last executing test programs:

16.834711523s ago: executing program 5 (id=93):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil)
select(0x0, 0x0, 0x0, &(0x7f0000000000)={0xb3, 0xffffffffffffffc0, 0x7fffffff, 0x2, 0x3, 0x7fffffffffffffff, 0x9, 0x3ff}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000040), 0x4) (async, rerun: 64)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x96, &(0x7f0000000100), 0xb4bd, 0x0) (async, rerun: 64)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) (async, rerun: 64)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
msync(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2)

15.362148143s ago: executing program 6 (id=48):
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53}) (async)
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53})
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x9210, 0x6, 0xffffdf86, 0xffffffd6, "08955c1cfabd64ebaa291cfcf2081200", 0x5, 0x80af4})
select(0xfffffffffffffe8c, &(0x7f0000000340)={0x7f, 0x3ff, 0x7f, 0x800, 0x1, 0x2, 0x4, 0xfffeffffffef312c}, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x80000}, 0x10)
listen(r1, 0x7fff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffff9c, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x12, 0xfffffffd, 0x802, 0xe0, 0x5, 0xd26, 0x2, 0xff, 0xa43})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)})
ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000380)={@v4, @v4=@broadcast, @v4=@remote={0xac, 0x14, 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0x1, 0x7ffb, 0x1, 0xd, 0xb, 0x18, 0x9, 0x1})
pipe(&(0x7f00000004c0)) (async)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt(r1, 0x6, 0x4, &(0x7f00000002c0)="d2674561", 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaabaaaaa81004100080600010800060400080000000000000000000500000000000000000000ec408dde4c0e873b077a"])
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaf3aaaaaaaa0000000000000800451000280000000001069078ffffffffac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4])
writev(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)="17b3287b12a1fe6e3938df2d96c084d20c2db8726ddff186deea5fffc8d493385443e3c134276f02e309c8b7f504fcead2c35638c3afc577fc9c506cc057b070ee61f627f129cb8228a742ed938231107c9bf317c2679ba7ec6b3f615e94d87e8a5b736e0eda1b255450ed168c5a2ced55df0cca8fa1a2cfe1f6f7f4ec6d647eafcaf4bfabcb4dac8cc939eddff259ac45aa2913393273f6980eca8b20bb9a3114f353ae9367f71d07c6581668b03251db0bd79b4c6dd397f0d53dfcfea1fe85ec009e62dd76a0575ced24d14d9ce6816369426a26", 0xd5}, {&(0x7f00000007c0)="438f46fc293c33be4f0848eac65d6dcaf157991ffb570969ab7b1ab4f61b647608090df076c31b33aabe90d65d727ca3fa6a4e029a108115a7c2bddd6064c1325d63b6dd2845150529c16274757ae877b2c5dd244a99609fb6eb567a5b34669c05d9b347521c5dd906d49412dea904701675", 0x72}], 0x2)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98) (async)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200) (async)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2]) (async)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2])
lseek(r3, 0x7, 0x0) (async)
lseek(r3, 0x7, 0x0)
unveil(0x0, &(0x7f0000000240)='x\x00') (async)
unveil(0x0, &(0x7f0000000240)='x\x00')
r6 = accept$inet6(r2, &(0x7f0000000080), &(0x7f0000000440)=0x1c)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x100, "fe80000400000000414a0f47a500fdff", 0x8}, 0xfffffffffffffea3)
mprotect(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x5)
socket(0x18, 0x3, 0x84)

14.515368549s ago: executing program 2 (id=39):
r0 = socket(0x11, 0x3, 0x3)
socket(0x1e, 0x3, 0x0)
r1 = socket(0x18, 0xc003, 0x3a) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, 0x0) (async)
ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xbdc7d8ecccb1be9d) (async)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000140)={{0x1c, 0x18, 0x2, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x0, "104c01010000c7a65e6824552fc30316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x9, 0x6000, 0x9, 0x5, 0xfffffff8, 0x6, 0x10000000]}, 0x5c) (async)
mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x8, 0x0, 0x0)

14.514634174s ago: executing program 5 (id=93):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil)
select(0x0, 0x0, 0x0, &(0x7f0000000000)={0xb3, 0xffffffffffffffc0, 0x7fffffff, 0x2, 0x3, 0x7fffffffffffffff, 0x9, 0x3ff}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000040), 0x4) (async, rerun: 64)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x96, &(0x7f0000000100), 0xb4bd, 0x0) (async, rerun: 64)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) (async, rerun: 64)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
msync(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2)

13.075171583s ago: executing program 0 (id=106):
r0 = socket$inet(0x2, 0x4, 0x0) (async)
r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r2 = semget(0x2, 0x1, 0x90) (async)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001180), 0x800, 0x0)
dup(r3) (async)
open$dir(&(0x7f00000011c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000001200)='./file0\x00', 0x4, 0xd27d43220c7edbd, 0x0)
setrlimit(0x1, &(0x7f0000001240)={0x0, 0x200000000002}) (async)
semctl$GETZCNT(r2, 0x2, 0x7, &(0x7f0000001080)=""/209) (async)
getdents(r1, &(0x7f0000000080)=""/4091, 0xffaa) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="2b5ab1d9ce0eea4f07df1c", 0xb)

13.035801542s ago: executing program 4 (id=76):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x18, 0x1, 0x0)
lseek(r0, 0xf, 0x2)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c)
r3 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4) (async)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)) (async)
socket$inet6(0x18, 0x1, 0x0) (async)
lseek(r0, 0xf, 0x2) (async)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf) (async)

13.035720512s ago: executing program 5 (id=93):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil)
select(0x0, 0x0, 0x0, &(0x7f0000000000)={0xb3, 0xffffffffffffffc0, 0x7fffffff, 0x2, 0x3, 0x7fffffffffffffff, 0x9, 0x3ff}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000040), 0x4) (async, rerun: 64)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x96, &(0x7f0000000100), 0xb4bd, 0x0) (async, rerun: 64)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) (async, rerun: 64)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
msync(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2)

13.035459161s ago: executing program 6 (id=48):
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53}) (async)
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53})
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x9210, 0x6, 0xffffdf86, 0xffffffd6, "08955c1cfabd64ebaa291cfcf2081200", 0x5, 0x80af4})
select(0xfffffffffffffe8c, &(0x7f0000000340)={0x7f, 0x3ff, 0x7f, 0x800, 0x1, 0x2, 0x4, 0xfffeffffffef312c}, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x80000}, 0x10)
listen(r1, 0x7fff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffff9c, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x12, 0xfffffffd, 0x802, 0xe0, 0x5, 0xd26, 0x2, 0xff, 0xa43})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)})
ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000380)={@v4, @v4=@broadcast, @v4=@remote={0xac, 0x14, 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0x1, 0x7ffb, 0x1, 0xd, 0xb, 0x18, 0x9, 0x1})
pipe(&(0x7f00000004c0)) (async)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt(r1, 0x6, 0x4, &(0x7f00000002c0)="d2674561", 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaabaaaaa81004100080600010800060400080000000000000000000500000000000000000000ec408dde4c0e873b077a"])
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaf3aaaaaaaa0000000000000800451000280000000001069078ffffffffac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4])
writev(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)="17b3287b12a1fe6e3938df2d96c084d20c2db8726ddff186deea5fffc8d493385443e3c134276f02e309c8b7f504fcead2c35638c3afc577fc9c506cc057b070ee61f627f129cb8228a742ed938231107c9bf317c2679ba7ec6b3f615e94d87e8a5b736e0eda1b255450ed168c5a2ced55df0cca8fa1a2cfe1f6f7f4ec6d647eafcaf4bfabcb4dac8cc939eddff259ac45aa2913393273f6980eca8b20bb9a3114f353ae9367f71d07c6581668b03251db0bd79b4c6dd397f0d53dfcfea1fe85ec009e62dd76a0575ced24d14d9ce6816369426a26", 0xd5}, {&(0x7f00000007c0)="438f46fc293c33be4f0848eac65d6dcaf157991ffb570969ab7b1ab4f61b647608090df076c31b33aabe90d65d727ca3fa6a4e029a108115a7c2bddd6064c1325d63b6dd2845150529c16274757ae877b2c5dd244a99609fb6eb567a5b34669c05d9b347521c5dd906d49412dea904701675", 0x72}], 0x2)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98) (async)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200) (async)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2]) (async)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2])
lseek(r3, 0x7, 0x0) (async)
lseek(r3, 0x7, 0x0)
unveil(0x0, &(0x7f0000000240)='x\x00') (async)
unveil(0x0, &(0x7f0000000240)='x\x00')
r6 = accept$inet6(r2, &(0x7f0000000080), &(0x7f0000000440)=0x1c)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x100, "fe80000400000000414a0f47a500fdff", 0x8}, 0xfffffffffffffea3)
mprotect(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x5)
socket(0x18, 0x3, 0x84)

13.034765206s ago: executing program 7 (id=121):
r0 = syz_open_pts()
ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000000)={0x595a, 0x100})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x99, 0x2b, &(0x7f00000000c0)="9c973c8ae8649174f92247a3317ba669f4f22b939dcf3cdcb30a8a1fa54d94037fab6923f0217cbbff144b69d8421407709f63c336300f2aa7e1ad2aeee0005f47cd96ddc94cc1290d3ebdc57d36c33240fe4a5654dd68da280f84c571502ad5c901d02195e1dbea643a4f42984ebaa97af3a7ff8554fccb1853cac930892e522ae00000cd000000000000000000f900", 0x90)
ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000040))

12.698999669s ago: executing program 7 (id=122):
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x4287e)
r0 = socket(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0x200000e3}, 0x10)
bind(r0, &(0x7f0000000180)=@in6={0x1c, 0x18, 0x2, 0x9, '\x00', 0x1}, 0x1c)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x10, 0x94)
ioctl$FIONREAD(r1, 0x800474c4, &(0x7f0000000140))
pwritev(r1, &(0x7f00000010c0)=[{&(0x7f0000000f40)="9da69a5b9a3af7e79d9b00fbc502a006ce73761130569e90e5b8155e7a6f7accd97938f413a5616643e62b483e7ec5ca5061ed376d807b6b823d77df4714103813b1ce902eb7ca07", 0x48}], 0x1, 0x7)

12.124179282s ago: executing program 2 (id=39):
r0 = socket(0x11, 0x3, 0x3)
socket(0x1e, 0x3, 0x0)
r1 = socket(0x18, 0xc003, 0x3a) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, 0x0) (async)
ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xbdc7d8ecccb1be9d) (async)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000140)={{0x1c, 0x18, 0x2, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x0, "104c01010000c7a65e6824552fc30316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x9, 0x6000, 0x9, 0x5, 0xfffffff8, 0x6, 0x10000000]}, 0x5c) (async)
mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x8, 0x0, 0x0)

11.083950926s ago: executing program 7 (id=127):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x285b9c)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x100)
kevent(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800), 0x9, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000840), 0x7e, 0x0)
ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000880)={0x4, 0x2, 0x2, 0x2f, "1d00030100010000000000060068a95a010400", 0x6, 0x25})
setuid(0xffffffffffffffff)
ktrace(0x0, 0x5, 0x280c, 0xffffffffffffffff)
r2 = semget$private(0x0, 0x4, 0x385)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0205603, &(0x7f0000000900)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff})
mknod(0x0, 0x2000, 0xd02)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000940), 0x40, 0x0)
ioctl$BIOCSETIF(r3, 0x84946467, &(0x7f0000000980)={'tap', 0x0})
semctl$SETALL(r2, 0x0, 0x9, &(0x7f00000009c0))
semctl$GETZCNT(r2, 0x0, 0x7, &(0x7f0000000a00)=""/182)
setreuid(0x0, 0xee01)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
r4 = socket(0x2, 0x1, 0x4)
ioctl$FIONREAD(r4, 0x80206919, &(0x7f0000000380))
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000080)=0x1)
syz_emit_ethernet(0x10004, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000080086dd60db8344ffb10608feff0000010000ff80f1440000200000fe7d63b7000000b8eddb001700000000008fb954af4e2209189078037f3c"])
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800452000280000000060069078e0000002ac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000029780000"])
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000600)={0x11, 0xffff63d6, 0x5, 0x8, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff114, 0x80000002}, {0x70, 0xea, 0x2, 0x10}, {0xcd7, 0x6, 0x2, 0xfffffffc}, {0x7, 0x7f, 0x8000000f, 0x2000100}, {0x4, 0x10, 0x800, 0xfffffffe}, {0x3890, 0x40fff9, 0x1, 0x7}, {0x2, 0xa00, 0x4, 0x1}, {0x6, 0x0, 0x28003, 0x9}, {0x9, 0xf7ffffff, 0x4, 0x8003}, {0x4, 0x2, 0x3ff, 0xf}, {0x3, 0x0, 0x8a3a0004, 0x401}, {0x10000, 0x13e, 0x400010, 0x530}, {0x401, 0x0, 0x3, 0x4a1}, {0x4, 0xffffffff, 0x401, 0x7}, {0xfffffffe, 0xd, 0x8000003, 0x1fe}, {0x9be2, 0xfffffffe, 0x23, 0x10003}]})
sysctl$kern(&(0x7f0000000740)={0x1, 0x49}, 0x6, &(0x7f0000000780)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f00000007c0)=0xfffffffffffffe3c, 0x0, 0x37)
seteuid(0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0)
rename(0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800452000280002000001069078e0000002620300aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400b390780000"])
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sysctl$hw(&(0x7f0000000440)={0x6, 0x18}, 0x2, &(0x7f0000000480), 0x0, 0x0, 0x0)

11.082479741s ago: executing program 0 (id=106):
r0 = socket$inet(0x2, 0x4, 0x0) (async)
r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r2 = semget(0x2, 0x1, 0x90) (async)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001180), 0x800, 0x0)
dup(r3) (async)
open$dir(&(0x7f00000011c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000001200)='./file0\x00', 0x4, 0xd27d43220c7edbd, 0x0)
setrlimit(0x1, &(0x7f0000001240)={0x0, 0x200000000002}) (async)
semctl$GETZCNT(r2, 0x2, 0x7, &(0x7f0000001080)=""/209) (async)
getdents(r1, &(0x7f0000000080)=""/4091, 0xffaa) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="2b5ab1d9ce0eea4f07df1c", 0xb)

11.077289206s ago: executing program 4 (id=76):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x18, 0x1, 0x0)
lseek(r0, 0xf, 0x2)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c)
r3 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4) (async)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)) (async)
socket$inet6(0x18, 0x1, 0x0) (async)
lseek(r0, 0xf, 0x2) (async)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf) (async)

11.077210585s ago: executing program 5 (id=93):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil)
select(0x0, 0x0, 0x0, &(0x7f0000000000)={0xb3, 0xffffffffffffffc0, 0x7fffffff, 0x2, 0x3, 0x7fffffffffffffff, 0x9, 0x3ff}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000040), 0x4) (async, rerun: 64)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x96, &(0x7f0000000100), 0xb4bd, 0x0) (async, rerun: 64)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) (async, rerun: 64)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
msync(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2)

11.077009229s ago: executing program 6 (id=48):
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53}) (async)
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53})
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x9210, 0x6, 0xffffdf86, 0xffffffd6, "08955c1cfabd64ebaa291cfcf2081200", 0x5, 0x80af4})
select(0xfffffffffffffe8c, &(0x7f0000000340)={0x7f, 0x3ff, 0x7f, 0x800, 0x1, 0x2, 0x4, 0xfffeffffffef312c}, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x80000}, 0x10)
listen(r1, 0x7fff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffff9c, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x12, 0xfffffffd, 0x802, 0xe0, 0x5, 0xd26, 0x2, 0xff, 0xa43})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)})
ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000380)={@v4, @v4=@broadcast, @v4=@remote={0xac, 0x14, 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0x1, 0x7ffb, 0x1, 0xd, 0xb, 0x18, 0x9, 0x1})
pipe(&(0x7f00000004c0)) (async)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt(r1, 0x6, 0x4, &(0x7f00000002c0)="d2674561", 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaabaaaaa81004100080600010800060400080000000000000000000500000000000000000000ec408dde4c0e873b077a"])
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaf3aaaaaaaa0000000000000800451000280000000001069078ffffffffac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4])
writev(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)="17b3287b12a1fe6e3938df2d96c084d20c2db8726ddff186deea5fffc8d493385443e3c134276f02e309c8b7f504fcead2c35638c3afc577fc9c506cc057b070ee61f627f129cb8228a742ed938231107c9bf317c2679ba7ec6b3f615e94d87e8a5b736e0eda1b255450ed168c5a2ced55df0cca8fa1a2cfe1f6f7f4ec6d647eafcaf4bfabcb4dac8cc939eddff259ac45aa2913393273f6980eca8b20bb9a3114f353ae9367f71d07c6581668b03251db0bd79b4c6dd397f0d53dfcfea1fe85ec009e62dd76a0575ced24d14d9ce6816369426a26", 0xd5}, {&(0x7f00000007c0)="438f46fc293c33be4f0848eac65d6dcaf157991ffb570969ab7b1ab4f61b647608090df076c31b33aabe90d65d727ca3fa6a4e029a108115a7c2bddd6064c1325d63b6dd2845150529c16274757ae877b2c5dd244a99609fb6eb567a5b34669c05d9b347521c5dd906d49412dea904701675", 0x72}], 0x2)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98) (async)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200) (async)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2]) (async)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2])
lseek(r3, 0x7, 0x0) (async)
lseek(r3, 0x7, 0x0)
unveil(0x0, &(0x7f0000000240)='x\x00') (async)
unveil(0x0, &(0x7f0000000240)='x\x00')
r6 = accept$inet6(r2, &(0x7f0000000080), &(0x7f0000000440)=0x1c)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x100, "fe80000400000000414a0f47a500fdff", 0x8}, 0xfffffffffffffea3)
mprotect(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x5)
socket(0x18, 0x3, 0x84)

10.108980596s ago: executing program 7 (id=133):
mknod(&(0x7f0000000440)='./file0\x00', 0x2000, 0x40000803)
r0 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0}, 0x10)
r1 = kqueue()
kevent(r1, &(0x7f0000000140)=[{{r1}, 0xffffffffffffffff, 0x31, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000180)=[{{r1}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0)
kevent(r1, &(0x7f00000001c0), 0x20e97, 0x0, 0xfffffffe, 0x0) (async)
setgid(0xffffffffffffffff) (async)
r2 = semget(0x0, 0x1, 0x280) (async)
setresgid(0x0, 0x0, 0x0) (async)
setuid(0xffffffffffffffff)
semctl$GETZCNT(r2, 0x114b6f68dd1d5b6, 0x7, 0x0) (async)
chmod(0x0, 0x35e)
openat$pf(0xffffffffffffff9c, 0x0, 0x10, 0x0)
semctl$GETNCNT(r2, 0x4, 0x3, 0x0) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x14, 0x1, 0x7, "b3f368144c63"}], 0x14}, 0x400) (async)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000500)={&(0x7f0000000540)='./file0\x00', 0x74d, 0x9, 0x8, 0x80, 0x0, 0x0, 0xd}) (async)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000580)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async)
unveil(0x0, &(0x7f00000005c0)='c\x00')

9.737805144s ago: executing program 3 (id=135):
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x40000801)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x80, 0xe4)
ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f00000001c0)=0x80000000)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x38, 0x0, 0x0, 0x1, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x9, 0x0, 0xf240, {[@timestamp={0x8, 0xa, 0x3}, @window={0x3, 0x3, 0xa}]}}}}}}})
r1 = syz_open_pts()
ioctl$TIOCSCTTY(r1, 0x20007461)
ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000000))
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xa, 0xffffffff, 0x65, 0x2, "f31699b3e93b7e48540e3b9bf5623d3d260d286b", 0x2, 0x4})
ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000100))

9.380855417s ago: executing program 3 (id=136):
r0 = syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x10001, 0x8, 0x6eebf3cb, 0x800000, "fd911b0fe96e9205dc1f8ca9fcdde8fd09eebd54", 0x3, 0xfffffffc})
fcntl$lock(r0, 0x9, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x3, 0x1})
flock(r0, 0x1)
syz_emit_ethernet(0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db00000000000000000000000000000000ff020000000000000000000000000001"])
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
r1 = socket(0x1, 0x1, 0x0)
closefrom(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
shutdown(r2, 0x2)
sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x3010b}, 0x0)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x0)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x800, 0x0)
getsockname$unix(r4, 0x0, &(0x7f0000000180))
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f00000001c0)={0x1, 0x3, 0xe14e, 0xffff8000, "080000000110ea5e17de00000011008e11cecc00"})
socketpair(0x2, 0x1000, 0x75, &(0x7f0000000080))

9.379207154s ago: executing program 4 (id=76):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x18, 0x1, 0x0)
lseek(r0, 0xf, 0x2)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c)
r3 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4) (async)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)) (async)
socket$inet6(0x18, 0x1, 0x0) (async)
lseek(r0, 0xf, 0x2) (async)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf) (async)

8.495900088s ago: executing program 0 (id=106):
r0 = socket$inet(0x2, 0x4, 0x0) (async)
r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r2 = semget(0x2, 0x1, 0x90) (async)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001180), 0x800, 0x0)
dup(r3) (async)
open$dir(&(0x7f00000011c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000001200)='./file0\x00', 0x4, 0xd27d43220c7edbd, 0x0)
setrlimit(0x1, &(0x7f0000001240)={0x0, 0x200000000002}) (async)
semctl$GETZCNT(r2, 0x2, 0x7, &(0x7f0000001080)=""/209) (async)
getdents(r1, &(0x7f0000000080)=""/4091, 0xffaa) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="2b5ab1d9ce0eea4f07df1c", 0xb)

8.287024506s ago: executing program 2 (id=39):
r0 = socket(0x11, 0x3, 0x3)
socket(0x1e, 0x3, 0x0)
r1 = socket(0x18, 0xc003, 0x3a) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, 0x0) (async)
ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xbdc7d8ecccb1be9d) (async)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000140)={{0x1c, 0x18, 0x2, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x0, "104c01010000c7a65e6824552fc30316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x9, 0x6000, 0x9, 0x5, 0xfffffff8, 0x6, 0x10000000]}, 0x5c) (async)
mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x8, 0x0, 0x0)

8.286802001s ago: executing program 3 (id=138):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0)
mprotect(&(0x7f0000090000/0x2000)=nil, 0x2000, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x18, 0x6, 0x9}, 0x4, &(0x7f00000000c0)="9b0214c3eb987ab7fe4189c99e805e6e84d356960798a692992117d6728436ba1bd87f42e3303eac3846520d050712f838130efce33f524b3fa75085f35dfa4dc7e149d4d6d06a3f23616e774c02f1a07bee7385e6664282cb6988f8d9cae75e39a5a11e32e0e6ebd635450b2eba540af7f2aa5dbfbdd900a0da9e274f50acd76b5c567049ef436dbea0d7562f52950fa5ef6ec2bd02adc7f1fe850c081d95dcf4f06a852ab475cca257352828a76e5334be562595e894238b96ca5d4d3f670feac9b4e8aa9bef19525cb6f7e8570b2a374f1408341ed45bb7ad3fb975ffc080e963cb9a8bd949ee0fc6dbceb7d956e658a5673cc947b3e88aa810f8ed7cca1021020000000000001345daa49507756f49775275ca390b94e85d5a95b8bdacb9429c25483a9275d0da3b561c6adc3c141f1b7e1cf2785198a318bdbdc9ac0a623855e941dc1872fcb045e0d9df1ecc6357ee21e2b0802cb60eec6a34396ce1e34e8a0bdd5e94723235f0675fad5315e7eecc3e11347f40e67a8c0ae4428f0760c70e1dd7873e27142bbae1a7e44de453a073c799353d46dd81439b115afb2e353e3bb073e3342773216b07e49ca4799e51ceacf9df0fd2dbe9a8eb3770ea880f76e6f4588ffb7d82693a096344671843a1f2082612b09a507c6e505ff594828b388f9ed85f1602a20561aed73c87e1ef080f7d9d6a8a38d4a3151c41741dd196f4f7859e071fc98111cc9024f790ce68", &(0x7f0000000300)=0x210, 0x0, 0x0)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000)

8.285884583s ago: executing program 5 (id=93):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil)
select(0x0, 0x0, 0x0, &(0x7f0000000000)={0xb3, 0xffffffffffffffc0, 0x7fffffff, 0x2, 0x3, 0x7fffffffffffffff, 0x9, 0x3ff}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000040), 0x4) (async, rerun: 64)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x96, &(0x7f0000000100), 0xb4bd, 0x0) (async, rerun: 64)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) (async, rerun: 64)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
msync(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2)

8.28561833s ago: executing program 6 (id=48):
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53}) (async)
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53})
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x9210, 0x6, 0xffffdf86, 0xffffffd6, "08955c1cfabd64ebaa291cfcf2081200", 0x5, 0x80af4})
select(0xfffffffffffffe8c, &(0x7f0000000340)={0x7f, 0x3ff, 0x7f, 0x800, 0x1, 0x2, 0x4, 0xfffeffffffef312c}, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x80000}, 0x10)
listen(r1, 0x7fff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffff9c, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x12, 0xfffffffd, 0x802, 0xe0, 0x5, 0xd26, 0x2, 0xff, 0xa43})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)})
ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000380)={@v4, @v4=@broadcast, @v4=@remote={0xac, 0x14, 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0x1, 0x7ffb, 0x1, 0xd, 0xb, 0x18, 0x9, 0x1})
pipe(&(0x7f00000004c0)) (async)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt(r1, 0x6, 0x4, &(0x7f00000002c0)="d2674561", 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaabaaaaa81004100080600010800060400080000000000000000000500000000000000000000ec408dde4c0e873b077a"])
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaf3aaaaaaaa0000000000000800451000280000000001069078ffffffffac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4])
writev(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)="17b3287b12a1fe6e3938df2d96c084d20c2db8726ddff186deea5fffc8d493385443e3c134276f02e309c8b7f504fcead2c35638c3afc577fc9c506cc057b070ee61f627f129cb8228a742ed938231107c9bf317c2679ba7ec6b3f615e94d87e8a5b736e0eda1b255450ed168c5a2ced55df0cca8fa1a2cfe1f6f7f4ec6d647eafcaf4bfabcb4dac8cc939eddff259ac45aa2913393273f6980eca8b20bb9a3114f353ae9367f71d07c6581668b03251db0bd79b4c6dd397f0d53dfcfea1fe85ec009e62dd76a0575ced24d14d9ce6816369426a26", 0xd5}, {&(0x7f00000007c0)="438f46fc293c33be4f0848eac65d6dcaf157991ffb570969ab7b1ab4f61b647608090df076c31b33aabe90d65d727ca3fa6a4e029a108115a7c2bddd6064c1325d63b6dd2845150529c16274757ae877b2c5dd244a99609fb6eb567a5b34669c05d9b347521c5dd906d49412dea904701675", 0x72}], 0x2)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98) (async)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200) (async)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2]) (async)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2])
lseek(r3, 0x7, 0x0) (async)
lseek(r3, 0x7, 0x0)
unveil(0x0, &(0x7f0000000240)='x\x00') (async)
unveil(0x0, &(0x7f0000000240)='x\x00')
r6 = accept$inet6(r2, &(0x7f0000000080), &(0x7f0000000440)=0x1c)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x100, "fe80000400000000414a0f47a500fdff", 0x8}, 0xfffffffffffffea3)
mprotect(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x5)
socket(0x18, 0x3, 0x84)

8.285537733s ago: executing program 7 (id=133):
mknod(&(0x7f0000000440)='./file0\x00', 0x2000, 0x40000803)
r0 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0}, 0x10)
r1 = kqueue()
kevent(r1, &(0x7f0000000140)=[{{r1}, 0xffffffffffffffff, 0x31, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000180)=[{{r1}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0)
kevent(r1, &(0x7f00000001c0), 0x20e97, 0x0, 0xfffffffe, 0x0) (async)
setgid(0xffffffffffffffff) (async)
r2 = semget(0x0, 0x1, 0x280) (async)
setresgid(0x0, 0x0, 0x0) (async)
setuid(0xffffffffffffffff)
semctl$GETZCNT(r2, 0x114b6f68dd1d5b6, 0x7, 0x0) (async)
chmod(0x0, 0x35e)
openat$pf(0xffffffffffffff9c, 0x0, 0x10, 0x0)
semctl$GETNCNT(r2, 0x4, 0x3, 0x0) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x14, 0x1, 0x7, "b3f368144c63"}], 0x14}, 0x400) (async)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000500)={&(0x7f0000000540)='./file0\x00', 0x74d, 0x9, 0x8, 0x80, 0x0, 0x0, 0xd}) (async)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000580)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async)
unveil(0x0, &(0x7f00000005c0)='c\x00')

7.387307256s ago: executing program 3 (id=140):
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000040000000000001000", 0xf, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000001580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609907a600302c03cb3ae1c4697a653e236f000000500000000000ff02000000000000000000000000000102009078000000036900de00000682160800000000000000000000000000000000fe8000"/103])
sysctl$vm_swapencrypt(&(0x7f0000001380)={0x2, 0x5, 0x2}, 0x3, &(0x7f00000013c0)="61c281b2d707d1612ccde796d0dd8676688f1d5d311f7d2f304d210073e059cc806a838d3ce8e6bb384bc4576325d496dbc6947e6f72063af1f71143239d", &(0x7f0000001400)=0x3e, &(0x7f0000001440)="0437d27687d223208646d93174796fb8d4ddf8372834cf2639edd8a21004ab79c2f3dbc02dea88e41d3789b61c5f6a0dacc1639786a8e49da1d14cefe1bee3bb424e22acc6d08457076977880162189a6ebba1b418e5e071d27a4bbc9d8322165ac7181d50e7713db02bd221894a1d53cf325f0fe38aece491fbe055b62287cedabcf95d58994e10d6e9f2df70cd1a513449611f1a2e06a15a6a13f88f5bf2269867d2c28a4a5ebc4cc7ede45b42c1066abc1dbb5d2da9de89a8da42e8c370f5da827a5828ef864075f5", 0xca)
ioctl$DIOCGETRULES(0xffffffffffffffff, 0xcd604406, &(0x7f00000000c0)={0x5, 0x6, 0x2, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x0, "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"})
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0)
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000e80)={0x1, 0x408, &(0x7f0000000ec0)=[{0x1, './file0/file0\x00', 0x80000002}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000001340)={0x0, 0x40a, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket(0x18, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000001540)={0x1c, 0x18, 0x1, 0x0, "fe80000095c4092000a784000040ff00", 0x3}, 0x1c)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000040000000000001000", 0xf, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x66, &(0x7f0000001580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609907a600302c03cb3ae1c4697a653e236f000000500000000000ff02000000000000000000000000000102009078000000036900de00000682160800000000000000000000000000000000fe8000"/103]) (async)
sysctl$vm_swapencrypt(&(0x7f0000001380)={0x2, 0x5, 0x2}, 0x3, &(0x7f00000013c0)="61c281b2d707d1612ccde796d0dd8676688f1d5d311f7d2f304d210073e059cc806a838d3ce8e6bb384bc4576325d496dbc6947e6f72063af1f71143239d", &(0x7f0000001400)=0x3e, &(0x7f0000001440)="0437d27687d223208646d93174796fb8d4ddf8372834cf2639edd8a21004ab79c2f3dbc02dea88e41d3789b61c5f6a0dacc1639786a8e49da1d14cefe1bee3bb424e22acc6d08457076977880162189a6ebba1b418e5e071d27a4bbc9d8322165ac7181d50e7713db02bd221894a1d53cf325f0fe38aece491fbe055b62287cedabcf95d58994e10d6e9f2df70cd1a513449611f1a2e06a15a6a13f88f5bf2269867d2c28a4a5ebc4cc7ede45b42c1066abc1dbb5d2da9de89a8da42e8c370f5da827a5828ef864075f5", 0xca) (async)
ioctl$DIOCGETRULES(0xffffffffffffffff, 0xcd604406, &(0x7f00000000c0)={0x5, 0x6, 0x2, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x0, "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"}) (async)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) (async)
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000e80)={0x1, 0x408, &(0x7f0000000ec0)=[{0x1, './file0/file0\x00', 0x80000002}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) (async)
ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000001340)={0x0, 0x40a, 0x0}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
socket(0x11, 0x3, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
connect$inet6(r3, &(0x7f0000001540)={0x1c, 0x18, 0x1, 0x0, "fe80000095c4092000a784000040ff00", 0x3}, 0x1c) (async)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)

6.546584869s ago: executing program 0 (id=106):
r0 = socket$inet(0x2, 0x4, 0x0) (async)
r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r2 = semget(0x2, 0x1, 0x90) (async)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001180), 0x800, 0x0)
dup(r3) (async)
open$dir(&(0x7f00000011c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000001200)='./file0\x00', 0x4, 0xd27d43220c7edbd, 0x0)
setrlimit(0x1, &(0x7f0000001240)={0x0, 0x200000000002}) (async)
semctl$GETZCNT(r2, 0x2, 0x7, &(0x7f0000001080)=""/209) (async)
getdents(r1, &(0x7f0000000080)=""/4091, 0xffaa) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="2b5ab1d9ce0eea4f07df1c", 0xb)

6.338833105s ago: executing program 2 (id=39):
r0 = socket(0x11, 0x3, 0x3)
socket(0x1e, 0x3, 0x0)
r1 = socket(0x18, 0xc003, 0x3a) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, 0x0) (async)
ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xbdc7d8ecccb1be9d) (async)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000140)={{0x1c, 0x18, 0x2, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x0, "104c01010000c7a65e6824552fc30316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x9, 0x6000, 0x9, 0x5, 0xfffffff8, 0x6, 0x10000000]}, 0x5c) (async)
mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x8, 0x0, 0x0)

6.338608647s ago: executing program 3 (id=142):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000080)='./file0\x00', 0x78e, 0x165)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000)
sysctl$hw(&(0x7f0000000100), 0x2, &(0x7f0000000140)="396d7df6670fbe8581cd53ecc37572ee2c5f1dd55cb41819894aada6c9184f8d446e6dfb35ae528dc22730da688802cee668c3a9c1bef2ab6ba3158ed40161ccf9c3ced369867b2b1c78d103a579d07eec315b7b62d21e6757dd39258022ed0186ea17a7dcd735f86626817a076aa901c95b12b4a3a7323f03adb1a950c2b2bd647405c3697efcff75f49ed5e13a048a8103a987bcecd5e47417c8bd861cba2c2a79f9dfc6f177102c74b89da374381307ebfe3187bf", &(0x7f0000000200)=0xb6, &(0x7f0000000240)="9f99991aa3aa230385cfbd2088e7169e92887aa948f578db694235f7295929f9bc9d1ff3569789b757d0022de817f8d420320a2457327dffc0", 0x39)
truncate(&(0x7f00000000c0)='./file0\x00', 0x30000)
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
open(&(0x7f0000000080)='./file0\x00', 0x78e, 0x165) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) (async)
sysctl$hw(&(0x7f0000000100), 0x2, &(0x7f0000000140)="396d7df6670fbe8581cd53ecc37572ee2c5f1dd55cb41819894aada6c9184f8d446e6dfb35ae528dc22730da688802cee668c3a9c1bef2ab6ba3158ed40161ccf9c3ced369867b2b1c78d103a579d07eec315b7b62d21e6757dd39258022ed0186ea17a7dcd735f86626817a076aa901c95b12b4a3a7323f03adb1a950c2b2bd647405c3697efcff75f49ed5e13a048a8103a987bcecd5e47417c8bd861cba2c2a79f9dfc6f177102c74b89da374381307ebfe3187bf", &(0x7f0000000200)=0xb6, &(0x7f0000000240)="9f99991aa3aa230385cfbd2088e7169e92887aa948f578db694235f7295929f9bc9d1ff3569789b757d0022de817f8d420320a2457327dffc0", 0x39) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x30000) (async)

6.336536932s ago: executing program 4 (id=76):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x18, 0x1, 0x0)
lseek(r0, 0xf, 0x2)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c)
r3 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4) (async)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)) (async)
socket$inet6(0x18, 0x1, 0x0) (async)
lseek(r0, 0xf, 0x2) (async)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf) (async)

6.336319948s ago: executing program 6 (id=48):
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53}) (async)
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53})
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x9210, 0x6, 0xffffdf86, 0xffffffd6, "08955c1cfabd64ebaa291cfcf2081200", 0x5, 0x80af4})
select(0xfffffffffffffe8c, &(0x7f0000000340)={0x7f, 0x3ff, 0x7f, 0x800, 0x1, 0x2, 0x4, 0xfffeffffffef312c}, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x80000}, 0x10)
listen(r1, 0x7fff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffff9c, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x12, 0xfffffffd, 0x802, 0xe0, 0x5, 0xd26, 0x2, 0xff, 0xa43})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)})
ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000380)={@v4, @v4=@broadcast, @v4=@remote={0xac, 0x14, 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0x1, 0x7ffb, 0x1, 0xd, 0xb, 0x18, 0x9, 0x1})
pipe(&(0x7f00000004c0)) (async)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt(r1, 0x6, 0x4, &(0x7f00000002c0)="d2674561", 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaabaaaaa81004100080600010800060400080000000000000000000500000000000000000000ec408dde4c0e873b077a"])
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaf3aaaaaaaa0000000000000800451000280000000001069078ffffffffac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4])
writev(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)="17b3287b12a1fe6e3938df2d96c084d20c2db8726ddff186deea5fffc8d493385443e3c134276f02e309c8b7f504fcead2c35638c3afc577fc9c506cc057b070ee61f627f129cb8228a742ed938231107c9bf317c2679ba7ec6b3f615e94d87e8a5b736e0eda1b255450ed168c5a2ced55df0cca8fa1a2cfe1f6f7f4ec6d647eafcaf4bfabcb4dac8cc939eddff259ac45aa2913393273f6980eca8b20bb9a3114f353ae9367f71d07c6581668b03251db0bd79b4c6dd397f0d53dfcfea1fe85ec009e62dd76a0575ced24d14d9ce6816369426a26", 0xd5}, {&(0x7f00000007c0)="438f46fc293c33be4f0848eac65d6dcaf157991ffb570969ab7b1ab4f61b647608090df076c31b33aabe90d65d727ca3fa6a4e029a108115a7c2bddd6064c1325d63b6dd2845150529c16274757ae877b2c5dd244a99609fb6eb567a5b34669c05d9b347521c5dd906d49412dea904701675", 0x72}], 0x2)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98) (async)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200) (async)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2]) (async)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2])
lseek(r3, 0x7, 0x0) (async)
lseek(r3, 0x7, 0x0)
unveil(0x0, &(0x7f0000000240)='x\x00') (async)
unveil(0x0, &(0x7f0000000240)='x\x00')
r6 = accept$inet6(r2, &(0x7f0000000080), &(0x7f0000000440)=0x1c)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x100, "fe80000400000000414a0f47a500fdff", 0x8}, 0xfffffffffffffea3)
mprotect(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x5)
socket(0x18, 0x3, 0x84)

5.440869558s ago: executing program 1 (id=143):
pipe2(&(0x7f0000000300), 0x0)
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x5, 0x75}, {0x100}], 0x2})
r1 = socket(0x2, 0x1, 0x0)
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000280)={&(0x7f0000000240)=[{0x22, 0xffffff00}, {0x87, 0x4}, {0x8a, 0x3}, {0x82, 0x4}, {0x20, 0xfffffc00}, {0x44, 0x3}, {0x83, 0x6}, {0x48, 0x6}], 0x8})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))
setitimer(0x0, &(0x7f00000002c0)={{0x16f9, 0x9}, {0x359, 0x7d1}}, 0x0)
ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000000))

4.516118103s ago: executing program 0 (id=106):
r0 = socket$inet(0x2, 0x4, 0x0) (async)
r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r2 = semget(0x2, 0x1, 0x90) (async)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001180), 0x800, 0x0)
dup(r3) (async)
open$dir(&(0x7f00000011c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000001200)='./file0\x00', 0x4, 0xd27d43220c7edbd, 0x0)
setrlimit(0x1, &(0x7f0000001240)={0x0, 0x200000000002}) (async)
semctl$GETZCNT(r2, 0x2, 0x7, &(0x7f0000001080)=""/209) (async)
getdents(r1, &(0x7f0000000080)=""/4091, 0xffaa) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="2b5ab1d9ce0eea4f07df1c", 0xb)

3.393920123s ago: executing program 1 (id=144):
ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000080)={0x2, 0x408, &(0x7f00000000c0)=[{0x1, './bus/../file0/f\x00', 0x74}, {0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9}]})
sysctl$net_inet_ip(&(0x7f0000000980)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
setrlimit(0x8, &(0x7f0000000b00)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000b40)=0x2)
ioctl$FIOASYNC(r1, 0x80047460, &(0x7f0000000b80)=0x7)
ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000bc0)={0x6a34, 0x3, 0xfffffffb, 0x71c7, "778d938520e312dfff841b000000e80000f800", 0xffffffd9, 0x973})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x81, 0x0)
mknod(&(0x7f0000000c00)='./file0\x00', 0x2000, 0x202)
lstat(&(0x7f0000000c40)='./file0\x00', 0x0)
mknod(&(0x7f0000000c80)='./bus\x00', 0x6000, 0x202)
link(&(0x7f0000000cc0)='./bus\x00', 0x0)
unlink(&(0x7f0000000d00)='./file0\x00')
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
ioctl$TIOCSETA(r2, 0xc450444d, &(0x7f0000000e00)={0x2f, 0x1, 0xfffffffd, 0x4, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x3, 0x5})
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x102)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000900), 0xf94a14e19cec2761, 0x0)
ioctl$TIOCSETA(r3, 0xc0104453, &(0x7f0000000940)={0x3, 0x408, 0x6, 0x10070, "456000004fcb420865abbf000200000000000001", 0xc, 0x7})
r4 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r4, 0x0, 0x9, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="01000000", 0x4)

3.392470706s ago: executing program 2 (id=39):
r0 = socket(0x11, 0x3, 0x3)
socket(0x1e, 0x3, 0x0)
r1 = socket(0x18, 0xc003, 0x3a) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, 0x0) (async)
ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xbdc7d8ecccb1be9d) (async)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000140)={{0x1c, 0x18, 0x2, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x0, "104c01010000c7a65e6824552fc30316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x9, 0x6000, 0x9, 0x5, 0xfffffff8, 0x6, 0x10000000]}, 0x5c) (async)
mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x8, 0x0, 0x0)

3.392211545s ago: executing program 4 (id=76):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x18, 0x1, 0x0)
lseek(r0, 0xf, 0x2)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c)
r3 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4) (async)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)) (async)
socket$inet6(0x18, 0x1, 0x0) (async)
lseek(r0, 0xf, 0x2) (async)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf) (async)

3.392140582s ago: executing program 5 (id=93):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil)
select(0x0, 0x0, 0x0, &(0x7f0000000000)={0xb3, 0xffffffffffffffc0, 0x7fffffff, 0x2, 0x3, 0x7fffffffffffffff, 0x9, 0x3ff}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000040), 0x4) (async, rerun: 64)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x96, &(0x7f0000000100), 0xb4bd, 0x0) (async, rerun: 64)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) (async, rerun: 64)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
msync(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2)

3.392064418s ago: executing program 7 (id=133):
mknod(&(0x7f0000000440)='./file0\x00', 0x2000, 0x40000803)
r0 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0}, 0x10)
r1 = kqueue()
kevent(r1, &(0x7f0000000140)=[{{r1}, 0xffffffffffffffff, 0x31, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000180)=[{{r1}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0)
kevent(r1, &(0x7f00000001c0), 0x20e97, 0x0, 0xfffffffe, 0x0) (async)
setgid(0xffffffffffffffff) (async)
r2 = semget(0x0, 0x1, 0x280) (async)
setresgid(0x0, 0x0, 0x0) (async)
setuid(0xffffffffffffffff)
semctl$GETZCNT(r2, 0x114b6f68dd1d5b6, 0x7, 0x0) (async)
chmod(0x0, 0x35e)
openat$pf(0xffffffffffffff9c, 0x0, 0x10, 0x0)
semctl$GETNCNT(r2, 0x4, 0x3, 0x0) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x14, 0x1, 0x7, "b3f368144c63"}], 0x14}, 0x400) (async)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000500)={&(0x7f0000000540)='./file0\x00', 0x74d, 0x9, 0x8, 0x80, 0x0, 0x0, 0xd}) (async)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000580)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async)
unveil(0x0, &(0x7f00000005c0)='c\x00')

2.590818602s ago: executing program 1 (id=145):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x210, 0xffff, 0x1, "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"}], 0x210}}, 0x38, 0x404)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x2})
sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x406)
close(r1)
unveil(0x0, &(0x7f00000002c0)='x\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
sendmmsg(r0, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x210, 0xffff, 0x1, "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"}], 0x210}}, 0x38, 0x404) (async)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x2}) (async)
sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x406) (async)
close(r1) (async)
unveil(0x0, &(0x7f00000002c0)='x\x00') (async)

2.030897718s ago: executing program 1 (id=146):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000140)={{0x3, './file0\x00', [{[@v4=@multicast1, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}], [0x5, 0x10ec], 0x400, 0x1a}, {[@v4=@multicast2, @v4=@local={0xac, 0x14, 0x0}], [0x1, 0xf4], 0x400, 0xe}], {{0xfffa, 0x3, 0xff, 0xba4a}, 0x100, 0x9, 0x4, 0x5, 0x0, 0x40, 0x2}, {{0xe1, 0xa, 0x5, 0x8}, 0x9, 0x8000, 0x7, 0x7, 0x2, 0x9, 0x4}, @v6=@mcast1, 0xd, 0xfffffffb, 0x9, 0x1, 0x4, [[0x5, 0x1], [0x80000001, 0x6]], [[0x5, 0x3], [0x0, 0xfffffff9]], 0xc, [0x2, 0x3], 0x0, 0x0, 0x8, 0x3, 0x6, 0x4, 0x1, 0x3, 0x5, 0x6, 0x4, 0x8000, "9aee"}}) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
r2 = socket$inet(0x18, 0x3, 0x102)
connect$inet(r2, &(0x7f00000004c0)={0x10, 0x2, 0x0, 0x7}, 0x7)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000540)="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", 0x2cd}], 0x1) (async)
ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000840)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002})
syz_emit_ethernet(0x22, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00000020000008004508001400002000203390780000000000000000"])

1.524414547s ago: executing program 0 (id=106):
r0 = socket$inet(0x2, 0x4, 0x0) (async)
r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r2 = semget(0x2, 0x1, 0x90) (async)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001180), 0x800, 0x0)
dup(r3) (async)
open$dir(&(0x7f00000011c0)='./file0\x00', 0xf02, 0x186)
ktrace(&(0x7f0000001200)='./file0\x00', 0x4, 0xd27d43220c7edbd, 0x0)
setrlimit(0x1, &(0x7f0000001240)={0x0, 0x200000000002}) (async)
semctl$GETZCNT(r2, 0x2, 0x7, &(0x7f0000001080)=""/209) (async)
getdents(r1, &(0x7f0000000080)=""/4091, 0xffaa) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="2b5ab1d9ce0eea4f07df1c", 0xb)

341.732808ms ago: executing program 1 (id=147):
r0 = socket(0x2, 0x8002, 0x0)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x6384)
open(&(0x7f0000000140)='./bus\x00', 0x80, 0x101)
mknod(&(0x7f0000000180)='./file1\x00', 0x2000, 0x637d)
open(&(0x7f00000001c0)='./file1\x00', 0x8, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x80, 0xe0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
closefrom(r1)

339.28271ms ago: executing program 2 (id=39):
r0 = socket(0x11, 0x3, 0x3)
socket(0x1e, 0x3, 0x0)
r1 = socket(0x18, 0xc003, 0x3a) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, 0x0) (async)
ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xbdc7d8ecccb1be9d) (async)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000140)={{0x1c, 0x18, 0x2, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x0, "104c01010000c7a65e6824552fc30316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x9, 0x6000, 0x9, 0x5, 0xfffffff8, 0x6, 0x10000000]}, 0x5c) (async)
mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x8, 0x0, 0x0)

339.060654ms ago: executing program 3 (id=142):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000080)='./file0\x00', 0x78e, 0x165)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000)
sysctl$hw(&(0x7f0000000100), 0x2, &(0x7f0000000140)="396d7df6670fbe8581cd53ecc37572ee2c5f1dd55cb41819894aada6c9184f8d446e6dfb35ae528dc22730da688802cee668c3a9c1bef2ab6ba3158ed40161ccf9c3ced369867b2b1c78d103a579d07eec315b7b62d21e6757dd39258022ed0186ea17a7dcd735f86626817a076aa901c95b12b4a3a7323f03adb1a950c2b2bd647405c3697efcff75f49ed5e13a048a8103a987bcecd5e47417c8bd861cba2c2a79f9dfc6f177102c74b89da374381307ebfe3187bf", &(0x7f0000000200)=0xb6, &(0x7f0000000240)="9f99991aa3aa230385cfbd2088e7169e92887aa948f578db694235f7295929f9bc9d1ff3569789b757d0022de817f8d420320a2457327dffc0", 0x39)
truncate(&(0x7f00000000c0)='./file0\x00', 0x30000)
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
open(&(0x7f0000000080)='./file0\x00', 0x78e, 0x165) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) (async)
sysctl$hw(&(0x7f0000000100), 0x2, &(0x7f0000000140)="396d7df6670fbe8581cd53ecc37572ee2c5f1dd55cb41819894aada6c9184f8d446e6dfb35ae528dc22730da688802cee668c3a9c1bef2ab6ba3158ed40161ccf9c3ced369867b2b1c78d103a579d07eec315b7b62d21e6757dd39258022ed0186ea17a7dcd735f86626817a076aa901c95b12b4a3a7323f03adb1a950c2b2bd647405c3697efcff75f49ed5e13a048a8103a987bcecd5e47417c8bd861cba2c2a79f9dfc6f177102c74b89da374381307ebfe3187bf", &(0x7f0000000200)=0xb6, &(0x7f0000000240)="9f99991aa3aa230385cfbd2088e7169e92887aa948f578db694235f7295929f9bc9d1ff3569789b757d0022de817f8d420320a2457327dffc0", 0x39) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x30000) (async)

338.691779ms ago: executing program 4 (id=76):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x18, 0x1, 0x0)
lseek(r0, 0xf, 0x2)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c)
r3 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddedbe68cec0e8e1016f5116b6ac00c802eb2350cf91ae4f4e", 0x19}], 0x1, 0x4) (async)
socketpair(0x18, 0x8000, 0xa6, &(0x7f0000000040)) (async)
socket$inet6(0x18, 0x1, 0x0) (async)
lseek(r0, 0xf, 0x2) (async)
bind$inet6(r2, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x18, 0x0, 0x11, "0000000000000069fdf6ca8900", 0xa0000004}, 0x1c) (async)
socket$inet6(0x18, 0x1, 0x6) (async)
bind$inet6(r3, &(0x7f0000000440)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r4, &(0x7f0000000500)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500002051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
sendmmsg(r1, &(0x7f00000003c0)={{&(0x7f0000000100)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000140)="9201f509a127f549bf945986d35bd045bec815c38481d0628945cd986e53d993f0a114e47076c6e946659ddab7e41766572c0156d73e2dfeff34b5b0749d53758dc1", 0x42}], 0x1, &(0x7f0000000200)=[{0xb4, 0x0, 0x3, "b044774f77da7a9478639c13f203b147a26e4e1669c99a18287db04ba318f5edb2f348fe9ecd728a58ef4c469ae9d6b2d646b5a0fda86983d1710999baba63347b654281e95061388ba1d64b1bdd1442e8b8124cc4b141aa31f1146e652cb9869bf057c11e171d5c0e2fd87c18d9203aa66d103e984bd101d86b7b6d3da3d328e5966892636b73fc7250f5e5587b5a56271f1c1ab0b85634b01c7242523e2a48487897c58f95"}, {0x18, 0xffff, 0xa9e2, "fc9440348abf01643ac7"}, {0x78, 0xffff, 0x4, "0921eac4520a82089847834d1f80f1c7963b65b36672e720a006028c75023fa58edc3c9829422dbbb1fe5bc2543b72405387fbf3fa948011c94621de55f9af2ab9403f92fe3adaaf91f0c3e28804c08c5931fa8251d034aacd1da7f88a45d26f8e1402c096000000000000"}], 0x144}}, 0x38, 0xf) (async)

338.399088ms ago: executing program 6 (id=48):
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53}) (async)
setrlimit(0x8, &(0x7f0000000100)={0xb, 0x53})
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x9210, 0x6, 0xffffdf86, 0xffffffd6, "08955c1cfabd64ebaa291cfcf2081200", 0x5, 0x80af4})
select(0xfffffffffffffe8c, &(0x7f0000000340)={0x7f, 0x3ff, 0x7f, 0x800, 0x1, 0x2, 0x4, 0xfffeffffffef312c}, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x80000}, 0x10)
listen(r1, 0x7fff)
r2 = socket$inet6(0x18, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xe2, "000000002180000000030000004800", 0x800}, 0x1c)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffff9c, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x12, 0xfffffffd, 0x802, 0xe0, 0x5, 0xd26, 0x2, 0xff, 0xa43})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)})
ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000380)={@v4, @v4=@broadcast, @v4=@remote={0xac, 0x14, 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0x1, 0x7ffb, 0x1, 0xd, 0xb, 0x18, 0x9, 0x1})
pipe(&(0x7f00000004c0)) (async)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt(r1, 0x6, 0x4, &(0x7f00000002c0)="d2674561", 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaabaaaaa81004100080600010800060400080000000000000000000500000000000000000000ec408dde4c0e873b077a"])
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaf3aaaaaaaa0000000000000800451000280000000001069078ffffffffac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4])
writev(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)="17b3287b12a1fe6e3938df2d96c084d20c2db8726ddff186deea5fffc8d493385443e3c134276f02e309c8b7f504fcead2c35638c3afc577fc9c506cc057b070ee61f627f129cb8228a742ed938231107c9bf317c2679ba7ec6b3f615e94d87e8a5b736e0eda1b255450ed168c5a2ced55df0cca8fa1a2cfe1f6f7f4ec6d647eafcaf4bfabcb4dac8cc939eddff259ac45aa2913393273f6980eca8b20bb9a3114f353ae9367f71d07c6581668b03251db0bd79b4c6dd397f0d53dfcfea1fe85ec009e62dd76a0575ced24d14d9ce6816369426a26", 0xd5}, {&(0x7f00000007c0)="438f46fc293c33be4f0848eac65d6dcaf157991ffb570969ab7b1ab4f61b647608090df076c31b33aabe90d65d727ca3fa6a4e029a108115a7c2bddd6064c1325d63b6dd2845150529c16274757ae877b2c5dd244a99609fb6eb567a5b34669c05d9b347521c5dd906d49412dea904701675", 0x72}], 0x2)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98) (async)
open(&(0x7f0000000480)='./file1\x00', 0x18289, 0x98)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200) (async)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000680)=0x200)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2]) (async)
syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2])
lseek(r3, 0x7, 0x0) (async)
lseek(r3, 0x7, 0x0)
unveil(0x0, &(0x7f0000000240)='x\x00') (async)
unveil(0x0, &(0x7f0000000240)='x\x00')
r6 = accept$inet6(r2, &(0x7f0000000080), &(0x7f0000000440)=0x1c)
connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x100, "fe80000400000000414a0f47a500fdff", 0x8}, 0xfffffffffffffea3)
mprotect(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x5)
socket(0x18, 0x3, 0x84)

0s ago: executing program 1 (id=148):
r0 = socket(0x18, 0x1, 0x0)
shutdown(r0, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x10001, "fe800500000000000000000500", 0xc}, 0x1c)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x2010, r2, 0x0)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x80000000000206, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[])
msgsnd(0x0, 0x0, 0x171, 0x0)
ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
poll(0x0, 0x0, 0x0)
setresuid(0xee00, 0x0, 0x0)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
getrusage(0x1, &(0x7f0000000180))
ioctl$DIOCRCLRTSTATS(r1, 0xc4504441, &(0x7f0000002100)={{'./file1\x00', './file1/file0\x00', 0x29, 0x2}, &(0x7f0000001200)=[{'./file0\x00', './file1/file0\x00', 0x0, 0x2}], 0x428, 0x1, 0x1, 0x4, 0x9, 0x8, 0x12, 0x8})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts.

OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-a.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
pckbd_enable: command error
witness: lock order reversal:
 1st 0xffffffff83a00d48 pf_lock (pf_lock)
 2nd 0xffffffff839703f0 netlock (netlock)
lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock)
#0  rw_do_enter_write+0xba
#1  uvn_io+0x54c
#2  uvn_get+0x31d
#3  uvm_fault_lower_io+0x2ce
#4  uvm_fault_lower+0x28d
#5  uvm_fault+0x274
#6  kpageflttrap+0x2f4
#7  kerntrap+0x19d
#8  alltraps_kern_meltdown+0x7b
#9  _copyin+0x5b
#10 pfioctl+0x1377
#11 VOP_IOCTL+0xac
#12 vn_ioctl+0xf8
#13 sys_ioctl+0x674
#14 syscall+0xbd4
#15 Xsyscall+0x128
lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock)
#0  rw_do_enter_write+0xba
#1  pfi_attach_ifgroup+0x2a
#2  if_addgroup+0x2f8
#3  if_attachsetup+0xcf
#4  if_attach+0x6d
#5  vio_attach+0x1853
#6  config_attach+0x449
#7  virtio_pci_attach+0x4e6
#8  config_attach+0x449
#9  pci_probe_device+0x8e5
#10 pci_enumerate_bus+0x368
#11 config_attach+0x449
#12 acpipci_attach_bus+0x381
#13 acpipci_attach_busses+0x93
#14 mainbus_attach+0x304
#15 config_attach+0x449
#16 cpu_configure+0x47
#17 main+0x4c7
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> show kasan
No such command
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffffffff839703f0,9,0) at witness_checkorder+0x10d1
rw_do_enter_write(ffffffff839703d8,0) at rw_do_enter_write+0xba
uvn_io(fffff0006cca8600,ffff800035b8bc68,1,202,0) at uvn_io+0x54c
uvn_get(fffff0006cca8600,0,ffff800035b8bd38,ffff800035b8bd1c,0,1,87d8b8e8618f7299,1) at uvn_get+0x31d
uvm_fault_lower_io(ffff800035b8bf50,ffff800035b8bf88,ffff800035b8bdd0,ffff800035b8bdb8) at uvm_fault_lower_io+0x2ce
uvm_fault_lower(ffff800035b8bf50,ffff800035b8bf88,ffff800035b8bed0) at uvm_fault_lower+0x28d
uvm_fault(fffff0006fb771f0,200000001000,0,1) at uvm_fault+0x274
kpageflttrap(ffff800035b8c100,200000001200) at kpageflttrap+0x2f4
kerntrap(ffff800035b8c100) at kerntrap+0x19d
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
_copyin() at _copyin+0x5b
pfioctl(14900,c4504441,ffff800001626000,1,ffff80002a21a548) at pfioctl+0x1377
VOP_IOCTL(fffff0007b1b3720,c4504441,ffff800001626000,1,fffff000097fd3a8,ffff80002a21a548) at VOP_IOCTL+0xac
vn_ioctl(fffff0006cbdd228,c4504441,ffff800001626000,ffff80002a21a548) at vn_ioctl+0xf8
sys_ioctl(ffff80002a21a548,ffff800035b8ccb0,ffff800035b8cc00) at sys_ioctl+0x674
syscall(ffff800035b8ccb0) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8a2798e04b0, count: -18
ddb{1}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff800035b8ba20
rbx                                0
rdx               0xffff800001604640
rcx               0xffff80002a21a548
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff800035b8b900
r9                0x8080808080808080
r10               0xe2d4cc0bd6f102dd
r11                0x7077758040a7b18
r12               0xfffff000041052c0
r13               0xfffff000048f49b0
r14                              0x3
r15               0xffffffff8355d2dd    substchar+0x31b8
rip               0xffffffff820c4505    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800035b8ba10
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=344554 pid=97980 tcnt=2 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a21b240,0xffffffff83a27f98
    process=0xffff80002a7f7570 user=0xffff800035b87000, vmspace=0xfffff0006fb771f0
    estcpu=35, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 97980   84141  66409 60928  7        0x10          0           syz-executor
*97980  344554  66409 60928  7        0x10  0x4000000           syz-executor
 39420  151699  43313     0  2         0x2          0           syz-executor
 16094  218996  43313     0  3         0x2          0 clonelk   syz-executor
 15183   90070  43313     0  3         0x2       0x80 piperd    syz-executor
 26613  300253      1     0  3    0x100003       0x80 ttyin     getty
 49925  142245      0     0  3     0x14000      0x280 nfsidl    nfsio
 17447  466077      0     0  3     0x14000      0x280 nfsidl    nfsio
 85571  463682      0     0  3     0x14000      0x280 nfsidl    nfsio
 78373  164640      0     0  3     0x14000      0x280 nfsidl    nfsio
 11705  284213      0     0  3     0x14000      0x280 nfsidl    nfsio
 80637   16174      0     0  3     0x14000      0x280 nfsidl    nfsio
 84568  180683      0     0  3     0x14000      0x280 nfsidl    nfsio
 44297  433784      0     0  3     0x14000      0x280 nfsidl    nfsio
 11925   72051      0     0  3     0x14000      0x280 nfsidl    nfsio
 86388  436889      0     0  3     0x14000      0x280 nfsidl    nfsio
 58851   26503      0     0  3     0x14000      0x280 nfsidl    nfsio
 83805  196315      0     0  3     0x14000      0x280 nfsidl    nfsio
 48174  403442      0     0  3     0x14000      0x280 nfsidl    nfsio
 51870  425897      0     0  3     0x14000      0x280 nfsidl    nfsio
 36715  343997      0     0  3     0x14000      0x280 nfsidl    nfsio
 38222  503897      0     0  3     0x14000      0x280 nfsidl    nfsio
 10672  225208      0     0  3     0x14000      0x280 nfsidl    nfsio
 55687  131439      0     0  3     0x14000      0x280 nfsidl    nfsio
  3434  283928      0     0  3     0x14000      0x280 nfsidl    nfsio
 56650  193824      0     0  3     0x14000      0x280 nfsidl    nfsio
 66409  229356  43313     0  3         0x2       0x80 nanoslp   syz-executor
 25148  168163      0     0  3     0x14000      0x200 acct      acct
 43313  286884  82345     0  3         0x2       0x80 nanoslp   syz-executor
 82345  214688  86239     0  3    0x100002       0x88 sigsusp   ksh
 86239  282611  17829     0  3        0x10       0x88 kqread    sshd-session
 17829  268683  54876     0  3        0x12       0x80 kqread    sshd-session
 54876  216045      1     0  3           0       0x88 kqread    sshd
 41502  154251  14752    74  3   0x1100012       0x80 bpf       pflogd
 14752  141569      1     0  3           0       0x80 sbwait    pflogd
 86344  434124  48871    73  3   0x1100010       0x80 kqread    syslogd
 48871  107621      1     0  3    0x100002       0x80 sbwait    syslogd
 89902   65070      1     0  3    0x100000       0x80 kqread    resolvd
 37567  452454  11958    77  3    0x100012       0x80 kqread    dhcpleased
 16517  186123  11958    77  3    0x100012       0x80 kqread    dhcpleased
 11958   98202      1     0  3           0       0x80 kqread    dhcpleased
 39513  321340      0     0  3     0x14000      0x200 bored     smr
 79331  388541      0     0  2     0x14000      0x200           zerothread
 32755  197635      0     0  3     0x14000      0x200 aiodoned  aiodoned
  6826  123848      0     0  3     0x14000      0x200 syncer    update
 85911  449624      0     0  3     0x14000      0x200 cleaner   cleaner
 69864  376800      0     0  3     0x14000      0x200 reaper    reaper
 29375   86485      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 38606  334782      0     0  3     0x14000      0x200 bored     viomb
 64677   37849      0     0  3     0x14000 0x40000200 acpi0     acpi0
 68761   58965      0     0  3     0x14000 0x40000200           idle1
 53393  206542      0     0  3     0x14000      0x200 bored     softnet1
 69130  461596      0     0  2     0x14000      0x200           softnet0
 45961  107385      0     0  3     0x14000      0x200 smrbar    systqmp
 60136  363479      0     0  3     0x14000      0x200 bored     systq
 92077  364339      0     0  3     0x14000      0x200 tmoslp    softclockmp
 50151  130593      0     0  3     0x14000 0x40000200 tmoslp    softclock
 81092  286854      0     0  3     0x14000 0x40000200           idle0
     1    7383      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{1}> show all locks
Process 97980 (syz-executor) thread 0xffff80002a21a548 (344554)
exclusive rwlock pf_lock r = 0 (0xffffffff83a00d48)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  pfioctl+0x1342
#3  VOP_IOCTL+0xac
#4  vn_ioctl+0xf8
#5  sys_ioctl+0x674
#6  syscall+0xbd4
#7  Xsyscall+0x128
exclusive rwlock pfioctl_rw r = 0 (0xffffffff83a00dd8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  pfioctl+0x1d4
#3  VOP_IOCTL+0xac
#4  vn_ioctl+0xf8
#5  sys_ioctl+0x674
#6  syscall+0xbd4
#7  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b7f980)
#0  witness_lock+0x5f1
#1  vn_ioctl+0x4d
#2  sys_ioctl+0x674
#3  syscall+0xbd4
#4  Xsyscall+0x128
Process 45961 (systqmp) thread 0xffff800045ffe298 (107385)
shared rwlock systqmp r = 0 (0xffffffff839cc978)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11075  12082K   12221K 166960K     12419        0
            pcb    17     12K      12K 166960K        53        0
         rtable   167      6K       9K 166960K      1928        0
             pf    30     17K      23K 166960K       247        0
         ifaddr    28      5K       7K 166960K       262        0
        ifgroup    44      2K       2K 166960K       282        0
         sysctl     1      1K       9K 166960K         5        0
       counters    64     36K      37K 166960K       186        0
       ioctlops     1      2K       4K 166960K      1626        0
            iov     0      0K      12K 166960K         2        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1292     81K      82K 166960K      1941        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         5        0
         VM map     2      1K       1K 166960K         2        0
            sem    16      1K       1K 166960K        22        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    10     33K      89K 166960K      1101        0
          sigio     0      0K       0K 166960K         3        0
           proc    72    115K     180K 166960K      2025        0
        subproc    61      3K       4K 166960K       547        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        12        0
       in_multi    55      3K       6K 166960K       661        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K        18        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   229   1023K    1023K 166960K       229        0
           exec     0      0K       1K 166960K      1054        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   181    166K     190K 166960K      9114        0
       UVM aobj    11      2K       2K 166960K        12        0
     pinsyscall    35     70K     104K 166960K      3591        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         3        0
            NDP    11      0K       2K 166960K       187        0
           temp    29   9125K    9189K 166960K     20992        0
         kqueue    13     20K      26K 166960K        50        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120      160    0      157     1     0     1     1     0     8    0
rtentry    176      678    0      610     6     1     5     6     0     8    1
unpcb      144      135    0      118     1     0     1     1     0     8    0
syncache   336        6    0        6     1     1     0     1     0     8    0
tcpcb      736       60    0       56     1     0     1     1     0     8    0
arp        136      120    0      110     1     0     1     1     0     8    0
inpcb      328      419    0      412     2     1     1     2     0     8    0
nd6        152      178    0      166     1     0     1     1     0     8    0
pkpcb       40        6    0        6     1     1     0     1     0     8    0
kcovpl      48       60    0       54     1     0     1     1     0     8    0
ppxss      1192       4    0        4     2     1     1     1     0     8    1
pppxif     1576       1    0        1     1     1     0     1     0     8    0
pffrag     232        2    0        1     1     0     1     1     0   482    0
pffrnode    88        2    0        1     1     0     1     1     0     8    0
pffrent     40        4    0        3     1     0     1     1     0     8    0
pfosfp      40     1429    0     1428     5     4     1     5     0     8    0
pfosfpen   112     1429    0     1428    21    13     8    21     0     8    7
pfanchor   1288       3    0        0     1     0     1     1     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       31    0        7     1     0     1     1     0     8    0
pfstkey    128       31    0        7     1     0     1     1     0     8    0
pfstate    448       31    0        7     4     0     4     4     0     8    0
pfrule     1360      92    0       67     3     0     3     3     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     2755    0     2428    33     9    24    30     0     8    0
art_table   40     2756    0     2428     5     0     5     5     0     8    1
art_node    32      678    0      600     1     0     1     1     0     8    0
semapl      72       19    0        5     1     0     1     1     0     8    0
shmpl      120        9    0        1     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1953    0      376    99     0    99    99     0     8    0
ffsino     296     1953    0      376   122     0   122   122     0     8    0
nchpl      144     2417    0      533    70     0    70    70     0     8    0
vnodes     216     2569    0        0   143     0   143   143     0     8    0
namei      1024   14081    0    14081     3     2     1     2     0     8    1
percpumem   16      109    0       61     1     0     1     1     0     8    0
kstatmem   264      141    0      120     2     0     2     2     0     8    0
scxspl     216     8296    0     8296    11     3     8     8     1     8    8
plimitpl   152      119    0      103     1     0     1     1     0     8    0
sigapl     424     1334    0     1273     9     1     8     9     0     8    0
knotepl    120      571    0        0    18     0    18    18     0     8    0
kqueuepl   224      205    0      195     5     4     1     5     0     8    0
pipepl     344      702    0      675     9     1     8     9     0     8    5
fdescpl    528     1297    0     1273     3     0     3     3     0     8    0
filepl     160     5119    0     4926    15     1    14    15     0     8    4
lockfpl    104      109    0      107     1     0     1     1     0     8    0
lockfspl    48       45    0       43     1     0     1     1     0     8    0
sessionpl  144       83    0       74     1     0     1     1     0     8    0
pgrppl      48      147    0      131     1     0     1     1     0     8    0
ucredpl    104      410    0      396     1     0     1     1     0     8    0
zombiepl   144     1276    0     1273     1     0     1     1     0     8    0
processpl  1240    1334    0     1273     6     0     6     6     0     8    0
procpl     664     1744    0     1682     7     0     7     7     0     8    0
sockpl     752      729    0      701     4     0     4     4     0     8    1
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl9k128   9344       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     123    0        0    16     0    16    16     0     8    0
mcl2k      2048      40    0        0     5     0     5     5     0     8    0
mextrefs    64       38    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      256    0        0    16     0    16    16     0     8    0
bufpl      272     2848    0      106   183     0   183   183     0     8    0
anonpl      32     7422    0        0    60     0    60    60     0   247    0
amapchunkpl 152   25053    0    24747    33     5    28    30     0   158   12
amappl16   200     2379    0     2371     8     4     4     5     0     8    3
amappl15   192       24    0       24     1     1     0     1     0     8    0
amappl14   184     1054    0     1053     1     0     1     1     0     8    0
amappl13   176      239    0      227     1     0     1     1     0     8    0
amappl12   168     1754    0     1731     2     0     2     2     0     8    0
amappl11   160       17    0       17     1     1     0     1     0     8    0
amappl10   152       79    0       65     1     0     1     1     0     8    0
amappl9    144      275    0      275     1     1     0     1     0     8    0
amappl8    136      303    0      301     1     0     1     1     0     8    0
amappl7    128      251    0      238     1     0     1     1     0     8    0
amappl6    120      670    0      668     1     0     1     1     0     8    0
amappl5    112      104    0       92     1     0     1     1     0     8    0
amappl4    104      444    0      425     1     0     1     1     0     8    0
amappl3     96     4598    0     4535     3     0     3     3     0     8    0
amappl2     88     1217    0     1148     2     0     2     2     0     8    0
amappl1     80    17836    0    17268    15     1    14    15     0     8    1
amappl      88     7480    0     7372     4     0     4     4     0    92    0
uvmvnodes   80      115    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       11    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1297    0     1273     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1297    0     1273     1     0     1     1     0     8    0
vmmpekpl   168    13338    0    13279     4     0     4     4     0     8    0
vmmpepl    168    91713    0    90185    88     2    86    87     0   357    7
vmsppl     488     1296    0     1273     5     0     5     5     0     8    1
rwobjpl     80    28285    0    27335    24     1    23    24     0     8    0
pdppl      4096    2602    0     2546   152    84    68    84     0     8   12
pvpl        32    13685    0        0   111     0   111   111     0   265    0
pmappl     256     1296    0     1273     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      528    0       98    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff8392cff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83b7f180) at __mp_lock+0x190
intr_handler(ffff80002a30a6e0,ffff800000079600) at intr_handler+0xe9
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__mp_lock(ffffffff83b7f180) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x125
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
end of kernel
end trace frame: 0x6ff8d13661e0, count: -10
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffffffff839703f0,9,0) at witness_checkorder+0x10d1
rw_do_enter_write(ffffffff839703d8,0) at rw_do_enter_write+0xba
uvn_io(fffff0006cca8600,ffff800035b8bc68,1,202,0) at uvn_io+0x54c
uvn_get(fffff0006cca8600,0,ffff800035b8bd38,ffff800035b8bd1c,0,1,87d8b8e8618f7299,1) at uvn_get+0x31d
uvm_fault_lower_io(ffff800035b8bf50,ffff800035b8bf88,ffff800035b8bdd0,ffff800035b8bdb8) at uvm_fault_lower_io+0x2ce
uvm_fault_lower(ffff800035b8bf50,ffff800035b8bf88,ffff800035b8bed0) at uvm_fault_lower+0x28d
uvm_fault(fffff0006fb771f0,200000001000,0,1) at uvm_fault+0x274
kpageflttrap(ffff800035b8c100,200000001200) at kpageflttrap+0x2f4
kerntrap(ffff800035b8c100) at kerntrap+0x19d
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
_copyin() at _copyin+0x5b
pfioctl(14900,c4504441,ffff800001626000,1,ffff80002a21a548) at pfioctl+0x1377
VOP_IOCTL(fffff0007b1b3720,c4504441,ffff800001626000,1,fffff000097fd3a8,ffff80002a21a548) at VOP_IOCTL+0xac
vn_ioctl(fffff0006cbdd228,c4504441,ffff800001626000,ffff80002a21a548) at vn_ioctl+0xf8
sys_ioctl(ffff80002a21a548,ffff800035b8ccb0,ffff800035b8cc00) at sys_ioctl+0x674
syscall(ffff800035b8ccb0) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8a2798e04b0, count: -18