last executing test programs:

5.761167521s ago: executing program 3 (id=699):
utimes(0x0, 0xffffffffffffffff)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000000280)="fd2cc66acc1142445a4f014a", &(0x7f0000000040)=0xc, &(0x7f0000000080), 0x0)

5.760810712s ago: executing program 3 (id=700):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x7, 0xa, 0x0, 0x9}, {0x7, 0x3, 0x9, 0x4}, {0x8e9b, 0x4d, 0xd, 0x9}, {0x6, 0xf7, 0x3b, 0x5}, {0x3, 0x1, 0xf, 0x6}]}) (async)
ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000080)) (async, rerun: 32)
readv(r0, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/232, 0xe8}], 0x7) (async, rerun: 32)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="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"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98)

5.190646127s ago: executing program 3 (id=706):
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61})
r0 = syz_open_pts()
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3})
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0})
r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}], 0x1)
write(r2, &(0x7f0000000200)="0920ecfa02035cf2277125beceb3c7091900db0038840200ff4278adb03a00005642000000004f24b77b6a250a", 0x2d)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getrlimit(0x0, &(0x7f0000000240))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00')
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xc, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0x7b5a, 0x80cf}, {0x1, 0x5, 0x85, 0x5}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x9, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x3ff, 0x7}, {0x8, 0x8000000, 0x8, 0x7}, {0x20000004, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x80040}, {0x200003, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]})
getrlimit(0x0, &(0x7f0000000180))
poll(&(0x7f0000000000), 0x35, 0x0)
close(r0)

5.138555912s ago: executing program 3 (id=711):
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61})
syz_open_pts()
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0)
poll(&(0x7f0000000000), 0x35, 0x0)
setitimer(0x2, &(0x7f0000000140)={{0x0, 0x1}, {0xffffffff}}, 0x0)
sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x2}, 0x3, &(0x7f0000000040)="2c8a6754bf2de5e713f8a4b509f87ebdd759a3333b1523f14d6462017b195d851562afd835ddafea", &(0x7f0000000080)=0x28, &(0x7f00000000c0)="fe861c81ed8638505c5a5b6ac3025dbbd996209b03bb6b87fa8a5c4bfa5472961f8393fcd4781c4bf0daf444196e274cfb60ee081be3e62ed39439c987ee6fb2808da09789cc", 0x46)

4.932730899s ago: executing program 3 (id=715):
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x54)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x20, 0x10)
ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
syz_open_pts()
r1 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0)
syz_open_pts()
socket(0x18, 0x2, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x5c1, 0x7, 0xfff}, 0x0, 0x0, 0x0)
close(r0)
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040))

4.673677462s ago: executing program 3 (id=719):
r0 = syz_open_pts()
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080))
ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000000))

4.005488635s ago: executing program 4 (id=739):
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xf0}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/239, 0xef}], 0x1, 0x0}, 0x40)
close(r1)
sendmmsg(r0, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc)
mprotect(&(0x7f00005c7000/0x3000)=nil, 0x3000, 0x4)
select(0x2, 0x0, &(0x7f0000000040)={0x50}, &(0x7f0000000080), &(0x7f00000000c0))

3.748182008s ago: executing program 4 (id=746):
r0 = syz_open_pts()
sysctl$hw(&(0x7f0000000080)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x0, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff})
write(r0, 0x0, 0x0)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000000c0)={0x1, 0x81, 0x8d3d, 0x5, "d6d63303a3c0b65c62b8e5c7d8f59d64122c2097", 0x6, 0x400})
syz_open_pts()
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r1, 0x0, 0x24, 0x0, 0x0)
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7)

3.030283257s ago: executing program 4 (id=764):
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setuid(0xee01) (async)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) (async)
rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') (async)
openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
syz_open_pts()
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x2, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0xfffffffc, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x2007}, {0x6, 0xf86, 0x0, 0x4}, {0x9, 0x800, 0x7}, {0x6, 0x80000003, 0x80e, 0x7}, {0x2, 0x1, 0xefffffff, 0x800009c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x8803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0xb}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffe, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
syz_open_pts() (async)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="6e36210000000000000000504786007a67d1dbeca7ae99195e43d01d4ab88e9220a0c83e92", 0x25}, {&(0x7f0000000680)="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", 0x1dc}], 0x2, 0x9)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
socket(0x1, 0x5, 0x6)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0}, 0x8)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket(0x2, 0x4001, 0x0)
r3 = dup(r2) (async)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$KDGETLED(r4, 0x40044b41, 0x0) (async)
ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x82}, {0x21, 0x81}, {0x89, 0xffffd083}, {0x0, 0xb}, {0x8a, 0x4}, {0x20, 0x1}, {0x22, 0x20}], 0x7}) (async)
r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000340)='/dev/speaker\x00'], &(0x7f0000000940)=[&(0x7f0000000880)='/dev/speaker\x00', &(0x7f00000008c0)='/dev/speaker\x00', &(0x7f0000000900)='/dev/speaker\x00'])
close(r5) (async)
socket(0x2, 0x2, 0x0)

2.959972138s ago: executing program 4 (id=768):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r0 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x8, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x400, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x9}], {0x2000, 0x6, 0x5}, {0xfff, 0x6, 0xb0, 0x2}}})
kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
close(r0)

2.564304545s ago: executing program 4 (id=781):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000000)={0xfffffff7, 0xfffffffe})
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xfffff5c7, 0xff, 0xfff6, 0x0, 0x6, 0x27, 0x8, 0x1, 0x1, 0x63e, 0x4000000000f19})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)

2.28697925s ago: executing program 4 (id=784):
setrlimit(0x8, &(0x7f0000000980)={0xb})
r0 = syz_open_pts()
close(r0)
syz_emit_ethernet(0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f7ee04000086dd60ffff0b00093a01fe7fffffffe1000000000000000000bbff02000000000000000000000000000184"])
r1 = msgget$private(0x0, 0x10)
msgrcv(r1, &(0x7f0000000500)={0x0, ""/203}, 0xd3, 0x0, 0x800)
r2 = syz_open_pts()
r3 = socket(0x1, 0x1, 0x0)
fcntl$setstatus(r3, 0x4, 0x40)
shutdown(r3, 0x2)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x7f, 0x4, 0x3ff, 0xac21, "8bbfb00cc54ee2221ba79c162f4b406bdcb6fde6", 0x8, 0x6})
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000800)="d64742cc", 0x4}, {&(0x7f00000000c0)="069fb0cea9a9e994a42201dda5c3fa4ec8161ca9bc3a04e821149013fb485665dad5d9bfd7c0363ac3331c8713394ad3d545e7cd708aac48b8bf927a8cd7204700d985f4e8426bf0042fd8e2b83a43491f530c63004dd0d3d34ebd1d1599f30c2bbba7e15b224cb10d7386302ec614f5707b60cce29f2e7a5b45b0a3", 0x7c}, {&(0x7f0000000140)="399898f3aee880b6c63aac6ede551c1cad98bb86e2f9e8038b0b2e008fbea92975c366bdcab0836a814dc0da306a43c9cdb3293dfee3dd431e9b0277a9c867d11e24fdc6dbdbd9772e707b4657147ba7bfb8bf383f970e5a39b7a141bc30d727285bfc38bc52a0a8314bcfe6f389e9edb1c1de3f09994080b3144f11946026d2ccd0941755d96c5860", 0x89}, {&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)}], 0x5)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
read(r4, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x60)
dup2(r0, r2)
sysctl$net_inet6_icmp6(&(0x7f0000001600), 0x8, 0x0, 0x0, &(0x7f0000000380)="3458fd190e73f5449e403fbfbde39a49ff8f01fe405448aafcbeaeaea060df9546f3c0de896126697629e6e4866c5bb039241bdf713957c8ab5e624c5ab5e5b8a60f7ee7f6dfdc502ec7a24301dc6a34a3e0c819cd91f82cfc869c01f3741a921ff9f5e89f4f2b367e347ba071accc1a7c544259039be659893bfce997f9b369ed79d996c18f68c4b1c2dec138c97e39540ca2ec29cc5351fd24d6d4b34cf3bec879f51561eb243c22c583a33b0021e4a2af72c13ff6e2962553b35044bf61e0b4a4c42211d36eb16a32cc1d86f0a005ddfa653aea236ad7455abe31ae421d30", 0xe0)
r5 = dup2(r0, r0)
read(r5, &(0x7f0000001640)=""/4096, 0x1000)
syz_emit_ethernet(0x46, &(0x7f00000014c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000000103a000000000000ee2fd225c59daf01000000ff"])

1.976317521s ago: executing program 5 (id=799):
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x7}], 0x1})
msgsnd(0x0, 0x0, 0x0, 0x800)
sysctl$hw(&(0x7f0000000000)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
execve(0x0, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, &(0x7f00000000c0), &(0x7f0000001180), 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f00000002c0)={0x32, 0xfffffff1, 0x4, 0xdf, 0x9, 0x1268, 0xd, 0x10, [{0x1, 0xfffffffa, 0xfffffbff, 0x7}, {0x9, 0x0, 0x2, 0x7}, {0x2, 0x9, 0xf69, 0x2}, {0x5c, 0x40, 0xe2, 0x9045}, {0x9, 0x0, 0x8, 0x3ff80000}, {0x101, 0x9, 0x0, 0x3}, {0x2, 0x8, 0x4, 0x3}, {0x8, 0x3, 0xffffffff, 0x2}, {0x100, 0xfffff001, 0x772ac4cd, 0xce4}, {0x8001, 0x9, 0x8, 0x7}, {0x5, 0x9, 0x5, 0x2}, {0x7, 0x18, 0x5, 0x4}, {0x0, 0x10, 0x5, 0x953}, {0x11a, 0x0, 0x0, 0x3fe0}, {0x800, 0x7, 0x4, 0x10000}, {0x5, 0x4, 0x4, 0x800}]})
r2 = getuid()
setreuid(0xee00, r2)
chflags(&(0x7f0000000280)='./file0\x00', 0x1)

1.973805269s ago: executing program 0 (id=800):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x782, 0x0) (async, rerun: 64)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sysctl$hw(&(0x7f0000000100)={0x6, 0xe}, 0x2, &(0x7f0000000140)="593a900d82654b", &(0x7f00000001c0)=0x7, &(0x7f0000000200), 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x400000000000000a, &(0x7f0000000140)="defb3ed436c23e9ad0f633df584b05ca2ab9f219d478c9fe53fa26f182b65e8ff549051c3251fe127b9edb4da6ce3bbe6f591671005d124eaf1015b7b96af27490a9d9e211f7e3052c0447f03f8ebbcff01b98e1861116f19b3dc2bb83f451db2a4c5fbecbfd1d4afe20556ad3851174d7148c2158754619e8de0c1f4a27592466be023ebd034e83a83eff85a1d1aba60c906e338010ebc1bbf911da2154a62a67e44ccf9207ace65e5ee98e3b5aaa81960ff83b36b0a31b490b90db664ec729d340bb55090ef9f99598489d6486b17aebad", &(0x7f0000000240)=0xd2, &(0x7f0000000280)="8a1f1f4bd974ae9c03841bbdf9712796a141e23a8d32817f667de0040180c033b49aca06176d946406d67ca9418920240ef433fbfada12d8aa75", 0x2a) (async)
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r1, &(0x7f0000000000), 0x0, 0x8000000000040002)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x11, 0x80000000, 0x9, 0x8000000000000000}, {{}, 0xfffffffffffffff9, 0x2, 0x4, 0xfffffffffffffff5, 0xb3}], 0x7, 0x0, 0x9, 0x0) (async)
ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000000)={0x240, 0x401})
clock_gettime(0x3, 0xfffffffffffffffe)
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) (async)
r3 = syz_open_pts()
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00')
sysctl$hw(&(0x7f0000000180)={0x6, 0x2}, 0x2, &(0x7f0000000200)="7ab69748671b5f956219ccaacd7f44ab1fa69b9fedb7ace4ad91415a5faf3e6b44675abdb8784d9668b68bef84a213116ae4820f5b3dd4826207cebf7fa70eee24d137876e2e38c62ff21ac1eaaa3219662f8f261ce2a2df4e9a54f25c8254999d2bae7c7d70d9b54e2deab370e08a796d03d131604b9a92491c", &(0x7f0000000280)=0x7a, &(0x7f00000002c0)="f10a32bddc3b878e45017db19e4b0e46cab24bee", 0x14) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000080)="cbc2cf57afd763da4b621b232b27f5a6cad175374c5cf90eb275f933dd781d2e4c5960902320c4b6189420172f6aa0c1878b9cb4f15e4655d7b1584d69b744ba7ab2dbc717f0de70fa80df847fd7e4ea381c071dc775041b2997bae2a04bdd07f6172403c531a98266894a16012298a6de1661b0b08051", &(0x7f0000000100)=0x77, &(0x7f0000000140)="95", 0x1) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') (async)
close(r3)
kevent(r2, &(0x7f0000000340)=[{{r3}, 0xfffffffffffffffd, 0xcd, 0x10, 0x7, 0x42}], 0x2, &(0x7f0000000380)=[{{r0}, 0xfffffffffffffff8, 0xb2, 0xf0000000, 0x7fff, 0x8}, {{r3}, 0xffffffffffffffff, 0x40, 0x40000000, 0x2, 0x200}, {{r1}, 0xfffffffffffffffb, 0x44, 0x40, 0x6, 0x7fffffffffffffff}, {{}, 0xfffffffffffffff9, 0xa2, 0x2, 0x2e, 0x4}, {{r2}, 0xfffffffffffffffe, 0x4, 0x1, 0x1d3, 0x5}, {{r3}, 0xfffffffffffffff9, 0x2, 0xfffff, 0xffffffffffffa92f, 0x7}, {{r3}, 0xffffffffffffffff, 0x39, 0xf0000000, 0xbae, 0x7f}, {{r3}, 0xfffffffffffffffb, 0x24, 0x80, 0x1fb, 0x9}], 0x5, &(0x7f0000000480)={0x1, 0xfe5}) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x7f6545511316ed6f, 0xfffffffe}, {}, {}, {}, {0x1, 0xffffffff}, {}, {0x0, 0x4}, {0x0, 0x1ff}, {}, {0x0, 0x1000}, {0x3}, {}, {0x2, 0x3}, {0x2}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3, 0xfffffffe}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x2}, {0x0, 0x3}, {0x1, 0xc}, {0x1}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)
r4 = syz_open_pts() (async)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$VNDIOCSET(r5, 0x80184405, &(0x7f0000000000)={0x0, 0xffffffffffffffbd, 0x0}) (async)
ioctl$BIOCGFILDROP(r5, 0x40044278, &(0x7f0000000300)) (async)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x808, 0x6, 0x6, 0x200495, "084880fa870000bd090088d11554e90d6602ff07", 0xb52, 0x2a70}) (async)
writev(r3, &(0x7f00000029c0)=[{&(0x7f0000002a40)="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", 0x259}], 0x1)
read(r4, &(0x7f00000009c0)=""/4096, 0x1000) (async, rerun: 64)
sysctl$net_inet_ipip(&(0x7f0000000100), 0x8, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)

1.973135459s ago: executing program 5 (id=801):
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68)
unlink(&(0x7f0000000100)='./file0\x00')
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r0, 0x20000000)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000340)="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", 0xfffffffffffffe0b, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3157ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbbd57699a5f139b672f4d335d223e7d029d6ba8af63003728", 0x61, 0x406, 0x0, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002821fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000080)={&(0x7f0000000480)=[{0x3, 0xa8}, {0x42, 0x7d}], 0x2})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x8bff, 0xf, 0xb, 0x80}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x2, 0x3, 0x0)
r5 = dup(r4)
r6 = dup(r5)
setsockopt$inet_opts(r6, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4)
r7 = kqueue()
kevent(r7, &(0x7f0000000040)=[{{r7}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100)=[{{r7}, 0xfffffffffffffff9, 0x1, 0x1, 0x0, 0xad}], 0x5, 0x0)
r8 = semget(0x0, 0x2, 0x405)
semctl$GETVAL(r8, 0x2, 0x5, &(0x7f00000001c0)=""/77)
kevent(r7, &(0x7f0000000180)=[{{r7}, 0xfffffffffffffffa, 0x96, 0x2, 0x4, 0x8}, {{r7}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x6}], 0x2, &(0x7f0000000240), 0x2, &(0x7f0000000080)={0x1, 0x4})
kevent(r7, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
close(r0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

1.755252745s ago: executing program 0 (id=803):
kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0x7f}, {{}, 0xfffffffffffffff8, 0x14, 0x1, 0x10, 0x8000}], 0xf7, 0x0, 0x9b64, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0x7f}, {{}, 0xfffffffffffffff8, 0x14, 0x1, 0x10, 0x8000}], 0xf7, 0x0, 0x9b64, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0xad, 0x4, 0x100, 0x520}], 0x1, 0x0, 0x5, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil)
shmget$private(0x0, 0x3000, 0x401, &(0x7f0000ffd000/0x3000)=nil)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000004, 0x3}}) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000004, 0x3}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0)
sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) (async)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff)
clock_getres(0x0, &(0x7f00000000c0))
setrlimit(0x8, &(0x7f00000001c0)={0x8000000000000001, 0x5e})
r3 = syz_open_pts()
close(r3) (async)
close(r3)
syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5)
ioctl$TIOCCBRK(r3, 0x2000747a)
syz_open_pts()
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000007}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0)

1.648155449s ago: executing program 5 (id=808):
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x10, 0x0) (async)
mknod(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x8)
r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x4)
fcntl$setown(0xffffffffffffffff, 0x6, 0x0) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) (async)
ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, &(0x7f0000000100)=0x3)
sysctl$net_inet_tcp(&(0x7f0000003380)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, &(0x7f0000003440), 0x0)
fchmod(0xffffffffffffffff, 0x3f) (async)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00')
faccessat(r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88, 0x0) (async)
fchownat(r0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x4) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r2, 0x0, 0x13, 0xffffffffffffffff, &(0x7f0000000040)) (async)
unlinkat(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8)

1.640521517s ago: executing program 5 (id=812):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1, 0x5, 0x3, 0x8001, 0x6, 0x1, 0x100000000}, 0x0)
setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000140)=0x2)
ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xffff, 0x8610, 0x1020, 0x40009, "1e0400", 0x9, 0x4})
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000080)={&(0x7f0000000440)=[{0x8}], 0x1})
madvise(&(0x7f0000450000/0x4000)=nil, 0x4000, 0x4)
socket(0x1, 0x4000, 0x81)
mprotect(&(0x7f000022f000/0x3000)=nil, 0x3000, 0x4)

1.247970921s ago: executing program 2 (id=818):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1})
r0 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x11, 0x3, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x4)
setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000080), 0x4)
ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0))
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x4, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0xd8, 0x8, 0xffffffee, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x8}, {0x1, 0x800, 0x3}, {0x401, 0x200726, 0x1, 0x7}, {0x2, 0x6, 0x2003, 0x99}, {0x80ce1, 0x1, 0x3, 0x400006d}, {0x6, 0x803, 0x14, 0x8}, {0xffffffff, 0x82, 0x1, 0xa}, {0x20000004, 0x8001, 0xd1b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x975e616}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8a, 0x4, 0x2, 0xfff}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x2, 0x6}, {0x0, 0x1, 0x4, 0x4030004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r3 = dup2(r2, r2)
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0, 0xffffffffffffff37})
unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x8)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

1.135010842s ago: executing program 1 (id=820):
r0 = syz_open_pts()
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') (async)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00')
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x6)
r1 = open$dir(0x0, 0x2, 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
syz_open_pts() (async)
r2 = syz_open_pts()
close(r2)
syz_open_pts() (async)
r3 = syz_open_pts()
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000380)={0x7ffffbff, 0x10007beb, 0x4347e793, 0xffffff8d, "18262a040200c20023a0ff7f0c00000400", 0x1, 0x1}) (async)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000380)={0x7ffffbff, 0x10007beb, 0x4347e793, 0xffffff8d, "18262a040200c20023a0ff7f0c00000400", 0x1, 0x1})
writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x155}], 0x1) (async)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x155}], 0x1)
r4 = socket(0x18, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000100)=0x20000, 0x3) (async)
setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000100)=0x20000, 0x3)
writev(r1, 0x0, 0x0)
r5 = socket(0x1e, 0x3, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r5, 0x80206916, &(0x7f00000001c0))
munmap(&(0x7f000006f000/0x1000)=nil, 0x1000)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd00)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x172) (async)
mkdirat(0xffffffffffffffff, 0x0, 0x172)
preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0)
ioctl$FIOGETOWN(0xffffffffffffffff, 0x4004667b, 0x0)

1.132754278s ago: executing program 1 (id=822):
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8)
setsockopt(r0, 0x1e1, 0x80000000, &(0x7f0000000100)="245525b5f061e60648ff82a35517f05254942bbc50348954d6ab83af61f86d71e3344ea7ef4cccfebe64dd4d04461614d924e7d1ebdc4c299ca2db40247b5a51a0f64c0dc98836cef594ef2370f7e46a844f228a2eadb4fbc84d3b83a241ad32f0b702712f2f5704ff1c8149236c4efd19fd1192ff0838b6ea67bec351a36ea661b8ad994dd64a76b0fcbff01333136e2d027cb531d5b2130b7238d482b986cb96cc72da32fff0a5aaac7e17f76bc38b35fb3bf52c3e9fc3e41f4917f9c5c46d3ec4a670", 0xc4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1.089246001s ago: executing program 2 (id=823):
sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
close(r1)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x2)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x409789, 0x10001, 0xfffffc06, 0x80a1a1, "bb08000100f167d910501aa6f48023000000007e", 0x0, 0x4})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='r\x00')
ioctl$TIOCDRAIN(r0, 0x2000745e)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0xb}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00', 0x3)

1.088650983s ago: executing program 7 (id=824):
clock_gettime(0x2, &(0x7f0000000000))
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x5, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3)

1.086856513s ago: executing program 0 (id=825):
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
semget(0x0, 0x2, 0x59)
r0 = syz_open_pts()
close(r0)
openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="ea", 0x1)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00')
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x7fffffff, 0x8003, 0xe845, 0xffffff8c, "1826280402ff7f0d00000100040000faffffff00", 0x1, 0x1fbff})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

1.027115795s ago: executing program 2 (id=826):
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0)
select(0x40, &(0x7f00000000c0)={0x8000000000000000, 0xfe, 0x0, 0x5, 0x2, 0xff, 0xc}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, &(0x7f0000000140)="bf594fab886cb797b3c7e32d5dd5beaa3a9c0460058774b7a86256f78938c7abb46283deab027c541f03fb92ed4d6c2a401516a38ad9e69eb58074d2bdb302d02eb7a37602e0ef64c826b07d7725153d05c94bb2e3090a810e739c369f326be8bdf08473048c40590604816966c92dc0a8b14df233f5214a26787ae938c57094d79f05d9d8acc1e47baa452c7e3b", &(0x7f0000000040)=0x8e, &(0x7f0000000200)="ff3bd58224cf513b102a28dfd83016714943a5b413710927d99b055a0f384d7e526b90874b155c", 0x27)
sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x65, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xe, 0x0, 0x37)

1.02666413s ago: executing program 7 (id=827):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000000)="ed", 0x1) (async)
recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0x3, 0x1}, {0x3fe, 0x7ff, 0x1002802, 0x4d8a}, {0x3, 0x2, 0x3, 0xb4}, {0x8000008, 0xd16e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x4, 0x8, 0x2}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0xc}]}) (async, rerun: 64)
recvmmsg(r2, &(0x7f00000008c0)={0x0, 0xb}, 0x10, 0x0, 0x0) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000b00)={'./file0\x00', 0x0, 0x1, 0x3}) (async)
execve(0x0, 0x0, 0x0) (async)
r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x910, 0x0)
ioctl$KDSETRAD(r4, 0x20004b43)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 32)
r5 = socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) (async)
connect$unix(r5, &(0x7f0000000000), 0x10)
sendto(r5, &(0x7f0000000380)="98edc1cf9d242ff3974da44a7d14135bd0", 0x11, 0x0, 0x0, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r0]) (rerun: 64)

1.026513038s ago: executing program 0 (id=828):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x9, 0x7bef, 0xffffdf82, 0xffffffcf, "1826283e680023d5ff7f0d01000400000400", 0x80000000, 0x7})
select(0x27, &(0x7f0000000040)={0x8000010000000000, 0xaa71, 0x0, 0x4, 0x4, 0xfffffffffffffff8, 0x0, 0x5}, &(0x7f0000000080)={0x3, 0x4, 0x7fff, 0x2, 0x80000000000008, 0x102, 0x0, 0x497}, &(0x7f0000000100)={0xd, 0x3, 0x1, 0x80002, 0x40000000000009ef, 0x9, 0xffffffffffffffff, 0x100002}, 0x0)

1.026202046s ago: executing program 2 (id=829):
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r0 = openat$klog(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
kevent(0xffffffffffffff9c, &(0x7f0000000080)=[{{}, 0xfffffffffffffffd, 0x1, 0x2, 0x2, 0x1000000000000005}, {{r0}, 0xfffffffffffffffe, 0xc8, 0xfffff, 0x8, 0x4}], 0x9, 0x0, 0xffffffff, 0x0)
clock_gettime(0x2, &(0x7f0000000100))
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)

910.841371ms ago: executing program 2 (id=831):
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@random="8b4f69c83b01", @broadcast, [], {@ipv6={0x86dd, {0x1, 0x6, "b91d3a", 0x10, 0x2c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="4079e811670a1ec2952a4234926cce07", {[@routing={0x2b, 0x0, 0x0, 0x3}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x1c, 0x64}]}}}}})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f00000000c0)={0x742, 0xffffffff, 0xd, 0x3, "c9f75500000000003b0bca8f00075a6b47c0d100", 0xfffffffd, 0xe07})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TIOCSETA(r1, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x1ff, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x9, 0x42})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x1}, 0x2, &(0x7f0000000140)="71f94b8e5f849c7a", &(0x7f0000000000)=0x8, 0x0, 0x0)

910.392596ms ago: executing program 0 (id=832):
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1)
semget$private(0x0, 0xd, 0x80)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a)

908.520516ms ago: executing program 1 (id=834):
mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf)
open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) (async)
r0 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)
ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000000)={0x6, './file0\x00', './file1\x00'})

908.161171ms ago: executing program 7 (id=835):
r0 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040))
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), 0xc)
setrlimit(0x6, 0xffffffffffffffff)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x6, 0xfc, 0xad, 0x6}, {0x14dd, 0xff, 0x4, 0x9}, {0x7, 0x6, 0x40}, {0x8, 0x9, 0x4, 0x2}, {0x401, 0x56, 0x2}, {0x4, 0x2, 0xf7, 0xb984}, {0x7, 0xf, 0x0, 0x3}, {0x1, 0xf5, 0x9, 0x4}]})
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$SPKRTUNE(0xffffffffffffff9c, 0x20005302, &(0x7f0000000100)={0x1, 0x5})
r2 = socket$inet6(0x18, 0x2, 0xdd)
r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
ioctl$WSKBDIO_GETMAP(r3, 0xc010570d, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xf60, 0x1, 0x5, 0xc, 0xb}]})
r4 = accept$unix(0xffffffffffffff9c, &(0x7f0000000200)=@file={0x0, ""/508}, &(0x7f0000000400)=0x1fe)
getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000440), 0xc)
sendto$unix(r4, &(0x7f0000000480)="0a37cb253618bb0f9433618df06dccaa01da710052a7e33543a477eeed58e153ae98a1aebb9d92c682076105c4f50288dd298361bb1a312f7ef60ebadbd46c1fda60b02bf3bf325a3dd3b29a858c68b95e86551dc306c419ad0e09433051bad63a546fcf48dce98eb8f38edf726df2555e6a987c5d28ade2d2624b75f035a424158619e58e38443e97fc7ca15ec5d6c94a3a1cfeb45df4ccf92f0faec60c571c1e8ea5566742932b9b952cc3b3", 0xad, 0x1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x2}, 0x8)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0)
ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000640)={&(0x7f00000005c0)='./file0\x00', 0x2, &(0x7f0000000600)='./file0\x00', 0x8})
ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000680))
r6 = accept$unix(r4, &(0x7f00000006c0)=@abs, &(0x7f0000000700)=0x8)
recvfrom$unix(r6, &(0x7f0000000740)=""/250, 0xfa, 0x0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0xa)
r7 = kqueue()
ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000880)={0x10, 0x0, 0x5, 0xdd, 0x1e88, 0x1, 0x3ed1, 0x10, [{0xda4, 0xe, 0x3, 0x2}, {0x605, 0x0, 0x4e, 0x1}, {0x8, 0x100, 0x8, 0x3}, {0x9, 0x2, 0xf28, 0x8}, {0xffffff0b, 0x2, 0xffffffff, 0xa}, {0x4, 0x50, 0x1c000000, 0x9}, {0x1, 0x2400000, 0x8, 0x6}, {0x1, 0x7, 0x2, 0x8}, {0x1000, 0x3, 0xffffffff, 0x5}, {0x3, 0x3, 0x81, 0x8}, {0xffffffff, 0x6, 0x401, 0x10001}, {0x3, 0x2aa, 0x3, 0xfff}, {0x6, 0x0, 0x84fb, 0x7}, {0xffff, 0x4, 0x200, 0xffffffb8}, {0xe1eb, 0x6, 0x40000000, 0xe7b}, {0x3, 0x2, 0x4, 0x3}]})
shutdown(r6, 0x2)
r8 = open$dir(&(0x7f00000009c0)='./file0\x00', 0x0, 0xc0)
renameat(r8, &(0x7f0000000a00)='./file0\x00', r5, &(0x7f0000000a40)='./file0\x00')
ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000a80))
ioctl$KDSETLED(0xffffffffffffffff, 0x20004b42, &(0x7f0000000b00)=0x2)
pipe(&(0x7f0000000c40))
semop(0x0, &(0x7f0000000c80)=[{0x2, 0xfff, 0x1000}], 0x1)
r9 = openat$null(0xffffffffffffff9c, 0x0, 0x2, 0x0)
kevent(r5, &(0x7f0000000cc0)=[{{r7}, 0xfffffffffffffffe, 0xc, 0x1, 0xc3, 0x10bb50b2}, {{r6}, 0xffffffffffffffff, 0x41, 0x40000000, 0x8, 0x3}, {{r5}, 0xfffffffffffffffe, 0x21, 0x20000000, 0x80, 0xe}, {{}, 0xfffffffffffffffc, 0x4, 0x10, 0x1000, 0x3}, {{r2}, 0xfffffffffffffff8, 0x93, 0x2, 0x5, 0x6}, {{r1}, 0xfffffffffffffff9, 0x20, 0x40000022, 0x98d, 0x1d20cd33}], 0x4, &(0x7f0000000dc0)=[{{r2}, 0xfffffffffffffffa, 0x1c, 0x1, 0x9, 0x7}, {{r8}, 0xffffffffffffffff, 0x78, 0x1, 0x7, 0x4}, {{r9}, 0xfffffffffffffff9, 0x38, 0x2, 0x0, 0x8000000000000001}], 0x5, &(0x7f0000000e40)={0x1, 0x401})

811.672008ms ago: executing program 2 (id=836):
mknod(&(0x7f0000000000)='./file1\x00', 0x20, 0x285b9a)
r0 = kqueue()
kevent(r0, 0x0, 0x8, 0x0, 0x15, 0x0)
rmdir(&(0x7f0000000080)='./file1\x00')
r1 = socket(0x2, 0x3, 0x2f)
r2 = dup(r1)
setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x2, 0x0}, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x4003, 0x0)
sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0xe}, 0x40a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x2, 0x3, 0x0)
dup(r2)
dup2(r2, r2)
connect$unix(r4, &(0x7f0000000000), 0x10)
sendto$inet(r2, &(0x7f00000001c0)="5e1351d18b9da08c", 0x8, 0x0, 0x0, 0x0)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
read(r5, &(0x7f0000000100)=""/80, 0x50)

810.944197ms ago: executing program 7 (id=838):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x200, 0x60)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}], 0x1)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x17, 0x11, 0x40000000000, 0xfffffffffffffff8}], 0x29f, 0x0, 0x8009, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)
write(r0, &(0x7f0000000200)="093ea61c35e9ad2002000000000a", 0xe)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

810.692544ms ago: executing program 1 (id=839):
sysctl$net_inet6_ip6(&(0x7f0000002c00)={0x4, 0x18, 0x29, 0x29}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0xffffffffffffffa6, &(0x7f0000000040)="00000000e408278de8750e30ab0f2aa5bb24723d299583010a0f6267522fb6ec3cc0961b69747d789ef2e13ae911b08f", 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x1c, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xbd, 0x0, 0x1, {[@mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x4}]}}}}}}}})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x10)
setgroups(0x1, &(0x7f0000000180)=[0x0])

709.881815ms ago: executing program 0 (id=840):
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @loopback, @mcast2}}}}}}})
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000050"])
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x4)
r0 = openat$vnd(0xffffffffffffff9c, 0x0, 0x10, 0x0)
ioctl$VNDIOCGET(r0, 0x41946472, &(0x7f0000000480)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x8000, 0x575})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x0, 0x9, 0x0, 0xfffffffd, "000000001000ef0f00", 0x4f, 0x1180a})
r2 = syz_open_pts()
execve(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_open_pts()
ioctl$TIOCSTAT(r4, 0x20007465, 0x0)
r5 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x100)
ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$TIOCCDTR(r5, 0x20007478)
ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f00000008c0)=0x9)
ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000040)=0x9)
poll(&(0x7f0000000040)=[{r2, 0x4}, {r1, 0x22}, {r2, 0x40}, {r3, 0x10c}, {r4, 0x14}], 0x5, 0x3ff)

558.682412ms ago: executing program 5 (id=842):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000040)={&(0x7f00000000c0)})
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0xced, 0x8, 0x0, 0x21, 0x10, 0x51, 0x1, 0x0, 0x40000000007fffe, 0x4c11})
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
close(r2)
ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000080)={'./file0\x00', 0x0, 0x6, 0x8, 0x0, 0x1, 0x2, 0x5, 0x1, 0x2, 0x80000000, 0x1})

558.303613ms ago: executing program 1 (id=843):
sysctl$kern(&(0x7f0000000040)={0x1, 0x29}, 0x3, 0x0, 0x0, &(0x7f00000002c0)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff1006005529a1da6fda67c67469d954be811b25ec5521559154c586eefff722009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d94458c7b495fc3241fc45810c4699035f054d5660813a56e7c04eebee3db5f78afe9e000db7d95ad5ffacb91f909c983800af4a5449a61c67c75d9b4b5086fd062c4ed08d04a9b982a66c60db4adca9d4b003e18cb74ea39aeb90013d40822f24a7d83c5e4e00f1a87e88c137eaa2c922f45c16ae989a98ad33ae3a1d5ca51f0e1dd2e4e96fcff3b0ce3313a409b0526942565e5b6e251f6", 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f0000000080)="f6b4871f7ee40516bb5ae9a909a4f723f8582f61481606fd35084047d5de2556ddf351e60e8dab1a97654b7e0f14e2481cdb3dd62dde2889ebf03bbdcb1989a8532c9a66bbe06a5a642024e42f3ba3deb48c260d615d576b83f16c45dc29d3891f0cb06ac23db79efbeffea36d4035bf0a881e274f7dd1936cec5ade3f7458cee8b45e2bedcce743516eb91699a1fd6b7e933a337534fa170e35536b5a0d1b1d6f43dfef62d36aafc4e2340c8308a31e19f59e6cf6a13077d643cecf77b790a49bda6d5713bffed0488da6c01b6d87f687050458da70115676cd0c8e6ecf6a881a43801835eba6357decbd98e4", &(0x7f0000000180)=0xed, &(0x7f00000001c0)="0ab1988f050dd37b9bc3a340f980da0f880963fa8c946b86dc7bbd834b319b5f6878812cf5432d021045c406b29ad8074faeed7af7662b391bdba0789f5c290813cebf8b47ccc3b0e806911b9d3d57b505", 0x51)

554.412412ms ago: executing program 7 (id=844):
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x85c, 0x2, 0x0, 0x0, 0x3, 0x7b, 0x7, 0x8000004})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
recvmmsg(r0, 0xffffffffffffffff, 0x0, 0x1, 0x0)

544.620544ms ago: executing program 1 (id=846):
select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x6, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x82, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r2 = kqueue()
kevent(r2, 0x0, 0x8, 0x0, 0x15, 0x0)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r4 = syz_open_pts()
close(r4)
syz_open_pts()
ioctl$FIOASYNC(r4, 0x80047466, &(0x7f0000000200)=0x5)
read(r4, &(0x7f0000000400)=""/213, 0xd5)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xc4c, 0x4, 0x4, 0x200}]})
ioctl$BIOCSRTIMEOUT(r1, 0xc0307006, &(0x7f0000000080)={0x1, 0x10})

345.751915ms ago: executing program 7 (id=848):
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x40047477, &(0x7f0000000040))
r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
r1 = socket(0x11, 0x8003, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x6011, r0, 0x126a)
r2 = socket(0x800000018, 0x1, 0x0)
getsockopt(r2, 0x29, 0x38, 0x0, 0x0)
getsockopt(r1, 0x11, 0x1, 0x0, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000240)={0xf, 0x8, 0x7, {[0xff, 0x800, 0xfffffffffffffff7, 0x7, 0x6, 0xb, 0x8000000000000001, 0x8000000000000001, 0xf, 0xffff, 0x4, 0xdbf, 0x0, 0xfffffffffffff928, 0x8000000000000000, 0x2, 0x6, 0x3], [0xa5, 0x7, 0x2, 0x3, 0xb, 0x5, 0x3, 0x9, 0x1ed9a, 0x3], [0x1, 0x2, 0x1, 0x10, 0xce83, 0x9, 0x81], [0x5, 0x6, 0x8, 0x7fffffff, 0xfffffffffffff001, 0x2], [{0xf0, 0x1, 0x4a8, 0x4}, {0x7ff, 0x1, 0x4}, {0xf8, 0x700000, 0xd6c, 0x7fffffff}, {0x40, 0x6dd9, 0x1ff, 0x8000000000000001}, {0x5, 0x9, 0xffff0001, 0x3}, {0x6, 0x7, 0xfffffff9, 0x3ff}, {0x7, 0x3, 0x9, 0x3}, {0x8, 0x4, 0x10, 0x10000}], {0xff00, 0x3, 0x0, 0x60b6b1ae}, {0x2, 0x0, 0x3, 0x2}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{}, {0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8)
sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100)="688b20b5", &(0x7f00000001c0)=0x4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9)
sendmmsg(r3, &(0x7f0000001440)={0x0}, 0x10, 0x0)
sendto$unix(r2, &(0x7f00000004c0)="491d5163501eb629e52d5584f3b7c0c915c02ea076059f39e5ae4483b786cce946511cd6a8e1117d62cde490a5c1200cf548311d3f936757365166c3b726a48e0e74f92992abf4a97a37b0fcd4badee1f6d6c05bc6f895678a26dcf88ffc76d73c7af553fa1d6d7c0483bf6185e0adcaf63678f7725d8ae4638c16630bc275a7953aa92ae4b6dc0b4cb9bc0cf6ab27a712086adf8c242e7177a9cf0ef011a7f74a99", 0xa2, 0x400, &(0x7f0000000080)=@abs={0x0, 0x0, 0x0}, 0x8)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x2, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf86, 0x0, 0x4}, {0x5, 0x2000800, 0x7}, {0x6, 0x80000003, 0x80e, 0x7}, {0x3, 0x1, 0xffffffff, 0x800009c}, {0x80020cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0xb}, {0x4, 0xfffb, 0x5, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
close(r0)

343.462463ms ago: executing program 5 (id=850):
setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = syz_open_pts()
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x7ffffffe, 0xfffffffc, "ff010000004000", 0x0, 0x7fffffff})
ioctl$TIOCSTART(r0, 0x2000746e)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
socket(0x24, 0x2, 0x0) (async)
socket(0x24, 0x2, 0x0)
setsockopt(r3, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4) (async)
setsockopt(r3, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, &(0x7f0000000100)='q', 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) (async)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

86.843522ms ago: executing program 6 (id=855):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
r1 = dup2(r0, r0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x2}, 0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37)
ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000080)={0x10, 0x8, [{&(0x7f0000ffd000/0x1000)=nil, &(0x7f00007be000/0x4000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00001ae000/0x1000)=nil, 0x3}, {&(0x7f00005b1000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1}, {&(0x7f0000739000/0x3000)=nil, &(0x7f00001e9000/0x3000)=nil, 0x2000000000}, {&(0x7f000000b000/0x3000)=nil, &(0x7f0000592000/0x2000)=nil}, {&(0x7f0000537000/0x1000)=nil, &(0x7f00002be000/0x2000)=nil}, {&(0x7f0000686000/0x2000)=nil, &(0x7f00000d0000/0x2000)=nil, 0x8}, {&(0x7f000031b000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7fffffff}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3}, {&(0x7f0000071000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4}, {&(0x7f00004b6000/0x2000)=nil, &(0x7f0000293000/0x3000)=nil, 0x4}, {&(0x7f0000266000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f000010a000/0x3000)=nil, &(0x7f0000200000/0x1000)=nil, 0x2}, {&(0x7f00003e9000/0x3000)=nil, &(0x7f00001ec000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000365000/0x4000)=nil, &(0x7f0000792000/0x2000)=nil, 0x2}, {&(0x7f00007fe000/0x1000)=nil, &(0x7f000017c000/0x3000)=nil, 0x5}], './file0\x00', 0x5})
r2 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x55ca101783517172, &(0x7f0000000040)=0x5, 0x4)

86.410207ms ago: executing program 6 (id=856):
ioctl$TIOCSETAW(0xffffffffffffff9c, 0x802c7415, &(0x7f0000000000)={0xffffff66, 0x37, 0xba5, 0x5, "5b295df41151ce3ac16b461c788e9bde42f5ef08", 0x3ff, 0x400}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[0x1, 0x92, 0x101, 0x400, 0xffffffff, 0x2, 0x8, 0x6]}) (async)
write(r0, &(0x7f0000000100)="2d69be4fe82fc70555b4130261183a98f2aa60cb9f5a9371f295238ed11030374337ea81e05dea15fcff45283cf5ecaee7cc7067655cc60b920cf4726f184e9e475b3fab17d456053a4dfa", 0x4b) (async)
r1 = fcntl$getown(r0, 0x5)
fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x1, 0x1, 0x3ddabd7, 0x4, r1})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
execve(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='Q\')\x00', &(0x7f0000000280)='/dev/bpf\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='tap', &(0x7f0000000340)='tap', &(0x7f0000000380)='/dev/bpf\x00']) (async)
ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000400)=0x1000)
getsockname$inet(r0, &(0x7f0000000440), &(0x7f0000000480)=0xc) (async)
getpgrp() (async)
rmdir(&(0x7f00000004c0)='./file0/file0\x00')
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000540)={0x10, 0x9, [{&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x5d80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000feb000/0x13000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000feb000/0x3000)=nil, 0x1}, {&(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x845}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0xa1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fef000/0x6000)=nil, 0x2}, {&(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0xb}, {&(0x7f0000fed000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, 0x5}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000feb000/0x2000)=nil, 0x2}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x80000000}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x2}], './file0\x00', 0x7}) (async)
r3 = accept$inet(0xffffffffffffff9c, &(0x7f0000000740), &(0x7f0000000780)=0xc)
mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x4411, r3, 0x2) (async)
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$WSKBDIO_SETMAP(r4, 0x8010570e, &(0x7f0000000840)={0x4, &(0x7f0000000800)=[{0xed, 0x27b5, 0x6, 0x1, 0xcb1a}, {0x4, 0xfff7, 0x0, 0x2, 0x9}, {0x3ca7, 0x2, 0x6, 0x6, 0x6}, {0xc, 0x8001, 0x0, 0xc, 0x1}]}) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000008c0)={0x4, &(0x7f0000000880)=[{0x8, 0x10, 0xff, 0x3ff}, {0x7, 0x1, 0x6, 0x4}, {0x132, 0xf, 0x1d, 0x8}, {0x958b, 0x4, 0x2, 0x9}]}) (async)
unveil(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='c\x00') (async)
ioctl$WSKBDIO_GETKEYREPEAT(r4, 0x400c5708, &(0x7f0000000980)) (async)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000a40)={0x9, &(0x7f00000009c0)=[{0x7, 0xf8, 0x4, 0x7}, {0x9700, 0x8, 0x6, 0x7}, {0xfffe, 0x5, 0x3, 0x80000001}, {0x4, 0x97, 0xff, 0x401}, {0x5, 0x8, 0x4, 0x3000}, {0x2c, 0x4, 0x1, 0x8}, {0x5, 0x8, 0x0, 0x9}, {0x1, 0x4, 0x8, 0x6}, {0x9, 0x6, 0xfb, 0x1}]})
r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000a80), 0x100, 0x0)
ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000ac0)={0x1, 0x200, 0x3, 0x8001, "1b8e71933d7bc75cccdabf3e2093223bc71a1744", 0x100, 0xfffffffd}) (async)
pipe(&(0x7f0000000b00)={<r6=>0xffffffffffffffff})
ioctl$VT_GETACTIVE(r6, 0x40047607, &(0x7f0000000b40)) (async)
recvfrom(r3, &(0x7f0000000b80)=""/225, 0xe1, 0x43, &(0x7f0000000c80)=@un=@file={0x1, './file0\x00'}, 0xa)
syz_emit_ethernet(0x237, &(0x7f0000000cc0)={@broadcast, @remote, [{[{0x88a8, 0x1, 0x1, 0x2}], {0x8100, 0x2, 0x1, 0x1}}], {@ipv6={0x86dd, {0x5, 0x6, "e39533", 0x1f9, 0x6c, 0xa2, @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0xe3a4b003316a32fd, 0x0, 0x81, 0x1, 0x0, 0x6, 0x66}, @hopopts={0x3, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}, @fragment={0x2e, 0x0, 0x8, 0x0, 0x0, 0xe, 0x67}, @hopopts={0x88, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x1a59}, @jumbo, @enc_lim={0x4, 0x1, 0x6}, @generic={0xff, 0xe1, "8260f62dbb9ec69020639449ae9f334274d74ba3713c538f07e07e6c90d917081df7bf0a436b0c7c2198e98bc71e1ed47aff42f9a71fc85c566aed8353779b8fdaa3bb2f233618b5a8e346c58f945c209d9cb96f1c51638d1970daeefa66d17dfd1b176cf08ae1beda5d6dbca7f2d3dc14c5061631b5261580cba4aab817d202c89c9c018dadbd726d3ad0d6af6ca64641ae16a92b3d4f0406ee14cf7dcb88fd1d0be0634dab0ebb1b521b0fd12b5940f83664caeedacc3e9d3b0a1f323c10fed6fa04775901bb23277f96e6f38fd3cf0d77c9247f6bdb382c46717132489ae8e1"}]}, @fragment={0x37, 0x0, 0x1, 0x0, 0x0, 0x8, 0x67}, @routing={0xc, 0x12, 0x0, 0x4, 0x0, [@rand_addr="707904c2fafad6ce71d9e173f2d5cfc4", @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast1, @mcast1, @rand_addr="8e1ef21eade6fff5ed7e736e578d2464", @remote={0xfe, 0x80, '\x00', 0x0}, @empty, @remote={0xfe, 0x80, '\x00', 0x0}]}], @icmpv6=@ni={0x8b, 0x0, 0x0, 0xa, 0x40, 0x53, "fa5ddada033f8d2ba730b5d33bf29679c685f3a594b080623c3265bbfb40fe5a9d1f027229e7a12f9a"}}}}}}) (async)
pipe(&(0x7f0000000f00))
writev(0xffffffffffffff9c, &(0x7f0000001040)=[{&(0x7f0000000f40)="7a0bb058168fefa09d6adf89ac8f8d7978e9564efc1f63aec9e43239df6de58f48023dad101665e0e85136df56a990e6be7288d1bb88bdac41c0d6eb277aebb62869a8fff9645102cfa7bcec9fbff1dda7725407659da82dfb41e25ee6749d462045dd392164a8415e7bad72128b05867e4c536a6715651d48b91ada566fdc618953b45b5659809be511640972402a0a583b9d3e8c62d48a0409ffa61565f6518dc40f2fa672797bf2c9ba66c7bbb3d9374eb1fe476e4c541209189b525776736b6a99494f660e247431e97f606a8497d7", 0xd1}], 0x1)

5.501971ms ago: executing program 6 (id=857):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x6, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0xfffd, {[@mss={0x2, 0x4, 0x4}]}}}}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
syz_emit_ethernet(0x10a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6027010000d43a008a211dd1450021b07f5a1957de740000fe8000000000000000000000000000aa02009078000000006080000000000000fe8000000000000000000000000000aa00000000000000000000ffff000000000001000000000000c204000e0000c2"])

1.255859ms ago: executing program 6 (id=858):
setitimer(0x2, &(0x7f0000000100)={{0xfff, 0x1}, {0x3, 0x3}}, 0x0) (async)
sysctl$kern(&(0x7f0000000100)={0x1, 0x36}, 0x2, &(0x7f0000000080)="71f91e3871ac0058bc5a91501d94a34b8e5f09cf71b59c7afec37082", &(0x7f0000000040)=0x58, 0x0, 0x0)

256.954µs ago: executing program 6 (id=859):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x87, 0x400f}]})
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x8)
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(r0, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000695000/0x3000)=nil, &(0x7f0000597000/0x2000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x4}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000697000/0x4000)=nil}, {&(0x7f000069e000/0x1000)=nil, &(0x7f0000698000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f000069c000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x9}], './file0\x00'})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000b80)="cc60d3d79a1a7122a5fb9de9ea6ca0743968bbfb3f23cea8b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c547759764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a67f9c605ab2829d78ea25719006ed6e9679af3465e713b4a33ead9603734cd6e81d74cfc43998d28a7ba7f2abc822b880e15d945a2fad6d4ceb14d6de3ad1748124e61575f044947d2603ed240aed84070e5899d1d1ad0d8fb9434e01bb5523d8354d134c82a94a872455393f2d8cbec2ed9303c4aa91b00"/285, 0x11d}, {&(0x7f0000000200)="b389e5aeb7b42eab8dd001567bf060f918", 0x11}], 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r2, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r3 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
r4 = socket(0x18, 0x3, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x7, 0x9}, {0xfffc, 0x8000000000002005}}, 0x0)
ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100))
r5 = socket(0x18, 0x3, 0x0)
setsockopt(r5, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4)
sendmsg$unix(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x6}, 0x807)
listen(r5, 0x1)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TIOCSETA(r6, 0xc0284457, &(0x7f00000000c0)={0xfffeffff, 0xfffffffb, 0xfefffffc, 0xfffefffc, "0800000000060000000100002afb54b90f1e0400", 0x5})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3}, {0x0, 0x2000}, {0x2, 0xfffffffe}, {}, {0x0, 0x200}, {0x3}, {0x0, 0xfffffffd}, {0x1, 0xa}, {0x2}]})
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)="fdd364abf3b218739ab8be8cbb27c96916dc906fe65322af890401643c", 0x1d}], 0x1, 0x807d)
execve(0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)

0s ago: executing program 6 (id=860):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
r1 = msgget$private(0x0, 0x460)
r2 = getuid()
chown(&(0x7f0000000180)='./file0\x00', r2, 0xffffffffffffffff)
setuid(r2)
msgsnd(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="02ffff000000000025053098965bdbedd9977c0fb5931834a33970cbe201ba498dc178c48f914edb25aae724ff23aaae9720146f7dd9b69779b27325b5e9966529f7f6bf836813293a59a9e27bc6e9fcfbbba6743e964838ba2256d2e65cc51dbff4411e99b975d50dd43fb8f4da19891aa39d34c3a01689cbaa9c6bc2794a67e15c83432d9ac1a078e7d1ffee5ac709b4e800fe041b02f5c617390314d6eeea7cd48790c360c787a8b532e2673ccc93cafe24dc65cc68525f07d51dba746023e12c15a72bf9f66a799f879babfdce5100f5ee87a364336de9000000000000000000"], 0xe2, 0x800)
msgrcv(r1, &(0x7f0000000e40)={0x0, ""/254}, 0x106, 0x0, 0x1800)
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f0000000140)="b1000502000000000000001100010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0)
r4 = accept(r3, 0x0, &(0x7f0000000000))
accept(r4, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc)
r5 = socket(0x18, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8)
fcntl$getown(r5, 0x5)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts.
uvn_flush: obj=0xfffffd806b80b120, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pmap_unwire: wiring for pmap 0xfffffd806b79dd00 va 0x200000001000 didn't change!
malloc(): allocation too large, type = 6, size = 287762939904
pppx: unable to set addresses for pppx1, error=17
in6_pcbnotify: Huh?  Thought we never got called with mapped!
pppx: unable to set addresses for pppx1, error=17
denied attempt to set clock back 4229876870 seconds
WARNING: thread `nfsio' (41072) exits with status -1
WARNING: thread `nfsio' (147139) exits with status -1
WARNING: thread `nfsio' (16474) exits with status -1
WARNING: thread `nfsio' (349830) exits with status -1
WARNING: thread `nfsio' (335641) exits with status -1
WARNING: thread `nfsio' (514449) exits with status -1
WARNING: thread `nfsio' (360784) exits with status -1
WARNING: thread `nfsio' (249380) exits with status -1
WARNING: thread `nfsio' (251347) exits with status -1
WARNING: thread `nfsio' (129893) exits with status -1
WARNING: thread `nfsio' (238783) exits with status -1
WARNING: thread `nfsio' (279032) exits with status -1
WARNING: thread `nfsio' (372440) exits with status -1
WARNING: thread `nfsio' (25655) exits with status -1
WARNING: thread `nfsio' (382952) exits with status -1
WARNING: thread `nfsio' (382159) exits with status -1
WARNING: thread `nfsio' (350113) exits with status -1
WARNING: thread `nfsio' (379536) exits with status -1
WARNING: thread `nfsio' (257753) exits with status -1
WARNING: thread `nfsio' (192012) exits with status -1
pppx: unable to set addresses for pppx1, error=17
uvm_fault(0xfffffd806b79e7c0, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      dt_ioctl_record_stop+0x108:     movq    0(%r14),%r14
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 213960  35282      0      0x1000  0x4080000    1  syz-executor
dt_ioctl_record_stop(ffff80000148b000) at dt_ioctl_record_stop+0x108
dtclose(11e5f,81,2000,ffff80002a322fd0) at dtclose+0x109
spec_close(ffff800038821190) at spec_close+0x466
VOP_CLOSE(fffffd805cdec700,81,fffffd80097fb3a8,ffff80002a322fd0) at VOP_CLOSE+0x132
vn_closefile(fffffd805dca41e8,ffff80002a322fd0) at vn_closefile+0x12b
fdrop(fffffd805dca41e8,ffff80002a322fd0) at fdrop+0x121
closef(fffffd805dca41e8,ffff80002a322fd0) at closef+0x192
fdfree(ffff80002a322fd0) at fdfree+0x116
exit1(ffff80002a322fd0,0,0,1) at exit1+0x576
sys_exit(ffff80002a322fd0,ffff800038821500,ffff800038821450) at sys_exit+0x1a
syscall(ffff800038821500) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x79ca7ea48420, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffffd806b79e7c0, 0x0, 0, 1) -> e
ddb{0}> trace
dt_ioctl_record_stop(ffff80000148b000) at dt_ioctl_record_stop+0x108
dtclose(11e5f,81,2000,ffff80002a322fd0) at dtclose+0x109
spec_close(ffff800038821190) at spec_close+0x466
VOP_CLOSE(fffffd805cdec700,81,fffffd80097fb3a8,ffff80002a322fd0) at VOP_CLOSE+0x132
vn_closefile(fffffd805dca41e8,ffff80002a322fd0) at vn_closefile+0x12b
fdrop(fffffd805dca41e8,ffff80002a322fd0) at fdrop+0x121
closef(fffffd805dca41e8,ffff80002a322fd0) at closef+0x192
fdfree(ffff80002a322fd0) at fdfree+0x116
exit1(ffff80002a322fd0,0,0,1) at exit1+0x576
sys_exit(ffff80002a322fd0,ffff800038821500,ffff800038821450) at sys_exit+0x1a
syscall(ffff800038821500) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x79ca7ea48420, count: -12
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff8000388210c0
rbx                              0x1
rdx                                0
rcx               0xffff80002a322fd0
rax               0xffffffff83833028    dt_prov_syscall
r8                                 0
r9                                 0
r10               0xd5027be27c4af096
r11               0x222eadec045dd45f
r12                                0
r13                                0
r14                                0
r15               0xffff80000151ba00
rip               0xffffffff826259b8    dt_ioctl_record_stop+0x108
cs                               0x8
rflags                       0x10207    __ALIGN_SIZE+0xf207
rsp               0xffff800038821090
ss                              0x10
dt_ioctl_record_stop+0x108:     movq    0(%r14),%r14
ddb{0}> show proc
PROC (syz-executor) tid=173851 pid=4390 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=86, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80002a322fd0 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff80002a322aa0,0xffff800032c0b4f8
    process=0xffff80003c4e9838 user=0xffff80003881c000, vmspace=0xfffffd806b79e7c0
    estcpu=36, cpticks=4, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 35282  399792  28782      0  3      0x3000  suspend       syz-executor
 35282  213960  28782      0  7   0x4081000                syz-executor
 35282  405539  28782      0  3   0x4081000  inode         syz-executor
 42327   73190  48019      0  3        0x80  nanoslp       syz-executor
 42327  300655  48019      0  3   0x4000080  ttyin         syz-executor
 42327  121575  48019      0  3   0x4000080  fsleep        syz-executor
 44555  164200  40545      0  3        0x80  nanoslp       syz-executor
 44555  456188  40545      0  3   0x4000080  kqsel         syz-executor
 44555  460784  40545      0  3   0x4000080  fsleep        syz-executor
 44555  338441  40545      0  3   0x4000080  fsleep        syz-executor
 21770  220329  54734      0  3        0x80  nanoslp       syz-executor
 21770  434293  54734      0  3   0x4000080  ttyin         syz-executor
 21770  271173  54734      0  3   0x4000080  fsleep        syz-executor
 21770  185514  54734      0  3   0x4000080  fsleep        syz-executor
 28782  167243  70424      0  3        0x82  nanoslp       syz-executor
 54734  427441  70424      0  3        0x82  nanoslp       syz-executor
 74311   24654      0      0  3     0x14200  bored         sosplice
 40545  414461  70424      0  3        0x82  nanoslp       syz-executor
 41966   17384  70424      0  3        0x82  nanoslp       syz-executor
 87854  293257  70424      0  3        0x82  nanoslp       syz-executor
 23726  420569  70424      0  3        0x82  wait          syz-executor
 12042  202365  70424      0  3        0x82  nanoslp       syz-executor
 48019  247135  70424      0  3        0x82  nanoslp       syz-executor
 70424   16193  32453      0  3        0x82  kqread        syz-executor
 32453  501296  40082      0  3    0x10008a  sigsusp       ksh
 40082  141379  23006      0  3        0x98  kqread        sshd-session
 23006  319361  71893      0  3        0x92  kqread        sshd-session
 22586   84721      1      0  3    0x100083  ttyin         getty
 71893  290229      1      0  3        0x88  kqread        sshd
 29691  368212  73101     74  3   0x1100092  bpf           pflogd
 73101  331423      1      0  3        0x80  sbwait        pflogd
 36654  130843  20643     73  3   0x1100090  kqread        syslogd
 20643   97920      1      0  3    0x100082  sbwait        syslogd
 22884  158082      1      0  3    0x100080  kqread        resolvd
 97270  261668   9811     77  3    0x100092  kqread        dhcpleased
 15984  158226   9811     77  3    0x100092  kqread        dhcpleased
  9811  294581      1      0  3        0x80  kqread        dhcpleased
 62715  141579      0      0  3     0x14200  pause         smr
 77100   62077      0      0  3     0x14200  pgzero        zerothread
 96590  319255      0      0  3     0x14200  aiodoned      aiodoned
 30932  167668      0      0  3     0x14200  syncer        update
 38567  218412      0      0  3     0x14200  cleaner       cleaner
 73306  280655      0      0  3     0x14200  reaper        reaper
 37256  279576      0      0  3     0x14200  pgdaemon      pagedaemon
 80269  231115      0      0  3     0x14200  bored         viomb
 35822  174353      0      0  3  0x40014200  acpi0         acpi0
 22726  104488      0      0  3  0x40014200                idle1
 57514  152440      0      0  3     0x14200  bored         softnet7
 72402  185751      0      0  3     0x14200  bored         softnet6
 16633  339893      0      0  3     0x14200  bored         softnet5
 26087  132934      0      0  3     0x14200  bored         softnet4
 19041  105783      0      0  3     0x14200  bored         softnet3
 23584  251403      0      0  3     0x14200  bored         softnet2
 66255  256144      0      0  3     0x14200  bored         softnet1
 54576  375163      0      0  3     0x14200  bored         softnet0
  3512  228753      0      0  3     0x14200  bored         systqmp
 82476  122034      0      0  3     0x14200  bored         systq
 79028    5560      0      0  3     0x14200  tmoslp        softclockmp
 51630   24166      0      0  3  0x40014200  tmoslp        softclock
 21868  440399      0      0  3  0x40014200                idle0
     1  302509      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
Process 35282 (syz-executor) thread 0xffff80002a322570 (213960)
exclusive rrwlock inode r = 0 (0xfffffd806e31e670)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vn_write+0x18f
#6  dofilewritev+0x242
#7  sys_write+0xa2
#8  syscall+0xbd4
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10239  11104K   11280K 166960K     12042        0
            pcb    18     16K      18K 166960K       240        0
         rtable   157      8K       8K 166960K       414        0
             pf    39     18K  131089K 166960K       142        0
         ifaddr    37      6K       7K 166960K       107        0
        ifgroup    64      2K       2K 166960K       174        0
         sysctl     4      1K       9K 166960K        11        0
       counters    76     37K      38K 166960K       184        0
       ioctlops     0      0K       4K 166960K      1684        0
            iov     0      0K      16K 166960K        89        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1365     86K      86K 166960K      2022        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        22        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        24        0
        dirhash    12      2K       2K 166960K        24        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     240K 166960K      1038        0
          sigio     0      0K       0K 166960K        60        0
           proc    72    115K     163K 166960K       703        0
        subproc    72      4K       4K 166960K        94        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       141        0
       in_multi    61      4K       7K 166960K       165        0
    ether_multi     1      0K       0K 166960K         7        0
            mrt     2      0K       0K 166960K         8        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    97    440K     440K 166960K        97        0
           exec     0      0K       1K 166960K       585        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   266    160K     177K 166960K     11179        0
       UVM aobj    12      2K       2K 166960K        12        0
     pinsyscall    43     86K     101K 166960K      2180        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        55        0
            NDP    14      0K       2K 166960K        71        0
           temp    61   8651K    8747K 166960K     50699        0
         kqueue    16     26K      30K 166960K       191        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       95    0       91     1     0     1     1     0     8    0
rtentry    176      151    0       92     5     0     5     5     0     8    0
unpcb      144      721    0      701     6     5     1     6     0     8    0
syncache   336       10    0       10     3     2     1     1     0     8    1
tcpqe       32        3    0        3     1     1     0     1     0     8    0
tcpcb      736      414    0      406    13     6     7     7     0     8    6
arp        128       19    0       11     1     0     1     1     0     8    0
inpcb      328     1080    0     1068    15     8     7     7     0     8    5
nd6        144       27    0       15     1     0     1     1     0     8    0
pkpcb       40        9    0        9     2     1     1     1     0     8    1
kcovpl      48       10    0        2     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     1     0     1     0     8    0
ppxss      1192      42    0       40     3     2     1     1     0     8    0
pppxif     1504       9    0        7     3     2     1     1     0     8    0
pffrag     232       10    0        4     1     0     1     1     0   482    0
pffrnode    88        7    0        2     1     0     1     1     0     8    0
pffrent     40       47    0       40     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       87    0       20     1     0     1     1     0     8    0
pfstkey    128       87    0       20     3     0     3     3     0     8    0
pfstate    384       87    0       20     7     0     7     7     0     8    0
pfrule     1344      24    0       18     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     1     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      678    0      367    29     6    23    29     0     8    1
art_table   40      681    0      367     5     0     5     5     0     8    0
art_node    32      151    0       98     1     0     1     1     0     8    0
sysvmsgpl   40       15    0        5     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112       22    0       12     1     0     1     1     0     8    0
shmpl      112        9    0        0     1     0     1     1     0     8    0
dirhash    1024      25    0        8     3     0     3     3     0     8    0
dino2pl    256     3332    0     1822    95     0    95    95     0     8    0
ffsino     296     3332    0     1822   117     0   117   117     0     8    0
nchpl      144     4749    0     3044    64     0    64    64     0     8    0
rtmask      32        6    0        6     3     2     1     1     0     8    1
uvmvnodes   80     3666    0        0    75     0    75    75     0     8    0
vnodes     216     3666    0        0   204     0   204   204     0     8    0
namei      1024   16179    0    16179     4     3     1     2     0     8    1
percpumem   16      107    0       54     1     0     1     1     0     8    0
kstatmem   264      106    0       74     3     0     3     3     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72        9    0        9     3     2     1     1     0     8    1
scxspl     216    22878    0    22878     7     6     1     5     1     8    1
plimitpl   152      347    0      328     1     0     1     1     0     8    0
sigapl     424     1351    0     1296     9     0     9     9     0     8    1
knotepl    120      415    0        0    13     0    13    13     0     8    0
kqueuepl   224      554    0      539     7     5     2     5     0     8    0
pipepl     344      187    0      159     3     0     3     3     0     8    0
fdescpl    528     1306    0     1274     3     0     3     3     0     8    0
filepl     160     8293    0     8048    22     8    14    18     0     8    3
lockfpl    104      410    0      408     1     0     1     1     0     8    0
lockfspl    48      125    0      123     1     0     1     1     0     8    0
sessionpl  144       29    0       20     1     0     1     1     0     8    0
pgrppl      48       58    0       41     1     0     1     1     0     8    0
ucredpl    104     1253    0     1239     1     0     1     1     0     8    0
zombiepl   144     1479    0     1474     1     0     1     1     0     8    0
processpl  1232    1351    0     1296     7     1     6     7     0     8    0
procpl     664     2900    0     2835     9     0     9     9     0     8    2
sosppl     168       11    0       11     3     2     1     1     0     8    1
sockpl     752     1932    0     1895    30    19    11    23     0     8    7
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     121    0        0    16     0    16    16     0     8    0
mcl2k2     2112       2    0        0     1     0     1     1     0     8    0
mcl2k      2048      34    0        0     5     0     5     5     0     8    0
mtagpl      96        4    0        0     1     0     1     1     0     8    0
mbufpl     256      212    0        0    13     0    13    13     0     8    0
bufpl      280     8791    0     2648   440     0   440   440     0     8    0
anonpl      32    10376    0        0    84     0    84    84     0   246    0
amapchunkpl 152   37315    0    36747    43    10    33    33     0   158   10
amappl16   200     4124    0     4016    28    16    12    23     0     8    6
amappl15   192        7    0        7     1     1     0     1     0     8    0
amappl14   184      127    0      115     1     0     1     1     0     8    0
amappl13   176        5    0        5     2     2     0     1     0     8    0
amappl12   168     1981    0     1948     3     1     2     2     0     8    0
amappl11   160       76    0       62     1     0     1     1     0     8    0
amappl10   152       27    0       26     2     1     1     1     0     8    0
amappl9    144      254    0      253     1     0     1     1     0     8    0
amappl8    136       26    0       24     1     0     1     1     0     8    0
amappl7    128      137    0      124     1     0     1     1     0     8    0
amappl6    120      215    0      212     1     0     1     1     0     8    0
amappl5    112      132    0      122     1     0     1     1     0     8    0
amappl4    104      337    0      317     1     0     1     1     0     8    0
amappl3     96     7293    0     7165     5     1     4     4     0     8    0
amappl2     88      704    0      642     2     0     2     2     0     8    0
amappl1     80    13001    0    12404    17     2    15    16     0     8    0
amappl      88    10284    0    10092     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      258    0      258     4     3     1     1     0     8    1
dma64       64        7    0        7     2     2     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       11    0        0     1     0     1     1     0     8    0
uaddrrnd    24     1306    0     1274     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1306    0     1274     1     0     1     1     0     8    0
vmmpekpl   168    12540    0    12500     3     0     3     3     0     8    0
vmmpepl    168    88036    0    85887   109     2   107   109     0   357   12
vmsppl     488     1305    0     1274     5     0     5     5     0     8    0
rwobjpl     80    28685    0    23967    98     1    97    97     0     8    0
pdppl      4096    2619    0     2548   109    38    71    83     0     8    0
pvpl        32    17688    0        0   145     2   143   144     0   265    0
pmappl     256     1305    0     1274     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      303    0       58     8     0     8     8     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
dt_ioctl_record_stop(ffff80000148b000) at dt_ioctl_record_stop+0x108
dtclose(11e5f,81,2000,ffff80002a322fd0) at dtclose+0x109
spec_close(ffff800038821190) at spec_close+0x466
VOP_CLOSE(fffffd805cdec700,81,fffffd80097fb3a8,ffff80002a322fd0) at VOP_CLOSE+0x132
vn_closefile(fffffd805dca41e8,ffff80002a322fd0) at vn_closefile+0x12b
fdrop(fffffd805dca41e8,ffff80002a322fd0) at fdrop+0x121
closef(fffffd805dca41e8,ffff80002a322fd0) at closef+0x192
fdfree(ffff80002a322fd0) at fdfree+0x116
exit1(ffff80002a322fd0,0,0,1) at exit1+0x576
sys_exit(ffff80002a322fd0,ffff800038821500,ffff800038821450) at sys_exit+0x1a
syscall(ffff800038821500) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x79ca7ea48420, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
__mp_lock(ffffffff8387c130) at __mp_lock+0x1a3
__mp_acquire_count(ffffffff8387c130,1) at __mp_acquire_count+0x58
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8
biowait(fffffd8078a7b6b0) at biowait+0xc6
bwrite(fffffd8078a7b6b0) at bwrite+0x2e7
ffs2_balloc(fffffd806e31e5d0,488000,4000,fffffd80097fb3a8,2,ffff80003c4650b8) at ffs2_balloc+0x18b4
ffs_write(ffff80003c465140) at ffs_write+0x4f9
VOP_WRITE(fffffd8066c87618,ffff80003c4652f8,7,fffffd80097fb3a8) at VOP_WRITE+0x101
vn_write(fffffd806b8e7b78,ffff80003c4652f8,0) at vn_write+0x1d3
dofilewritev(ffff80002a322570,7,ffff80003c4652f8,0,ffff80003c4653b0) at dofilewritev+0x242
end trace frame: 0xffff80003c465380, count: 0
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
__mp_lock(ffffffff8387c130) at __mp_lock+0x1a3
__mp_acquire_count(ffffffff8387c130,1) at __mp_acquire_count+0x58
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8
biowait(fffffd8078a7b6b0) at biowait+0xc6
bwrite(fffffd8078a7b6b0) at bwrite+0x2e7
ffs2_balloc(fffffd806e31e5d0,488000,4000,fffffd80097fb3a8,2,ffff80003c4650b8) at ffs2_balloc+0x18b4
ffs_write(ffff80003c465140) at ffs_write+0x4f9
VOP_WRITE(fffffd8066c87618,ffff80003c4652f8,7,fffffd80097fb3a8) at VOP_WRITE+0x101
vn_write(fffffd806b8e7b78,ffff80003c4652f8,0) at vn_write+0x1d3
dofilewritev(ffff80002a322570,7,ffff80003c4652f8,0,ffff80003c4653b0) at dofilewritev+0x242
sys_write(ffff80002a322570,ffff80003c465460,ffff80003c4653b0) at sys_write+0xa2
syscall(ffff80003c465460) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x26d897ae310, count: -17