last executing test programs:

7.109291651s ago: executing program 1 (id=35):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0xffff5f70)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x3, 0xfffffffd}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000c00)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00002b80fe8000000000000000000000000000aaff0200000000000000000000004a31802b436e19"])
pipe2(&(0x7f0000000980)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
write(r1, &(0x7f00000000c0)="c3", 0xffffffed)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffee2)
writev(r0, &(0x7f0000000900)=[{&(0x7f0000000100)="6d84144dc267a40043ba243722dfd730df035d820854adbad02131921a679b71248e01c6963779173597d6c13e27cf488a24b2d2621641aaef7e180fe932d903b5ade62993428369b161a802b88c5a808b951a", 0x53}, {&(0x7f0000000180)="33961a068043d574fecfdd069ff5eebe81cbe407120cd889bbbcba0933c8e4ef78493ec50cf27f1db9f67fb09c6217b349b22fd31d67485622cdab2735c88f531360c8f3f419473d2c7ec4945aa9763b30b12c8864aba00d60d463e2735e3882d9404adc63abc39f5886b2f8be4010397495d4761f7a537ebf1532419695815763c0acaea54c1ff6bd7e2d49fd82d83856c4bb6ba42394eed3d198ab3886b13113cdb8f63c82af82bc", 0xa9}, {&(0x7f0000000080)="d22d0060e6ac052ceb2fae186661f0", 0xf}, {&(0x7f0000000240)="39ba4afe9b8a385164e3cb9c202eba6d795e116ae4d0adcb64b18022ef6353242c326634901567ae2dd40e30daac3627d71df00a036b0bcedf9b31c6a98df0d0d0acf44e4942c0f57a3ea594e474c9a2bb07493acef447afc2243c0806a582fa7537d6347b9e3366ce3b7d7abbca9c227dd97871144cddf80a8740cca795ade0ec8857e4d20ceb0a1d6629649ea7b75322a881227413b0da4150aed173e5242ebdb23b79cf57a491d04599fb0805cfcb808d2d5e14ed1b102ee91a09d1dfb83744c46efc3eb0bf4891079d138095dbeab4c61d1ebefdb8f93cf5e5fa1bd3d27f73211ec6463879cacf0e122f4c18661cc01f26", 0xf3}, {&(0x7f0000000340)="aa5253bbd6ecc5f4d6b9f25c2168ec1e9959204f2ab8cb426df757f2c332aa7951d2e442e9e415eb4b11f89d5b082f6887a0c1f54eee7728cdebdce148ca073dccf1", 0x42}, {&(0x7f00000003c0)="be372bc447a959643c8716c410f8e5ef9e4bbddbb23874ad38086e79e3d4526e849842f6d2f769c21a5c008662175d956096076c1832ee4f0bcb5160728e9d83079f6e9dff39bf8467ef2d5bc72be38bf5798dbe412270f208457a0fa49778e7b4f9b9619afd553f9c28f457864e40208bd812db12ed3e7e1f80e1647c1a8b0254053cceb4bbf9d76c2420e09b2ee7df99b96d42cfeb8e779ecf5c18089eb3d5493bb65e6a3dc827e512b316ff366873a98f757d48bba3d24a4faae41ad82f", 0xbf}, {&(0x7f00000008c0)="bf779e9f996070dda6ed6df2ab4188e48334", 0x12}], 0x7)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$WSDISPLAYIO_GETSCREEN(r2, 0xc0245755, &(0x7f00000009c0)={0x3, './file0\x00', './file0aaaaaaaaa'})
ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000480)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x8000, 0x63})
read(r2, 0x0, 0x0)

5.862731369s ago: executing program 1 (id=41):
sysctl$kern(0x0, 0x0, &(0x7f0000000380)="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", &(0x7f0000000080)=0x12e, 0x0, 0x0) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000380)="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", &(0x7f0000000080)=0x12e, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
seteuid(0x0) (async)
seteuid(0x0)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa7210e10bc3c9de9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r0)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0)
pwritev(r1, &(0x7f0000001840)=[{0x0, 0x5b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
mmap(&(0x7f00001f7000/0x4000)=nil, 0x4000, 0x2, 0x5012, 0xffffffffffffffff, 0x10001)
socket(0x18, 0x1, 0x0) (async)
r2 = socket(0x18, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x2, r2)
close(r3) (async)
close(r3)
open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9c, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x7, 0x2000000000000004}, 0x0, 0x0, 0x0)
r6 = kqueue()
kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r7 = open(&(0x7f0000000100)='./file0\x00', 0x8, 0xec)
ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$BIOCSRTIMEOUT(r7, 0xc0307004, &(0x7f00000000c0)={0x2, 0x101})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
socket(0x2, 0x2, 0x0) (async)
r8 = socket(0x2, 0x2, 0x0)
bind(r8, 0x0, 0x0) (async)
bind(r8, 0x0, 0x0)
ioctl$BIOCPROMISC(r3, 0x20004269)
chroot(&(0x7f0000000080)='./file0\x00')
recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0)

5.350059631s ago: executing program 6 (id=62):
r0 = socket(0x2, 0x3, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
connect$unix(r0, &(0x7f0000000000), 0x10)
recvmmsg(r0, &(0x7f0000000380)={&(0x7f0000000340)={&(0x7f0000000040)=@in, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f00000001c0)=""/100, 0x64}, 0x6}, 0x10, 0x3, &(0x7f00000003c0)={0x3, 0x8})
write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea)

5.333840903s ago: executing program 6 (id=65):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', r0, 0x1})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x81, 0x8f, 0x5, 0x6}, {0x6, 0x81, 0x4, 0xf3d}]})
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @loopback, @mcast2}}}}}}})
ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x8, 0x0)
clock_settime(0x4, &(0x7f0000000000)={0x1, 0x5})
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', r0, 0x1}) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x81, 0x8f, 0x5, 0x6}, {0x6, 0x81, 0x4, 0xf3d}]}) (async)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @loopback, @mcast2}}}}}}}) (async)
ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x8, 0x0) (async)
clock_settime(0x4, &(0x7f0000000000)={0x1, 0x5}) (async)

3.156486879s ago: executing program 1 (id=71):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}})
read(r0, &(0x7f0000000340)=""/224, 0xe0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x3, 0x1)
connect$unix(r1, &(0x7f0000000000), 0x10)
write(r1, &(0x7f0000000180)="39f29fff56576a8d", 0x8)

3.141356658s ago: executing program 6 (id=73):
r0 = socket(0x18, 0x3, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
sysctl$net_inet6_icmp6(&(0x7f0000001600), 0x8, 0x0, 0x0, &(0x7f0000000380)="3458fd190e73f5449e403fbfbde39a49ff8f01fe405448aafcbeaeaea060df9546f3c0de896126697629e6e4866c5bb039241bdf713957c8ab5e624c5ab5e5b8a60f7ee7f6dfdc502ec7a24301dc6a34a3e0c819cd91f82cfc869c01f3741a921ff9f5e89f4f2b367e347ba071accc1a7c544259039be659893bfce997f9b369ed79d996c18f68c4b1c2dec138c97e39540ca2ec29cc5351fd24d6d4b34cf3bec879f51561eb243c22c583a33b0021e4a2af72c13ff6e2962553b35044bf61e0b4a4c42211d36eb16a32cc1d86f0a005ddfa653aea236ad7455abe31ae421d30", 0xe0)
r1 = socket(0x1, 0x2, 0x0)
r2 = socket(0x18, 0x3, 0x1)
getsockopt(r2, 0x29, 0x68, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x56, &(0x7f0000000180)={0xfffffffffffffff9, 0xb33, 0x2, 0x1, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0)
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x6, 0x2000003, 0xeffffff9, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x4001, 0x7f})
ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
r5 = syz_open_pts()
poll(&(0x7f0000000140)=[{r5, 0x80}, {r5, 0x10}, {r5, 0x40}, {0xffffffffffffffff, 0x2}, {r5, 0x2}], 0x5, 0x4)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x6, &(0x7f0000000040)=[{0x5, 0x0, 0x9, 0xc8}, {0xb2, 0x8, 0x0, 0xfffffe01}, {0xd795, 0xc, 0x95, 0x80000000}, {0xfeff, 0x3, 0xd}, {0x10, 0x7, 0x5, 0x2}, {0x5, 0x6, 0xf8, 0x400}]})
r6 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba)
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x8060694a, &(0x7f0000000100))

2.694522969s ago: executing program 1 (id=83):
sendmmsg(0xffffffffffffff9c, &(0x7f0000000540)={&(0x7f0000000500)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000200)=[{&(0x7f0000000040)="4329ff2b072ba216ee21929863cd6e7c786d3b7f4fff79c9543ed105c139b7c6a200d0f47a98a5392c76bcee1877c23d04dca13b4f7774b9c2", 0x39}, {&(0x7f0000000080)="e0e6355fb91f0e536f8b03a99c393cbfe89221e7d75ba37e7900118a396f0edeb2231c76a30cd7f572c592ea1c2c17e583fd24ad329cfe45f33f8d3ca10a7dece029c997a57e97e4eca5eaed0ec978339dc10db2f8381b6eff8672e4b6f7de601a7be43ecd86b1065424d318ae91db5b3dc26723222094c1625234546bc8133a738343e0a11b3e9e8d0135d98f99943a6c91f5f9d89d5d4de54e4613c07eba8c", 0xa0}, {&(0x7f0000000140)="feb54bfa79d0b26704bf81e70c4c918d0ea0a7ac81152a6b4e31553f0c892766187b8591cf2059e996dc073e3b19aaf0451641c3cd4d5d2553af478c5b09058308555dbb47dcbf273549429448bd1305417fcc9f979aeee84352e75d842ef4031e9f0afce1e5e9afecced11aa09470c83bf477cda931543ac4f861c6c6ec6bda37a461a569c3197ebd1935ea35e325bb0b0cd7", 0x93}], 0x3, &(0x7f0000000240)=[{0xd8, 0xffff, 0x4, "a307256c475fec100b614e013e66a7be1346094f0a6fdfbef82265495002adf5837b7f2e6915de1c2d3398917e326bda9faf60af2db1eac34dd37d481d37f45e5592de433577ed04c45ed0605d7ba9d1dce1d4f9451374742265e6db1a3307fb523036ef53e38ceb93f1527a070cfe2fc34bb44883ff4aa62987c4170ec3bff1a5cb72840a09da47ecf9f3eb112d16c9817e6e96a0bc8d00145075487ea4f1e5b6fe957a0bd324936756dfdf70439befa4a12f3af212f519ac26fca23aff9f9ebf32eb"}, {0x108, 0xffff, 0x7, "9bec86e107f621b66ad24a5c66b7baa7e7a9d3aa0b65f3a2d4d4d36b28e68af929945be853a4e0e1f5683de3d3fbea3aab6e9bec5d0cddcc9105a394e5517317010ea801a7e3c7a797d661c9ce6481a21e4cdc1dcd6517a279fae367945ca1093994cedd5ad722ade315f0a767a3a6703156885142bc37a5a0767cae6900952da135190b882fdd8928b67a4065684e4d3ea4726881606cde31b85f61302e5e0eb7f415ae4a68525e5269ffd049e831da2288e26d91d1654fd8231ebfd8199f734b862714c7ec06466c5c0e9c58c2072684b05aaa2399ad342ebdc2d9a3e90a83ea35e6df8f9cf3c7f1216ba627d59a6c0a"}, {0x10, 0xffff, 0x5}, {0x70, 0xffff, 0x3, "d998ef0c6eb13f0cd340da7ac3529e5d8c88f1d6c3bce1396df6f6c1929919c14c28c1f032fa261b7072e5032e18643db06027bdb590722c158f33f8bf74dc6b2aab746780ede7e6cdaef745f512c6a1b1dfa88c80854e98a07e22378f151811"}, {0x38, 0x1, 0x6, "68f6a46f0681bb7c8c71fd94adc09c8ddb545611945d1ad4a4a3fb2f576592e92c1365"}], 0x298}, 0x98f8}, 0x10, 0x0) (async)
execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000740)=[&(0x7f00000005c0)='\xbe\x00', &(0x7f0000000600)=')#\x00', &(0x7f0000000640)='-}\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)=',]\x00', &(0x7f0000000700)=':#:,{/$:].,+\x00'], &(0x7f00000007c0)=[&(0x7f0000000780)='\x00'])
r0 = semget$private(0x0, 0x0, 0x20)
semop(r0, &(0x7f0000000800)=[{0x0, 0x0, 0x800}, {0x1, 0x6, 0x1800}, {0x4, 0xd1e, 0x1000}, {0x2, 0x1, 0x1800}, {0x2, 0x8, 0x800}], 0x5) (async)
r1 = semget$private(0x0, 0x0, 0x360)
semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000840)=""/74) (async)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
r2 = socket(0x6, 0x4, 0x4)
r3 = open(&(0x7f00000008c0)='./file0\x00', 0x80, 0x80)
poll(&(0x7f0000000900)=[{r2, 0x4}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x20}, {r3, 0x4}, {}], 0x5, 0x2)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000940)) (async)
unveil(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='r\x00') (async)
execve(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000a40)='\xf4)\\/$]:\x00', &(0x7f0000000a80)='r\x00', &(0x7f0000000ac0)='(\x00', &(0x7f0000000b00)=',]\x00', &(0x7f0000000b40)=':#:,{/$:].,+\x00', &(0x7f0000000b80)='!*\\,\x00', &(0x7f0000000bc0)='[\'&\xbd$&\x00'], &(0x7f0000000d40)=[&(0x7f0000000c40)='\x00', &(0x7f0000000c80)='r\x00', &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)='^*.\r\x00']) (async)
r5 = semget$private(0x0, 0x4, 0xa4)
semop(r5, &(0x7f0000000d80)=[{0x0, 0x8, 0x800}, {0x4, 0x3}, {0x1, 0x6, 0x1800}, {0x0, 0x0, 0x1000}, {0x2, 0x7, 0x1000}, {0x3, 0xa216, 0x800}, {0x2, 0x2, 0x1000}, {0x1, 0x0, 0x1800}, {0x4339dc091f523fde, 0x0, 0x1800}], 0x9) (async)
r6 = socket(0x18, 0x8000, 0x2)
poll(&(0x7f0000000dc0)=[{r6, 0x5}, {r2, 0x100}, {r4, 0x40}], 0x3, 0x0) (async)
ioctl$VT_GETMODE(r3, 0x40087603, &(0x7f0000000e00)) (async)
accept$inet6(r3, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) (async)
setitimer(0x1, &(0x7f0000000ec0)={{0x4, 0x7}, {0x8000, 0x8000}}, 0x0) (async)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000f40)={<r7=>0x0}, &(0x7f0000000f80)=0xc)
ktrace(&(0x7f0000000f00)='./file0/file0\x00', 0x2, 0x0, r7) (async)
socket(0x18, 0x4, 0x5) (async)
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000fc0)=0x6) (async)
r8 = semget(0x3, 0x2, 0x8) (async)
dup(r6)
getsockopt(0xffffffffffffff9c, 0x2, 0x1d0, &(0x7f0000001000)=""/90, &(0x7f0000001080)=0x5a) (async)
utimensat(r3, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={{0x0, 0x80000000}, {0x5, 0xffff}}, 0x2)
semctl$GETNCNT(r8, 0x4, 0x3, &(0x7f0000001140)=""/128)

2.60764955s ago: executing program 5 (id=86):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x15, &(0x7f0000000100), 0x8)
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/43, 0x24}], 0x1000000000000247)
ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$TIOCCBRK(r0, 0x2000747a)

2.604476915s ago: executing program 1 (id=88):
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0xfffffffffffffdc5, 0x0, 0xfffffffffffffdc9)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x39)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb})
r1 = socket(0x1, 0x4000, 0x1)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffffc, 0xbb, 0x1, 0x8, 0x4}], 0x19, 0x0)
select(0x40, &(0x7f0000000100)={0xfffffffffffffffd, 0x44809ea0, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x1820, 0x8, 0xf}, 0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r3 = syz_open_pts()
close(r3)
r4 = syz_open_pts()
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r5 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000))
r6 = msgget$private(0x0, 0x180)
msgsnd(r6, &(0x7f00000014c0)=ANY=[@ANYBLOB="03"], 0x8, 0x0)
r7 = socket(0x11, 0x8003, 0x0)
getsockopt(r7, 0x11, 0x1, 0x0, 0x0)
msgrcv(r6, 0xffffffffffffffff, 0x0, 0x3, 0x1800)
getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
sysctl$net_inet6_ip6(&(0x7f0000000480)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b100", 0x2, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})

2.318013082s ago: executing program 5 (id=91):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/194, 0xc2}], 0x1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000740)={0x1, 0x7, 0x3, 0x0, "97aa224f220687956d4726d10000004000", 0x2, 0x7ffbffff})
ioctl$TIOCSETA(r2, 0xcd504407, &(0x7f0000000740)={0xfffffff3, 0x4, 0x803, 0x800003, "7a0100000000000000000000e500", 0x1, 0x9}) (async)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async, rerun: 32)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) (rerun: 32)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r6 = fcntl$dupfd(r5, 0xa, r1)
close(r6) (async)
socket(0x2, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa)
r7 = socket(0x18, 0x2, 0x0)
setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r9 = fcntl$dupfd(r8, 0x2, r8) (async, rerun: 32)
read(r6, &(0x7f00000000c0)=""/93, 0x5d) (rerun: 32)
close(r9) (async)
r10 = socket(0x2, 0x2, 0x0)
connect$unix(r10, &(0x7f0000000000), 0x10) (async)
setsockopt$sock_int(r7, 0xffff, 0x1004, &(0x7f0000000080)=0x200, 0x4) (async)
r11 = open(&(0x7f00000000c0)='./file0\x00', 0x8, 0x80)
getpid() (async)
write(r11, &(0x7f00000004c0)="b9", 0x1)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x2, 0x10, r4, 0x80) (async)
pwrite(r3, &(0x7f0000001080)='\x00', 0x1, 0x9) (async)
execve(0x0, 0x0, 0x0)

2.283563392s ago: executing program 6 (id=92):
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x9002, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="d9bdb1d453b8d228fa79338ff8b57c744b8458f0915fe69399503a9643178057a544077d2204664c25691adaea0ac6031770338f48b77563ce8461f3172d836d448df0900828b001c19eba7ffa40352593b61e", 0x53}], 0x1, 0x0, 0x0, 0x9}, 0x4)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000000)={0xfffffffe, 0x5, 0x3, 0x1000, "080000400006000000010000000100ff2b0100", 0x4917, 0x8})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000400)=[{0x8, 0x81, 0xc0, 0x2}]})
r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1f)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x119)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
getsockname$unix(r1, &(0x7f00000002c0)=@file={0x0, ""/79}, &(0x7f00000000c0)=0x51)
close(r2)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x41)
preadv(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x3ff)

2.170134725s ago: executing program 1 (id=94):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x54e}], 0x1)
sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x410}, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
sysctl$kern(0x0, 0x0, &(0x7f0000000480)="71f91e3471ac0058bc5a91501d94a34b8e5ff49ead69c9b3b32c84f8d320018983cea251ec000050c127dcdfdf5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8c796b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c830e1124227ed69ab8942a9ab7ed9ce964bd8447ba799bb22e1b3fec93d9bf8692c2f819943cbfdb5e8b1c8c4046da548cfdefae14f2154da26b3eafb169f6e0ccd457ddb226fa2d32ba256e0665cc352e68df80a", 0x0, 0x0, 0x0)
r2 = syz_open_pts()
ioctl$TIOCSTOP(r2, 0x2000746f)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="00efaddeec", 0x1f38}], 0x1)
unveil(0x0, &(0x7f0000000080)='r\x00')
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001200)={0x6, 0x9b, 0x3, 0xc, "f2b0edf886b8a4dfd814ff2cd8c4cab2d61d16d3", 0x4, 0x5})
ioctl$FIOGETOWN(r0, 0x4004667b, 0x0)
syz_emit_ethernet(0xe0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd605f6ad900aa3a2900000000000000000000000000000000fe8000000000000000000000000000aa87"])
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
getpeername$unix(r4, &(0x7f0000000180)=@file={0x0, ""/4101}, &(0x7f00000011c0)=0x1007)
setuid(0xffffffffffffffff)
r5 = socket(0x11, 0x3, 0x0)
sysctl$vfs_nfs(&(0x7f00000010c0)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0)
r6 = getpid()
ktrace(0x0, 0x1, 0x400, r6)
syz_emit_ethernet(0xeb, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbad53e32c81e358586216d1e37586727fba2cc7c4501f082a862c4f48632b767aa0a1893d519b43e7400c5c4ff92a5c26888ef8ce58565c428f37c0cf1ac42ce16a58c91e9051c368e45f3de882c082f6120a4dfde7675e90ede2dc176286bd606ef06c30924b5f60c6ed85438cb4741014b19618e234443261b4a8a0d3b3674686b89ae6ac7248446fc0dabd659f5fa43d922310f6e38981b43b199206de85b79f106b8fd46bcf51d0bd5746f36752259d3246b2cf2ba22f1e7e80c9b0ac00092639b579a5dad233e778f412d311decd98325dfeed91a73038c83520ded04cb30c667611ea"])
setsockopt$inet_opts(r3, 0x0, 0x200100000001d, &(0x7f0000000000), 0x0)

2.163187076s ago: executing program 5 (id=95):
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})

2.160709671s ago: executing program 5 (id=97):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
close(r0)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)
setsockopt(r1, 0x7, 0x0, &(0x7f00000000c0)="5ac2f399a244cf4e240894c915cb5e8136bf0e48495d4912a201d05ea4de857f34ade5066c885cf46b77b810d01c7892ea7d5bf154df124dba3506336c3fa2e305e28b8d72219cef24e96c329d4c0e43b18165a0d91c096c95fe35f2849d3f6f11a1500d06a2713a5e7ba5dfc2dfdc4f1f155a32acae115e6497726ea2deede75a1a4007f2eaa87f39fa716ce912fd26900f8d5fc4c6eefaa597a38060bc5cf5c737b05f5b5c29746dfb562b9624aebb483d", 0xb2)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000180))
sysctl$hw(&(0x7f00000001c0)={0x6, 0xe}, 0x2, &(0x7f0000000200)="08858c841d27451c761b8df2f2b9fa8d6ab876c08105f7994c2eb8b3acbc44e3620884a5863dfbed137fb1d428e66323551a17a0e47e8c58de01e747a73afec367ce920e2bb9de95534a6ecfe17075d183f522f52da53fbf4612208ce86bc5844e099f9e643e84d61a21f2691fcd6ce6cb70591cb1173cb319eacd2a0d43faad05054afccf9d36bd2ed9492baef5f78bd3e7479dceefb054d093f5ff9785fceff6706672", &(0x7f00000002c0)=0xa4, &(0x7f0000000300)="b4ad7a719527bb8804a9f7850303e00c695047e6cff8d4dda4278f52a1cd48b6ecd3d596d95475c940bf03970a0a2ad6f41c5c5d7d8f8e767b296930f22d97c6d1e9079c2f10ff2b9ac8dc89a56f8bd9a3157e43e78169af0b66a223cf13d2d6d54f0f762fa3e468f7aa6812ea6ed4fbd87f6392684853948d5fd822482b2bc28a1f1380feeebaebf016ee", 0x8b)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$PCIOCWRITE(r2, 0xc0107003, &(0x7f0000000400)={{0x5, 0x3, 0x68}, 0x7aec, 0x40000000, 0xa})
sysctl$vm(&(0x7f0000000440), 0x2, &(0x7f0000000480)="cae8e0175a65b5543d56d059b26a5f5f0acaeeeb2501e1cab04de6680719042c6e", &(0x7f00000004c0)=0x21, &(0x7f0000000500)="cbb6912f9afc8571e9902d17b696c2d7847a699cf176355693453854ba7914fb1d2d309232faa6420cc1f58d06ebf07bbbf1dc85c9d9d14d53c632843add0dd6d47c222b75b99cbc", 0x48)
setsockopt(r1, 0x1, 0x3, &(0x7f0000000580)="509833d5c6f1638a4a6f2876aed0600d323d3917e820156a9c82f2cd63fcdb9c5cba78008867854178b33cf7d149", 0x2e)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000005c0), 0x20100, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000600)={'tap', 0x0})
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000640), 0x80, 0x0)
ioctl$BIOCSHDRCMPLT(r4, 0x80044275, &(0x7f0000000680)=0x5)
readv(r2, &(0x7f0000001700)=[{&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2)
ioctl$BIOCGDLTLIST(r3, 0xc010427b, &(0x7f0000001780)={0x9, &(0x7f0000001740)=[0xfff, 0xce04, 0x3, 0x40, 0xfffffff9, 0x820, 0x10000, 0x7fffffff, 0x3]})
sysctl$hw(&(0x7f00000017c0)={0x6, 0xe}, 0x2, &(0x7f0000001800)="de1e00ffff7b6dfb436c86500de43b0197ca8d8a28d9e2fbdbe24ed7f21eb799d1374f22fc51c71228d7324ea9b8032d2ed4dbaab0d61dcbfa59cc7c80097b439302556c5624af9347b3e983ff2ae26d4846f06840c2250bedeb9fb60b2c23957c1737c4e0bd9d695965b72ac33d1ac92c7ebbe369c1c538d980c4ec0d19ced01d72144e4a164c461325ac5e795df277bb", &(0x7f00000018c0)=0x91, &(0x7f0000001900)="fa18b1ee51dcc28440005fa6a09529e4ab1948613ae123d7e5d221f0a132637006228bb7ea22b851401ad38f09efbf760d2549a284a81bc340c2afda76bb1191eb9753a6263c685b", 0x48)
r5 = accept$inet6(0xffffffffffffff9c, &(0x7f0000001980), &(0x7f00000019c0)=0xc)
setsockopt(r5, 0x6, 0x4b3, &(0x7f0000001a00)="7b33a9757a57604656dfde1693ee520a7216c18b234eaf5d451686dfd2058a3f52d96bbcfe6ce79a9a3c86ab01fcac37b70a781d4f2675a6f25503317288e2fc3d95de040ef885299118dd36d027c7e28a335246f92432f069dc95982375ca9f19c20266e7b2e2e1df7519b950263f59301f2740c2acaa6abe8600aa2b4ef2bd16b4b8d6ba090384bd3a0e19ff0b04fec91aefa24c409e8907e6d32b484e870752365169d42e1588e057f90ddf3eea10984a3263eaf00fbea0927c7a5594781b3b", 0xc1)
r6 = socket$inet(0x2, 0x8000, 0xea)
r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001b40), 0x20000, 0x0)
kevent(0xffffffffffffff9c, &(0x7f0000001b00)=[{{r2}, 0xfffffffffffffffc, 0x0, 0x10, 0x1000, 0x9}, {{r1}, 0xfffffffffffffffd, 0x4, 0x2, 0x2, 0x1}], 0x1, &(0x7f0000001b80)=[{{r3}, 0xfffffffffffffffe, 0x10, 0x10, 0x100, 0x1}, {{r6}, 0xfffffffffffffff9, 0xe8, 0x80000000, 0x7fff, 0x6e87}, {{r2}, 0x2, 0x0, 0x1, 0x9, 0x1}, {{r0}, 0xfffffffffffffffb, 0x1, 0x80000080, 0x7, 0x1000}, {{r1}, 0xfffffffffffffffa, 0x9, 0x4, 0xb21, 0x1000}, {{r7}, 0xfffffffffffffff8, 0x20, 0xf0000011, 0xc4, 0x8000000000000001}], 0x1, &(0x7f0000001c40)={0x6e6, 0x101})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)
open(&(0x7f0000001c80)='./file0\x00', 0x80, 0x49)
ioctl$WSKBDIO_SETMAP(r7, 0x8010570e, &(0x7f0000001d00)={0x5, &(0x7f0000001cc0)=[{0x9, 0x2, 0x6, 0x200, 0x800}, {0x6, 0x8, 0x3, 0x8, 0x1}, {0x5, 0x4, 0x1, 0x4, 0x9}, {0x3, 0x800, 0x8000, 0x705, 0x9}, {0x8, 0x8, 0x3, 0x8, 0x75}]})
sysctl$hw(&(0x7f0000001d40)={0x6, 0x9}, 0x2, &(0x7f0000001d80)="a7d89215d2444f9d8fa9d1eb49349b8b4d93a677cb64beb30d37d9251463fca25b268c73777ce72824d2cad5ef112c433b69cc2dc8f50f0ce782eac9cda329f604b1b35dee152ed7b8b6e9ae15a9605b0f8dd5e1012dc1", &(0x7f0000001e00)=0x57, &(0x7f0000001e40)="5b49fd9f6d9ee633716992dbf4fcfa9cea656d1a121dd984dbc311dbb2ad27879a8ec3826483a530a016a3f739b955b764720dc4ee8e36ba7e9280b2a0cdbe8404be99166bc92be0b05f8d448b63659c6dd647cf11c68f88590b45748350743976f6ad3434b20c8300bb7567dd5735b30da65044a4b9cd4605af6f10730c1df962714e7d9bec01d1633ddc59448394637c8a59b19b8b4c74de6b0e98a9f8aff006853fb002e18aaeddf74be0c97b167fd1647c8cf051cc0afeebaa1d5347558255410ececc008a9e62383d595a530b6a510dcd5d75b42bcd47f911a56985c16e3fefd0f8d7d9ef1d2708cfff82d87007f20e2b26", 0xf4)
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001f40), 0x400, 0x0)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001f80), 0x80, 0x0)
ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000001fc0)={'tap', 0x0})
ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffffff, 0x80105702, &(0x7f0000002040)={0x8000, 0xffff50d5, 0x5, 0xffff})

1.089890839s ago: executing program 6 (id=100):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000040)={0x1, 0x1})
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0)
pipe2(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1)
write(r3, &(0x7f0000000080)="c30516845e", 0xff55)
close(r4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

1.018578489s ago: executing program 3 (id=102):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ftruncate(r0, 0xfffffffffffffff9) (async)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000380)="bdc68743b8b93ef824752b66e6acbcb6f4cb69427664622744ecb6eed197e6bcd65055006084945e6502934b6efe8031e2ff2900722dbeb71bea45657eba5f1450233a7b9388fdfaba8cdbf3a33415169c652ad24b6580475e679ec766c5614d43adea3e2d5f3bff1a3a8cef0dfd18db59bc5e280899a8dea7c10fe6d83ed44919322af05ddfcb32ac0d55003f0bc65f80967456", 0x94}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) (rerun: 32)
ioctl$TIOCSETA(r2, 0x20004455, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) (async)
close(r3) (async, rerun: 64)
clock_settime(0x2, &(0x7f0000006b00)={0x8, 0xe}) (rerun: 64)
read(r1, &(0x7f0000000180)=""/148, 0x94)

1.003470948s ago: executing program 5 (id=104):
r0 = socket(0x11, 0x3, 0x0)
r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
ioctl$TIOCSETA(r1, 0x8004745f, &(0x7f0000000100)={0x8001, 0x3, 0xfffffffd, 0x927ffffe, "0d0e50123b8f4fc384d6d738a6cfa4369e25fafb", 0xfff, 0x1})
ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000000)={0x1, 0x10, {0x0, 0x4000000000000003}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
dup2(r0, r3)
socket(0x11, 0x3, 0x0) (async)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) (async)
ioctl$TIOCSETA(r1, 0x8004745f, &(0x7f0000000100)={0x8001, 0x3, 0xfffffffd, 0x927ffffe, "0d0e50123b8f4fc384d6d738a6cfa4369e25fafb", 0xfff, 0x1}) (async)
ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000000)={0x1, 0x10, {0x0, 0x4000000000000003}}) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x18, 0x1, 0x0) (async)
close(r2) (async)
socket(0x18, 0x2, 0x0) (async)
setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
dup2(r0, r3) (async)

870.887121ms ago: executing program 5 (id=109):
r0 = msgget$private(0x0, 0x40)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x5, 0x6, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0xb, 0x7}, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x132)
sendmmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4}, 0x10, 0x400)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb7600000000000200361b12", 0x82, 0x0, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = dup(r3)
setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
r5 = socket(0x2, 0x3, 0x0)
r6 = dup(r4)
dup2(r6, r5)
connect$unix(r5, &(0x7f0000000000), 0x10)
sendto(r4, &(0x7f0000000080)="e7920273c94c3c52", 0x8, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x250)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/86}, 0x5e, 0x2, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/123}, 0x83, 0x0, 0x0)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0x4000}, 0xc, 0x2a2, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x200, 0x40})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
mknod(0x0, 0x2000, 0x205318)
open(0x0, 0x0, 0x0)
execve(0x0, &(0x7f00000003c0)=[0x0, &(0x7f0000000300)='/dev/rvnd0c\x00', &(0x7f0000000340)='/dev/rvnd0c\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='[%/\x00'])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

687.262836ms ago: executing program 6 (id=111):
sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
mknod(&(0x7f0000000980)='./file0\x00', 0x2020, 0x4000)
syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @random="c3cb35ba9d84", [], {@ipv4={0x800, {{0xb, 0x4, 0x1, 0x3c, 0x34, 0x64, 0x2, 0x4, 0x3b, 0x0, @local={0xac, 0x14, 0x0}, @broadcast, {[@ra={0x94, 0x6, 0x1}, @rr={0x7, 0xf, 0x9, [@empty, @rand_addr=0x4, @rand_addr=0xffffffe0]}]}}, @udp={{0x2, 0x3, 0x8}}}}}}) (async)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async)
chroot(0x0) (async)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x3c)
ftruncate(r2, 0x84002) (async)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/49, 0x31}], 0x1, 0xd16c)
r3 = kqueue() (async)
r4 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) (async)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x1, 0x1, 0x400}, {0x400e, 0x4, 0x4b, 0xf}, {0x70ae, 0x81, 0x31, 0x4}]}) (async)
kevent(r3, &(0x7f0000000500)=[{{0xffffffffffffff9c}, 0xfffffffffffffffb, 0x3, 0x1, 0x1, 0x7}, {{r1}, 0xfffffffffffffffd, 0x12, 0x4, 0x9, 0x7}, {{r0}, 0xfffffffffffffff8, 0xa2, 0x80, 0x6, 0x4}, {{r2}, 0xfffffffffffffffe, 0x4, 0x20000000, 0x7, 0xcbe}, {{r2}, 0xfffffffffffffffd, 0x70, 0x2, 0x4000000000, 0x3}, {{r1}, 0x5, 0x10, 0x2, 0x4, 0xfff}, {{r1}, 0xfffffffffffffffc, 0x0, 0x4, 0x1, 0xffffffff}, {{r1}, 0xfffffffffffffffc, 0x4e, 0x1, 0xfff, 0x3ff}], 0x0, &(0x7f0000000600)=[{{r4}, 0xfffffffffffffffd, 0x80, 0x1, 0x9, 0x5}, {{r1}, 0xfffffffffffffffa, 0x1, 0x1, 0x4cb5, 0x8}, {{r2}, 0xfffffffffffffffd, 0x80, 0x20000000, 0x8410c89, 0x9}, {{r5}, 0xfffffffffffffffc, 0x48, 0x82, 0x4, 0x2}, {{r1}, 0xfffffffffffffff8, 0x10, 0x8, 0x2, 0x6d}, {{r1}, 0xfffffffffffffff8, 0xc5, 0x2, 0x4, 0x3}, {{r1}, 0xfffffffffffffffe, 0x14, 0xfffff, 0x7, 0x3}, {{r0}, 0x3, 0x40, 0x1, 0x81, 0x7fff}], 0x100, &(0x7f0000000400)={0xfa0}) (async)
r6 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x20)
preadv(r6, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0)
r7 = kqueue()
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) (async)
kevent(r7, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0)
kevent(r7, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0x4, 0xe00fffe0, 0x100, 0x13fff}], 0x1, 0x0, 0x5, 0x0) (async)
accept(0xffffffffffffffff, &(0x7f0000000080)=@un=@file={0x0, ""/517}, &(0x7f00000002c0)=0x207) (async)
chroot(&(0x7f0000000040)='./file0\x00') (async)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)

417.66977ms ago: executing program 0 (id=121):
r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in, &(0x7f00000001c0)=0xc)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"])
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@broadcast, @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x18, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x0, 0x2, 0x0, 0x2e, 0x0, [@empty]}]}}}}})
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setuid(0xee01) (async)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
rmdir(&(0x7f00000003c0)='./file0\x00') (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000002c0)="6314a4bf5f738d137d143b0c2d20847e88551c48b78a4703ea76826ecb9f67517775d0c7934125108f05969bbad42fec8439f2f627052b9c1fe5d7f9419a915d947885785f51d0ad7ab7ebd7e82385dae838c7075995aa4d5a2653e34194732b7d3c5732ce213405e837ee5326391f46150f910e718374c90fe29852542b78f1d9b0351a0493e6d0240d993f92f7deaea9557c508d70f912d83153c3dcce0f992137cd31a4f588f9b55b418c3e2bbb7766acf53d73cc25efc0cffe25290ad62803fb", 0xc2) (async)
write(0xffffffffffffffff, &(0x7f0000000000)="ed", 0x1) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2040, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x800}, 0x10, 0x40, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
getsockname(0xffffffffffffffff, &(0x7f0000000040)=@in, &(0x7f0000000140)=0xc) (async)
r1 = syz_open_pts()
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000140)=0x2) (async)
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)) (async)
unveil(0x0, &(0x7f0000000780)='r\x00')

416.20417ms ago: executing program 0 (id=123):
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r0 = socket(0x18, 0x4001, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0xfffffffc, 0xffffdf82, 0xfffffff7, "08cc9599d4bb496c2a0ad000ffffffffffffffe6", 0x0, 0x4})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
unveil(0x0, &(0x7f0000000300)='r\x00')
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x4}, 0x10, 0x1841, 0x0)
r2 = socket(0x18, 0x3, 0x0)
setsockopt(r2, 0x1000000029, 0x27, &(0x7f0000000000)="5ab7776a", 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0)
r5 = fcntl$getown(r1, 0x5)
r6 = getuid()
setreuid(0xee00, r6)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, <r7=>0x0}, 0xc)
r8 = getppid()
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000500)={0x0, <r9=>0x0}, &(0x7f0000000100)=0xc)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r10=>0x0}, &(0x7f00000005c0)=0xc)
r11 = getpid()
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000600)={0x0, <r12=>0x0}, &(0x7f0000000640)=0xc)
getgroups(0x1, &(0x7f0000000680)=[0x0])
sendmsg$unix(r4, &(0x7f0000000740)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f00000002c0)=[{&(0x7f00000001c0)="43f6b8901a37a7754ec2b9349fa86b6ae841dbb4bf030d838048cbd04fe91076818cc7619d207013468799fabf0a4b59708be8627c0c4a2c5c54d8cc0444eb1f540eecea0e815c7ed4265bb78bc2e65cb24b609e9c6beff09c1bb4aeadd8199879b6699546a91428f230", 0x6a}, {&(0x7f0000000240)="f23a653f282155036a12bf8d686d29649c995edd156c3343eed12b8ed078a0de4ab2a91ffa114cd79392f814ee6d019f0bd5591499fc96e55f5da2447df2b3d97ae011ebcbc9cb9f1af3e3bdb9234720ef322917428d7f5b9f1fd3936e38a148", 0x60}, {&(0x7f0000000380)="5bd47d40a8da63e363c07f8de10c55c12c9d00306ef7bdcee85ea14e7990a8f37f545ccf47f1e5eb25a0fa6e5f7681f4d07b213134378b21804fe6ef593f46ec93bd28ff5ae434e6c64e4acee7758f5351add48b4a6b1ddbadb1621ebc9c61f1c118917ebd8b19daa6b5e79eeecb76e7d74dd616d66e7b6563e0c7ff197c32a64687fc5c2ef582dd52fb0fd02578a4a26c0720990a1448d0176849054d1d5c468798a5024654725f37f0ec443073e7fcdccc73f61c4bb70395c4389abb", 0xbd}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000ffff000001000000", @ANYBLOB="d9603e4b9033351436bb9e4644096d5c5e38062e6f0db3c9147803370503d5715b3f6276bee2f4414f09c93e2515a5bdc5ab23e3e386df9e02453e63d3ad8f888c45945a419414b40220fbfd6aff406b24aebfd055b594d5d63bdb4c68d9836305418a3172d77432991fdeed8c3176ec5f532ad74ab269591ccabf7d0277d97b79c4c698b4e8e4fa5b7d3a26ae69d3cba7847de863b614d519b90cf55fe61e202a0f728d9b2ab9de44a7095bdde11fcd38770b697ac1043781804f5b5a62661b4691529feccb5ea2efe3c4179114c08a77182b7f0603d9ed7e2b14b32d42b085cd10d0253f69f70ab63977eefac00c8597dc356ef9", @ANYRESDEC=r5, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES8=r0, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4}, 0x8)

404.406915ms ago: executing program 4 (id=124):
openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="cffc12637366f60ff57feecf09e959af1b3eaf8a961ca20a6390239eccaf40a92bffb776425d47f0cc9769dee0e2459d9511bbe624a5627b00a27e170f54311b5f0a1f1272020868e453f08f5ae03af084da04cf41aff016ec46ee13802e353f162827b25dbcca081cc0ec26910b594baad9e9cd96d2fc28ea982cc798984741ea97443382937e03000000000000004ab3d135cbd1adaa09a03c1c21e85888f4d7e2e7b607c4d49d28154efeb0790223ae82710ad575315d6e2e89e406c18a2f962cad3f419df2fff2ce9e397b9716cb5c8ed1ffdc07826f84234ae92a8b046d", 0xe0}], 0x1)
execve(0x0, 0x0, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x3, 0xfffffff9, 0x0, 0x0, 0xfffffff8, 0xffffffff, 0x2, 0x1, 0x3ffd, 0x10})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
mknod(0x0, 0x2000, 0x2e00)
r1 = open(0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$VNDIOCSET(r2, 0x40386301, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000200)={0x5, 0x2, 0x80000001, 0x5, 0x5, 0x1, 0x5, 0x10, [{0x8, 0xe, 0x6, 0x7ef}, {0x0, 0x1, 0x71, 0x9a1}, {0xffffffff, 0x4, 0x5, 0x80000001}, {0x2, 0x8, 0xaf, 0x29df}, {0xe96a, 0x18a, 0xff, 0x6000}, {0x6, 0x1ff, 0x8001, 0x5}, {0xea, 0x7, 0x4, 0x97e2}, {0xbd4, 0x8000, 0x1, 0x4}, {0x4, 0xc93, 0x9, 0x3}, {0x40, 0x79cf, 0x3, 0x400}, {0x8, 0x9, 0x10}, {0x1, 0x4, 0x7fff, 0x800}, {0x7, 0xc, 0x8eb, 0x400}, {0x9, 0x9, 0x800, 0x6}, {0xd15f4ade, 0x5, 0x80, 0x3}, {0x3fa9ac92, 0x1, 0xc20, 0x1}]})
ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000000040)=0x618d)
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0))
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0)
r3 = socket(0x18, 0x3, 0x0)
poll(0x0, 0x0, 0x0)
ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100))

317.630706ms ago: executing program 0 (id=125):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {0x3}, {0x2}, {}, {}, {0x2}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {0x0, 0xfffffffd}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x1, 0xfffffffd}, {0x3, 0x8}, {0x3}]})
r0 = getuid()
geteuid()
recvmmsg(0xffffffffffffffff, 0x0, 0x1, 0x801, &(0x7f0000003f00)={0x0, 0x7ff})
setuid(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000040)=0xc)
getpgid(r2)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e)

316.879993ms ago: executing program 4 (id=127):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
fcntl$getown(r0, 0x5)
ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x1, 0x10000}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x3}, {0x0, 0xc8}, {0x3, 0x2}, {0x0, 0x4}, {0x3}, {}, {0x3}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {}, {0x0, 0xd}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {0x1}, {}, {0x2}, {}, {0x0, 0x2}, {}, {}, {0x1}, {0x0, 0x57fd}]})
r1 = kqueue()
kevent(r1, &(0x7f0000000000), 0x8, &(0x7f00000001c0), 0x15, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
lstat(0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f00000000c0)={0xdc3, [{0x2, 0x6}, {0x3, 0x5e000000}, {0x1, 0x6}, {0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x3, 0x6d}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x80000000}, {0x2, 0x7}, {0x3, 0x800}, {0x3, 0xfffffff8}, {0x3, 0x5}, {0x1, 0xff6b}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x2}, {0x1}, {0x0, 0xfffffffe}, {0x3, 0x7}, {0x1, 0xfffffffa}, {0x2, 0xcccf}, {0x3, 0x401}, {0x3, 0x5}]})
r2 = socket(0x18, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f4601faa903493e339865dce0f225d", 0x2f}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r3, 0xc0184406, &(0x7f00000001c0)={0x0, 0xd, 0x0, 0xfffffee6})
r4 = socket$inet(0x2, 0x1, 0x0)
r5 = socket$inet(0x2, 0x3, 0x0)
getsockopt$inet_opts(r5, 0x0, 0xc, 0x0, 0x0)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100))

316.045873ms ago: executing program 0 (id=128):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x9, 0x20006}, {0x4, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x800001}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="7f37ce070000003d965a1564287bafc1d6d531c28c4a7eaa13e5232a", 0x1c}], 0x1)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
sysctl$hw(0x0, 0x0, &(0x7f0000000380)="9f68ebfa1005598c709fc88d48afc504a100000000000089322974d3cc2e1693836de35ca5171421c6810dc253", &(0x7f0000000000)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9b68, 0x0)
socket(0x18, 0x3, 0x0) (async)
r2 = socket(0x18, 0x3, 0x0)
getsockopt(r2, 0x29, 0x2a, 0x0, 0x0) (async)
getsockopt(r2, 0x29, 0x2a, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
mknod(0x0, 0x2000, 0x6381)
select(0x0, 0x0, 0x0, 0x0, 0x0)
kqueue()
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0) (async)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}})
ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f00000000c0)={0x10, 0x437bfffffffffc, [{&(0x7f0000659000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff80}, {&(0x7f0000e63000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffff9}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x481}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000032b000/0x2000)=nil, &(0x7f00008c4000/0x4000)=nil, 0xc}, {&(0x7f0000008000/0x3000)=nil, &(0x7f000074b000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x51}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x6}, {&(0x7f0000257000/0x1000)=nil, &(0x7f0000a6b000/0x1000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x10000}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff7}, {&(0x7f00003c8000/0x3000)=nil, &(0x7f0000558000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0xfffffffe})
ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5})
syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) (async)
syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[])
getppid()

192.253569ms ago: executing program 4 (id=130):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000500)="4e7c2709b58112aa2f9856fa4b83b202e583f8c25841b18d3b323e487d16fe28774d1c5dab61f000fe073220cfbdd93c242c46dbc04cf0a330b679c4093f2ba55de9bf0213047ff970e908af377f0bf61c96596cff992743", 0x58}], 0x1) (async)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="ccd91686cbf723f52c05926a7f1ba201aa258418075660dada35a32504eefacf88591a228996150588781178377c88a428364db622e5834d99e4fca553f572b06e3735", 0x43}], 0x1)
execve(0x0, 0x0, 0x0) (async)
r1 = open(0x0, 0x18289, 0x110)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="0f0000000000000098025ce127cbfaa606761de1", 0x14}], 0x1) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000001", @ANYRES64=r2, @ANYRES8=r2, @ANYRES16=r2]) (async)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 32)
r3 = socket(0x6, 0x1, 0x20)
connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8) (async)
setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) (async)
shutdown(r1, 0x2)

191.606829ms ago: executing program 7 (id=131):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
r0 = syz_open_pts()
ftruncate(r0, 0x9)
syz_open_pts()
sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = semget(0x0, 0x1, 0x281)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/127)
getsockopt(0xffffffffffffffff, 0x41, 0xbc34, 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0xe0, 0xe0, 0xf, 0x9}]})
mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x0, 0xffffffffffffffff, 0x81)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
r3 = open(&(0x7f0000000640)='./bus\x00', 0x100, 0x142)
readv(r3, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1)
open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x14a)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x18}, 0x4, &(0x7f0000000080)="0200ac1d21", &(0x7f00000001c0)=0x5, &(0x7f0000000400), 0x0)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

190.990428ms ago: executing program 7 (id=132):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {0x2}, {}, {}, {}, {0x0, 0xaa59}, {0x3}, {0x2, 0xffffffff}, {}, {0x2, 0x4}, {0x0, 0x3}, {}, {}, {0x0, 0xaa}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x3}]})
r0 = socket(0x800000018, 0x1, 0x0)
getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000180)=0x8) (async)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) (async)
getsockname$unix(r0, 0x0, &(0x7f00000010c0))

135.421866ms ago: executing program 3 (id=133):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xfffffffc, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3})
socket$inet(0x2, 0x4, 0x80)
syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa"])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b10689ca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d12727b1e1d0cc45c7ebd5df53fb588fd0245528fe5700a5868eaf74d373197fb657cf1a5d0b08dbb382ad676b756d4e8b5a814fdec9a624348f23ffd260bf5fd344a7e5a30bcf96e47800acc166910bfc34ce76252dd12fac3b10dd5719aa6e420f60e3d2cbb22f5b3a6f7fa3c909e4823cdc0cdf126bc29456035b9a44ff74d8", &(0x7f0000000080)=0xaa, &(0x7f00000007c0)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be3894fd3229fe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e45570700000080000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d8012d63631b2fbedef9d152fa0609c5a47380657b90f7ad4a8987a947d8f2ca5defd3b7f83aacecee70cce8eb3935b0033196d24c5dd4bf604c03185ed97e16587ddcfaf72b4d8d5b903ee", 0xffffff33)

134.464465ms ago: executing program 3 (id=134):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = getpgid(0x0)
fcntl$setown(r0, 0x6, r1)
close(r0)
mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0xc0e99db6de761f86, 0x40)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036d24700383afcfe8000000000000000000000000000bbff0200000000000000000000000000010102907800000000605f7f0000002c00ff020000000000000000000000000001fe800000000000000000deb7c15017e6fe4e892f"])
r3 = getppid()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x18, 0x2, 0x0)
pipe(&(0x7f0000000140))
setsockopt(r4, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="0900000010b9fd812eaa4e713048e69931929648", 0x14)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f0000159000/0x2000)=nil, 0x2}, {&(0x7f00004e5000/0x3000)=nil, &(0x7f00007f8000/0x6000)=nil, 0xfffffffffffffffc}, {&(0x7f00004c6000/0x2000)=nil, &(0x7f0000234000/0x2000)=nil, 0x7fffffffc}, {&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xffffffffffe}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x290f}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000750000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00003f7000/0x1000)=nil}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000366000/0x2000)=nil, 0x400}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000064000/0x2000)=nil}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f00005e4000/0x1000)=nil, 0x1}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000da9000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00', 0x1})
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8)
setsockopt$inet_opts(r5, 0x0, 0x200000000000c, 0x0, 0x0)
ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000000)=0x5)
fcntl$setown(r2, 0x6, r3)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x11, 0x10)
poll(&(0x7f0000000100)=[{r4, 0x40}, {r4, 0x1}, {r4, 0x2}, {r2, 0x4}, {0xffffffffffffff9c, 0x1}, {r4, 0x2}, {r6, 0x40}], 0x7, 0x9)
setitimer(0x0, &(0x7f0000000080)={{0x1000000000000, 0x4}, {0x4, 0x6}}, 0x0)
r7 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PCIOCREAD(r7, 0xc0107002, &(0x7f0000000080))
close(r2)

128.047802ms ago: executing program 7 (id=135):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async, rerun: 32)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0xdd2a, 0x6, 0xb}) (async, rerun: 32)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
msgget$private(0x0, 0x200) (async, rerun: 32)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, &(0x7f0000000040)=0xc) (async, rerun: 32)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x4) (async, rerun: 64)
open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x1b0) (async, rerun: 64)
r3 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffa5ffffff00000000880f00000080939ea8020000000000", @ANYRES32=r0, @ANYRES32, @ANYRES16=r3]) (async)
ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000180)) (async)
r4 = socket(0x18, 0x3, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1021, &(0x7f0000000040)=0xffffffff, 0x4) (async)
r5 = getgid()
fchown(r2, r1, r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000000980)={&(0x7f0000000940)={&(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000540)=[{&(0x7f0000000240)="96fcc15108569ec0c1294883baa42b8ea1e5702b6585c9b677f7715d9fa8235f3dc6a88ee4db0948262dea6db37f95285eae6fb777c6492aba223787f4252690b8c8e607ab12ec88f70c9b", 0x4b}, {&(0x7f00000002c0)="32d0a4", 0x3}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="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", 0xff}, {&(0x7f0000000500)}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="880000000000000001000000060000001389555618539c48ef1f9f3d58575618a38a7a4be52fd2c06e61a3a77cfec37539beba89b91acc5ec2360e91357aa46450e616a2929dff07439b34663d2b4237f31e71594c06543075f760932ad01c214b2976b6d956e42db62469e10c28419be95f40573b0d5be5f5f0d4636dfd54417d4ad56b57b12c00a000000000000000010000000900000013bc859ef260dfa68f2f69b69a09921c2d44d8b56ce69ad0d8b1b61f3dc73f1e2df49f73c44c07f243ea5e4ba38736e208e44653b52aa0d1ce98b0b299ced1f9ed7b741bf867a6d25e91f8319436a99eed66452c4a693bc1ed1aaf6a5a547f81508fd7fa019eef6b7d9f945678baa81d085e28f87e9ded8bb5007e36a2a6ecc7f684fbe78d8b2c204b5e370000000000e800000000000000ffff000003000000098c837b78032dcc2ffa32dbceb886a064751f2da3bd4005bee48e2b867d295455a4c4e98ff1057e43f2a13cce0c52f4edc336ac7702cc4c72b92a87c01504d2484117cd582e912867a62739422aded9d31b7a6ad134f7af62df75f1fdf1596397c391d6b2b848266dd251da8ae5cb99fac347f8d8cccd33b0813d07e85b3038e8a6c12d4c95865b60b2a3c9d737e7e0675b5585e8779188affc809fb7e376606ba8bdde3b6cc82f88d956d3789dd9819bff816d1af73361be4606cc6a49e1e4839d5b95a36e660c75b81d185d3b9fb38d2de2005378a90078000000000000000100000001000000a15335208a608dcf33ae7781d9d7b8a3127b9d3aff487327e2bfa8a10a388e7277198147ccfca3588510f815cd6a69e0dcc506a8647608236ce14473090b25fa4f213584437b859b44c5cc52865d6a7712148be9667ff9bb3eadcd044c7b3a6b004c8c038f0000005000000000000000ffff0000530900005e64e8d607cbe0be28a14f0cd934f48a4fc30e25168383336bfdc8e7aaa8794456482db16e8641c8100dd0eee1b85225d3216425789d9b132c4d5a34d0370000900000000000000001000000ea0a000051bb95dd2485ed6da4ec550324e1caa1e8f3924a921df57122b6c926c0ab29b227133ef2b8e9944164d5363620e4eb769fcb9f6d58db4da64690cece7c7867f2ab5bd79fc63cf6a90556e430451b9b3848aa377b74408b2da10146283372a58a9d00f71155f8af19fa4150a0d29f6e3711647fc7741765df1a732aa800000000"], 0x368}, 0x80000000}, 0x10, 0x0) (async)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000500), &(0x7f00000009c0)=0xc) (async)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), 0xc) (async, rerun: 32)
getpid() (rerun: 32)
getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async, rerun: 32)
mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3) (rerun: 32)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r7 = socket(0x2, 0x4001, 0x0)
r8 = fcntl$dupfd(r7, 0x2, r7)
close(r8) (async, rerun: 32)
r9 = socket(0x2, 0x2, 0x0) (rerun: 32)
connect$unix(r9, &(0x7f0000000000), 0x10) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x2, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]})

126.037891ms ago: executing program 0 (id=136):
r0 = syz_open_pts()
syz_open_pts()
syz_open_pts()
r1 = kqueue()
kevent(r1, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff8, 0x41, 0x1, 0x7fff, 0xee0e}], 0x138, 0x0, 0xffffffff, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r2, 0x0, 0x21, 0x0, 0x0)
select(0x1, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x1, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x7, 0x0, 0x1, 0x6, 0x6, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0xac1e, 0x0, 0x89b7, 0x9, 0x7c, 0x85, 0x64}, &(0x7f0000000100)={0x0, 0x86c4})

119.380137ms ago: executing program 4 (id=137):
ioctl$VNDIOCSET(0xffffffffffffff9c, 0xc0384600, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000040)='./file0\x00', 0x8})
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20008, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x3010, r0, 0xffffffffffffffff)
link(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00')
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='W\x00')
ioctl$VMM_IOC_TERM(r0, 0x80045604, &(0x7f0000000200)={0x1})
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000240)=0xffff7eff)
ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffff9c, 0x8058574d, &(0x7f0000000280)={'./file0\x00', 0x4, 0x2, 0x7, 0x1, 0x4, 0x2, 0xfff, 0x2, 0x0, 0x2, 0x4})
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f00000003c0)={&(0x7f0000000340)='./file0/file0\x00', 0x3, &(0x7f0000000380)='./file0/file0\x00', 0xe})
utimes(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={{0x0, 0x3}, {0xe6c, 0x20}})
r2 = dup2(r0, r1)
ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000480)={'./file0/file0\x00', 0x5, 0x455, 0x84, 0x0, 0x7ff, 0x5, 0x4, 0x2, 0x2, 0x1, 0x1d52})
chdir(&(0x7f0000000500)='./file0/file0\x00')
fchownat(r2, &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2)
syz_open_pts()
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000600)={&(0x7f0000000580)='./file0\x00', 0x5, &(0x7f00000005c0)='./file0\x00', 0x8})
pipe(&(0x7f0000000640)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$WSDISPLAYIO_GETSCREEN(r4, 0xc0245755, &(0x7f0000000680)={0x2, './file0\x00', './file0\x00'})
mknod(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x4)
kqueue()
r5 = accept$inet(r3, 0x0, &(0x7f0000000700))
fcntl$setstatus(r5, 0x4, 0x8)
unlinkat(r2, &(0x7f0000000740)='./file0/file0\x00', 0x0)
ftruncate(r3, 0x8000000000000000)
ioctl$KDSETLED(r3, 0x20004b42, &(0x7f0000000780)=0x1)
ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000800)={&(0x7f00000007c0)='./file0/file0\x00', r1, 0x3})
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000008c0)={&(0x7f0000000840)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x8})
sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="ed49a906451347541039b090f67d34a3d3719cf1ea3b2ba9da917967f4f67988d21b91fc0a3c339d504517f4edd8877c1af490500d761cca3f9abfc11ebcd5a2f3a30c1ea3c7e428a402968f5d3c78cddcb73f1f4f8fd5d94a0d7f53daa0999e21487b6c643d2a5aa81a09728637323abeb102aaa69783ea4d864e23f80ed9da5f09e902db88ace1", 0x88, 0x9, &(0x7f00000009c0)={0x2, 0x0}, 0xc)
ioctl$TIOCNOTTY(r4, 0x20007471)

44.756984ms ago: executing program 3 (id=138):
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x29)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r0 = socket(0x18, 0x1, 0x0) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x159, 0xe}, 0x7c9, 0x4, 0x800001}) (async, rerun: 32)
semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) (async, rerun: 32)
r1 = socket(0x2, 0x3, 0x0)
close(r1)
r2 = socket(0x2, 0x3, 0x0)
close(r2)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) (async)
r3 = socket(0x18, 0x5, 0xbc)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getpeername$unix(r1, 0x0, &(0x7f0000000140)) (async, rerun: 64)
nanosleep(&(0x7f0000000000)={0x8000000000007fff, 0x2}, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
r4 = socket(0x18, 0x1, 0x0) (rerun: 32)
close(r4)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async, rerun: 64)
setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 64)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0x2, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x2000000044809e99, 0xfffffffffffffffc, 0x67, 0x2800000000000000, 0x2, 0x8, 0xb}, 0x0, 0x0, 0x0) (async)
kqueue()

38.826319ms ago: executing program 7 (id=139):
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7ff7fffb, 0x7bed, 0x4347e793, 0xffffff8d, "1826287ff80f00ff000000eeffffff000000e000", 0x1, 0x1ffff})
writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="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", 0xfd}], 0x1)

35.933058ms ago: executing program 7 (id=140):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, &(0x7f0000000100)="71f9", &(0x7f0000000080)=0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97)
unveil(&(0x7f0000000080)='./file2/file0/file0\x00', &(0x7f00000000c0)='r\x00')
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0)
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x27, &(0x7f0000000000)="5ab7776a", 0x4)

35.196189ms ago: executing program 4 (id=141):
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000200)="b1000502000000000000003401000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x2b)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setreuid(0x0, 0xee01)
truncate(&(0x7f0000000080)='./file0\x00', 0xffff)

34.922136ms ago: executing program 3 (id=142):
r0 = open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) (async)
ftruncate(r0, 0x9)
sendto$unix(r0, &(0x7f0000000040)="ec519202695e961113b8e46220c9131a90668d4f4b322acda1cbfe23385d419039216baf4968efb4aeb3995a3af9ab797a933e59b6aa4cf48debe64359f779593bd0ba2f045a8485da057589d56299607c6d8636ffd4b8a8150a10ac32fc11c70f7a8e78f7d2aa0b6e978f", 0x6b, 0x400, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x0}, 0x8)

4.670669ms ago: executing program 7 (id=143):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x204) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x204)
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x113)

1.869824ms ago: executing program 0 (id=144):
r0 = socket(0x1e, 0x3, 0x0) (async, rerun: 32)
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) (async, rerun: 32)
r1 = socket(0x18, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2) (async)
open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) (async, rerun: 32)
chroot(&(0x7f0000000740)='.\x00') (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) (async)
sysctl$hw(&(0x7f0000000080)={0x6, 0x1}, 0x2, &(0x7f0000000040)="99c5069e845291", &(0x7f0000000000)=0x7, 0x0, 0x0) (async)
getsockname(r0, 0x0, &(0x7f0000000100))

1.125445ms ago: executing program 3 (id=145):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
r1 = getppid()
fcntl$setown(r0, 0x6, r1)
sendto$unix(r0, &(0x7f00000000c0)="a8ec42b0cb2afaceaee6adc6c5423cc82066640c6ef72d88c4c78dbcde8032ce98b482cf887ab81521b4b24a46ced83ed2883c560b0fb86f32b545a7beb22721d0f916688455a10ff6f34201f9d3b210451b6bcd4cca10e858a4daeb0f0299d64b31000aba77856fac9c57eb37c53ac4a0428687c454fc3c6d35be2134210a1c9cce9fc30de924eaf7c6de476ebd673b7fa9040f080637c2b73d359dcf13d188d62d7d98dc5124e1a2bcb4204ec1bfbb6c76bff5dd84377cb800d13c0182e53ca9d443e97b3e83011c9c9395562d2b67e99f24711692f0556f6cf7764a95a46941ff914364c23f64a87410b19c774fe1e63a095febfc51", 0xf7, 0x409, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa)
fcntl$setown(r0, 0x6, 0x0)

0s ago: executing program 4 (id=146):
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1)
r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000001000/0x4000)=nil)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffeff, 0x1, {0x2000000000000, 0x7}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x615, 0x1)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r4 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000))
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
shmat(r0, &(0x7f0000003000/0x2000)=nil, 0x2000)
sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts.
pppx: unable to set addresses for pppx1, error=17
witness: lock order reversal:
 1st 0xffff8000014d2410 sbufrcv (&so->so_rcv.sb_lock)
 2nd 0xfffffd80601ad8f8 inode (&ip->i_lock)
lock order [1] sbufrcv (&so->so_rcv.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff833172e5 -> 0xffffffff833676f0 is missing
lock order [2] inode (&ip->i_lock) -> [1] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_do_enter_write+0xba
#1  sblock+0xb6
#2  soreceive+0x27d
#3  fifo_read+0x117
#4  VOP_READ+0x101
#5  vn_rdwr+0x15b
#6  vndsetcred+0xa1
#7  vndioctl+0xdfb
#8  VOP_IOCTL+0xac
#9  vn_ioctl+0xf8
#10 sys_ioctl+0x674
#11 syscall+0xbd4
#12 Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd80601ad8f8,9,0) at witness_checkorder+0x10b9
rw_do_enter_write(fffffd80601ad8e0,1) at rw_do_enter_write+0xba
rrw_enter(fffffd80601ad8e0,1) at rrw_enter+0xc6
VOP_LOCK(fffffd805f8ece90,2001) at VOP_LOCK+0xa3
vn_lock(fffffd805f8ece90,2001) at vn_lock+0xa4
vfs_getcwd_common(fffffd805f8ece90,fffffd805f8ec6f8,0,0,200,0,3fb4166135655016) at vfs_getcwd_common+0xd1
vn_isunder(fffffd805f8ece90,fffffd805f8ec6f8,ffff80003c45da18) at vn_isunder+0x56
unp_externalize(fffffd8077d0af00,33,0) at unp_externalize+0x26f
soreceive(ffff8000014d2320,ffff8000373f9088,ffff8000373f9038,0,ffff8000373f9070,ffff8000373f91fc,7b6c200df5f44b20) at soreceive+0xc24
recvit(ffff80003c45da18,45,ffff8000373f91d0,0,ffff8000373f9280) at recvit+0x40b
sys_recvmsg(ffff80003c45da18,ffff8000373f9330,ffff8000373f9280) at sys_recvmsg+0x1bf
syscall(ffff8000373f9330) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x588bf391be0, count: -14
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff8000373f8b20
rbx                                0
rdx                                0
rcx               0xffff80003c45da18
rax               0xffff8000299edff0
r8                0xffff8000373f8a00
r9                0x8080808080808080
r10               0x42b07804be85e446
r11               0x799e4779c7452314
r12               0xfffffd8003f2c640
r13               0xfffffd80047144e8
r14                              0x3
r15               0xffffffff834049f1    substchar+0xa39c
rip               0xffffffff81027c95    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff8000373f8b10
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=98806 pid=58614 tcnt=4 stat=onproc
    flags process=1000000<CHROOT> proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c45c558,0xffff80003c45dcc0
    process=0xffff80003c4266a0 user=0xffff8000373f4000, vmspace=0xfffffd806c0263f0
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 60526  190334   8069      0  2           0                syz-executor
 60526  508324   8069      0  2   0x4000000                syz-executor
 77960  268056  30427      0  2           0                syz-executor
 77960  354536  30427      0  3   0x4000000  biowait       syz-executor
 58614  304281  31324      0  2   0x1000000                syz-executor
*58614   98806  31324      0  7   0x5000000                syz-executor
 58614  339985  31324      0  7   0x5000000                syz-executor
 58614  310272  31324      0  3   0x5000080  fsleep        syz-executor
 95838   80949  19669      0  2           0                syz-executor
 95838  472011  19669      0  3   0x4000080  kqread        syz-executor
 95838   59887  19669      0  3   0x4000080  kqread        syz-executor
 95838  135034  19669      0  3   0x4000080  fsleep        syz-executor
 18964  421072  29162      0  3    0x100082  sbwait        ndp
 29162  363055  30532      0  3    0x10008a  sigsusp       sh
 63340   33084  70465      0  3        0x82  piperd        syz-executor
 19669   32998  70465      0  3        0x82  nanoslp       syz-executor
 45818   53935  70465      0  2         0x2                syz-executor
  8069   66619  70465      0  2         0x2                syz-executor
 30427  408857  70465      0  3        0x82  nanoslp       syz-executor
 30532   92178  70465      0  3        0x82  wait          syz-executor
 85408  306308  70465      0  2         0x2                syz-executor
 31324  512254  70465      0  3        0x82  nanoslp       syz-executor
 70465   58805  99357      0  2         0x2                syz-executor
 99357   40944  31485      0  3    0x10008a  sigsusp       ksh
 31485  498088  35446      0  3        0x98  kqread        sshd-session
 35446  275690  10728      0  3        0x92  kqread        sshd-session
   706  103191      1      0  3    0x100083  ttyin         getty
 10728  174458      1      0  3        0x88  kqread        sshd
 90502   93757  95820     74  3   0x1100092  bpf           pflogd
 95820  242147      1      0  3        0x80  sbwait        pflogd
 21928  509522  95123     73  3   0x1100090  kqread        syslogd
 95123  109692      1      0  3    0x100082  sbwait        syslogd
 98383  278474      1      0  3    0x100080  kqread        resolvd
 81745  312348   8347     77  3    0x100092  kqread        dhcpleased
 61584  423502   8347     77  3    0x100092  kqread        dhcpleased
  8347  316629      1      0  3        0x80  kqread        dhcpleased
 30044   56465      0      0  3     0x14200  bored         smr
 85928  500112      0      0  2     0x14200                zerothread
 11840   95815      0      0  3     0x14200  aiodoned      aiodoned
 67795  326096      0      0  3     0x14200  syncer        update
 78148  426074      0      0  3     0x14200  cleaner       cleaner
 62211  210026      0      0  3     0x14200  reaper        reaper
 39965   46526      0      0  3     0x14200  pgdaemon      pagedaemon
 46276  520346      0      0  3     0x14200  bored         viomb
 89975  138303      0      0  3  0x40014200  acpi0         acpi0
 45252  348467      0      0  3  0x40014200                idle1
 38583  280937      0      0  3     0x14200  bored         softnet1
 83467  386576      0      0  2     0x14200                softnet0
 54823  161829      0      0  3     0x14200  bored         systqmp
 69820  444938      0      0  3     0x14200  bored         systq
 87910   56778      0      0  3     0x14200  tmoslp        softclockmp
 21669  472696      0      0  3  0x40014200  tmoslp        softclock
 99270  306964      0      0  3  0x40014200                idle0
     1  379263      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 77960 (syz-executor) thread 0xffff80003c45d780 (354536)
exclusive rrwlock inode r = 0 (0xfffffd80601ad7d0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x279
#7  ufs_makeinode+0xcd
#8  ufs_mknod+0x5b
#9  VOP_MKNOD+0x101
#10 domknodat+0x469
#11 syscall+0xb17
#12 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80601ad208)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  domknodat+0xb4
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 58614 (syz-executor) thread 0xffff80003c45da18 (98806)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8389d228)
#0  witness_lock+0x5f1
#1  unp_externalize+0x155
#2  soreceive+0xc24
#3  recvit+0x40b
#4  sys_recvmsg+0x1bf
#5  syscall+0xbd4
#6  Xsyscall+0x128
exclusive rwlock sbufrcv r = 0 (0xffff8000014d2410)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  sblock+0xb6
#3  soreceive+0x27d
#4  recvit+0x40b
#5  sys_recvmsg+0x1bf
#6  syscall+0xbd4
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10196  11031K   11302K 166960K     11441        0
            pcb    17     12K      12K 166960K        40        0
         rtable   225      8K       8K 166960K       380        0
             pf    35     17K      19K 166960K        77        0
         ifaddr    42      7K       8K 166960K        65        0
        ifgroup    56      2K       2K 166960K        94        0
         sysctl     4      1K       9K 166960K         9        0
       counters    70     37K      38K 166960K       188        0
       ioctlops     0      0K       4K 166960K      1548        0
            iov     0      0K      24K 166960K        14        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1374     86K      87K 166960K      1490        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     9      0K       0K 166960K        11        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      93K 166960K       275        0
          sigio     0      0K       0K 166960K         6        0
           proc    72    115K     164K 166960K       545        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        24        0
       in_multi    93      6K       7K 166960K       125        0
    ether_multi     1      0K       0K 166960K         8        0
            mrt     0      0K       0K 166960K         2        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    61    281K     281K 166960K        61        0
           exec     0      0K       1K 166960K       411        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   257    178K     196K 166960K      4449        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    44     88K     105K 166960K      1439        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         8        0
            NDP    12      0K       2K 166960K        42        0
           temp    45   8648K    8714K 166960K     18828        0
         kqueue    15     22K      28K 166960K        61        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       47    0       42     1     0     1     1     0     8    0
rtentry    176      116    0       17     6     0     6     6     0     8    0
unpcb      144      180    0      161     1     0     1     1     0     8    0
syncache   336        4    0        4     1     0     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      736       47    0       41     1     0     1     1     0     8    0
arp        136       19    0        3     1     0     1     1     0     8    0
inpcb      328      183    0      173     2     0     2     2     0     8    0
nd6        152       24    0        3     1     0     1     1     0     8    0
pkpcb       40       33    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192      56    0       55     1     0     1     1     0     8    0
pppxif     1504       3    0        2     1     0     1     1     0     8    0
pffrag     232        6    0        3     1     0     1     1     0   482    0
pffrnode    88        6    0        3     1     0     1     1     0     8    0
pffrent     40        9    0        6     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       28    0        0     1     0     1     1     0     8    0
pfstkey    128       28    0        0     1     0     1     1     0     8    0
pfstate    384       28    0        0     3     0     3     3     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      466    0       52    29     0    29    29     0     8    0
art_table   40      467    0       52     5     0     5     5     0     8    0
art_node    32      116    0       26     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        1     1     0     1     1     0     8    0
semupl     112        2    0        2     1     0     1     1     0     8    1
semapl     112        8    0        1     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     1859    0      344    96     0    96    96     0     8    0
ffsino     296     1859    0      344   118     0   118   118     0     8    0
nchpl      144     2242    0      542    64     0    64    64     0     8    0
rtmask      32        4    0        4     1     0     1     1     0     8    1
vnodes     216     2018    0        0   113     0   113   113     0     8    0
namei      1024    7141    0     7140     2     1     1     2     0     8    0
percpumem   16      109    0       59     1     0     1     1     0     8    0
kstatmem   264       54    0       28     3     0     3     3     0     8    1
scxspl     216     8341    0     8340     3     2     1     2     1     8    0
plimitpl   152       46    0       29     1     0     1     1     0     8    0
sigapl     424      595    0      547     7     0     7     7     0     8    0
knotepl    120      306    0        0    10     0    10    10     0     8    0
kqueuepl   224       87    0       75     2     0     2     2     0     8    1
pipepl     344      136    0      109     3     0     3     3     0     8    0
fdescpl    528      579    0      547     3     0     3     3     0     8    0
filepl     160     2624    0     2338    12     0    12    12     0     8    0
lockfpl    104       76    0       74     1     0     1     1     0     8    0
lockfspl    48       35    0       33     1     0     1     1     0     8    0
sessionpl  144       22    0       13     1     0     1     1     0     8    0
pgrppl      48       31    0       14     1     0     1     1     0     8    0
ucredpl    104      243    0      229     1     0     1     1     0     8    0
zombiepl   144      549    0      547     1     0     1     1     0     8    0
processpl  1232     595    0      547     5     0     5     5     0     8    0
procpl     664      871    0      815     6     0     6     6     0     8    0
sockpl     752      443    0      376     7     0     7     7     0     8    0
mcl64k     65536      6    0        0     1     0     1     1     0     8    0
mcl16k     16384      6    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     124    0        0    16     0    16    16     0     8    0
mcl2k      2048      40    0        0     5     0     5     5     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      253    0        0    16     0    16    16     0     8    0
bufpl      280     3316    0      133   228     0   228   228     0     8    0
anonpl      32     5323    0        0    43     0    43    43     0   246    0
amapchunkpl 152   13129    0    12617    28     0    28    28     0   158    7
amappl16   200     2065    0     2035     6     2     4     5     0     8    0
amappl15   192        8    0        8     1     1     0     1     0     8    0
amappl14   184        9    0        7     1     0     1     1     0     8    0
amappl13   176      436    0      434     1     0     1     1     0     8    0
amappl12   168      953    0      909     3     0     3     3     0     8    0
amappl11   160       93    0       93     1     1     0     1     0     8    0
amappl10   152       74    0       60     1     0     1     1     0     8    0
amappl9    144      245    0      245     1     1     0     1     0     8    0
amappl8    136       28    0       25     1     0     1     1     0     8    0
amappl7    128       91    0       90     1     0     1     1     0     8    0
amappl6    120      283    0      268     1     0     1     1     0     8    0
amappl5    112       83    0       72     1     0     1     1     0     8    0
amappl4    104      427    0      396     1     0     1     1     0     8    0
amappl3     96     2141    0     2046     4     1     3     3     0     8    0
amappl2     88      693    0      617     2     0     2     2     0     8    0
amappl1     80     9853    0     9231    15     0    15    15     0     8    0
amappl      88     3674    0     3502     5     0     5     5     0    92    0
uvmvnodes   80     2018    0        0    42     0    42    42     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        2    0        0     1     0     1     1     0     8    0
uaddrrnd    24      579    0      547     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      579    0      547     1     0     1     1     0     8    0
vmmpekpl   168     6596    0     6562     2     0     2     2     0     8    0
vmmpepl    168    44630    0    42663    90     0    90    90     0   357    0
vmsppl     488      578    0      547     5     0     5     5     0     8    0
rwobjpl     80    17259    0    14259    62     0    62    62     0     8    0
pdppl      4096    1166    0     1094   106    32    74    88     0     8    2
pvpl        32    12922    0        0   105     0   105   105     0   265    0
pmappl     256      578    0      547     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      285    0       35     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff83877ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8389d020) at __mp_lock+0x192
intr_handler(ffff80003c42dc00,ffff80000006ac00) at intr_handler+0xe9
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__mp_lock(ffffffff8389d020) at __mp_lock+0x192
intr_handler(ffff80003c42dd60,ffff80000007aa80) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff8389d020) at __mp_lock+0x192
syscall(ffff80003c42df30) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x588a45eda40, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd80601ad8f8,9,0) at witness_checkorder+0x10b9
rw_do_enter_write(fffffd80601ad8e0,1) at rw_do_enter_write+0xba
rrw_enter(fffffd80601ad8e0,1) at rrw_enter+0xc6
VOP_LOCK(fffffd805f8ece90,2001) at VOP_LOCK+0xa3
vn_lock(fffffd805f8ece90,2001) at vn_lock+0xa4
vfs_getcwd_common(fffffd805f8ece90,fffffd805f8ec6f8,0,0,200,0,3fb4166135655016) at vfs_getcwd_common+0xd1
vn_isunder(fffffd805f8ece90,fffffd805f8ec6f8,ffff80003c45da18) at vn_isunder+0x56
unp_externalize(fffffd8077d0af00,33,0) at unp_externalize+0x26f
soreceive(ffff8000014d2320,ffff8000373f9088,ffff8000373f9038,0,ffff8000373f9070,ffff8000373f91fc,7b6c200df5f44b20) at soreceive+0xc24
recvit(ffff80003c45da18,45,ffff8000373f91d0,0,ffff8000373f9280) at recvit+0x40b
sys_recvmsg(ffff80003c45da18,ffff8000373f9330,ffff8000373f9280) at sys_recvmsg+0x1bf
syscall(ffff8000373f9330) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x588bf391be0, count: -14