last executing test programs:

4.97276303s ago: executing program 7 (id=3496):
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200)
r0 = kqueue()
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x401, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa)
r1 = socket(0x2, 0x3, 0x2f)
r2 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x7, 0x2}, 0x8)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r3 = syz_open_pts()
close(r3)
syz_open_pts()
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$WSKBDIO_SETMAP(r4, 0x8010570e, &(0x7f0000000140)={0x0, 0x0})
ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5)
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
select(0x40, &(0x7f00000001c0)={0x2, 0x6, 0x100000000000, 0x3, 0x5, 0xcdb5, 0x10, 0xd666}, &(0x7f0000000240)={0x7, 0x7, 0x0, 0x1000, 0x4, 0x2, 0x2, 0x4cfd000000000000}, &(0x7f00000002c0)={0x7f, 0x1, 0x9, 0x8, 0x7, 0x6, 0x8, 0x80000000}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r2, 0x0, 0x0, 0x402, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa)
r5 = dup(r1)
kevent(r5, &(0x7f0000000080)=[{{r5}, 0xfffffffffffffffd, 0x8, 0x40000000, 0x1}], 0x4b, &(0x7f0000000100)=[{{r5}, 0xfffffffffffffff9, 0x40, 0x20000000, 0x400, 0xb}], 0x2, &(0x7f0000000140)={0xc57, 0x22})
fchflags(r1, 0x10000)
setsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket(0x2, 0x3, 0x0)
r7 = dup(r5)
dup2(r7, r6)
connect$unix(r6, &(0x7f0000000000), 0x10)
sendto$inet(r5, &(0x7f00000001c0)="5e1351d18b9da08c", 0x90, 0x0, 0x0, 0x0)
r8 = open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x2)
kevent(r0, &(0x7f0000000000)=[{{r8}, 0xffffffffffffffff, 0xa1, 0x2, 0x7, 0x1}], 0x4, 0x0, 0x6, 0x0)

4.96805179s ago: executing program 7 (id=3499):
mprotect(&(0x7f0000068000/0x3000)=nil, 0x3000, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0xef000, 0x4)
sendto(r0, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0)
syz_open_pts()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="82544f47c21e6ed7eda0f5908bb565b18d7c51f78b06ccffb4050080050000000000000000fd340e000000000000003d34", 0x31}], 0x1}, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TIOCSETA(r1, 0xc4504444, &(0x7f0000000740)={0xe270, 0x10003, 0x3, 0x20000083, "0400", 0xfffffffd, 0x40000009})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8, [{0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x3}, {}, {0x0, 0x5f}, {0x2}, {0x1, 0x2}, {}, {}, {0x0, 0x1fd}, {0x3, 0x10000}, {0x2, 0xffc}, {0x0, 0x2}, {}, {0x2, 0x2}, {0x3}, {0x2}, {0x0, 0x7ff}, {0x5, 0xffffffff}, {}, {0x3, 0x4}, {0x0, 0x400}, {}, {0x2, 0x3}, {0x2, 0xfffffffd}, {}, {0x2}, {0x1}, {0x1, 0xa}, {0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x0}, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0)
msgget$private(0x0, 0x44)

4.803711911s ago: executing program 7 (id=3503):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004}) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x9, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000005}, {0x3, 0x0, 0x6, 0xfff}, {0x1, 0x4baa, 0x803, 0x9}, {0x4, 0xe2, 0x3, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7}, {0x3, 0x1, 0x6, 0x8bfe}, {0x0, 0x0, 0x8, 0x9}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x104, 0x400009, 0xa1}, {0x3, 0x7e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0xffffff90, 0x9}, {0x9bdf, 0x1, 0x2, 0x400}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
socket(0x18, 0x3, 0x0) (async)
r0 = socket(0x18, 0x3, 0x0)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='#', 0x1}], 0x1)
ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) (async)
ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100))
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x3}, 0x2, &(0x7f0000000140)="34967ba6a70e1f", &(0x7f0000000080)=0x7, &(0x7f0000000180)="c3533ff8bc9cd6f05e3a4c1e31e0cbcd2f2997e542beb0190b5dbc63ed1bc8ac6404880ef6afb30c66cabc95da34dc89ca3f3543cc40915a574838b9a4a4894be0de41c6c881ff59ee18394d0358d1973547816faf347f8bda19f82fc682becc9f8244d3c9765b8661c30980c42fa1daf7bb2b18daf508abf2a08146fa67b4b29965847288474c8ffe141440444b9ace16202782a679311f83ea4c6897150707b57def5638bed751de0400000000000000088a97f4a0fc95f793e61db017f55715a8ea7d134e68e9741d5c7e0f6d3e9aeec25efe0f2c", 0xd6)
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) (async)
r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000080))
unveil(0x0, &(0x7f00000002c0)='x\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)

4.650611413s ago: executing program 7 (id=3512):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
syz_emit_ethernet(0x11c, &(0x7f0000000300)=ANY=[]) (async)
sysctl$net_mpls(0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)="faee20", 0x3)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f0000000100)="82", 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1a}, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x1a, 0x0, 0x0)

4.639806461s ago: executing program 7 (id=3518):
syz_emit_ethernet(0xe, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES64=0x0])
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000300)=ANY=[@ANYBLOB="ca5465030000007cd7ff0800000000000000", @ANYRESDEC, @ANYRESHEX])
r0 = socket(0x2, 0x2, 0x0)
bind(r0, &(0x7f0000000180)=@un=@file={0x0, './file1\x00'}, 0xa)
connect$unix(r0, &(0x7f0000000000), 0x10)
r1 = socket(0x2, 0x2, 0x0)
connect(r1, &(0x7f00000002c0)=@un=@file={0x0, './file0\x00'}, 0xa)
connect$unix(r1, &(0x7f0000000000), 0x10)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x26, 0x9, 0x1, 0xfffffff2}]})
sysctl$hw(0x0, 0x0, &(0x7f0000000280)="50041b02003e807447ff000800000080006ea9294bc1", &(0x7f0000000000)=0x16, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="a7d0c14a285cffffffffffff080045fc00140000800000019078ffffffffac1400bbe8c53bfa32e770f8129753d4d268f1d2f7fbdb387240a5cf7aa31c811ac87f10eaefbb51ca45fff144abd61211ffd7c5c8285c69d070671cd9f15ca3a3"])
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x17, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000003c0)={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff7b)
r3 = geteuid()
chown(&(0x7f0000000000)='./file0\x00', r3, 0xffffffffffffffff)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0xfe, 0x9}, {0x6, 0x6, 0x1, 0xfffffff2}]})
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000380)="16feb7ff33e293fac26b57420dca4e8700010000130000007ad6e4dc9a8cddf38b30922ce29f8a2e2700f309ce710638f871487d8ed27360e19412ea", 0x7}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f0000000300)="00231b000f400095043f0080800000001f00385c046200000817c500", &(0x7f0000000000)=0x1c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r4, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe)

4.488481617s ago: executing program 7 (id=3526):
execve(0x0, 0x0, 0x0)
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x40000000, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc})
syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[@ANYBLOB="ff02", @ANYBLOB="e686ddcbef8453c308c0dfea24347aaf8b822d24c2bc78bcab53468352577b65e0ed5501d7feb7e183a59ad2823ed19294ebfec8483908ee403a", @ANYBLOB="01b8e1edc253c5279439659edbc5ed93440f87cdea3e226bcc49fe8c11861abb0c51ed0eb7fc7e2ce2fa76aa162949f3c13add2a296db3d4b00cd7def5750ab0875fa8586d388d5be96903ad589ae132fd52234c4b878aefccbd647813e823e1662e9a88"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
getrlimit(0x6, &(0x7f0000000080))
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r3 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))
r4 = socket(0x2, 0x3, 0x1)
connect$unix(r4, &(0x7f0000000000), 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0}, 0xc)
close(r4)
syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)

2.958198792s ago: executing program 3 (id=3575):
mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0xd02)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pread(r0, &(0x7f0000000180)='+', 0x1, 0x8000000000000000)
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
r1 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}})
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r3 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0206922, &(0x7f00000001c0))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='./file2\x00', r4, &(0x7f0000000240)='.\x00')
ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000000))

2.957950004s ago: executing program 3 (id=3576):
mkdir(&(0x7f0000000180)='./file0\x00', 0x119)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
socket(0x800000018, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file2\x00'}, 0xa) (async)
r1 = socket(0x800000018, 0x1, 0x0)
r2 = accept$unix(r1, &(0x7f0000000100)=@file={0x0, ""/24}, &(0x7f0000000240)=0x1a)
setsockopt(r2, 0x6d, 0x2, &(0x7f0000000280)="98b071183b3a2f08c85393309a31a215a4e45d2da2ffd787b17be6d6f4da9617fa3864e664c545c7bfdcef1006b31a285958d3be9e2a182ca96816b74595c23ebe0bd3e6da14f7129aa4eb0241d818e04daca7bcac385e26e3df6bec116474f3343bc678963a3db85ef1c5bfba20c4b4896652d7ce0c3616ea6aedbee0b99e3d8b0371e989ddddf542cde68ec7961050429a328cb8cf66984b226771d3237995a499aa80f4a44a97dada", 0xaa) (async)
setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x5, 0x8000000000000001})
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')

2.957234176s ago: executing program 3 (id=3577):
sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000003340)="01000000", 0x4)
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6307e410000001fdfe800056b39d3d59a6a52e8e521eaeb7000000000000000000000000bb"])

2.95675674s ago: executing program 3 (id=3578):
sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, &(0x7f0000000040)="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", &(0x7f0000000180)=0xff, &(0x7f00000001c0)="7c28e61cd180469b154b42e31063cb51e3468ce30461c797bf4489584c831d3ebb491e80577866f91bf9434e73480416cdc9199eecb21ebfa40f0dd5a449c3e16d0b678751ef45c0bae9d14825d666", 0x4f)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x4, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x406, 0x3, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xfffffffffffffffc, 0x200000000002, 0xd, 0x4, 0x0, 0x400000000100], [0xfffffffffffffffe, 0xaa, 0x1000, 0x20000001, 0x5d, 0x7b98, 0x4f0e], [0x100000001, 0x8000, 0x40000003, 0x4, 0xb, 0x11000, 0xffffffff00000003], [0x104, 0x1fffffffffc, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1bb9], [{0x0, 0x4, 0x0, 0x7d06}, {0xf7fc, 0x22, 0x5, 0x2aac}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x751b, 0xffffffffffffffff}, {0x0, 0x2, 0x7d, 0x4}, {0x0, 0x1, 0x9, 0x2000000000000000}, {0xff, 0xfffffffe, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x0, 0x3}, {0xfffe, 0x3, 0x6d5, 0x7}}})
r0 = kqueue()
kevent(r0, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
close(r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getgroups(0x7, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0])

2.956543222s ago: executing program 3 (id=3579):
socket(0x18, 0x1, 0x0)
sysctl$hw(&(0x7f0000001a80)={0x6, 0xc}, 0x2, &(0x7f0000001ac0)="d7ff9708", &(0x7f0000001b80)=0x4, &(0x7f0000001bc0), 0x0)
r0 = socket(0x2, 0x8003, 0x2)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f00002cf000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f00003d5000/0x11000)=nil, &(0x7f000049e000/0x3000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, 0x2}, {&(0x7f000054a000/0x1000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffdffbfffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x3ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00'})
ioctl$WSKBDIO_SETBACKLIGHT(r1, 0x800c5712, &(0x7f0000000200)={0x8, 0x10, 0x7})
ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000140))
r2 = socket(0x2, 0x1, 0x0)
ioctl$VNDIOCSET(r2, 0xc0387200, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0})
sendto$unix(r0, &(0x7f0000000000)="b10005166000009f050000002010000000000000cea10500fef96ee6d1efd3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6e3211800040000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8345012051eeab71d89e000040381ecb664000000fdf7b6ecd27afd2e081f60cb197fc02927507b1273a34896d0a6309a7330a06525ced5eb8c7bfcb8e3fa67bea17921c1a929cfdb2dbd1c14df461bf9276e2007653619335918c11821feae", 0xb1, 0x2, 0x0, 0xffffffffffffff3a)

2.853043106s ago: executing program 3 (id=3580):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) (async)
r1 = syz_open_pts()
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000480)=0x8) (async)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="26aff0", 0x3}], 0x1) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0)
ftruncate(r0, 0x79c8) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
setuid(0xffffffffffffffff) (async)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140))
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001dc0)='*_L', 0x3}], 0x1) (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) (async)
chmod(&(0x7f0000000080)='./file0/file0\x00', 0x4d)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)

1.752758463s ago: executing program 4 (id=3613):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60})
r0 = syz_open_pts()
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x2, 0x400000, "63742200000000000000009280c9795a6b47c1d1", 0x8000})
close(r1)
syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="7144fde7ebb4c35fd0c1d5a3a102776f8606c0e92579", 0xfe12}], 0x1)
writev(r0, &(0x7f0000000900)=[{&(0x7f0000000540)="8908", 0x2}], 0x1)

942.565754ms ago: executing program 0 (id=3634):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="c4606b116e", 0x5}, {&(0x7f0000000100)='.', 0x1}], 0x2)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x8, 0x3, 0x1d, 0x564, 0x9ce8, 0xa, 0x1, 0xfffffbfffffffff9}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x406)
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1100)
open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x122)

838.358129ms ago: executing program 2 (id=3638):
kqueue()
syz_open_pts()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0x0, 0x0, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x7}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x5}, {0x6, 0x1, 0x4}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x2}}})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x8d, 0xa, 0x80000004}, {0x5, 0xfd, 0x3}, {0x6, 0xf9, 0x8, 0x4}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
r1 = socket(0x18, 0x3, 0x0)
getsockname$inet(r1, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0x3, 0x40003, 0x2, 0x800007ff, 0x5, 0x0, 0x0, 0x2, 0x100000000000305, 0x1ff})
r2 = socket(0x1, 0x1, 0x0)
ioctl$FIONBIO(r2, 0x8004667e, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc, 0x8, 0x2, 0x8}, {0x7, 0xf, 0xff, 0x100007}, {0x6, 0x0, 0x8, 0xfffffffe}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="a7d0c14a285c", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x0, 0x8000, 0x0, 0x1, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}}}}}})
socket(0x18, 0x3, 0x2)

837.864625ms ago: executing program 4 (id=3639):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf})
writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="34729b0c85826275cdcf680e4d8098fba53d1131a8be9b4788a5d07b109ba98b815538530418fd0d805eb055f64901fea76dcccadc96cde6ed704c69d1249c548fe24c294fbabb7fd09e57", 0x65}, {&(0x7f00000000c0)="e7c4a4d86cb242843ec2cbd63a9e170a73cef2a623e23e5eda0501c23699e258b514174ca57079fff349534637a55fadb4a6329962bd40adb295cff85f36d14068f2d1758c71a2ca0965bc17be0180000000000000c46de1961101376492cff60fd9ddb33432677dbe8f9bdcfbbd4d0f258ee907faa79ce1d92e47a8bf03", 0x7e}], 0x2)
syz_open_pts()
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2)

759.804318ms ago: executing program 6 (id=3640):
r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xf, 0x0, 0x4, 0x0, "0100dd2d01820000080000000000000000000009", 0x6, 0x11})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x78, 0x40000007}, {0x1, 0xf, 0xfe, 0x9}, {0x6, 0x26, 0x1, 0xfffffff2}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
writev(r1, &(0x7f0000000000), 0x0)
sysctl$hw(0x0, 0x0, &(0x7f00000007c0)="17749a1917dc112ca572ca27d187c945ef7e8cf2b34e0000009a06554f3aed275ff49ca5e14b03268fdfc322e2fbf66f37f050436dc1a6bc258581832d69fe180f811dde04ea78ac6489da27", &(0x7f0000000000)=0x4c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r1, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = socket(0x800000018, 0x3, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
r3 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40002344, 0x0)
dup2(r2, r3)
open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='x\x00')
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4)

748.83439ms ago: executing program 2 (id=3641):
syz_open_pts()

745.875762ms ago: executing program 6 (id=3642):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x5a9d, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000738000/0x4000)=nil, 0x0, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x5}, {&(0x7f0000410000/0x4000)=nil, 0x0, 0xe04}, {&(0x7f000011a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x37ed}, {&(0x7f0000028000/0x3000)=nil, &(0x7f0000826000/0x1000)=nil, 0x5}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x3ffffffffffff}, {&(0x7f0000491000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x240000001}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x5}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x0)
r0 = socket(0x2, 0x3, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8, 0x7, 0x7f, 0x40000005}, {0x28, 0xf, 0x3, 0x4007}, {0x6, 0x9, 0x1, 0xfffffff2}]})
sysctl$hw(0x0, 0x0, &(0x7f0000000240)="1a04c0840000ddce7500000000a8985d9a5554d317c53feba7fc657a3cb6de096ebca19f9dc8b4d62a5109ca71f707b43715cef934a208bd5dea2d7f54573519eb38a259f7aa0a020000000000000000000001000a09e3dd014dc729f56c432d60f787c6f5df7a09ffe67923f859711253a3a4cd18617075a515c8b0d438c638660b590ac3d36f48c2d888d7aa6f025a7b5fa6524ae8e83e3284da648919fc8ef6966e6b", &(0x7f0000000000)=0xa4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[])
close(r0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x2}, 0xc, 0x8000, 0x1})
r2 = socket(0x18, 0x3, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0xfe, 0x9}, {0x6, 0x6, 0x1, 0xfffffff2}]})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="16fe9d98ae1b78f966fd37420dc84587e09c6600002700f309ce710638f87148943fd2aea3c88fb1a40b403e63414d77e210b23570ba04eeab67220fcdf502aa89cc3de27fd8b596", 0x48}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$net_inet_etherip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="a7d0c17b4a285cffffffffffff080045fc00140000800000019078ff1400bb"])
setsockopt(r0, 0x1000000029, 0x31, &(0x7f0000000000)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
r5 = getppid()
fcntl$setown(r4, 0x6, r5)

743.604661ms ago: executing program 2 (id=3643):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x4129ff)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sysctl$kern(&(0x7f0000000500)={0x1, 0x30}, 0x2, 0x0, 0x0, &(0x7f0000000600), 0x0)

730.15874ms ago: executing program 4 (id=3645):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x80, 0x40000007}, {0x2c, 0xf, 0xf9, 0x9}, {0x6, 0x6, 0x1, 0xfffffff2}]}) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
write(r0, &(0x7f0000000280)="38530e1bd910434bfa4b51ddd0fd800cca88b7d0085dec1fb64391858ccca981842440b01b2922820333473d8d67fa6527a8bf533ce385a1858146d15b12652171cf2f15adad3ed9d87436798a6ece1db5c632468fc8c215278095c0dac5252585fa874f103747f244922cdde1345ff80715be4a49061a6c5b5ecca0604a9aedec4a0c3dba05e30af1d0687d51d227975988cf5b42f08ceb5848664f310930811569609470829bcddc627d3ed51aa1c99d0fa10726dd038f4f0e92a5c0795a4f25194aea05447384fee853ed7f", 0xcd) (async)
sysctl$hw(0x0, 0x0, &(0x7f0000000540)="001f00385c04621a000817c53fcb7c7d40b539750008007a00000000a25ef4fd94858d38f713baf55f581f1cc57659f724ce7a9aadff7b095345e91a2a29045d1a658d89f637b7e35884d1dad1e9d8f58bfe54634ae6a9e998a369acac9e2edd3a", &(0x7f0000000000)=0x61, 0x0, 0x0) (async)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) (async)
poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6}], 0x1, 0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x9}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0x8, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x5710) (async)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async)
sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe)

720.530812ms ago: executing program 6 (id=3646):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="5a67923ef0cb18997142", 0xa) (async)
r1 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc) (async)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, &(0x7f0000000040)={0x1, 0x4000000}) (async)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) (async)
seteuid(r2) (async)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
preadv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x7fffffff)

694.315468ms ago: executing program 2 (id=3647):
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = socket(0x18, 0xc003, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x4, 0x3}], 0x203, 0x0, 0x80000001, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r3 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r4 = socket(0x18, 0x1, 0x0)
r5 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x200, &(0x7f0000000240)=0x3ff, 0x0)
setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
ioctl$WSMUXIO_ADD_DEVICE(r0, 0x8004667d, &(0x7f0000000080)={0x1})
sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)

690.921156ms ago: executing program 4 (id=3648):
mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
syz_open_pts()
close(r0)
syz_open_pts()
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
open(&(0x7f00000002c0)='./bus\x00', 0x100, 0x0)
pipe(&(0x7f0000000080))
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
mknod(&(0x7f0000000200)='./bus\x00', 0x2000, 0x202)
rmdir(&(0x7f0000000340)='./file0\x00')
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4)

690.591838ms ago: executing program 6 (id=3649):
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x7ffe, 0x40009, 0x0, 0x6, 0xd89, 0x3d, 0x1, 0x0, 0x100000000642, 0x2})
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async)
r1 = open(&(0x7f0000000280)='./file1\x00', 0x80, 0x8)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x10000004, 0x1, 0x7, 0x6, 0x3, 0x80002401, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x2, 0x9, 0x7}, {0x3, 0x1ff, 0x100, 0xaf9}, {0x10006, 0x8, 0xb, 0x3}, {0xb, 0xfffffff7, 0xe, 0x3}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x7fffffff, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x0, 0x5}, {0xe0, 0x9, 0x5, 0x400003ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x800008, 0x7, 0x9}, {0x6, 0x5, 0x4, 0x30000}]}) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async)
close(r2)

688.409912ms ago: executing program 2 (id=3650):
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="e2498336ba03726e8666a321b979defe7bd38b3eb3a034d984251ee3cf44f5379883a1cd5d419ee458091d7cc6efddee7ddd2733f894ddcf166101dd35ec39460466c6b178c2e804c3a837a31e1f95d6", 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2040, 0x0)
msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5)
readv(r2, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d)
writev(r1, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0xfdf5}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28665881a3c985", 0x15}], 0x3)
mknod$loop(&(0x7f0000000300)='./file1\x00', 0x1bb5b649511cce9, 0x1)
r3 = syz_open_pts()
close(r3)
mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0)

468.127733ms ago: executing program 6 (id=3651):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x48, 0x0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x2010, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0x0)
r2 = socket(0x18, 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r3 = syz_open_pts()
close(r3)
r4 = syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0xff0, 0x5, 0x3, 0x80, "5b5dff894b61a63dfda454834f4aa9354f97312c", 0x8000, 0xfffffffe})
close(r2)
socket(0x24, 0x2, 0x0)
setsockopt(r2, 0x6, 0x5, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x9)
open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000200)={0x8000000000000003, 0x1615, 0x9, 0x5, 0x7, 0x7fffffff, 0x6, 0x8}, 0x0, 0x0, 0x0)

365.836048ms ago: executing program 6 (id=3654):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCPROMISC(r0, 0x20004269)
ioctl$BIOCPROMISC(r0, 0x20004269)
socketpair(0x1, 0x1, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0xef000, 0x4)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100)
select(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3e, 0x0)
syz_emit_ethernet(0x2a, 0x0)
syz_emit_ethernet(0x138, 0x0)
r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000340)={&(0x7f0000000000)=[{0x6, 0x4}, {0x101}], 0x2})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FIOGETOWN(r2, 0x4004667b, 0x0)
ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000000c0)={0xfffffff7, 0x4, 0x5, 0x8, "4739a56fb3a3dfbe605684dd3ddbefd19e137e5c", 0xfff, 0xfffffffa})
sendto(r1, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0)

364.451844ms ago: executing program 5 (id=3656):
ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x3})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4)
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1001, 0x0, 0x0)
ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f00000002c0))
r2 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0xc8)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000380)={0x7, 0xfffffff1, 0xfffffffa, 0x0, 0x207fff, 0x0, 0x6, 0x10, [{0x7, 0xffffffff, 0x1}, {0x8001, 0x13, 0x0, 0x7}, {0x6, 0x1, 0x8, 0x9}, {0x4, 0x401, 0x6f20c1d0, 0x3}, {0x5, 0xbc6, 0x5ac6, 0x3}, {0xc12b, 0x7fff, 0xd19, 0x9}, {0x3, 0x10000009, 0xffffff00, 0x2}, {0x3, 0x8, 0x3, 0x4000000d}, {0x4, 0xc3, 0x2, 0x6}, {0x0, 0x7fffffff, 0x400, 0x1}, {0x0, 0x0, 0x65f9, 0x40}, {0x3, 0x5, 0x402, 0x1}, {0x9, 0x5, 0x1, 0xeb}, {0x1940000, 0x6, 0x1ba}, {0x4, 0x400004c, 0x6, 0x5}, {0xc, 0x0, 0x7, 0x8001}]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000240), 0xc)
dup(r1)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
pread(r3, &(0x7f0000000300)="290d6c31f39c8373d55be75cf90fe8b46d0e3eb77c6e6ab6d7add29c4c2531a994367079af6e315133e47725e773038516dd7f35015e5aeeaab26794d7661208e7edc39b3047cf14fdbd2b24b4d185bae14ce0caa564e78893abd744c5f9", 0x5e, 0x1)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa)
setegid(0xffffffffffffffff)
setregid(0xffffffffffffffff, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x5, 0x1000, 0x40008, 0x5, 0x18002, 0x10, [{0x40006, 0x2, 0xfffeffff, 0x200a24}, {0xc5c, 0x7fff, 0x3c00a34a, 0xffffdff9}, {0x800008, 0x20f89, 0x7d, 0x9}, {0xfffffff9, 0x800, 0x3, 0x6}, {0x4, 0x803, 0xfffffff7, 0x4d8d}, {0x1ff, 0x3, 0x3, 0xb0}, {0x8000008, 0x7, 0x81ec, 0x2d}, {0x2, 0xe, 0x17, 0x100002}, {0x2, 0x87e, 0x7ff, 0x3caf}, {0x4, 0x40000090, 0x6, 0x88}, {0x1c6, 0xd, 0x4, 0x101}, {0x10001, 0x6, 0x20004, 0xc}, {0xb8d, 0x1453, 0xa, 0xf5}, {0x29a71720, 0x9, 0xd, 0x6}, {0x4, 0xb, 0xfffffff9, 0x6}, {0xfffffffe, 0x8, 0x1002, 0x1c}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f0000000500)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000180)={0x1bd1, &(0x7f0000000040)})
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
truncate(&(0x7f0000000080)='./file0\x00', 0x7ffffffffff)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
chdir(&(0x7f00000000c0)='./file0\x00')

318.354486ms ago: executing program 2 (id=3658):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000300))
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f00000002c0)='./file0\x00', 0x80, 0x102)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
ktrace(0x0, 0x0, 0xd27d43220c7ca9b, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"})
sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f0000000080)="bd0f192e", &(0x7f00000000c0)=0x74, 0x0, 0x0)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x30, 0xf, 0x3, 0x9}, {0x26, 0x9, 0x1, 0xfffffff2}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="16fe1b78f966fd37420dc84587e09c6650bc2700f3095fb69e3150c654444418b5a3c88f08789610", 0x28}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="00231b000f40008f043f0080000000000700262bbf82bf3ebec576596bdc24c6c7000817c53f3ff87d40b558750008005c000ab6257fe82e5fd758394fcbb322887f0255dc23ffee4502f09de700030000f4fb0000000000bceba5fd7944f76ff06a8ff7", &(0x7f0000000000)=0x64, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="a7d0c14a285c", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x0, 0x8000, 0x0, 0x1, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}}}}}})
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0x3, 0x100009}, {0x6, 0x9, 0x4, 0xfffffff2}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="b4f7ecf476cead6d6fa808d42987bf94e5bf47b4", 0x14}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f0000000140)="050000003b12a840000074a3d1da00353e18e1eee30d2b888f37d15f4c068eaefcca3e0600096948cd0100badcc15c447b59cff751e733cdee6904843f419fbb993c88026f9259a1ad8c82cf", &(0x7f0000000000)=0x4c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

317.665899ms ago: executing program 5 (id=3659):
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x27ff9, 0x4b6b, 0xfff9, 0x21d8b78b, "0700a460190d070a7f00000004002fcaaed20500", 0x3db, 0x40})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000900)="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", 0x23e}], 0x1)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802)
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00')
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00')

169.448701ms ago: executing program 5 (id=3662):
chmod(&(0x7f0000000000)='./file0\x00', 0x35e)
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000080)={0x6, './file0\x00', './file0\x00'})

162.313922ms ago: executing program 1 (id=3663):
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x0, 0x3c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}})
close(r0)
r1 = socket(0x11, 0x3, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x3, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000003440)=@un=@file={0x0, ""/4128}, 0x1022, 0x0, 0xffffffffffffff46, &(0x7f0000000540)=""/4093, 0xffd}, 0x1042)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
r2 = syz_open_pts()
sysctl$hw(0x0, 0x5, &(0x7f0000000500)="500e1b020bb5198774043b506ab05dbe2c8c67a600c29e3e0d81000000f394c30100215e7b8ef84fc94300a1bcd8f852adae3b000000000000000000", &(0x7f0000000000)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x19, 0x1, 0x0, 0x7}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4}, 0x2, &(0x7f0000000180)="b667ac297eb4d72f4e265d20b7ee2c9b6d20ee8df603b255e26d01fcd0e4be7a6fd7b5f1c6fd199b5d7e206076001f0cfaad7279b5560510723462cda8aff1dad30f90d7438c5032f275f735c37bc22c6412e7d710eff7feb7e5b9ae4455f8002c7c6d800cc8897a727320c7e3bd358990bf2d08783e5ac2fbadb10ee0bbe63e619f4ea37545e2da75ff21982c0803399cecc0648c60a1c48656325e9f5a11c93ab159b80c95913f1e2831f82b824f15f5dfded9f7be", &(0x7f0000000240)=0xb6, &(0x7f0000000280)="3cc0c7513cb01f9072d38015fecd87", 0xf)
close(r2)
open(0x0, 0x20000, 0x0)
rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00')

141.853243ms ago: executing program 0 (id=3664):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000001c0)=""/68, 0x44}, 0x1) (async)
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') (async)
setsockopt(r1, 0xfffff42f, 0x4, &(0x7f0000000500)="3085f53fadb094", 0x7) (async)
chown(&(0x7f0000000100)='./file0/file0/..\x00', 0x0, 0x0) (async, rerun: 32)
connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0/file0\x00'}, 0x10) (async, rerun: 32)
mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4)
r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000300)={0x8000000000000007, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x2f5, 0xb682, 0xded}, 0x0)
ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x3, "f0f0e6531cb3d513e9f96886239838180ce954e6", 0x9, 0x6}) (async)
nanosleep(0xfffffffffffffffe, 0x0) (async, rerun: 32)
sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
mprotect(&(0x7f00003d6000/0x2000)=nil, 0x2000, 0x2)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000000)={0xfffffffe, 0x5, 0x8, 0x1000, "080000400006000000010000000100ff2b0100", 0x4917, 0xa})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$BIOCSDLT(r3, 0x8004427a, &(0x7f0000000080)=0x9) (async)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0x2}, 0x100000c, 0x2a2, 0x0, 0x0, 0x6, 0x800000000000013, 0x6, 0x40})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)

141.058058ms ago: executing program 4 (id=3665):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x20000000, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x47ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x902, 0x10, [{0x0, 0x9, 0x2, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x110, 0xfffff4a1, 0x0, 0x9}, {0x1, 0x803, 0x8007, 0xb6b}, {0xa, 0x9, 0x9f7, 0x7}, {0x1, 0x650, 0x5, 0xc7}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xffe, 0x7ff, 0x14, 0xfffffff4}, {0x2, 0x200083, 0x8000005, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0x5, 0x10001, 0xe, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffff6, 0xffffffff, 0x7}, {0xd, 0x3, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x2}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x3, 0x5, 0x6, 0x9}, {0x5, 0x81, 0x40, 0x1}, {0x55, 0x0, 0x4, 0x3ff}, {0x2, 0x5, 0x7, 0x9}]})
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x8020697f, 0x0)
socket(0x18, 0x3, 0x0)
r3 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0x2, 0x3, 0x0, 0x800007ff, 0x1, 0x2, 0x1, 0x2, 0x2004007, 0x1ff})
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0)
socket(0x18, 0x3, 0x0)
setitimer(0x0, &(0x7f0000000140)={{0x7eb, 0x122800000000009}, {0xfff, 0xfffc}}, 0x0)

132.032062ms ago: executing program 5 (id=3666):
r0 = socket$inet(0x2, 0x3, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x1, 0x0) (async)
setgroups(0x1, &(0x7f0000000180)=[0x0])
setuid(0xee01) (async)
r2 = syz_open_pts()
fchmod(r2, 0xd00) (async)
r3 = getuid()
setuid(r3) (async)
seteuid(r3) (async)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x18a) (async)
chmod(&(0x7f0000000080)='./file0\x00', 0x44)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00') (async)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) (async)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)

130.107082ms ago: executing program 0 (id=3667):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x84)
ktrace(&(0x7f0000000200)='./file0\x00', 0x21436587, 0x1a2c, 0x0)
chflags(0x0, 0x1)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000), 0xc)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x7, 0x80000001, 0x7, 0xd7, "00000000000000000000cf8c077b00", 0x8, 0x3})
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1})
r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

123.663306ms ago: executing program 1 (id=3668):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000040)='./file1\x00', 0x20, 0x116)
r1 = syz_open_pts()
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
open(&(0x7f0000000000)='./file0\x00', 0x200, 0x7)
mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4)
close(r2)
close(r1)
setrlimit(0x6, &(0x7f0000000080)={0x2, 0x1})
r3 = socket(0x18, 0x3, 0x0)
setsockopt(r3, 0x1000000029, 0x25, &(0x7f0000000040)="5ab7776a", 0x4)
lseek(r3, 0x5, 0x0)
dup2(r1, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
rename(&(0x7f0000000440)='./file1\x00', 0x0)
readlink(&(0x7f0000000240)='./file1\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

72.039332ms ago: executing program 1 (id=3669):
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000002480)=[{0x0}], 0x1)
ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000040)={'./file0\x00', 0x7, 0xe, 0x2})

66.204176ms ago: executing program 4 (id=3670):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x407, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000001600)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1, 0x6)
readv(r1, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x3, 0x3, 0x3fb, 0x80000001, 0x5, 0x10, [{0x3, 0x7, 0x7, 0x1000}, {0xc5f, 0x7ff, 0x7, 0xc}, {0x3a79, 0x5, 0x3, 0xa}, {0x80000000, 0xf, 0x107, 0x70a}, {0x401, 0x7ff, 0x1002805}, {0x8, 0x4, 0xffffffff, 0xb4}, {0xce1, 0x91, 0x4f5, 0xffffffff}, {0x2, 0x801, 0xfffffffe, 0xe}, {0x4, 0x9, 0x7, 0x100000}, {0x2005, 0x1, 0x8, 0x400000}, {0x1bc, 0x80000002, 0x0, 0x7}, {0xd2, 0x2, 0x7, 0x8000009}, {0x6, 0x63, 0xc, 0x2c4}, {0x29a70716, 0xfffffffa, 0x1, 0xe01}, {0x2, 0x9, 0xfffefff9, 0xfffffffd}, {0x0, 0xbf, 0x2, 0x20000b}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffb, 0x0})
unveil(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='r\x00')
sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, &(0x7f0000000200)="a4896071", &(0x7f00000001c0)=0x4, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x407, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
preadv(r1, &(0x7f0000001600)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1, 0x6) (async)
readv(r1, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x3, 0x3, 0x3fb, 0x80000001, 0x5, 0x10, [{0x3, 0x7, 0x7, 0x1000}, {0xc5f, 0x7ff, 0x7, 0xc}, {0x3a79, 0x5, 0x3, 0xa}, {0x80000000, 0xf, 0x107, 0x70a}, {0x401, 0x7ff, 0x1002805}, {0x8, 0x4, 0xffffffff, 0xb4}, {0xce1, 0x91, 0x4f5, 0xffffffff}, {0x2, 0x801, 0xfffffffe, 0xe}, {0x4, 0x9, 0x7, 0x100000}, {0x2005, 0x1, 0x8, 0x400000}, {0x1bc, 0x80000002, 0x0, 0x7}, {0xd2, 0x2, 0x7, 0x8000009}, {0x6, 0x63, 0xc, 0x2c4}, {0x29a70716, 0xfffffffa, 0x1, 0xe01}, {0x2, 0x9, 0xfffefff9, 0xfffffffd}, {0x0, 0xbf, 0x2, 0x20000b}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffb, 0x0}) (async)
unveil(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='r\x00') (async)
sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, &(0x7f0000000200)="a4896071", &(0x7f00000001c0)=0x4, 0x0, 0x0) (async)

65.896745ms ago: executing program 1 (id=3671):
clock_settime(0x100000000000000, &(0x7f0000000000)={0x80000000000007fe})
syz_emit_ethernet(0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000088a8"])
getitimer(0x2, &(0x7f0000000080))

64.395437ms ago: executing program 0 (id=3672):
r0 = msgget$private(0x0, 0x42f)
msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
link(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x800, 0x7, 0x2000007, 0x0, 0x80000001, 0x4, 0x7, 0x10, [{0x1000000, 0x100008, 0x0, 0x71053}, {0xd8, 0x8, 0xb, 0xfffffff9}, {0x0, 0xe856, 0x4000, 0x8}, {0x1, 0x800, 0x3}, {0x6, 0xf2f, 0x9, 0x80005}, {0x40000002, 0x9, 0x8, 0x95}, {0x82ce1, 0x800, 0x5, 0x400006d}, {0x3, 0x803, 0x11, 0x5}, {0xffffffff, 0x81, 0x1f, 0x9}, {0x20000004, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x10, 0x2c, 0x975e616}, {0x800, 0x9, 0x8, 0x5}, {0x10001, 0x4, 0x6, 0x3}, {0x83, 0xffffbffa, 0x6, 0x6}, {0xe, 0x8, 0x6}, {0x0, 0x1, 0x4, 0xae89}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x2, 0x4001, 0x0)
r3 = fcntl$dupfd(r2, 0x2, r2)
close(r3)
r4 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080)=0xffffffff, 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
shutdown(r3, 0x1)
listen(r4, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="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", 0x130}], 0x1)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x6381)
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6)
ktrace(&(0x7f0000000240)='./file0\x00', 0x4, 0xb1c, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x10001, 0xeed}, {0x2, 0x204}}, 0x0)
getitimer(0x0, &(0x7f0000000080))
r5 = open(&(0x7f0000000400)='./file0\x00', 0x8000, 0x0)
kevent(r5, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{r5}, 0xfffffffffffffff9, 0x2, 0x40, 0x0, 0x40000000000005}, {{r5}, 0xfffffffffffffffc, 0xc0, 0x20000000, 0x4000000000005, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0x1, 0x1, 0x400000000000008}, {{r5}, 0xfffffffffffffffe, 0x6e, 0x4, 0xffffffff, 0xc3b}, {{}, 0xfffffffffffffffb, 0x6b28b7731859c8bc, 0x40000000, 0x9, 0x3}, {{r5}, 0xffffffffffffffff, 0x1d5, 0x80, 0xe, 0x10000}, {{r5}, 0xfffffffffffffff9, 0x14, 0x10, 0x5, 0x100000001}, {{}, 0xfffffffffffffffe, 0x38, 0x1, 0x103, 0xce5}], 0x282, 0x0)
ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x3)
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0, 0xfffe})

61.816305ms ago: executing program 5 (id=3673):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
openat$wsmuxkbd(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket(0x18, 0x3, 0x0)
r1 = syz_open_pts()
fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc, 0x10002ffffffff})
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
writev(r3, &(0x7f0000001500)=[{&(0x7f0000000040)="5e5bbe47deff925b234b5a84101707b2a430fa69d43d4089cf31c9fca616eb852231f41179e4ed1b4b3f44d601da96ed7c03fdc99842e40e7be66a7350d66208125f6e37f99cf7e295d0d93e082b217a9af3f0eb9134bf0779ff308fdd5c6e95ee51a40a1ff238f5f16adf1c13aa4ac7e474bd74476109e8e8a8f8fb2469165fe4b0c0983f552b32fee458980175f13e159b5c7c9541bb", 0x97}, {&(0x7f0000000200)="9e438e755785b9883fdda8fae3e823c4a6c3f0491f4929716f74dd6c1d3c8651fe281fe1b6ca1ebe8125616e11cda6454c4ffaa5bb9d9916ada44952bb385378b13163a9eecf826c8fd8504672d78bf51b401e1b44dd9593ccf02b00edad6261af7d0be34ffaa541d305e52ab594a453e7ea6b7e5088cdb0fef2a1741b9d11e00fe9537b40f912adb9ef1643d1dcfbf04e6f812ebb57720f7bf9b624bd2289f5ed6a27db273b472b", 0xa8}, {&(0x7f0000000140)="b4a9bc1f9bc667b6f0381ec58d9ff1dd5897bfa41cef76ee19210c550e82d418be805b3e", 0x24}, {&(0x7f0000000180)="ff", 0x1}, {&(0x7f00000002c0)="0e1cb86c1a5e5c7df500fed4235855ed3eda89935cbd2b061002af496f02dcdf9b4435001fcded803e9e9905cfc58bd2c005a6947dc4028256a45e9cdc66e07fb08e7c318150bdbb75dedda26f1ee41afd4c2f88e92b370a15b76fdcea", 0x5d}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="6d61a882cbb9f348f4b42119b52f60c4f3c1c5b7e3d45096233d0ed7eb84225d4e04bc90cc504216551800bd075de8ed229f3a8d3c006a9229ab61e528138a37469cb7d0d9b2bf992c70184e2d42a625467b38cc294144110ab6a01aa9f9f10efd1c19eee531af8a7032bb1474fa3c431021feb26b9b72a3d210daacbcf2d02d8dbaf4b025574c7dc11575105ec2853e32226f96c50e02df27c2f728aec8cae7a5909e79da3b4300a5b58d87c82d3d", 0xaf}, {&(0x7f0000001400)="d989b38c47731b2b5add6b9173e59759d8323ebfd7a38640a3e10519a42e3c0e21a1060e8b6fefe4f15d9577017155a412c001f34e8c99a0ca322af158d3e024b76755bd2e436f17e9304919b85256e79103ba3d7ed2ed541a3417c13ba645133058abb740dec8517c02c52c19cde632214b2ddd62a5d76d405c5f04461ea72a6b51109a61e70fe6", 0x88}, {&(0x7f00000014c0)="0d874de7a080d101d074996ccf2255690d", 0x11}], 0x9)
ioctl$FIONREAD(r0, 0x81206919, 0x0)
ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100))
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="00fe00feffffff0300", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}})

12.797162ms ago: executing program 1 (id=3674):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x2a, &(0x7f0000000180)="ebffcbff13b9fd812eaa4e463048e69931929648d67f6031787dffbaf793cb7404cfdcb8533a6b82cd6af6f3c2bf37f293f65c28afa5268720e32f18251fe1459a1a87fd7ccf59def2975627029e82bf57e99754397e8a03ec4f3a0488955a6a914a2bf1a9f87d54ed218c9661b8f99fd6903ceed8fcdcb14c50b493864c1cf5a3964d91d51efea2303fd1ab779c8bc518bb06b905132aaefcc3647d12c78e46c48043a43a2bf5a1f07d1f4741d56d1e915ed9fe21a3ad3c7a", 0xb9)
recvfrom(r0, &(0x7f0000000080)=""/58, 0x3a, 0x1042, 0x0, 0x0)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f00000000c0)=0x1300)
chroot(&(0x7f0000000240)='./file1\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00')

9.459804ms ago: executing program 5 (id=3675):
socket(0x18, 0x2, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r0 = syz_open_pts()
ioctl$TIOCSETD(r0, 0x40047463, 0x0)
ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, 0x0)
close(0xffffffffffffffff)
mknod(0x0, 0x2000, 0xd02)
select(0x40, &(0x7f0000000040)={0x8, 0x5, 0x8, 0xf, 0x3, 0x1000000000090, 0x45d, 0x7}, 0x0, 0x0, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
openat$vmm(0xffffffffffffff9c, &(0x7f0000002540), 0x800, 0x0)
ioctl$VMM_IOC_READREGS(r1, 0xc2485607, &(0x7f00000022c0))
chmod(&(0x7f00000001c0)='./file0\x00', 0x34a)
setuid(0xee01)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0xc3, &(0x7f0000002580)={@local, @broadcast, [], {@ipv6={0x86dd, {0x1, 0x6, "9677ea", 0x8d, 0x0, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[@routing={0xf0, 0x2, 0x0, 0x81, 0x0, [@rand_addr="14924f1c2d99f62703ed94954ba63abb"]}], @udp={{0x1, 0x1, 0x8}, {"fe783f47de2f7edf38ce7a12a9e0794d54fd5553b907e404b1ba8e32391efa9ac846438a6ae4834f10e1423365670169addbd5d59e6d110520ddfddb2f1c3b40c12a90abf7c92bcaef5b5b8b2bad4d7a3e2f926ea172b2de1fc433bb6c557acf3ea3beb4d3c0917bdaabbf6839"}}}}}}})
recvmmsg(r2, &(0x7f0000002200)={&(0x7f0000000180)={&(0x7f00000000c0)=@in, 0xc, &(0x7f0000000140)=[{&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, &(0x7f0000001200)=""/4096, 0x1000}, 0x7ff}, 0x10, 0x1, &(0x7f0000002240)={0x2, 0x4})
r3 = socket(0x18, 0x1, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x6, [{&(0x7f0000d99000/0x4000)=nil, &(0x7f000046d000/0x3000)=nil, 0x2}, {&(0x7f00000c6000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f000099c000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f000099c000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f0000a78000/0x4000)=nil, &(0x7f0000ed6000/0x4000)=nil, 0x2024}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x6}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000ed4000/0x1000)=nil, 0x8}, {&(0x7f0000b13000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x99b}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000aff000/0x1000)=nil, 0x6}, {&(0x7f0000ed5000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil, 0x3}, {&(0x7f00008cb000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x10000003e}, {&(0x7f0000ed3000/0x3000)=nil, &(0x7f0000f6b000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000999000/0x4000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f000099e000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil, 0x6}], './file0\x00', 0x6e})
setrlimit(0x7, &(0x7f0000002280)={0x1, 0x9})
r4 = socket(0x18, 0x3, 0x2)
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
setsockopt(r3, 0x1000000029, 0x3c, &(0x7f0000000040)="03000000", 0x4)

8.999417ms ago: executing program 0 (id=3676):
minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) (async)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fchmod(r0, 0x4) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$net_inet_tcp(&(0x7f0000000580)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f00000005c0)="44653db5c7a83416caf30c7f4fcb00", &(0x7f0000000600)=0xf, &(0x7f0000000640)="5efd37ec", 0x4)

892.52µs ago: executing program 1 (id=3677):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e})
r0 = syz_open_pts()
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1, 0x8}, {0x1, 0x1}, {}, {}, {0x0, 0x3}, {}, {0x3, 0xfff}, {0x0, 0x1}, {}, {0x1}, {}, {0x2}, {0x2}, {0x2}, {0x3, 0xfffffffe}, {0x0, 0x4}, {0x1, 0xfffffffd}, {}, {}, {0x1}, {0x0, 0xc561}, {}, {0x1}, {0x2}, {0x2}, {}, {}, {0x2}, {}, {0x2, 0xd}, {0x1, 0xfffffdff}]})
r1 = socket(0x18, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x2, r1)
close(r2)
ioctl$KDSETLED(r2, 0x20004b42, &(0x7f00000001c0)=0x2)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
r3 = socket(0x2, 0x4001, 0x0)
r4 = fcntl$dupfd(r3, 0x2, r3)
r5 = socket(0x2, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000000), 0x10)
r6 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
close(r0)
syz_open_pts()
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x8)
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47)
ioctl$WSDISPLAYIO_LDFONT(r4, 0x8058574d, &(0x7f0000000200)={'./file0\x00', 0xc, 0xfffffffd, 0xed5, 0x0, 0x3, 0x1, 0x3, 0x2, 0x0, 0xd6, 0xc21})
writev(r0, &(0x7f0000000640)=[{0x0}], 0x1)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', r7, 0x1})
ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f00000002c0)={0x96, 0xffffff37, 0x40, 0x7ff, 0xfffffe00, 0xa, 0x4, 0x10, [{0x7, 0xb, 0x2, 0x7fff}, {0x6, 0xa, 0xfffff679, 0x4}, {0x74b1, 0x81, 0x0, 0x9}, {0xffffffff, 0x0, 0xfff, 0x8001}, {0x4ed6, 0xc, 0x0, 0x6}, {0x2, 0x4, 0x0, 0x8}, {0x1000, 0xfffffffe, 0x10, 0x7}, {0xd6, 0x1, 0x3a5, 0xd}, {0xfff, 0x2, 0x2, 0xffffff63}, {0x9, 0x7, 0x8001, 0x7fff}, {0xb7, 0x5, 0x6}, {0x200, 0x4, 0x6, 0x3c}, {0x2, 0x40, 0x81}, {0x5, 0xffff, 0x4, 0x9}, {0x8, 0x9, 0x9, 0x9}, {0x8, 0x0, 0x86, 0x3}]})
close(r7)
ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000180)=[{0x0}], 0x1)

0s ago: executing program 0 (id=3678):
r0 = socket(0x2, 0x400000000002, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x40)
mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x1, 0x0)
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4)
ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f00000000c0)={0xfffffffc, 0x6, {[0xed3, 0x6, 0x7, 0x4, 0xc21, 0x8, 0x6, 0x4, 0x2, 0x0, 0x7, 0x9, 0x3, 0x3, 0xc, 0x3, 0xfff, 0x9ee], [0x68, 0x800000000000000, 0xfff, 0x5, 0x4, 0x1, 0x0, 0xfffffffffffffff7, 0x1, 0x4], [0x7ff, 0xb, 0x2d51, 0xffffffffffffffff, 0x0, 0x4, 0xfff], [0x4750, 0xc, 0x4, 0x4d, 0xa0000000000000, 0x1], [{0x5, 0x5, 0xff8f, 0x6}, {0x1, 0xa94, 0x2, 0x5}, {0x4, 0xcd1, 0x5, 0x6c19}, {0x6, 0x5, 0xba4, 0xeff}, {0x247d, 0x7, 0x6, 0x3}, {0x4, 0x2, 0x2, 0x7}, {0xc6a, 0x3, 0x4, 0x4}, {0x1, 0x3, 0x400, 0x10000}], {0x0, 0x6, 0xffff8000, 0x8}, {0x9, 0x8, 0x4, 0xffffffff}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9e, 0x411}, 0x4, 0x800100000001, 0x0, 0x0, 0x0, 0x4000000000, 0x40000000001, 0x4})
r3 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8863"])
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r4 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000401})
bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
setsockopt(r0, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4)
sysctl$vm(&(0x7f0000000080)={0x2, 0xc}, 0x10b, 0x0, 0x0, 0x0, 0x31)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts.
load: 1.20  cmd: getty 25169 [ttyin] 0.00u 0.02s 0% 328k
pckbd_enable: command error
pckbd_enable: command error
uvn_flush: obj=0xfffffd8061b5d5b0, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
WARNING: thread `nfsio' (81065) exits with status -1
WARNING: thread `nfsio' (68932) exits with status -1
WARNING: thread `nfsio' (495609) exits with status -1
WARNING: thread `nfsio' (347325) exits with status -1
WARNING: thread `nfsio' (397100) exits with status -1
WARNING: thread `nfsio' (74047) exits with status -1
WARNING: thread `nfsio' (49006) exits with status -1
WARNING: thread `nfsio' (118088) exits with status -1
WARNING: thread `nfsio' (169825) exits with status -1
WARNING: thread `nfsio' (160280) exits with status -1
WARNING: thread `nfsio' (514601) exits with status -1
WARNING: thread `nfsio' (235448) exits with status -1
WARNING: thread `nfsio' (487409) exits with status -1
WARNING: thread `nfsio' (338237) exits with status -1
WARNING: thread `nfsio' (279205) exits with status -1
WARNING: thread `nfsio' (353364) exits with status -1
WARNING: thread `nfsio' (127176) exits with status -1
WARNING: thread `nfsio' (215644) exits with status -1
WARNING: thread `nfsio' (165326) exits with status -1
pckbd_enable: command error
pckbd_enable: command error
pmap_unwire: wiring for pmap 0xfffffd806caf4800 va 0x200000001000 didn't change!
WARNING: thread `nfsio' (213524) exits with status -1
pppx: unable to set addresses for pppx1, error=17
denied attempt to set clock back 4054643549 seconds
denied attempt to set clock back 14 seconds
uvn_flush: obj=0xfffffd80666f5888, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!

OpenBSD/amd64 (Amnesiac) (tty00)

login: ¹j¼õ¬|ÿ ž¨E1\…:load: 8.30  cmd: getty 44650 [ttyin] 0.00u 0.02s 0% 332k
denied attempt to set clock back 4054643578 seconds
uvn_flush: obj=0xfffffd80666f5338, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
denied attempt to set clock back 4263431337 seconds
denied attempt to set clock back 43 seconds
pppx: unable to set addresses for pppx1, error=17
vm_resetcpu: failed
load: 7.11 not a controlling terminal
vm_create: uvm_map failed: 12
denied attempt to set clock back 63 seconds
pmap_unwire: wiring for pmap 0xfffffd806ec6db00 va 0x200000001000 didn't change!
denied attempt to set clock forward to 13622315181289262
denied attempt to set clock back 125829069 seconds
uvn_flush: obj=0xfffffd8058f1a9d0, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
denied attempt to set clock back -9223372032591346476 seconds
uvm_fault(0xfffffd806c9f85d0, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff8148c828 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff800030fdba10
gsbase 0xffff8000299edff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff8148c828
Starting stack trace...
panic(ffffffff833dc4fd) at panic+0x1d0
kerntrap(ffff800030fdb960) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff8000016cb000) at dt_ioctl_record_stop+0x108
dtclose(21e5f,81,2000,ffff800032fec2c8) at dtclose+0x109
spec_close(ffff800030fdbb10) at spec_close+0x466
VOP_CLOSE(fffffd806c84feb0,81,fffffd80097fd548,ffff800032fec2c8) at VOP_CLOSE+0x132
vn_closefile(fffffd806c9da538,ffff800032fec2c8) at vn_closefile+0x12b
fdrop(fffffd806c9da538,ffff800032fec2c8) at fdrop+0x121
closef(fffffd806c9da538,ffff800032fec2c8) at closef+0x192
fdfree(ffff800032fec2c8) at fdfree+0x116
exit1(ffff800032fec2c8,0,0,1) at exit1+0x576
sys_exit(ffff800032fec2c8,ffff800030fdbe80,ffff800030fdbdd0) at sys_exit+0x1a
syscall(ffff800030fdbe80) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7de7f1e78d10, count: 242
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 11 -1 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*169149   2412      0         0x2          0    1  syz-executor
    110  17049      0         0x2        0x1    0  syz-executor
savectx() at savectx+0xae
end of kernel
end trace frame: 0x74e9f7948d10, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd806c9f85d0, 0x0, 0, 1) -> e
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x74e9f7948d10, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a2e8be0
rbx                                0
rdx                                0
rcx               0xffff800032fedcb8
rax                             0x33
r8                0xffff80002a2e8b10
r9                               0x1
r10               0xedfdf9e4cf05b956
r11               0x58b557b2e83f794d
r12                                0
r13                                0
r14               0xffff800032fedcb8
r15                                0
rip               0xffffffff821ec3ee    savectx+0xae
cs                               0x8
rflags                          0x46
rsp               0xffff80002a2e8b60
ss                              0x10
savectx+0xae:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=169149 pid=2412 tcnt=1 stat=onproc
    flags process=2<EXEC> proc=0
    runpri=50, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000fffeefa8,0xffff800032fecd38
    process=0xffff80003c4b66a8 user=0xffff80002a2e3000, vmspace=0xfffffd806f78e008
    estcpu=36, cpticks=34, pctcpu=0.21, user=1, sys=32, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 27849   90176  28806      0  2           0                syz-executor
 58279  266633  46184  60929  3        0x90  nanoslp       syz-executor
 58279  512672  46184  60929  3   0x4000090  kqread        syz-executor
 58279  514355  46184  60929  3   0x4000090  fsleep        syz-executor
  5484  317628  88970      0  3        0x80  nanoslp       syz-executor
  5484    2908  88970      0  3   0x4000080  fifor         syz-executor
  5484   67267  88970      0  3   0x4000080  fsleep        syz-executor
 28113   38057   2412      0  3        0x80  nanoslp       syz-executor
 28113  258684   2412      0  3   0x4000080  kqsel         syz-executor
 28113   68296   2412      0  3   0x4000080  sbwait        syz-executor
 28113  301405   2412      0  3   0x4000080  fsleep        syz-executor
* 2412  169149  18706      0  7         0x2                syz-executor
 28806  159095  18706      0  3        0x82  nanoslp       syz-executor
 44650  421040      1      0  3    0x100083  ttyin         getty
 63859  209271  18706      0  2         0x2                syz-executor
 40604  150472  18706      0  3        0x82  nanoslp       syz-executor
 17049     110  18706      0  7         0x3                syz-executor
 88970  154509  18706      0  3        0x82  nanoslp       syz-executor
 41231   62853  96207      0  3    0x100082  sbwait        arp
 96207  350227      1      0  3    0x10008a  sigsusp       sh
 70999  103452  18706      0  3        0x82  wait          syz-executor
 46184  498874  18706      0  3        0x82  nanoslp       syz-executor
 18706  251839  39180      0  3        0x82  kqread        syz-executor
 39180   72251   1445      0  3    0x10008a  sigsusp       ksh
  1445  450231  39188      0  3        0x98  kqread        sshd-session
 39188  330228  74914      0  3        0x92  kqread        sshd-session
 74914  360573      1      0  3        0x88  kqread        sshd
 71279  303625  74281     74  3   0x1100092  bpf           pflogd
 74281   42355      1      0  3        0x80  sbwait        pflogd
 89510  330710  18443     73  3   0x1100090  kqread        syslogd
 18443  284050      1      0  3    0x100082  sbwait        syslogd
 26505  189217      1      0  3    0x100080  kqread        resolvd
 70419  118610  72508     77  3    0x100092  kqread        dhcpleased
 34914  133243  72508     77  3    0x100092  kqread        dhcpleased
 72508   64875      1      0  3        0x80  kqread        dhcpleased
 99023  238771      0      0  3     0x14200  bored         smr
 29571  309438      0      0  3     0x14200  pgzero        zerothread
 31050   79955      0      0  3     0x14200  aiodoned      aiodoned
 90041  485334      0      0  3     0x14200  syncer        update
 97215  179401      0      0  3     0x14200  cleaner       cleaner
 80649  504255      0      0  3     0x14200  reaper        reaper
 25137   16865      0      0  3     0x14200  pgdaemon      pagedaemon
 25452  438902      0      0  3     0x14200  bored         viomb
 36472  307170      0      0  3  0x40014200  acpi0         acpi0
 62539   73241      0      0  3  0x40014200                idle1
 75881  449856      0      0  3     0x14200  bored         softnet1
 55971  515037      0      0  3     0x14200  netlock       softnet0
 57024  177716      0      0  2  0x40014200                systqmp
 46520  115308      0      0  3     0x14200  bored         systq
 93391  237695      0      0  3     0x14200  tmoslp        softclockmp
 50147   13263      0      0  3  0x40014200  tmoslp        softclock
 61753  360873      0      0  3  0x40014200                idle0
     1  352392      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10267  11148K   12496K 166960K     18098        0
            pcb    18     18K      22K 166960K       921        0
         rtable   285     16K      17K 166960K       963        0
             pf    37     18K      21K 166960K       414        0
         ifaddr    44      9K      10K 166960K       241        0
        ifgroup    59      2K       2K 166960K       455        0
         sysctl     4      1K       9K 166960K        34        0
       counters    70     37K      38K 166960K       832        0
       ioctlops     0      0K       4K 166960K      2618        0
            iov     0      0K      20K 166960K       405        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1593    100K     100K 166960K      5832        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      2K      10K 166960K        66        0
         VM map     2      1K       1K 166960K         2        0
            sem    30    136K     137K 166960K       267        0
        dirhash    72     12K      14K 166960K      2802        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    19     69K     248K 166960K      4028        0
          sigio     0      0K       0K 166960K       168        0
           proc    73    115K     164K 166960K      1178        0
        subproc    81      5K       5K 166960K       153        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       458        0
       in_multi    90      6K       7K 166960K       323        0
    ether_multi     1      0K       0K 166960K        40        0
            mrt     1      0K       0K 166960K        32        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   343   1526K    1526K 166960K       343        0
           exec     0      0K       1K 166960K      1372        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K        79        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   270    174K     188K 166960K     38053        0
       UVM aobj   116     35K      35K 166960K       124        0
     pinsyscall    45     90K     106K 166960K      5361        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       249        0
            NDP    13      0K       1K 166960K       187        0
           temp    85   8680K    8808K 166960K    191741        0
         kqueue    14     22K      31K 166960K       736        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      454    0      450     5     4     1     3     0     8    0
rtentry    176      279    0      169     8     2     6     6     0     8    0
unpcb      144     3197    0     3176    31    29     2     6     0     8    1
syncache   336       10    0       10     4     4     0     1     0     8    0
tcpqe       32        2    0        2     1     1     0     1     0     8    0
tcpcb      736     1298    0     1293    26    22     4     7     0     8    3
arp        136       46    0       25     1     0     1     1     0     8    0
inpcb      328     4930    0     4920    57    48     9    15     0     8    8
nd6        152       58    0       28     2     0     2     2     0     8    0
pkpcb       40       56    0       56    10     9     1     1     0     8    1
kcovpl      48       17    0        8     1     0     1     1     0     8    0
mppekey    1024       3    0        3     3     3     0     1     0     8    0
ppxss      1192     340    0      340     5     4     1     1     0     8    1
pppxif     1504      11    0       11     8     8     0     1     0     8    0
pfstscr     40        1    0        1     1     1     0     1     0     8    0
pffrag     232       62    0       50     1     0     1     1     0   482    0
pffrnode    88       54    0       43     1     0     1     1     0     8    0
pffrent     40      272    0      260     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344      11    0       11     7     6     1     1     0     8    1
pfstitem    24      228    0      123     1     0     1     1     0     8    0
pfstkey    128      230    0      125     4     0     4     4     0     8    0
pfstate    448      228    0      124    13     0    13    13     0     8    0
pfrule     1344      25    0       20     2     1     1     2     0     8    0
rttmr      136        5    0        5     3     3     0     1     0     8    0
art_heap8  4096       4    0        0     4     0     4     4     0     8    0
art_heap4  256     1095    0      670    39    12    27    28     0     8    0
art_table   40     1099    0      670     5     0     5     5     0     8    0
art_node    32      274    0      177     1     0     1     1     0     8    0
sysvmsgpl   40       19    0       11     1     0     1     1     0     8    0
semupl     112        2    0        2     2     2     0     1     0     8    0
semapl     112      256    0      228     1     0     1     1     0     8    0
shmpl      112      105    0        6     3     0     3     3     0     8    0
dirhash    1024     956    0      919     5     0     5     5     0     8    0
dino2pl    256     8959    0     7432    96     0    96    96     0     8    0
ffsino     296     8959    0     7432   119     0   119   119     0     8    0
nchpl      144    14562    0    13972    66    40    26    65     0     8    0
rtmask      32       40    0       40    10     9     1     1     0     8    1
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   54174    0    54174     5     4     1     2     0     8    1
percpumem   16      431    0      381     1     0     1     1     0     8    0
vcpupl     3968      15    0        1     2     0     2     2     0     8    0
vmpool     840       16    0        2     2     0     2     2     0     8    0
kstatmem   264      314    0      284     4     1     3     3     0     8    0
acpiwqpl    32        2    0        2     1     0     1     1     1     8    1
scsiplug    72       17    0       17     9     9     0     1     0     8    0
scxspl     216    81791    0    81790    17    16     1     8     1     8    0
plimitpl   152     1222    0     1202     1     0     1     1     0     8    0
sigapl     424     4282    0     4233     9     2     7     8     0     8    0
knotepl    120      823    0        0    24     0    24    24     0     8    0
kqueuepl   224     1873    0     1862    23    22     1     5     0     8    0
pipepl     344      607    0      577     9     5     4     6     0     8    0
fdescpl    528     4238    0     4205     3     0     3     3     0     8    0
filepl     160    31827    0    31585    46    31    15    17     0     8    2
lockfpl    104     1718    0     1716     6     5     1     2     0     8    0
lockfspl    48      470    0      468     1     0     1     1     0     8    0
sessionpl  144       38    0       29     1     0     1     1     0     8    0
pgrppl      48      127    0      109     1     0     1     1     0     8    0
ucredpl    104     5574    0     5560     1     0     1     1     0     8    0
zombiepl   144     5693    0     5690     4     3     1     1     0     8    0
processpl  1232    4282    0     4233     6     0     6     6     0     8    0
procpl     664    11029    0    10973    10     4     6     8     0     8    0
sosppl     176       22    0       22     7     7     0     1     0     8    0
sockpl     752     8784    0     8749   101    90    11    20     0     8    7
mcl64k     65536     23    0        0     3     0     3     3     0     8    0
mcl16k     16384      6    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       7    0        0     1     0     1     1     0     8    0
mcl4k      4096     134    0        0    17     0    17    17     0     8    0
mcl2k2     2112       2    0        0     1     0     1     1     0     8    0
mcl2k      2048     101    0        0    10     0    10    10     0     8    0
mtagpl      96      193    0        0     5     0     5     5     0     8    0
mbufpl     256     1407    0        0    83     0    83    83     0     8    0
bufpl      280    30740    0    24603   439     0   439   439     0     8    0
anonpl      32    16402    0        0   132     0   132   132     0   246    0
amapchunkpl 152  136387    0   135740    80    45    35    38     0   158    7
amappl16   200    13435    0    13320    91    74    17    38     0     8    0
amappl15   192       10    0       10     1     1     0     1     0     8    0
amappl14   184       10    0       10     1     1     0     1     0     8    0
amappl13   176      537    0      535     1     0     1     1     0     8    0
amappl12   168     4676    0     4632     3     0     3     3     0     8    0
amappl11   160       32    0       31     2     1     1     1     0     8    0
amappl10   152       90    0       73     1     0     1     1     0     8    0
amappl9    144      254    0      254     1     1     0     1     0     8    0
amappl8    136       27    0       24     1     0     1     1     0     8    0
amappl7    128      118    0      115     1     0     1     1     0     8    0
amappl6    120      394    0      378     1     0     1     1     0     8    0
amappl5    112       88    0       77     1     0     1     1     0     8    0
amappl4    104      508    0      475     1     0     1     1     0     8    0
amappl3     96    23970    0    23872     4     1     3     3     0     8    0
amappl2     88     4377    0     4299     2     0     2     2     0     8    0
amappl1     80    27090    0    26470    16     1    15    15     0     8    0
amappl      88    36512    0    36328     5     0     5     5     0    92    0
uvmvnodes   80      213    0        0     5     0     5     5     0     8    0
dma65536   65536      1    0        1     1     1     0     1     0     8    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        9    0        9     4     4     0     1     0     8    0
dma128     128      256    0      256     4     4     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        8    0        8     2     2     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72      123    0        8     3     0     3     3     0     8    0
uaddrrnd    24     4238    0     4205     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     4238    0     4205     1     0     1     1     0     8    0
vmmpekpl   168    32625    0    32557     4     0     4     4     0     8    0
vmmpepl    168   271291    0   269181   150    42   108   123     0   357    0
vmsppl     488     4237    0     4205     5     0     5     5     0     8    0
rwobjpl     80    69115    0    67704    44     7    37    41     0     8    0
pdppl      4096    8515    0     8428   151    61    90    90     0     8    3
pvpl        32    24256    0        0   195     0   195   195     0   265    0
pmappl     256     4253    0     4207     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      473    0      114    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff838a7ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838d74a0) at __mp_lock+0x192
softintr_dispatch(2) at softintr_dispatch+0x125
dosoftint(2) at dosoftint+0x54
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff838d74a0) at __mp_lock+0x199
intr_handler(ffff80002a3424b0,ffff80000006b400) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff838d74a0) at __mp_lock+0x192
ktrsyscall(ffff800032fecfc0,a,8,ffff80002a342760) at ktrsyscall+0x2c7
syscall(ffff80002a342760) at syscall+0x304
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x799f630e1cc0, count: 1
ddb{0}> trace
x86_ipi_db(ffffffff838a7ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838d74a0) at __mp_lock+0x192
softintr_dispatch(2) at softintr_dispatch+0x125
dosoftint(2) at dosoftint+0x54
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff838d74a0) at __mp_lock+0x199
intr_handler(ffff80002a3424b0,ffff80000006b400) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff838d74a0) at __mp_lock+0x192
ktrsyscall(ffff800032fecfc0,a,8,ffff80002a342760) at ktrsyscall+0x2c7
syscall(ffff80002a342760) at syscall+0x304
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x799f630e1cc0, count: -14
ddb{0}> machine ddbcpu 1
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
savectx() at savectx+0xae
end of kernel
end trace frame: 0x74e9f7948d10, count: 14
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x74e9f7948d10, count: -1