last executing test programs:

7.481093941s ago: executing program 3 (id=448):
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffffffff, 0xffffffff, 0x3, 0x1, 0xd, 0x22, 0x2, 0x1, 0x1, 0x2, 0x7e})
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x9, 0x9, 0x5fffff5d, "9c090000007e0804002f4c0000001e9e68cd3304", 0x400, 0x207f})
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)="7c52f3a0b6980f2186d8472e99ee5831d0e6a406d5221e433404acaa4033f87230aac04964114a27c081aed010cfd34200d85b7c173ab5fc2cde89bf40367f17c38e53312dd5b0064a1ff34d35939e3bfd2270b2d7141cccb488a3362460f50dabd8a296c6fd34aab07452c1cba043ad995424744ccdbc2a3871c575189c01a06723630412b5ebc159813d7fc8f20570c5813474aa96458dc157d3cecd9a145e1c07", 0xa2}, {&(0x7f0000000480)}, {&(0x7f00000003c0)="403f30e4ff49d658e7c6f5d730470953855afa3e47adf74efd6de0c5eeb26d41c25c297eb5923bc2b7c9f0241ec9cd4aa9f9452bc5f3eaf81214724c5198b2ce83f21b883eea835589e87491b91a8c921aa022e1356e46fb261da9547f6cd0e7728d7925622c53600eccba86b09a7152bf242fd3fd5b4b77bf96fe21cd19003524f937d33daba545ab96374f95aa442c3c68e756a7a0", 0x96}, {&(0x7f00000009c0)="c831a846578d04e44b87404fe51fc2ac67c2f135390decf62fe35ea90359e80d5fa81869ae13a23a443d8e7a939dff3528bb17602b52e8b21d86e7c822616dbc6acc9e8eac60daaf099828b0b3157cf224669ced5a54dc47f650d2813f68cead400eab3d5ce64ff3069e183c0938f30fb15d0be46da280fab9ddd3a1b0d2ddd051ba05aab39a6fc3ee411b791a1227b90f7f8761f07b07535eb969584881cee0ff94bb9eac0373b3ea188437ce850d5d65c87fdde011b950ef9d469198a07f89176b0b825265aa6b6894ce9429fef277d78f90335678cc3d6ff4f9e2a551ecf546563d635b44c7fe388ff2dbd4f746523c9a1d622d8a6c5f60f79e7b601b3de4e04a94f1b4ef1ff9cb111fafc51ef28bc298e620031b9e7e7be6a41fdfacbb656854c872861d731acd108f745b6b906788d9aaec9415a1699c0367706dfbec8c01198627265026cec94cd599dda8b2798e49613aee5d47e9c0950e56cf81a19234e02ee6b4594b1e02230138c9963067a324e578b1fd3c3350b14b1134683e90e3dd84b223de8c0e6f525575c5092b5f471fe5b7b452d334a99e1cd57af5fcd859d0fa527ef63bd90e1c6a7ff5c8ec2d85f1d1ada06b76738f29ff4c7806224d9c95ad7f26b66aa017e47577d8a1f305e311aa52304ab4a8d8485abc479740b5d3000d46c5923b8307601917ac729b95ef8b810356453cda12aadc437387c6ca4558235c4cb1e0f648d5885895edae5885022cc960faeb461774669e1c960665193bbe494c577cad4a366c55b950ff7a8a9728c6ced29432b0cc315c8d5ca0b460bface797395a4d00d452fd1ab12829f4e96f2ec7cd4a479b973db789ec577aab3690b9c8f341927100e5f376912e0854251568f3a14f7b0160cc0592b2a3900fbb8d948c53388170df2cdeaf339e664cfb3eaf050b90a994571b77d633c5952ce5ae91188e02ddccd14ecfebf6e7213ff6bd54a65b3e322ae09eaae8c4752d3c302f2d93ef5e7d12a86508846c15d3aaa87a1a21a7b1247dea862549b67245bfe8bb5ded9f0da2e9f4c175cf6f5150345b62fdc1cde59a3c70b961997a529a29aa292e06c9f827f296e2aac880e42b92c535046d0502cf938e6620f81576c5c490857e2f0a6553dbe509909d0f0eddf4a96f14c1", 0x335}, {0x0}], 0x5)
unveil(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='c\x00')

7.419925246s ago: executing program 3 (id=451):
r0 = msgget$private(0x0, 0x730)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5e5f)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x10, 0x2}, {0x6, 0x12, 0xe4, 0x103}, {0x6, 0xa, 0x83, 0x400f}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffff000001"], 0x18, 0x1}, 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000000)="000000000000eaffffff0000", &(0x7f0000000080)=0xc, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
sendmmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x238}}, 0x10, 0x400)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000200), 0x1, 0x0, 0x9b68, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TIOCSETA(r2, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x0, 0x6})
syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[])
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x8000, 0x0, 0x6, 0x101}]})
msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0xee01)

7.224928451s ago: executing program 3 (id=452):
setrlimit(0x5, &(0x7f0000000980)={0xb, 0x54})
syz_emit_ethernet(0x20a, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="7008000e90783874040203"])
r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
dup2(0xffffffffffffffff, r0)
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

6.315378838s ago: executing program 4 (id=501):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x90)
r1 = socket$inet(0x2, 0x1, 0x2)
r2 = dup2(r0, r1)
recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000040)=@un=@abs, 0x8, &(0x7f0000000340)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/107, 0x6b}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x800)
getpeername$inet(r0, &(0x7f00000013c0), &(0x7f0000001400)=0xc)
ioctl$VT_SETMODE(r2, 0x80087602, &(0x7f0000001440)={0x0, 0x93, 0x2, 0x61, 0x2}) (async)
ioctl$VT_SETMODE(r2, 0x80087602, &(0x7f0000001440)={0x0, 0x93, 0x2, 0x61, 0x2})
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000001480)={0xfffff000, 0xa1, 0x7, 0x4, "dd5286a24f517e95da552cd0988080c2e78151e0", 0x3, 0x5a1012dc})
ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f00000014c0))
getpeername$inet6(r0, &(0x7f0000001500), &(0x7f0000001540)=0xc)
r3 = dup(r1)
dup2(r2, r0) (async)
r4 = dup2(r2, r0)
pwrite(r1, &(0x7f0000001580)="3fda5d8ced6492e6acac44201765d14634c66e741f35eb2a1393d77df4b82fddc85bbd49aa13a607275d54fdee79e1a5eb39a3a0afa0c4c740837570d69cdc616b56dca1edef6b38f75672f133f5ffca42512e8fa099b640ced6bc2ec91122ea01e960e75bc519f7d1e31d033fae25e21be2a0bb2dfbd5d365bf483a30f3a0a2c238b5570e1ef450e49cd53a04dcd0f3937f02ef89e68a68cd8b9cf9d194edf46ae16bd7c9de516bcbce1adb807a8cbb93ae9096123a25bd4cd7883fff4c18b73c8bf99c1162c1771c55f9460e58c67dbd368addd5deb7fbb3b0d1fc9c297915fa7b51fe15189662422ef34573c77055f272", 0xf2, 0x81) (async)
pwrite(r1, &(0x7f0000001580)="3fda5d8ced6492e6acac44201765d14634c66e741f35eb2a1393d77df4b82fddc85bbd49aa13a607275d54fdee79e1a5eb39a3a0afa0c4c740837570d69cdc616b56dca1edef6b38f75672f133f5ffca42512e8fa099b640ced6bc2ec91122ea01e960e75bc519f7d1e31d033fae25e21be2a0bb2dfbd5d365bf483a30f3a0a2c238b5570e1ef450e49cd53a04dcd0f3937f02ef89e68a68cd8b9cf9d194edf46ae16bd7c9de516bcbce1adb807a8cbb93ae9096123a25bd4cd7883fff4c18b73c8bf99c1162c1771c55f9460e58c67dbd368addd5deb7fbb3b0d1fc9c297915fa7b51fe15189662422ef34573c77055f272", 0xf2, 0x81)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001680), 0x8, 0x0)
kqueue() (async)
r6 = kqueue()
kevent(r6, &(0x7f00000016c0)=[{{r3}, 0xfffffffffffffffc, 0x85, 0xf0000000, 0xa}, {{r4}, 0xfffffffffffffff9, 0x50, 0x20, 0xffffffffffff95fd, 0x5}, {{r3}, 0xfffffffffffffffa, 0x8, 0x62576bcd7be0ecbb, 0x2, 0x6}, {{r3}, 0xfffffffffffffff9, 0x2, 0x10, 0x400, 0x9fb}, {{r5}, 0xfffffffffffffffc, 0x1e, 0x1, 0x2, 0x1}, {{r0}, 0x8000000000000002, 0x60, 0x8, 0x8, 0x28}], 0xc, &(0x7f0000001780)=[{{}, 0xfffffffffffffff9, 0x18, 0x8, 0x6, 0xd055}], 0x1, &(0x7f00000017c0)={0x9, 0x3})
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000001800)={'./file0\x00', 0x0, 0x0, 0x7, 0x0, 0xd8b, 0x1, 0x4c, 0x2, 0x0, 0x2000000, 0x456})
ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f0000001880)) (async)
ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f0000001880))
fcntl$getown(r6, 0x5) (async)
r7 = fcntl$getown(r6, 0x5)
fcntl$lock(r2, 0x9, &(0x7f00000018c0)={0x2, 0x0, 0x9, 0x100, r7})
setsockopt$sock_linger(r6, 0xffff, 0x80, &(0x7f0000001900)={0x8001, 0x1ff}, 0x8) (async)
setsockopt$sock_linger(r6, 0xffff, 0x80, &(0x7f0000001900)={0x8001, 0x1ff}, 0x8)
r8 = socket$inet(0x2, 0x5, 0x9)
setsockopt$inet_opts(r8, 0x0, 0x0, &(0x7f0000001940)="ae44a39e30b319862934e83ddf80d40b707ae08462be96b382f2044e543761a7256b6d62199d3afaa38c1e1e477d9d53c0f27abc1baccb842bce09837fb958573e7d7ca47d1d9c7f517d0b10ee6d3d952226049d2ef584c9a2f91be13474a672e88a85b82b1e85a7f5e7d3ec684a322e9bdd484c81bdaf4cdbfac8c0aedd6c93dbd35df56267dfc73170b1b1f4e493d1f1f0b02493665ee12bcf730dca5ac8ffca22febecbcc65395bcd31832781e423d2f6f88344b94a1a36", 0xb9)
ioctl$WSKBDIO_SETBACKLIGHT(r0, 0x800c5712, &(0x7f0000001a00)={0x8, 0xc467, 0x2})
fcntl$lock(r1, 0x8, &(0x7f0000001a40)={0x2, 0x0, 0x6, 0x100000000000, r7})
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000001a80)={0x0, 0xf}, 0x10) (async)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000001a80)={0x0, 0xf}, 0x10)
ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000001ac0))
sysctl$net_inet_icmp(&(0x7f0000001b00)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000001b40)="c13423f16e485c2f430c9d43d108e958165b8153a77717794706b404277b9757e47aa4b5ad1b1fd67c66847ef79dfe0adbe86430ac6161b611941e703b77952190", &(0x7f0000001bc0)=0x41, &(0x7f0000001c00)="e3305ef1f7fd3ca546c7520092430fd78a49c621ef7f89af866407249b07117d959b31ad3a4dce34ffd7efd74e0acb3d2f24f9313d2f31968fd28df1207d5e60fba1263c20ed593e74f456c7b58cc32e7257c4baa36cf06e834e3c1c9619f3e4e179b7e68c4333878130d03fdd8b7d361c8a7af25d99", 0x76) (async)
sysctl$net_inet_icmp(&(0x7f0000001b00)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000001b40)="c13423f16e485c2f430c9d43d108e958165b8153a77717794706b404277b9757e47aa4b5ad1b1fd67c66847ef79dfe0adbe86430ac6161b611941e703b77952190", &(0x7f0000001bc0)=0x41, &(0x7f0000001c00)="e3305ef1f7fd3ca546c7520092430fd78a49c621ef7f89af866407249b07117d959b31ad3a4dce34ffd7efd74e0acb3d2f24f9313d2f31968fd28df1207d5e60fba1263c20ed593e74f456c7b58cc32e7257c4baa36cf06e834e3c1c9619f3e4e179b7e68c4333878130d03fdd8b7d361c8a7af25d99", 0x76)
ioctl$TIOCFLUSH(r4, 0x80047410, &(0x7f0000001c80)=0x2)
sysctl$net_inet_icmp(&(0x7f0000001cc0)={0x4, 0x2, 0x1, 0x3}, 0x4, &(0x7f0000001d00)="32f480a0ac7cf2ab1d652e64f37836ff9a74bb3b", &(0x7f0000001d40)=0x14, &(0x7f0000001d80)="12a68df1f6ef2b9a71be2e1848a5f63c79ab181378689cb4a63e9d13d4918296021c18ab7f5f72df28cafcb7c670bc5a98ed1d5b4493e1b69be2ea3b8ab193c1272afe4c57f7da84ffbe6736bd6d2033c39b3b2fbdf46e8d64949f4037e59f8eea1bfcf7df26d3c2b37b318596539e23a813a9e0f03b8de69bf6a89044be42407c2a4280b4ef1f32df87181aeb06928b4bb1a3540d73cd5c", 0x98)
close(r8) (async)
close(r8)

6.31502548s ago: executing program 4 (id=502):
semop(0xffffffffffffffff, 0x0, 0x0)
r0 = kqueue()
r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10000)
r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000240), 0x10, 0x0)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x32, 0x0, 0x0)
r5 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r5, 0x80206979, &(0x7f00000000c0))
r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0)
r7 = kqueue()
r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSETIF(r9, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r9, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xf8e, 0x8b, 0x0, 0x5}, {0xc, 0x6, 0x0, 0x2}, {0x1006, 0xa, 0x4, 0x1}]})
ioctl$BIOCSETF(r9, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = getpgrp()
fcntl$lock(r11, 0x9, &(0x7f0000000580)={0x1, 0x0, 0x4, 0x8, r12})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
kevent(r0, &(0x7f0000000200)=[{{r1}, 0xfffffffffffffffb, 0x0, 0x1, 0x2, 0x8000000000000001}, {{r2}, 0xfffffffffffffffe, 0x84, 0x1, 0x0, 0x2b0}], 0x7, &(0x7f00000003c0)=[{{r3}, 0xfffffffffffffffb, 0x10, 0x40, 0x3, 0x5}, {{}, 0xfffffffffffffffa, 0x35, 0x20000000, 0x5, 0x6}, {{r4}, 0xfffffffffffffff9, 0x2, 0x40, 0x1, 0x9}, {{r5}, 0xffffffffffffffff, 0xc0, 0x1, 0x6, 0x7}, {{r6}, 0xfffffffffffffffe, 0x21, 0x20, 0x4, 0x1}, {{r7}, 0xfffffffffffffffd, 0x8, 0x2, 0x6e, 0x7}, {{r8}, 0xfffffffffffffffc, 0x0, 0x20, 0x0, 0x6}, {{r9}, 0xfffffffffffffff9, 0x2b, 0x10, 0x0, 0x10}, {{r10}, 0xfffffffffffffffc, 0x4e, 0xf0000000, 0x2, 0x5}, {{r13}, 0xfffffffffffffffb, 0x20, 0x8, 0x0, 0xfb}], 0x2, &(0x7f0000000500)={0x7, 0x9})
r14 = syz_open_pts()
ioctl$FIOASYNC(r14, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$TIOCSETAF(r14, 0x802c7416, &(0x7f0000000080)={0x293, 0x7, 0x3, 0x400, "2c7f88d112afd4f3bfed0f274ca9576eb663855b", 0x2000794, 0xfffe})
writev(r14, &(0x7f00000002c0)=[{&(0x7f0000000140)="735310a81412a43e464e1b3737f3662088ea6e5053fdfdd756321c410a675bf3a57175103b152009", 0x28}, {0x0}], 0x2)
r15 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4708fe5bbcb8832d, 0x0)
ioctl$BIOCSETF(r15, 0x80104267, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x87, 0x5, 0x3, 0x7}, {0x671, 0x40, 0xbc, 0x1}, {0xabe0, 0xff, 0x0, 0x4}, {0x4, 0x2}, {0x4, 0x0, 0x2, 0x4}]})
msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)

4.46442087s ago: executing program 1 (id=553):
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x19, 0xffff, 0x200499, "084880fa87f4ffbcda0988d11554e90d6602ff07", 0xe6, 0x3})
readv(r1, &(0x7f0000000640)=[{&(0x7f0000000080)=""/88, 0x58}, {0x0}], 0x2)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000440)="a8a3f5f1a24ae0e82f9f7c52797ce4f0c43f8156431c20175ca5e2760418f74a4569bcb65e82f71d14001c49f1246567e6dd8bd407680168a3db71755b6af54e8ac149e3292afdb58781e0ce13950900782c8dd443", 0x55}], 0x1)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x106)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000040)="06950100000000000000720d294b00", &(0x7f00000000c0)=0xfffffffffffffeb8, 0x0, 0x12)
setrlimit(0x1, &(0x7f00000011c0))
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffa, 0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x4000}, 0x100000000006, 0x861, 0x0, 0x0, 0x80000000000000, 0xffffffff, 0x6, 0xfffffffffffffffd})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x118)
write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
sync()
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000040)='./file0\x00', r6, 0x2})

2.336032986s ago: executing program 0 (id=595):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0xee4bce5bb233ab95)
r1 = socket(0x2, 0x1, 0x0)
r2 = dup(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
shutdown(r1, 0x1)
r4 = dup(r3)
recvmmsg(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0)
r5 = dup2(r2, r4)
execve(0x0, 0x0, 0x0)
shutdown(r1, 0x2)
poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0)
poll(0x0, 0x0, 0x401)
close(r0)
ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000100)={0x68, 0x7fffffff, 0x4, 0x5, "ddd833ca309dc712657937f21d9df221b5b0b0e0", 0x0, 0x8})
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
ktrace(&(0x7f00000000c0)='./file0\x00', 0x2, 0x72a, 0xffffffffffffffff)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x40000030, 0x0)

1.694521029s ago: executing program 1 (id=616):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="f96825d807ee62fb60cd9c6c40fe1efe1d7df44bc248388f10b09c44f3f84592", 0x20}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e1635a54862902af124413450000a1f515df5a9da4070000006ebb807e7b224fae8f4317bf2356000000e2b69e2400000000000000", &(0x7f0000000080)=0x35, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x1)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1)
setrlimit(0x0, &(0x7f0000000140)={0x80000001, 0x9})
ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4)
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6)
acct(&(0x7f0000000080)='./file0\x00')
acct(&(0x7f0000000000)='./file0\x00')

1.652467477s ago: executing program 1 (id=619):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x2, 0x3, 0x3)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async)
write(r0, &(0x7f0000000000)="1fb4f4bf89bd44b9e64fbeee1c54c87034a8f2d2edf49c663446479de05b97d0669d793796e4a2ee70bc382dd1a481be12ee23564e34", 0x36) (async)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x0, 0x10, 0x3}, 0xc)

1.598780135s ago: executing program 2 (id=621):
mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x17f6)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x107)
mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x17f6) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x107) (async)

1.598075396s ago: executing program 1 (id=623):
select(0xffffffffffffff87, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xc)

1.597206831s ago: executing program 1 (id=625):
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="91a6e341d8bb", @random="a462dbf28d4f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x5, 0x1, 0x0, @rand_addr, @rand_addr=0x2}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x8}}}}})
sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f1536c00", 0x4)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000000)="d93ea979", 0x4)

470.485042ms ago: executing program 5 (id=626):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}, {&(0x7f0000000080)="9815ee", 0x3}], 0x2)
write(r0, &(0x7f0000000200)="092003000000000000000045b65369db0000ff4278ad535c2a413f308cbbaee4c6987f31dbde0000007b000a", 0x2c)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000240)="c02a166f7bb36876cdd948ec609d2b3905d691d388e765eec4d5782500d4d5da1c732520ea8179bde1ce506defad36781e0000000000000069a77cc144ec6dc9a2c991462b97c76542ac2eacf7c9719c54a435dde5883b9b37616f7b4d6adbb2785c0620ae839869d54c209bb98979517e03a54fbc0c14a7dafb2e25550976c5b2411607d13346ba462d336e3b22c92863", 0x91}], 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="100000d95bff000401"], 0x10, 0x400}, 0xa)

469.81889ms ago: executing program 3 (id=627):
openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async)
r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
close(r0)
select(0x40, &(0x7f0000000180)={0x1fd, 0x44809e9d, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181c, 0x100000000000008, 0x9}, 0x0, 0x0, 0x0)
kqueue() (async)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1)
r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f00000000c0)=0x8000005) (async)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f00000000c0)=0x8000005)

469.44989ms ago: executing program 2 (id=628):
mkdir(&(0x7f0000000500)='./file0\x00', 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xd)
setuid(0xffffffffffffffff) (async)
setuid(0xffffffffffffffff)
chdir(&(0x7f00000001c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)
open(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x0)
pipe(&(0x7f0000000640))
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
symlink(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') (async)
symlink(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
chmod(&(0x7f00000004c0)='./file0\x00', 0x0)
setreuid(0xee00, 0x0) (async)
setreuid(0xee00, 0x0)
open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) (async)
r4 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)
r5 = getuid()
fchown(r4, r5, 0xffffffffffffffff) (async)
fchown(r4, r5, 0xffffffffffffffff)
truncate(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a54f1c2) (async)
truncate(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a54f1c2)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x81, 0x0, 0xe, 0xb41}, {0x3c, 0xfe, 0xf, 0x7}, {0x0, 0xe7, 0x1, 0x9}, {0x6, 0xfd, 0xa, 0x418f5e89}]}) (async)
ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x81, 0x0, 0xe, 0xb41}, {0x3c, 0xfe, 0xf, 0x7}, {0x0, 0xe7, 0x1, 0x9}, {0x6, 0xfd, 0xa, 0x418f5e89}]})
syz_emit_ethernet(0x36, &(0x7f00000024c0)=ANY=[])
setreuid(0x0, r5)
fchdir(r4)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
setrlimit(0x0, &(0x7f0000000480)={0x3, 0x7fff}) (async)
setrlimit(0x0, &(0x7f0000000480)={0x3, 0x7fff})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0x6, "3901224200", 0x2007, 0xffffff7f}) (async)
ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0x6, "3901224200", 0x2007, 0xffffff7f})

468.987976ms ago: executing program 3 (id=629):
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x4001, 0x0)
r1 = fcntl$dupfd(r0, 0x2, r0)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
r3 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000180)={0x5, 0x80000001}, 0x8)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffd}, {0x1}, {0x6, 0x0, 0x0, 0xff}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100))

460.949302ms ago: executing program 1 (id=631):
r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000040))
ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, &(0x7f0000000080)=0x8)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c7004933c8c0a4, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x9, 0x9, 0x81, 0x6}, {0xb, 0x3e, 0x0, 0x6}, {0x4, 0x10, 0x4, 0xffffffff}]})
ioctl$TIOCSCTTY(r0, 0x20007461)
r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
getsockname$inet(r2, &(0x7f0000000200), &(0x7f0000000240)=0xc)
getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x800, 0x101)
ioctl$BIOCLOCK(r3, 0x20004276)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x8000, 0x1, 0x17, 0x2}]})
ioctl$TIOCCBRK(r0, 0x2000747a)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0)
r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x10, 0x0)
poll(&(0x7f00000004c0)=[{r3, 0x4}, {r2, 0x20}, {r4, 0x8}, {r5, 0x4}, {r6, 0x168}], 0x5, 0x3)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0)
ioctl$BIOCSFILDROP(r7, 0x80044279, &(0x7f0000000540)=0x2)
ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{0xb29, 0x401, 0x6, 0x3}, {0xb, 0x7, 0x38, 0x0, 0x1}, {0x8, 0x10, 0x6, 0x1, 0x3}, {0x6ff9, 0x8, 0x9, 0x3, 0x100}]})
ioctl$BIOCPROMISC(r1, 0x20004269)
ioctl$WSMUXIO_ADD_DEVICE(r5, 0x80085761, &(0x7f0000000600)={0x2, 0x6})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000640)={0x3, 0x1, 0x6, 0x7, 0x5d4a, 0x5, 0x2f68, 0x10, [{0xb9d9, 0x8c15, 0xffffffff, 0x9}, {0x3ff, 0x6, 0xfffffffd, 0xb40}, {0x3, 0x401, 0x200, 0x8001}, {0x7, 0x8001, 0x7, 0x9}, {0x8, 0x9, 0x10001, 0x400}, {0x80000000, 0x1, 0x9, 0x7fff}, {0x3, 0x3b, 0x2, 0x1}, {0x4fe, 0xe108, 0x1, 0x1}, {0x6, 0x8, 0x5, 0x5}, {0x10000, 0x6, 0xc, 0xa0}, {0xc, 0x8, 0x1ff, 0x7fffffff}, {0x6, 0x8, 0x8, 0x8d}, {0x1080, 0x2, 0x7ff, 0x1}, {0x2, 0x6, 0x246}, {0x6, 0xbd, 0x4, 0x7}, {0x1, 0x5, 0x8, 0x8}]})
getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000780), &(0x7f00000007c0)=0x8)
ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f0000000800))
nanosleep(&(0x7f0000000840)={0x5, 0x400000}, &(0x7f0000000880))
ioctl$VNDIOCGET(r7, 0xc4104603, &(0x7f00000008c0)={'./file0\x00', 0x2, 0x3})
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000d40)={0x2, &(0x7f0000000d00)=[{0x0, 0x3e, 0x7, 0x3}, {0xb, 0x5, 0x2, 0x400}]})

449.902459ms ago: executing program 0 (id=632):
sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x3}, 0x4, &(0x7f0000000040)="d64899c002ebc81ce288c9", &(0x7f0000000080)=0xb, &(0x7f0000000340)="056e3b9a746ca93fefb909b9b7ed61a36a32ba9f477cd864ba5b425280a54626ba9ab5945ae59fa5ec5a016ee96c6c8c2b298dbbbea73756d9cec35ea5d59a00074ea745b2395f820854", 0x4a)
socket(0x18, 0x2, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x9}], {0x2000, 0x6, 0x5}, {0x29, 0x6, 0xb0, 0x2}}})
r0 = kqueue()
syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @broadcast, [{}], {@arp={0x806, @generic={0x1, 0x812b, 0x6, 0x0, 0x4, @local, "", @remote, "be27c0574ebf894c9babe29227fa6e58"}}}})
kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)

449.2898ms ago: executing program 6 (id=633):
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0)
socket(0x18, 0x3, 0x0) (async)
r2 = socket(0x18, 0x3, 0x0)
getsockopt(r2, 0x29, 0x3b, 0x0, 0x0)
mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0) (async)
mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0)
r3 = socket(0x2, 0x4001, 0x0)
r4 = fcntl$dupfd(r3, 0x2, r3)
close(r4)
r5 = dup(r3)
ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f00000003c0)={0x6, 0x7, 0x4, 0x8, 0x600, 0x8, 0x7, 0x10, [{0x3, 0x6, 0x5}, {0x3, 0x0, 0x3ff}, {0x9, 0x1, 0x3, 0x345f}, {0x10001, 0x8, 0x10, 0x1}, {0x0, 0x1, 0x8}, {0x1, 0x200, 0x7f, 0x4}, {0x9, 0x0, 0xffffff00, 0x4}, {0xef, 0xfffffffe, 0xffff, 0x6a0}, {0x80, 0x60, 0x7, 0x7}, {0xea17, 0xf, 0x7fffffff, 0x7}, {0x5, 0x80, 0x9, 0xe}, {0x1ff, 0x4, 0xffffffff, 0xb52}, {0x9, 0xcb, 0xb}, {0x0, 0x5, 0x6}, {0x7c, 0x4000, 0x5, 0x7f}, {0x8, 0x4, 0x3, 0x57}]})
socket$inet(0x2, 0x2, 0x0) (async)
socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x4}, 0x0)
sendmsg(r6, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x11, r7, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r9 = kqueue()
kevent(r9, &(0x7f00000013c0)=[{{r8}, 0xfffffffffffffffc, 0x95, 0x10, 0xcc, 0x2}], 0x8, 0x0, 0x15, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async)
r10 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r10, &(0x7f00000004c0)="b9", 0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(r7, 0x81205724, &(0x7f0000000100)={0x80, 0x7, 0xfffffff9, 0x97a, 0x2ecd, 0x9, 0xd4e, 0x10, [{0x800, 0x3, 0x1ff, 0x8}, {0x1, 0x1, 0x4, 0xefad}, {0x3ff, 0xed1, 0xf, 0x5e53}, {0x3, 0xa6, 0x0, 0x4}, {0x7fffffff, 0x2, 0x8, 0xa}, {0x5, 0x0, 0x97e, 0x4}, {0x4, 0xc, 0x47e, 0x1}, {0xfffff00a, 0x2, 0x2, 0x9}, {0x8000, 0x80000000, 0x800, 0x1}, {0x2, 0xd, 0x78, 0x9}, {0x8, 0x401, 0x6, 0x8}, {0x3ba1, 0x2, 0x6, 0xd0a}, {0x2, 0x8, 0x81, 0x3}, {0x0, 0x9, 0xb5b, 0x7}, {0x138, 0x2, 0x7, 0x10}, {0x0, 0x3, 0x80000001, 0x81}]})
ftruncate(r7, 0x8531) (async)
ftruncate(r7, 0x8531)
mmap(&(0x7f0000033000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) (async)
mmap(&(0x7f0000033000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000280)={0x8, &(0x7f0000000240)=[{0x0, 0xd, 0xb, 0x2}, {0xfffc, 0x7b, 0x5, 0x7}, {0xd6, 0x70, 0xb0, 0x9}, {0x1000, 0x4, 0x17, 0x7fffffff}, {0x7, 0xb, 0x7, 0xffff}, {0x0, 0x0, 0x1, 0x80000001}, {0x613f, 0xf, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x1}]})
r11 = socket(0x18, 0xc003, 0x3a)
setsockopt(r11, 0x1000000029, 0x1a, &(0x7f0000000100)=',\x00\x00\x00', 0x4) (async)
setsockopt(r11, 0x1000000029, 0x1a, &(0x7f0000000100)=',\x00\x00\x00', 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

448.826778ms ago: executing program 5 (id=634):
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x17)
setgroups(0x0, 0x0)
setgid(0xffffffffffffffff)
setuid(0xffffffffffffffff)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='c\x00')

354.521471ms ago: executing program 7 (id=635):
r0 = open$dir(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x40)
mkdirat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x7c110232708317ba)
r1 = syz_open_pts()
fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc, 0x1000300000000})
open$dir(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x40) (async)
mkdirat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) (async)
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async)
readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x7c110232708317ba) (async)
syz_open_pts() (async)
fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc, 0x1000300000000}) (async)

352.470136ms ago: executing program 5 (id=636):
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
rename(0x0, 0x0)
unlink(0x0) (async)
unlink(0x0)
r0 = msgget$private(0x0, 0x108)
setgid(0xffffffffffffffff) (async)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0) (async)
setgroups(0x0, 0x0)
r1 = accept$unix(0xffffffffffffff9c, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8)
getpeername(r1, &(0x7f0000000140)=@in6, &(0x7f0000000180)=0xc) (async)
getpeername(r1, &(0x7f0000000140)=@in6, &(0x7f0000000180)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000480)={0x0, <r3=>0x0}, &(0x7f00000003c0)=0xc)
seteuid(r3)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000000), 0xc) (async)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r4=>0x0}, 0xc)
setuid(r4)
msgctl$IPC_STAT(r0, 0x2, 0x0) (async)
msgctl$IPC_STAT(r0, 0x2, 0x0)
r5 = socket(0x24, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
getsockopt$sock_int(r6, 0xffff, 0x0, &(0x7f0000001800), &(0x7f0000001840)=0x4)

352.220335ms ago: executing program 0 (id=637):
sysctl$hw(&(0x7f0000000000)={0x6, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000100), 0x0)
sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x3, &(0x7f00000000c0)="0020a3db", &(0x7f00000001c0)=0x4, 0x0, 0x0)

351.598226ms ago: executing program 6 (id=638):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xf8d, 0x8b, 0x2, 0x7}, {0x2, 0x81, 0x0, 0x2}, {0x1006, 0xa, 0x6, 0x1}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ad8a7531b1c6af2ef6966b461e8d6fe72cfef4824fe750821662548746bf498c718c07c977c3255b40733448913c461279cf1f58a907b695889b88a4d2f571133538bf886623c80cc8d770dc", &(0x7f0000000080)=0x4c, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000480)={@broadcast, @empty, [], {@generic={0x6000}}})
sysctl$hw(&(0x7f0000000140)={0x6, 0x5}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0)
syz_emit_ethernet(0x9b, &(0x7f0000000000)={@random="6d6fb1740a75", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "7d3da5", 0x65, 0x3c, 0xfa, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x61, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x5}, @generic={0x2}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x7}]}], @udp={{0x1, 0x1, 0x8}, {"f7eb8657c591aa598895e43ddbb163537e4eb3843bad426a1d6f66e6821406588c89cb5e1e611fb0d97c5a26857d3724dc453810fa87e5d18042869fda"}}}}}}})

322.35657ms ago: executing program 5 (id=639):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000})
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400)
getsockopt$sock_int(r0, 0xffff, 0x1, 0xfffffffffffffffe, &(0x7f0000000000))
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x2000, [{0x2}, {}, {}, {0x3}, {0x0, 0xffffffff}, {}, {0x0, 0xaa59}, {}, {0x0, 0xfffffffb}, {0x3, 0x20}, {0x2, 0x4}, {0x0, 0x2}, {}, {}, {0x2, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0xfffffffc}, {0x0, 0x7ff}, {0x3}, {}, {0x3}, {}, {}, {0x2, 0x3}, {0x0, 0x3}, {0x0, 0x200}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x2}]})
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6)
acct(0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
acct(&(0x7f0000000080)='./file0\x00')
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x40, &(0x7f0000000980)="01000000", 0x4)

321.02831ms ago: executing program 3 (id=640):
mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1}, 0x0) (async, rerun: 32)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32)
socket(0x2, 0x3, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r1, 0xc0206922, &(0x7f00000001c0)) (async)
r2 = kqueue()
kevent(r2, &(0x7f0000000040)=[{{r2}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffff9, 0x1, 0x1, 0x0, 0xad}], 0x5, 0x0)
kevent(r2, &(0x7f0000000180)=[{{r2}, 0xfffffffffffffffa, 0x96, 0x80000000, 0x1ff, 0x8}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x20000000000006}], 0x2, &(0x7f0000000240), 0x2, &(0x7f0000000080)={0x1, 0x4}) (async)
kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x80, 0x20)

319.73913ms ago: executing program 7 (id=641):
mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf)
setgid(0xffffffffffffffff)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00')
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r0 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r0, 0xc020691b, &(0x7f00000001c0))
sendto$unix(0xffffffffffffffff, &(0x7f0000000040)="b1000501000000ae050007013f8000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0", 0x46, 0x402, 0x0, 0x0)
r1 = syz_open_pts()
fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x2, 0x0, 0xfffffffffffffff8, 0x20002fffffff9})
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0x0, 0x0)

319.233689ms ago: executing program 6 (id=642):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r2, 0x0, 0x64, &(0x7f0000000240), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f00000013c0)=[{{r3}, 0xfffffffffffffffc, 0x95, 0x10, 0xcc, 0x2}, {{r3}, 0xfffffffffffffffc, 0x49, 0x8, 0x2, 0x81}], 0x8, 0x0, 0x15, 0x0)
writev(r0, &(0x7f0000002100)=[{&(0x7f0000000180)="968ce1c69d9498126527e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a7f2ec5c0d23a134ee65c5f70eee9f43f9c71342063cfdf9eb60982d3ed95722aa70920bd1c6331d3e4e1891e80699e9058b7a39ae56ffa1c545b3dfa90cd36699a984bdaedff8dbf3d11d74e26036a7fc36b1f53740b772d7c7996271e18c83078e8d21903e3b374f634d4eff3fe56124fdb2407bc125e9ea92319c8966f2e", 0xaa}], 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x6)
syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efb0490670000000000010000000000000afffffffefe8000000000000000000000000000aa880c000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb00000000000000000000ffffac1400aa95a8e3f69261b11bfb779408877c5d94ff0100000000000000000000000000010000000000000000000000000000000104000000000000000c04000900000000ff020000000000000000000000000001ff0200000000000000000000000000012b3300000000000000010005e4af20e4b21154e61fbb43d551c50b7bec06f120fe504d4df35619925b72a6b1656feb28597a452998fa7670c7e96a891d6ffe777cb844100410886327f4331b6b7014666b21692ac200f83283494936a2e78e688b24a12df0663b29bf2e8d3ccbab810b49c1ef16b67262e6271040c842f03cde08a1a439e382f0920b9d06cf2a5bbbf68f7e27c398dab6a1feba46ece491f2e3afc9dd415f72d449774cb6d7531708f6d0e12b3c1a52dbbd75db6ecc1ca45fe9dec04ea9d29642012029d0a721f39288cb0be11b5d12fc1fb0cad4845a210fbb369574dfe4b35dfd15d19d936c7f56a1b7c20400000003c20400000080028eed197aa389e457f4964bef7ff489c04e6627466843c434adf00a7bdd4e1845eb275580125c799e8a837b4dda49ef9e1fa1b70dece49089c3b020b00734a60eb098995dd84e35eebbf81112e75783b60ba0bfb7943a2c91c9a8585750e677a4b2bf6e58471b44f252e4f2887854c4a848f436483155e7cc43b331e26c10d119db5da37942f6ea9bda53c43a5dfad197b5e36606161fe8c31c6053fc010400000000000100c204000000b8010300000000000000000000ff000938690000000210000500000000fe8000000000000000000000000000bbff010000000000000000000000000001ff0100000000000000000000000000010a1067686fc379684e0d60984f1c524900000000000000000000000000000001ff01000000000000000000000000000100000000000000000000ffffac1400bbff0200000000000000000000000000013b06000300000000fe8000000000000000000000000000bbff020000000000000000000000000001ff0100000000000000000000000000013b2a000000000000c204fffffffbb867565fc4a440455a1a7548fad6b96271745fda9cf4b7bee3a0b78bcf79630797a5c8060ca443d36dc21e639a2e80b46dbf8cb4840f61456b1ee1a709374103e5fe768ce764a5386ddb66358c5d5551c48c4d773f6da7c6e8322ccb64d605f6476f980f077e9aba420108000000000000000004d3c434ce0964f6f448087dccd18f338ee73b9918980cfb6e10485a5374564a79e158b738cb44ef1f505e5fb1a0aa956d67c99527f7b6628136f30ad298f4e60d1133d0e4558287c61c9a8fe2befbc04a14228a66af4a4aeb6055850654dd8bf30a12e2c764e9ee173d0c80bf3db9e1944070c45810cff0101731dc8ba4def1139a8ee2150488e54537eba88cead8e3981d809fbd7d913aeda2c6c46a15023b69db83a1c4448dd171d6bca4829368fbd89a8baff87c778a7b6309ba1470002e9eb93ce6fdbc7649d3e334bb28f875bb76190362bf00010000000000000000000200000000000005020003c2040000000901050000"])
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7})
ioctl$TIOCSTART(r6, 0x2000746e)
ioctl$TIOCSETA(r5, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x1ff, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x9, 0x42})
ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f0000000040))
execve(0x0, 0x0, 0x0)

263.850988ms ago: executing program 5 (id=643):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffff000001"], 0x18}, 0x0)
recvfrom$unix(r1, &(0x7f0000000680)=""/4096, 0x1000, 0x3843, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8)
sendmmsg(r0, &(0x7f0000000480)={0x0}, 0x10, 0xa)
shutdown(r1, 0x0)

259.327906ms ago: executing program 7 (id=644):
setrlimit(0x8, &(0x7f0000000340)={0x9, 0x4000000000054})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28140000ffff000001"], 0x28}, 0x0)
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
close(r2)
syz_open_pts()
listen(0xffffffffffffffff, 0x1)
write(r1, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000340)={0x9, 0x4000000000054}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async)
sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28140000ffff000001"], 0x28}, 0x0) (async)
syz_open_pts() (async)
close(r1) (async)
syz_open_pts() (async)
close(r2) (async)
syz_open_pts() (async)
listen(0xffffffffffffffff, 0x1) (async)
write(r1, 0x0, 0x0) (async)

259.050975ms ago: executing program 0 (id=645):
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1000302010008, 0xffffffffffffffff}) (async)
r0 = socket(0x2, 0x1, 0x0) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
connect$unix(r0, &(0x7f0000000000), 0x10) (async)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) (async)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
setsockopt(r0, 0x4, 0xaf7, &(0x7f00000000c0)="8e48c381f827da941e637577d0656ade81f134c443d5e117", 0x18) (async)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) (async, rerun: 32)
setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (rerun: 32)

256.406788ms ago: executing program 2 (id=646):
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x8)
open(&(0x7f0000000080)='./file0\x00', 0x2, 0x109) (async)
open(&(0x7f0000000080)='./file0\x00', 0x2, 0x109)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5e5f)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x10e)
getdents(r1, &(0x7f0000000340)=""/141, 0x8d)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xc0, 0xb, 0xf0, 0x5}, {0x44, 0xb, 0x93, 0x7c4b}, {0x1ae, 0xb, 0xe, 0x9}]})
syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[])
open(&(0x7f0000000140)='./file0\x00', 0x8000, 0xa1)
socket(0x2, 0x3, 0x0) (async)
r2 = socket(0x2, 0x3, 0x0)
r3 = msgget$private(0x0, 0x24)
msgsnd(r3, &(0x7f00000006c0)={0x0, "e1e06cbf15cec5542974d2a7298ffdbb66fc8510d4bbbefda07e443b87082ad05bdc112be0cd6f2680105c7d371d4cf5c1978e1ce1d5a9fb11eb9ba2b5bec03c5b90723c9dce44538bafbce20294b761f080a46615b2b1bb20bfffbc8cabf909c4f65acd63dee7125b7433ed4c44266ddfac2e81b5b0"}, 0x7e, 0x800)
msgrcv(r3, 0x0, 0x0, 0x0, 0x3000)
msgrcv(r3, 0x0, 0x0, 0x2, 0x1000) (async)
msgrcv(r3, 0x0, 0x0, 0x2, 0x1000)
msgrcv(r3, 0x0, 0x0, 0x0, 0x60f34324e81ffdf1) (async)
msgrcv(r3, 0x0, 0x0, 0x0, 0x60f34324e81ffdf1)
setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000002c0)=0x20000, 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r2, &(0x7f0000000000), 0x10)
r4 = semget$private(0x0, 0x2, 0x1)
semop(r4, &(0x7f0000000200)=[{0x2, 0x8, 0x1800}, {0x2, 0x9, 0x800}, {0x2, 0x0, 0x1c00}, {0x4, 0x0, 0x800}, {0x2, 0xff}, {0x0, 0x9, 0x2000}], 0x6)
write(r2, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d57e753f95b7688ad48b8cf6bbca325cebc37fc4400b543dbe2da6dd", 0x10010) (async)
write(r2, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d57e753f95b7688ad48b8cf6bbca325cebc37fc4400b543dbe2da6dd", 0x10010)
unlink(0x0) (async)
unlink(0x0)
mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x637f)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})

204.53516ms ago: executing program 4 (id=647):
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370822a68cb280a8b74948a91e3655837ba73a492dfb39e05b286129c447ccc24377ec79859b091fc92741858e0d0736afaaf1db33e6c01b69a5f4d12081fd2edfd837ff0e80f2b16d35dbb8893e0aa60f950635920aa787675cb31079d856827c0048157d8210f657caac1ac7f51889a25d8bf479243f7", 0x0, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r0, 0xcd50441a, &(0x7f00000000c0)={0x3, 0x2, 0x6, 0xf, "1800e6234f5d7a0000005409456200", 0x1, 0x7})
r1 = socket(0x1, 0x4000, 0xea)
ioctl$FIONREAD(r1, 0x802069b5, &(0x7f00000001c0))
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000980)="34eb4cd59e8447cd4ad3cd0a56ebc088168184f074b472e9c498ba76816a8e4fcf42e73ab5b4af13e0805d4fc559ee98595d9c0189e9e0f8d3c3313b936c0ebe9613289ab2fd76be0500000050a549b8742943e012910d1193ad8bc32943b0b3b1cb69c0998d571d6d17a395877a0edfd6092e7f30220000000000000003c8ab42a76cbc97c39d00"/146, 0x8c}, {&(0x7f0000000780)="a52668ea1b05bbd234ebca55dc73cf7e197ff13e9333287d6407e463bd870eba14d7f301c2eaee57e0", 0x8b}], 0x2)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c6163952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe245f928b770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012", 0x8a, 0x808, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vm_swapencrypt(&(0x7f0000000240), 0x3, &(0x7f00000008c0)="bc5b20cc873b72bd4725bd0f19090000006aabe5c2254a5558adf3bc2df984b286280a0c4b4748cb7cfa5e213a146237d5477a994a2c2c90980f7cdae19020116a68bca248d47879bfd74eda551882ff9bee6eef6d1764168d799bbb374ecd04000000a09dddccf2af3242696a3eb9f14e003e087ca50a980e3176febf7c146664fdc3738b4067f80340b61989d351a29bc8ee9be9dda9228b73652ce0c42d91cde577ff1282bbcf7cc2", &(0x7f00000002c0)=0xaa, &(0x7f0000000880)="2db6347fffa9534cfc699538fc5df87f2d5e1e7b07743a61b4", 0x19)
r2 = socket(0x11, 0x3, 0x0)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000740)=0x6)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
ioctl$BIOCLOCK(0xffffffffffffffff, 0x20004276)
sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x400000f8, 0x0, 0x0, 0x0, 0xffffffffffffffd1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
setuid(0xffffffffffffffff)
ioctl$BIOCVERSION(0xffffffffffffffff, 0x4010427e, 0x0)
socket(0x0, 0x2, 0xc6)
sendto$unix(r0, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff)
ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8)
getuid()
mmap(&(0x7f00007a6000/0x1000)=nil, 0x1000, 0x1, 0x2011, r1, 0x1)
r4 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0xc0106978, &(0x7f00000001c0))
ioctl$VMM_IOC_RESETCPU(r3, 0x82405605, &(0x7f00000004c0)={0x10001, 0x3, {[0x3, 0x0, 0xfff, 0x4, 0x2, 0x1, 0x1, 0x3, 0x1, 0x2, 0xffff, 0x2, 0x0, 0xb422, 0x5, 0x8, 0x629d, 0xff], [0x2, 0xf, 0x7e1, 0x400, 0x4b8a4107, 0x3, 0x81, 0x8, 0x8, 0x7f], [0x5, 0x0, 0xe144, 0x7ffffffd, 0x7, 0x800, 0x4], [0x3, 0x17e2, 0x59, 0x1, 0x6, 0x1000], [{0x6, 0x2913, 0x80000001, 0x3}, {0x5, 0x100, 0x1, 0x9}, {0x400, 0x7, 0x1ff, 0x4}, {0x5, 0x2, 0xbd, 0x7}, {0x7, 0x8a8, 0x800, 0x6}, {0x7, 0x6, 0x3}, {0xd90d, 0x5d, 0x9, 0xff}, {0x8, 0x1, 0x1, 0x3}], {0x7, 0x8, 0xfffffffb, 0xfc9}, {0x6, 0x1, 0x3, 0x10000000000000}}})

204.166923ms ago: executing program 2 (id=648):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f0000000040)) (async)
pwrite(r0, &(0x7f0000000080)="57bb60b2fbe0f7860ba03a6becef5b664ef4284abe14892fc443b256d1f36fb1de2ceb1f6393ed9238182c9cd828bd194ef54d2b542f0206d88c14b63016c14813a035ea84e054f32510dcd6d9cfd2d1e3179a571357da48556439c3dd283239f4b15b4b6888b0d8f4ae96fcb333462088b312bfd6", 0x75, 0x4) (async)
r1 = fcntl$dupfd(r0, 0xa, 0xffffffffffffffff)
ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, 0x0) (async)
ioctl$BIOCSRSIG(0xffffffffffffff9c, 0x80044272, &(0x7f0000000300)=0x7) (async)
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000340)=0x6)
fchdir(r0)
r2 = socket$unix(0x1, 0x5, 0x0)
write(r2, &(0x7f0000000380)="69e98c094098d5e3092929f2a89938e3ef131f7f21d7b0d3b1d4126aeb43e82581bec86014", 0x25) (async)
sendmmsg(r1, &(0x7f0000000a40)={&(0x7f0000000a00)={&(0x7f0000000740)=@in6={0x18, 0x2, 0x401, 0x7f}, 0xc, &(0x7f00000007c0)=[{&(0x7f0000000780)="fccbc4c4fb72", 0x6}], 0x1, &(0x7f0000000800)=[{0x100, 0x1, 0x1, "3697058b189d7dc5d6958b442285fccc202dbae3bcf49c3b5e93338d55c23a33ddf7212339eff1328e2d1bf31691b2d4ffdbff0a35770f60bbd38d6a0d5accef513baadc2b2d55b4738d30332cd0fd1cbfd5470bc96541c91c1eb4d2d9d3d1483cfddf77648ef2eab333ab230319b98afc9261397bef034f9a5f46d87138f920926455898d0466b2473eee08420e17f084b0f1b0f630c1ef4f2b737db3031bb14c4f3df19c07513838cdd70b8e907a4078047df8039982dcc72cac3ba25bc6795444e15bcee5a487b293253f2fdaa2826d4dd7e9153032e87f216c98e38d55bb0a4f56fccee0851d7d"}, {0x10, 0x1, 0x4}, {0x90, 0x1, 0xcf, "fd5b7317cc0a40a25bc6a20640022d5e02d59bfa819ac76a49a28d324d3b2b74ccd17e2550def19e9051f060c029aa8fbf853fe8472cedb3dc7916e82043b1ca5b59f776f085f03dabfdbc71b9b705bdab7cbc6149ae8a538e7f82ad0266c8184cd305b4ac476f3f0c8c6f0326789af682f71369bda874da24f5cd4c48bcf1ea"}], 0x1a0}, 0x75c}, 0x10, 0x6)
ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000a80)=0x6) (async)
r3 = socket(0x1, 0x2, 0x8)
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000ac0)) (async)
r4 = dup2(r3, r3)
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000b80)={&(0x7f0000000b00)='./file0\x00', 0xb06e, &(0x7f0000000b40)='./file0\x00', 0x8}) (async)
sysctl$kern(&(0x7f0000000bc0)={0x1, 0x49}, 0x2, &(0x7f0000000c00)="f0c65ea52ad26c30b0c6a6977708b4fe89705fb3a2c260f02dd79386fda9626dcd60a10d125263eee539b6b174438ab3a5330f585a2de9360d343ad79edb23d6335acd995ff6f3f2d1078a0cdcedc013709fbc08152adcf78f1c562886eb054b2f8b8ba6", &(0x7f0000000c80)=0x64, &(0x7f0000000cc0)="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", 0xf88) (async)
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000001cc0)={0x8, 0x0, 0x2, 0x7, "fbad0ad1c0975f55fb4fcab996706bbd4c26b6ab", 0x1, 0x4}) (async)
linkat(r1, &(0x7f0000001d00)='./file0\x00', r1, &(0x7f0000001d40)='./file0\x00', 0x0) (async)
ioctl$WSKBDIO_GETMODE(r1, 0x40045714, &(0x7f0000001d80)) (async)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

203.731773ms ago: executing program 7 (id=649):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="258b34f9d92d15867fdb7b3ea6c26149654d3094b5ab47240700000087f85465688b453d5b6535a805142c2eacb15498a3675a8dd50800ba55a37b93b7130a69b7ad64250ee87ce204c5b3ce33059d40b90b4727c15805c9cb64b128cab23aae1ffe5930a515601621065691a0b88a913926929b158ffba01e76ac8433e5287a", 0x80}], 0x1, 0x0, 0x0, 0x2}, 0xe)
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="71bb7d6ecfc294315f06a05c42762bd6bcdc602f5460bf17ad25f3df3695c7530d1815777282752c91862873aff57b086f6e66ae89578b5f511d9dce6db8077a597ad221b7", &(0x7f0000000080)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
r1 = semget(0x2, 0x0, 0x30)
semctl$GETNCNT(r1, 0x2, 0x3, &(0x7f00000000c0))
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])

201.799011ms ago: executing program 6 (id=650):
syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @udp={{0x0, 0x2, 0x8}}}}}}) (async)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r0, 0xc4504449, &(0x7f0000000740)={0x2, 0x80000001, 0x0, 0xfffffffe, "97a2224ff1c14649ebb1786b47c1c200", 0x1000, 0x8})
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000000)) (async, rerun: 32)
lseek(r0, 0x7, 0x0) (rerun: 32)
syz_extract_tcp_res(&(0x7f0000000100), 0x8, 0xcb7)
sendto$inet(r0, &(0x7f0000000000)="2dade92b9f742dcbd27716590da1e65dedc0e4bd82eca8df4bff5bba6ea07aa4ad5b669fb9fb764fd8f2c39e81b6052bbfdfa5aee9f796b8d043b76b5964155d995297c8242230cdefbaa0f8acac30c75267f4149549be4c80c8adcaa7b8c9f5adb25620c0ee2e457c0d94ef4211e2c4acafb9fafe4a063f32e8135dfe8dea1a340752d04221003f5773b125f48a1aec478398a44175e2e8f9d6b11256f43d51", 0xa0, 0x400, &(0x7f00000000c0)={0x2, 0x0}, 0xc)

110.832734ms ago: executing program 0 (id=651):
r0 = socket(0x800000018, 0x1, 0x0)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
ioctl$VNDIOCGET(r1, 0x80106468, &(0x7f0000000480)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfffdffbe, 0x8000, 0x63})
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x23}, 0x4, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
syz_emit_ethernet(0x3d, &(0x7f0000000140)={@local, @empty, [], {@arp={0x806, @generic={0x18, 0x8826, 0x6, 0xb, 0x8, @empty, "8bab1aaf1e4b9431aa12de", @remote, "f82d179b4c205a168c1598a7e49eec56"}}}})
read(r0, &(0x7f0000000180)=""/238, 0xee)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r3 = socket(0x6, 0x1, 0xfe)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x58)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2012, r4, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
r5 = geteuid()
r6 = getpid()
getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff])
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, r5, 0x0, r5, r7, 0xa5, 0x48e}, 0x9, 0xa, 0x0, r6, 0xffffffffffffffff, 0xb000000000004000, 0x0, 0x807})
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x3}, 0x8)

110.574278ms ago: executing program 4 (id=652):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0xc0000000, 0x18e62, 0xffffffc8, "ffeb0900870000000000000000001900", 0x402, 0x4f5})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x9810, 0xffffffffffffffff, 0x0)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
open$dir(&(0x7f00000003c0)='.\x00', 0x400004000011830a, 0x0) (async)
socket$inet(0x2, 0x3, 0x9)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000300))
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00')
poll(&(0x7f0000000240)=[{r0, 0x68}], 0x1, 0x0) (async)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x2, &(0x7f0000000100)="8a31647e33ab0d3588ab5d200e38b87d1786118aeea050bfd0e329545b116937e1cff9e8147f898be8de279c1c107fd925f1797cd69bd41bd960d40e57f9e4896e6b578892ba5bfe924b80d32cad34b10e0c268e4310c5062c85bab05ff2685bfb207f5dd7f958347e965cd4a8bee3035075294e267567bf219aa1ba683e7864f8d16ac15041cd35648e5334c286fa36651378344f49dabc2336f6937906405c1bddbad79fe0157f46d8ca954d2fb67db2949b3f096fcc05c0cb62093c908229f7f380b09d4f947bf9a85b4301da2d29a7a48cdb86d098bd54", &(0x7f0000000200)=0xd9, &(0x7f0000000280)="9e6bf626c2033698d93b919640911bbc52edda47c1e302df45e60009d83542775113152af1c7c5abaf810214cbc2a9caf56a864b7fdbb5fe87ce38aeb00057e2e36fefc9c0987d84559866e5080b0880c5b492c5187754e2e11d990be91efbb3f4d0", 0x62)

110.127395ms ago: executing program 7 (id=653):
symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
munmap(&(0x7f000026d000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
select(0x40, &(0x7f0000000040)={0x40009, 0x5, 0x4008, 0x8000000000000003, 0x3, 0x1000000000090, 0x0, 0x4}, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
setrlimit(0x8, &(0x7f00000003c0)={0x42, 0x61})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
r3 = socket$inet(0x2, 0x2, 0x0)
select(0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x8000000000000001})
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x1, 0x405, 0x21d8b78b, "2618007bf533e2942b0000000d00000000003689", 0x7, 0x3})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="fbc9bdee342cac89f11634b8c95a34c45060801c620821d84bee63884e27cd38c779adf02c0cb70679e3daffc5e656cb810aa0ce709bdac80519733e5c2ec2a5ab9bb96507ca0f13287aedcaeeb78b9235ec9306bed9a4121d9decbb6dc302d8f71ef53e5c287449d2ad2628322da56dc9062c14eb6b4241142167a61e0c73eaf2711cf1c65fe6ab18f8be0283821724691ab2aa6c25d9756272aa5b57f52c31457317d619637b4d511395934e808f232e07ada68dcaae6f4b", 0xb9}, {&(0x7f0000000140)="a027df39a6cf72a7c5a4049713e7ac2b02bd1b4199345890c95a69c7f02ca8acdb0a590818e9e83f76823bd598f36c866b062b0b1dd502b6f6aaf10debf02b15c03f246b5bd8030f6b2a5365f7dfe649c4d5d93b41c23b7582f5fbf08b0d4dfa42be822352c6d8539616add07fe90bc9e2a49b7f7f0024bb0d357b51d90448439d93db49c6961b8c064908345ab869cc37be3613c7a80150df42055648588d818854e42181f080c1041637f12ed1670ff8e48abf90dd5a748f70e551", 0xbc}, {&(0x7f0000000200)="1b8b89c6c40df39d4b2c3afe0e3fc26f67021ad2f2c31812904b039e4aaa6a45de035ae51cf95035e8274b23544ecad04e4033ac5ba17da78a8d9d1c30e6c61b9e7026c3048cef7f1deb8f208b9d43aacc09cff43e773ab532eac0fcde651a7dd32b6e7df2dbf0531fc27bcfec2e869150b7b8518ebef96a7fcb144cc4b64fe75fe9a2e602f450842b7221c89454440c11d9103092dd225663b4601df1b95c134fc762141886de18fb24b6e95305a3f33fcad9ddbc13f4", 0xb7}, {&(0x7f0000000340)="4d4cd0dd2ac7632fab958c08f111fd", 0xf}, {&(0x7f00000002c0)="cac16133067cb482f40ef2394ac64ff8c328d1a9274b487831dd8597357d8bcbf76d7c1156dcbd183482010de3ca26ef82df9159b636c51c51393dcd878147765f3536c37c01e25447ceaec10ee607030428b300cb95c4c0", 0x58}], 0x5)
writev(r1, &(0x7f0000000380)=[{&(0x7f00000013c0)="48494f3d23b2e41c65d6dd0a1a5edee53681139d39425fdded63f135c0198e93e42ab6830f7375192154058b26a3bca34f51c5e2bfeb1afd9bf9fcbf0f92d9fc72e23d5be1abf0d16a103f7d28afcf4aa9e83d0969d0e92d984e435bd4aa74328f7bd4f219b0be43c4b439fc2d25fb8b55f4351b61aa186129b84ce276478aa754c27f6d94681aebdd068eb18fe0e291ff4eef7cfff97ef45e73ea5998955b37c35f6229478f62a3c29eb0ddba21308b85e7d217c478be799529a973ee7020211d96a333072e2dc89639f81a27903db6d471bc2630ec1787c50cd26770c1a7ba6cbdaa478123e2e7f3a369fda6f6900efed7321e1c3319a0aa224b33678f4dc7f14eaff0aee8665eb06bc0d4b6ccfb15e6d5308564bcc36164ca8e31e239174cab605d6ca9423474b559e33e5a6f23905cd0755c3e92697b56407e958ba48ff27e68032302d71bbc3af50db33e9401fc5ea144ee88098b261bf820abd3ddec24b0102a03e709190cb8183fe14a3c0db72663008431326deb0698901b390e2d6a53dc5209b3a095daa464f0f40fea17f1c49918b0473199b3e8c468fb500c0d6210243d7739aef7905064454a1b529e043e8e736efbfa99a52e5f36ddfd9eb8a7a8a224d0b3eca86124800aa92ebde766c45917d14fd2d43448c68a5af66dc485a76607723301be61c568521783d48e46cdaa78721f84d0e23c4f1b91e18de8a97985d3cba3c752fc82819866a3d0f9583ddbd904c9ce3cf0696f43e24890613685920f6af4dcd702996d59c7aa8ad69ffaf30409d0f0101906c899610e329c37f39625cd468da652be433c66ed491a82a58a2bb5c5175a63058a33306522b066d33cac5e4c67eec1a82f955aee32bbda88a146ea1d759cfd376f9c4f55c0552e0b2bef2628eed5bc3dcb7b4f07530bc9634f9c619c8c9c07bce2bfd1a000bb81010317405f167c429b1c300ba8e16d27454e2ea64722db90de93bf19f48f842e8013818d1fb93d5d58685c6302f92a0e9bdebd867acc4ed21a716381f1b9643b2843c6ab396abdb13bd6781a3ad8ffc4d31ce2076cb1f61cd5b0c1ebacdf0b52a62fd4c09380ed2cd6b312186e914c9c97436241e8252cf586d6c3f217eee00fe032f697d22962896a72864636a742b83f570c639c0f6cd5c9895244435da43b852cb2d804bc6fc53f589e409b0f26b442015f2e51740976a4f63b110bd0557bd99e2c750bcfc55ee9fd6038ff3b03c14d31c1101a0fc8538b37607894067e673ae60def2d51ea51571badf7bf7850b2ff81882eb891692cfdbb6006f39646893266739f39b748d7fdc995fe66a1fc1a2245f1a049ea3c973bbcc704e994051d386f5115af612f93a81e740a560147aa928097b3", 0x3d4}], 0x1)

109.942177ms ago: executing program 5 (id=654):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x150) (async)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x150)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0) (async)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async)
setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4)
setsockopt(r1, 0x0, 0x69, 0x0, 0x0) (async)
setsockopt(r1, 0x0, 0x69, 0x0, 0x0)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0)
mknod(0x0, 0x2000, 0x1e5f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$VNDIOCGET(r2, 0x20006473, 0x0)

43.868304ms ago: executing program 4 (id=655):
r0 = socket(0x18, 0x1, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8182, 0x0)
ioctl$TIOCSETA(r1, 0x20004101, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
setuid(0xee01)
fchdir(r2)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="77bd673b", 0x4}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x2, 0x2, 0x0)
getsockopt$sock_int(r3, 0xffff, 0x1003, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7909)
setuid(0xee01)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
setsockopt(r0, 0x1000000000029, 0x41, &(0x7f0000000000), 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f00000015c0))
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809fffffffffffeff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0)
ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000080))
mknod(&(0x7f0000000000)='.\x00', 0x1, 0x0)

42.499487ms ago: executing program 2 (id=656):
acct(&(0x7f0000000180)='./file0\x00')
r0 = socket(0x2, 0x1, 0x0)
sendto(r0, &(0x7f0000000000)="d4a719a4429129bf6980f2ef6829d3ae0569434a", 0x14, 0x4, &(0x7f0000000040)=@in6={0x18, 0x2, 0x2, 0x5}, 0xc)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x18, 0x3, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f00000003c0)=0x1, 0x4)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r2 = getuid()
setreuid(0x0, r2)
getgroups(0x2, &(0x7f0000000280)=[0xffffffffffffffff, <r3=>0x0])
lchown(&(0x7f0000000080)='./file0\x00', r2, r3)
syz_emit_ethernet(0x4c6, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSETA(r4, 0xc4504443, &(0x7f0000000740)={0x2, 0x2, 0x0, 0x10, "01d04b0a0047c1d100", 0x3})
write(r1, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x9, &(0x7f0000000200)=[{0x3, 0x8, 0x68, 0x3}, {0x105f, 0x6, 0x1, 0x9}, {0x3, 0x1, 0x6, 0x6}, {0x5, 0xd, 0xe0, 0x7}, {0x6, 0x4, 0xfa, 0x393c6f28}, {0xc, 0x0, 0x7, 0x6}, {0x4, 0x7b, 0xb, 0x8}, {0xfffd, 0x48, 0x3, 0x7f}, {0x3, 0x4, 0x1, 0x5}]})
faccessat(r4, &(0x7f0000000300)='./file0\x00', 0x18c, 0x0)
ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0))

42.212559ms ago: executing program 6 (id=657):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7859)
r3 = open(&(0x7f0000000340)='./file0\x00', 0x2, 0x0)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)="23217570c9b5ec84b85842eec469e02dacf938583754806c6e3d9247210ba0292eb78e417d359e2b072b7fc53b51f13b0dbf", 0x32}], 0x1)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)='   ', 0x32}, {&(0x7f0000000280)="6614d86a44af04aa40f06d71457cec2a5d6b7724ad27e1e78e92e2a0fd5e76ce8a1e76c41669701a8e923b8ff0e21bde538556ad0bfc4839704c93e06110957ad7dfc5e62061460a", 0x48}], 0x2)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000300)={0x8, &(0x7f0000000200)=[{0x9, 0xb0, 0x2, 0x8}, {0xfff, 0x83, 0x7}, {0x401, 0x5, 0x4, 0x5}, {0x9, 0x1, 0x3}, {0x6, 0x40, 0xff, 0x1000}, {0xfff7, 0x7, 0x2}, {0x5, 0xc0, 0x6, 0x5}, {0x7, 0x4, 0x5, 0x5}]})
sysctl$kern(&(0x7f0000000380)={0x1, 0x50}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e7f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7859) (async)
open(&(0x7f0000000340)='./file0\x00', 0x2, 0x0) (async)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)="23217570c9b5ec84b85842eec469e02dacf938583754806c6e3d9247210ba0292eb78e417d359e2b072b7fc53b51f13b0dbf", 0x32}], 0x1) (async)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)='   ', 0x32}, {&(0x7f0000000280)="6614d86a44af04aa40f06d71457cec2a5d6b7724ad27e1e78e92e2a0fd5e76ce8a1e76c41669701a8e923b8ff0e21bde538556ad0bfc4839704c93e06110957ad7dfc5e62061460a", 0x48}], 0x2) (async)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000300)={0x8, &(0x7f0000000200)=[{0x9, 0xb0, 0x2, 0x8}, {0xfff, 0x83, 0x7}, {0x401, 0x5, 0x4, 0x5}, {0x9, 0x1, 0x3}, {0x6, 0x40, 0xff, 0x1000}, {0xfff7, 0x7, 0x2}, {0x5, 0xc0, 0x6, 0x5}, {0x7, 0x4, 0x5, 0x5}]}) (async)
sysctl$kern(&(0x7f0000000380)={0x1, 0x50}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e7f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async)
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8) (async)

39.574395ms ago: executing program 7 (id=658):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0)
syz_emit_ethernet(0x1000e, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}})
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7ffffffb, 0x3, 0xffffdf7f, 0xffffff8d, "182628040200c2a6d2e00e0000008a0400", 0x0, 0x1ffff})
writev(r1, 0x0, 0x0)
syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

33.660273ms ago: executing program 6 (id=659):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x3, {[0xfffffbfffffffffb, 0xfffffffffffffffc, 0x1, 0x500a, 0x0, 0x3, 0xdf60, 0xffffffbffffffffe, 0xfffffffffffffffa, 0x2efe, 0x7, 0x3, 0xffffffffffffffff, 0x200000000002, 0x5, 0x4, 0xfffffffffffffffb, 0x400000000100], [0xfffffffffffffffe, 0xfffffffffffffffb, 0x7, 0x20000005, 0x5d, 0x3, 0x80000000000001fe, 0x0, 0x0, 0x8], [0xf6a3, 0x3, 0x40000003, 0x0, 0xd, 0x5, 0xfffffffffffffff8], [0x6, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x7], [{0xfffc, 0x7, 0x1, 0x7d06}, {0x86, 0x23, 0x9}, {0xa0, 0x6, 0xfffffffe, 0x80}, {0x4, 0x4, 0x2000005, 0xffffffffffffffff}, {0x0, 0x2, 0x80, 0x4}, {0x0, 0x6, 0xc, 0x2000000000000000}, {0x0, 0xb, 0xff}, {0x0, 0x100, 0x9, 0x8}], {0xffff, 0x20000009, 0x6}, {0xfffc, 0x7, 0x6d5, 0x4800009}}})
r0 = kqueue()
mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f00000000c0)={0x2f, 0x220, 0x7fffffff, 0x9, "c9f7d04675d201000000b8ecff000000002f00", 0x0, 0x7})
setgid(0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9)
ioctl$TIOCFLUSH(r3, 0xc0187009, &(0x7f0000000080)=0x400)
setuid(0xee01)
connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
chown(0x0, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000380), 0x1, 0x0)
setuid(0xffffffffffffffff)
truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x0}, 0x8)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x40)
mkdirat(r5, &(0x7f0000000340)='./file0\x00', 0x170)
kevent(r0, &(0x7f0000000100), 0x96, 0x0, 0xffff4161, 0x0)

8.268194ms ago: executing program 0 (id=660):
write(0xffffffffffffffff, &(0x7f0000000080)="d8", 0x1)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x200000000000032f, &(0x7f0000000040)=[{}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
setrlimit(0x8, &(0x7f00000003c0)={0x42, 0x61})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x1, 0x405, 0x21d8b789, "2618007bf533e2942b0000000d00000000003689", 0x7, 0x1})
writev(r0, &(0x7f0000000380)=[{&(0x7f00000013c0)="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", 0x545}], 0x1)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
write(0xffffffffffffffff, &(0x7f0000000080)="d8", 0x1) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x200000000000032f, &(0x7f0000000040)=[{}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
setrlimit(0x8, &(0x7f00000003c0)={0x42, 0x61}) (async)
syz_open_pts() (async)
close(r0) (async)
syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x1, 0x405, 0x21d8b789, "2618007bf533e2942b0000000d00000000003689", 0x7, 0x1}) (async)
writev(r0, &(0x7f0000000380)=[{&(0x7f00000013c0)="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", 0x545}], 0x1) (async)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async)

7.251482ms ago: executing program 2 (id=661):
r0 = socket(0x18, 0x3, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb})
r1 = socket(0x18, 0x3, 0x0)
syz_emit_ethernet(0x3f, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1])
sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f00000001c0)="6e040000", &(0x7f0000000040)=0x4, 0x0, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7859)
r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff})
fcntl$lock(r2, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2})
select(0xfc63, &(0x7f0000000000)={0xfffffffffffffffe, 0x10000001, 0x200000000000, 0x6, 0xfffffffffffffe01, 0x6, 0x3, 0x400}, 0x0, 0x0, 0x0)
setreuid(0xee00, 0x0)
r3 = getuid()
chown(&(0x7f0000000180)='./file0\x00', r3, 0xffffffffffffffff)
r4 = getuid()
setreuid(0x0, r4)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket(0x18, 0x1, 0x0)
setsockopt(r5, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8)
r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x4004667b, &(0x7f00000001c0)={0x80000000, 0x200, 0x0, 0x1, 0x37, 0x100, 0x10, 0x10, [{0x3, 0x7, 0x9, 0x4}, {0x7, 0x0, 0xf, 0x1}, {0x8001, 0xffffffff, 0x1, 0x9}, {0x2, 0x2, 0x3, 0x6}, {0x6, 0x2, 0x7ff, 0xa}, {0xfffffffd, 0xce63, 0x9, 0x2d6}, {0xb, 0x6, 0x80009, 0x56d6}, {0x4, 0x100, 0x2, 0x8000017}, {0x1, 0x10, 0x800006, 0x6}, {0x9e, 0x5, 0x40, 0x69}, {0x403, 0xa82, 0x6c2, 0x10000}, {0x38a, 0x7, 0x6c}, {0x20002c13, 0x10, 0x40000008, 0xda}, {0x8eb, 0x200, 0x220, 0xde15}, {0x2, 0xffff, 0x0, 0x5}, {0x200, 0x1, 0x6d2, 0x6}]})
connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r7 = socket(0x10, 0x2, 0x0)
ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0xc1206925, &(0x7f0000000100))
sysctl$net_inet_tcp(&(0x7f00000003c0)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=662):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x7, [{&(0x7f0000575000/0x3000)=nil, &(0x7f00001e1000/0x3000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00001c0000/0x8000)=nil}, {&(0x7f0000639000/0x2000)=nil, &(0x7f000011c000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f000063f000/0x4000)=nil}, {&(0x7f0000213000/0x2000)=nil, &(0x7f00001be000/0x3000)=nil, 0x1}, {&(0x7f00005cf000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000163000/0x2000)=nil, &(0x7f000075b000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f00005ca000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd}, {&(0x7f00003b3000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f000066f000/0x2000)=nil, &(0x7f00002d0000/0x2000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x400}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000729000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f00002ef000/0x2000)=nil, 0xe}, {&(0x7f0000fec000/0x12000)=nil, &(0x7f0000ffc000/0x2000)=nil}], './file0\x00'})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc028698d, &(0x7f0000000100))
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x9}, 0x10)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00')

kernel console output (not intermixed with test programs):


OpenBSD/amd64 (Amnesiac) (tty00)

Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts.
login: pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error

OpenBSD/amd64 (Amnesiac) (tty00)

login: pckbd_enable: command error
wskbd0: can't attach mux (error=5)

OpenBSD/amd64 (Amnesiac) (tty00)

login: malloc(): allocation too large, type = 6, size = 287762939904
/: bad dir ino 2 at offset 0: mangled entry
panic: bad dir
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 444355  17076      0           0          0    0  syz-executor
*234267   4181      0           0  0x4000000    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff832e683b) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b039798,ffff80003c45b6b8,ffff80003c45b6e8) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c45b688) at vfs_lookup+0x93a
namei(ffff80003c45b688) at namei+0x7ca
dorenameat(ffff80003c493258,ffffff9c,200000000080,ffffff9c,2000000000c0) at dorenameat+0x144
syscall(ffff80003c45b930) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xfa686378340, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: bad dir
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff832e683b) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b039798,ffff80003c45b6b8,ffff80003c45b6e8) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c45b688) at vfs_lookup+0x93a
namei(ffff80003c45b688) at namei+0x7ca
dorenameat(ffff80003c493258,ffffff9c,200000000080,ffffff9c,2000000000c0) at dorenameat+0x144
syscall(ffff80003c45b930) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xfa686378340, count: -9
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c45b320
rbx               0xffff8000299eeddf
rdx                                0
rcx               0xffff80003c493258
rax               0xffff8000299edff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x94343f6e56930bd9
r11               0xde82d7c198b6398a
r12               0xffff8000299eebe0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81a1edf5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c45b310
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=234267 pid=4181 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=17, usrpri=50, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c492a90,0xffff80003c492808
    process=0xffff80003c47b5d0 user=0xffff80003c456000, vmspace=0xfffffd805e932d80
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 17076  444355  76200      0  7           0                syz-executor
 17076   63539  76200      0  2   0x4000000                syz-executor
 93369  477220   7014      0  2        0x10                syz-executor
 93369   83211   7014      0  3   0x4000090  fsleep        syz-executor
  4181  115641  98470      0  3        0x80  nanoslp       syz-executor
  4181  367663  98470      0  3   0x4000080  fsleep        syz-executor
* 4181  234267  98470      0  7   0x4000000                syz-executor
  4181  364360  98470      0  3   0x4000080  fsleep        syz-executor
 54362  159150  32232      0  2           0                syz-executor
 54362  393840  32232      0  3   0x4000080  fsleep        syz-executor
 99513  254036   5048      0  2           0                syz-executor
 48554  182265   8648      0  3           0  vmmaplk       syz-executor
 48554  197292   8648      0  3   0x4000000  physio        syz-executor
 48554   70763   8648      0  3   0x4000080  fsleep        syz-executor
 47453   95855      0      0  3     0x14200  acct          acct
 12634  500971  46985      0  2           0                syz-executor
 12634  239718  46985      0  3   0x4000080  ttyopn        syz-executor
 95501   96917  40859      0  2           0                syz-executor
 95501  377885  40859      0  3   0x4000080  nanoslp       syz-executor
 95501   39395  40859      0  3   0x4000080  fsleep        syz-executor
 85322  316856      1      0  3    0x100083  ttyin         getty
 15241  308680  90396      0  3        0x82  sbwait        sshd-session
 83098  345495      0      0  3     0x14280  nfsidl        nfsio
 54526  244397      0      0  3     0x14280  nfsidl        nfsio
 74090  377824      0      0  3     0x14280  nfsidl        nfsio
 30293  347148      0      0  3     0x14280  nfsidl        nfsio
 90847  425452      0      0  3     0x14280  nfsidl        nfsio
  1040  514840      0      0  3     0x14280  nfsidl        nfsio
   962  133561      0      0  3     0x14280  nfsidl        nfsio
 33210  519203      0      0  3     0x14280  nfsidl        nfsio
 15868  501558      0      0  3     0x14280  nfsidl        nfsio
 97751  145681      0      0  3     0x14280  nfsidl        nfsio
 38102  415180      0      0  3     0x14280  nfsidl        nfsio
 47828  207374      0      0  3     0x14280  nfsidl        nfsio
 90221  267488      0      0  3     0x14280  nfsidl        nfsio
 10133  314700      0      0  3     0x14280  nfsidl        nfsio
 91512  145246      0      0  3     0x14280  nfsidl        nfsio
 61323  406168      0      0  3     0x14280  nfsidl        nfsio
 73961   62412      0      0  3     0x14280  nfsidl        nfsio
 74378  224263      0      0  3     0x14280  nfsidl        nfsio
 22080  134794      0      0  3     0x14280  nfsidl        nfsio
 94755  209029      0      0  3     0x14280  nfsidl        nfsio
   570  218106      0      0  3     0x14200  bored         sosplice
  5048   11977  77546      0  3        0x82  nanoslp       syz-executor
 32232   25071  77546      0  3        0x82  nanoslp       syz-executor
  8648  413052  77546      0  3        0x82  nanoslp       syz-executor
 76200   70306  77546      0  3        0x82  nanoslp       syz-executor
 46985   10770  77546      0  3        0x82  nanoslp       syz-executor
  7014  324685  77546      0  3        0x82  nanoslp       syz-executor
 40859  372573  77546      0  3        0x82  nanoslp       syz-executor
 98470  409864  77546      0  3        0x82  nanoslp       syz-executor
 77546  231960  32789      0  3        0x82  kqread        syz-executor
 32789  192089  88067      0  3    0x10008a  sigsusp       ksh
 88067  250605  98098      0  3        0x98  kqread        sshd-session
 98098  209262  90396      0  3        0x92  kqread        sshd-session
 90396  118010      1      0  3        0x88  kqread        sshd
 35690  107244  25707     74  3   0x1100092  bpf           pflogd
 25707  362413      1      0  3        0x80  sbwait        pflogd
 64575  479376  93678     73  3   0x1100090  kqread        syslogd
 93678  332543      1      0  3    0x100082  sbwait        syslogd
 54868  114904      1      0  3    0x100080  kqread        resolvd
 48493  437009  49967     77  3    0x100092  kqread        dhcpleased
 49852  311993  49967     77  3    0x100092  kqread        dhcpleased
 49967  479656      1      0  3        0x80  kqread        dhcpleased
 35668  356935      0      0  3     0x14200  bored         smr
 35022  496036      0      0  3     0x14200  pgzero        zerothread
 71780  275691      0      0  3     0x14200  aiodoned      aiodoned
 97019  434850      0      0  3     0x14200  syncer        update
 14539  258698      0      0  3     0x14200  cleaner       cleaner
 20357  166366      0      0  3     0x14200  reaper        reaper
 99108   14223      0      0  3     0x14200  pgdaemon      pagedaemon
 70681  305270      0      0  3     0x14200  bored         viomb
 22951   78949      0      0  3  0x40014200  acpi0         acpi0
  1849   78635      0      0  3  0x40014200                idle1
 30629   29433      0      0  3     0x14200  bored         softnet7
 81999  264564      0      0  3     0x14200  bored         softnet6
  2852  187529      0      0  3     0x14200  bored         softnet5
 93063   28682      0      0  3     0x14200  bored         softnet4
 47241    5178      0      0  3     0x14200  bored         softnet3
 19052  114194      0      0  3     0x14200  bored         softnet2
   333  224291      0      0  3     0x14200  bored         softnet1
 28515  248791      0      0  3     0x14200  bored         softnet0
 18761   98361      0      0  3     0x14200  bored         systqmp
 78101  522224      0      0  3     0x14200  bored         systq
 36616   64427      0      0  3     0x14200  tmoslp        softclockmp
 72937  142323      0      0  3  0x40014200  tmoslp        softclock
 39637  436542      0      0  3  0x40014200                idle0
     1  193798      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 4181 (syz-executor) thread 0xffff80003c493258 (234267)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83921c88)
#0  witness_lock+0x5f1
#1  __mp_acquire_count+0x58
#2  sleep_finish+0x2d8
#3  biowait+0xc6
#4  ffs_bufatoff+0x16f
#5  ufs_lookup+0x58e
#6  VOP_LOOKUP+0x6e
#7  vfs_lookup+0x93a
#8  namei+0x7ca
#9  dorenameat+0x144
#10 syscall+0xb17
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807e4b9e80)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  dorenameat+0x144
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 48554 (syz-executor) thread 0xffff80002a2e4a98 (197292)
shared rwlock vmmaplk r = 0 (0xfffffd805e932310)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvm_vslock_device+0x149
#3  physio+0x257
#4  spec_write+0x11f
#5  VOP_WRITE+0x101
#6  vn_write+0x1d3
#7  dofilewritev+0x242
#8  sys_write+0xa2
#9  syscall+0xbd4
#10 Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10235  11106K   12356K 166960K     12525        0
            pcb    19     12K      12K 166960K       133        0
         rtable   216      8K       8K 166960K       407        0
             pf    36     18K      81K 166960K       129        0
         ifaddr    42      7K       8K 166960K        83        0
        ifgroup    55      2K       2K 166960K       134        0
         sysctl     4      1K       9K 166960K        14        0
       counters    68     36K      37K 166960K       148        0
       ioctlops     0      0K       4K 166960K      1680        0
            iov     0      0K      28K 166960K        33        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1449     91K      91K 166960K      2036        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         7        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        25        0
        dirhash    12      2K       2K 166960K        30        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    20    179K     240K 166960K       831        0
          sigio     0      0K       0K 166960K        94        0
           proc    72    115K     180K 166960K       647        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        88        0
       in_multi    98      7K       7K 166960K       112        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     0      0K       0K 166960K         5        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   259   1155K    1155K 166960K       259        0
           exec     0      0K       1K 166960K       444        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   251    169K     178K 166960K      9082        0
       UVM aobj    17      2K       2K 166960K        17        0
     pinsyscall    45     90K     100K 166960K      1933        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        33        0
            NDP    12      0K       1K 166960K        54        0
           temp    76   8652K    8724K 166960K     28825        0
         kqueue    15     22K      30K 166960K       164        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       85    0       82     1     0     1     1     0     8    0
rtentry    176      119    0       30     5     0     5     5     0     8    0
unpcb      144      481    0      460     5     3     2     4     0     8    1
syncache   336        9    0        9     4     3     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      736      236    0      229     8     6     2     7     0     8    1
arp        128       11    0        2     1     0     1     1     0     8    0
inpcb      328      877    0      863    12     8     4     9     0     8    2
nd6        144       22    0        1     1     0     1     1     0     8    0
pkpcb       40        7    0        7     3     2     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
mppekey    1024       5    0        5     2     2     0     1     0     8    0
ppxss      1192      30    0       30     2     1     1     1     0     8    1
pppxif     1504       8    0        8     1     1     0     1     0     8    0
pfstscr     40        1    0        0     1     0     1     1     0     8    0
pffrag     232        3    0        0     1     0     1     1     0   482    0
pffrnode    88        3    0        0     1     0     1     1     0     8    0
pffrent     40        7    0        4     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       3    0        3     1     1     0     1     0     8    0
pftag       88        6    0        2     1     0     1     1     0     8    0
pfstitem    24       77    0       17     1     0     1     1     0     8    0
pfstkey    128       77    0       17     2     0     2     2     0     8    0
pfstate    384       76    0       17     6     0     6     6     0     8    0
pfrule     1344      31    0       23     2     1     1     2     0     8    0
rttmr      136        2    0        2     1     1     0     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      564    0      125    31     3    28    30     0     8    0
art_table   40      566    0      125     5     0     5     5     0     8    0
art_node    32      118    0       41     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        1     1     1     0     1     0     8    0
semapl     112       23    0       13     1     0     1     1     0     8    0
shmpl      112       14    0        0     1     0     1     1     0     8    0
dirhash    1024      29    0       12     3     0     3     3     0     8    0
dino2pl    256     2823    0     1308    96     0    96    96     0     8    0
ffsino     296     2823    0     1308   118     0   118   118     0     8    0
nchpl      144     3951    0     2255    64     0    64    64     0     8    0
rtmask      32        1    0        1     1     0     1     1     0     8    1
uvmvnodes   80     3337    0        0    69     0    69    69     0     8    0
vnodes     216     3337    0        0   186     0   186   186     0     8    0
namei      1024   13820    0    13818     2     1     1     2     0     8    0
percpumem   16       89    0       40     1     0     1     1     0     8    0
kstatmem   264       78    0       52     4     2     2     3     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scxspl     216    28344    0    28343    11     9     2     8     1     8    1
plimitpl   152      222    0      202     1     0     1     1     0     8    0
sigapl     424     1137    0     1060     9     0     9     9     0     8    0
knotepl    120      537    0        0    17     0    17    17     0     8    0
kqueuepl   224      260    0      247     1     0     1     1     0     8    0
pipepl     344      198    0      171     6     0     6     6     0     8    3
fdescpl    528     1088    0     1055     3     0     3     3     0     8    0
filepl     160     6613    0     6381    20     6    14    16     0     8    3
lockfpl    104      429    0      426     2     0     2     2     0     8    1
lockfspl    48      108    0      105     1     0     1     1     0     8    0
sessionpl  144       29    0       19     1     0     1     1     0     8    0
pgrppl      48       46    0       28     1     0     1     1     0     8    0
ucredpl    104     1049    0     1035     1     0     1     1     0     8    0
zombiepl   144     1060    0     1060     1     0     1     1     0     8    1
processpl  1248    1137    0     1060     7     0     7     7     0     8    0
procpl     664     2336    0     2248     8     0     8     8     0     8    0
sosppl     168       10    0       10     2     1     1     1     0     8    1
sockpl     752     1475    0     1436    20    13     7    17     0     8    2
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     112    0        0    14     0    14    14     0     8    0
mcl2k      2048      31    0        0     4     0     4     4     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      231    0        0    14     0    14    14     0     8    0
bufpl      280    11689    0     5545   439     0   439   439     0     8    0
anonpl      32    11631    0        0    95     1    94    94     0   246    0
amapchunkpl 152   29313    0    28808    38    10    28    30     0   158    7
amappl16   200     4777    0     4636    48    32    16    27     0     8    8
amappl15   192        7    0        7     1     1     0     1     0     8    0
amappl14   184      127    0      114     1     0     1     1     0     8    0
amappl13   176        9    0        9     1     1     0     1     0     8    0
amappl12   168     1753    0     1720     3     0     3     3     0     8    0
amappl11   160       51    0       37     1     0     1     1     0     8    0
amappl10   152        4    0        4     1     1     0     1     0     8    0
amappl9    144      258    0      258     1     1     0     1     0     8    0
amappl8    136       25    0       22     1     0     1     1     0     8    0
amappl7    128      113    0      100     1     0     1     1     0     8    0
amappl6    120      214    0      209     1     0     1     1     0     8    0
amappl5    112      127    0      117     1     0     1     1     0     8    0
amappl4    104      332    0      313     1     0     1     1     0     8    0
amappl3     96     5801    0     5685     5     1     4     4     0     8    0
amappl2     88      689    0      621     2     0     2     2     0     8    0
amappl1     80    12192    0    11497    17     1    16    16     0     8    0
amappl      88     8232    0     8060     7     2     5     5     0    92    0
dma16384   16384      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       16    0        0     1     0     1     1     0     8    0
uaddrrnd    24     1088    0     1055     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1088    0     1055     1     0     1     1     0     8    0
vmmpekpl   168    11058    0    11027     3     1     2     3     0     8    0
vmmpepl    168    77166    0    74894   132    18   114   114     0   357   15
vmsppl     488     1087    0     1055     6     1     5     5     0     8    0
rwobjpl     80    26818    0    22322    94     0    94    94     0     8    0
pdppl      4096    2184    0     2110   114    38    76    82     0     8    2
pvpl        32    20926    0        0   169     0   169   169     0   265    0
pmappl     256     1087    0     1055     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      304    0       56     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83825ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83921a80) at __mp_lock+0x192
intr_handler(ffff80003ac3d9a0,ffff800000079a80) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
end of kernel
end trace frame: 0x7954421e6550, count: 9
ddb{0}> trace
x86_ipi_db(ffffffff83825ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83921a80) at __mp_lock+0x192
intr_handler(ffff80003ac3d9a0,ffff800000079a80) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
end of kernel
end trace frame: 0x7954421e6550, count: -6
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff832e683b) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b039798,ffff80003c45b6b8,ffff80003c45b6e8) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c45b688) at vfs_lookup+0x93a
namei(ffff80003c45b688) at namei+0x7ca
dorenameat(ffff80003c493258,ffffff9c,200000000080,ffffff9c,2000000000c0) at dorenameat+0x144
syscall(ffff80003c45b930) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xfa686378340, count: 6
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff832e683b) at panic+0x1e5
ufs_lookup() at ufs_lookup+0x1eda
VOP_LOOKUP(fffffd800b039798,ffff80003c45b6b8,ffff80003c45b6e8) at VOP_LOOKUP+0x6e
vfs_lookup(ffff80003c45b688) at vfs_lookup+0x93a
namei(ffff80003c45b688) at namei+0x7ca
dorenameat(ffff80003c493258,ffffff9c,200000000080,ffffff9c,2000000000c0) at dorenameat+0x144
syscall(ffff80003c45b930) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xfa686378340, count: -9