last executing test programs:

6.535312396s ago: executing program 4 (id=4964):
r0 = socket$inet6(0x18, 0x1, 0x0)
ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, &(0x7f0000000080)=0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x4f, 0x0, 0x37)
getsockopt(r0, 0x29, 0x35, 0x0, 0x0)

6.398549046s ago: executing program 4 (id=4968):
r0 = syz_open_pts()
fcntl$lock(r0, 0x8, &(0x7f0000000840)={0x3, 0x2, 0x5, 0x1000100000003})
flock(r0, 0x3)
flock(r0, 0x3)
r1 = socket(0x18, 0x2, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa", 0x12}], 0x1)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x83, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffb, 0x20, 0x1, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffa, 0x37, 0x20, 0x9, 0x3}, {{}, 0xfffffffffffffffb, 0x2f, 0x40, 0x4, 0x10000}, {{}, 0xfffffffffffffffe, 0x14, 0x10, 0x2000000008, 0x100000005}, {{}, 0xfffffffffffffffb, 0x38, 0x2, 0x1f70, 0x80000000000005}], 0xb19, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4)
setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0xc14}, {}, {0x6, 0x4, 0x2}]})
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$unix(r6, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
getpeername(r5, 0x0, &(0x7f00000000c0))
ioctl$FIONREAD(r4, 0x8020691f, &(0x7f00000001c0))
syz_open_pts()
r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
writev(r7, 0x0, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$VNDIOCGET(r8, 0x80106468, &(0x7f0000000b80)={'./bus\x00', 0x6c1, 0x7, 0xffffffffffffffee})
syz_open_pts()

6.158564206s ago: executing program 7 (id=4981):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket(0x11, 0x3, 0x0)
connect$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa)
sendto$unix(r2, &(0x7f0000000000)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
fsync(r0)
sysctl$net_inet_divert(&(0x7f0000000100)={0x4, 0x1e, 0x2, 0x1}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async)
sysctl$net_inet_divert(&(0x7f0000000100)={0x4, 0x1e, 0x2, 0x1}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0)

6.067352412s ago: executing program 7 (id=4983):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x31, 0x0, 0x0) (async)
r1 = accept$unix(r0, 0x0, &(0x7f0000000000))
getsockopt(r1, 0xe012, 0x31, 0x0, 0x0) (async)
clock_getres(0x0, &(0x7f00000000c0)) (async, rerun: 64)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) (rerun: 64)

6.066296568s ago: executing program 7 (id=4984):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
r0 = getpgrp()
ktrace(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1004, r0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, &(0x7f0000000680)={'./file0\x00', 0x7, 0x3, 0x4})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fb170d2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c0", 0xad, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000009f0500060003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821", 0x62, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007", 0xd, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x11, 0x3, 0x0)
sysctl$vfs_ffs(&(0x7f0000000180)={0xa, 0x1, 0xd}, 0x3, &(0x7f00000001c0)="0c7b272951ea8c429d4875405b475c1257e847827e55d139922cdcb9d5b97dc8b8100fbbaa92e04c2c4ea3169639aa26ed64a1318ca8cc8957d652485b7d27e105d31c02be5410d6c1ac2ff13e0ce502f11d99c9da5ecaaaf5dc8a0b0e1be1404fa05153aa1a57dcab7305fdeb1ee8489fd6c4b4d0ff89c5a801063176a4f46031368ce5adf2cfbcc157bdb4214e7b7ddc34cd0f65de2828d63cd33556d54b7e0e65cfe39893524c0056a89a8550e08857939d0aa9139313b3a3f8", &(0x7f00000002c0)=0xbb, &(0x7f0000000300)="dc71655008ec0cc7f022ea7c554917b1aa18c4fd58be4d831edb065a19e35f36eff91d1f902e1df821a2062ddd097c5c17d2eb975807641b2a08a5435dfb3dcbd1f0319dbabb29260d1e14af378b332a72eb6453756139d2706a822c0faa91e88afb49dbeb867ee27f02b65577332f482be07cacad952676795b06c9d63fcfb81979f6516d5b278a33897f349118988c1a", 0x91)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x8, 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x0}, 0x8)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffbffa, 0x20000000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5)
ioctl$FIONREAD(r2, 0x80206918, &(0x7f0000000100))
ioctl$WSKBDIO_BELL(r2, 0x20005701)
mquery(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffff9c, 0x6daa)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000005880), 0x10, 0x0)
setuid(0xee01)
ioctl$BIOCLOCK(r3, 0x20004276)
ioctl$BIOCGSTATS(r3, 0x4008426f, &(0x7f0000000280))
sysctl$vfs_ffs(&(0x7f00000003c0)={0xa, 0x1, 0xf}, 0x3, &(0x7f0000000400)="b98cffeec7a7bb54370fe058e49eb6704f932c0ce5b083dd6c1333b2b9b9", &(0x7f0000000440)=0x1e, &(0x7f0000000480)="b3634e70cf6ff3b45d778140294f06038bb4567bb2b6723cfe38a5134e5c1daf3ad6316f62372e4d9e4bba451f775adee95fcfb61a6409918cb079caa8adf6702f63a7967352b6c74b8bd3e2c6004e662c5abcbc068569a783d32256a861dc0aa47cc0b84889086b7396addaae5056354b506663103a4f837d445aa682889aeee4fc0b88b99ae8fbb7c6ab56d5ccc2854cddf01734067e4422e6aa2e6db4263c", 0xa0)
r4 = socket(0x18, 0x3, 0x0)
r5 = accept$unix(r4, &(0x7f0000000100)=@abs, &(0x7f0000000640)=0x8)
setsockopt(r5, 0x14000000, 0x0, &(0x7f0000000180), 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="00b43c000020391e7dd7a2d786ff7fffffa600002c1ccb697a653e33c2fd91d86279ad558227bc6e3001000000000000000000000001"])

6.063906345s ago: executing program 7 (id=4987):
kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x8c, 0xfffff, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x8000000000000002, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffff9, 0x88, 0x1, 0xffffffff, 0x3}, {{}, 0xfffffffffffffffa, 0x35, 0x80, 0x9, 0xf4}, {{}, 0xffffffffffffffff, 0x6, 0x20, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0xffffffff}, {{}, 0xffffffffffffffff, 0x28, 0x2, 0x1f70, 0x80000000000005}], 0xb19, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb})
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = syz_open_pts()
fcntl$lock(r1, 0x9, &(0x7f0000000840)={0x3, 0x0, 0x5, 0x1000100000000})
flock(r1, 0x3)
flock(r1, 0x3)
flock(r1, 0x3)
fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x100000001})
r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
close(r2)

5.606418001s ago: executing program 4 (id=4992):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff}, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)}], 0x1)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r3 = getpid()
ktrace(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x928, r3)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0)
r4 = socket(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$sock_int(r4, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1})
write(r0, &(0x7f0000000240)="c394", 0x2)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1001, 0x8018, 0x2000007, 0x101, 0xf9, 0x81b0, 0x10201, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x20a, 0x9, 0x6, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x4}, {0x5, 0x800, 0x8003, 0x87}, {0x8, 0x3, 0x2800, 0x7}, {0xc, 0x10000, 0x3, 0x4}, {0xce0, 0x8, 0x1, 0x6d}, {0x3, 0x803, 0x14, 0x800008}, {0x2, 0xa91e, 0x5, 0x3}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1cc, 0x10001, 0xb}, {0x8, 0x9, 0x610, 0x2}, {0xb91, 0x7, 0x2, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x7}, {0x9, 0x405, 0x5}, {0x0, 0x1, 0xf, 0x10000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x2)
ioctl$VNDIOCSET(r5, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r6 = socket(0x18, 0x1, 0x0)
socket(0x2, 0x1, 0x0)
listen(r6, 0x84)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x8004746b, &(0x7f0000000000)=0x800)
open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x11)
ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0xc0307004, &(0x7f00000000c0)={0xfffffffffffffffc, 0x2d920a91})
r7 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$PCIOCWRITE(r7, 0xc00c7007, &(0x7f00000005c0)={{}, 0x2, 0xfffffffe, 0x2})
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)

5.113985733s ago: executing program 7 (id=5005):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = socket$inet(0x2, 0x3, 0x102)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
close(r0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000000)={0x1000832, 0xffffffff, 0x0, 0x5, "97c9795a6b47c1d100", 0x5, 0xfffffffe})
lseek(r0, 0x80000000000, 0x1)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, 0x0)
ioctl$BIOCSETF(r3, 0x80104267, 0x0)
socket(0x11, 0x3, 0x0)
setrlimit(0x8, 0x0)
syz_open_pts()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0xa05}], 0x1)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$TIOCSETA(r4, 0xcd504404, &(0x7f0000000580)={0x20000b, 0x2, 0x1, 0x2f, "cd00fd00", 0x40048003, 0x6})
close(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

5.106375705s ago: executing program 7 (id=5006):
r0 = syz_open_pts()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = socket(0x18, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x2, r1)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0x40000010000, 0x0, 0x0, 0x200000001, 0x9, 0x1, 0x6})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
select(0x40, &(0x7f0000000000)={0x1b, 0x8000000004, 0x4, 0x0, 0x1f2f196, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x0, 0x18f, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0x2})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc", 0x1c}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09", 0x48}], 0x2)
syz_open_pts()

4.733262697s ago: executing program 4 (id=5016):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r0, 0x0, 0x2, 0x0, 0x0)
accept$inet(r0, 0x0, &(0x7f0000000000))
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

4.729117818s ago: executing program 4 (id=5018):
sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, &(0x7f0000003900)="8d8336a82946ba21b7b311a6aed5095045eb051977c6305529c8348a4b3579afe52db06f6a49b02acfdf814d362c963356963d71f2152d749d48cc69418d56f93b4ad9cf021c24fd907ab9ce8e58d36e68dd0808c8dd31b5aee6d6120776165d0d4559a98153fce6472888de99e2b8ec", &(0x7f0000000040)=0x70, &(0x7f0000000080)="6b17ce90b2e031ce73307a1327cd54ce5aed17341d", 0x15)

4.633025966s ago: executing program 4 (id=5020):
r0 = semget$private(0x0, 0x4, 0x402)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/173) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async)
ioctl$TIOCCLRVERAUTH(r1, 0x2000741d) (async)
semctl$GETPID(r0, 0x0, 0x4, &(0x7f0000000100)=""/84)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0x965, 0x7, 0xc800, 0x80000000, "fcf6b882289951af6a12ca38b43b0121ea631244", 0x3, 0x7fff})
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000001c0)={<r3=>0x0}, 0xc) (async)
fcntl$getown(r2, 0x5)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x1, "431c4b052cf9d847142c3cf56fa33f99ba2f0bb7", 0x3, 0x4000000}) (async)
ioctl$VT_ACTIVATE(r1, 0x20007605, &(0x7f0000000240)=0x3) (async)
sysctl$net_inet_tcp(&(0x7f0000000280)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f00000002c0)="9ad57be9d253d5f2885d7a41736c4292d8df9e017d57a04b8fb707531f0e30abfefda63ecca1bfa6335561e2ea3707659b9787a01780c6cea40e2cb494ab3e73bb1dc0ab1278cc5fd2475b23bec9d68bab8e2ea4206389f463c6df2f30728f370195344768cd22455febdc3e5c6c8f07f280964ede27a8ca9b3e93933c3d2a44cebd7f5c06ae42", &(0x7f0000000380)=0x87, &(0x7f00000003c0)="a0767b9c2cfec86a7314909baa5e222b4d76d1e3ad4e8b3244de2ba707f204d3ee9a4c40a20a6ad50e18f1825d251105ad55f78974051eefabf5b8579515857f3b142f5f0948499dd1421a8d274313ff77ad0461803b4d299ce1339741cd3aefe6f75cfd231a75c9dfab52b648e5628e18970256d73ffa9486ea85c2aaac11c29ffc75af6aff33c5d5706824abd9c86b4e3ef5396b948bedfcf252261a07889b0dd51fa158b62a4b6b5c4eed17", 0xad)
setrlimit(0x8, &(0x7f0000000480)={0x9})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$lock(r4, 0x7, &(0x7f0000000500)={0x2, 0x1, 0xcda, 0xed, r3}) (async)
sysctl$net_inet_carp(&(0x7f0000000540)={0x4, 0x2, 0x70, 0x3}, 0x4, &(0x7f0000000580)="a388d40b9b631448bb7aa86945b586b77210d7cbd673a0a94d8a942c5d81452f22be098f1a2c156b974f1a8a4151011f6d98fabd5f9f4eb3cb2e8bdd339e41460a2102a02ab7842487ffd7ecedc991d49b0951a881cf920b3d0263ae810e745b13d5867d1cae11a625435f8148a9713f13d8", &(0x7f0000000600)=0x72, &(0x7f0000000640)="0fccbb33743c1fe473611e6221bf92e42ab82af22d10518c30ae1a39843c6fba2201bfa0d248d14fc06a70277232af68c824ce9748163c4e97d1815d9f32ebe049133f508f231f6a7bd0075484bb30eb46e252c750737f547a6053676435", 0x5e)
ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f00000006c0))
ioctl$TIOCSDTR(r2, 0x20007479) (async)
ioctl$WSMOUSEIO_GCALIBCOORDS(0xffffffffffffff9c, 0x41205725, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})
ioctl$FIONBIO(r5, 0x8004667e, &(0x7f0000000840)=0x9) (async)
mknod(&(0x7f0000000880)='./file0\x00', 0x100, 0x2)
ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f00000008c0)={'./file0\x00', 0x0, 0xe, 0x1, 0x1325744391830d27, 0x2, 0x6, 0x1, 0x2, 0x1, 0x10000, 0x8000}) (async)
ioctl$WSKBDIO_GETBACKLIGHT(r1, 0x400c5711, &(0x7f0000000940)) (async)
ioctl$TIOCMGET(r2, 0x4004746a, &(0x7f0000000980)) (async)
fcntl$getown(r5, 0x5)
ioctl$WSDISPLAYIO_GVIDEO(r1, 0x40045744, &(0x7f00000009c0)) (async)
readv(r2, &(0x7f0000001d40)=[{&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/54, 0x36}, {&(0x7f0000000ac0)=""/29, 0x1d}, {&(0x7f0000000b00)=""/47, 0x2f}, {&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/86, 0x56}, {&(0x7f0000000cc0)=""/90, 0x5a}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x8) (async)
ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000001dc0)={'./file1\x00', 0xffffff7f, 0x10001, 0xf2}) (async)
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000002200)={0x2, 0xaa8, 0x1, 0x7fff, "4a4f4e55ae7889e22672c84808adcd7751122af5", 0x500000, 0x8001})

3.712280462s ago: executing program 0 (id=5048):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x8d, 0x2, 0x80000004}, {0x30, 0xfa, 0x3}, {0x16, 0x6, 0x8}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x34, 0xf, 0xfe, 0x6}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[])
sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
pipe(&(0x7f00000017c0)={<r1=>0xffffffffffffffff})
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000001940))
r2 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa004500021c0000000000019078ffffffff47eb2229090690794d9864a2000000000000000000d88de1ce39d2b290e5aa8a3e96aceaa9ef130f8522c5dd767904ea7f2b9ec0cba60bd841c6839ffb15765df20345"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"])
r3 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe)

3.705520115s ago: executing program 0 (id=5050):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x1}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
chmod(&(0x7f0000000000)='./file0\x00', 0x20)
r1 = semget(0x0, 0x1, 0x281)
setuid(0xffffffffffffffff)
semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000200))
mmap(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x3, 0x2010, r0, 0x0)

3.535408485s ago: executing program 0 (id=5052):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ktrace(0x0, 0x5, 0x128, 0x0)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
close(r0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000806000108000604000900000000000000007bfdaaaaaac8613809aaaaaa"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0xf)
close(r1)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x3, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$hw(0x0, 0x0, &(0x7f0000000480)="a2352f75fcb72f258152ea33ef03ebcc5800000d0060754473d45204b35bd22e", &(0x7f0000000000)=0x20, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r3, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x410, 0x0)

3.535032968s ago: executing program 0 (id=5053):
r0 = open(0x0, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x1a, 0x1, 0xfd4, 0x3, 0x7fffffff, 0x17ffe, 0x10, [{0x0, 0x4, 0x3, 0x6}, {0xc5f, 0xb, 0x5, 0x1ff}, {0x800008, 0x9, 0x1fa, 0x7d2}, {0x7ffffffe, 0x3, 0x3, 0x784c}, {0x100, 0xd, 0x1002802, 0x4d8a}, {0x8, 0xff, 0x3, 0xb}, {0x8000009, 0x0, 0x81ea, 0x2f}, {0x2, 0x836, 0x17, 0x3}, {0x9, 0xf71, 0x5, 0x7}, {0x10001, 0xa74d925a, 0xffff, 0x40000088}, {0x1d6, 0x4015, 0x4, 0x412c8391}, {0x3, 0xa, 0x20008, 0x40000010}, {0xb8d, 0x4, 0x8, 0x3}, {0x29a71721, 0x81, 0x200, 0x6}, {0x400002, 0x7, 0xfffffffd, 0x100}, {0x200, 0x8, 0xf5, 0x7ff}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/18, 0x12}], 0x3, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
munmap(&(0x7f000001e000/0x2000)=nil, 0x2000)
ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000080)=0x6)
sysctl$vfs_ffs(&(0x7f0000001600)={0xa, 0x3, 0x11}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$vfs_ffs(&(0x7f0000000000)={0xa, 0x1, 0xe}, 0x3, &(0x7f0000000040)="ca7b9d23cae85331a5e1566e9935aecf59ebca8837db830b50167d2a0dedcbafa1bb100ec5189a9a4a4663361c5da54743b6a6c31b50986d530ed6ac1d085b453d64e9c99df3e4f8c86af757129366eadbe08b0c4cc8a41d2df69b59bca7782ba7e7b218f77cb42cd12d431e54c96b4ed4f6be04538ec9cfab768e10614f1c2ae90b46a504bb5f32c2e7e658b1391ea49b5fa054d8d88edd2f4241f6f8da72b286b23b2e5bdedb08f020109f5a1bf28b9b354ab87c926bca9176724a1d5f14f0a64e480b9f6a5d161860f90952e6ee139767af62372ea65dcbf2b095c5a3f42965ccf66ae9f6dae051338bd6e413d5c2c73d8e32cd9339f7b1d750337f", &(0x7f0000000140)=0xfd, &(0x7f0000000240)="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", 0x108)

3.419656861s ago: executing program 0 (id=5059):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaabbb08004500d1d022dc2e00140000000000ff9078ffffff5a30aef1f480adcf5702697915357b5d5bdf7bba553a63c2b40483ee2e7e08f8ac6ec5e66bbc37ae4c391281da1104c769197925c7740b7fc10b9ad75797eb728f"])
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000140)="b100050200000000000000ac00010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x8, 0x0, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffff9c, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x44, 0x1}, {0x101, 0x7}, {0x26, 0x6}, {0x82, 0x43}, {0x22, 0x80000000}, {0x21, 0x4}, {0x20, 0x9}, {0x7, 0x8}], 0x8})
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000200)={&(0x7f0000000040)=[{0x20, 0x3}, {0x1, 0x9710}, {0x7, 0x9}], 0x3})
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x0, 0xffffffffffffffff, 0x81)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x41)
preadv(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x3ff)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x1, 0x8f}]})

3.419426325s ago: executing program 0 (id=5060):
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x401, 0x7f, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000008, 0x2})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa)

3.264566976s ago: executing program 1 (id=5064):
setrlimit(0x3, &(0x7f0000000000)={0xb6, 0x54})
getitimer(0x0, &(0x7f0000000240))
r0 = syz_open_pts()
fcntl$lock(r0, 0x8, &(0x7f0000000840)={0x3, 0x2, 0x5, 0x1000100000003})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x4, 0x7, 0x26}, {0x9e, 0x0, 0x3, 0x85}]})
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
sysctl$hw(0x0, 0x0, &(0x7f0000000240)="82352f8edf518a962e00000000000000a4ef03ebccfb6ed94f050000000000000062549b9899c436b70a53134a", &(0x7f0000000000)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
getpeername$unix(r2, 0x0, &(0x7f0000000280))
syz_emit_ethernet(0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000000000805db2a15e81f9eb2cccafdd62289f793696c03dcdd2ea85edada7ec34299f67d3791741bd5c7c91dca1665b16a8798db1284c4533"])
flock(r0, 0x3)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x100004, [{0x0, 0x8}, {0x3, 0xffffffff}, {0x3, 0x300}, {0x0, 0x206}, {0x0, 0xfffd}, {0x3, 0x45cea265}, {}, {0x3, 0x7}, {}, {0x0, 0x7}, {0x1}, {0x2}, {}, {}, {}, {0x2}, {0x2, 0x3}, {0x2, 0x80000b4}, {0x1, 0x4}, {0x2, 0xffffeffe}, {0x3}, {0x0, 0x6}, {0x3}, {0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x10000}, {0x3, 0x80000000}, {0x2, 0x6}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
flock(r0, 0x3)
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000200)={0x3, 0x7, 0x800, 0x0, "cfba2f93ac726de67d72505bcfdc16a4111dc169", 0x2, 0xff})
fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x100000001})

2.197302401s ago: executing program 1 (id=5075):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x6)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)

2.191721148s ago: executing program 1 (id=5077):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket(0x11, 0x3, 0x0)
connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x18}, 0x2, &(0x7f0000000100)="27f7ba37", &(0x7f0000000140)=0x4, &(0x7f0000000180), 0x0)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0)
sysctl$net_inet_divert(&(0x7f00000000c0)={0x4, 0x2, 0x102, 0x3}, 0x4, &(0x7f0000000100)="6b0738ca50098490ea96c553a3a884c5c7accfd4bed8427ffcf0918a38349a50d352dcaa39df2a11e02f5d61f70b0955e4e4e93875f4a87d72a09e1f050f651a70e12448a5e17437418dbe4052b2e296adb0f3867e2bda539b91019c5992cd234b89bab10bf6bd36b262e3129ae73fda60e431b018c285b5c07be0192491bc74cbf8538256ae51efc4d0319f5eb9272c367f775405d0aedeebce73d69189ffe649bf0b", &(0x7f00000001c0)=0xa3, &(0x7f0000000280)="2eec57a9413844451cd507c639558ed18cbb39722793c793d12ce82fb0354c3679775ead15d965a8f216739f5d612a670502ae0b9aff0531c9f803494f9c65edc2d333a58f5ba044115c26828c6b52789978e6a4", 0x54)

2.191474019s ago: executing program 1 (id=5078):
readv(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0xdb1) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x8013, 0x3) (async)
select(0x0, 0x0, 0x0, &(0x7f0000000380)={0xd, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0) (async)
mlock(&(0x7f0000213000/0x2000)=nil, 0x2000) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, 0xffffffffffffffff, 0x0) (async)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000000)=0x6) (async)
r2 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil)
shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x1000) (async)
shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x2000)

1.53062816s ago: executing program 3 (id=5091):
lstat(0x0, 0x0)
chroot(&(0x7f0000000040)='\x00') (async)
chroot(&(0x7f0000000040)='\x00')

1.528582714s ago: executing program 3 (id=5093):
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003})
fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x100000006})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc})
sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f0000000080)="bd0f192e", &(0x7f00000000c0)=0x74, 0x0, 0x0)

1.315815425s ago: executing program 1 (id=5094):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
r2 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r2, 0x0, 0x23, &(0x7f00000001c0), 0x0)
ioctl$WSKBDIO_GETMAP(r1, 0x8004745d, &(0x7f0000000080)={0x0, 0x0})
pipe(&(0x7f00000000c0))
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x2, 0x4, 0x38, 0x65, 0x0, 0x0, 0x2, 0x0, @broadcast, @empty, {[@ra={0x94, 0x6, 0xe7a6}]}}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x9, 0x0, 0x0, {0x5, 0x4, 0x0, 0x27, 0x8, 0x64, 0x2, 0x1, 0x67, 0x5, @multicast1, @multicast2}}}}}})

1.205514797s ago: executing program 6 (id=5098):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1, 0x5}, {0x3, 0x3}, {0x1}, {}, {0x2}, {0x3}, {0x0, 0xaa59}, {0x3, 0xb3d0}, {0x3, 0xff}, {0x3, 0x100}, {0x1, 0x1}, {0x0, 0x80000000}, {0x3, 0xe31}, {0x1, 0xfffffffc}, {0x0, 0x6}, {0x3, 0xc}, {0x1, 0x4}, {0x2}, {0x2, 0x9}, {0x0, 0x7ff}, {0x2, 0x6}, {0x0, 0x1}, {0x2}, {0x0, 0xd208}, {0x1, 0xfffffffd}, {0x1, 0x7}, {0x0, 0x1ff}, {0x0, 0x200}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x4}, {0x3, 0x4}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_open_pts()
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x3, 0x2)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x10686, 0xa1)
r3 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0)
ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r2, 0x1})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1})
r4 = open(&(0x7f0000000140)='./file0\x00', 0x8, 0x1a)
pwrite(r4, &(0x7f0000000080)="01", 0x1, 0xffffffff)
setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1)
connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00002cf000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f00003d5000/0x11000)=nil, &(0x7f000049e000/0x3000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, 0x2}, {&(0x7f000054a000/0x1000)=nil, &(0x7f000016f000/0x4000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffdffbfffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000773000/0x1000)=nil, &(0x7f0000243000/0x3000)=nil, 0x9}, {&(0x7f000025b000/0x3000)=nil, &(0x7f0000463000/0x1000)=nil, 0x3ffffffffffff}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000016a000/0x1000)=nil, 0x9}], './file0\x00'})
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x8e)
ioctl$VNDIOCSET(r5, 0x81946467, &(0x7f0000000040)={0x0, 0x0, 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setreuid(0xee00, 0x0)
getuid()
syz_emit_ethernet(0x1000e, &(0x7f0000000240)=ANY=[@ANYBLOB="b905f0ffffff0000e647c700000013b486e247e1a21a350adff98f960008004500ff080000000100009078"])
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300), 0xc)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101)

1.189664489s ago: executing program 6 (id=5099):
r0 = socket$unix(0x1, 0x1, 0x0)
recvfrom$unix(r0, &(0x7f0000000000)=""/143, 0x8f, 0x41, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa)
poll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0xfffffffe)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x101})
ioctl$WSKBDIO_SETKEYREPEAT(r1, 0x800c5707, &(0x7f00000001c0)={0x6, 0x40, 0xff})
r2 = socket$inet6(0x18, 0x1, 0x9)
pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="b9d9a2511d637a6a39ee29a5dca4bca7e64c538ef9de99ac70", 0x19}, {&(0x7f0000000240)="3889c267672aa3", 0x7}, {&(0x7f0000000280)="7494868a80fb6cee2d1b0df192fc4abe86947c03a43680bd9dd264d9c5a97016b12b5138ac48c1da4d66d56ba588676f2a0810b0631e8b25fddf10a1ba7c4da17de7544ae5f65753ff2562cff855c7e5cecaf9bbe37e5ebb85386fcdaa9ce5b2fa9a432b3af2c53bf80f79dde6b7b7379de8eb00e29dc1fbcea5b9185dd2", 0x7e}, {&(0x7f0000000300)="3d5e6cfffa4c9cdc0c49a649af01b28a581794a57e1935f295aae5c5b38b32", 0x1f}, {&(0x7f0000000340)="275b09a5192e93149b19e607bb9822671edc83986769cfb1200af70b69d55e62d8b8bf22a171fea533d4e9353931fdd8de98807be4375ef79ad53d9c03cc1a4ae2466708c278d8af96a9a2e5e05eeec7803cf27a885b", 0x56}, {&(0x7f00000003c0)="a2403683c3ab380c2dce5a2f79e5b79a91c34ea05221ad7e03943ae26de545a8d6386d81ba7b6532934adc47d4f0e4cb3dc1c02374f2c1bb55c27adbaa7e8b82adc17f3aaa234121c793a7b20c1cec95273f9b5b74d538b81f73f1dbb78ec5cda1878e9e5c1db1c4b1b0e36aeff4972bf9c3dff801194c0e48f590ce9d7bb97cef35f4e23f6bcfdbbd80a262e6fffb587d11ae745cfc326a1fa6b9abaf5d0bd2979513cef8dbd42b917751fccd29f45ee84e2b", 0xb3}, {&(0x7f0000000480)="be045acf2850ba6b4a46f789f1da7ffa572cb76c8942148baea0ca5453c4b83350ed175aa2ba9e", 0x27}], 0x7, 0x835)
ioctl$WSKBDIO_GETDEFAULTBELL(r1, 0x40105706, &(0x7f0000000540))
ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f0000000580)=0x3)
r3 = dup(r0)
ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f00000005c0)={0x10, 0x1, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x200}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xb3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x5}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x2}, {&(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x2}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x4}, {&(0x7f0000feb000/0x12000)=nil, &(0x7f0000fec000/0x1000)=nil, 0xd10}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x4}, {&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000feb000/0x1000)=nil, 0x4}, {&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, 0x3266392c}, {&(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x200}, {&(0x7f0000fee000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xc67e}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, 0x7}], './file0\x00', 0x3})
ioctl$WSKBDIO_GETMAP(r1, 0xc010570d, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x5, 0x2, 0x5, 0x7fff, 0x80}]})
sendmsg(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="bb87cd4c473329c74a7c0dae412e2410247329023c8328562e1ddddcbac19386456d1f472b64c41f27eb9c822f974fd10ed953476410329d79634eee6fce033c6c568f376d0090990ab39fd8784271201f0c1f958d4e83e50fa7bbd0e6795cc0f5952083924f422d71e3c6a0fcb2bc2e8dc7f5712627019469668b5252b04795df", 0x81}, {&(0x7f0000000900)="fdd6ff4ab649688c5a21cacc69f062d9c6023e36fa9aee88eea99c19b03866f29000fa9346b8ba6cdb4e57e326211e21b4676f3582bff5a10ea6dcd1bacffa8a5adf0dd31f7749def9664a9bde12ba9b2c11367628dd8dab169370a361d9ccdc9ec941fa9c3f301b65405cfb52f15d1e5d822f0acfa7cdd70f857bdd530e9e3c31c993276b67992117ef52263d0dbe45c0158e8c416c3ce37448764e15e102d88344ed0f64bae24458bbc79259d3cd46a2ab1b7f955b", 0xb6}, {&(0x7f00000009c0)="16e6e57c648c6345e8b5d01004982410f8eeb6cc1c9af745ea69c63fb0325524d9d03ba73c6744d01cfc64d170d92107690b279f063dc09c796a00fa99e3e40a162603be868c", 0x46}], 0x3, &(0x7f0000000a80)=[{0x88, 0x1, 0x8, "c7eca8bad0cb30ae20a0b17bd50d967599293e5a3c6aea55902f50a5bd66231c8477b48f0b117c5116c64002600b1d46f899fcecd14d1019b64de336ee5adeb909d5e22d746cf3d1a58bc8677bb52da4413bd8e0bac017fd896f20fd98cc77c8b8d45f888d6b61353c3466b898744d0e0007c53068"}], 0x88}, 0x40c)
connect(r3, &(0x7f0000000b80)=@un=@file={0x0, './file0\x00'}, 0xa)
r4 = socket$unix(0x1, 0x0, 0x0)
getsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4)
r5 = accept$unix(r4, &(0x7f0000000c40)=@abs, &(0x7f0000000c80)=0x8)
ftruncate(r5, 0x3)
socket(0x1, 0x5, 0x1)
ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f0000000cc0)={0x4, 0x80, 0x5, {[0x4, 0x4, 0xd67, 0x0, 0x7ff, 0xeec9, 0xb02, 0xd, 0x8, 0x7ff, 0x9, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb, 0xd17, 0x5, 0x6, 0x3], [0x9, 0x10, 0x5, 0xfffffffffffffff8, 0x1, 0x5, 0x1a9, 0xff], [0x5e, 0x3, 0x81, 0x400, 0x6, 0x9, 0x10001], [0x4, 0x5, 0x9, 0x95e, 0x3, 0x1], [{0xa45, 0xe4a2, 0x0, 0xd1d}, {0x0, 0x2800000, 0x5, 0x9}, {0x80, 0x7, 0x7}, {0x7, 0x3, 0x96aa, 0x4a29}, {0x7, 0xff, 0x10001, 0x7}, {0x3, 0xbe0b, 0x25f, 0x8}, {0x7ff, 0x80000, 0xfff, 0x8}, {0x8, 0x7, 0xfffffffe, 0x1}], {0x3ff, 0x10, 0x1, 0xc5}, {0x6, 0x1, 0x81ab}}})
ioctl$WSKBDIO_GETENCODING(r3, 0x4004570f, &(0x7f0000000f40))
ioctl$BIOCSHDRCMPLT(r3, 0x80044275, &(0x7f0000000f80)=0x4)
r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000fc0), 0x100, 0x0)
r7 = socket$inet6(0x18, 0x3, 0x0)
kevent(r3, &(0x7f0000001000)=[{{}, 0xfffffffffffffff9, 0x85, 0x10, 0x221, 0xdb87}, {{r6}, 0xfffffffffffffff8, 0x32, 0x40, 0x9, 0x8000}], 0x1, &(0x7f0000001040)=[{{r7}, 0xffffffffffffffff, 0x4, 0x0, 0x7, 0x9}, {{r1}, 0xfffffffffffffffb, 0xe0, 0x40000000, 0x7, 0x2c}], 0xffffffcf, &(0x7f0000001080)={0x0, 0x7})
execve(&(0x7f00000010c0)='.\x00', &(0x7f0000001380)=[&(0x7f0000001100)='\x00', &(0x7f0000001140)='/dev/wskbd0\x00', &(0x7f0000001180)='/dev/speaker\x00', &(0x7f00000011c0)=')\x00', &(0x7f0000001200)='/dev/wskbd0\x00', &(0x7f0000001240)='/dev/speaker\x00', &(0x7f0000001280)='\x00', &(0x7f00000012c0)='\x00', &(0x7f0000001300)='/dev/wskbd0\x00', &(0x7f0000001340)='\x00'], &(0x7f0000001540)=[&(0x7f0000001400)='\'\x00', &(0x7f0000001440)='/dev/speaker\x00', &(0x7f0000001480)='/dev/wskbd0\x00', &(0x7f00000014c0)='/dev/wskbd0\x00', &(0x7f0000001500)='/dev/speaker\x00'])
accept$inet(r3, &(0x7f0000001580), &(0x7f00000015c0)=0xc)
openat$speaker(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000016c0)={&(0x7f0000001640)='./file0\x00', 0x2, &(0x7f0000001680)='./file0\x00', 0x8})

1.188732496s ago: executing program 6 (id=5100):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x8)
sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x3}, 0x40000000000000c1, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0)
r0 = syz_open_pts()
close(r0)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0)
ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000480)={'./file0\x00', 0x8, 0x2, 0x100000000})
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x8000002, 0xb})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x110)
write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
truncate(&(0x7f0000000080)='./file0\x00', 0x7ffffffffff)
ktrace(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x40000530, 0x0)
fchown(r4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
getdents(r3, 0x0, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8)
syz_emit_ethernet(0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000088a8"])
syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
kqueue()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000003c0)={0x8, 0x9, 0xe9, 0x1, "14f7484803ecd9ba7e7f97555edbdc06c29b7791", 0xfff, 0x8})
select(0x63, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x0, 0x19, 0x1, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x4000000000, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x2}, 0x0, 0x0)

668.010943ms ago: executing program 2 (id=5105):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async, rerun: 32)
r1 = socket(0x18, 0xc003, 0x3a) (rerun: 32)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async, rerun: 64)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x3, 0x2}, 0xc) (async, rerun: 64)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75)
close(r1)

661.051323ms ago: executing program 1 (id=5107):
r0 = kqueue()
close(r0)
r1 = msgget$private(0x0, 0x80)
msgctl$IPC_RMID(r1, 0x0)
r2 = semget(0x3, 0x4, 0x120)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000040)=0xc)
getgroups(0x6, &(0x7f0000000080)=[<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0x0, <r9=>0x0, 0xffffffffffffffff, <r10=>0x0])
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000000c0)={{0x1775, r4, 0xffffffffffffffff, 0x0, r7, 0xaa, 0x7fff}, 0xcb, 0x7})
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2)
r11 = getuid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x7fffffff, r11, r10, r4, r6, 0x90, 0xa}, 0x5a, 0x2, r3, r3, 0x6, 0x80, 0x40, 0x7fff})
poll(&(0x7f00000001c0)=[{r0, 0x100}], 0x1, 0x9)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0xfffffffe, r11, r6, r11, r9, 0x104, 0x7}, 0x0, 0x6, r3, r3, 0x4, 0xefa3, 0x5})
ktrace(&(0x7f0000000280)='./file0\x00', 0x4, 0x100, r3)
r12 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r12, 0x81205724, &(0x7f0000000300)={0x1600ac50, 0xffffe329, 0x1, 0x800, 0xe, 0x3, 0xfffffff9, 0x10, [{0x3, 0x1, 0x0, 0x2}, {0x6, 0x5, 0xb474, 0x6}, {0x68c9, 0x9, 0x6fd4, 0x1}, {0x5, 0x0, 0x4da1d36e, 0x4}, {0x2, 0xdf68, 0x3, 0x7}, {0x0, 0x1, 0x0, 0x3}, {0x8, 0x7, 0xce, 0x2}, {0x3, 0xdd12, 0x3, 0x9}, {0x9, 0x6, 0x5}, {0xfffffffb, 0x3, 0x7, 0x6}, {0x3, 0x4, 0x3, 0x7}, {0x5, 0x7, 0x400, 0x1}, {0xd3f, 0x33b, 0x63, 0x8}, {0x56d2, 0xc4, 0x0, 0x83}, {0x2, 0x40000, 0x7, 0x5}, {0x5, 0x8, 0x0, 0x4}]})
r13 = getppid()
setpgid(r3, r13)
r14 = getuid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000440)={{0x400, r14, r5, r14, r8, 0x4f, 0x5}, 0x7, 0x9, r3, r3, 0x3, 0xb, 0x100, 0x6})
mknod(&(0x7f00000004c0)='./file0\x00', 0x1000, 0x7ff)
semctl$SETVAL(r2, 0x4, 0x8, &(0x7f0000000500)=0x8)
ioctl$VT_GETMODE(r12, 0x40087603, &(0x7f0000000540))
ktrace(&(0x7f0000000580)='./file0\x00', 0x2, 0x21, r3)
shmget(0x1, 0x2000, 0x45a, &(0x7f0000ffd000/0x2000)=nil)
ioctl$VNDIOCCLR(r12, 0x80384601, &(0x7f0000000640)={&(0x7f00000005c0)='./file0\x00', 0x9, &(0x7f0000000600)='./file0\x00', 0x8})
ioctl$VMM_IOC_CREATE(r12, 0xc2585601, &(0x7f0000000680)={0x10, 0x7fffffffffffffff, [{&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000400000/0xc00000)=nil, &(0x7f0000e7d000/0x2000)=nil, 0x400}, {&(0x7f0000841000/0x4000)=nil, &(0x7f0000b36000/0x4000)=nil, 0x200}, {&(0x7f0000656000/0x3000)=nil, &(0x7f0000e9e000/0x4000)=nil, 0x2}, {&(0x7f0000976000/0x1000)=nil, &(0x7f0000dd8000/0x4000)=nil, 0x1}, {&(0x7f0000f50000/0x3000)=nil, &(0x7f0000744000/0x4000)=nil, 0x7}, {&(0x7f0000fa6000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f0000b47000/0x1000)=nil, &(0x7f000071f000/0x3000)=nil, 0x80}, {&(0x7f0000cbe000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000070e000/0x3000)=nil, &(0x7f0000fe1000/0x4000)=nil, 0x89}, {&(0x7f0000b3c000/0x1000)=nil, &(0x7f0000f07000/0x1000)=nil, 0x8}, {&(0x7f000089b000/0x3000)=nil, &(0x7f0000422000/0x3000)=nil, 0x8}, {&(0x7f00004bc000/0x2000)=nil, &(0x7f0000b22000/0x3000)=nil, 0xffffffffffffff7f}, {&(0x7f0000b1e000/0x1000)=nil, &(0x7f0000c19000/0x2000)=nil, 0x9}, {&(0x7f0000aab000/0xe000)=nil, &(0x7f0000817000/0x3000)=nil}, {&(0x7f0000bfc000/0x3000)=nil, &(0x7f0000c00000/0x3000)=nil, 0x1}], './file0\x00', 0x77})
msgget(0x1, 0x43)
poll(&(0x7f0000000880), 0x0, 0xffffffff)
open(&(0x7f00000008c0)='./file0\x00', 0x20, 0x124)

658.900428ms ago: executing program 2 (id=5108):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000040)) (async)
fcntl$getflags(r0, 0x1) (async)
r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f00000000c0)={0xd, 0x8, 0x3, 0x800}) (async)
r2 = syz_open_pts()
r3 = dup2(r1, r2)
ioctl$WSKBDIO_GETBELL(r3, 0x40105704, &(0x7f0000000100)) (async)
r4 = open(&(0x7f0000000140)='./file0\x00', 0xa, 0x8a) (async)
getsockname$inet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
getsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async)
recvfrom(r3, &(0x7f0000000280)=""/250, 0xfa, 0x1800, &(0x7f0000000380)=@in={0x2, 0x2}, 0xc)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) (async)
getsockname$inet(r4, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async)
ioctl$WSKBDIO_GETDEFAULTBELL(r4, 0x40105706, &(0x7f0000000480)) (async)
sysctl$hw(&(0x7f00000004c0)={0x6, 0x9}, 0x2, &(0x7f0000000500)="daf49ed73ab930a7e5f56ab15ce1727d536383e1912d53276409502db3d097f62510cfe715ab8c73f814d90bbf87a0114326bf7d9bc44d9f8c9a31303e05bea951e8c0e1eb987601f992937bf1ed550811934dc5081b3eb79407ba65f7aa1a78031a421740629a495e97fa9311b5639caab45d70f67d061c1c352afee49a641543fa9e083ccf132ab786a6e9015d09bce5d1553124", &(0x7f00000005c0)=0x95, &(0x7f0000000600)="e8d1347f9535069883c6bb8b6f26", 0xe)
bind$inet(r5, &(0x7f0000000640)={0x2, 0x3}, 0xc)
ioctl$WSKBDIO_SETBACKLIGHT(r5, 0x800c5712, &(0x7f0000000680)={0x6, 0x1, 0xffff}) (async)
r6 = socket$inet(0x2, 0x2, 0x7) (async)
ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f00000006c0)={0x8, 0x2, 0x5, 0xfffffffd}) (async)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) (async)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000001800)={<r8=>0x0}, &(0x7f0000001840)=0xc)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000001880)={0x0, <r9=>0x0}, &(0x7f00000018c0)=0xc)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000001900)={0x0, 0x0, <r10=>0x0}, 0xc)
r11 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001940), 0x200, 0x0)
getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000001980)={0x0, <r12=>0x0}, 0xc) (async)
r13 = getegid()
sendmsg$unix(r5, &(0x7f0000001ac0)={&(0x7f0000000740)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="9a95a1aa708bf3ea357256ff2353da", 0xf}], 0x2, &(0x7f00000019c0)=[@rights={0x20, 0xffff, 0x1, [r6, r6, r0, r0]}, @cred={0x20, 0xffff, 0x0, r8, r9, r10}, @rights={0x30, 0xffff, 0x1, [r11, r5, 0xffffffffffffffff, 0xffffffffffffff9c, r1, r5, r5]}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r12, r13}, @rights={0x38, 0xffff, 0x1, [r6, r1, r5, r3, r6, r2, r7, r0, r5, r4]}, @rights={0x20, 0xffff, 0x1, [r3, r7, r0, r7]}], 0xe8, 0x501fb87fec3d002a}, 0xc)
ioctl$WSKBDIO_GETKEYREPEAT(r3, 0x400c5708, &(0x7f0000001b00)) (async)
ioctl$LIOCSFD(r5, 0x80046c7f, &(0x7f0000001b40)=r6)

658.585408ms ago: executing program 3 (id=5109):
setrlimit(0x7, &(0x7f0000000000)={0x9, 0x1})
r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
chmod(&(0x7f00000000c0)='./file1\x00', 0x8)
chroot(&(0x7f0000000740)='.\x00')
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x18, 0x3, 0x50)
ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

657.505981ms ago: executing program 5 (id=5110):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0)
r1 = socket(0x2, 0x3, 0x0)
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
r2 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}})
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0))
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x80206919, &(0x7f00000001c0))
r5 = socket(0x2, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000140))
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xfffffffffffffffe}, {0x10000000000000}}, 0x2)
ioctl$FIONREAD(r5, 0x8040691a, &(0x7f00000001c0))
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0x117}], 0x50, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x2d, 0x2, 0x4}, {0x40, 0x1, 0xff, 0x7}, {0x6, 0x15, 0x4, 0xfffffefe}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
sysctl$hw(0x0, 0x0, &(0x7f0000000100)="050000003b12a840000018e1eee30d2baefcca3e0600096948cd0100badb55abe01959c7", &(0x7f0000000000)=0x24, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
semget(0x2, 0x2, 0x4a)
syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[])

587.604746ms ago: executing program 2 (id=5111):
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet(0x2, 0x3, 0x2)
getsockopt$sock_int(r0, 0xffff, 0x1000, 0x0, 0x0)
r1 = syz_open_pts()
sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0)
close(r1)
r2 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
pwrite(0xffffffffffffffff, &(0x7f0000000040)="79a0dd2bfaafb2c1f36783084e414149", 0x10, 0xe)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r3, 0xc0284459, &(0x7f0000000040)={0x2, 0xffffffff, 0x3, 0x10000000, "00000000000000000f0000ee0900", 0x6, 0xfffffff7})
r4 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x80146940, &(0x7f00000001c0))
writev(r1, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0x94}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28", 0xf}], 0x3)

576.109543ms ago: executing program 2 (id=5112):
r0 = socket(0x18, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000680)=0x2, 0x4)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r1 = syz_open_pts()
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0x81, 0x5}, 0x10)
r2 = kqueue()
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)=0x9)
close(r2)
close(r1)
syz_open_pts()
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r1, &(0x7f0000000780)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/4097, 0x1001}], 0x2)

266.621577ms ago: executing program 5 (id=5113):
r0 = syz_open_pts()
ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000000)) (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x80b, 0x0, 0x5, 0x8, "ff14e7130b1e586ca6294000", 0x2, 0x3effc})
syz_open_pts() (async, rerun: 64)
ioctl$TIOCSTART(r0, 0x2000746e) (rerun: 64)

265.532236ms ago: executing program 6 (id=5114):
r0 = open(&(0x7f0000000240)='./file0/file0/..\x00', 0x80, 0x5)
acct(&(0x7f0000000080)='./file0\x00')
acct(&(0x7f0000000080)='./file0\x00') (async)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000040)='./file0\x00', 0x8})
r1 = shmget(0x0, 0x4000, 0xb0, &(0x7f0000ff9000/0x4000)=nil) (async)
r2 = geteuid() (async)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000040)=0xc)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x2)
r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b)
ioctl$TIOCSPGRP(r6, 0x40047477, &(0x7f0000000080)) (async)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) (async, rerun: 64)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 32)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (rerun: 32)
r7 = kqueue()
kevent(r7, &(0x7f00000001c0)=[{{r5}, 0xffffffffffffffff, 0x61, 0x80000000, 0x8, 0x7}], 0xf, &(0x7f0000000100)=[{{r5}, 0xffffffffffffffff, 0x82, 0xfffff, 0x8000, 0x5}, {{r5}, 0xfffffffffffffffb, 0x21, 0x1, 0x6, 0x8}, {{}, 0xfffffffffffffff9, 0x81, 0xf0000000, 0x6, 0x7}], 0xd, 0x0) (async)
r8 = getegid() (async)
r9 = fcntl$getown(0xffffffffffffff9c, 0x5)
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x447, r2, r4, 0x0, r8, 0x30, 0x200}, 0x7, 0x2, 0xffffffffffffffff, r9, 0x6, 0x2000000000000, 0x401}) (async)
r10 = dup(0xffffffffffffffff)
getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f0000000200)={0x0, <r11=>0x0}, 0xc)
setreuid(r11, r2) (async)
r12 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
fchownat(r12, &(0x7f0000000140)='./file0\x00', r3, r8, 0x3) (async)
msgget$private(0x0, 0xe4)
geteuid() (async)
getuid() (async, rerun: 32)
fcntl$getown(r10, 0x5) (rerun: 32)

263.678893ms ago: executing program 5 (id=5115):
r0 = socket(0x18, 0xc003, 0x3a) (async)
symlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 64)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async, rerun: 64)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8)
fcntl$setstatus(r1, 0x4, 0x80) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x2}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) (rerun: 32)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r3, 0x0)
utimes(0x0, &(0x7f0000000240)={{0x4, 0x593}, {0x10, 0x3}}) (async)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x1, 0x6c0e}, 0xc)
socket$inet(0x2, 0x4000, 0x7) (async)
r4 = syz_open_pts()
ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000300)={0x401, 0x90d, 0x80c003, 0x7d6, "0000000000000000ff0300000180000000000040", 0xa, 0xffffffff}) (rerun: 64)
writev(r4, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0x141}], 0x1) (async, rerun: 32)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x3f]}, 0x75) (rerun: 32)

260.817632ms ago: executing program 2 (id=5116):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9)
kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffb, 0x4a, 0x1, 0x9, 0x3}], 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCFLUSH(r0, 0xc0187009, &(0x7f0000000080))

224.281039ms ago: executing program 5 (id=5117):
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='y', 0x1)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x8, 0x1d4)
flock(r1, 0x6)
close(r1)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
socket(0x12, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f00000000c0)={0x2})
r4 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x4ebfac6bbaf782c)
ioctl$VNDIOCCLR(r4, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0})
symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00')

222.800454ms ago: executing program 3 (id=5118):
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000080))

200.298728ms ago: executing program 2 (id=5119):
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x108)
r0 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000510, r0)
setgid(0xffffffffffffffff)
r1 = getppid()
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20000708, r1)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0xab, 0xab, 0x5}, {0x60, 0xf, 0xff, 0x7}, {0x6, 0x6, 0x7, 0x568}]})
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
setsockopt(0xffffffffffffffff, 0xbeb, 0xe, &(0x7f0000000000)='\x00', 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000000)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
sendmsg$unix(r4, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa, 0x0}, 0xe)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="e33a176ed02400000000000086dd634584d100086103fe8000e30000000000000000000000aa00000000ffffff"])
syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08060001080006040008aaaaaaaaaabb00000000ffffffffffff00000000c3e83995f10202af97be569abbf721a3ee8283a1a673d36bf75fc899d5f4263c3d3612b76f5851db310170857ce58f422409a0e1533ae86a87d6f0de064a1db5f4a66f8ff324ba88e8d3d529f0bc6e5144574256f061141f9bcaa3b6c3cc2a6d7292db917fec8ce1322b69859ccb7f532c0c37769bce1eab690dfbe52258a056c2aced6629457c26641a684db1c5de00e7ae47a0417843ee4ffe7d7c676e99f69eb34a0028eed5721db5822385efb8df3cff47a59a87c43fad26f082f4bc62596967d444055c582a712ea1fe6939b88f4280ae101dd3c4b0ac1db32868947720fa7d4b01c4bf4c3d13cd68588249f050a0d7aa9da3dd611274e450cb"])
sysctl$net_inet_ah(&(0x7f00000000c0), 0x4, 0x0, 0x0, 0x0, 0x0)
r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x20808, 0x0)
sysctl$hw(&(0x7f0000000140)={0x6, 0x17}, 0x2, &(0x7f0000000340)="f785b149605c30d609c45d2428a19e2b60236c7da72e01c0b70a4985e56260d44d22c98bee821761fd6f4ee1abe5432c0bc48d77c5260560b966fce44bc7aa2c964b192fd8ac2b8832993f312ee23e557e407efe219764976d1697a7b08c3f297a0d54d6e4a0661629e62cbf90cb1de084ff93f09a7549fba0a7f36a58f10359788ab617b89341b10d8e80d83f726b77ba7d0647df13888764957697b623c5de29206882089b0dd1e47b1e0b96de8f5c56fc112d932d8e46c89d5bda8adf17cdd1e687282717e3eaad4887c52548e796a04b36c5d7e5bbde4087c40f4821603c57a579d414507c79e04019236e17adffec741d", &(0x7f0000000240)=0xf3, &(0x7f0000000280)="49a1a5b7686863db30e08a4f7d816cd8cbd8cc1a7dfe698a", 0x18)
ioctl$WSDISPLAYIO_USEFONT(r5, 0x80585750, &(0x7f00000001c0)={'./file0\x00', 0xd, 0x9, 0x8000, 0x0, 0xffffff5a, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3ba})
sendmsg$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
socket(0x2, 0x3, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

198.940537ms ago: executing program 6 (id=5120):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r1, 0x4, 0x80)
setreuid(0xee00, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x3a366294)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x50)
socket(0x1e, 0x3, 0x0)
setuid(0xee01)
r3 = getpid()
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000780)="3bb8c80000000007dee5f7fd0206", 0xe}], 0x1)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TIOCSETA(r4, 0xc0504417, &(0x7f0000000740)={0xbffffffd, 0xffffff80, 0x7, 0xa, "00000000008000000000060000000600", 0x3, 0xfffebffc})
fcntl$setown(r0, 0x6, r3)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r5 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r5, 0xc1126939, &(0x7f00000001c0))
close(r1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket(0x18, 0x2, 0x0)
setsockopt(r6, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
fcntl$lock(r2, 0x8, &(0x7f0000000140)={0x2, 0x1, 0xda8, 0x6, r3})
r7 = accept$inet(r0, &(0x7f0000000180), &(0x7f00000000c0)=0xc)
dup(r7)

198.385828ms ago: executing program 5 (id=5121):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000180)={0x5f, &(0x7f0000000180)})
r1 = syz_open_pts()
readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800})
syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x3, 0x100004, 0x0, 0x20007, "ebffbef5ebd1000000ef67d3b8890000000100", 0x5, 0x7e1})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000080)})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
syz_open_pts()
ioctl$BIOCPROMISC(r0, 0x20004269)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0)
ktrace(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40000c38, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0)
mlock(&(0x7f000074e000/0x1000)=nil, 0x1000)

3.779534ms ago: executing program 6 (id=5122):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/254, 0xfe}], 0x2, 0x0}, 0xffffffff}, 0x10, 0xc3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async)
sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x2, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
sysctl$hw(0x0, 0x0, &(0x7f0000000100)="0004849d0f3e8095043fa8985d012c0000935102cbd09f97fc7c7d40b5bf6610803975018f983200000020be7a", &(0x7f0000000000)=0x2d, 0x0, 0x0) (async)
sysctl$hw(0x0, 0x0, &(0x7f0000000100)="0004849d0f3e8095043fa8985d012c0000935102cbd09f97fc7c7d40b5bf6610803975018f983200000020be7a", &(0x7f0000000000)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[])
sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
close(r1)

3.318792ms ago: executing program 3 (id=5123):
rmdir(&(0x7f0000000000)='./file0\x00')
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
setuid(r1)
syz_emit_ethernet(0x15a, &(0x7f00000000c0)={@local, @random="5af6a2925498", [], {@ipv6={0x86dd, {0x2, 0x6, "bb8362", 0x124, 0x6, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, {[@fragment={0x89, 0x0, 0x0, 0x0, 0x0, 0xf, 0x65}, @dstopts={0x6, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0xe53}, @generic={0x2, 0xaa, "d9ccfe6a456f9a168d53c5852dbd9432592a95887b1d7e73170a05643e6ebe85f0d0f313e93ee24160e9ad94f588405603a03d5a00c46614ab70101ccc8aff390893153a53c323a398f87e96ef59ff284d84414625eb87c6ebb5ca07c09f64b979ed6f190817798e42c91790cc163d60a1ad47bd22150c87a4f68c0f4972b2863274dd4ffd846bd64f3c0ba0b005db82c63f091f79f81690c49af4aaeb1b8c79751272b0493d8db56944"}]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}, @empty, [{0x1f, 0x3, "747d0a1ec7852e4209dc1cf977e01f8f6f1517b774ab31c0a961"}]}}}}}})
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000280)={'./file1\x00', 0x1000, 0xf, 0x5, 0x1, 0x1ff, 0xfff, 0x8, 0x1, 0x0, 0x5, 0x3})
syz_emit_ethernet(0x62, &(0x7f0000000300)={@random="4ef3fbc9cc87", @empty, [{[], {0x8100, 0x2, 0x0, 0x4}}], {@ipv4={0x800, {{0x12, 0x4, 0x1, 0x3c, 0x50, 0x68, 0xfff8, 0xe, 0x6c, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@rr={0x7, 0x7, 0x9, [@remote={0xac, 0x14, 0x0}]}, @rr={0x7, 0x2b, 0x6, [@rand_addr=0x1, @broadcast, @multicast1, @multicast2, @multicast1, @empty, @rand_addr=0xb4, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x7}}}}})
ioctl$KDENABIO(r3, 0x20004b3c)
ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000380))
fchflags(r3, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000400)={0x3, 0xe0e13d1, 0x40000, 0x5, 0x0, 0xd, 0xf, 0x10, [{0x5, 0x1, 0x1}, {0x8, 0x995, 0x5, 0x5}, {0x4, 0x4, 0x6, 0x4}, {0x97d4, 0x7fff, 0x81, 0xe41c}, {0x8, 0x1d, 0x8, 0x200}, {0x2, 0xff, 0x1, 0x2}, {0x1, 0x80000000, 0x1, 0x5}, {0x1000, 0x1, 0xd99, 0xffff7fff}, {0x1, 0x1, 0x0, 0x1}, {0x0, 0x200, 0x9, 0x4}, {0x2bd, 0xc, 0x6, 0x9e2}, {0x9, 0xe, 0x6, 0x3}, {0x9, 0xe6, 0xd0b1, 0x4}, {0xf8, 0x9, 0x7, 0xb312}, {0x0, 0x800, 0x8, 0x7}, {0x40, 0x8, 0x2, 0x67}]})
r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, &(0x7f0000000580)=0x8)
ioctl$FIOSETOWN(r3, 0x8004667c, &(0x7f00000005c0)=0x400)
syz_emit_ethernet(0x97, &(0x7f0000000600)={@empty, @broadcast, [{[], {0x8100, 0x5}}], {@generic={0x8006, "afdd2cea674cad8e0fec1214d2e35165ef432e41e088bc214877928af955c94f1797bfb89562c75ab4c12a510f8b47d8dee0864d01bb698b1e61d7a1e8e247345fccd95dd6b7e341e633974b440d36d762bcef5b2172701284921f9500814565a0b8a6061a3518adf7af0b00262b03e43261962d507b31f99855a4bed070dcc990da3fd0c8"}}})
ioctl$VT_GETMODE(r3, 0x40087603, &(0x7f00000006c0))
ioctl$LIOCSFD(0xffffffffffffff9c, 0x80046c7f, &(0x7f0000000700)=r4)
getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000840)={<r5=>0x0}, 0xc)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, <r7=>0x0}, &(0x7f0000000900)=0xc)
r8 = getegid()
sendmsg$unix(r4, &(0x7f0000000a80)={&(0x7f0000000740)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000000800)=[{&(0x7f0000000780)="f90c36ebd8b0a3cb0add885c302382f2f416303191abf0ce7f25a223", 0x1c}, {&(0x7f00000007c0)="6f571e303e", 0x5}], 0x2, &(0x7f0000000940)=[@cred={0x20, 0xffff, 0x0, r5, r1, r2}, @rights={0x20, 0xffff, 0x1, [r4, r4, r3, r4]}, @cred={0x20, 0xffff, 0x0, r0, 0xffffffffffffffff, r2}, @rights={0x28, 0xffff, 0x1, [r4, r3, r4, r6, r3]}, @rights={0x20, 0xffff, 0x1, [r4, r4, r3, r3]}, @cred={0x20, 0xffff, 0x0, r0, r7, r2}, @cred={0x20, 0xffff, 0x0, r0, r1, r8}, @rights={0x10}, @rights={0x18, 0xffff, 0x1, [r3]}], 0x110, 0xc}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@random="e73d66bcd74b", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x4, 0x28, 0x64, 0x8001, 0x5, 0x32, 0x0, @empty, @loopback}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x0, 0x7a, 0x9, 0x100, 0x72c2}}}}})
chown(&(0x7f0000000b00)='./file1\x00', r7, r8)
writev(r3, &(0x7f0000001040)=[{&(0x7f0000000b40)="6cca94712bd6a340303d3da275c06e5fff046e60c0c71a3d04dbdbbd6a0a209bc29da6168c4f59636a07e50041bd21736ff3c9f8f8ec44702935af56c913850afb6d31c951e008b3d2baee680fd6e7bac0b283b5c9d55839b03e9c9a17c2be10449ebdfea1f73cbbcfb688cb000cd6f8550cba1f435f6a08763d4591d8121223c497e74ae85b453655c689a5b6e42a469f885e2f4bf3c9562f980d7e", 0x9c}, {&(0x7f0000000c00)="9abacd3e6982cc5d8ff1e206cd5b01554c50d0b6dd8e9d88e2167f2bcc5e868a92fb927eed9b", 0x26}, {&(0x7f0000000c40)="8630594054a70a9aecaba7e4615b8228907b2a87f351c145adfa616e1d1264d8f5710e646130f04e19f497dbb4966fb20a55fdfcf05cfedb1d15380ceec7d941d1e095c1193350b8cc9e5c3f61f955c9e2539bbba8e4188c8f3d320b084ee8bc35b417279e23908fa577a2534943aef7a378592bb334f37e56fe97c4bbc7d922af4109558b44fddb5797ddf9378081a9a8d916d2bd1f8e6dd5c5611f84a1c9fffe77d11443", 0xa5}, {&(0x7f0000000d00)="10d4a9c54d4564d92913fbf23b708d0b1e238f8985a4ad2febe9b67b55beb65d843e1242a4bd0116bd7228d17d8492c8f67100ce984275c61241f3aef414b13a5d63a5e68ea6dd5b835a1cb8ef912c10f7e5cc3e69b68c7926eceeb2c020727f906433a5d40676a8597403fc8466b047b30ec0c44bfb9bbf149c861729fbecf8839538c72af55d41c48db362c2fe76c0decb7f50323516c18d5b828aee2db3d2899ad468bcb90f39d36119006d39a02e64260b84c4804df62853976fd95c8cdc80e103a3cd", 0xc5}, {&(0x7f0000000e00)="b88df90e4b5a5c6d5ed97cd280dd9872ed7fc8992f811b1cddb14a9392200f5e874ed949b12de069a6ec0808d0dbc1b1e6e57b8b932b7f8e71442522e79fdfcedbd9353c1e64874763b6eb3615a6a9cfe00f133cb05ce3fcfee71c8776c915d6659b3f7f8fdac8b2cbb5076323ad70d4d1acda38a7643f527a7926caa4f17c2505af", 0x82}, {&(0x7f0000000ec0)="b225f6d81b6147deca61ad110b251cc4c68a811db205109dd3bf03b66b7ec6c5d343361678ae1c011a3ccc6ee219bae0afac4fcf113d0bb81452ca57211a02174f96a6c6c2febb9488844f24cb5b0e63184bc79195a90eedbb172c41b828e11078bfae6408887061fc5f956a2da16da878", 0x71}, {&(0x7f0000000f40)="0c0b6de046a8dd7152da8bc09aa23ad6e14f21b5326795f3c7f15a3f3ba87562f6b53168f090a2c7eb7cb8f62e5d393115bd385b6b62e13f1c0ff27d01e6ad07022c6a0225a4a30482a0236fabb80fcca44f2e70cf5b1483f301d35faff32cbe050a3579c39e4c483a3ac771a4da39fb96abd84f50ecc4186ff0cac48cb6204aa8af3fe4a45618aee77f985835d11418db99ab6c6ef17a9dd6c31ff6f67835cb82e0ae8d43a48bc00dfe618d52d1a8a4ac3c8ab54b03aaec6ce6d3847c30c77529ba53da0330fa3e97b4973e7277a2c1d0e0d64d2dda650c4bd0", 0xda}], 0x7)
execve(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001140)=[&(0x7f0000001100)], &(0x7f00000013c0)=[&(0x7f0000001180)=')\x00', &(0x7f00000011c0)='\',\x00', &(0x7f0000001200)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000001240)='{@+!!\x00', &(0x7f0000001280)='\x00', &(0x7f00000012c0)='/dev/ttyCcfg\x00', &(0x7f0000001300)='/dev/ttyCcfg\x00', &(0x7f0000001340)='\x00', &(0x7f0000001380)='\x00'])
recvfrom$unix(r4, &(0x7f0000001440)=""/252, 0xfc, 0x1040, &(0x7f0000001540)=@file={0x0, './file1\x00'}, 0xa)
fsync(r3)
r9 = open$dir(&(0x7f0000001580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x1a2)
r10 = open(&(0x7f00000017c0)='./file1/file0\x00', 0x10000, 0x0)
renameat(r9, &(0x7f0000001780)='./file0\x00', r10, &(0x7f0000001800)='./file1\x00')

292.095µs ago: executing program 3 (id=5124):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000040)="ed", 0x1)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0xb9, 0x1, 0xffffffffffffffff}], 0x0, 0x0, 0x7, 0x0)
r2 = kqueue()
kevent(r2, 0x0, 0x0, &(0x7f0000000340)=[{{}, 0xfffffffffffffff9, 0x35, 0x2, 0x7, 0x1ff}], 0x7, 0x0)
kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0)
shutdown(r1, 0x2)
close(r0)

0s ago: executing program 5 (id=5125):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0xf00, r1)
select(0x0, 0x0, &(0x7f0000000040)={0xb, 0x9, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfffffffffffffffc})
setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6}, {}, {0x1}, {0x0, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x5}, {0x0, 0x7}, {0x3}, {0x3, 0x400}, {}, {0x2, 0x3}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xa}, {0x1}]})
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff})
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x5, 0x0, 0x200d})
openat$vmm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) (async)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
syz_open_pts() (async)
r4 = syz_open_pts()
ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4) (async)
ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, 0x0, 0x0)
listen(r5, 0x5)
sysctl$kern(&(0x7f00000001c0)={0x1, 0x37}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afe", &(0x7f0000000140)=0x19, 0x0, 0x0)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000300)={0x401, 0x90d, 0x80c003, 0x7d6, "0000000000000000ff0300000180000000000040", 0xa, 0xffffffff}) (async)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000300)={0x401, 0x90d, 0x80c003, 0x7d6, "0000000000000000ff0300000180000000000040", 0xa, 0xffffffff})
sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0x141}], 0x1) (async)
writev(r4, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0x141}], 0x1)
ioctl$VMM_IOC_TERM(r3, 0x80045604, &(0x7f0000000000)={0x9}) (async)
ioctl$VMM_IOC_TERM(r3, 0x80045604, &(0x7f0000000000)={0x9})
unveil(0x0, &(0x7f0000000080)='r\x00')
ioctl$VMM_IOC_INTR(r3, 0x800c5606, &(0x7f0000000400)={0x5, 0x0, 0x2})
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="e33a176ed024", @empty, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote={0xac, 0x14, 0x0}, @empty, @loopback}}}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts.

OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-b.c.syzkaller.internal) (tty00)

login: 0#+"$%.!",%: #/--!.$ %22/2
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e
    SENSE KEY: Illegal Request
     ASC/ASCQ: Invalid Command Operation Code
pckbd_enable: command error
malloc(): allocation too large, type = 6, size = 287762939904
denied attempt to set clock back 571282442 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds
denied attempt to set clock back 0 seconds

OpenBSD/amd64 (c) (tty00)

login: �j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�j�jmalloc(): allocation too large, type = 6, size = 287762939904
denied attempt to set clock forward to 52172937113390
denied attempt to set clock forward to 35184372155135




OpenBSD/amd64 (Amnesiac) (tty00)

login: WARNING: thread `nfsio' (207921) exits with status -1
WARNING: thread `nfsio' (299936) exits with status -1
WARNING: thread `nfsio' (430167) exits with status -1
WARNING: thread `nfsio' (65355) exits with status -1
WARNING: thread `nfsio' (486248) exits with status -1
WARNING: thread `nfsio' (343138) exits with status -1
WARNING: thread `nfsio' (418738) exits with status -1
WARNING: thread `nfsio' (331896) exits with status -1
WARNING: thread `nfsio' (178607) exits with status -1
WARNING: thread `nfsio' (275982) exits with status -1
WARNING: thread `nfsio' (28007) exits with status -1
WARNING: thread `nfsio' (239420) exits with status -1
WARNING: thread `nfsio' (407102) exits with status -1
WARNING: thread `nfsio' (403607) exits with status -1
WARNING: thread `nfsio' (243887) exits with status -1
WARNING: thread `nfsio' (262596) exits with status -1
WARNING: thread `nfsio' (189320) exits with status -1
WARNING: thread `nfsio' (161736) exits with status -1
WARNING: thread `nfsio' (333377) exits with status -1
WARNING: thread `nfsio' (400659) exits with status -1
denied attempt to set clock back 25 seconds
�j���|����E1\�:pmap_unwire: wiring for pmap 0xfffffd806ec89e00 va 0x200000001000 didn't change!
denied attempt to set clock back -9223372034707294159 seconds
vnd0: sloppy read from proc 74988 (syz-executor): blkno 0 bcount 45


	
		

	
WARNING: thread `nfsio' (123252) exits with status -1
WARNING: thread `nfsio' (83252) exits with status -1
WARNING: thread `nfsio' (408918) exits with status -1
WARNING: thread `nfsio' (121819) exits with status -1
WARNING: thread `nfsio' (520661) exits with status -1
WARNING: thread `nfsio' (395869) exits with status -1
WARNING: thread `nfsio' (479431) exits with status -1
WARNING: thread `nfsio' (307903) exits with status -1
WARNING: thread `nfsio' (187268) exits with status -1
WARNING: thread `nfsio' (345719) exits with status -1
WARNING: thread `nfsio' (334386) exits with status -1
WARNING: thread `nfsio' (301028) exits with status -1
WARNING: thread `nfsio' (65088) exits with status -1
WARNING: thread `nfsio' (157106) exits with status -1
WARNING: thread `nfsio' (454742) exits with status -1
WARNING: thread `nfsio' (95248) exits with status -1
WARNING: thread `nfsio' (127364) exits with status -1
WARNING: thread `nfsio' (19195) exits with status -1
WARNING: thread `nfsio' (2855) exits with status -1
WARNING: thread `nfsio' (359677) exits with status -1
denied attempt to set clock back 2147482948 seconds
�j���|����E1\�:malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock back 2147483734 seconds
malloc(): allocation too large, type = 29, size = 16796513700
malloc(): allocation too large, type = 29, size = 16796513700
malloc(): allocation too large, type = 29, size = 16796513700
malloc(): allocation too large, type = 29, size = 16796513700

OpenBSD/amd64 (Amnesiac) (tty00)

login: malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock back -9223372034707294079 seconds
malloc(): allocation too large, type = 29, size = 16796513700
��@��@���@@0����@��@<	@����������\��d�a	���
./file0@@@@@@@@@@@@@@@
V@@@@@@@� ��@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@malloc(): allocation too large, type = 29, size = 16796513700
�j���|����E1\�:
OpenBSD/amd64 (Amnesiac) (tty00)

login: malloc(): allocation too large, type = 29, size = 16796513700

OpenBSD/amd64 (Amnesiac) (tty00)

login: malloc(): allocation too large, type = 29, size = 16796513700
WARN_fGau ltSP0 NOff fLOWERED 6O28eT7Rb8A,P 0x34T c ,0 
1Stopped at      proc_trampoline+199:    movl    $0,%gs:1672
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 484364  83827      0           0  0x4000000    0  syz-executor
*345328  61612      0           0          0    1  syz-executor
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x7333605cbb00, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: uvm_fault(0xfffffd807628e7b8, 0x340, 0, 1) -> e
ddb{1}> trace
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x7333605cbb00, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp             18446603337232503952
rbx                                0
rdx                                0
rcx             18446603337232185216
rax                               42
r8              18446603337232503744
r9                                 1
r10             12887322851090104366
r11              5514638888371960364
r12                                0
r13             18446744071583257576    Xdoreti+24
r14                                0
r15                                0
rip             18446744071607039175    proc_trampoline+199
cs                                 8
rflags                           582
rsp             18446603337232503824
ss                                16
proc_trampoline+199:    movl    $0,%gs:1672
ddb{1}> show proc
PROC (syz-executor) tid=345328 pid=61612 tcnt=3 stat=onproc
    flags process=0 proc=0
    runpri=86, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c426558,0xffff80003c426fc8
    process=0xffff80002a3666a8 user=0xffff80003c470000, vmspace=0xfffffd80686d8b98
    estcpu=36, cpticks=12, pctcpu=0.0, user=12, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 83827   16802   5063      0  2           0                syz-executor
 83827   50692   5063      0  3   0x4000000  vm_terminate  syz-executor
 83827  484364   5063      0  7   0x4000000                syz-executor
*61612  345328  85360      0  7           0                syz-executor
 61612  244007  85360      0  3   0x4000000  sbufrcv       syz-executor
 61612  104623  85360      0  3   0x4000080  sbwait        syz-executor
 93523  134901  13282      0  3        0x80  nanoslp       syz-executor
 93523   80894  13282      0  3   0x4000080  fsleep        syz-executor
 93523  113983  13282      0  3   0x4000080  sbwait        syz-executor
 93523  236884  13282      0  3   0x4000080  fsleep        syz-executor
 87978   52848  38772      0  3        0x90  nanoslp       syz-executor
 87978  222504  38772      0  3   0x4000090  lockf         syz-executor
 87978  434481  38772      0  3   0x4000090  fsleep        syz-executor
 87978  161153  38772      0  3   0x4000090  fsleep        syz-executor
 95772   17145  29875      0  3        0x80  nanoslp       syz-executor
 95772  437134  29875      0  3   0x4000080  kqpoll        syz-executor
 95772  134039  29875      0  3   0x4000080  fsleep        syz-executor
 41206  520792      1      0  3        0x80  nanoslp       init
 65562  330671  88276      0  3        0x82  wait          syz-executor
 29875   88061  88276      0  3        0x82  nanoslp       syz-executor
 85360  427113  88276      0  3        0x82  nanoslp       syz-executor
 22577  499134  88276      0  3        0x82  wait          syz-executor
 13282  176799  88276      0  3        0x82  nanoslp       syz-executor
 38772  424224  88276      0  3        0x82  nanoslp       syz-executor
  5063  387730  88276      0  3        0x82  nanoslp       syz-executor
  5670   58526  88276      0  3        0x82  wait          syz-executor
 88276  460265  75335      0  3        0x82  kqread        syz-executor
 75335   53861  46194      0  3    0x10008a  sigsusp       ksh
 46194  178479  79299      0  3        0x98  kqread        sshd-session
 79299  109850  10498      0  3        0x92  kqread        sshd-session
 10498  343434      1      0  3        0x88  kqread        sshd
 25375  224989   4416     74  3   0x1100092  bpf           pflogd
  4416  357656      1      0  3        0x80  sbwait        pflogd
 37495  444969  89970     73  3   0x1100090  kqread        syslogd
 89970  407931      1      0  3    0x100082  sbwait        syslogd
 72843    7754      1      0  3    0x100080  kqread        resolvd
 55898  134449  28064     77  3    0x100092  kqread        dhcpleased
 92707  172644  28064     77  3    0x100092  kqread        dhcpleased
 28064  323098      1      0  3        0x80  kqread        dhcpleased
 45134  520121      0      0  3     0x14200  bored         smr
 41339  399863      0      0  3     0x14200  pgzero        zerothread
 36594  252319      0      0  3     0x14200  aiodoned      aiodoned
 23921  296823      0      0  3     0x14200  syncer        update
 10196  438125      0      0  3     0x14200  cleaner       cleaner
 19453  187117      0      0  3     0x14200  reaper        reaper
 28629  280422      0      0  3     0x14200  pgdaemon      pagedaemon
 97548  203495      0      0  3     0x14200  bored         viomb
 86370  292135      0      0  3  0x40014200  acpi0         acpi0
 34264   33012      0      0  3  0x40014200                idle1
 84901  130721      0      0  3     0x14200  bored         softnet1
 67294  395429      0      0  3     0x14200  bored         softnet0
 31882  241592      0      0  3     0x14200  bored         systqmp
 58853  475948      0      0  3     0x14200  bored         systq
 94440  270298      0      0  3     0x14200  tmoslp        softclockmp
 85764    6232      0      0  3  0x40014200  tmoslp        softclock
 45968  258267      0      0  3  0x40014200                idle0
     1  482957      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex &sched_lock r = 0 (0xffffffff83a00420)
#0  witness_lock+1521
#1  mtx_enter+1204
#2  sleep_finish+470
#3  refcnt_finalize+219
#4  vm_terminate+365
#5  vmmioctl+859
#6  VOP_IOCTL+172
#7  vn_ioctl+248
#8  sys_ioctl+1652
#9  syscall+3028
#10 Xsyscall+296
Process 83827 (syz-executor) thread 0xffff80002ebd82c8 (484364)
Process 61612 (syz-executor) thread 0xffff8000327e4568 (104623)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10252  11070K   13864K 166960K     18382        0
            pcb    17     16K      24K 166960K      1319        0
         rtable   202     14K      16K 166960K      1737        0
             pf    38     18K   67485K 166960K       463        0
         ifaddr    34      7K      10K 166960K       328        0
        ifgroup    60      2K       3K 166960K       570        0
         sysctl     4      1K       9K 166960K       114        0
       counters    70     37K      38K 166960K       642        0
       ioctlops     0      0K       8K 166960K      2991        0
            iov     2      8K      28K 166960K       410        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1577     99K     100K 166960K      6271        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      2K      10K 166960K        66        0
         VM map     2      1K       1K 166960K         2        0
            sem    26      6K       6K 166960K       106        0
        dirhash    15      2K       2K 166960K       138        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     240K 166960K      5583        0
          sigio     0      0K       0K 166960K       194        0
           proc    64     99K     164K 166960K      1562        0
        subproc    72      4K       4K 166960K       217        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     2      0K       0K 166960K      1192        0
       in_multi    44      3K       7K 166960K       446        0
    ether_multi     1      0K       0K 166960K        49        0
            mrt     1      0K       0K 166960K        56        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   283   1261K    1261K 166960K       283        0
           exec     0      0K       1K 166960K      1605        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K        13        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   270    173K     194K 166960K     51751        0
       UVM aobj    43     40K      40K 166960K        47        0
     pinsyscall    42     84K     106K 166960K      7194        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       305        0
            NDP    13      0K       2K 166960K       240        0
           temp    85   8672K   27872K 166960K    257566        0
         kqueue    14     20K      36K 166960K      1105        0
      SYN cache     2      0K      16K 166960K         4        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      513    0      510     3     2     1     2     0     8    0
rtentry    176      456    0      393     6     1     5     6     0     8    0
unpcb      144     3485    0     3459    28    24     4     6     0     8    3
syncache   336       32    0       32     9     8     1     1     0     8    1
tcpqe       32       14    0       14     9     9     0     1     0     8    0
tcpcb      736     1965    0     1956    28    21     7     8     0     8    5
arp        136       63    0       47     1     0     1     1     0     8    0
inpcb      328     6247    0     6234    53    42    11    15     0     8    8
nd6        152       83    0       75     2     0     2     2     0     8    0
pkpcb       40       39    0       39     9     8     1     1     0     8    1
kcovpl      48       24    0       16     1     0     1     1     0     8    0
mppekey    1024       5    0        5     3     2     1     1     0     8    1
ppxss      1192     222    0      222     4     3     1     1     0     8    1
pppxif     1504      23    0       23     8     7     1     1     0     8    1
pffrag     232       29    0       27     1     0     1     1     0   482    0
pffrnode    88       27    0       25     1     0     1     1     0     8    0
pffrent     40       54    0       52     1     0     1     1     0     8    0
pfosfp      40     1429    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1429    0      714    21     0    21    21     0     8    0
pfrktable  1344      69    0       69     4     4     0     1     0     8    0
pfstitem    24      352    0      266     1     0     1     1     0     8    0
pfstkey    128      352    0      266     4     0     4     4     0     8    0
pfstate    448      352    0      266    17     3    14    17     0     8    0
pfrule     1344      22    0       16     2     1     1     2     0     8    0
rttmr      136       14    0       14     6     5     1     1     0     8    1
art_heap8  4096       6    0        1     6     1     5     6     0     8    0
art_heap4  256     2282    0     2041    44    18    26    35     0     8    1
art_table   40     2288    0     2042     7     1     6     6     0     8    0
art_node    32      448    0      392     1     0     1     1     0     8    0
sysvmsgpl   40       84    0       76     1     0     1     1     0     8    0
semupl     112        7    0        7     3     3     0     1     0     8    0
semapl     112       91    0       67     1     0     1     1     0     8    0
shmpl      112       24    0        2     1     0     1     1     0     8    0
dirhash    1024     104    0       85     3     0     3     3     0     8    0
dino2pl    256    12107    0    10570    98     1    97    97     0     8    0
ffsino     296    12107    0    10570   120     1   119   119     0     8    0
nchpl      144    19666    0    17920    65     0    65    65     0     8    0
rtmask      32       42    0       42    10     9     1     1     0     8    1
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   71595    0    71595     8     7     1     3     0     8    1
percpumem   16      336    0      286     1     0     1     1     0     8    0
vcpupl     3968      20    0        2     3     0     3     3     0     8    0
vmpool     840       20    0        2     2     0     2     2     0     8    0
kstatmem   264      388    0      356     4     1     3     3     0     8    0
scsiplug    72       42    0       42     7     6     1     1     0     8    1
scxspl     216   109669    0   109669    17    15     2     8     1     8    2
plimitpl   152     1755    0     1739     1     0     1     1     0     8    0
sigapl     424     5869    0     5821     9     2     7     8     0     8    0
knotepl    120      791    0        0    23     0    23    23     0     8    0
kqueuepl   224     2342    0     2331    27    24     3     5     0     8    2
pipepl     344      926    0      899    15    12     3     9     0     8    0
fdescpl    528     5800    0     5768     3     0     3     3     0     8    0
filepl     160    42458    0    42219    51    35    16    21     0     8    3
lockfpl    104     2788    0     2772     6     5     1     2     0     8    0
lockfspl    48      811    0      797     1     0     1     1     0     8    0
sessionpl  144       68    0       60     1     0     1     1     0     8    0
pgrppl      48      196    0      180     1     0     1     1     0     8    0
ucredpl    104     7504    0     7490     1     0     1     1     0     8    0
zombiepl   144     6875    0     6872     1     0     1     1     0     8    0
processpl  1232    5869    0     5821     7     1     6     6     0     8    0
procpl     664    15047    0    14987     8     2     6     8     0     8    0
sosppl     176       48    0       48     9     8     1     1     0     8    1
sockpl     752    10476    0    10434    69    56    13    21     0     8    8
mcl64k     65536     19    0        0     3     1     2     3     0     8    0
mcl16k     16384      6    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       6    0        0     1     0     1     1     0     8    0
mcl4k      4096     137    0        0    17     0    17    17     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      72    0        0     7     1     6     7     0     8    0
mtagpl      96      118    0        0     3     0     3     3     0     8    0
mbufpl     256     1888    0        0   112     0   112   112     0     8    0
bufpl      280    41458    0    35321   439     0   439   439     0     8    0
anonpl      32    20495    0        0   165     0   165   165     0   246    0
amapchunkpl 152  182186    0   181547    86    49    37    40     0   158   10
amappl16   200    18710    0    18473   141   116    25    52     0     8    4
amappl15   192       20    0       20     2     2     0     1     0     8    0
amappl14   184        2    0        2     2     2     0     1     0     8    0
amappl13   176      622    0      620     1     0     1     1     0     8    0
amappl12   168     6339    0     6297     3     0     3     3     0     8    0
amappl11   160        7    0        6     1     0     1     1     0     8    0
amappl10   152       54    0       39     1     0     1     1     0     8    0
amappl9    144      256    0      256     2     2     0     1     0     8    0
amappl8    136       26    0       23     1     0     1     1     0     8    0
amappl7    128      157    0      155     1     0     1     1     0     8    0
amappl6    120      507    0      492     1     0     1     1     0     8    0
amappl5    112       97    0       86     1     0     1     1     0     8    0
amappl4    104      639    0      609     1     0     1     1     0     8    0
amappl3     96    32495    0    32390     5     2     3     4     0     8    0
amappl2     88     6067    0     5990     3     1     2     3     0     8    0
amappl1     80    39500    0    38923    21     6    15    16     0     8    0
amappl      88    49685    0    49491     5     0     5     5     0    92    0
uvmvnodes   80      257    0        0     6     0     6     6     0     8    0
dma65536   65536      2    0        2     1     1     0     1     0     8    0
dma16384   16384      3    0        3     3     3     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512        3    0        3     2     2     0     1     0     8    0
dma256     256        8    0        8     3     3     0     1     0     8    0
dma128     128      264    0      264     7     6     1     1     0     8    1
dma64       64       12    0       12     7     7     0     1     0     8    0
dma32       32        9    0        9     3     3     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       46    0        4     1     0     1     1     0     8    0
uaddrrnd    24     5800    0     5768     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     5800    0     5768     1     0     1     1     0     8    0
vmmpekpl   168    45494    0    45438     4     0     4     4     0     8    0
vmmpepl    168   375359    0   373145   175    67   108   132     0   357    1
vmsppl     488     5799    0     5768     6     1     5     5     0     8    0
rwobjpl     80    95140    0    93692    57    17    40    46     0     8    0
pdppl      4096   11647    0    11558   163    74    89    90     0     8    0
pvpl        32    28523    0        0   230     1   229   229     0   265    0
pmappl     256     5819    0     5770     4     0     4     4     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      535    0      147    12     0    12    12     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+39:  addq    $8,%rsp
x86_ipi_db(ffffffff8386fff0) at x86_ipi_db+39
x86_ipi_handler() at x86_ipi_handler+217
Xresume_lapic_ipi() at Xresume_lapic_ipi+39
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+55
comcnputc(800,31) at comcnputc+592
cnputc(31) at cnputc+103
db_putchar(31) at db_putchar+877
kprintf() at kprintf+10693
db_printf(ffffffff833411bd) at db_printf+155
fault(ffffffff8340224a) at fault+167
kpageflttrap(ffff80002a2ed5f0,340) at kpageflttrap+893
kerntrap(ffff80002a2ed5f0) at kerntrap+412
alltraps_kern_meltdown() at alltraps_kern_meltdown+123
vm_terminate(ffff80002a2ed940) at vm_terminate+176
end trace frame: 0xffff80002a2ed770, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff8386fff0) at x86_ipi_db+39
x86_ipi_handler() at x86_ipi_handler+217
Xresume_lapic_ipi() at Xresume_lapic_ipi+39
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+55
comcnputc(800,31) at comcnputc+592
cnputc(31) at cnputc+103
db_putchar(31) at db_putchar+877
kprintf() at kprintf+10693
db_printf(ffffffff833411bd) at db_printf+155
fault(ffffffff8340224a) at fault+167
kpageflttrap(ffff80002a2ed5f0,340) at kpageflttrap+893
kerntrap(ffff80002a2ed5f0) at kerntrap+412
alltraps_kern_meltdown() at alltraps_kern_meltdown+123
vm_terminate(ffff80002a2ed940) at vm_terminate+176
vmmioctl(a00,80045604,ffff80002a2ed940,1,ffff80002ebd82c8) at vmmioctl+859
VOP_IOCTL(fffffd8070e81a28,80045604,ffff80002a2ed940,1,fffffd80097fd618,ffff80002ebd82c8) at VOP_IOCTL+172
vn_ioctl(fffffd806ca3bcd8,80045604,ffff80002a2ed940,ffff80002ebd82c8) at vn_ioctl+248
sys_ioctl(ffff80002ebd82c8,ffff80002a2edb20,ffff80002a2eda70) at sys_ioctl+1652
syscall(ffff80002a2edb20) at syscall+3028
Xsyscall() at Xsyscall+296
end of kernel
end trace frame: 0x99ae94596b0, count: -20
ddb{0}> machine ddbcpu 1
Stopped at      proc_trampoline+199:    movl    $0,%gs:1672
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x7333605cbb00, count: 14
ddb{1}> trace
proc_trampoline() at proc_trampoline+199
end of kernel
end trace frame: 0x7333605cbb00, count: -1