last executing test programs:

2.666010899s ago: executing program 6 (id=3411):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async)
r0 = syz_open_pts() (async)
msgsnd(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32], 0xe2, 0x800) (async)
sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0)
close(r0) (async)
syz_open_pts() (async)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x2)
dup2(r0, r1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0xf66b, 0xfffffffe, 0x401, 0x1fffff05, "9cdc45c6307e8b61c7d61df7fb7f6c00005fdd04", 0x707, 0x2}) (async)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="2aef1ba69986bfa8bdbecbcad1f3c1622163c1f5228fdb7c32bca7f3fbb73f4dc3a6f65d935878b1eb253cd096f8cc79616313b32f5322e0b353900f163102e8d7d10f70b82891374d7a7194f8e389ef304b6ae2a05bfc367f5f7e26429d3744e8c527949c7c9cf5cdf50cb497f38a364de272a33409d37704405a9e3a04ce70b030e9e6d5e035f09fe4e9f5d125d6a59dc71059cae75a706fc343e93b3cd5bd5012390c9979b681d08bf4271a78fb4aef8ad01e4be2bf8abcbe33d4250fec27fec8901c4ef2fe5f4aa010797dd5deb02d5f1f3bbdd854934d70fa322214a6de03954966a7fe92a2b328c4a9a0ee3b791598319b4ec9096289a3e8678b8e8cb777cd7a414ccebd131b3b10ff23355e00adcefab600a793aa92290fce8eec2c76fa5ed06a104b7bfd9ebd22ffabdf11c9bab57b4b22bcba67692d53a1985e43c733841eaeb09c3ba011aa129a2e1fa5a718340fd85507676301cf9702437eb9681aaabd8f98ed06c512333fff813c6a7293126fb20e53dc969fbf07d6de8aa65384ac5b178c6eac1b7f31cacd4b7ec500fe8d03fba3f6460aaf028b2765d76a1568d99654b0866ebd1ce3fdfdadf23db97d0f0c27482d255b00e219c13191ca16e417a8f04b3488e87210df971c644cf7811c815daef73f67625d3ecc575fae5b0a31c0c29b89bba9353dca8559d91823f86f987d854aafb0b6b90e85a73e6a96b207b0e03f4729964725cf780d7c22e53e3e0e8acf83e0d69a19a4a5119147a2dec2230b006aa6672484bb93b1127371d56a6071307e20fa85543abadc07806d6b4d8a8a66be5f2ea29d6b084f223ae956885fd30df7132e93177d326dec10045d41ed8bad802371161569021890e4e358355042155896c483defd10f3439e8bd555079242e9d00e5246b2038e1ed86af97b09ee7004209841bb0161c518f826631140334ec5d7f95d4012a15867bf42e678494f7c42bdbc388e78f6e037e16d04e7f2ad834464a5ba7e085c5e", 0xfd98}], 0x1)

2.449610676s ago: executing program 6 (id=3418):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f0000000140)={0x0, 0x800, 0x2})
r1 = getpid()
open(&(0x7f0000000080)='./file0\x00', 0x2d1998643c0a72a0, 0x1)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40001738, r1)
nanosleep(&(0x7f00000025c0), &(0x7f0000001180))
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0x0, 0x18f, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0x2})
writev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc", 0x1c}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09", 0x48}], 0x2)
syz_open_pts()

2.188840403s ago: executing program 1 (id=3426):
shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) (async)
r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
setuid(0xee01)
shmctl$IPC_STAT(r0, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @random="000000000004", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x2, @remote={0xac, 0x14, 0x0}}, @icmp=@generic={0x9, 0x6, 0x0, "06deaac9"}}}}})

2.185948799s ago: executing program 1 (id=3429):
r0 = socket(0x11, 0x3, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$VMM_IOC_CREATE(r1, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffe000/0x1000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'})
kevent(r1, 0x0, 0xffeffff1, 0x0, 0xb19, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r3}, 0xffffffffffffffff, 0x13, 0x2}, {{r3}, 0xffffffffffffffff, 0x62}], 0x6, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x6, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x4400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x2}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0})
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8)

2.019291143s ago: executing program 6 (id=3438):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x8003, 0x2})
r1 = socket(0x18, 0x3, 0x0)
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0, 0x0, 0x0, 0x31}, 0x0)
r2 = socket(0x800000018, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8, 0x11, 0x85, 0x7e7}, {0x7, 0xf3, 0xff, 0x5}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="6233c7542fa4dd96aca4fc5300e419050000006da349856b4952c0d0b51ef34fff0f00000000000081ad24459feacfd1", &(0x7f0000000000)=0x30, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r3, &(0x7f0000000500)="f81ad30100060000000100000000", 0xe)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037282112", 0x62, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b100050460000000000000000041", 0xe, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
clock_getres(0x0, &(0x7f00000000c0))
sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0)

1.926762566s ago: executing program 1 (id=3439):
r0 = syz_open_pts()
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x96, 0x3ff}, 0x400, 0xffff, 0x0, 0xffffffffffffffff, 0x7, 0x800000000000108, 0x5, 0x7})
socket$inet(0x2, 0x1, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
syz_open_pts()
r1 = getpgrp()
setpgid(0xffffffffffffffff, r1)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x10}, 0x40000000000001e2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x6, 0x2800000, 0xffffcf4b, 0x1, "f40ca4a7e6d220c44a2eb7d40da76ef7b22d3ab5", 0x6, 0x1})
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xfffffffc, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3})
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
setreuid(0xee00, 0x0)
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, 0x0)
setuid(0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x2, &(0x7f0000000000)="bbda2f28c48403521bb2d2e46b", 0x0, 0x0, 0x0)

1.923997296s ago: executing program 6 (id=3442):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000080)={0x0, [{}, {0x0, 0x20000}, {}, {0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x3}, {0x3}, {}, {}, {}, {0x0, 0x3}, {0x1}, {}, {}, {}, {0x0, 0x7}, {}, {0x1}, {0x1}, {0x0, 0x1d}, {}, {}, {}, {0x2}, {}, {0x0, 0x1823}]})
sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x3, 0x1)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x4, 0x8, 0x2, 0x90001}, {0x87, 0x3, 0xd0, 0x1}, {0x1006, 0x5, 0x1}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
connect$unix(r0, &(0x7f0000000000), 0x10)
write(r0, &(0x7f0000000180)="39f29fff56576a8d", 0x8)

1.817671608s ago: executing program 6 (id=3444):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000000)="ed", 0x1)
fcntl$setstatus(r1, 0x4, 0x4)
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000029, 0x39, 0x0, 0x0)
r3 = socket(0x6, 0x1, 0x8)
recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0}}, 0x10, 0x2842, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0)
ioctl$TIOCSETA(r5, 0xc4504448, &(0x7f0000000740)={0x6, 0xfffffff7, 0x0, 0xc00002, "637447c1d100", 0x8000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0})
readv(r1, &(0x7f0000000040)=[{0x0}], 0x1)
recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/185, 0xb9}], 0x1, &(0x7f00000002c0)=""/2, 0x2}, 0x1)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async)
write(r0, &(0x7f0000000000)="ed", 0x1) (async)
fcntl$setstatus(r1, 0x4, 0x4) (async)
socket(0x18, 0x3, 0x0) (async)
setsockopt(r2, 0x1000000029, 0x39, 0x0, 0x0) (async)
socket(0x6, 0x1, 0x8) (async)
recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0}}, 0x10, 0x2842, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0) (async)
ioctl$TIOCSETA(r5, 0xc4504448, &(0x7f0000000740)={0x6, 0xfffffff7, 0x0, 0xc00002, "637447c1d100", 0x8000}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) (async)
readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) (async)
recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/185, 0xb9}], 0x1, &(0x7f00000002c0)=""/2, 0x2}, 0x1) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x0) (async)

1.81734949s ago: executing program 1 (id=3445):
sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x3, 0x1)
connect$unix(r0, &(0x7f0000000000), 0x10)
write(r0, &(0x7f0000000180)="39f29fff56576a8d", 0x8)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r1 = syz_open_pts()
syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047460, &(0x7f0000000040)=0x6)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0x8, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1)
accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x2, 0x3, 0x1) (async)
connect$unix(r0, &(0x7f0000000000), 0x10) (async)
write(r0, &(0x7f0000000180)="39f29fff56576a8d", 0x8) (async)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async)
syz_open_pts() (async)
syz_open_pts() (async)
ioctl$FIOASYNC(r1, 0x80047460, &(0x7f0000000040)=0x6) (async)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0x8, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) (async)
sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1) (async)
accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)

1.815390167s ago: executing program 6 (id=3447):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x400000000002, 0x0)
r2 = dup2(r1, r0)
setsockopt$sock_int(r2, 0xffff, 0x80, &(0x7f0000000080)=0xa, 0x4)
r3 = syz_open_pts()
r4 = syz_open_pts()
r5 = kqueue()
sendmsg(0xffffffffffffffff, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="befc5310414ea1f117730e081cd91d6833e491cf8e7fe0a5b4927c2b0815c8053a1c2252a568f42e2c5319d40bcd0e926c9e56fd1c164bb6fa1f224356c1da6605e378d9c140704d17", 0x49}], 0x1, 0x0}, 0x2)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$TIOCSETA(r6, 0xc450444a, &(0x7f0000000040)={0xffffffff, 0x6, 0x10000000, 0x1, "01d04b0a0047c1d1fff100", 0xf, 0x100b})
kevent(r5, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0xf, 0x4, 0xfffffffe, 0xfffffff6, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40000})
ioctl$TIOCSTAT(r3, 0x20007465, 0x0)
r7 = socket(0x11, 0x3, 0x0)
sendto$unix(r7, &(0x7f0000000280)="b1000503000003f10000000105000000331c13fecea10500fef96ec0300100007ae30240004e3039d2d236acf20b7810be38164991f7c8cf5f882b29ffffff7f000000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5ffffc881ea6e2e000000001257aea8063076000000000000000004bfba351c537e2ba37f50b609f4f747e37183f834371205d1a7f1c057aa1a33000000000000000000", 0xb1, 0x80e, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa573471bc0e86dd6c8905cb00003230000000000000000000000000000000000000000000f166ffa9cf49a200000000f5feffe000000100"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000080)={0x0, [{}, {0x0, 0x20000}, {}, {0x1, 0x3}, {0x2}, {0x3}, {}, {}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0xfffffffa}, {0x0, 0x3}, {}, {0x3, 0x3}, {0x1}, {0x0, 0x3}, {0x2, 0xa3}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0x2003}, {0x1, 0x10000000}, {0x1}, {0x3, 0x1d}, {0x1, 0x800000}, {}, {}, {0x2, 0x6}, {0x0, 0xfffffffc}, {0x1, 0x8}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = socket(0x2, 0x3, 0x1)
connect$unix(r8, &(0x7f0000000000), 0x10)
write(r4, &(0x7f0000000180)="39f29fff56576a8d", 0x8)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

1.637446062s ago: executing program 1 (id=3452):
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x2}, 0x8)
ftruncate(r0, 0x80000000)
kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0x10000001, 0x3, 0x4, "eb2c33eb8800000af1e0a0099500000400", 0x0, 0x2})
write(r1, &(0x7f00000004c0)="98322715a208d2f9abd6ffb76f39b675cb458c8361ca8e5b8deae880484f827f2bd686ba74ae0a9ca761f4d4e5e3e6354f294b834c290e27181b0fcf578a9e37db1340e6aef8b67cc1530bb5891b05b827cadd5a84439aa26b1482c04608463d61733f3205", 0x65)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
mprotect(&(0x7f0000034000/0x3000)=nil, 0x3000, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pread(r4, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FIONBIO(r2, 0x80487008, &(0x7f0000000140)=0x1)

1.488923163s ago: executing program 5 (id=3455):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56})
setrlimit(0x0, &(0x7f0000000000)={0x2, 0x10})
r0 = syz_open_pts()
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6, 0x5}, {0x0, 0xe1bc}, {0x1}, {0x0, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x803}, {0x1}, {0x0, 0x4}, {0x5}, {0x2, 0x2}, {0x3}, {0x2, 0x400}, {0x0, 0x200}, {0x2, 0x80000000}, {0x0, 0xfffffffd}, {}, {0x3}, {0x1}, {0x1, 0xa}, {0x1}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000180)='./file0\x00', 0x1, 0x125)
syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a80fe8000000000000000000000000000aaff9152a0d9484cd21ff867fce12de0c202"]) (async)
syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a80fe8000000000000000000000000000aaff9152a0d9484cd21ff867fce12de0c202"])
ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x326, 0x0)
setitimer(0x0, &(0x7f0000000140)={{0x4, 0xf}, {0xfff, 0x6}}, 0x0)
getitimer(0x0, &(0x7f0000000400)) (async)
getitimer(0x0, &(0x7f0000000400))
r1 = socket(0x18, 0x1, 0x0)
close(r1)
socket(0x18, 0x2, 0x0) (async)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x4, &(0x7f0000000040)="00fb534f", 0x4)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r3 = socket(0x2, 0x2, 0x0)
setsockopt(r3, 0x0, 0x5, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1882, 0x0, 0xffffffffffffff8c) (async)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1882, 0x0, 0xffffffffffffff8c)
sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
close(r0) (async)
close(r0)
syz_open_pts() (async)
syz_open_pts()
msgget(0x3, 0x408)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x40978b, 0x10101, 0x7, 0x506, "3b082001f78b67af9e3bb0c49d73230100040c00", 0x202, 0xf})
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x8a) (async)
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x8a)
writev(r0, &(0x7f0000000700), 0x0)

1.390565028s ago: executing program 5 (id=3457):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
clock_gettime(0x2, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9b68, 0x0)
sysctl$hw(&(0x7f0000000100)={0x6, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0)
r1 = socket(0x18, 0x3, 0x0)
getsockopt(r1, 0x29, 0x2a, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x4, 0xffffffffffffffff)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}})
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
sysctl$hw(&(0x7f0000000000)={0x6, 0xb}, 0x2, &(0x7f0000000140)="4c5d53d221cfdd8f67c82dbd2ca04f8caba4baa869769f4063df84aa02f51c123dd994bdbd95bd757f91a9985db202c043f01822972657ce1eec37c5f97abf4ff10265375a65ee97c5941c6322e9f9028297aa30e84114c67491d5d7f70d7a7702dfaf2a177a6489d9dbd92ce9ed1875762a70fac160de8fcdff42881c4ef618a13ffa0a2ff97f4c4304889d6d6fa6deeccbee3744c6c708971a58b4eb823a814f3db94f9806292be0f352f7f0603df9bfb9f6273514567d5feed2757dfcd40731b82d37f53c2b5464", &(0x7f00000000c0)=0xc9, &(0x7f0000000240)="51993783a656bcd25e58a985778203f99034ba3afd66332ce1094909f964f6cae359dc2645934305ded066c9034c7d9f6536f50f1ab4c367fa0a845aad9b1e956c1d540ce3efad8765cfe86a17478758e30963bb0c65425371bc2c8cfaacaca329468a37323ad97636d7fe4efccf184004a0a2fbcfef1508d9c0", 0x7a)
mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02)
chmod(&(0x7f0000000040)='./file0\x00', 0x3fe)
setuid(0xee01)
r2 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x4)
open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)
close(r2)
ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5})

1.165953516s ago: executing program 3 (id=3468):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
open(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x33)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="58dbdd554ab54f37", 0x8}], 0x1, 0x1)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.165625869s ago: executing program 7 (id=3469):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x4) (async, rerun: 32)
close(0xffffffffffffffff) (rerun: 32)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000040), 0x0) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r1 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil)
sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00231b000f407061035c2532", 0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x66})
r2 = syz_open_pts()
close(r2) (async)
r3 = syz_open_pts() (async, rerun: 32)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0x719, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) (async, rerun: 32)
ioctl$TIOCSFLAGS(r2, 0x8004745c, &(0x7f00000000c0)=0x1) (async)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r4 = socket$inet(0x2, 0x3, 0x8)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000))
shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0)
sysctl$hw(&(0x7f0000000280)={0x6, 0x1c}, 0x2, &(0x7f0000001280), 0x0, 0x0, 0x0) (async, rerun: 64)
r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0xae828e137847f62, 0x0) (rerun: 64)
setrlimit(0x1, &(0x7f0000000180)={0xf7ffffffffffffee, 0xffffffffffffffff})
ftruncate(r5, 0x40000000007) (async)
r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x1d8)
preadv(r6, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async)
r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d164f4b8f82c1d09936270286ea75b958987a9f15438392f4d2feb0900000000000ef962", 0x26}], 0x1, 0x0) (async, rerun: 32)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x3c) (rerun: 32)

1.164336563s ago: executing program 0 (id=3470):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x83, 0x2d, 0x2, 0x8}]})
openat(0xffffffffffffffff, 0x0, 0x8000, 0x40)
fcntl$lock(0xffffffffffffffff, 0x8, 0x0)
r0 = syz_open_pts()
flock(r0, 0x3)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001})
close(r0)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5904)
select(0xffffffffffffff87, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x408)
mquery(&(0x7f0000459000/0x4000)=nil, 0x4000, 0x1, 0x0, r0, 0x37)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

986.435587ms ago: executing program 3 (id=3472):
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xffffffffffffffe3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000330000/0x2000)=nil, &(0x7f000055c000/0x1000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f000072b000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000460000/0x1000)=nil}, {&(0x7f0000310000/0x1000)=nil, &(0x7f00005a8000/0x1000)=nil, 0x4}, {&(0x7f000046f000/0x3000)=nil, &(0x7f00000d1000/0x3000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000013b000/0x2000)=nil, 0x6}, {&(0x7f0000762000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xfff}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x8000000000000000}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0xb2bc}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil}, {&(0x7f000012a000/0x1000)=nil, &(0x7f00005e9000/0x10000)=nil, 0xfffffffffffffffc}, {&(0x7f0000223000/0x4000)=nil, &(0x7f00002c5000/0x3000)=nil, 0x100000001}, {&(0x7f00006f1000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}], './file0\x00'})
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060396372"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='W\x00')
writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="184ff364ac5a903289acbda0af58efc4a38940ff2a683a042ab1d8f9b31fa928b80df15343819d7a69a3b51328", 0x2d}], 0x1)
r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}], 0x1)
write(r2, &(0x7f0000000140)="0979b6058801f78f07022002004000000045691d1000e67963913f729c159a04e313789b434300003f30ff7f6a0a", 0x2e)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000180)={0x9, &(0x7f0000000200)=[{0x7, 0x5, 0x7, 0x8}, {0x0, 0x0, 0x0, 0x4}, {0x7, 0x0, 0x9, 0x4c}, {0xfff8, 0xdd, 0x6, 0x8}, {0x4000, 0x4, 0xfe, 0x637e0ed7}, {0x2, 0x70, 0x4, 0x2}, {0x801e, 0xe6, 0xd, 0x101}, {0xcb, 0x7, 0xff, 0x7}, {0xc2, 0x5, 0xb, 0x1}]})
kqueue()
r3 = socket(0x18, 0x2, 0x0)
msgget$private(0x0, 0x0)
setsockopt(r3, 0x1000000000029, 0x3c, &(0x7f0000000040)='\x00\x00', 0x2)
preadv(r3, 0x0, 0x0, 0x3)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000300)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x96, 0x3, 0x8000, 0x1, 0x0, 0x18, 0x2, 0x9, 0x91c, 0xa, 0x180, 0x0, 0xd3, 0x2, 0xfffffffffffff7f7], [0x5438b950, 0x5, 0x4001004, 0x7, 0x1, 0x1, 0x9, 0x200000000000007, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x6], [{0x1ff, 0xa, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x5, 0x4, 0x9}, {0x1f, 0x4, 0x0, 0x4}, {0x4e4, 0xffdfff81, 0x1ff, 0x1}, {0x3, 0xfffffffa, 0x8001, 0x800000005}], {0x528, 0x3, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}})
r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f0000000040)={0x1, 0xea})
r5 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r5, 0xc0206923, &(0x7f00000001c0))
r6 = socket$inet(0x2, 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001640)="00000400", 0x4)
setsockopt(r6, 0x0, 0x18, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0)

977.634126ms ago: executing program 3 (id=3475):
setuid(0xee01) (async)
setuid(0xee01)
ktrace(0x0, 0x1, 0x1212, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaae404aa86dd6603816a003806300000000000000000000000000000000000000000aa3d259c06b15a443aa1d72c0ce98378b65dde37b9ed8455da3b03"]) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaae404aa86dd6603816a003806300000000000000000000000000000000000000000aa3d259c06b15a443aa1d72c0ce98378b65dde37b9ed8455da3b03"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x1, 0x2, 0x0, 0x20000003}, {0x2, 0x9, 0xb, 0x5}, {0x9c, 0x9, 0x81, 0x1}, {0x3c56, 0x5, 0x6}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[])
socket$inet6(0x18, 0x3, 0x4) (async)
r1 = socket$inet6(0x18, 0x3, 0x4)
getsockopt$sock_int(r1, 0xffff, 0x1, 0x0, 0x0)
setreuid(0x0, 0xee01)
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
setrlimit(0x1, &(0x7f0000000340)={0xfffffffffffffffd, 0xfffffffffffffffd})
r2 = open(&(0x7f0000000040)='./file1\x00', 0x10, 0x101)
write(r2, &(0x7f00000001c0)="4000eb87ae2cafbda5ff000000d22205", 0x10)
lseek(r2, 0x5, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) (async)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
r3 = open(&(0x7f0000000300)='./bus\x00', 0x8, 0x9)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9)
mknod(&(0x7f0000000140)='./bus\x00', 0x2, 0x1)
r4 = syz_open_pts()
ioctl$TIOCMSET(r4, 0x8004746d, &(0x7f0000000000)=0x3)
ioctl$VNDIOCSET(r3, 0x84946467, &(0x7f0000000040)={0x0, 0x81, 0x0, 0x33})
close(r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

975.801381ms ago: executing program 0 (id=3476):
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
r0 = socket(0x18, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0xffff, 0x3, 0x0, 0x0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
write(r1, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r2, 0x300000)
socket$unix(0x1, 0x2, 0x0)
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000180)=0xfb4)
accept$unix(r2, 0x0, 0x0)
accept$unix(r2, &(0x7f0000000240)=@file={0x0, ""/4089}, &(0x7f0000000000)=0xffb)

772.770002ms ago: executing program 7 (id=3479):
semctl$SETVAL(0xffffffffffffffff, 0x4, 0x8, &(0x7f0000000000)=0x8)
r0 = semget(0x0, 0x1, 0x253)
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = semget(0x1, 0x1, 0x8)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000040)=""/86)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
semctl$GETZCNT(r0, 0x0, 0x7, &(0x7f0000000100)=""/152)
pwrite(r2, &(0x7f00000001c0)="c08c40ac0f9e68f89da464e29a3494d329f084b71fd78c067ce4faab5d44f835b606565bc04521057757c3527d40e40762d655cdafba3c12ed1bca69e9acf4bd6f58ed99920f7d171c1acce6fd196081a5d831ce0becdae7442ff4ef49f64b152c5b305cbddb9029ff519e90378ea1b797dd986510e0aab7317576d7ad8358d8e7c14966a9b05a8a7c9b7a0bfb7f0504680c8363623f36e745f6e9f11fef5d4fd9e3947f9120fd08e88f68a87fab55e4b6fb90b01407326d0fb096634a5ba6a518c2aee085c32c9ac0be0a84bf2e9659ca6235c78ba62fbe54acfb12a6bb7e382f4049d357c412b9d67ba59ce14c", 0xee, 0x6b)
semctl$GETZCNT(r1, 0x1, 0x7, &(0x7f00000002c0)=""/227)
semctl$SETALL(r1, 0x0, 0x9, &(0x7f00000003c0)=[0x2, 0x9, 0x3, 0x0])
r4 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil)
shmat(r4, &(0x7f0000fff000/0x1000)=nil, 0x3000)
pread(r2, &(0x7f0000000400)="f205", 0x2, 0x9)
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000440)=0x7fffffff)
writev(r3, &(0x7f0000000780)=[{&(0x7f0000000480)="df18ffa8ef273c9a4e2ed8ce2bc12b7d3b2a54009c900f768ff59f2b84c67569c51c30638b446b7ea696e2c514456d0a2fb0a8b5b853b234aaa4c3383ad7b5b2642959dc585d56c9977d7470c5adda54a02f1f607c69ddb150151a08d16df41ba1b11d10690f596e92ca5f189ff1c99e7d94d982d066f9cbdb9510937d71cdc118470d2619068e0cd447a938f80250d30d8228554f989d5009b8f3840e6bdce4f9c4d2deaaedd15b35c634c899fdbdfc62b6ad8699f6751e09ef93e0c7e60d9869a5da", 0xc3}, {&(0x7f0000000580)="ed382d9b0483b42da4785152c7369613679362ec326a75ad1189cd27adc53161e2667bbb5a708ba26f2a6e0caa71151895006b662414f1493dcdc5ed70fba0fa76229cb4329c38ef061b6f3d5cf8dda52e93f60e73fad3a218efcfb86b3808ff6764433eafdc3d72e240d2afc82520fa", 0x70}, {&(0x7f0000000600)="38a660dd31603af12dca08375d2ce402b6909e1f7f06aa", 0x17}, {&(0x7f0000000640)}, {&(0x7f0000000680)="b986255459049ac4fe78e5d7bdc0181346751760f6c4c002e26bf24f3575e950d1a2d43c7bb9a21c8c44a97813de8738737d2f3ed5477ac368b6b237376b76f2ea238c6667a640e091b87c8d2d7d3906932d001ec026f21e1b7247441f7983c3b07f3cba8961635abbc88021e444df6459abe69496c29f1c9309ab0f60592d1db0370c85", 0x84}, {&(0x7f0000000740)="8aa84915329f744bdae72ee26459ecc88f8c9633a4ebea171511611e3baaccba9d1220df8a09c3a12004f956c26701c48a1dbb0d2c09527d3d621538", 0x3c}], 0x6)
semctl$GETVAL(r1, 0x2, 0x5, &(0x7f0000000800)=""/188)
r5 = semget(0x2, 0x1, 0x107)
semctl$SETVAL(r5, 0x2, 0x8, &(0x7f00000008c0)=0x5)
sysctl$kern(&(0x7f0000000900)={0x0}, 0x0, &(0x7f0000000940)="c2a1550ecc2f1f08b5fe2384c5c54139a33ad85a51288ad56ab68b7b8b366ba88722b2c0ba55ce7739b70190ff1026bbf4512ecb32396c1e21f3760f1e3076ccdf0c148fc9cdbb81a000d62d531b3531e89bedaae616b8e3431a269193e639bd2465558988dd31434a9cd329522df8395c59a4b4aad8303540f62713346cddab51b936795fbb29857fb5bd58198c5eb6cc3d88ee0ce82bf0e6d5e86858a573865a068396d7e8704727530444ca779975d68c10a3ba173e0ee8eaa22fe8d1238761e821f7c36b7690b03c59e16c8c9a97b252b2139acb0564a9e21d1fbcd7b1c078ca347f1f6f", &(0x7f0000000a40)=0xe6, &(0x7f0000000a80)="8cdbbf4e5ae5465d", 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
pipe2(&(0x7f0000000ac0), 0x0)
ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000b00)={0x8, 0x84a, 0x8000000, 0x5})
dup(r3)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000b40)=[0x4, 0xffff, 0x2, 0xfffb, 0x1, 0x1])
semop(r1, &(0x7f0000000b80)=[{0x0, 0x4, 0x800}, {0x1, 0x1}], 0x2)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000bc0))
unveil(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='r\x00')
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000c80), 0x100, 0x0)
ioctl$BIOCFLUSH(r6, 0x20004268)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000cc0)=""/171)

770.724895ms ago: executing program 2 (id=3480):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000a40)="721d1a7055c3cb4e34512138070000001e830731", 0x14}], 0x1) (async)
sysctl$hw(0x0, 0x0, &(0x7f0000000080)="b291f2220000000000010200000040d69036b2f266496ea137240138fd58cea120fb60cf767160d9e03f5b0000000000", &(0x7f0000000000)=0x30, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async)
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async)
sysctl$kern(&(0x7f0000000040)={0xa, 0x3}, 0x2, &(0x7f0000000080)="2f0d0873aed08a", 0x0, 0x0, 0x0)

769.8098ms ago: executing program 0 (id=3481):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)=0xb) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x5, 0x2}, {0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x2420}]})
syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[])

752.443146ms ago: executing program 3 (id=3482):
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
mmap(&(0x7f00000aa000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200)
r0 = kqueue()
r1 = open$dir(&(0x7f0000000300)='./file0\x00', 0x200, 0x83)
kevent(r0, 0x0, 0x4, 0x0, 0x6, 0x0)
close(r1)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}})
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4)
setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async)
mmap(&(0x7f00000aa000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x0) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) (async)
kqueue() (async)
open$dir(&(0x7f0000000300)='./file0\x00', 0x200, 0x83) (async)
kevent(r0, 0x0, 0x4, 0x0, 0x6, 0x0) (async)
close(r1) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async)
socket(0x18, 0x2, 0x0) (async)
setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) (async)
setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff) (async)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async)

751.687873ms ago: executing program 4 (id=3483):
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0)
semget(0x0, 0x1, 0x281)
r1 = semget(0x0, 0x1, 0x281)
semop(r1, &(0x7f00000002c0)=[{0x0, 0x7, 0x1800}, {0x0, 0xfff9, 0x1000}], 0x2)
semctl$SETVAL(r1, 0x2, 0x8, 0x0)
ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000180)=0x7fffffff)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2)
sysctl$hw(&(0x7f0000000280)={0x6, 0x1c}, 0x2, &(0x7f0000001280)="ff", 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

751.456519ms ago: executing program 2 (id=3484):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
setuid(0xee01) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
r0 = socket(0x800000018, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
fchmod(r1, 0x80) (async)
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x92)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

750.825711ms ago: executing program 7 (id=3485):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xffff, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3})
sysctl$kern(&(0x7f0000000100)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, r3, r4, 0xffffffffffffffff, r4, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
lchown(&(0x7f00000000c0)='./file0\x00', r3, r5)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$lock(r6, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401})
r7 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0)
fcntl$lock(r7, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff})
sendmmsg(r0, &(0x7f00000003c0)={0x0, 0x6}, 0xfffffef9, 0x6)
sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, &(0x7f0000000200)="a4896071", &(0x7f00000001c0)=0x4, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f00000007c0)="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", 0xffffff33)

613.347826ms ago: executing program 2 (id=3486):
syz_emit_ethernet(0xe, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
unlink(&(0x7f0000000040)='./file0\x00')
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r0 = socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r0, &(0x7f0000000200), 0x0)
syz_emit_ethernet(0x138, 0x0)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
syz_extract_tcp_res(&(0x7f00000000c0), 0xffffffff, 0x9)
write(r1, &(0x7f0000000080)="d99aca90", 0x4)

609.619233ms ago: executing program 4 (id=3487):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0xc003, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x3, 0x2}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75)
close(r0)
r1 = socket$inet(0x2, 0x4, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc)

609.247835ms ago: executing program 7 (id=3488):
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0)
ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000140)={0x1, [0x0]})
nanosleep(&(0x7f00000025c0), &(0x7f0000001180))
syz_emit_ethernet(0x12f, &(0x7f0000000000)=ANY=[@ANYBLOB="292228e38807aaaaaaaaaabb86dd6828846800f916d4fe8000000000000000000000000000bbfe8000000000000000000000000000bbc8000848650000000200fc20670000974e234e2100089078cf840502000000dc89eff51ab4164b9088810900fb5da84aa935cc6285213430f05e2f71d6c12c336471790b612d102fed30a5562d4761dd95ee7c2756dfe56f72521337643fe69a68f2fdd531497c7f88690a51d1c628e395f328f83a9183b6a6c29ccbf9942a37a39368e3466f10c43e80c2350c1a7893f56c5d5d34b2e3b8377e2db10aefa63561f4478b5506e510687f794feb9113867172f7cacd1961c15fac0f8fb6b436834b2ca7cfd76089f8cfc416a9beb5ae9663b29a83eb2ee914663a381697aecc82b00e88bf8cedfd0fcc1b2c97baebbb87612d81f8c7fcb8276a"])

581.798341ms ago: executing program 2 (id=3489):
setrlimit(0x6, &(0x7f0000000980)={0x3ff, 0x1fc})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000340)="6253000919ccaacd117f365c57e1263c92f0b2ec12e46d34d3a2902a43bc0f576b4952d0974e27f34faeadd5ecc33be279da8b740759f3b6f67abfbd8651d8a6817369e5", &(0x7f0000000000)=0x44, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="6714a435535e00000000000081002c0008004512002c0066000281299078ac1400aaac1400aa4e204e22", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="612002039078000900000100"])
r1 = syz_open_pts()
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
lseek(r4, 0x1, 0x0)
getdents(r4, &(0x7f0000001180)=""/4048, 0xfd0)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='W\x00')
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r5, 0xc0a86b03, &(0x7f0000000200)={0x0, 0x10000, 0x0})
r6 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x6)
poll(&(0x7f00000000c0)=[{r4, 0xae98cd7e8d4e801f}], 0x1, 0x0)
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000040)="15", 0x1}], 0x1)
poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1}], 0x0, 0x0)
close(r1)
r7 = syz_open_pts()
writev(r7, &(0x7f0000000440)=[{&(0x7f0000000340)="790fd8b700f12f433829f89de98787cb7e61ffb8fb645db071af2ec999fc8c1f540faeff85555705cfb993788740570cb198caa07bef02a9d7df0504bd1f0cc3618d3555810322d3f23381b43bac487d568b7965a18b771faf3a8a470a8dfc16e61abf32aac37a5eb0f8630559c4facd0bc9d9b5b143c110d540eca926018e35ed83", 0xffd2}], 0x5c)

581.456149ms ago: executing program 0 (id=3490):
r0 = socket$inet(0x2, 0x3, 0xfc)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000))
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x7}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xefffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0x1}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x1}], './file0\x00'})
setitimer(0x2, &(0x7f0000000140)={{0x2, 0x122800000000009}, {0x7fdfffff, 0x5}}, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r1 = msgget$private(0x0, 0x200)
msgrcv(r1, 0x0, 0x0, 0x1, 0x1000)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x28c01, 0x0)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140), 0xc)
getppid()
msgctl$IPC_SET(r1, 0x1, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370", 0x0, 0x0, 0x0)
openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
unveil(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000480)='x\x00')
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
r4 = socket(0x18, 0x3, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$BIOCPROMISC(r5, 0x20004269)
ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100))
ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100))

581.064749ms ago: executing program 4 (id=3491):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
r0 = socket(0x2, 0x3, 0x2f)
r1 = dup(r0)
setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r2 = socket(0x2, 0x3, 0x0) (async)
r3 = socket$inet6(0x18, 0x3, 0x7f)
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000300)={&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfa}) (async)
r4 = socket(0x18, 0x1, 0x0)
getsockopt(r4, 0x29, 0x3e, 0x0, 0x0) (async)
close(r3) (async)
dup(r3) (async)
syz_extract_tcp_res(&(0x7f0000000080)={<r5=>0x41424344}, 0x4, 0x7)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x14, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, r5, 0x0, 0x0, 0x5, 0x11, 0xbd, 0x0, 0x1}}}}}}})
r6 = dup(r1)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) (async)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000340)="6253000919ccaacd117f365c57e1263c92f0b2ec12", &(0x7f0000000000)=0x15, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="6714a435535e0000000000000800451200280066000281299078ac1400aaac1400aa4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f7c85c1d4798b18f04c5ac83e69f957dad044bd6f79f72723fca7b1ca5585d8ce02f111c6fe30b8038b8bd4665bc9f9f4d698b0c28d2b2000000800000000077ad5718d33b6af6a52e20415eb57d2057cae0b076122a215e8da3949c8b271c8e884e0104fb42609c03e50c0895cb7c02a5cd20d7d221010708b2179c"]) (async)
dup2(r6, r2) (async)
connect$unix(r2, &(0x7f0000000000), 0x10)

580.466678ms ago: executing program 5 (id=3492):
mknod(&(0x7f0000000140)='./bus\x00', 0x6000, 0x6d4)
open(&(0x7f0000000340)='./file0\x00', 0x8, 0x38)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x201}, 0x0, 0x0, 0x7})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r1, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000001340)=""/4103, 0x1007)
ioctl$TIOCOUTQ(r2, 0x40047473, &(0x7f0000000080)=0x400)
symlinkat(&(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file1\x00')
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0xa}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10000)
r4 = socket(0x18, 0x2, 0x0)
r5 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}})
mknod$loop(&(0x7f0000000240)='./bus\x00', 0x20, 0x0)
ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0))
r6 = kqueue()
accept$unix(r2, 0x0, &(0x7f00000002c0))
kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONREAD(r4, 0x81286947, &(0x7f00000001c0))
ioctl$TIOCMBIS(r3, 0x8004746c, &(0x7f0000000180)=0xfffff61a)
ioctl$TIOCSETA(r2, 0xc148445e, &(0x7f0000000300)={0x200032, 0x8, 0x0, 0x0, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe})

543.2176ms ago: executing program 3 (id=3493):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x7f}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9654, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]})
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
ioctl$KDMKTONE(r0, 0x20004b08, &(0x7f0000000040)=0x5)
clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc80})

362.849248ms ago: executing program 4 (id=3494):
sysctl$hw(&(0x7f00000020c0)={0x6, 0x3}, 0x2, &(0x7f0000002100)="096789d36c4eea3be9e750b95c02d9301b73170ec57162727c0f220105a91a0c255f930367afe962b6ad8ba8d4742555d14fe5dd42c32ec82552f094069bb2a73d941e9f2fe169fba7efa2d3", &(0x7f0000002180)=0x4c, &(0x7f00000021c0)="0e5fa6107be254976baef20e71893bfc1b4dac857c2da05112e82ecabed20023d79a4eab943b2c87fcce4f794e6a7ca661ed2c535c3d571082f73e109275705c694046e47c5ef8009e880de285097558329c5d4406acac80f1cdc572163e9d9b33238c7082d12d6f07a43d7148ac7877032655e183b147fe8a3119dbb66ad2cd9a91f8f58ae5e408694241ca02979889a224d31f5c3add", 0x97)

359.328553ms ago: executing program 5 (id=3495):
syz_emit_ethernet(0xe, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r0 = socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r0, &(0x7f0000000200), 0x0)
syz_emit_ethernet(0x138, 0x0)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
write(r1, &(0x7f0000000080)="d99aca90", 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYBLOB="bc9230", @ANYRESHEX=r1], 0x250}, 0xfffffff3}, 0x10, 0x1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$TIOCSETA(r2, 0xc4504447, &(0x7f0000000000)={0x2, 0x8, 0x2, 0xfffffffe, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x3})

356.722067ms ago: executing program 7 (id=3496):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
unveil(0x0, &(0x7f0000000080)='c\x00')
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r1, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4)
dup2(r1, r0)
bind(r0, &(0x7f0000000000), 0x10)
chmod(&(0x7f00000000c0)='./file0\x00', 0x62)
r2 = socket(0x2, 0x2, 0x0)
r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105727, &(0x7f0000001200)={&(0x7f0000000080)=[{0x7, 0x98a3}, {0xa96986fdb543403, 0x1}], 0x2})
setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4)
connect$unix(r2, &(0x7f0000000000), 0x10)
write(r2, 0x0, 0x0)

356.318211ms ago: executing program 4 (id=3497):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xffffffff, 0x300000001, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8000000000000000, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0)
kqueue()
r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x43, 0x3, 0x1, 0x4, 0xf, 0x1, 0x1, 0x2, 0x4001, 0x7e})
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x6, 0x10000003, 0xb, 0x1, 0x5, 0xda7, 0x10000041, 0x0, 0x2, 0x100500000644, 0x6e3b})
r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x2000005, 0x1, 0x9, 0xd4, 0x7, 0x81, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x80000000}, {0x7, 0x4, 0x0, 0x30a}, {0x10000004, 0xf86, 0x4000000, 0x80040005}, {0x200008, 0x60000000, 0x807, 0x1000000}, {0x6, 0x8000b, 0x811, 0xcb}, {0x9, 0x1, 0x8, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x3fa2}, {0x5, 0x10000803, 0x14, 0x8}, {0x1d7, 0x81, 0x1, 0x9}, {0xa, 0x8001, 0x8}, {0x5, 0xfff7}, {0x803, 0x80040, 0x4, 0x34}, {0xe1, 0x424, 0x7, 0x3}, {0xffff0354, 0xfffffffa, 0x10001, 0x100006}, {0x0, 0x6, 0x1, 0x1ffffffd}, {0x0, 0x1, 0x1, 0xc3}]})
socket(0x11, 0x3, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e99, 0x2, 0xfffffffffffffffd, 0x2800000000100000, 0x181c, 0x100000008, 0x2}, 0x0, 0x0, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
close(r0)
open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x110)
openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x19}, 0x4, &(0x7f00000000c0)="03e1587bfa5acc7060", &(0x7f0000000140)=0x9, &(0x7f0000000200)="6f18c52dc28717adcf4a6675bca1d13bdfc00c22", 0x14)
syz_emit_ethernet(0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5803abf65b18d7c51f78b06cc3a5840c04c2a649b000000001dfafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x6}, 0xa)
ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffffff, 0x80085761, 0x0)
socket(0x6, 0x3, 0x5)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$TIOCSETA(r2, 0xc4504443, &(0x7f0000000740)={0x7, 0x2, 0x8, 0x2, "01d04b0a0047c1d100", 0x9, 0x3})

272.511961ms ago: executing program 3 (id=3498):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "1a1116f043000000000000fffffffffff700"})
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa7feffffff5fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433ec25d330a4c2b632dcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xff19, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x2, &(0x7f0000000040)={0x60000000, 0x60000000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="4f8dc66d38c5660f94cb409f7203f37088b10f9166c22cde6028470395", 0x1}, {&(0x7f0000000380)='*', 0xd}, {&(0x7f00000001c0)="6438b6e952a005000000", 0x9}], 0x1)
r1 = socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r2, 0xc4504446, &(0x7f0000000740)={0x6, 0x4, 0x2, 0x4, "a3ae02cf0a30c3336d02000ffb7dd5a80b546600", 0x28, 0x4042})
connect$unix(r1, &(0x7f0000000000), 0x10)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r3 = syz_open_pts()
close(r3)
syz_open_pts()
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8)
sysctl$kern(&(0x7f0000000280)={0x1, 0x47}, 0x3, &(0x7f0000000100)="71f91e3471ac00584dedbc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0xfffffd5c)
writev(r3, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a9b75b43b0b03", 0x2d}], 0x1)
clock_settime(0x4, &(0x7f00000000c0)={0x8000, 0x7a61})
sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

269.470241ms ago: executing program 2 (id=3499):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='.\x00')
sysctl$fs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="c453515ab62f68c5d53ca8c6940ca38d3132a050cc0c7d53a1e856b73677ca675da3d40eab923d4680129ce4e1f5fa38e9b0cc243ef328ae72a10947b12caca49aa1e3732ace5ebf288e424546fd78aef32b9936548e186817b7f94ade867cf53eaf4842efaa1a89b1b7fbc1a89f5544365cb9348f", 0x75)
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1})
ioctl$TIOCSTART(0xffffffffffffff9c, 0x2000746e)
open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10)

269.200873ms ago: executing program 0 (id=3500):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
ftruncate(r2, 0x8531)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0xa010, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

182.509495ms ago: executing program 7 (id=3501):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000040)=0x41fee413)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}) (async)
r3 = accept$inet6(r0, 0x0, &(0x7f0000000180))
fchdir(r3) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000240)=0xc) (async, rerun: 32)
r7 = getegid() (rerun: 32)
fchownat(r0, &(0x7f00000001c0)='./file0\x00', r5, r7, 0x4) (async, rerun: 32)
r8 = accept(r3, 0x0, &(0x7f0000000280)) (async, rerun: 32)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x25, 0x87}, {0x8c, 0xfffff800}, {0x8d, 0x1}, {0x4, 0xfffffffa}, {0x2, 0x3}], 0x5}) (async)
getsockname$inet6(r2, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async, rerun: 32)
fsync(r1) (async, rerun: 32)
sysctl$vfs_ffs(&(0x7f00000003c0)={0xa, 0x1, 0x9}, 0x3, &(0x7f0000000400)="e8d001775c50463d11b9db31a3e449b5547ec3a3a57a5a4cc7ddec036fb466d077353070", &(0x7f0000000440)=0x24, &(0x7f0000000480)="faa4228c077a0ed2049aaed5cced8c815b7dc3767077225c82577b6cf60c59c44a1df74d70700e1a964be9da09f1bf886e447978a3b504becc70a5b463441351acdb84da6cfa265ff5c047cbd630ac9692af0dca08b4e63ba8904c15e2fc1db9900ad9fba46bc24f6bed19fe05857f7843a5242293713dc08986657fd1cf3716590a61c59e581ac9d1e2f3af7889ceffc63f6438bfc710e67c5c8ae1c9222098102e9ccbd659c20e5fb07d0bd55a829783ff79b4e98745399096af6729edc8f1f081e265d27a9ee9b55fd39b636af1909e53", 0xd2) (async)
ioctl$WSKBDIO_SETBACKLIGHT(r0, 0x800c5712, &(0x7f0000000580)={0x7fffffff, 0x3}) (async, rerun: 64)
r9 = semget$private(0x0, 0x1, 0x8) (async, rerun: 64)
r10 = getgid()
semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f00000005c0)={{0xf, r5, r7, r5, r10, 0x54, 0x877}, 0xffff, 0x7, 0x7})
ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, 0xfffffffffffffffe)
pipe2(&(0x7f0000000640)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x30000) (async)
open(&(0x7f0000000680)='./file0\x00', 0x20000, 0x84) (async)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000006c0)={{0x6, r5, r7, r5, r10, 0x4, 0x5}, 0x2ebd, 0x7, r4, r4, 0xea, 0xdc9, 0x4})
bind$inet6(r8, &(0x7f0000000740)={0x18, 0x3, 0x8}, 0xc)
readv(r11, &(0x7f0000000940)=[{&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/19, 0x13}, {&(0x7f00000008c0)=""/68, 0x44}], 0x3) (async)
utimensat(r12, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={{0x7, 0x6}, {0x0, 0x7}}, 0x2) (async)
ioctl$TIOCSBRK(r12, 0x2000747b) (async)
r13 = semget(0x3, 0x3, 0x21)
r14 = getuid()
semctl$IPC_SET(r13, 0x0, 0x1, &(0x7f0000000a00)={{0x3, r14, r6, r5, r7, 0x9, 0x40}, 0x0, 0x9, 0xa})

181.426645ms ago: executing program 5 (id=3502):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket(0x18, 0x1, 0xde)
close(r1)
minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
socket(0x24, 0x2, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r1, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4)
getsockname$unix(r0, 0x0, 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="721d1a7055c3cb4e9d76d431cdee4b771df0b19702b0ef830731000000120682000026b27786e797", 0x28}], 0x1)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x4762, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3})
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000200)="5814ddfbcd87e6c390f0f1b71b127a6a64b34d9a4ef4fa07305c232e67a5e4b8778c20df033aa315355c9a9130aca59b702a1391ad6f15ca49b569e4a6e69f321b3325e591d508535546492d2175a579c3b16234246a5d460ecf2843578810abde9fa340586c8cac96f4ebc4d13443dc0b04be3c31fdbb11193d41577cb6084dc57bfb77dbbc85eea4b01fb6b32fb2", 0x8f}], 0x1)
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x114)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='#!', 0x2}, {&(0x7f0000000040)="6b351baaa3535d2987c966cf4bb76be3f49fd7b4f2fc9a133efcb76bf3d7fc9825197237353bb920", 0x28}, {&(0x7f0000000180)="41c6bbeccc1ad26442ccf88d2da0e870aa5cda487c2a71a50a", 0x19}], 0x3)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, &(0x7f0000000300)=0x8)

180.856534ms ago: executing program 1 (id=3503):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x8, 0xffeffffc, 0x7fff, 0x4, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)
r1 = syz_open_pts()
close(r1)
r2 = socket(0x18, 0x2, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb})
r3 = socket(0x18, 0x3, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(r2)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100)
r5 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x1ff, 0x9, 0x7, 0xffffff8d, "08ed2f8600de142465ac3c92443c658a0f00925e", 0x1, 0x20000})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r5, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)

3.858863ms ago: executing program 5 (id=3504):
r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000080))
r1 = socket(0x2, 0x2, 0x0)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x100000000, [{&(0x7f000005f000/0x3000)=nil, &(0x7f0000189000/0x2000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f000009e000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000091000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f000008e000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil, 0x1}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil, 0x7fff}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f000037d000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil, 0x2000004}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f000009e000/0x4000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6})
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)
madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TIOCSETA(r3, 0xc0044418, &(0x7f0000000180)={0x1a3, 0x1ff, 0x4000008, 0x2, "cded2108002581ba7db28c9d6fb975390a000004", 0x8, 0x3})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getuid()
getegid()
ioctl$WSKBDIO_SETENCODING(0xffffffffffffffff, 0x80045710, &(0x7f0000000040)=0x80000000)
r4 = getppid()
fcntl$setown(0xffffffffffffffff, 0x6, r4)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000680), &(0x7f0000000280)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600))
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000400)=0xc)
setregid(0x0, r5)
getpgid(0xffffffffffffffff)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000300), &(0x7f0000000540)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x40, &(0x7f0000000240)={0x400, 0x8, 0x0, 0x0, 0x0, 0x8, 0x7da7, 0x3}, &(0x7f00000001c0)={0x700, 0x4, 0xffffffffffffbffc, 0x0, 0x2}, 0x0, &(0x7f0000000180)={0x7, 0x100010000})
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000580), &(0x7f0000000140)=0xc)

1.378573ms ago: executing program 2 (id=3505):
msgget$private(0x0, 0x10a) (async)
r0 = msgget$private(0x0, 0x10a)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0x0)
msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000100)={0x0, ""/205}, 0xd5, 0x1, 0x800)

758.095µs ago: executing program 0 (id=3506):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
fcntl$setown(r0, 0x6, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x66, 0x0, 0x3, 0x1, 0x0, @remote={0xac, 0x14, 0x0}}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x33, 0xf0, @multicast1, @multicast1}}}}}})

0s ago: executing program 4 (id=3507):
sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0xe}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0xe}, 0x3, 0x0, 0x0, 0x0, 0x0)
socket(0x18, 0x3, 0x0) (async)
r0 = socket(0x18, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0xffff, 0x3, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x9b, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8002, 0x80000d1b, 0x88}, {0x1c6, 0x10001, 0xc, 0x3}, {0x5, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x7, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]}) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x9b, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8002, 0x80000d1b, 0x88}, {0x1c6, 0x10001, 0xc, 0x3}, {0x5, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x7, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async)
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$VNDIOCSET(r2, 0x40086475, &(0x7f0000000500)={0x0, 0x0, 0x0})
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x9)
openat(r3, &(0x7f0000000040)='./file0\x00', 0x602, 0x10)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4)
fcntl$getown(r5, 0x5)
setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000000)=0xef000, 0x4)
pwritev(r3, &(0x7f0000002740), 0x1000000000000362, 0x3fffe)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts.
pckbd_enable: command error
sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e
    SENSE KEY: Illegal Request
     ASC/ASCQ: Invalid Command Operation Code
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
uvn_flush: obj=0xfffffd806adf0510, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
vm_create: uvm_map failed: 12
vm_create: uvm_map failed: 12
pppx: unable to set addresses for pppx1, error=17
denied attempt to set clock back 125829002 seconds
sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e
    SENSE KEY: Illegal Request
     ASC/ASCQ: Invalid Command Operation Code
lo0: can't handle af0
denied attempt to set clock back 125829004 seconds
vm_create: uvm_map failed: 12
denied attempt to set clock back 4263431312 seconds
�j���|��vnd0: sloppy read from proc 11286 (syz-executor): blkno 0 bcount 178
pppx: unable to set addresses for pppx1, error=17

OpenBSD/amd64 (Amnesiac) (tty00)

login: denied attempt to set clock back 4246129806 seconds
denied attempt to set clock back 4263431330 seconds
malloc(): allocation too large, type = 127, size = 6535087492
vm_create: uvm_map failed: 12
denied attempt to set clock back -9223372032591346514 seconds







	

	
	

OpenBSD/amd64 (Amnesiac) (tty00)

login: uvn_flush: obj=0xfffffd806c5da798, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
WARNING: thread `nfsio' (16368) exits with status -1
WARNING: thread `nfsio' (96978) exits with status -1
WARNING: thread `nfsio' (189110) exits with status -1
WARNING: thread `nfsio' (23598) exits with status -1
WARNING: thread `nfsio' (488927) exits with status -1
WARNING: thread `nfsio' (465010) exits with status -1
WARNING: thread `nfsio' (186473) exits with status -1
WARNING: thread `nfsio' (424860) exits with status -1
WARNING: thread `nfsio' (216454) exits with status -1
WARNING: thread `nfsio' (137216) exits with status -1
WARNING: thread `nfsio' (517204) exits with status -1
WARNING: thread `nfsio' (362915) exits with status -1
WARNING: thread `nfsio' (128633) exits with status -1
WARNING: thread `nfsio' (336167) exits with status -1
WARNING: thread `nfsio' (107537) exits with status -1
WARNING: thread `nfsio' (480548) exits with status -1
WARNING: thread `nfsio' (469419) exits with status -1
WARNING: thread `nfsio' (448338) exits with status -1
WARNING: thread `nfsio' (394697) exits with status -1
WARNING: thread `nfsio' (196369) exits with status -1
�j���|����E1\�:denied attempt to set clock back 134217786 seconds

OpenBSD/amd64 (Amnesiac) (tty00)

login: vm_create: uvm_map failed: 12
pppx: unable to set addresses for pppx1, error=17
denied attempt to set clock back 68 seconds
denied attempt to set clock back 72 seconds
denied attempt to set clock back 72 seconds
vm_create: uvm_map failed: 12
denied attempt to set clock back 125829074 seconds
vm_create: uvm_map failed: 12
denied attempt to set clock back 92 seconds
pppx: unable to set addresses for pppx1, error=17
pppx: unable to set addresses for pppx2, error=17
vm_create: uvm_map failed: 12
�2'�������o9�u�E��aʎ[���HO�+ֆ�t�
��a�����5O)K�L)'�W��7�@���|�S���'��Z�C��k��FF=as?2�j���|����E1\�:E��aʎ[���HO�+ֆ�t�
��a�����5O)K�L)'�W��7�@���|�S���'��Z�C��k��FF=as?2denied attempt to set clock forward to 4263431296
uvm_fault(0xfffffd80603f7b98, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff81a3f338 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002a329e30
gsbase 0xffff8000299ddff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff81a3f338
Starting stack trace...
panic(ffffffff833e79bc) at panic+464
kerntrap(ffff80002a329d80) at kerntrap+779
alltraps_kern_meltdown() at alltraps_kern_meltdown+123
dt_ioctl_record_stop(ffff800001923000) at dt_ioctl_record_stop+264
dtclose(11e5f,81,2000,ffff80003c40e030) at dtclose+265
spec_close(ffff80002a329f30) at spec_close+1126
VOP_CLOSE(fffffd806c951ea8,81,fffffd80097fd888,ffff80003c40e030) at VOP_CLOSE+306
vn_closefile(fffffd805c1d2178,ffff80003c40e030) at vn_closefile+299
fdrop(fffffd805c1d2178,ffff80003c40e030) at fdrop+289
closef(fffffd805c1d2178,ffff80003c40e030) at closef+402
fdfree(ffff80003c40e030) at fdfree+278
exit1(ffff80003c40e030,0,0,1) at exit1+1398
sys_exit(ffff80003c40e030,ffff80002a32a2a0,ffff80002a32a1f0) at sys_exit+26
syscall(ffff80002a32a2a0) at syscall+2839
Xsyscall() at Xsyscall+296
end of kernel
end trace frame: 0x79d0a99c2ce0, count: 242
End of stack trace.
WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0
Stopped at      proc_trampoline+199:    movl    $0,%gs:1672
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*421098  44194      0           0          0    1  syz-executor
 212232  93922      0     0x14000      0x200    0  reaper
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x790bfe0c3970, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd80603f7b98, 0x0, 0, 1) -> e
ddb{1}> trace
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x790bfe0c3970, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp             18446603337233038000
rbx                                0
rdx                                0
rcx             18446603340516106264
rax                               42
r8              18446603337233037792
r9                                 1
r10              3405724220023843704
r11              3240441175782551252
r12                                0
r13                                0
r14                                0
r15                                0
rip             18446744071596643527    proc_trampoline+199
cs                                 8
rflags                           582
rsp             18446603337233037872
ss                                16
proc_trampoline+199:    movl    $0,%gs:1672
ddb{1}> show proc
PROC (syz-executor) tid=421098 pid=44194 tcnt=3 stat=onproc
    flags process=0 proc=0
    runpri=86, usrpri=86, slppri=36, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff3240,0xffff8000ffff22c0
    process=0xffff80002a3c04e8 user=0xffff80003c4f2000, vmspace=0xfffffd800b0631e8
    estcpu=36, cpticks=7, pctcpu=0.0, user=6, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 16802  419739  86720      0  2           0                syz-executor
 16802  164471  86720      0  3   0x4000080  fsleep        syz-executor
 49192  499511  47684      0  2           0                syz-executor
 49192  174728  47684      0  3   0x4000080  fsleep        syz-executor
*44194  421098  87176      0  7           0                syz-executor
 44194  426990  87176      0  3   0x4000080  fsleep        syz-executor
 44194   64977  87176      0  2   0x4000000                syz-executor
 41627   14661      1      0  3        0x82  nanoslp       getty
 82261  412911  85978      0  2           0                syz-executor
 82261  371475  85978      0  3   0x4000080  fsleep        syz-executor
 82261   76630  85978      0  3   0x4000080  fsleep        syz-executor
 91429   77101  90859      0  2           0                syz-executor
 91429  139760  90859      0  3   0x4000080  fsleep        syz-executor
 91429  324763  90859      0  3   0x4000080  fsleep        syz-executor
 91429  222562  90859      0  3   0x4000080  fsleep        syz-executor
  3704   30988      0      0  3     0x14200  acct          acct
 34656  431852  35832      0  2         0x2                syz-executor
 90859  163959  35832      0  3        0x82  nanoslp       syz-executor
 83511  161951  35832      0  3        0x82  nanoslp       syz-executor
 50763  306310  35832      0  3        0x82  nanoslp       syz-executor
  5057  232864  73659      0  3        0x82  sbwait        sshd-session
 47684  457187  35832      0  3        0x82  nanoslp       syz-executor
 87176  244589  35832      0  3        0x82  nanoslp       syz-executor
 85978  413573  35832      0  3        0x82  nanoslp       syz-executor
 86720  265227  35832      0  3        0x82  nanoslp       syz-executor
 35832  216544  79023      0  3        0x82  kqread        syz-executor
 79023   71697  92359      0  3    0x10008a  sigsusp       ksh
 92359  420735  66930      0  3        0x98  kqread        sshd-session
 66930  456632  73659      0  3        0x92  kqread        sshd-session
 73659  234298      1      0  3        0x88  kqread        sshd
 59340  289451  24908     74  3   0x1100092  bpf           pflogd
 24908   62199      1      0  3        0x80  sbwait        pflogd
 11970  166571  20681     73  3   0x1100090  kqread        syslogd
 20681  414584      1      0  3    0x100082  sbwait        syslogd
 83219  146197      1      0  3    0x100080  kqread        resolvd
 78175  363106  64667     77  3    0x100092  kqread        dhcpleased
 55052   78164  64667     77  3    0x100092  kqread        dhcpleased
 64667  292535      1      0  3        0x80  kqread        dhcpleased
 43778   55143      0      0  3     0x14200  bored         smr
 48977  191993      0      0  2     0x14200                zerothread
 18641  434420      0      0  3     0x14200  aiodoned      aiodoned
 71676  261553      0      0  3     0x14200  syncer        update
 58553  367062      0      0  3     0x14200  cleaner       cleaner
 93922  212232      0      0  7     0x14200                reaper
 91917   41939      0      0  3     0x14200  pgdaemon      pagedaemon
 63935  174472      0      0  3     0x14200  bored         viomb
  2467   25783      0      0  3  0x40014200  acpi0         acpi0
 99061  142459      0      0  3  0x40014200                idle1
 75161  493313      0      0  3     0x14200  bored         softnet1
 73578  223328      0      0  3     0x14200  netlock       softnet0
 39551  198335      0      0  2  0x40014200                systqmp
 12243  163491      0      0  3     0x14200  bored         systq
 30620  163274      0      0  3     0x14200  tmoslp        softclockmp
 53633  102426      0      0  3  0x40014200  tmoslp        softclock
 69977  476373      0      0  3  0x40014200                idle0
     1  231804      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 44194 (syz-executor) thread 0xffff80003c40fcb8 (64977)
Process 34656 (syz-executor) thread 0xffff8000ffff3ca0 (431852)
Process 93922 (reaper) thread 0xffff8000ffffdc90 (212232)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11122  12179K   14915K 166960K     17077        0
            pcb    17     15K      17K 166960K      1093        0
         rtable   260     18K      18K 166960K      1192        0
             pf    36     17K      82K 166960K       417        0
         ifaddr    40      8K       9K 166960K       282        0
        ifgroup    56      2K       2K 166960K       489        0
         sysctl     4      1K       9K 166960K        40        0
       counters    72     37K      38K 166960K       538        0
       ioctlops     0      0K       8K 166960K      2361        0
            iov     0      0K      24K 166960K       311        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1701    107K     108K 166960K      4945        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      6K      14K 166960K        79        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       342        0
        dirhash    12      2K       2K 166960K        81        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     240K 166960K      3867        0
          sigio     0      0K       0K 166960K       137        0
           proc    72    115K     164K 166960K      1261        0
        subproc    72      4K       8K 166960K       305        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       818        0
       in_multi    68      5K       7K 166960K       392        0
    ether_multi     1      0K       0K 166960K        53        0
            mrt     1      0K       0K 166960K        31        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   283   1261K    1261K 166960K       283        0
           exec     0      0K       1K 166960K      1420        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         4        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   272    162K     189K 166960K     37405        0
       UVM aobj    42     44K      46K 166960K        54        0
     pinsyscall    44     88K     106K 166960K      5374        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       345        0
            NDP    13      0K       2K 166960K       210        0
           temp    81   8684K    8940K 166960K    171888        0
         kqueue    13     20K      33K 166960K       668        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      398    0      394     4     3     1     3     0     8    0
rtentry    176      344    0      253     6     1     5     6     0     8    0
unpcb      144     3740    0     3718    23    19     4     6     0     8    3
syncache   336       26    0       26     8     7     1     1     0     8    1
tcpqe       32        9    0        9     5     4     1     1     0     8    1
tcpcb      736     1317    0     1306    30    27     3     7     0     8    1
arp        136       53    0       34     1     0     1     1     0     8    0
ipq         40        2    0        2     1     1     0     1     0     8    0
ipqe        40        6    0        6     1     1     0     1     0     8    0
inpcb      328     4793    0     4777    39    32     7    10     0     8    4
nd6        152       66    0       49     1     0     1     1     0     8    0
pkpcb       40       24    0       24     6     5     1     1     0     8    1
kcovpl      48       19    0       11     1     0     1     1     0     8    0
mppekey    1024       2    0        2     2     2     0     1     0     8    0
ppxss      1192     185    0      185     4     3     1     1     0     8    1
pppxif     1504      22    0       22     7     6     1     1     0     8    1
pffrag     232       50    0       35     2     0     2     2     0   482    0
pffrnode    88       24    0       11     1     0     1     1     0     8    0
pffrent     40      157    0      142     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       7    0        7     4     4     0     1     0     8    0
rttmr      136        5    0        5     4     3     1     1     0     8    1
art_heap8  4096       6    0        0     6     0     6     6     0     8    0
art_heap4  256     1429    0     1077    41    17    24    29     0     8    0
art_table   40     1435    0     1077     5     0     5     5     0     8    0
art_node    32      340    0      261     1     0     1     1     0     8    0
sysvmsgpl   40       24    0       13     1     0     1     1     0     8    0
semupl     112        7    0        7     5     5     0     1     0     8    0
semapl     112      337    0      327     1     0     1     1     0     8    0
shmpl      112       20    0        2     1     0     1     1     0     8    0
dirhash    1024      65    0       48     3     0     3     3     0     8    0
dino2pl    256     8850    0     7325    97     1    96    97     0     8    0
ffsino     296     8850    0     7325   120     1   119   119     0     8    0
nchpl      144    14080    0    12351    66     1    65    65     0     8    0
rtmask      32       40    0       40     6     5     1     1     0     8    1
vnodes     216     4921    0        0   274     0   274   274     0     8    0
namei      1024   51387    0    51386     8     7     1     2     0     8    0
percpumem   16      284    0      233     1     0     1     1     0     8    0
vcpupl     3968      22    0        1     3     0     3     3     0     8    0
vmpool     848       30    0        9     3     0     3     3     0     8    0
kstatmem   264      338    0      308     7     4     3     3     0     8    0
acpiwqpl    32        2    0        2     1     0     1     1     1     8    1
scsiplug    72       18    0       18     8     8     0     1     0     8    0
scxspl     216   100541    0   100541    16    15     1     8     1     8    1
plimitpl   152     1265    0     1247     1     0     1     1     0     8    0
sigapl     424     4169    0     4120     9     2     7     8     0     8    1
knotepl    120      709    0        0    19     0    19    19     0     8    0
kqueuepl   224     1382    0     1373    13    12     1     5     0     8    0
pipepl     344      698    0      671    12     9     3     9     0     8    0
fdescpl    528     4120    0     4088     3     0     3     3     0     8    0
filepl     160    31780    0    31549    42    27    15    19     0     8    3
lockfpl    104     1670    0     1666     4     3     1     2     0     8    0
lockfspl    48      648    0      644     1     0     1     1     0     8    0
sessionpl  144       54    0       45     1     0     1     1     0     8    0
pgrppl      48      185    0      168     1     0     1     1     0     8    0
ucredpl    104     4949    0     4934     1     0     1     1     0     8    0
zombiepl   144     5665    0     5663     1     0     1     1     0     8    0
processpl  1232    4169    0     4120     7     2     5     6     0     8    0
procpl     664    10465    0    10407     9     1     8     8     0     8    2
sosppl     176       35    0       35     4     3     1     1     0     8    1
sockpl     752     9169    0     9127    78    67    11    19     0     8    6
mcl64k     65536     19    0        0     3     0     3     3     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      3    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       9    0        0     2     0     2     2     0     8    0
mcl4k      4096     127    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048     103    0        0    10     0    10    10     0     8    1
mtagpl      96       15    0        0     1     0     1     1     0     8    0
mbufpl     256     1252    0        0    77     0    77    77     0     8    0
bufpl      280    40390    0    34254   439     0   439   439     0     8    0
anonpl      32    18735    0        0   152     1   151   151     0   246    0
amapchunkpl 152  129223    0   128611    66    30    36    39     0   158    9
amappl16   200    13963    0    13850   114    89    25    42     0     8    7
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184        9    0        9     1     1     0     1     0     8    0
amappl13   176      587    0      586     1     0     1     1     0     8    0
amappl12   168     4615    0     4571     3     0     3     3     0     8    0
amappl11   160        5    0        5     3     3     0     1     0     8    0
amappl10   152       56    0       42     1     0     1     1     0     8    0
amappl9    144      246    0      246     1     1     0     1     0     8    0
amappl8    136       31    0       28     1     0     1     1     0     8    0
amappl7    128      127    0      125     1     0     1     1     0     8    0
amappl6    120      440    0      425     1     0     1     1     0     8    0
amappl5    112      100    0       87     1     0     1     1     0     8    0
amappl4    104      617    0      584     1     0     1     1     0     8    0
amappl3     96    22886    0    22782     4     1     3     3     0     8    0
amappl2     88     4362    0     4275     3     0     3     3     0     8    0
amappl1     80    30228    0    29562    20     4    16    16     0     8    1
amappl      88    35674    0    35489     5     0     5     5     0    92    0
uvmvnodes   80      236    0        0     5     0     5     5     0     8    0
dma65536   65536      1    0        1     1     1     0     1     0     8    0
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma2048    2048       3    0        3     2     2     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512        1    0        1     1     1     0     1     0     8    0
dma256     256       10    0       10     4     3     1     1     0     8    1
dma128     128      258    0      258     5     5     0     1     0     8    0
dma64       64        8    0        8     3     3     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       53    0       12     1     0     1     1     0     8    0
uaddrrnd    24     4120    0     4088     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     4120    0     4088     1     0     1     1     0     8    0
vmmpekpl   168    36028    0    35978     3     0     3     3     0     8    0
vmmpepl    168   269910    0   267740   153    34   119   126     0   357   13
vmsppl     488     4119    0     4088     7     2     5     5     0     8    0
rwobjpl     80    71313    0    69904    51    11    40    42     0     8    0
pdppl      4096    8307    0     8215   165    69    96    96     0     8    4
pvpl        32    28461    0        0   230     1   229   229     0   265    0
pmappl     256     4149    0     4097     4     0     4     4     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      484    0      139    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+39:  addq    $8,%rsp
x86_ipi_db(ffffffff838b5ff0) at x86_ipi_db+39
x86_ipi_handler() at x86_ipi_handler+217
Xresume_lapic_ipi() at Xresume_lapic_ipi+39
__mp_lock(ffffffff83935600) at __mp_lock+402
softintr_dispatch(0) at softintr_dispatch+293
dosoftint(0) at dosoftint+84
Xsoftclock() at Xsoftclock+39
msleep_nsec(ffffffff838a0468,ffffffff838a0430,4,ffffffff833c6f46,ffffffffffffffff) at msleep_nsec+715
reaper(ffff8000ffffdc90) at reaper+347
end trace frame: 0x0, count: 6
ddb{0}> trace
x86_ipi_db(ffffffff838b5ff0) at x86_ipi_db+39
x86_ipi_handler() at x86_ipi_handler+217
Xresume_lapic_ipi() at Xresume_lapic_ipi+39
__mp_lock(ffffffff83935600) at __mp_lock+402
softintr_dispatch(0) at softintr_dispatch+293
dosoftint(0) at dosoftint+84
Xsoftclock() at Xsoftclock+39
msleep_nsec(ffffffff838a0468,ffffffff838a0430,4,ffffffff833c6f46,ffffffffffffffff) at msleep_nsec+715
reaper(ffff8000ffffdc90) at reaper+347
end trace frame: 0x0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      proc_trampoline+199:    movl    $0,%gs:1672
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x790bfe0c3970, count: 14
ddb{1}> trace
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x790bfe0c3970, count: -1