {0xc, 0x7, 0x3, 0x7fff}, {0x0, 0x1, 0x1002, 0x5}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9)

170.117975ms ago: executing program 1 (id=1010):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8008, 0x7}, {0x101, 0x8, 0x1, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x4}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x40000000, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0)

169.960004ms ago: executing program 6 (id=1011):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x110)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
ftruncate(r0, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0)
close(r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

169.691415ms ago: executing program 4 (id=1012):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa)
listen(r0, 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa)
r2 = socket(0x2, 0x8002, 0x0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
closefrom(r3)

111.327914ms ago: executing program 4 (id=1013):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000780)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x81, 0x3, 0x48}, {0x48, 0x8, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x1}, 0x6)
sysctl$kern(0x0, 0x0, &(0x7f0000000080)="c2c50700000000000000e3dbfe506230f2e8d3546aec6b346d9d73a5c94dc2fbe9477345ea299cf7df81a0361b0201c8447cfb2a48b286c0a2ee154f77949bc034e8edf4db5eb26c2f8f385d3c6e9c84a365173e9a6e917de2d2c50e51e8a1d9ca", &(0x7f0000000000)=0x61, 0x0, 0x53)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f00000003c0)={@empty, @random="3e9ccb4db2bf", [], {@generic={0x3c07}}})

111.119649ms ago: executing program 4 (id=1014):
open(&(0x7f0000000040)='./file1\x00', 0x200, 0x104)
r0 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf64, 0x1, 0xfffffffffffffffc, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000004, 0xf, 0x4, 0x5, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0xffffffffffffff5c], [0x8000, 0x8003, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x0, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x2, 0x1, 0xffffffff, 0x7d02}, {0xb0, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x732, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x209, 0x2000000000000002}, {0x0, 0x2, 0xfffffff9}, {0x27, 0x100, 0x200, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x7, 0x6d5, 0x4}}})
kevent(r0, &(0x7f0000000040), 0x7fff, 0x0, 0x57d, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000080), 0xff, 0x0, 0x1bb79, 0x0)
acct(0x0)
acct(&(0x7f0000000280)='./file1\x00')

110.800033ms ago: executing program 5 (id=1015):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)

109.277394ms ago: executing program 7 (id=1016):
open(&(0x7f0000000080)='./file0\x00', 0x9cab835cfdc52675, 0x0)
setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f})
r0 = getpid()
setreuid(0xee00, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8})
setuid(0xffffffffffffffff)
select(0x40, &(0x7f0000000100)={0x4, 0xfffffffffffffff8, 0x315e, 0x4, 0xb016, 0x9, 0x4e, 0x1}, &(0x7f0000000140)={0x5, 0x1, 0x8001, 0x1, 0xfffffffffffffc00, 0x5, 0x8}, &(0x7f00000001c0)={0x5, 0x9, 0x9, 0x9, 0x800, 0x2, 0x8, 0x6}, &(0x7f0000000200)={0x5, 0x8c0})

108.343419ms ago: executing program 0 (id=1017):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0xc003, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

107.897695ms ago: executing program 1 (id=1018):
r0 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r0, 0x20007461)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
dup3(r1, r0, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x4, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0x9], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0x80}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x1000, 0x8}], {0x1, 0x5, 0xcf61, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}})
r2 = kqueue()
kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)

67.952792ms ago: executing program 5 (id=1019):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x18, 0x3, 0x0)
close(r1)
setuid(0xffffffffffffffff)
socket$inet6(0x18, 0x1, 0x6)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))

66.480152ms ago: executing program 0 (id=1020):
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8)
open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)

60.939947ms ago: executing program 7 (id=1021):
r0 = socket(0x18, 0x2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = fcntl$dupfd(r1, 0x2, r1)
close(r2)
close(r0)
socket(0x2, 0x2, 0x0)
socket(0x18, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4)

42.206055ms ago: executing program 5 (id=1022):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xa0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x2, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x4000008, 0x95}, {0x81, 0x800, 0x9d29, 0x400006d}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x9, 0x4, 0xaf}, {0x5, 0x7ffffffe, 0xd1b, 0x88}, {0x1d0, 0xa, 0x80, 0x4}, {0x7fc, 0x10000009, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6, 0x7ff}, {0x0, 0xe6c4c9a1, 0x2, 0x7fff}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0})
close(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x40, &(0x7f0000000580)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\t4', 0xa, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1}]}}}}}})

19.701825ms ago: executing program 7 (id=1023):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x7, 0x88, 0x8008, 0x7}, {0x101, 0x9, 0x0, 0x9}, {0x9, 0xd, 0xe}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11088}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x7, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
socketpair(0x2, 0x3, 0x81, 0x0)

19.420373ms ago: executing program 0 (id=1024):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xe}, {0x4bf, 0x81, 0x0, 0x1}, {0x16, 0x35, 0x0, 0x800ee68}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="7c2aa7b97e647c6cb381fe18e59f710b899d6ad6dd6815426ed79d8aef4ecb88665bc18f9f804b5e", 0x28}], 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004745f, &(0x7f0000000000)=0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @empty, [], {@arp={0x8035, @generic={0xf, 0x6559, 0x6, 0x0, 0x9, @local, "", @local, "63a00d32ab9093d0ea091d39e443e0ef"}}}})

19.250198ms ago: executing program 0 (id=1025):
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x5, 0x6, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x3, 0x7}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd9980058000303b0300000000000000000000ffff7f000001fe4d1aafbaf5c2c66da2acf4faeb1e580100907838"])
openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)

5.16243ms ago: executing program 2 (id=1026):
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x145)
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd})
r0 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
setuid(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ppoll(0x0, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000700)='w\x00')

4.555147ms ago: executing program 0 (id=1027):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x3c)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'})
r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0})
ftruncate(r0, 0x84002)

564.058µs ago: executing program 5 (id=1028):
connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7980)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCCLR(r0, 0xc0a86b07, &(0x7f0000000200)={0x0, 0x10000, 0x0})

0s ago: executing program 7 (id=1029):
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x101, 0x4, 0x71000}, {0x7, 0x88, 0x20008, 0x7}, {0x5, 0x2, 0x0, 0x9}, {0x3, 0x900, 0xe, 0x1}, {0x401, 0x200326, 0x2800, 0xeb}, {0x81, 0x27f6, 0x4, 0x99}, {0x5, 0x4, 0x8, 0x6d}, {0xc, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0x5, 0x1088}, {0x1e6, 0x10005, 0x8c, 0x6}, {0x7fe, 0x9, 0x8}, {0xb8e, 0x4, 0x8, 0x89}, {0x29a7371c, 0x3, 0x1, 0x5}, {0x4, 0x7, 0x4, 0xffffffff}, {0x0, 0x2, 0x1002, 0x1}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000100)="c9edd234", 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts.
pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00)

Connection to 10.128.0.232 closed by remote host.
login: init: getty repeating too quickly on port /dev/tty00, sleeping
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
pppx: unable to set addresses for pppx1, error=17
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
pppx: unable to set addresses for pppx1, error=17
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
pppx: unable to set addresses for pppx1, error=17
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
uvm_fault(0xffffffff8396e8e0, 0xffff800029ef5000, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      pvclock_get+0x53:       movl    0(%r15),%r12d
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*206143  66656      0           0  0x4000000    0  syz-executor
pvclock_get(ffffffff838ae100) at pvclock_get+0x53
nsecuptime() at nsecuptime+0x62
clockintr_dispatch(ffff80002a7c7580) at clockintr_dispatch+0xe8
lapic_clockintr(0,0) at lapic_clockintr+0x43
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x9e
uvm_pageclean(fffffd800736f480) at uvm_pageclean+0x16c
uvm_obj_free(fffffd806bfab670) at uvm_obj_free+0x95
buf_dealloc_mem(fffffd806bfab5b0) at buf_dealloc_mem+0x14e
buf_put(fffffd806bfab5b0) at buf_put+0x1d9
brelse(fffffd806bfab5b0) at brelse+0x397
writedisklabel(d02,ffffffff82802f80,ffff800000039000) at writedisklabel+0x1b8
sdioctl(d02,84946467,ffff800001556800,3,ffff80002a775ca0) at sdioctl+0x959
VOP_IOCTL(fffffd806cb73488,84946467,ffff800001556800,3,fffffd8007ffd888,ffff80002a775ca0) at VOP_IOCTL+0xa3
end trace frame: 0xffff80002a7c7a50, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff8396e8e0, 0xffff800029ef5000, 0, 1) -> e
ddb>