last executing test programs:

4.296233018s ago: executing program 1 (id=1644):
r0 = kqueue()
r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r3 = socket$inet(0x2, 0x8000, 0x7)
r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4)
connect$unix(r5, &(0x7f0000000000), 0x10)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x10000)
r7 = socket(0x11, 0x3, 0x0)
recvmmsg(r7, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0, 0x44}}, 0x10, 0x2, 0x0)
r8 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r9 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r9, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x0)
r10 = open(&(0x7f0000000280)='./file0\x00', 0x8000, 0x1)
kevent(r0, &(0x7f0000000300)=[{{r1}, 0xfffffffffffffffb, 0x54, 0x1, 0x2, 0x7fffffffffffffff}, {{r2}, 0xfffffffffffffff8, 0x0, 0x2, 0x7, 0x1000}, {{r3}, 0xfffffffffffffffe, 0x80, 0x1, 0x101, 0xffffffffffffffff}, {{r4}, 0xfffffffffffffffa, 0xb8, 0x10, 0x8, 0x4}, {{r5}, 0xfffffffffffffffc, 0x6, 0xfffff, 0x38a, 0xd9}, {{r6}, 0xfffffffffffffff9, 0x20, 0x1, 0x5, 0xfffffffffffffc5e}], 0x2, &(0x7f00000003c0)=[{{r7}, 0xffffffffffffffff, 0x84, 0x2, 0x0, 0x3}, {{r8}, 0xfffffffffffffffb, 0x7a, 0x4, 0x2, 0x80000001}, {{r9}, 0xfffffffffffffff9, 0x4, 0x1, 0x1d, 0x7d5}, {{r10}, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x4}], 0x81, &(0x7f0000000440)={0x7fff, 0xffffffff})
sysctl$hw(&(0x7f00000002c0)={0x6, 0xe}, 0x2, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)=0x7, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r11 = socket(0x2, 0x4001, 0x0)
r12 = dup(r11)
r13 = fcntl$dupfd(r12, 0x2, 0xffffffffffffffff)
close(r13)
r14 = socket(0x2, 0x2, 0x0)
connect$unix(r14, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r13, 0xffff, 0x1023, &(0x7f0000000080), 0x4)
r15 = dup(r14)
connect$unix(r15, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa)
setsockopt$sock_int(r14, 0xffff, 0x1023, 0x0, 0x0)

4.295460988s ago: executing program 1 (id=1645):
setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x9, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x200000, 0x0, 0x6}, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

4.294992359s ago: executing program 1 (id=1646):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0xe, 0xfe, 0xc}, {0x50, 0x0, 0x10, 0x2}, {0x9e, 0x9, 0x0, 0x3}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59ccc313a6ef97d384be07afec37082232985c0de8bca6dbdc9764b261d12ce6847ca135d87ad00b62193d26d71940884cbf81ad478e80f75323a", &(0x7f0000000080)=0x50, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCGSTATS(r0, 0x4008426f, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[])
syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random='\tK\x00', @remote, [], {@ipv4={0x800, {{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @local={0xac, 0x14, 0x0}, @multicast1, {[@noop]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7fffffff}}}}})

4.155300582s ago: executing program 1 (id=1649):
mknod(0x0, 0x10, 0x1e63)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={<r0=>0x0, 0x0, <r1=>0x0}, 0xc)
wait4(r0, &(0x7f00000001c0), 0x8, 0x0)
ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0104407, 0x0)
ktrace(0x0, 0x4, 0x50e, 0xffffffffffffffff)
setrlimit(0x7, &(0x7f0000000040)={0x8000000000000001, 0x8000000000400000})
r2 = syz_open_pts()
sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, 0x0, 0x0, 0x0, 0x0)
setgroups(0x2, &(0x7f00000000c0)=[0x0, r1])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240), 0x0)
socket(0x18, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000200)={0x0, &(0x7f0000000080)})
syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[])
close(r2)
unveil(&(0x7f0000000340)='./file0/file1\x00', 0x0)
syz_open_pts()
connect(0xffffffffffffffff, &(0x7f0000000280)=@in={0x2, 0x2}, 0xc)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x807, 0x1, 0x4, 0x204492, "084880fa870000bd090088d11554e90d6602ff07", 0xb51, 0x2a6d})
close(0xffffffffffffffff)
close(r2)
writev(r3, &(0x7f00000029c0)=[{&(0x7f0000002a40)="793d4acf593accd5284d97b182ffa2c4dc236b5c27db05fe46d9a1fe6e442829bd478ea62ea8df42767f4fb6e013a64f31d48884f5b440d8ec138a22c7f4abe9ad2990de976eb4db3eb06d0e146feff17166df0ccf82cd18dc8858594a08d4634152d486b0a80999314144593c0266d319bffa61ce051f0115de9fd1fe24bff844111e1f8b9148c3ef86c3e67a9d904cd3c55daa021867a953a7c4ffc715783cc09729751c18bff830418236397fc44dee62747a4c041c5cd9b75426a28431832757c770a68c4de235b6e93f7d5e13677dff35709bde80666a060641a082eae0ffc93023a7732574ac77c73d5ffb8179be0b85e62017b6271cc45fa5a820e534e05e6bfd7293c5aa9235713bd920097a975462f0faf1777fde75f33c049cba0dbbd7cb0b026e75b200214ed99bc0e21e0f72b6e6ab1533ae5bac9f7e772aa992b763b81e870e3d7a77a23e197144b85c1e760bed34ea9610e94e79bf4e4ca49edf7ecea9131b7d5fd4c1590ec7f479b241634908f0f2b8ee6adde837328ba1bcaf3d8b4dd6f722de9f2479c95f8b2e52a1171b23a6dee5a6f1a1866d34513996d57eee23405432923fbef097e8f3a3a19d9b7e0e242156f6b24d350d3a7abcb5857830220e5d5db123a3f0fdfe193bffaf4ec962d8f2ab3d7dd3441b985e54622e5998defe32f0f356b9db2264c4ccae0e334221b0e53774178123ca342a489fc5963364fba5fefcc9d5007caa82db2f1a3833eec513764a8f3a53921ce6a5c06bb1338c5e5c98d32310d9e5bd95bd1c095b10d41f9cb92c0d80556b218316ea913f300dc41e3a2b17985a92935caceeea3169be2f5154882d", 0x259}], 0x1)

4.095907934s ago: executing program 1 (id=1652):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1b}, 0x4, 0x3d3, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffe, 0x9, 0x801, 0xffc})
shmget(0x1, 0x1000, 0x4, &(0x7f00003d8000/0x1000)=nil)
setregid(0x0, 0xffffffffffffffff)
getrlimit(0x3, &(0x7f0000000200))
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff})
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x7ff}, {0x1}, {0x2}, {0x5}, {0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x10000200}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100000}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e)
r1 = socket(0x18, 0x2, 0x0)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
accept(r1, &(0x7f0000000240)=@in, &(0x7f0000000280)=0xc)
close(r2)
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = socket(0x18, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r4)
ftruncate(r1, 0x4)
r5 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1000, 0x0, 0x0)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ad4000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x12}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00'})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)

3.886911941s ago: executing program 1 (id=1656):
r0 = kqueue()
kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x83, 0x0, 0x800000000000000}], 0xe4a, 0x0, 0x8000, 0x0)
r1 = syz_open_pts()
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]})
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r3 = dup(r1)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1ca14d34600001264a284bc16366bab863ef65ad386dae29d867aa492ac549bbd8f46cf22d97f9f94cd6c530725e52c9322fa262611a487659a1fd49855c82b0ef1066a1cc5578b6b3667b2eca", 0x4d}], 0x1}, 0x5)
sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="71f91e3471ac0058095f4377bc5a91501d94a34b8e", &(0x7f0000000080)=0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ioctl$TIOCSTAT(r3, 0x20007465, &(0x7f0000000380))
syz_emit_ethernet(0x14c, &(0x7f0000000740)=ANY=[@ANYBLOB="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"])
ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000340)={0x3, &(0x7f0000000280)=[{0x8, 0x5, 0xfb, 0x3}, {0xbe, 0xf2, 0x8, 0xffffffff}, {0x3, 0x8, 0x36, 0x9}]})
r4 = socket(0x2, 0x1, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
r5 = syz_open_pts()
ioctl$TIOCSPGRP(r5, 0x40047477, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4)
r9 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r9, 0x81206919, &(0x7f0000000100))
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x400a)
r10 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r10, &(0x7f00000005c0)=[{&(0x7f0000000040)="9d2bf7fa20ccfd2df4", 0x9}, {0x0}, {0x0}, {0x0}], 0x4)
r11 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r12 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000400)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0xc0, 0x1, 0xd5, 0x6}, {{r7}, 0xfffffffffffffff9, 0xc, 0x4, 0x1, 0x5}, {{}, 0xfffffffffffffffd, 0x0, 0x80, 0x6, 0xd20f}, {{r7}, 0xfffffffffffffffa, 0x98, 0x8, 0x5, 0x7fff}, {{r8}, 0xfffffffffffffffe, 0x0, 0x40000000, 0xdb9, 0x81}, {{r1}, 0xfffffffffffffff8, 0x40, 0x4, 0x8000, 0x401}, {{r3}, 0xffffffffffffffff, 0x1, 0x8, 0x200, 0x7ff}, {{r4}, 0xfffffffffffffff8, 0x28, 0x1, 0xfffffffffffffffe, 0x5}, {{r9}, 0xfffffffffffffffd, 0x40, 0x80, 0x8, 0xec83}], 0x100, &(0x7f0000000540)=[{{r6}, 0xfffffffffffffffe, 0x2340f6c32400e3fa, 0x1, 0x9, 0xffffffffffffffff}, {{r2}, 0xffffffffffffffff, 0x0, 0x8, 0x15, 0x2}, {{r0}, 0xffffffffffffffff, 0x4, 0x20000000, 0x80000001, 0x7f}, {{r6}, 0xfffffffffffffffa, 0xa8, 0x1, 0x6, 0x3}, {{r2}, 0xfffffffffffffffc, 0x42, 0x24, 0x1}, {{r11}, 0xfffffffffffffffe, 0x10, 0x11, 0x2, 0x3}, {{r12}, 0xfffffffffffffff9, 0x32, 0x2, 0x9, 0xd}], 0x0, &(0x7f0000000240)={0x9, 0xffffffffffffff64})
shutdown(r4, 0x1)
select(0x40, &(0x7f0000000040)={0x2, 0x0, 0x5, 0xa, 0xea, 0x3ff, 0x0, 0x1}, &(0x7f00000002c0)={0x1ff, 0xed03, 0x8, 0x1, 0x6, 0xffffffffffffffff, 0xc, 0x5}, 0x0, 0x0)

1.851785213s ago: executing program 2 (id=1722):
sysctl$kern(&(0x7f0000000080)={0x1, 0x13}, 0x2, &(0x7f0000000140)="7455a09c1c8e1acbfeaf065f89db4fba61ffe1e09c35807f849ece9805d2105e1600b2a216a12a4547f22ffb722a1c944bbdc4652d9a6d3d352149542e284a345e4088cf8e3ebef0154c", 0x0, 0x0, 0x0)
mknod(0x0, 0x2000, 0x881)
acct(&(0x7f0000000000)='./file0\x00')

1.851279012s ago: executing program 2 (id=1723):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x1a5)
r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
fsync(r0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
openat$bpf(0xffffffffffffff9c, 0x0, 0x10, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x48, 0xe, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]})
sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="000400003e69217fa12de9393fc33d0817ae3fcb7c7d40c9acbe3b2f8516751dabe77a8e4cc09c69c4bb2b59260000ef590ec732b912cd6b6b49234fc9195d1a129d7c7c4e", &(0x7f0000000000)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r1, &(0x7f0000000140)="02a01a0215ca9a21695cfeef13bf", 0xe)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file0\x00')
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setuid(0xee01) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
chmod(&(0x7f0000000080)='./file0\x00', 0x1a5) (async)
open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async)
fsync(r0) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
openat$bpf(0xffffffffffffff9c, 0x0, 0x10, 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x48, 0xe, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) (async)
sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="000400003e69217fa12de9393fc33d0817ae3fcb7c7d40c9acbe3b2f8516751dabe77a8e4cc09c69c4bb2b59260000ef590ec732b912cd6b6b49234fc9195d1a129d7c7c4e", &(0x7f0000000000)=0x45, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async)
write(r1, &(0x7f0000000140)="02a01a0215ca9a21695cfeef13bf", 0xe) (async)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) (async)
rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file0\x00') (async)

1.850210588s ago: executing program 2 (id=1724):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x2000, [{0x2}, {}, {}, {0x3}, {0x0, 0xffffffff}, {}, {0x0, 0xaa59}, {}, {0x0, 0xfffffffb}, {0x3, 0x20}, {0x2, 0x4}, {0x0, 0x2}, {}, {}, {0x2, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0xfffffffc}, {0x0, 0x7ff}, {0x3}, {}, {0x3}, {}, {}, {0x2, 0x3}, {0x0, 0x3}, {0x0, 0x200}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x2}]})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f0000000080)=0x1000)
ioctl$TIOCSETA(r0, 0xc148445f, &(0x7f0000000040)={0x0, 0x0, 0x63, 0x4c, "9700224ff1c1d137000000c46100", 0xffffffff})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x7)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000000340)={0x0, 0x2, 0x1017f, 0x4a, "9786000000000000000100", 0x1, 0xc})
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6)
acct(0x0)
r3 = kqueue()
r4 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r4, 0x0, 0x3, 0x0, 0x0)
kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
acct(&(0x7f0000000080)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) (async)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x2000, [{0x2}, {}, {}, {0x3}, {0x0, 0xffffffff}, {}, {0x0, 0xaa59}, {}, {0x0, 0xfffffffb}, {0x3, 0x20}, {0x2, 0x4}, {0x0, 0x2}, {}, {}, {0x2, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0xfffffffc}, {0x0, 0x7ff}, {0x3}, {}, {0x3}, {}, {}, {0x2, 0x3}, {0x0, 0x3}, {0x0, 0x200}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x2}]}) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f0000000080)=0x1000) (async)
ioctl$TIOCSETA(r0, 0xc148445f, &(0x7f0000000040)={0x0, 0x0, 0x63, 0x4c, "9700224ff1c1d137000000c46100", 0xffffffff}) (async)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x7) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) (async)
ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000000340)={0x0, 0x2, 0x1017f, 0x4a, "9786000000000000000100", 0x1, 0xc}) (async)
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) (async)
acct(0x0) (async)
kqueue() (async)
socket$inet(0x2, 0x2, 0x0) (async)
getsockopt(r4, 0x0, 0x3, 0x0, 0x0) (async)
kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async)
acct(&(0x7f0000000080)='./file0\x00') (async)

1.742271596s ago: executing program 2 (id=1728):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0)
recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@in, 0x10, 0x0, 0x0, &(0x7f0000000280)=""/129, 0x81}, 0x40)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8016, 0x2000007, 0x101, 0x80000005, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0x81, 0x0, 0xd}, {0x4, 0x800, 0x8007, 0x7}, {0x83ff, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x400003, 0x7}, {0xce1, 0xffffffff, 0x4, 0x6c}, {0xd, 0x800, 0x14, 0x8}, {0x2, 0x4082, 0x8000005, 0x1005}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cb, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb8d, 0x555981a6, 0xa3, 0x4}, {0x29a71717, 0xfffffff6, 0x7fffffff, 0x6}, {0x8, 0x2000005, 0x5, 0x10000000}, {0x0, 0x2, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r3 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='c\x00')
sysctl$net_inet_icmp(&(0x7f0000000a00)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')

1.740432094s ago: executing program 2 (id=1729):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x9})
pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000080)="87ffbcd1c32aa24c86ba59a7b41d342fb10637b26f41", 0x16}], 0x1, 0x5)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000340)={0x8105})
execve(0x0, 0x0, 0x0)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x9}) (async)
pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000080)="87ffbcd1c32aa24c86ba59a7b41d342fb10637b26f41", 0x16}], 0x1, 0x5) (async)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000340)={0x8105}) (async)
execve(0x0, 0x0, 0x0) (async)

1.582956801s ago: executing program 2 (id=1732):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x20)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
open(0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100))
open(0x0, 0x100, 0x29)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
fchmod(r0, 0xc4)
r4 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil)
r5 = shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r4, 0x0)
shmdt(r5)
socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x37, &(0x7f0000000040)="03261d00", 0x4)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
r6 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x16c)
utimensat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x4}, {0x0, 0x8}}, 0x2)
getsockopt$sock_linger(r6, 0xffff, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x8)
execve(0x0, 0x0, 0x0)
mmap(&(0x7f00003df000/0x1000)=nil, 0x1000, 0x4, 0x4812, r0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f0000000240))

1.262829169s ago: executing program 7 (id=1743):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x50, 0x6, 0x29, 0x6}, {0x60, 0xe, 0x45, 0x2}, {0x209e, 0x9, 0x3, 0x2}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94100e4ac63c90", &(0x7f0000000080)=0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0x10, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x87, 0x25, 0xfe, 0x7}, {0x40, 0x10, 0xf4, 0x37}, {0x9e, 0x19, 0x0, 0x40000003}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
ioctl$TIOCGETD(r3, 0x4004741a, &(0x7f0000000300))
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r2, &(0x7f0000000480)="d81ad3d20c02eeac49f141d400bc", 0xe)
chmod(&(0x7f0000000440)='.\x00', 0x35e)
ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f00000000c0))
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29)
execve(0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)

1.146960648s ago: executing program 7 (id=1749):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xd, 0x60, 0x4}, {0x28, 0x4, 0x4, 0x6}, {0x806, 0x6, 0x10, 0x7}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000000)="71e994a3", &(0x7f0000000080)=0x4, 0x0, 0x0)
dup(r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})

990.673096ms ago: executing program 3 (id=1751):
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000001640))
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x6}, {0x7, 0x0, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x9}]})
r0 = shmget$private(0x0, 0x2000, 0x208, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x2000)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x2000)
shmat(r0, &(0x7f0000183000/0x1000)=nil, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bcfb91501d94a34b02f906b228153f94dbc37082", &(0x7f0000000080)=0x1c, 0x0, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = socket(0x18, 0xc003, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000140)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x8}, 0x1005, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x2, 0x8, 0x9, 0x1]}, 0x3c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x120)
ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f0000000200))
r3 = socket(0x11, 0x3, 0x0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4c, 0x6, 0x29, 0x6}, {0x84, 0xe, 0x8, 0x2}, {0x209e, 0x9, 0x3, 0x2}]})
sysctl$vfs_ffs(&(0x7f0000000080)={0xa, 0x1, 0x14}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000000007000000000b29a219c27e9b6ec0fb3ba9e2637f8eee8c3e8c7ff4775e6dc2b87c7899", &(0x7f0000000080)=0x28, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
sendto$unix(r3, &(0x7f0000000000)="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", 0xb1, 0x2, 0x0, 0xffffffffffffff3a)

976.715658ms ago: executing program 7 (id=1752):
syz_emit_ethernet(0x38, &(0x7f0000000000)={@remote, @broadcast, [], {@arp={0x806, @generic={0x18, 0x808, 0x6, 0x6, 0x4, @broadcast, "a98745158e96", @broadcast, "b71fb4d0686a8b83d135f5eb0c344be2"}}}})
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @broadcast, @remote, @local={0xac, 0x14, 0x0}}}}})
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0xc1, &(0x7f00000000c0)={@random="9547a597923c", @broadcast, [{[], {0x8100, 0x6, 0x1, 0x1}}], {@generic={0x6009, "552e2204ddf3db8e75239b5556b29e2815f7d9b26316447af4b5ba246dfdc6aa0b127e9a68ccfbf4a4dc64738f7a923ccef47a019b70df82c007e3c46517af7c42cfedf3a6a4b9f2801e91dfd051a2b6f060496581d93a3eff4215a1905d94ed2e5dc82694d5d6c8742c7faf0a090b3c87da41d06fe5a9686066b71cd733c9d3b5f6e39dcba18a1d43e5f1a4aa7db102590326defbd68cbccb33a9026101a803c000cc21324a2625bb7cb6e35f5205"}}})
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, <r0=>0x0}, &(0x7f0000000200)=0xc)
setuid(r0)
r1 = msgget$private(0x0, 0x100)
msgrcv(r1, &(0x7f0000000240)={0x0, ""/210}, 0xda, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000340), 0x1, 0x6)
getpeername$inet(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10000)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000440)={0x4, 0x58, 0x4, 0x8, "496f1327a3f6871b1041a7107cc4211d118932db", 0x5, 0x2})
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
syz_emit_ethernet(0x133, &(0x7f0000000480)={@local, @empty, [], {@ipv4={0x800, {{0x12, 0x4, 0x3, 0x9, 0x125, 0x64, 0xf, 0xa, 0x2b, 0x0, @rand_addr=0x5, @remote={0xac, 0x14, 0x0}, {[@generic={0x83, 0x4, 'h!'}, @noop, @lsrr={0x83, 0x13, 0x43, [@multicast1, @multicast1, @multicast1, @local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0x3, 0xc}, @lsrr={0x83, 0x17, 0x2, [@loopback, @multicast2, @loopback, @rand_addr=0x8001, @multicast2]}]}}, @udp={{0x0, 0x1, 0x8}, {"90c31a0ab18f1b2e3e4673d951d336a29028c5102d2301257cefc9ffed67fae7e03269ef471e6376668e3bb1101ac6a59f7d1b4abe6096776476d5fb7aed5f11a8e4cc4471a03d7b82340444294eba127d99c98dce61b943bf369b847893dd73dda055a0ba91b1cc7765a6c42ea21d4a556404cdb013f5cd15303f01a1697f9771a5dcacc9d6172703f1c913b062c70e21ebcdc0fedd714c323a0c6ee27b9b68c58ae77cd3d89b01b2821c8a5829d3b05a7c8b91b5223600fac25771c2901bc29530c79bd3067ccce5132b7e777a10e19a237143da"}}}}}})
r4 = syz_open_pts()
r5 = socket$inet(0x2, 0x3, 0x9)
kevent(r3, &(0x7f00000005c0)=[{{r2}, 0xfffffffffffffffc, 0xd06e762e01064596, 0x4, 0xffffffffffff43b2, 0x5}, {{r2}, 0xfffffffffffffff9, 0x2, 0x2, 0x1, 0x40}], 0x6, &(0x7f0000000600)=[{{r3}, 0xfffffffffffffffc, 0x80, 0x2, 0x6, 0x7000000000000000}, {{r4}, 0xfffffffffffffffa, 0x3, 0xf0000000, 0x3, 0xc}, {{r2}, 0xffffffffffffffff, 0x1, 0x80000000, 0x93, 0x3}, {{r3}, 0xfffffffffffffffb, 0x88, 0x40, 0xfffffffffffffffd, 0x28e8}, {{}, 0xfffffffffffffffd, 0x90, 0x80000000, 0xa5ab, 0x6}, {{r5}, 0xfffffffffffffffe, 0x1b, 0x40000000, 0x8, 0x7fff800000}], 0x10001, &(0x7f00000006c0)={0x64, 0xff})
ioctl$VMM_IOC_INTR(r2, 0x800c5606, &(0x7f0000000700)={0x4, 0xc18a, 0x400})
pipe2(&(0x7f0000000740)={<r6=>0xffffffffffffffff}, 0x10000)
syz_extract_tcp_res(&(0x7f0000000780), 0x7, 0x10000)
connect$inet(r6, &(0x7f00000007c0)={0x2, 0x1}, 0xc)
shmget(0x0, 0x4000, 0x20a, &(0x7f0000ff9000/0x4000)=nil)
open(&(0x7f0000000800)='./file0\x00', 0x0, 0x101)
syz_extract_tcp_res$synack(&(0x7f0000000840), 0x1, 0x0)
mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, r6, 0x9)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
openat$pf(0xffffffffffffff9c, &(0x7f0000000880), 0x20, 0x0)
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000008c0)=""/4096)
r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000018c0), 0x100, 0x0)
ioctl$KDGKBMODE(r7, 0x40044b06)

973.530359ms ago: executing program 4 (id=1753):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x10, 0x65, 0x493}, {0x9e, 0x19, 0x0, 0x6}]})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100", 0x2, 0x400, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[])
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="17", 0x1, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x2, 0x2, 0x6, 0x5, 0xffffffffffffffff})
mknod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4406)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000000c0)={0x0, 0x3ff, 0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x4}, {0x4, 0x6}}, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TIOCSETA(r3, 0xcd504407, &(0x7f0000000740)={0xb6, 0xf, 0x7ff, 0x3, "97000019be00", 0x10003, 0x9})

969.424869ms ago: executing program 4 (id=1754):
r0 = socket(0x18, 0x1, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000440)=[{{r0}, 0xfffffffffffffff8, 0x14, 0x80, 0x5, 0x1}, {{r0}, 0xfffffffffffffffd, 0x37, 0x10, 0x5, 0x8}], 0x4, &(0x7f00000001c0), 0x15, 0x0)
setuid(0xee01)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000014c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000000343a00687af6acabb6150f955930e5fedb296ffffffffe00000800001a003f00000005040000070000000088000218660000004e234e20000890781058c1539adc8480e8cd4194107562a40d8d07774ae613fcf54f9ade"])
unveil(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='r\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000240)=""/203, 0xcb}, {0x0}], 0x2)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/182, 0x10d}, {&(0x7f0000000100)=""/123}], 0x1, 0x1000)
pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x0)
ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2dfa7f0000000400"})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x48)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r4, 0xc0285108, &(0x7f0000000040)={0x0, 0x29, 0x0, 0x14})
mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0xf)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1495)
open(&(0x7f0000000340)='./file0\x00', 0x10, 0x4)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0x4)
sysctl$kern(&(0x7f0000000380)={0x1, 0x32}, 0x2, &(0x7f0000000400), 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

968.369077ms ago: executing program 3 (id=1755):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mknod(&(0x7f0000000340)='./file0\x00', 0xc000, 0x100d02)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f00005ef000/0x4000)=nil, 0x4000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x4)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x82, 0xd}, {0x8d, 0xe}, {0x20, 0x5}, {0x81, 0x5}], 0x4})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket(0x2, 0x2, 0x0)
ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000240))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(0x0, 0x0)
getuid()
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x3, 0x2, 0x7, 0xfffffffe}, {0x4, 0x0, 0x7, 0x2}, {0x9e, 0x9, 0x0, 0x3}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000000007000000000b29a219c27e9b6ec0fb3ba9e2637f8eee8c3e8c7ff4", &(0x7f0000000080)=0x20, 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r3 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r3, 0x802069db, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])

838.065607ms ago: executing program 7 (id=1756):
syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x0, @rand_addr="3bcc2629a17a6c58afb8877c8be162e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@routing={0x1}]}}}}}}})
r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="e718a78e39b549c79c4d65d8cef797b401cc58476619680c4097fc099d3bb5557254143e98313d126d6cab1f346e3af4b62ed33f5ea6b23a8e638bfcfeb26fb452a5e339f1c390217173eeb8e769d36b3a5d79099dfea4acb08c30f91a514239381149a38969bf04878d1fa0626d5db5cc962bc278ec56366f9b076e9f04302e3249ca4cbdcf05474b", 0x89)

836.618462ms ago: executing program 3 (id=1757):
syz_emit_ethernet(0xe4f, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0])
sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x410}, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
unveil(&(0x7f0000000340)='./file0/file1\x00', 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x451c)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60})
select(0x40, &(0x7f0000000000)={0x2, 0x9, 0x267, 0x4, 0x8001, 0x3, 0x6, 0x49591989}, &(0x7f0000000100)={0xffffffffffffffff, 0x8000000000000001, 0xfffffffffffffffe, 0x56, 0x6, 0x8, 0x9, 0x16}, &(0x7f0000000140)={0xb00, 0x9ee7, 0xfffffffffffff68a, 0x9000, 0x100, 0x1ff, 0x1, 0x5}, &(0x7f0000000180)={0x9, 0xd84e})
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x2})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1)
sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000001580)='+P){', &(0x7f0000000080)=0x4, 0x0, 0x0)
r1 = socket$inet6(0x18, 0x1, 0x0)
getsockopt$sock_int(r1, 0xffff, 0x1004, 0x0, 0x0)
ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})

834.842432ms ago: executing program 7 (id=1758):
sysctl$kern(&(0x7f0000000100)={0x1, 0x38}, 0x2, &(0x7f0000000140)="71f91e345aac0058bc5a9150090000008e5f84cf71b79c7afec37082600d00"/48, &(0x7f0000000240)=0x30, 0x0, 0x0) (async)
r0 = socket(0x11, 0x3, 0x2)
sendto$unix(r0, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc211800b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x2, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000080)={0x2, 0x9, 0x9, 0xf62, 0x0, 0x3, 0x6, 0xf}, 0x0, 0x0, 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c50000201201", 0x8b, 0x808, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x11, 0x3, 0x0) (async)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async)
r1 = socket(0x18, 0x4, 0x0)
setsockopt(r1, 0x1000000029, 0x35, &(0x7f0000000400)="a5dc6e092248f3e32300886d3445c950b95790da3bca3c3e77be8ca5c13d5a6a66195d9ab4da3137aea9690393609d32ef5df4a1d85f7d5bd2870229ce418a3c398d1bca2100e42136c2591cdaaa2aa853058a0db966d299364f3c8b2795207453310f6e24c66b670f9909a97b701e6f4ea0b64ed01fd2693103f2018de8a9d0ff30a40c18a3b25829c0f42aa53dbd491f2268d57faf6eaa58d092e46444416e5c09fdcda3827a9d3c2c327830fdc8fcd757284e8a725d00e5b4a64127fb5109f27d5efd40e9", 0xc6) (async)
mlock(&(0x7f00001ca000/0x400000)=nil, 0x400000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
setuid(0xee01)
r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x25)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x2, 0x9, &(0x7f00000001c0)="01000000", 0x4) (async)
utimensat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x0) (async)
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0xc1)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket(0x18, 0x1, 0x0)
close(r7) (async)
socket(0x24, 0x2, 0x0)
setsockopt(r7, 0x6, 0x41, &(0x7f0000000000), 0x0)
getpeername$unix(r6, &(0x7f0000001280)=@file={0x0, ""/251}, &(0x7f00000008c0)=0xfd) (async)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async)
fchflags(r5, 0x0)
ioctl$WSKBDIO_SETBACKLIGHT(r4, 0x800c5712, &(0x7f0000000180)={0x4, 0x1, 0x2})
sysctl$ddb(&(0x7f0000000180)={0x9, 0x2}, 0x2, &(0x7f0000000000)="55a15a8e5af63438d393352bbdacf7747d6c3ee3afc8fda7b4604991ef2418e26b4bb18f6f482337344ea1bcf310ee73a347d0504447b078586c5b6fa5a094c8ccda1d6e94a9a723017846756c51a112d027f0ec5fc76316b412175a08469d1e6da4c02e134184604ad7257e8e80ad0624fdc06fadfcce2a77abe575530b2e3beaad5010", 0x0, 0x0, 0x0)

826.512879ms ago: executing program 4 (id=1759):
r0 = socket(0x18, 0x1, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1e5f)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047466, &(0x7f0000000200)=0x5)
ioctl$TIOCCBRK(r1, 0x2000747a)
syz_open_pts()
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000007}, 0x0, 0x0, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000002c00)={0x4, 0x18, 0x29, 0x32}, 0x4, 0xfffffffffffffffe, &(0x7f0000002c80)=0xfffffffffffffee0, &(0x7f0000002cc0)="5bc75f6d", 0x4)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
setegid(0xffffffffffffffff)
setuid(0xffffffffffffffff)
setgid(0x0)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x25, 0xfd, 0x6}, {0x50, 0x10, 0x5, 0x37}, {0x9e, 0x19, 0x0, 0x5}]})
write(r3, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r4 = socket(0x18, 0x3, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000100000002})
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0))
dup(r0)

795.186648ms ago: executing program 3 (id=1760):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r0 = open(&(0x7f0000000040)='./file1\x00', 0x800, 0x120)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
open(&(0x7f0000000480)='./file0\x00', 0x0, 0x20)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x35bfc3b8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x5b8a}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xf4c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xb01}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x10000}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x637}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2}, {&(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1535}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3751}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x6a}], './bus\x00', 0x2})

645.568657ms ago: executing program 7 (id=1761):
write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea8", 0xa)
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff}, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000001040)="bdd2b7a0", 0x4}], 0x1)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)) (async)
write(r0, &(0x7f00000000c0)="c3", 0xffffffed)

642.334496ms ago: executing program 0 (id=1763):
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = kqueue()
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
r2 = socket(0x18, 0x2, 0x0)
setegid(0xffffffffffffffff)
setuid(0xffffffffffffffff)
setgid(0x0)
ioctl$FIONREAD(r2, 0x80206931, &(0x7f00000001c0))
ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000ac0)={0x3, 0x2})
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a)
ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000000)={0x2, 0xc})
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
kqueue() (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
setegid(0xffffffffffffffff) (async)
setuid(0xffffffffffffffff) (async)
setgid(0x0) (async)
ioctl$FIONREAD(r2, 0x80206931, &(0x7f00000001c0)) (async)
ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000ac0)={0x3, 0x2}) (async)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a) (async)
ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000000)={0x2, 0xc}) (async)

459.832758ms ago: executing program 3 (id=1764):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xe8, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000000c0))
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
read(r1, &(0x7f0000000140)=""/16, 0x1)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4c, 0x6, 0x29, 0x6}, {0x84, 0xe, 0x8, 0x2}, {0x209e, 0x9, 0x3, 0x2}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000000007000000000b29a219c27e9b6ec0fb3ba9e2637f8eee8c3e8c7ff4775e6dc2b87c7899", &(0x7f0000000080)=0x28, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x69)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xfffbfffffffffffe, 0xf0, 0xffffffffffffffff, 0x0, 0xfffffffffffbfffe, 0x3, 0x200020})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x5, 0x101c, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0)
socket(0x18, 0x3, 0x3d)
syz_open_pts()
syz_open_pts()
kqueue()
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
ioctl$KDDISABIO(r6, 0x20004b3d)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})

459.099057ms ago: executing program 0 (id=1765):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
mkdir(&(0x7f0000000280)='./file1\x00', 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'})
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

458.166336ms ago: executing program 4 (id=1759):
r0 = socket(0x18, 0x1, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1e5f)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047466, &(0x7f0000000200)=0x5)
ioctl$TIOCCBRK(r1, 0x2000747a)
syz_open_pts()
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000007}, 0x0, 0x0, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000002c00)={0x4, 0x18, 0x29, 0x32}, 0x4, 0xfffffffffffffffe, &(0x7f0000002c80)=0xfffffffffffffee0, &(0x7f0000002cc0)="5bc75f6d", 0x4)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
setegid(0xffffffffffffffff)
setuid(0xffffffffffffffff)
setgid(0x0)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x25, 0xfd, 0x6}, {0x50, 0x10, 0x5, 0x37}, {0x9e, 0x19, 0x0, 0x5}]})
write(r3, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r4 = socket(0x18, 0x3, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000100000002})
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0))
dup(r0)

457.818806ms ago: executing program 3 (id=1766):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0)
readv(r0, &(0x7f0000000080)=[{0x0}], 0x1)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000500)={0x3, 0x0, 0x10000000000004, 0x1000381a10087})
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x5ff}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x1, 0x1, 0x0)
close(r2)
socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000200))
flock(r1, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x411, 0x50)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
r3 = msgget(0x0, 0x240)
msgsnd(r3, 0xffffffffffffffff, 0x0, 0x800)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00')
syz_open_pts()
syz_emit_ethernet(0xc6, &(0x7f0000000400)=ANY=[@ANYBLOB="8a15645d7946ffffffffffff08004b1600b80067017c07019078ffffffffac1400bb89170200000000ac1400bbac1400bbac1400bbac1400aa89130100000009e0000002ac1400aa000000008912f09e6681e465c39e30a3c77d8c45972544185483000010000000000000002007ac1400aa00000001831f09ffffffffe0000002ffffffff00000000e000000100000000ac1400bb940600000008441c0810ac1400bb00000009e0000001000100017f000001000000090000004e204e23000890784f61664a"])
sysctl$net_mpls(&(0x7f0000000040)={0x4, 0x21, 0x6}, 0x3, &(0x7f0000000100)="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", &(0x7f0000000080)=0xfa, &(0x7f0000000340)="39117345653b611a858254fd5b29d529dc2d3235e6ddde73ad3f03011f5a046b627102d565af62473e294a8611bd5ac9b0950b2c5e677150cc75692c3f3c8a603098c52ab40990d2462e5c2e899795217ad68e403caef731eb9c0730b3d674a72d2bad8ae6f36708ce4c27da4c8321eb609ca95a96184b0c07a2e1e08b5f7ec103665fe9d1d1ee046ba8ac4bb5", 0x8d)
socket(0x1, 0x5, 0x0)

369.958071ms ago: executing program 4 (id=1768):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r0 = socket(0x11, 0x3, 0x8)
close(r0)
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xb1c, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
socket(0x18, 0x2, 0x0)
select(0x40, &(0x7f0000000040)={0x200000000000008, 0x1000005, 0x6, 0x8000000000000003, 0x2, 0x0, 0x101, 0x6}, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f00000001c0))
r2 = socket(0x18, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x2, r2)
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
sendto(r0, &(0x7f0000000280)="bec5c9d2689e53f58200cab89e6803ce2f4c9d6299a74ed8a1ffe20adc053691f74def235a63e309b8ecabe0849016f6d2057402b8cd25250eebb34aee3aee7f06bcfe9f412e63842f1df79500bdb1772ab79dbb3545be472d1f65632ef33fdc6657d1d9439defda7642f6b378ac331ab463e0114af17f5140e8fb79b3abb2fa30aa922ba7f5e680352ddc2e8308e2ada98b83034daa74c46a9cc3883dd7e4b4d174ca6f97c1cf5357cde157c8c866c5894e5a507f1f5415339124ed1941a30df35b04ef236159cbd45b73e3ba1de65208d3a0e4560c06", 0xd7, 0x0, &(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x0}, 0x8)
r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r5, 0x80105727, &(0x7f0000000300)={&(0x7f0000000000)=[{0x101, 0x3}, {0x100, 0x9710}, {0x7, 0x9}], 0x3})
ioctl$WSKBDIO_GETENCODING(r4, 0x4004570f, &(0x7f0000000080))
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)='q', 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4)
close(r3)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffffc, 0x0, 0x8, 0x4, 0x20000000009}], 0x3, 0x0, 0x6, 0x0)
socket(0x18, 0x2, 0x0)
sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x2}, 0x65, 0x0, 0x0, 0x0, 0x0)
poll(&(0x7f0000000100)=[{r0, 0xbe979e4b7159902f}, {r1, 0x80}], 0x2, 0x8)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$TIOCFLUSH(r6, 0x80047476, &(0x7f00000003c0))
sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0)

236.139308ms ago: executing program 0 (id=1772):
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x695, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
semget(0x0, 0x1, 0x281)
r1 = semget$private(0x0, 0x12df2e93b64c64b, 0x483)
semop(r1, &(0x7f0000000240)=[{0x3, 0x3151, 0x1000}, {0x0, 0x8001, 0x800}, {0x4, 0x8, 0x1800}], 0x3)
r2 = syz_open_pts()
ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f0000000040))
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
r3 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3)
setreuid(0xee00, 0x0)
r4 = getppid()
r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r5, 0x80085761, &(0x7f0000000040)={0x3, 0x9})
ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0x40001130, r4)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffff9, 0x0, 0x4, 0x0, "e600000f0000ae000000000000000007abc0788a", 0x8, 0x800000})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4)
rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
execve(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)=[&(0x7f0000000280)='/dev/wsmouse\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='/dev/wsmouse\x00'], &(0x7f0000000b00)=[&(0x7f00000007c0)=':\\\\\x00', &(0x7f0000000800)='/dev/wsmouse\x00', &(0x7f0000000840)='/dev/wsmouse\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='/dev/wsmouse\x00', &(0x7f0000000900)='/dev/wsmouse\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='/dev/wsmouse\x00', &(0x7f0000000ac0)='C\'.!^,\x00'])

234.008473ms ago: executing program 5 (id=1773):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x200000000000000, 0x9f9e})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x31, &(0x7f0000000000)="ebffcbff13b9fd816395de0100b5e67731929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
close(r1)

232.469173ms ago: executing program 4 (id=1774):
open(&(0x7f0000000280)='./file0\x00', 0x8, 0x85)
mknod(&(0x7f0000000400)='./file0\x00', 0xe000, 0xfc)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r0 = syz_open_pts()
close(r0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000040)=0x40)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0xcc4b}, {0xf1d3de1d4e8888f4}, {0x2}, {}, {}, {0x3}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {0x0, 0xfffffffd}, {0x2, 0x4}, {}, {0x2, 0xfcd8}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x7ff}, {0xbb08c0840fa32129, 0x2000000}, {0x2, 0xab}, {}, {}, {0x2, 0xffffffff}, {0x2, 0x1}, {}, {0x0, 0x202}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e)
write(r2, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f66a1f419a83d4275218a89d7a7803f069d851ff628dd309c40f6e3c932af00cb6219ae6e21d2c28d492cd5404b16dfa627d93b1e8ad2ea49d2344c1a3b234bd6f1c70fd4252844a6e6ab7b8997bc55fa22ce951ee038d289078b95510b0f2473ce1348434f0ec4a885ee84fd08fc50f08ca7991af3f8c322b496466f804c4b700cc9391855bd0ee339196de2b5ec2d8425c711d3f9e051eb055d45c693d7549712f5284a9fbca7d15c5bf1a9c8e3b3c1a43983056782e046c29e3d57082f7743b8bf6d994cd3c26c85609eaa11e6f7bc4", 0xfffffdaf)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="a568c14719", 0x5}], 0x1)
open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x110000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000b13000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81})
sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000100)={0x0, 0x8, 0x9, 0x8})
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0)
r4 = getpgrp()
r5 = getpgid(r4)
r6 = socket(0x2, 0x4001, 0x0)
r7 = fcntl$dupfd(r6, 0x2, r6)
close(r7)
shutdown(r7, 0x2)
ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x4, r5)

150.590354ms ago: executing program 6 (id=1775):
r0 = socket$inet(0x2, 0x2, 0x0)
sysctl$hw(&(0x7f00000002c0)={0x6, 0xe}, 0x2, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)=0x7, 0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x2, 0x1bd}, {0x0, 0xa}, {}, {0x2}, {}, {0x3, 0x5}, {0x0, 0x596}, {}, {0x1}, {}, {0x0, 0xe71}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {0x1}, {0x0, 0x2000004}, {0x2}, {0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x7ffffffd}, {0x1, 0x6}, {0x0, 0x1}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x4001, 0x0)
r2 = dup(r1)
shmat(0x0, &(0x7f000055b000/0x1000)=nil, 0x3000)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
close(r3)
r4 = socket(0x2, 0x4001, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
close(r0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x200000000000a, &(0x7f0000000040)="fb00005c00000000ef9c569d71034f4bc09fd0176efbe20b040152c20be95e", 0x1f)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="e600000100000000", 0x8)

149.16196ms ago: executing program 5 (id=1776):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a02a9581460e2e5392d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f00000007c0)="b389e5aeb7b42eab8dd0017236f060f918503740799f35d7e2e733fc1ce9e45cfb279a7aeb65ad9859d427a701bb4c25773931def673bea9bf786061c13935cf58279287d41ec345ac1598b7b4e5c36a3d5ecc1893e17e380a226ad0d75529c4623ddfb51dbafffe78145aed33f3c482faf44cd4fbeadc3a67a824d08a4333b14f7a032ce11d5530043711766c9b6de2be6f02696bd39a7bab01735c492d971dbc56c0ac859c5c750dabb6962382008fbeb3d9d6eedc7eb2b0cdc5a6dcc08472c67d346a4c6c2944d777d2414c65d905235d3e", 0xd3}, {&(0x7f00000002c0)="5f6a8d748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a783f407d2c30eea6356105ec8aaba86930f1aed0b3d111d000000000000", 0x3b}, {&(0x7f0000001dc0)="2a5f4cd9b73c31d629e8d68e605e5940744ef138960b671d42c56f79fcb7054924", 0x21}], 0x4)
socket(0x18, 0x2, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0xb3f, {[0xfffffbfffffffffb, 0xfffffffffffffffc, 0x4, 0x100200004, 0x6, 0x7, 0xdf60, 0x3, 0xfffffffffffffffe, 0x20002f01, 0x93, 0x8000100000003, 0x2, 0x200000000003, 0xb, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x2080000001, 0xfffffffffffffffd, 0x20000001, 0x20000000000060, 0x7b98, 0x80000000000001fe, 0x3], [0x91f, 0x8000, 0x40000000, 0xffffffffffffffff, 0x2, 0x11000, 0xffffffff00000000], [0xac0e, 0x6d, 0x7ffffffffffffffc, 0x4e, 0x52adeb15, 0x7], [{0x7, 0x0, 0xfffffffe, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffa, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x20, 0x7fff, 0x7f, 0x8}, {0x0, 0x9, 0x200, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0xfabc, 0x3, 0xf, 0x8}], {0x1, 0xe1, 0xb, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}})
r1 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xbffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x7, 0xc48, 0x80000000, 0x8000002e, 0x0, 0xb28f, 0x7fffffff, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x5, 0x7ffffffd, 0x0, 0x0, 0x0, 0x48], [0x8, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0x90c, 0xffffffff, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x57, 0xfffffffd, 0xfffffffe, 0xffc}, {0x100c, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0x4, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x2}, {0xfefe, 0x0, 0x4}, {0x0, 0x9, 0x1fd, 0x459}], {0x0, 0x5, 0x1, 0x849}, {0x203, 0x40010, 0x200006, 0x5}}})
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
r2 = socket(0x2, 0x3, 0x0)
close(r2)
r3 = socket(0x18, 0x2, 0x0)
close(r3)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x10})
r4 = socket(0x18, 0x3, 0x0)
setsockopt(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000140)="1bb8b3f6", 0x4)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
socket(0x6, 0x2, 0x2)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000b13000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x3c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81})
r5 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
sysctl$hw(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="3ebf2da455551bbf7df3133ad39785daef8e2687677cc2df24c05b3ede8e20764ecddeff2443c62977ae1fe67fdf943dc8c8cd4c285c3369fd4e4ad72f0648b326079b9e17b71bc9e7668ee1eb0940c27b6ba950198e955e1fa4", 0x5a)
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"])
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000800103a00000000000000000a00e8ff0000fffffffe21633a45ba84ef212da089d2dc67afc8fe1d3d0c036ee842dd058082aa0d88611ecb515e"])

148.508195ms ago: executing program 6 (id=1777):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xbe, 0x4000}, 0x100000002006, 0xffffffffffff0001, 0x0, 0x0, 0x80000000000000, 0xffffffff, 0x6, 0xfffffffffffffffd}) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0xffff, 0x9, 0xff, 0x2}, {0x2, 0x12, 0xe4, 0xa}, {0xa, 0x8, 0x93, 0xfe}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f00000026c0)={0x1, 0x30}, 0x2, 0x0, 0x0, &(0x7f0000002780), 0x0) (async)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x8, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async)
open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) (async)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x112, 0x0) (async)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x5, 0xe5b}, {0x7fffffffffffffff, 0xffffffff00000001}}, 0x2)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r2 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil)
r3 = shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x4000)
shmdt(r3)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xd, 0x60, 0x4}, {0x28, 0x4, 0x4, 0x6}, {0x806, 0x6, 0x10, 0x7}]}) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000000)="71e994", &(0x7f0000000080)=0x3, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x50, 0x6, 0x29, 0x6}, {0x81, 0xe, 0x7, 0x2}, {0x209e, 0x9, 0x3, 0x2}]}) (async)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000217}, 0x4, 0x0, 0x0, 0x0, 0x1e) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000000007000000000b29a219c27e9b6ec0fb3b", &(0x7f0000000080)=0x15, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])

146.179156ms ago: executing program 5 (id=1778):
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0xa, 0x2a2, 0xffffffffffffffff, 0x0, 0x3, 0x80000000000000f, 0x7, 0x40})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x71)

120.910553ms ago: executing program 5 (id=1779):
mkdir(&(0x7f0000000100)='./file0\x00', 0x49) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x49)
setreuid(0xee00, 0x0) (async)
setreuid(0xee00, 0x0)
r0 = getuid()
r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x80000000000206, 0x0)
chown(&(0x7f0000000200)='./file0\x00', r0, 0x0) (async)
chown(&(0x7f0000000200)='./file0\x00', r0, 0x0)
setreuid(0xee00, r0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="b32cf5714a869e22cd6dde585fdef6d47ff8c9ac194efa1055312bb712315cbf9e28fc089cc8268280ce8dc93ffa003aaa5ecce37ff5553137037ca3af27216a480303f917a952d7e83604db21d0910aa601c4358e065e146a8a904832723c63f809379337c0e1e311cda6d8491e3d440530", 0x72}], 0x1)
r2 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r2, 0x0, 0x23, &(0x7f0000000800), 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x2, 0x4001, 0x0)
r4 = fcntl$dupfd(r3, 0x2, r3)
close(r4)
socket(0x2, 0x1, 0x0) (async)
r5 = socket(0x2, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080), 0x4)
shutdown(r4, 0x2)
listen(r5, 0x9) (async)
listen(r5, 0x9)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') (async)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')

120.056508ms ago: executing program 6 (id=1780):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0)
setuid(0xee01)
r1 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$getown(r2, 0x5)
fcntl$setown(r0, 0x6, r3)
close(r0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r4, 0xc0206923, &(0x7f00000001c0))
r5 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r5, 0x80206913, &(0x7f00000001c0))
pipe(&(0x7f0000000000))
sysctl$net_inet6_icmp6(&(0x7f00000002c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000300)="3ae5ee9a82feae4fac08e4745638656807bedbdc1b7a93558c49cc86e6a45ec31f6239fa6c2a280423dcd58bd6239014e25af1c7353c47e66cc460a418acd23329e4ac3d740dbf1c6bb64f7aa5da227b4e86868e4368188aab9f2dd019088c522baa3c5b97619d35e6aff10efc22a4c78da870a6bc44bf10d75daea9cff2191a46eb676ebdd8084d3f6375fc4fde9b368a5a595753fdc526290e2910d6ca4f189b69713f184fb8227c40e038880e5af13be2bd74f98749", &(0x7f00000003c0)=0xb7, &(0x7f0000000400)="d24d8b2d", 0x4)
pipe(&(0x7f0000000100)) (async)
fcntl$setstatus(r0, 0x4, 0xc0) (async)
setuid(0xee01) (async)
getppid() (async)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1}) (async)
pipe(&(0x7f00000001c0)) (async)
ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$getown(r2, 0x5) (async)
fcntl$setown(r0, 0x6, r3) (async)
close(r0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
socket(0x2, 0x1, 0x0) (async)
ioctl$FIONREAD(r4, 0xc0206923, &(0x7f00000001c0)) (async)
socket(0x2, 0x1, 0x0) (async)
ioctl$FIONREAD(r5, 0x80206913, &(0x7f00000001c0)) (async)
pipe(&(0x7f0000000000)) (async)
sysctl$net_inet6_icmp6(&(0x7f00000002c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000300)="3ae5ee9a82feae4fac08e4745638656807bedbdc1b7a93558c49cc86e6a45ec31f6239fa6c2a280423dcd58bd6239014e25af1c7353c47e66cc460a418acd23329e4ac3d740dbf1c6bb64f7aa5da227b4e86868e4368188aab9f2dd019088c522baa3c5b97619d35e6aff10efc22a4c78da870a6bc44bf10d75daea9cff2191a46eb676ebdd8084d3f6375fc4fde9b368a5a595753fdc526290e2910d6ca4f189b69713f184fb8227c40e038880e5af13be2bd74f98749", &(0x7f00000003c0)=0xb7, &(0x7f0000000400)="d24d8b2d", 0x4) (async)

119.659137ms ago: executing program 0 (id=1781):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0xfffffffffffffead}, 0xc)
sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
shmget$private(0x0, 0x1000, 0x1, &(0x7f00005a4000/0x1000)=nil)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000100)="010000f0", 0x4)

40.461922ms ago: executing program 0 (id=1782):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
r0 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x10001, 0x7fffffff, r0, 0x0, 0x0, 0x2000000000005, 0x0, 0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r2 = fcntl$getown(r1, 0x5)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
ftruncate(r3, 0x40000000007)
truncate(&(0x7f00000000c0)='./file0\x00', 0x100000000)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7d59d, r2)
mkdir(&(0x7f0000000040)='./file0/file0/..\x00', 0x2a)
chroot(&(0x7f00000002c0)='./file0/file0\x00')
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x8000}, {}, {0x2}, {}, {0x3}, {0x3}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x3, 0x4}, {0x0, 0xb6}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {0x0, 0x2}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffe}, {0x3, 0x8}, {0x3}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001480), 0x10, 0x0)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{0x15, 0xa, 0x40, 0x7}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='./file0/file0/..\x00')

39.613914ms ago: executing program 6 (id=1783):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
mmap(&(0x7f0000003000/0xa000)=nil, 0xa000, 0x5, 0x10, r0, 0x100000000) (async, rerun: 64)
sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000003340)="01000000", 0x4) (async, rerun: 64)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

38.437632ms ago: executing program 0 (id=1784):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x32, 0x9}, 0x3, 0x7, 0xffffffffffffffff, 0x0, 0x1000000000005, 0x400000000009, 0x800})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0)
r0 = socket(0x18, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0)
chroot(&(0x7f0000000740)='.\x00')
open(&(0x7f0000000140)='./file0\x00', 0x8, 0x201)
sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4801)
open(&(0x7f0000000040)='./bus\x00', 0x80, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)

37.409209ms ago: executing program 6 (id=1785):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x14800000000000})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e6", 0xf)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="8b4f69c83b01ff0cf7ffffff86dd61b91d3a00803c03050000000000000000000000000000bb4079e811670a1ec2952a422d926cce073382"])

10.665737ms ago: executing program 5 (id=1786):
sysctl$net_mpls(&(0x7f0000000080)={0x4, 0x21, 0x6}, 0x3, 0x0, 0x0, &(0x7f0000000000)="9409598b7ad9de44492c265fbb9ac5b08a3f10c3bf6a8d3ec8243b8b39076d59a22323fcff8dabfb3b34a2abd5075b3cf84f5da438fa9d4080000000000000000000", 0x42)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0xc003, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0x8, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x7, 0x5, 0x24a, 0xc, 0x1, 0xc, 0x9, 0x5]}, 0x3c)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$TIOCFLUSH(r1, 0xc0107004, &(0x7f0000000080)=0x7f)
r2 = socket$inet(0x2, 0x8000, 0x1)
recvfrom$inet(r2, &(0x7f00000000c0)=""/124, 0x7c, 0x803, 0x0, 0x0)

7.76189ms ago: executing program 6 (id=1787):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$VMM_IOC_TERM(0xffffffffffffff9c, 0x80045604, &(0x7f0000000000)={0x7fff})
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000340)={&(0x7f0000000080)=[{0x20, 0x10000}, {0x4, 0x20}], 0x2b})

0s ago: executing program 5 (id=1788):
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x8)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
pread(r0, 0x0, 0x0, 0x156)
r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x81)
openat(r2, &(0x7f00000003c0)='./file0\x00', 0x8, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @broadcast}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7}}}}})
sendto$unix(r1, &(0x7f0000000080), 0x0, 0x400, &(0x7f0000000380)=@abs={0x0, 0x0, 0x3}, 0x8)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='x\x00')
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1], [0x63, 0x5, 0x4, 0x10000, 0x0, 0x0, 0x10, 0x0, 0x80000000, 0xfffffffffffffff8], [0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x9], [0x4, 0x0, 0x0, 0x165, 0x0, 0xb], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6}, {0x1000, 0xa, 0x0, 0x1}, {0x0, 0x1000, 0xfffd}, {0x0, 0x0, 0xc8, 0x7fffffffffffffff}, {0x9, 0x5, 0x0, 0x1}, {0x0, 0x0, 0xaa}, {0x0, 0xfffffff5, 0xc00000}], {0xfffc, 0xfffffffd, 0x20000003, 0xf5a752c}, {0x0, 0x5, 0x10000000}}})
r3 = kqueue()
syz_emit_ethernet(0x1000e, 0x0)
kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
kevent(r3, 0x0, 0x0, &(0x7f0000000600), 0xfffffffe, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)="89040000000094f77ea66ed006e3bc58e261c99a", 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
WARNING: thread `nfsio' (177971) exits with status -1
WARNING: thread `nfsio' (272283) exits with status -1
WARNING: thread `nfsio' (179918) exits with status -1
WARNING: thread `nfsio' (55763) exits with status -1
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
WARNING: thread `nfsio' (78238) exits with status -1
WARNING: thread `nfsio' (317264) exits with status -1
pckbd_enable: command error
pckbd_enable: command error
malloc(): allocation too large, type = 6, size = 287762939904
pckbd_enable: command error
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
pppx: unable to set addresses for pppx1, error=17

OpenBSD/amd64 (T�H�\D�%��1ޚ���c���	(�����ѯ�r�{�����|V���`�F3�h@�B���w0-�3-�U���䩆�1o��O���]~k����j١�}뷐����58��<��l9��d�@�w�+�[.��﹜z�]�k�8,��BK���]�ec���4�Ch­1#lJ�0}eܸ�G���u_>Od�l��X�) (tty00)

login: pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17
0#+"$%.!",%: #/--!.$ %22/2
denied attempt to set clock forward to 52172937113390
vnd0: sloppy read from proc 58910 (syz-executor): blkno 8 bcount 269
uvm_fault(0xfffffd800b0277a0, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff82993e38 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002a366060
gsbase 0xffff8000299edff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff82993e38
Starting stack trace...
panic(ffffffff833a1c27) at panic+0x1d0
kerntrap(ffff80002a365fb0) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff800001463000) at dt_ioctl_record_stop+0x108
dtclose(11e5f,81,2000,ffff800038c02550) at dtclose+0x109
spec_close(ffff80002a366160) at spec_close+0x466
VOP_CLOSE(fffffd80739711c0,81,fffffd80097fb618,ffff800038c02550) at VOP_CLOSE+0x132
vn_closefile(fffffd805eb8fce8,ffff800038c02550) at vn_closefile+0x12b
fdrop(fffffd805eb8fce8,ffff800038c02550) at fdrop+0x121
closef(fffffd805eb8fce8,ffff800038c02550) at closef+0x192
fdfree(ffff800038c02550) at fdfree+0x116
exit1(ffff800038c02550,0,0,1) at exit1+0x576
sys_exit(ffff800038c02550,ffff80002a3664d0,ffff80002a366420) at sys_exit+0x1a
syscall(ffff80002a3664d0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x718806693490, count: 242
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 168 5 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 34256  87463      0           0  0x4000000    1  syz-executor
 483955  61304      0     0x14000      0x200    0  reaper
savectx() at savectx+0xae
end of kernel
end trace frame: 0xa813b85d130, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd800b0277a0, 0x0, 0, 1) -> e
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0xa813b85d130, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff800033869240
rbx                                0
rdx               0xffff8000014e4880
rcx               0xffff8000fffef770
rax                             0x33
r8                0xffff800033869170
r9                               0x1
r10               0xebbf5970badcbddc
r11               0xa22377e04aeb76c7
r12                                0
r13                                0
r14               0xffff8000fffef770
r15                                0
rip               0xffffffff82e9a3ee    savectx+0xae
cs                               0x8
rflags                          0x46
rsp               0xffff8000338691c0
ss                              0x10
savectx+0xae:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=34256 pid=87463 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=50, usrpri=50, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800038c02d18,0xffffffff83895928
    process=0xffff800038c079e0 user=0xffff800033864000, vmspace=0xfffffd806ef65b78
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 87463  271716  76827      0  2           0                syz-executor
*87463   34256  76827      0  7   0x4000000                syz-executor
  3936  352067  71219      0  3        0x80  nanoslp       syz-executor
  3936  318710  71219      0  3   0x4000080  pipewr        syz-executor
  3936  172349  71219      0  3   0x4000080  pipewr        syz-executor
  3936  248071  71219      0  3   0x4000080  fsleep        syz-executor
  1328  248002  50744      0  3        0x80  nanoslp       syz-executor
  1328  353126  50744      0  3   0x4000080  lockf         syz-executor
  1328  497672  50744      0  3   0x4000080  fsleep        syz-executor
 71219  164689  29691      0  2         0x2                syz-executor
 79400  228227  19952      0  3        0x80  nanoslp       syz-executor
 79400    6606  19952      0  3   0x4000080  fsleep        syz-executor
 79400  341398  19952      0  3   0x4000080  pipewr        syz-executor
 99411  257474  93785      0  4     0x82000                syz-executor
 99411  200767  93785      0  3   0x4082000  biowait       syz-executor
 99411  490074  93785      0  3   0x4002000  suspend       syz-executor
 99411  504974  93785      0  4   0x4082000                syz-executor
 99411  210479  93785      0  3   0x4082000  inode         syz-executor
 70292  275313      0      0  3     0x14200  acct          acct
 29372  185004      0      0  3     0x14280  nfsidl        nfsio
 56963  312919      0      0  3     0x14280  nfsidl        nfsio
 54367    4608      1      0  3    0x100083  ttyin         getty
 50744  447831  29691      0  3        0x82  nanoslp       syz-executor
 42066   65570      0      0  3     0x14280  nfsidl        nfsio
 61101   32932      0      0  3     0x14280  nfsidl        nfsio
 36932  297932      0      0  3     0x14200  bored         sosplice
 76827  490431  29691      0  3        0x82  nanoslp       syz-executor
 19952  487962  29691      0  2         0x2                syz-executor
 23802  323654  29691      0  3        0x82  nanoslp       syz-executor
 93785  129143  29691      0  3        0x82  nanoslp       syz-executor
 59210  507023  29691      0  3        0x82  wait          syz-executor
 95139  341762  29691      0  3         0x2  biowait       syz-executor
 29691  365855  96736      0  3        0x82  kqread        syz-executor
 96736  306609  43356      0  3    0x10008a  sigsusp       ksh
 43356  506170  54563      0  3        0x98  kqread        sshd-session
 54563   12236  30336      0  3        0x92  kqread        sshd-session
 30336   68632      1      0  3        0x88  kqread        sshd
 65249   85666  75136     74  3   0x1100092  bpf           pflogd
 75136  177115      1      0  3        0x80  sbwait        pflogd
 88288  403095  93087     73  3   0x1100090  kqread        syslogd
 93087  183651      1      0  3    0x100082  sbwait        syslogd
 32378  419838      1      0  3    0x100080  kqread        resolvd
 36590  143103  26267     77  3    0x100092  kqread        dhcpleased
 40499  268201  26267     77  3    0x100092  kqread        dhcpleased
 26267  104067      1      0  3        0x80  kqread        dhcpleased
   282  276548      0      0  3     0x14200  bored         smr
 14343   56344      0      0  3     0x14200  pgzero        zerothread
 59014   39637      0      0  3     0x14200  aiodoned      aiodoned
 90826   69319      0      0  3     0x14200  syncer        update
 85059  277626      0      0  3     0x14200  cleaner       cleaner
 61304  483955      0      0  7     0x14200                reaper
 62291  397398      0      0  3     0x14200  pgdaemon      pagedaemon
  8007   38285      0      0  3     0x14200  bored         viomb
 84717  339606      0      0  3  0x40014200  acpi0         acpi0
 35107  311718      0      0  3  0x40014200                idle1
  1580   41106      0      0  3     0x14200  bored         softnet1
  4484  368395      0      0  3     0x14200  netlock       softnet0
 18816  467207      0      0  2  0x40014200                systqmp
 69079  246780      0      0  3     0x14200  bored         systq
 82822  111048      0      0  3     0x14200  tmoslp        softclockmp
  4012  312598      0      0  3  0x40014200  tmoslp        softclock
 33155   74085      0      0  3  0x40014200                idle0
     1  153441      0      0  3     0x80082  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 99411 (syz-executor) thread 0xffff8000fffefca0 (200767)
Process 95139 (syz-executor) thread 0xffff8000ffffca68 (341762)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10237  11075K   11557K 166960K     14215        0
            pcb    19     16K      22K 166960K       528        0
         rtable   178      9K      10K 166960K       607        0
             pf    36     18K   67486K 166960K       252        0
         ifaddr    33      6K       8K 166960K       141        0
        ifgroup    47      2K       2K 166960K       234        0
         sysctl     4      1K       9K 166960K        21        0
       counters    64     36K      37K 166960K       258        0
       ioctlops     0      0K       8K 166960K      1842        0
            iov     0      0K      32K 166960K       265        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1468     92K      93K 166960K      3209        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     4    624K     628K 166960K        42        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        73        0
        dirhash    12      2K       3K 166960K        57        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     236K 166960K      2023        0
          sigio     0      0K       0K 166960K        42        0
           proc    75    131K     164K 166960K       852        0
        subproc    72      4K       4K 166960K       108        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       257        0
       in_multi    68      5K       7K 166960K       196        0
    ether_multi     1      0K       0K 166960K        21        0
            mrt     1      0K       0K 166960K        17        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   259   1155K    1155K 166960K       259        0
           exec     0      0K       1K 166960K      1042        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         4        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   256    168K     185K 166960K     19842        0
       UVM aobj    86      3K       3K 166960K        95        0
     pinsyscall    42     84K     100K 166960K      3190        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       1K 166960K       173        0
            NDP    12      0K       2K 166960K       100        0
           temp    84   8652K    8767K 166960K     74271        0
         kqueue    13     20K      34K 166960K       425        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      229    0      226     3     2     1     3     0     8    0
rtentry    176      185    0      117     5     0     5     5     0     8    0
unpcb      144     1160    0     1142     5     4     1     2     0     8    0
syncache   336       10    0       10     3     3     0     1     0     8    0
tcpqe       32        1    0        1     1     1     0     1     0     8    0
tcpcb      736      616    0      607    12    10     2     7     0     8    0
arp        136       26    0       15     1     0     1     1     0     8    0
inpcb      328     2219    0     2205    22    20     2    11     0     8    0
nd6        152       31    0       17     1     0     1     1     0     8    0
pkpcb       40       15    0       15     4     4     0     1     0     8    0
kcovpl      48       12    0        4     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     1     0     1     0     8    0
ppxss      1192      74    0       74     2     2     0     1     0     8    0
pppxif     1504      10    0       10     2     2     0     1     0     8    0
pfstscr     40        4    0        4     3     3     0     1     0     8    0
pffrag     232       15    0        5     2     1     1     1     0   482    0
pffrnode    88       11    0        2     2     1     1     1     0     8    0
pffrent     40       36    0       25     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       3    0        3     3     3     0     1     0     8    0
pfanchor   1288       2    0        0     1     0     1     1     0     8    0
pftag       88        3    0        0     1     0     1     1     0     8    0
pfstitem    24      125    0       55     1     0     1     1     0     8    0
pfstkey    128      196    0      128     3     0     3     3     0     8    0
pfstate    384      160    0       92     7     0     7     7     0     8    0
pfrule     1344      40    0       36     2     1     1     2     0     8    0
rttmr      136        2    0        2     1     1     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      768    0      422    29     4    25    29     0     8    0
art_table   40      771    0      422     5     0     5     5     0     8    0
art_node    32      183    0      122     1     0     1     1     0     8    0
sysvmsgpl   40        8    0        8     4     4     0     1     0     8    0
semupl     112        3    0        3     2     2     0     1     0     8    0
semapl     112       67    0       57     1     0     1     1     0     8    0
shmpl      112       92    0        9     3     0     3     3     0     8    0
dirhash    1024      48    0       31     3     0     3     3     0     8    0
dino2pl    256     5082    0     3565    96     0    96    96     0     8    0
ffsino     296     5082    0     3565   117     0   117   117     0     8    0
nchpl      144     7865    0     6157    64     0    64    64     0     8    0
rtmask      32        8    0        8     3     3     0     1     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   26915    0    26914     3     2     1     2     0     8    0
percpumem   16      144    0       97     1     0     1     1     0     8    0
kstatmem   264      152    0      130     4     2     2     3     0     8    0
scsiplug    72        3    0        3     2     2     0     1     0     8    0
scxspl     216    39042    0    39040    13    12     1     8     1     8    0
plimitpl   152      486    0      467     1     0     1     1     0     8    0
sigapl     424     2295    0     2242     8     1     7     7     0     8    0
knotepl    120      490    0        0    14     0    14    14     0     8    0
kqueuepl   224      972    0      963    15    14     1     5     0     8    0
pipepl     344      324    0      294     9     5     4     8     0     8    1
fdescpl    528     2261    0     2230     3     0     3     3     0     8    0
filepl     160    14866    0    14623    31    20    11    20     0     8    0
lockfpl    104     1122    0     1114     2     1     1     2     0     8    0
lockfspl    48      452    0      447     1     0     1     1     0     8    0
sessionpl  144       31    0       22     1     0     1     1     0     8    0
pgrppl      48       67    0       50     1     0     1     1     0     8    0
ucredpl    104     2270    0     2256     1     0     1     1     0     8    0
zombiepl   144     3156    0     3154     1     0     1     1     0     8    0
processpl  1232    2295    0     2242     5     0     5     5     0     8    0
procpl     664     5590    0     5523     7     0     7     7     0     8    0
sosppl     168        8    0        8     4     4     0     1     0     8    0
sockpl     752     3703    0     3666    36    31     5    18     0     8    0
mcl64k     65536     19    0        0     3     0     3     3     0     8    0
mcl16k     16384      3    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     130    0        0    17     0    17    17     0     8    0
mcl2k2     2112       2    0        0     1     0     1     1     0     8    0
mcl2k      2048      30    0        0     4     0     4     4     0     8    0
mtagpl      96        8    0        0     1     0     1     1     0     8    0
mbufpl     256      965    0        0    57     0    57    57     0     8    0
bufpl      280    14205    0     8062   440     0   440   440     0     8    0
anonpl      32    12188    0        0    99     0    99    99     0   246    0
amapchunkpl 152   69451    0    68905    50    27    23    32     0   158    0
amappl16   200     6206    0     6064    38    27    11    22     0     8    0
amappl15   192        8    0        8     1     1     0     1     0     8    0
amappl14   184      129    0      117     1     0     1     1     0     8    0
amappl13   176       11    0       10     1     0     1     1     0     8    0
amappl12   168     2971    0     2939     3     1     2     2     0     8    0
amappl11   160       64    0       50     1     0     1     1     0     8    0
amappl10   152        7    0        7     1     1     0     1     0     8    0
amappl9    144      250    0      250     1     1     0     1     0     8    0
amappl8    136       20    0       18     1     0     1     1     0     8    0
amappl7    128      119    0      106     1     0     1     1     0     8    0
amappl6    120      221    0      218     1     0     1     1     0     8    0
amappl5    112      154    0      143     1     0     1     1     0     8    0
amappl4    104      319    0      299     1     0     1     1     0     8    0
amappl3     96    12089    0    11980     3     0     3     3     0     8    0
amappl2     88     2539    0     2459     3     0     3     3     0     8    0
amappl1     80    16890    0    16282    16     1    15    16     0     8    0
amappl      88    18757    0    18575     5     0     5     5     0    92    0
dma16384   16384      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       3    0        2     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       94    0        9     2     0     2     2     0     8    0
uaddrrnd    24     2261    0     2230     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2261    0     2230     1     0     1     1     0     8    0
vmmpekpl   168    18867    0    18816     4     0     4     4     0     8    0
vmmpepl    168   145679    0   143534   120    23    97   106     0   357    0
vmsppl     488     2260    0     2230     6     1     5     5     0     8    0
rwobjpl     80    43747    0    36651   146     1   145   145     0     8    0
pdppl      4096    4530    0     4460   114    42    72    84     0     8    2
pvpl        32    22262    0        0   181     1   180   180     0   265    0
pmappl     256     2260    0     2230     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      354    0       65     9     0     9     9     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837dcff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
__mp_lock(ffffffff83946b68) at __mp_lock+0x1a3
softintr_dispatch(2) at softintr_dispatch+0x125
dosoftint(2) at dosoftint+0x54
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff83946b68) at __mp_lock+0x199
intr_handler(ffff80002a244890,ffff800000079a80) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
Xspllower() at Xspllower+0x1d
km_free(ffff800033854000,6000,ffffffff83568ba0,ffffffff83637968) at km_free+0x36b
uvm_uarea_free(ffff800038c08d20) at uvm_uarea_free+0x4f
end trace frame: 0xffff80002a244ab0, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff837dcff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
__mp_lock(ffffffff83946b68) at __mp_lock+0x1a3
softintr_dispatch(2) at softintr_dispatch+0x125
dosoftint(2) at dosoftint+0x54
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff83946b68) at __mp_lock+0x199
intr_handler(ffff80002a244890,ffff800000079a80) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
Xspllower() at Xspllower+0x1d
km_free(ffff800033854000,6000,ffffffff83568ba0,ffffffff83637968) at km_free+0x36b
uvm_uarea_free(ffff800038c08d20) at uvm_uarea_free+0x4f
reaper(ffff8000ffffdc90) at reaper+0x1aa
end trace frame: 0x0, count: -15
ddb{0}> machine ddbcpu 1
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
savectx() at savectx+0xae
end of kernel
end trace frame: 0xa813b85d130, count: 14
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0xa813b85d130, count: -1