last executing test programs:

5.041362502s ago: executing program 2 (id=925):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)
truncate(&(0x7f0000000080)='./file0\x00', 0x8000)
ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000380)={'./file0\x00', 0x0, 0x7, 0x9})

4.800930822s ago: executing program 2 (id=937):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]})
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="00a0a78d0ca801c529a62469554e7017bc333f1255236e72953593fe71f100000000c5304f017b8972f4027f8578eedbbe2978aec13e0f9bcf9a0100000000ffff000078e3206493d5fd805bb191bdb5464576f9e2e709ab79c127a7541626750b0552f996d0a9a16c99980d4a9d24ac398f27482b2e54eb13f30571849b2f1cf70641f01183fb90c9abdccaaf2f49741e745e51c9b1806237044335ffd0385afb812ba815ea0f3a0753fee0af56d5bd6b", &(0x7f0000000080)=0xb1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)='\x00'/14, 0xe)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "e600000f0000ae000000000000000007abc0788a", 0x0, 0x800000})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x29a, 0x0, 0x0, 0x0, 0x4f)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) (async)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="00a0a78d0ca801c529a62469554e7017bc333f1255236e72953593fe71f100000000c5304f017b8972f4027f8578eedbbe2978aec13e0f9bcf9a0100000000ffff000078e3206493d5fd805bb191bdb5464576f9e2e709ab79c127a7541626750b0552f996d0a9a16c99980d4a9d24ac398f27482b2e54eb13f30571849b2f1cf70641f01183fb90c9abdccaaf2f49741e745e51c9b1806237044335ffd0385afb812ba815ea0f3a0753fee0af56d5bd6b", &(0x7f0000000080)=0xb1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) (async)
write(r0, &(0x7f0000000480)='\x00'/14, 0xe) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "e600000f0000ae000000000000000007abc0788a", 0x0, 0x800000}) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x29a, 0x0, 0x0, 0x0, 0x4f) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) (async)

4.704892739s ago: executing program 2 (id=942):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
r1 = socket(0x18, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x802069c5, &(0x7f00000001c0))
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="51b06502916112e1f55a7dba241eea22620315ab2baadeffb5c1d5ce617c23a3243ab542b54c7849051b1ae967b4aaa5404d0b3054b874e925692c7f17ad782138bb492e00baea1c8b071490ef4eaf13dc8ca1ba9196d866ec2ef18ddfcaeef9e6a7afad1cb9ac2f9caec206576cbe15c6ae5ebbc0b4e4e489378baecb80a39f74a0b0a0319e"])

4.32384854s ago: executing program 2 (id=955):
r0 = socket(0x2, 0x4001, 0x0)
setsockopt(0xffffffffffffff9c, 0x838, 0x1, &(0x7f0000000040)="cdb27e40f37320294b1d8352ddd1df2b2e68acd903a57409896f1e55e296bade6a76491c7f405502b17fe8f4e0f037a29882737dec192cf4de5d1b978ccd56a6622456d2defcdb92168df5231fdc6fe5adb357e402d0a4bddda99c4907286105fc1840b93bd08ad5a00e61922f505da21fed6051522ac392ab3385d7172e2e16449c5154acb82e200a908d9749bfa0b4968b2a3bc6c0d6de652b4b1441f0f2112f6c66e89bd4cc65117d13a46989b8901ccead9bc7376b470a244f644b8973c465e82ffdae6c9adbfe6465eaa49d96599e8d190be9bd03806f06", 0xda)
sysctl$kern(&(0x7f00000005c0)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f0000000000)="05000000", 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4)

4.207598068s ago: executing program 2 (id=961):
sysctl$net_inet_etherip(&(0x7f0000000080)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000140)="01000000", 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea0700383afcfe1955aa79dd17221d000000000000aaff000700000000000000000000000001010290"])
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) (async)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1)
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)="ff6b6d", 0x3)
syz_emit_ethernet(0x2d, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1f, 0xffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x2, 0x1, 0x8}, {"8b6b5c"}}}}}})
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x100) (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x100)
mquery(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0xfffffffffffffffc)
syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[])
syz_extract_tcp_res(&(0x7f0000000040), 0x81, 0x0) (async)
syz_extract_tcp_res(&(0x7f0000000040), 0x81, 0x0)

4.142718037s ago: executing program 2 (id=965):
r0 = syz_open_pts()
close(r0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0xfffffffc, 0xa3cf, 0x2800007f, 0xfffff193, "142e28a47e7ce2dbe73100ffffff0d1300", 0x1000, 0x7}) (async)
r1 = syz_open_pts() (async)
syz_open_pts() (async)
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000080)={&(0x7f0000000140)=[{0x8, 0x65d8}], 0x1})
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000240)={0x0, 0x0, 0x13, 0x0, "523cb3c8b9129c9e242fd505aac10ff300", 0x0, 0xfffffffc}) (async)
poll(&(0x7f0000000180)=[{r1, 0x1}], 0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xfffe, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x1}, {0x80, 0x0, 0x0, 0x101}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000009c0)="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", 0x6ad}], 0x1)
ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000000)=0x2) (async)
open(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x12)

2.049662883s ago: executing program 5 (id=1008):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x80, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1, 0x4)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) (async, rerun: 64)
r1 = socket(0x18, 0x3, 0x0) (rerun: 64)
r2 = socket(0x2, 0x2, 0x0)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) (async)
open(0x0, 0x800, 0x81) (async)
r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)
sendmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x30, 0xb}, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1, 0x4a) (async)
sendmsg(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400)

1.984736931s ago: executing program 0 (id=1011):
sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100051300000000000000dd03000000000013fecea10500fe3c9df96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f", 0x51, 0x0, 0x0, 0x0) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d})
mprotect(&(0x7f000011f000/0x3000)=nil, 0x3000, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0)

1.847140225s ago: executing program 0 (id=1013):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='r\x00')
pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000000000)="370aea79bb", 0x5}], 0x0, 0x3fffe)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
truncate(0x0, 0x4)
syz_emit_ethernet(0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r2 = socket(0x18, 0x3, 0x0)
connect$unix(r2, 0x0, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x54, 0x3, 0x27, 0x7}, {0x87, 0x3, 0x8, 0x2}, {0x96, 0x3, 0x80}]})
syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[])
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x4, 0xc, 0x2, 0x2}, {0xae, 0x10, 0x0, 0x3ff}, {0x6, 0x2a, 0x5, 0x4010}]})
r3 = socket(0x18, 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0a60bdf4f4428f0b0f73d3d47237f91da5d2059c1266e040db88848df71ab56420823a1aba3070fb930a29ddebb11cfe86730eec721e0af6bc406cd3f2d2d584822e5a2dca988b787135219952d8f7402de7b9291c788fea559f86c9ffda5f03d0c9559630", 0x88}], 0x1, 0x0, 0x0, 0x4}, 0xc)
ioctl$FIONREAD(r3, 0x8020697a, &(0x7f00000001c0))
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000300)="008451af1969ae090000009875bd8e746608abd334", &(0x7f0000000080)=0x15, 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
clock_settime(0x3, &(0x7f0000000240)={0x7fffffffefffffff, 0x100000000004})
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r4, &(0x7f0000000480)='\x00'/14, 0xe)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setuid(0xffffffffffffffff)
ioctl$BIOCLOCK(r5, 0x20004276)
ioctl$BIOCVERSION(r5, 0x4004667f, &(0x7f00000001c0))
ftruncate(r0, 0x40002)
pwrite(r0, &(0x7f0000000100)="93d4", 0xfffffeca, 0x5)

1.411012872s ago: executing program 0 (id=1023):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000040)=0x1)
r1 = socket$inet(0x2, 0x3, 0xf)
getsockname(r1, &(0x7f0000000080)=@un=@file={0x0, ""/248}, &(0x7f0000000180)=0xfa)
recvfrom$inet(r1, &(0x7f00000001c0)=""/211, 0xd3, 0x1800, 0x0, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x3}, 0xc)
ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000300)=0x7)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000340)="3e550bb23f1f92e20b99223c768e52116f661f55ed15e1c89d3800499eafa97c6f9e9700d9e72108518ae2e4f924769b8be0a2dc8e61d0a9c06b62a99b6df8f5bb53725f6424cc628c6d26aecfe0af11e19457b3ee6f3c53c28b5194c6ef9538f34444a621722e3db2e1340b3113f19ab91be7561971eb31b011977d410ca3ce15ddcbd130ccb30e9c211ccbdaf7a8abe70a18a62c436c1256c3aea740943b6eaef86563481f512b88f0de42fc88825a32425d37c481adc0e5ce7a27909a1f3b070acebcab129a932938d14684e6eca05c496eaef706178b288b72", 0xdb)
fcntl$setflags(r1, 0x2, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000440)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000480)=0xc)
r4 = getgid()
fchown(r0, r3, r4)
getsockopt$inet_opts(r1, 0x0, 0x74929ac2ba0fcb70, &(0x7f00000004c0)=""/139, &(0x7f0000000580)=0x8b)
connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0}, 0xc)
syz_open_pts()
getgroups(0x2, &(0x7f0000000600)=[r4, <r5=>r4])
listen(r1, 0x7)
r6 = openat$klog(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$LIOCSFD(r6, 0x80046c7f, &(0x7f0000000680)=r1)
r7 = shmget(0x0, 0x2000, 0x401, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_SET(r7, 0x1, &(0x7f00000006c0)={{0x401, r3, r4, r3, r5, 0x46f0b27795125dc0, 0x2}, 0x1, 0x1, r2, r2, 0x7, 0xffffffffffff7fff})
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
getitimer(0x1, &(0x7f0000000740))
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
ioctl$BIOCLOCK(r0, 0x20004276)
sysctl$net_inet6_ip6(&(0x7f0000000780)={0x4, 0x18, 0x29, 0x12}, 0x4, &(0x7f00000007c0)="3037e420b20e67d52649044c9faf48f323cc0c4322e8c071a8e8589b77d8090ebf8abd9ad6616cd78a57dc84e2c6c7af1d079826d3f9a8cc08621a35449fa76851334cff2418866e63b32a05a639cf38a31752644c26e227ffd5be9bb714f2852bdcd65538a14b1c1b10f0fcb85173ca36fd3221002217b6775a6a88514d6c2c4b6518b0816fdda262d5", &(0x7f0000000880)=0x8a, &(0x7f00000008c0)="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", 0xfb)
ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f00000009c0))
flock(r0, 0x5)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000a00)="6a30110d88e58950e1867b", 0xb)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x6810, 0xffffffffffffffff, 0x6)

1.348457473s ago: executing program 7 (id=1027):
r0 = getppid()
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r3 = socket(0x6, 0x3, 0xbe)
r4 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000001340)={0x0, 0x0, <r5=>0x0}, 0xc)
r6 = geteuid()
r7 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setuid(0xffffffffffffffff)
ioctl$BIOCLOCK(r8, 0x20004276)
ioctl$BIOCGRSIG(r8, 0x40044273, &(0x7f0000000080))
pwritev(r7, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
mknod(0x0, 0x2000, 0x1e5f)
sync()
r9 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
shmat(r9, &(0x7f0000ffc000/0x4000)=nil, 0x2000)
r10 = shmat(r9, &(0x7f0000ffe000/0x1000)=nil, 0x3000)
shmdt(r10)
shmdt(r10)
sendto$inet6(r7, 0x0, 0x0, 0x407, &(0x7f0000000580)={0x18, 0x1, 0xd5, 0xc3b5}, 0xc)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r11 = getuid()
sendmsg$unix(r2, &(0x7f0000001440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f00000012c0)=[{&(0x7f0000000040)="ea8975dd7fdbcc3b956a7893ad2afbd9844c2329d69a5c47852e448051ea6994e4649b4dcd54cba9d5faf1280cd59a3995c88f1a8eb3a5a384d1f73b9c4a22a1723336fa187ed0c5c1fd1c58b555aebdfb841b111d21ad9e0148f3a99c6548a025dc19e6170b06aebea6c1abf8ec26535efff831359757526eddaefd9d95bb", 0x7f}, {&(0x7f00000000c0)="55fc36d0f057289993f861c36283cedea4cae12b6dc093", 0x17}, {&(0x7f0000000200)="7d79f76dd67b8779f950a75feb678cef0b96b13f4174922d584a212bb0ca1edf68c890b7ce4c555cb99016b9740df948ce61968d26d232a12ae1f6faf38a390f1d2283668d86045323f6f0fd0f078c31573e857bace80e66c967e55a7e33f7a2a7ae36900b194332bc3b6943d42e6f471dd7f421986cb1c9a9d327df5df0bc06aa15a7cdb7af31fe910a92", 0x8b}, {&(0x7f0000000140)="fddd3765f40265a9923088ecdbe4593d977305895fc23ffe41f238f7e2ef6d748dc8", 0x22}, {&(0x7f0000000180)="a7ce77fc7941776fe6b9fe061e75d961ed2ac59c7b72a54cd0dfd2a700bff7e3e1052ef1", 0x24}, {&(0x7f00000002c0)="9d408e94131b90039d9e210e6c72134712ccb4e298c834a881587c5642083136573df5f49fa734f4373d17d1208e10e746b5e29d210fe70c4c6aa5754257aa9a500221f6901343644f34b872aa62ff31f08f2f32c64748f30d6bc45abc88882e2d0991a839fe63a1b05179a483c0cd2a49c64d4490461ea1b28915ac3e940003219e097a83350e8457380e624bd79628a91cd6e25254316a8a985961b2716c2c77a0ed33d45506d1569af8ea8a95edf512ba5fe96a20e260e20ea94ab79b46f486272f113156bac3857e9da867e7e26f2761597febe561c211cc3c010da712898acd8810a1e1ae09c30f3144547b540eb205513292b34970b2e63a4eef7215cfecd2114d52f9ebce5dc846977cbe1553e0723b80bc20f02b3c3267b129fa26b9ea979dab1e3513564af48cb2505a8701fb183a124d55fce2b233c132e33eb0be8647fed547be752fad7146bf5b5a62b0480fa8e3a188ff6ab7ad34b0a3dffa57835f6cdd3064dd031e73831a56f259798656a225a09bc2c5247f2f1e6f64eb3aebdc32ffcf0ec0160f88049d2537e4a8630d05966a8eccc0c399ada18fa422b75359e7f4c1bb1cc12159e4aebe6c0182e6ecade67ca3b79d5f7d6d2a8cb477e4f0054599f9874266c67094ad9eda9137f1952ebc4389953f3f3167ab0f314fc8c9a6945021929497521de68033cae27bcd5ffbf857bfb9a22b5b7be20dfd4e7cee0ff50d393cc9f13e6a966b4c807da864e4f40e2a8a5ee0d1c272d8c805abf03839b0d2f3c1a950ed7c30a8a361f108a8570b2b74fd7937fe196b892c92d1f6e8b4174130c32f5ed0ddf85dae56e3fca18f19a6d6ac875911a8a03780e39000f1d7a3bcfe318b9d09d9bca023b6270d24374105a6640c5e5c9bc9c5238828b0b67c4b41cdd58ffa023b5050ac7f4c31efcd7a540eb61a0d81b5fe47f4d0d135aa840395a9aef31bf57c0b57038fd51247828cad3c09ae292de6b3a037469a2f8c7894e7e5df4568eed822f1ea59dfc0ab3d4ad5e01829f5efdc1dd3419fdeb3d5fb0fb1f2520dec784e94b283a659f8e5a088e7a553fc1e30ab7e99f1a0f75a1cba92d04d5e91103d23460677fbf361374ef9602e1c9dacffe7b54d07937403d094f52565e54ee45f6e6bdac0aa74d25291b99bb85484ba1d297d3e50b6eb7cd53168ad0c22063c462f5dc00481a084fb39e7a9f57a34e1440a2be8d0c425d0ceb2dc6c9fc17ae521573f1cf6953770722c575fdcef5cc7cf708ae59b496f11a4c2e3603ab9bb5652e84e1a20aa8923c8f18e9897c9b7422dc46e338e5d3ed279eea2c11283e6c77ec7745aa157811a445367a51ea918aac9292caf37fee75871b460bc11190dcc9db1000a9390c020862e9d3582a7a569e71df69255d693ca9cde3d19e4a12e397ef379430a254841c1db917a40bf12d18625ef2456a55ead52cc954aa2c1151e77155a3d05f323dd46caa10e7404fbf08eaa4dd2bbeedfe3667ce7f3e87182641c9495542898ca6698ff5039aefa248d16c61a7a0b0f733d79e7e2da2d4decd7d803a9b1093231b8dbd129bf6cc6c53198c2116bbe53fe8f94f14721e6be6b724cda7578684d6c8ab4c3c107f6fea24ca794300821a2866faa23ff4b21863f494400192e468d521869b0ed575db3f1ba6fbe717aadf1a071d8df32bf5cc628871f26221c897259df619394786d9addf86f1ffff43d325872f1e70f65d6aa46218385ca50655e0b0c8fb3b907211e77696866772492bc40769cd1706b0a12a2a8a5376ea311a208839716334bd0feaeafee7d3b6e13dc5bf3c6c5713b2933db084d927cf3b32bb7a530de7ad15450eb42042ab69184a023af55dab187eeb96ce9c8b19b382b9aaf8b21b152c80b126672403967d6f3064c9f62a8b1438bbce79ddbaa789d21650858de02ce882e2a6b1d82569c9b52008c4e736ea2771efdd60255dfc98966b1b435dd8d52753d836a6b5a01287c0bdd503c1eaae826ec44e201bb136ef0b39575d80163beb7a0a5405c73c23f69e43209284ad15dfa7a64f038e9cd7e76fc4e759cabc089273990a86c924a0ef3e0af4228923eff343ae87ffe4faf3bf68975a2cb9f4946ec54337216920e6b659ad570b0ce7313f3c1dd74ca51b68197ce1be009682b6a0735c154cf6c136bfc00507482713ad746cfb7c52d7762d7dcc695f69f462d6a8fe441dea5317a41b4f19b84295a919b8cea611d88f30535492244c0a9ddf30f342f93235307bf43f10fbf644b695eca36693a4be566b97c71fc3c480e7bf322f1029e8d6ec2cbcecf427f135a25734c71494348e332dd94a28e75ded318147d167b19ed64ada3b1847846951bb1c5803be6c0e787ffef555015d543e93b6fe4972111d2f8c7d68e790026d3eec0e43eec048d7c18601d73489c16eae5fa7391cac03f9688fbfb383ccafadd098ef2e16fe6a502f44707c277414d39f7eb5345f532dc3427927fb85d9810e44dee9f946872947db616ab3cb2f2ecedd960bbca70a6b398e489c3302e896f8db8e99bebc6ce5d4973f58f2ff56f5a2fd61605b345e0acaf354c7756150e1e07e787569341392a63622bfccaa612fca714dd1399bdaa62ca85ef6a2ac70562bb5d7b4d5e1947d13bc88b766355941742fc629daa9b3417ea3962a127904d572f0ed3ec2e4b25dda6db003fbe82fbfa2543399f45a0c135854d0ee96f1842b12534aeca9c6bd0e803b61549dbdd1e27d1b6cc038d8c4d4d3227c067c649576275a691ecb26f5308aeaea24073afdf087eb2f08e6c6c1670aaff6ffcb8c54929645d539cebafc79742eb67c4849fee7f2fba97e0681ff250105df66f84cd54928958a1d37a313914def03a00706bf30de9e6b0ad57340db3f1f078561421e4fc1538abbeb545d497eb81b1073a2c7cfe0c397972c2245776cadbbe048210a5b183c2151539ed2d60abfee5886de08ab1e9a730ce43e874ab40f5709662647c82ad7587f0065a9b1f2d1c3b7102f8e3e56b2389e55594db9ca0a8dcf77364a5089ab3373ae37952fa45629c3a7ded2544f7763c3d7b138d0383d85541f3af1e7f247fd4d52b3001dfbe79524332915d025b0228bdffcbfff43c0b76593beb9c83733b15973af7c6993398e03dd9c285a070f09ab4deb50ee07671797110b62ff262a4253dffb6af5f54dddc049f473b28fc7d72d0b366c9b5fcf08e1948fde5839ae07f181c4edfd9d7104c4cc09aa3987bc5c7856b9b430b0da5c6c97a7091c7fca9caee995cc189cc510eec9eb038cee10fac3c8976846b1fe67dea44042759089a2c5ae1a9ca5a6b11e3807bc35ddea96e165a0b6cca62873e7e9de506f06efed746c536b67cf16257a1ad4855516a5c0e315261ad0d3304b6e06c9f8b68719e55be74ac24f1251095370bece2bfd5dfb0b9ea7fc326013091d9f34f8c0c2d2c7ecdcf7eb53df165aed51fe806acc59401926d92d692cc65aee47c0a38f41860d65087d7479c3abdc882daaecf03de80d5d9bf326e0fb1d3953908cd271ab5ae43dcc8000392b5bc77b137f30cb154369b436addc1eb35ac62c64c1de1f9605daa480e3c844fcd6c123a6af76624b73a67e40da4699c11019877139617fd183e0db279f5bea4f1b9b0e63a795a791079ed38365ab0cc6c893c4ec6b1e8d99c2c35ab97eb510dc75687aa028933835614a07b947ad4fadab76281684ecf55e7364b42908c4581a852c23eee08d814da54af859ef9436a6ee2daadb5cf2c5166a207cce7973645f9b5b5be1a991c8a74aa18c78199039bbb00ce9aba1b91944297f4c6f3d8ac23d100151947d3d93df5d55d4c10b7f3617ee7d54437846489593b1bf199c82ef6bfe9a01fe775ed1e603ceabca61bb3e33ce399bff53e53d89d92b810bc39846954136fd0b7f6f36b112beb8158dc8e06168e11b8a5e7128cd5d30b716f9adfa1aaafffa6f9dd7ae45463856847d93b788bd9e36b755593ea97f34fff1f056b03cfa9e2d550d51cb76d08d8c1902e049f1b623321f6f1a84ddcb49f2a37ec0a0f21496540ed0eed11d61a9e055efeb5060ab7e4a1f2ff6eb61e3793b897e359aed1ea04ae4102f167d1acfed0ad2ccf518e4e198bb95f9aa010831f9d1ffabbcd36bff1c64c6607fb33754e44565e1ca164df33a0021fc075920ed673a92a635d06cde44f157d79703db0ad4fd15fa20eab0f7eb3ff4dc4483ccd1c2282c734e5c4d588838c8cd5cfe6676d6d5347d661fa76c90dbf72dd5fbdb5fb5e68ca0cd8f4d21ba5abd7fd28b84d4ba290805f8699e6ed621f4302209790f8bbff0e197f6bc46331a1ab94d720d6667803462dac0659947cb131d193442bb40c408e757535535bbd194558726b6dcc0e328d141cd664e3eaa378f0d166b1e4a1c294c1ba5b92146a1503a2fc8378f80a08f9d83fbc8310b25dce074d6e8062ad41e34d82731cf24f98592426f0861ca15d017f6aaf6a61174558ff0aa5de5f77c66bd0c00b3e34530414d9ab19fdbb55f8cfc62756730eb7783540a3276821e630a76ce3f7ec8a352935a21689338a6aed7d253e14694e4c9ee4d360a788f33ddb16e04b616d4e6dbcd8629e9deb52ba1cc631a2c79e833e52b9de3b71ed345405898ccf17b034e3a6dbfc5209d57c7df86c65c8d9c26cd5c13d6b40bfad133f7b3ca43186afff3436f881f7f6f5dc0973f270986641099ab50535ee133bc80041323ced95a7787bf19e5031d02fe75a28f372b259ce1250fc6d1ef605237e8848b6f7693045349ae197e302fc51323d7d509ad7486c4bb952278f77d08ee968a5e89b83eebb2a098fd8b25bb1f3e9a9867c5bd95c578768a42c44bb1940853ba6c8044e149140b2ed61106d127da0f0a6cb0bec233e5f2b44ac61b55fb928f34202dfe871bcb4fbc6654616bec66e7fe4e5ae769bdc8d7d3598ecc14e1deb224e462bf7281918904f904ca40ca559a06aab686f997af908cd57787222bc8971b4d7936862b865cfa459b411b1c0318ab2212af1af4a50370367518f61e04825a85cc96c95bd1281523aada9f06dfce59e1e4b4f410562ff82fa41bec512175fd0a7d7346defc495278bd51b5680a91b47189336635eb438edcffd0ee6cb8e4f2435cb66847473be28fa95d64350c60e09a73d904f1da854dde3b87b92f50d324b97d0069cab9dec64e6ffaf4e3607edaed294a1dc8238db3b616bf78765002938fcf2902db714a1adfd9eaf29e64eb7c9bbe5dbb3f77ce42add32761ef71f62846885667e37a9752ee7a9e42d58c330ed1b429b6b816e12cacdb3b4972073af62316821928d2b26d759bedd476abf4923cdb0da618a305de84f9af2826b1d200c3a6b73adcecefe1ca6029270dd1282417bfee9db7070de04e5fddc7ad2a662321e0522dd3a7f796ca57edbc2eb4b36a3cd9aded5e30ab166259a5432e3aad8fc7f69adbd90721fd7e499dfaa18cc3326014a9fd3f12d174f05c646098ad4afa5d4e8aae697425b13e92107e3634986bc8afda429f14934fb943a55845790414badd9c33f4f52de4d5fdbae706fff8024bb2f3648a54653f299d512eb1736491feac02a4955fd297a8c933b266ebf291caaae4b5f4008110eccf3a3d2a76f976ec0251620e8915d7b0ee02fc851359cb21f40cdd3c9f0fb9cbd5e797316c06818889f3057968afeea7c2964a880cafa2cbe0bc4791af6d0521b15d81dcca56511281bc56ca23d1ebef9bcac6f225bc4eb18268fb10df913ab7d5c614b98d1558420636fa68f6b37444afcbba2e8528a47e094a0fe6bb7b5115966ccf8ae0d", 0x1000}], 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000ffff000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRESOCT=r5, @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000002000000000000000fbff000000000000", @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r0, @ANYRES32=r11, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x5}, 0x0)
fcntl$getown(r1, 0x5)
sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a)
open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)

1.226002735s ago: executing program 7 (id=1031):
r0 = socket(0x18, 0x3, 0x1)
getsockopt(r0, 0x29, 0x67, 0x0, 0x0)
shmget(0x0, 0x3000, 0x0, &(0x7f0000004000/0x3000)=nil)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="dd5bd74bbb3bb98f4e0d1ddcdceff73b683b86b95f6c3ecdd1b4b40b", 0x1c}], 0x1)
acct(0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x40, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r1, 0xf3)
mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r2, &(0x7f0000000480)='\x00'/14, 0xe)
r3 = msgget$private(0x0, 0x180)
semget(0x0, 0x1, 0x400)
setuid(0xffffffffffffffff)
msgctl$IPC_SET(r3, 0x1, 0x0)
unlink(&(0x7f0000000a80)='.\x00')

1.153149628s ago: executing program 1 (id=1033):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0) (async)
r2 = open(&(0x7f00000009c0)='./file0\x00', 0x615, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) (rerun: 64)
ftruncate(r2, 0x8531) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x3, 0x8, 0x8, 0xfffffff7}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x3}, {0x401, 0x200726, 0x1, 0x800007}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0x1, 0x1, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0xffffffff, 0x82, 0x1, 0x9}, {0x20000004, 0x8001, 0xd1b, 0x88}, {0x1d1, 0x10001, 0xc, 0x975e617}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8a, 0x4, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x8, 0x6}, {0x0, 0x1, 0x4, 0x30004}]}) (async)
r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40, 0x11)
readlinkat(r3, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)=""/129, 0x81)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
getpeername$unix(r0, &(0x7f0000000700)=@file={0x0, ""/263}, &(0x7f0000000840)=0x109) (async)
r4 = dup2(r0, r0)
ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0, 0xffffffffffffff37}) (async)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = open(&(0x7f0000000000)='./file0\x00', 0x10, 0x0)
sendto(r5, &(0x7f00000002c0)="b2bca69f575c2b46b38657a820da26dba8a806c7033f8823625bfbe08856787c65a2f7eeb0667ac3a5aa0b01be9cdec540c6f4fa1b0ae9fafdd9ee04f9e162cacb6a655df3d7d268bb30352486c7d783b2139cf17152dc4cc78727dda059aadd7ee5f0378f0601de528203124c44b1d13be0a2c544914bbe1b375069bf80", 0x7e, 0xc, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x2}, 0x8) (async)
truncate(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x7)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)

1.152136861s ago: executing program 5 (id=1034):
r0 = socket(0x18, 0x4001, 0x0)
shutdown(r0, 0x0)
setrlimit(0x8, &(0x7f0000000980))
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r1 = socket(0x18, 0x3, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)

1.150559102s ago: executing program 7 (id=1035):
open$dir(&(0x7f0000000040)='./file1\x00', 0x400, 0xab)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
syz_emit_ethernet(0x92, &(0x7f00000002c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x0, 0x8, 0x0, {0x1a, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x1, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x0, 0x3, 0x3, 0xf, [{[], 0x3}, {[], 0xd}, {[], 0x5}]}, @ra={0x94, 0x6, 0x62}, @ra={0x94, 0xfffffffffffffce4, 0x4}, @timestamp={0x44, 0xc, 0x9, 0x3, 0x6, [{[], 0xc}, {[], 0x4}]}, @rr={0x7, 0x17, 0x2, [@loopback, @broadcast, @rand_addr=0x1, @remote={0xac, 0x14, 0x0}, @loopback]}, @ssrr={0x89, 0x23, 0x3, [@local={0xac, 0x14, 0x0}, @loopback, @broadcast, @local={0xac, 0x14, 0x0}, @multicast2, @remote={0xac, 0x14, 0x0}, @loopback, @remote={0xac, 0x14, 0x0}]}]}}}}}}})

1.147615791s ago: executing program 5 (id=1036):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000200)={0xfffff7c3, 0x0, 0x6, 0x1000, 0x8, 0xd, 0x4, 0x10, [{0x9, 0x3, 0xff, 0x3}, {0xffffffff, 0x8, 0xff, 0x80}, {0x6f7, 0x2, 0x2, 0xae4}, {0x2, 0x55, 0x9, 0x4}, {0x4, 0x7, 0x3, 0x101}, {0x4, 0xfffffff7, 0xe, 0x7fffffff}, {0x7ff, 0xa64, 0x1ff, 0x7}, {0x506, 0x0, 0x0, 0x5}, {0x9, 0x0, 0x5, 0xc}, {0x5, 0x8, 0x3359, 0x80000001}, {0x401, 0x8, 0x8, 0x9}, {0xacd, 0x7, 0xe, 0x91}, {0x80000000, 0xdc2e, 0x6, 0x7ffd}, {0x0, 0x7ea5, 0x1ff, 0x3}, {0x7f, 0x400, 0x1, 0xfb2}, {0x9, 0x7fffffff, 0x0, 0x8}]})
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0)
sync()
sync()
sync()
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sync()
sync()
sync()
sync()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
r1 = syz_open_pts()
fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x2, 0x0, 0xfffffffffffffff8, 0x10020002fffffffa})
recvmmsg(r0, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x10, 0x1000, 0x0)
syz_emit_ethernet(0x3f, &(0x7f0000000080)={@random="73b9ccc300", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x9, 0x3a, 0x1, @empty, @mcast2, {[], @generic="8284e3554206e5bdc9"}}}}})
sync()

985.792375ms ago: executing program 3 (id=1037):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
pwrite(0xffffffffffffffff, &(0x7f0000000080)="4af17739", 0x4, 0x0)
r1 = accept(r0, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x8)
recvfrom(r1, &(0x7f0000000100)=""/215, 0xd7, 0x840, &(0x7f0000000200)=@in={0x2, 0x1}, 0xc)
setrlimit(0x1, &(0x7f00000011c0))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x131)

982.494063ms ago: executing program 1 (id=1038):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {0x2}, {}, {}, {}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x3}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3}], @icmpv6=@ni}}}}})
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f00000000c0)="40cea6923e90b2c9ef2017082c42eb1ab6fd5a27f84fcc0a33bafccd623900d5cb958bd15460f872803363d8db4510989cad072ccb504bb68a32d145d6ed05b49315606e7bcac61238e3f2a864232f609c8f09c79a22b221b65b46a03a1400"/120, 0x0, 0x0, 0xffffffffffffff2f)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r0=>0x0}, &(0x7f00000001c0)=0xc)
setgroups(0x2, &(0x7f0000000200)=[0xffffffffffffffff, r0])

979.775381ms ago: executing program 7 (id=1039):
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000183a01fe00000000000000000000000000bbff0200000000000000000000000000018284"]) (async)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async, rerun: 32)
syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, <r1=>0x41424344}, 0x1, 0x0) (rerun: 32)
syz_emit_ethernet(0x7d, &(0x7f0000000100)={@remote, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x5, 0x6f, 0x65, 0xffff, 0x5, 0x2c, 0x0, @rand_addr=0xe54, @broadcast, {[@generic={0x83, 0x3, '\b'}]}}, @tcp={{0x1, 0x0, r1, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0xfff9, 0x0, 0x7, {[@nop]}}, {"2e883cb6b74b52386520a67bc93fc468c98ae9a3da31359b365e653bc596f51f490a0bb5271543f6cc0ca893ea0d6230d09f6b64b8759f3dc07e33ba0b259b"}}}}}}) (async)
r2 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
read(r2, &(0x7f0000000280)=""/5, 0x5) (async)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @mcast2}}}}}}})

975.517272ms ago: executing program 3 (id=1040):
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000040)="53ab707ae35b81b7", 0x8)
shutdown(r0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000000)={0x40978c, 0x10001, 0xfffffc03, 0x80a1a0, "bb19007e01000001fffffffff900", 0x200, 0x4})
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000001c0)=0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x0)

741.933435ms ago: executing program 3 (id=1041):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
fcntl$lock(r0, 0x9, 0x0) (async)
setreuid(0x0, 0xee01)
seteuid(0x0)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x9011, 0xffffffffffffffff, 0x0)

733.749137ms ago: executing program 3 (id=1043):
r0 = kqueue()
r1 = socket(0x18, 0x2, 0x0)
fsync(r1)
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0))
r3 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0))

561.634837ms ago: executing program 3 (id=1044):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x3, 0x0, 0x48a8}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='[B'])
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xfffffffa)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="000400d949a5f09f9974c1f7dcaf0000000000001b40524f99ca697c8c8ffd7d14d77f6bb6abf6efda021c51a2b8d6fefb9f08fa1a", 0x35}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)='\x00', &(0x7f0000000080)=0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a817008100410086dd69eebef20008290700000000000000000000020000000001000000000000000000000000000000014e234e2100089078"])

560.990784ms ago: executing program 4 (id=1045):
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x10, 0x4, 0x0, 0x6, 0x5c, 0x1, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@lsrr={0x83, 0x2b, 0x2, [@multicast1, @remote={0xac, 0x14, 0x0}, @multicast2, @remote={0xac, 0x14, 0x0}, @multicast1, @multicast1, @remote={0xac, 0x14, 0x0}, @multicast2, @remote={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@dest_unreach={0x3, 0xd, 0x0, 0x0, 0x46, 0x3, {0x5, 0x4, 0x1, 0x3, 0x5, 0x66, 0x5, 0x5, 0x67, 0x7ff, @broadcast, @rand_addr=0x3}}}}}})

516.68703ms ago: executing program 0 (id=1046):
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x4001, 0x0)
r1 = fcntl$dupfd(r0, 0x2, r0)
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00')
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00')
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
close(r1)
r2 = socket(0x2, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080), 0x4)
shutdown(r1, 0x2)
mknod(&(0x7f0000000180)='./file0\x00', 0x6000, 0xe02)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0)
listen(r2, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
setsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f0000000080)={0xfffffffffffffff7, 0x7fff}, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
socket(0x2, 0x4001, 0x0) (async)
fcntl$dupfd(r0, 0x2, r0) (async)
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') (async)
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') (async)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async)
close(r1) (async)
socket(0x2, 0x1, 0x0) (async)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080), 0x4) (async)
shutdown(r1, 0x2) (async)
mknod(&(0x7f0000000180)='./file0\x00', 0x6000, 0xe02) (async)
open(&(0x7f0000000040)='./file0\x00', 0x800, 0x2) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) (async)
listen(r2, 0x9) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
setsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f0000000080)={0xfffffffffffffff7, 0x7fff}, 0x10) (async)

516.41792ms ago: executing program 1 (id=1047):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0)
poll(&(0x7f0000000000)=[{r0, 0x4}, {r0, 0x10}, {r1, 0x1}, {r1, 0x28}], 0x4, 0x4)
close(r0)

423.258011ms ago: executing program 1 (id=1048):
select(0x40, &(0x7f00000000c0)={0x9, 0x400000fe, 0x0, 0x4, 0x81, 0x100, 0xc, 0x5}, 0x0, 0x0, 0x0) (async)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
setrlimit(0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x5}) (async)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="a65d11c258314c53079eaea78f285b7c2a4f4c2e86e34cbfb9d3f464a9d8de5a4389ff37fc13c3bb054b2f0873ff15847ac1f13d6735", 0x36}], 0x1) (async)
unveil(0x0, &(0x7f0000000080)='W\x00')
setuid(0xffffffffffffffff) (async)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000003c0)=0x4d) (async)
r2 = kqueue()
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async)
r3 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r3) (async)
readv(r2, &(0x7f0000000480)=[{0x0}], 0x1) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff)
ioctl$FIOGETOWN(r5, 0x4004667b, &(0x7f00000000c0))
r6 = socket(0x18, 0x1, 0x0)
close(r6) (async)
socket(0x24, 0x2, 0x0) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x2, 0xffffffff, 0xfeffffff, 0x9, "080014e8eaed00", 0x6, 0x9}) (async)
setsockopt(r6, 0x6, 0x41, &(0x7f0000000280), 0x1c) (async)
mkdirat(r5, &(0x7f0000000900)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) (async)
r7 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r7, 0x8060693f, &(0x7f00000001c0))
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x40)
unveil(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='r\x00')

417.924419ms ago: executing program 5 (id=1049):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3, 0xffffffff}, {}, {0x0, 0x9}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x8000000}, {}, {0x5728e8817c14e929}, {0x0, 0x4}, {}, {}, {0x1}]})
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
write(r0, &(0x7f00000001c0)="3a79fa0c7edc9aa25d2b672455db513c6edb163a271a471ce0194d50cad87d21cb8d25102e6946340874ffb00aaa3f5c1b51c93adbe351aa60cdfb8ab2735fa7f75f545880708553b7d3d0ac52a4b5de6c99dd513d869f5bc355f3ead35aca59e86018da28ada4c69ede42f8303439610b3c9cd27b653ee505deb53bbe7dffb726", 0x81)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket(0x11, 0x3, 0x3)
sendto$unix(r1, &(0x7f0000000280)="b1000501600000001790000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001200), 0x200, 0x0)
fcntl$setown(r3, 0x6, r2)
r4 = dup2(r3, r3)
ioctl$WSDISPLAYIO_GETSCREEN(r4, 0xc0245755, &(0x7f00000002c0)={0x0, './file0/file0aaa', './file0\x00'})
fcntl$setown(r4, 0x6, r2)
setsockopt$sock_int(r4, 0xffff, 0x4, &(0x7f0000000300)=0x5, 0x4)
chroot(&(0x7f00000000c0)='./file0\x00')
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfc, 0x2}, 0x6, 0x10025, 0x0, 0x0, 0x9, 0x9, 0x9a, 0x8000000000000e62})
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r5 = socket(0x11, 0x3, 0x0)
sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000280)=0x1)
r6 = socket(0x11, 0x3, 0x0)
setsockopt(r6, 0x11, 0x1, &(0x7f0000000140)="12000000", 0x4)
sendto$unix(r6, &(0x7f0000000580)="b10005010000009f0500070105000000331c13fecea70500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297bd8aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71d808e5ed405080000fca653181afc9d3f0100"/177, 0xb1, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37)

417.408152ms ago: executing program 4 (id=1050):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0xa, r0)
ioctl$WSKBDIO_SETMODE(r1, 0x8004570b, &(0x7f00000001c0)=0x1)
setreuid(0xee00, 0x0)
r2 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x31, &(0x7f00000001c0)='\x00', 0x1)
r4 = getuid()
r5 = socket$inet(0x2, 0x3, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1001, 0x0, 0x0)
fchown(r2, r4, 0xffffffffffffffff)
setreuid(0x0, r4)
r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x4b)
fchdir(r6)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x6c1, 0x0)
getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r9=>0x0}, 0xc)
lchown(&(0x7f00000000c0)='./file1\x00', r4, r9)
ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x7, 0xfc, 0x5}]})
ioctl$BIOCSRTIMEOUT(r8, 0x8010426d, &(0x7f00000015c0)={0x810000000000, 0x7fff})
fcntl$dupfd(r7, 0x3, 0xffffffffffffffff)
r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0xa1c, 0x2, 0x25, 0x5}]})
ioctl$FIONREAD(r10, 0x8004745d, &(0x7f0000000100))

415.905455ms ago: executing program 3 (id=1051):
kqueue()
syz_open_pts()
syz_open_pts()
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="00a0a78d0ca8010000000000008000170800000055636e729535f100000000c5307b8972f402329e78eedbbe291123ea7c378a82f38ebf66499fa822b980eee08802112e973506bc21213985dc", &(0x7f0000000080)=0x4d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="91a6e34dd8bbaaaaaaaaaabb08004500001c0080000100169078000000077f00006aa630d70180004e2000089078"])
open(&(0x7f0000000000)='./file0\x00', 0x205, 0x118)
select(0x40, &(0x7f0000000180)={0x4e, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x4ca, 0x4ebfac6bbaf7962)
socket(0x10, 0x8000, 0x8)
r2 = syz_open_pts()
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
ioctl$BIOCGFILDROP(r3, 0x40044278, &(0x7f0000000380))
ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000000)=0x5)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000e40)={0xa8, 0x7, 0x9, {[0x20000008001, 0x0, 0xc759, 0x919, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7b, 0x0, 0x8000000000000, 0x0, 0x400, 0x0, 0x0, 0xffffffffffffb390, 0xfffffffffffffffb], [0xf, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1], [0x0, 0x0, 0xffffffffffffffff], [0xffffffff, 0x31, 0x0, 0x0, 0x5, 0x2], [{0x0, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffc, 0x2, 0x1}, {0x800, 0xfffffffd, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000, 0x6}, {0x8fb, 0xa760, 0xc8, 0xffffffffffffffff}, {0x217d, 0x5, 0x0, 0xfffffffffffffffe}, {0x4, 0x0, 0x0, 0x3}, {0x0, 0xfffffffd}], {0x0, 0x0, 0x8}}})
ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f00000003c0)={0x7, 0xfffff5f6})
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x7ff, 0x2, 0x100200000, 0x40000000000006, 0x7, 0xdf60, 0xf7fffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x2a32], [0xfffffffffffffffe, 0x80000001, 0x2, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fd], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x81, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0x51a5, 0x22, 0x5}, {0xc2, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x5}, {0x0, 0x100, 0x81, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}})
r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff})
ftruncate(r4, 0x40000000007)
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x50)
preadv(r5, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x810, r6, 0x0)

415.65461ms ago: executing program 1 (id=1052):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1, 0x1, 0x40000000000000, 0xfffffffffffffd, 0xffffffffffffffff})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9c, 0x5}, 0x0, 0xfffffffffffffffe, 0xfffff7ffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$FIOASYNC(0xffffffffffffffff, 0x80047469, &(0x7f00000001c0)=0x1)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x2a, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000340)="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", 0x105)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="d3ee08ceace7a6f8ff21800100000071b6e8e656ffffffffffffff5e0000000000000000001c1581", 0x28}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc02284fc157cbbd3f2c9772f90a6f320364b78b", &(0x7f0000000080)=0x28, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
shutdown(r2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, 0x0, 0x0)
connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x0}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket(0x18, 0x1, 0x0)
setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931", 0x11)

256.467363ms ago: executing program 1 (id=1054):
sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0xffffffffffffffff, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x80000001, 0x2})
setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = kqueue()
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff})
r4 = kqueue()
kevent(r4, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
kevent(r4, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0)
ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140))
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x3, 0xff, 0x1, 0xfef}, {0x7, 0x5, 0xf7, 0x3}, {0xbdd2, 0x81, 0x4, 0x6}, {0x4, 0xa, 0x2, 0x1152}, {0x2, 0x6, 0x5, 0x3}, {0x9, 0xb2, 0x1, 0x7}]})
kevent(r1, &(0x7f0000000100)=[{{}, 0xfffffffffffffffa, 0x1, 0xf0000000, 0x4, 0x400}], 0xff, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffffc, 0x64, 0x2, 0x4}, {{r0}, 0xfffffffffffffffb, 0x40, 0x8, 0x8001, 0x66c}, {{r0}, 0xfffffffffffffff9, 0x40, 0xfffff, 0x10001, 0x2}, {{r0}, 0xffffffffffffffff, 0x8, 0x8, 0x1, 0x80}], 0x5, &(0x7f00000001c0)={0x6, 0x11d})
r5 = socket(0x2, 0x2, 0x0)
close(r5)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
read(0xffffffffffffff9c, &(0x7f0000000280)=""/148, 0x94)
connect$unix(r5, &(0x7f0000000000), 0x10)

251.854656ms ago: executing program 6 (id=1055):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000000)={0x8, 0x70}) (async)
ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000000)={0x8, 0x70})
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000001b40)={0x1, 0x2a}, 0x2, &(0x7f0000001b80)="a66a08979092a4fc5412c823f8fd98faaeb01a7449210f3065f5759df99705dbb1c06882e9ede39be916b49b1c091d44", &(0x7f0000002b80)=0x30, &(0x7f0000002bc0), 0x0)
ioctl$VNDIOCSET(r1, 0x80184404, 0x0)
ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000080)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg(r2, &(0x7f0000000080)={0x0}, 0x10, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r2}, 0xfffffffffffffffe, 0x46, 0x0, 0x7eb813bb, 0x6}], 0x0, 0x0, 0xfffffffc, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0)

250.951753ms ago: executing program 4 (id=1056):
r0 = semget(0x0, 0x1, 0x693) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async)
setuid(0xee01)
ioctl$FIONREAD(r1, 0x8020697a, &(0x7f0000000040)) (async)
syz_emit_ethernet(0x75, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000ffffffffffff0800460000670000000400029078ffffffffe0000001000000004e234e2200089078b3860bc118fbf82aa4b135345b0c87d53b5c40163f70f34130b6846ed973ecc3166f91d96388aba60c0f26fd9c54b2dc4e5241d834dd11fda687eb9cc81da991782187d04ef0ac"])
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async)
open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r2, 0x6e}], 0x1, 0x0) (async)
semop(r0, 0xffffffffffffffff, 0xfc8e)

155.569112ms ago: executing program 6 (id=1057):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={&(0x7f0000000480)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x80, 0x1c3) (async)
ktrace(&(0x7f0000000240)='./file0\x00', 0x4, 0xb1c, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0xc0, 0x20000000, 0x4}], 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async, rerun: 32)
sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
ioctl$TIOCSETA(r2, 0x20004102, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000000900000000000000ffffff0b019078000b00004509000200680001ed11061affffffff00000000"])
r3 = getuid()
setreuid(0x0, r3) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async, rerun: 32)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x14c) (rerun: 32)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x2f01, 0x4, 0x20000003, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0x9, 0x20000001, 0x5b, 0x7b98, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x3, 0x0, 0xb, 0xb, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffc, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x0, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xffde, 0x80000000, 0x6d5, 0x2}}})
kqueue()
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01) (async)
unveil(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='c\x00')

153.078641ms ago: executing program 4 (id=1058):
r0 = shmget$private(0x0, 0x2000, 0x463, &(0x7f0000006000/0x2000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x1000, 0x0, 0x0, 0x0, 0x0, 0x47, 0x5d}, 0x3ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffff15e, 0x2})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8})
connect(r1, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x0}, 0x8)
setrlimit(0x2, &(0x7f0000000980)={0x60000000, 0x60000000})
setrlimit(0x8, &(0x7f0000000180)={0x2, 0x100000000})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
close(r3)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x0}, 0x8)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x1000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1f0}, 0x5, 0xfffffffffffffffe, 0xa7})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x18, 0x1, 0x0)
close(r4)
r5 = socket(0x18, 0x2, 0x0)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa)
readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1)

152.672091ms ago: executing program 0 (id=1059):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 64)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (rerun: 64)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000000000000000000001000000000000aa"]) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x200000b, 0x385, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x40}, {0x3fe, 0x200725, 0x2800, 0x7}, {0x9, 0x650, 0x0, 0x99}, {0xce1, 0xffffffff, 0x4fb, 0x2d}, {0x6, 0x803, 0x16, 0x8}, {0x2, 0x82, 0x5, 0x1005}, {0x6e75, 0x8001, 0xd1f, 0x7}, {0x1cc, 0x10001, 0xd, 0x4}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x3ff}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0x1000006, 0x5, 0x5, 0x10001002}, {0x0, 0x1, 0xfff, 0x30004}]})
msync(&(0x7f0000343000/0x2000)=nil, 0x2000, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, &(0x7f0000000000)={0x7, 0x1, 0x2, 0x3}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x3, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) (async, rerun: 64)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (rerun: 64)
ioctl$BIOCGRTIMEOUT(r3, 0x4010426e, &(0x7f00000002c0)) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) (async)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000340)="8b1809ec3f60d59e5110c1eac4f8e4ade0fadada3d054501a528b95bf2c261cd243720ca1f982334", &(0x7f0000000080)=0x28, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000480)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x80, 0x1, 0x0, 0x16, 0x0, @rand_addr=0x7, @loopback}, @udp={{0x1, 0x0, 0x8}}}}}}) (async, rerun: 32)
sysctl$hw(&(0x7f0000000000)={0x6, 0xe}, 0x2, 0x0, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000000040), &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000029, 0x40, 0x0, 0x0)
sendto$unix(r1, &(0x7f00000000c0)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d030100000000000000ef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f8343712050500b71d8000090005080000fca65361ba84913f01000008000000000000000000", 0xb1, 0x408, 0x0, 0x0)

124.606489ms ago: executing program 6 (id=1060):
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56})
syz_open_pts() (async)
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts() (async)
r1 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x19, 0xffff, 0x200499, "084880fa87f4ffbcda0988d11554e90d6602ff07", 0xe6, 0x3})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = socket(0x2, 0x1, 0x0)
setsockopt(r2, 0x0, 0x4, &(0x7f0000000000)='\v\x00\x00\x00', 0x4)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000640)=[{&(0x7f0000000080)=""/88, 0x58}, {0x0}], 0x2)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000440)="a8a3f5f1a24ae0e82f9f7c52797ce4f0c43f8156431c20175ca5e2760418f74a4569bcb65e82f71d14001c49f1246567e6dd8bd407680168a3db71755b6af54e8ac149e3292afdb58781e0ce13950900", 0x50}], 0x1) (async)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000440)="a8a3f5f1a24ae0e82f9f7c52797ce4f0c43f8156431c20175ca5e2760418f74a4569bcb65e82f71d14001c49f1246567e6dd8bd407680168a3db71755b6af54e8ac149e3292afdb58781e0ce13950900", 0x50}], 0x1)
pipe(0x0)
fcntl$dupfd(r1, 0xa, r1)

71.875431ms ago: executing program 4 (id=1061):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa)

71.135193ms ago: executing program 5 (id=1062):
sysctl$net_inet_tcp(&(0x7f0000004cc0)={0x4, 0x2, 0x6, 0xd}, 0x4, 0x0, 0x0, &(0x7f0000000040)="3bd82bbbf1af9608abca3cc8a040ca77892763443dc9", 0x16)

70.91293ms ago: executing program 7 (id=1039):
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000183a01fe00000000000000000000000000bbff0200000000000000000000000000018284"]) (async)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async, rerun: 32)
syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, <r1=>0x41424344}, 0x1, 0x0) (rerun: 32)
syz_emit_ethernet(0x7d, &(0x7f0000000100)={@remote, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x5, 0x6f, 0x65, 0xffff, 0x5, 0x2c, 0x0, @rand_addr=0xe54, @broadcast, {[@generic={0x83, 0x3, '\b'}]}}, @tcp={{0x1, 0x0, r1, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0xfff9, 0x0, 0x7, {[@nop]}}, {"2e883cb6b74b52386520a67bc93fc468c98ae9a3da31359b365e653bc596f51f490a0bb5271543f6cc0ca893ea0d6230d09f6b64b8759f3dc07e33ba0b259b"}}}}}}) (async)
r2 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
read(r2, &(0x7f0000000280)=""/5, 0x5) (async)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @mcast2}}}}}}})

70.757397ms ago: executing program 5 (id=1063):
open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xa)
setuid(0xee01)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x0)
select(0x40, &(0x7f00000000c0)={0xfffffffffffffffa, 0xeea7, 0x1, 0x101, 0x7, 0x4, 0x1000, 0x1000}, &(0x7f0000000140)={0x8, 0x10000, 0xe, 0x80, 0x800000000000005, 0x100000000, 0x9, 0xfffffffffffffffd}, &(0x7f0000000180)={0x8, 0x8, 0x0, 0x5, 0x1, 0x200948, 0xb, 0x3ff}, &(0x7f00000001c0)={0x3, 0x2})
ktrace(&(0x7f0000000340)='./file0\x00', 0x4, 0x0, 0x0)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000000029, 0x2a, &(0x7f00000001c0), 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10000)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1)
writev(r3, &(0x7f0000000480)=[{&(0x7f0000000100)="3885c55f50634340690920c58163983d54929459719ca09a2560aedb039e251b3aa3df65ced2e7a535cbca2d298753897868d27876f507", 0x37}, {&(0x7f0000000200)="ded824e9cc107c4e", 0x8}, {&(0x7f0000000380)="4f5ae16129b139dddc6101fcc2aff40f289f3197671554318a8265eb5e925456bb0a4d4f4cc6b7da001036a1584c8f9b5ff35774d825df5f9d4ab517033929c9ed39de6e214a091641e1877f4d53936ecb0b615c861300b2b91e0eb47e59a28a2bd6409b8195dd18272dba4735", 0x6d}, {&(0x7f0000000440)="3e9b9d37907ed2ca24c919985431f831aa7726b9cb7b0ab2", 0x18}], 0x4)
open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xa) (async)
setuid(0xee01) (async)
utimes(&(0x7f0000000080)='./file0\x00', 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x800, 0x2) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x0) (async)
select(0x40, &(0x7f00000000c0)={0xfffffffffffffffa, 0xeea7, 0x1, 0x101, 0x7, 0x4, 0x1000, 0x1000}, &(0x7f0000000140)={0x8, 0x10000, 0xe, 0x80, 0x800000000000005, 0x100000000, 0x9, 0xfffffffffffffffd}, &(0x7f0000000180)={0x8, 0x8, 0x0, 0x5, 0x1, 0x200948, 0xb, 0x3ff}, &(0x7f00000001c0)={0x3, 0x2}) (async)
ktrace(&(0x7f0000000340)='./file0\x00', 0x4, 0x0, 0x0) (async)
socket(0x18, 0x1, 0x0) (async)
setsockopt(r1, 0x1000000000029, 0x2a, &(0x7f00000001c0), 0x0) (async)
pipe2(&(0x7f0000000000), 0x10000) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) (async)
writev(r3, &(0x7f0000000480)=[{&(0x7f0000000100)="3885c55f50634340690920c58163983d54929459719ca09a2560aedb039e251b3aa3df65ced2e7a535cbca2d298753897868d27876f507", 0x37}, {&(0x7f0000000200)="ded824e9cc107c4e", 0x8}, {&(0x7f0000000380)="4f5ae16129b139dddc6101fcc2aff40f289f3197671554318a8265eb5e925456bb0a4d4f4cc6b7da001036a1584c8f9b5ff35774d825df5f9d4ab517033929c9ed39de6e214a091641e1877f4d53936ecb0b615c861300b2b91e0eb47e59a28a2bd6409b8195dd18272dba4735", 0x6d}, {&(0x7f0000000440)="3e9b9d37907ed2ca24c919985431f831aa7726b9cb7b0ab2", 0x18}], 0x4) (async)

69.860355ms ago: executing program 4 (id=1064):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95)
poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0)
close(r0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000440)=0x59)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, r2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
getgroups(0x1, &(0x7f0000000000)=[<r3=>0xffffffffffffffff])
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0x19, 0x10, 0x0, 0x3ff}, {0x6, 0xa, 0x5, 0x400f}]})
r5 = getegid()
setgroups(0x8, &(0x7f00000002c0)=[r2, r2, r2, r3, r3, r3, r5, r3])
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="b07eec3d06422d596f51e337031a7b4565ef3bf6b55f88162ed28c476ec2625b", 0x20}], 0x1)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000004c0)="008451af1969ae090000009875bd8e74e870c2074144695ea5351629e13da7988616a0e8e48e245a", &(0x7f0000000080)=0x28, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r6, &(0x7f0000000480)='\x00'/14, 0xe)
setgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, r2, r3])
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f0000000200)=""/25, 0x19}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f0000000380)=""/176, 0xb0}, 0x2)
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00')

1.33357ms ago: executing program 6 (id=1065):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x1, 0x100}, {0x6, 0x4a, 0x83, 0x400f}]})
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000340)="8bc4c4ec3f60d59eda3d054501a528b95bf2c261cd70390400000000", &(0x7f0000000080)=0x1c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
dup(0xffffffffffffffff)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
write(r0, &(0x7f0000000480)='\x00'/14, 0xe)

803.612µs ago: executing program 7 (id=1066):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
ioctl$TIOCSETA(r0, 0xc4504443, &(0x7f0000000740)={0x2, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x3, 0x6})
ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000240))
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd})
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)=0xffff8001)
r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x35)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = getpid()
fcntl$setown(r3, 0x6, r4)
syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, <r5=>0x41424344}, 0x4a5f420b, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="f712c50900d2ffffffffffff08004721003000678000043bae48f7fc2584d646afaef69c5c67d2119078e0000002e000000294028903040000004e224e23", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="5110000490781800"])
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4)
select(0x40, &(0x7f0000000080)={0x8, 0x7, 0x7, 0x0, 0x1, 0xc, 0x1, 0x7ff}, &(0x7f0000000100)={0x8, 0x7494, 0x80000000, 0x401, 0x10001, 0x6, 0x330, 0x9}, &(0x7f0000000180)={0x6, 0x6, 0x8000000000000000, 0x101, 0xb, 0x0, 0x7fffffffffffffff, 0x3}, &(0x7f00000001c0)={0x3784, 0x4})
sysctl$hw(&(0x7f0000002a40)={0x6, 0xf}, 0x2, 0x0, 0x0, &(0x7f0000002b00), 0x0)
r6 = socket$inet(0x2, 0x3, 0x0)
close(r6)
fchdir(r6)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x4}, {0x6, 0x6}}, 0x0)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000440)=0x2)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0)
ioctl$FIONREAD(r7, 0xc0206921, &(0x7f0000000380))
getrlimit(0x6, &(0x7f00000002c0))
ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x7, 0x1f, 0x9, 0xfffc, 0xf01}, {0x9, 0x9, 0x8000, 0x5, 0x8}]})

482.28µs ago: executing program 6 (id=1067):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async)
r0 = socket(0x18, 0x2, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x36, &(0x7f0000000000)="03000000", 0x4) (async)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
execve(0x0, 0x0, 0x0) (async)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)

276.072µs ago: executing program 6 (id=1068):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="dd5bd70bbb4bb98f4e0d1ddcdceff73b683b86b95f", 0x15}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r1, &(0x7f0000000480)='\x00'/14, 0xe)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x26, 0x0, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000463000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2b}, {&(0x7f00002ae000/0x1000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x3ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'})
sysctl$net_pipex(&(0x7f0000000340)={0x4, 0x23, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000200))

0s ago: executing program 0 (id=1069):
mknod(&(0x7f0000000200)='./file0\x00', 0x1, 0xea) (async)
sysctl$hw(&(0x7f0000000000)={0x6, 0x12}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffde9) (async, rerun: 32)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32)
sysctl$kern(&(0x7f0000000440)={0x1, 0xb}, 0x2, 0x0, 0x0, &(0x7f00000014c0), 0x0) (async)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
dup(0xffffffffffffffff) (async, rerun: 32)
r1 = syz_open_pts() (rerun: 32)
close(r1)
syz_open_pts() (async)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 32)
getrlimit(0x5, &(0x7f0000000180)) (async, rerun: 32)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0xfffffffc) (async)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="b962121c72327a1ad302003570e389070000000b9ca6393ab0d9", 0x1a}, {&(0x7f00000006c0)="e05f5c584860b8df53096f0d9bc0f0f2a9140dd203de6de567a4d29ba3f9463f14e5e8bdded4b78901b53bc0c14b2fa666d8ede1d898aa8539ae3201783ae7960697338e188f93d7f080045b1dc217c0943d1db416b182776c7d1f60730f88a76d29825f192176ab516d4a21b8724df4e14f6b4774041113ac91d8d09d9ce729034277a1d0048073b3426eb2aaa434d6dac8053420f9664f5b017be71d950f2995a635126626345ba049b189073901026c07665aaf2ceb6d4034677eee89446a6b549b4637a305a5acdb04957d96f27b0892bbdd995f", 0xd6}, {&(0x7f0000000280)="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", 0x129}, {&(0x7f0000000100)="2dd125708ffa3bbcec66d893910e47ae4d4538", 0x13}, {&(0x7f0000000140)="2950c2aa09a08ef7d785151f9ef4d95f25d8ea11c5e0899cb6825cc6d2de2ec3670551c41c49c27ce5ca5926d7e57d", 0x2f}, {&(0x7f0000000540)="617b875eec46fd6df4f7c3118b30abd85a1f6ab0f24a153af90e81fec2dde98f208d50365bba22c338297e5e9e96aa79977fc2a6f45b5f5e1879b92a0678eca2487320afdddec8afba05d4f1c443aef1bef27a69f534001153a7d8e453b2b30d8f866bb863e5c83b816f7e1cfdd97ade7925e1a5f5763100c13fc94fe38d934f54b607a7d4c840429dc0a9d916d7d1a464c95170cbfc9974e3fffa1c2bc23eb5451e72be7f", 0xa5}], 0x6)
poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0)
poll(&(0x7f0000000000), 0x0, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts.
pckbd_enable: command error
nd6_resolve: something odd happens
pckbd_enable: command error
nd6_resolve: something odd happens
nd6_resolve: something odd happens
pckbd_enable: command error
pckbd_enable: command error
�j���|����E1\�:Ie����v�\G�Ḷהr]#a{�S#������D���P=xผ_�Y��;8��!d����ad����ɿ[:���)�*�_��ʣ��ۇ�X�~�FfS߅\���G��=���06e��O�䖳p���E>�i�A�X	w�������愇��N u�J�B�y�iAEp� ϭs�d{$FVpckbd_enable: command error
nd6_resolve: something odd happens
nd6_resolve: something odd happens
nd6_resolve: something odd happens
nd6_resolve: something odd happens
fuse: Cannot find fusebuf
nd6_resolve: something odd happens
nd6_resolve: something odd happens
uvn_flush: obj=0xfffffd805e1ead10, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
fuse: Cannot find fusebuf
nd6_resolve: something odd happens
nd6_resolve: something odd happens
nd6_resolve: something odd happens
pckbd_enable: command error
pckbd_enable: command error



nd6_resolve: something odd happens

OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00)

login: EI����ssy��]Wj
���'	)���yO����� *)@��h&�nd6_resolve: something odd happens
uvn_flush: obj=0xfffffd8075ef1508, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
witness: lock order reversal:
 1st 0xffffffff839f8580 &sched_lock (&sched_lock)
 2nd 0xffff8000299dee00 &cq->cq_mtx (&cq->cq_mtx)
lock order [1] &sched_lock (&sched_lock) -> [2] &cq->cq_mtx (&cq->cq_mtx)
#0  mtx_enter+0x4a
#1  clockintr_cancel+0x2f
#2  mi_switch+0x172
#3  ast+0x165
#4  intr_user_exit+0x3c
lock order [2] &cq->cq_mtx (&cq->cq_mtx) -> [1] &sched_lock (&sched_lock)
#0  mtx_enter+0x4a
#1  sleep_setup+0xc6
#2  msleep_nsec+0x119
#3  dt_ioctl_record_stop+0xbc
#4  dtclose+0x105
#5  spec_close+0x45f
#6  VOP_CLOSE+0x133
#7  vn_closefile+0x12b
#8  fdrop+0x126
#9  closef+0x192
#10 fdfree+0x116
#11 exit1+0x59c
#12 sys_exit+0x1a
#13 syscall+0xb08
#14 Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffff8000299dee00,9,0) at witness_checkorder+0x10fb
mtx_enter(ffff8000299dedf0) at mtx_enter+0x4a
clockintr_cancel(ffff8000299de2f8) at clockintr_cancel+0x2f
mi_switch() at mi_switch+0x172
ast(ffff80003c427db0) at ast+0x165
intr_user_exit() at intr_user_exit+0x3c
end of kernel
end trace frame: 0x70ba05b8db90, count: -7
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80003c427bd0
rbx               0xfffffd800473ec48
rdx                                0
rcx               0xffff800031c7f9d8
rax               0xffff8000299ddff0
r8                0xffff80003c427ab0
r9                0x8080808080808080
r10               0xaa7685a789caa619
r11               0x8b0406ddcdb4a540
r12                                0
r13               0xfffffd8003f50dc0
r14                              0x3
r15                       0xffffffff
rip               0xffffffff81bd4c95    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c427bc0
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=442605 pid=6253 tcnt=3 stat=run
    flags process=4000000<ITIMER> proc=0
    runpri=86, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0x0, list=0xffff800031c7ef98,0xffff80003c416d08
    process=0xffff800031c82bc0 user=0xffff80003c422000, vmspace=0xfffffd806d368990
    estcpu=36, cpticks=2, pctcpu=0.0, user=1, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 75068  270414  73749      0  2           0                syz-executor
 75068  388897  73749      0  3   0x4000080  fsleep        syz-executor
* 6253  442605  60089      0  2   0x4000000                syz-executor
  6253  226358  60089      0  3   0x4000080  kqsel         syz-executor
  6253  493143  60089      0  2   0x4000000                syz-executor
 97384  421531  98844      0  2        0x10                syz-executor
 97384  403792  98844      0  3   0x4000010  smrbar        syz-executor
 97384  491115  98844      0  7   0x4000010                syz-executor
 50698  241995  49844  60929  3        0x90  nanoslp       syz-executor
 50698  422343  49844  60929  3   0x4000090  fsleep        syz-executor
 50698  370340  49844  60929  3   0x4000090  fsleep        syz-executor
 53394   91049  42062      0  3        0x80  nanoslp       syz-executor
 53394  244803  42062      0  3   0x4000080  kqread        syz-executor
 53394   55661  42062      0  3   0x4000080  fsleep        syz-executor
 29295  435313  56478      0  3        0x80  nanoslp       syz-executor
 29295  136008  56478      0  3   0x4000080  kqsel         syz-executor
 29295  296462  56478      0  3   0x4000080  fsleep        syz-executor
 60089   90336  12212      0  3        0x82  nanoslp       syz-executor
 77410  408490      1      0  3    0x100083  ttyin         getty
 98844    7485  12212      0  3        0x82  nanoslp       syz-executor
 70801   84779      0      0  3     0x14280  nfsidl        nfsio
 70306  350818      0      0  3     0x14280  nfsidl        nfsio
 69471  459627      0      0  3     0x14280  nfsidl        nfsio
 63413  152677      0      0  3     0x14280  nfsidl        nfsio
 58292   27529      0      0  3     0x14280  nfsidl        nfsio
  8794  129468      0      0  3     0x14280  nfsidl        nfsio
 28662  357643      0      0  3     0x14280  nfsidl        nfsio
 32004  502832      0      0  3     0x14280  nfsidl        nfsio
 30090  445926      0      0  3     0x14280  nfsidl        nfsio
 43399  499675      0      0  3     0x14280  nfsidl        nfsio
 96001   93020      0      0  3     0x14280  nfsidl        nfsio
  6789  173711      0      0  3     0x14280  nfsidl        nfsio
 25398  432090      0      0  3     0x14280  nfsidl        nfsio
 34023  335175      0      0  3     0x14280  nfsidl        nfsio
 15290  106702      0      0  3     0x14280  nfsidl        nfsio
  6875  331112      0      0  3     0x14280  nfsidl        nfsio
 52841  295359      0      0  3     0x14280  nfsidl        nfsio
 34121  309808      0      0  3     0x14280  nfsidl        nfsio
  5593  171240      0      0  3     0x14280  nfsidl        nfsio
 21367  149562      0      0  3     0x14280  nfsidl        nfsio
 49844  189441  12212      0  3        0x82  nanoslp       syz-executor
 78720  223978      0      0  3     0x14200  bored         sosplice
 73749   52431  12212      0  3        0x82  nanoslp       syz-executor
 56478  142225  12212      0  3        0x82  nanoslp       syz-executor
 64230  141652  12212      0  3        0x82  wait          syz-executor
 42062  146848  12212      0  3        0x82  nanoslp       syz-executor
 20356  142887  12212      0  2         0x2                syz-executor
 12212  206101   4779      0  3        0x82  kqread        syz-executor
  4779   33565  89064      0  3    0x10008a  sigsusp       ksh
 89064  479842  83250      0  3        0x98  kqread        sshd-session
 83250  495534  71570      0  3        0x92  kqread        sshd-session
 71570  210236      1      0  3        0x88  kqread        sshd
 76684   45266  34048     74  3   0x1100092  bpf           pflogd
 34048  390215      1      0  3        0x80  sbwait        pflogd
 73805  109613  33205     73  3   0x1100090  kqread        syslogd
 33205  224357      1      0  3    0x100082  sbwait        syslogd
  3761  293589      1      0  3    0x100080  kqread        resolvd
 11506  293249  38577     77  3    0x100092  kqread        dhcpleased
 57335  360166  38577     77  3    0x100092  kqread        dhcpleased
 38577   91246      1      0  3        0x80  kqread        dhcpleased
 68996    4702      0      0  3     0x14200  bored         smr
 24610  513435      0      0  2     0x14200                zerothread
 73076  395900      0      0  3     0x14200  aiodoned      aiodoned
  6555  124793      0      0  3     0x14200  syncer        update
 78236  362212      0      0  3     0x14200  cleaner       cleaner
 89673   85462      0      0  3     0x14200  reaper        reaper
 79274  259866      0      0  3     0x14200  pgdaemon      pagedaemon
 84450   91847      0      0  3     0x14200  bored         viomb
  3434  224289      0      0  3  0x40014200  acpi0         acpi0
 12800  268734      0      0  3  0x40014200                idle1
 76511   90133      0      0  3     0x14200  bored         softnet3
 39620  230713      0      0  3     0x14200  bored         softnet2
 38970  275537      0      0  3     0x14200  bored         softnet1
 43566  136732      0      0  3     0x14200  bored         softnet0
 16106  328342      0      0  3     0x14200  bored         systqmp
 62313  446563      0      0  3     0x14200  bored         systq
 91983  390627      0      0  3     0x14200  tmoslp        softclockmp
 36221  319477      0      0  3  0x40014200  tmoslp        softclock
 33225  308306      0      0  3  0x40014200                idle0
     1  372039      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &vioq->viq_rxmtx r = 0 (0xffff80000002c4b0)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  vio_rx_intr+0x82
#4  vio_queue_intr+0x59
#5  intr_handler+0x11d
#6  Xintr_ioapic_edge26_untramp+0x18f
#7  __sanitizer_cov_trace_const_cmp4+0x1e
#8  mtx_enter+0xaf
#9  endtsleep+0x39
#10 timeout_run+0x13d
#11 softclock_process_tick_timeout+0x22b
#12 softclock+0x16b
#13 softintr_dispatch+0x140
#14 dosoftint+0x54
#15 Xsoftclock+0x27
#16 __sanitizer_cov_trace_pc+0x95
#17 mtx_enter+0xdd
#18 sleep_setup+0xc6
shared mutex timeout r = 0 (0xffffffff83861ff0)
#0  witness_lock+0x5bb
#1  timeout_run+0x115
#2  softclock_process_tick_timeout+0x22b
#3  softclock+0x16b
#4  softintr_dispatch+0x140
#5  dosoftint+0x54
#6  Xsoftclock+0x27
#7  __sanitizer_cov_trace_pc+0x95
#8  mtx_enter+0xdd
#9  sleep_setup+0xc6
#10 sys_futex+0xa04
#11 syscall+0xbc6
#12 Xsyscall+0x128
CPU 1:
exclusive mutex &sched_lock r = 0 (0xffffffff839f8580)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x13b
#3  preempt+0x35
#4  ast+0x165
#5  intr_user_exit+0x3c
Process 97384 (syz-executor) thread 0xffff800031c7ef98 (403792)
exclusive rwlock clonelk r = 0 (0xffffffff8385ac08)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x377
#2  if_clone_destroy+0x67
#3  tun_dev_close+0x1dc
#4  spec_close+0x412
#5  VOP_CLOSE+0x133
#6  vn_closefile+0x12b
#7  fdrop+0x126
#8  closef+0x192
#9  syscall+0xbc6
#10 Xsyscall+0x128
Process 97384 (syz-executor) thread 0xffff800031c7f228 (491115)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839140c0)
#0  witness_lock+0x5bb
#1  softintr_dispatch+0x12a
#2  dosoftint+0x54
#3  Xsoftclock+0x27
#4  __sanitizer_cov_trace_pc+0x95
#5  mtx_enter+0xdd
#6  sleep_setup+0xc6
#7  sys_futex+0xa04
#8  syscall+0xbc6
#9  Xsyscall+0x128
Process 20356 (syz-executor) thread 0xffff80002a2baf78 (142887)
exclusive rrwlock inode r = 0 (0xfffffd806e059b00)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x377
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x283
#7  ufs_mkdir+0x113
#8  VOP_MKDIR+0x102
#9  domkdirat+0x179
#10 syscall+0xb08
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806d05f310)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x377
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vfs_lookup+0x109
#6  namei+0x7aa
#7  domkdirat+0x8b
#8  syscall+0xb08
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10311  11463K   12573K 166960K     13595        0
            pcb    17     16K      18K 166960K       423        0
         rtable   126     10K      11K 166960K       594        0
             pf    45     19K   67486K 166960K       305        0
         ifaddr    28      3K       7K 166960K       108        0
        ifgroup    64      2K       2K 166960K       187        0
         sysctl     4      1K       9K 166960K        14        0
       counters    72     37K      38K 166960K       192        0
       ioctlops     0      0K       4K 166960K      1752        0
            iov     0      0K      24K 166960K        62        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1526     96K      96K 166960K      2779        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        33        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       112        0
        dirhash    15      2K       2K 166960K        27        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     110K 166960K      1264        0
          sigio     1      0K       0K 166960K        25        0
           proc    72     91K     116K 166960K       702        0
        subproc    72      4K       4K 166960K        99        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       240        0
       in_multi    37      2K       6K 166960K       191        0
    ether_multi     1      0K       0K 166960K        14        0
            mrt     0      0K       0K 166960K        11        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       656        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   246    175K     191K 166960K     12749        0
       UVM aobj   111      3K       3K 166960K       114        0
     pinsyscall    42     84K     104K 166960K      2445        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K        76        0
            NDP    16      0K       1K 166960K        75        0
           temp    70   8693K    8947K 166960K     46920        0
         kqueue    16     26K      28K 166960K       187        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      112    0      109     1     0     1     1     0     8    0
rtentry    176      170    0      129     5     0     5     5     0     8    0
unpcb      144      863    0      842     9     7     2     6     0     8    1
syncache   336        4    0        4     2     2     0     1     0     8    0
tcpqe       32        1    0        1     1     1     0     1     0     8    0
tcpcb      736      660    0      652    14    13     1    13     0     8    0
arp        128       25    0       18     1     0     1     1     0     8    0
inpcb      328     1677    0     1665    20    13     7    12     0     8    5
nd6        144       36    0       29     1     0     1     1     0     8    0
pkpcb       40        8    0        8     3     2     1     1     0     8    1
kcovpl      48       11    0        3     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     1     0     1     0     8    0
ppxss      1192      43    0       43     2     1     1     1     0     8    1
pppxif     1504       8    0        8     2     1     1     1     0     8    1
pffrag     232       28    0       18     1     0     1     1     0   482    0
pffrnode    88       26    0       18     1     0     1     1     0     8    0
pffrent     40       52    0       41     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       6    0        2     1     0     1     1     0     8    0
pfanchor   1288       5    0        0     1     0     1     1     0     8    0
pftag       88        2    0        1     1     0     1     1     0     8    0
pfstitem    24       96    0       23     1     0     1     1     0     8    0
pfstkey    128       98    0       25     3     0     3     3     0     8    0
pfstate    384       96    0       24     8     0     8     8     0     8    0
pfrule     1344      95    0       22     9     2     7     7     0     8    0
rttmr      136        3    0        3     3     2     1     1     0     8    1
art_heap8  4096       5    0        0     5     0     5     5     0     8    0
art_heap4  256      747    0      541    31     9    22    28     0     8    8
art_table   32      752    0      541     4     0     4     4     0     8    0
art_node    16      166    0      129     1     0     1     1     0     8    0
sysvmsgpl   40       13    0        7     1     0     1     1     0     8    0
semupl     112        3    0        3     2     2     0     1     0     8    0
semapl     112      107    0       97     1     0     1     1     0     8    0
shmpl      112      111    0        3     4     0     4     4     0     8    0
dirhash    1024      27    0        8     3     0     3     3     0     8    0
dino2pl    256     3677    0     2164    95     0    95    95     0     8    0
ffsino     288     3677    0     2164   109     0   109   109     0     8    0
nchpl      144     5350    0     3650    64     0    64    64     0     8    0
rtmask      32       10    0       10     3     2     1     1     0     8    1
uvmvnodes   80     4755    0        0    98     0    98    98     0     8    0
vnodes     216     4755    0        0   265     0   265   265     0     8    0
namei      1024   19014    0    19013     2     1     1     1     0     8    0
percpumem   16      111    0       60     1     0     1     1     0     8    0
pfiaddrpl  120       65    0        0     2     0     2     2     0     8    0
kstatmem   264      110    0       76     3     0     3     3     0     8    0
scsiplug    72        4    0        4     2     2     0     1     0     8    0
scxspl     216    23651    0    23651    12    10     2     8     1     8    2
plimitpl   152      412    0      393     1     0     1     1     0     8    0
sigapl     424     1582    0     1512     9     0     9     9     0     8    0
knotepl    120      585    0        0    18     0    18    18     0     8    0
kqueuepl   224      385    0      369     5     4     1     5     0     8    0
pipepl     336      257    0      228     3     0     3     3     0     8    0
fdescpl    520     1535    0     1504     3     0     3     3     0     8    0
filepl     160    10308    0    10063    29    13    16    23     0     8    0
lockfpl    104      796    0      788     2     1     1     2     0     8    0
lockfspl    48      291    0      283     1     0     1     1     0     8    0
sessionpl  144       27    0       18     1     0     1     1     0     8    0
pgrppl      48       52    0       35     1     0     1     1     0     8    0
ucredpl    104     1424    0     1407     1     0     1     1     0     8    0
zombiepl   144     1513    0     1512     1     0     1     1     0     8    0
processpl  1240    1582    0     1512     6     0     6     6     0     8    0
procpl     656     3467    0     3386     8     0     8     8     0     8    0
srpgc       96       18    0       18     3     2     1     1     0     8    1
sosppl     168        6    0        6     3     2     1     1     0     8    1
sockpl     728     2684    0     2648    38    28    10    22     0     8    6
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     118    0        0    15     0    15    15     0     8    0
mcl2k      2048      41    0        0     5     0     5     5     0     8    0
mtagpl      96       21    0        0     1     0     1     1     0     8    0
mbufpl     256     1190    0        0    74     0    74    74     0     8    0
bufpl      280     8104    0     1962   439     0   439   439     0     8    0
anonpl      32    11524    0        0    93     0    93    93     0   246    0
amapchunkpl 152   44143    0    43632    47    16    31    38     0   158   10
amappl16   200     4628    0     4594    31    16    15    18     0     8    8
amappl15   192        2    0        2     1     1     0     1     0     8    0
amappl14   184      126    0      114     1     0     1     1     0     8    0
amappl13   176        2    0        2     1     1     0     1     0     8    0
amappl12   168     2235    0     2204     3     1     2     2     0     8    0
amappl11   160       51    0       36     1     0     1     1     0     8    0
amappl10   152       11    0       11     1     1     0     1     0     8    0
amappl9    144      250    0      250     1     1     0     1     0     8    0
amappl8    136       29    0       27     1     0     1     1     0     8    0
amappl7    128      121    0      109     1     0     1     1     0     8    0
amappl6    120      221    0      218     1     0     1     1     0     8    0
amappl5    112      156    0      146     1     0     1     1     0     8    0
amappl4    104      333    0      312     1     0     1     1     0     8    0
amappl3     96     8776    0     8658     4     0     4     4     0     8    0
amappl2     88      698    0      636     2     0     2     2     0     8    0
amappl1     80    13576    0    12969    18     3    15    15     0     8    0
amappl      88    11793    0    11623     5     0     5     5     0    92    0
dma4096    4096       2    0        2     2     1     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72      113    0        3     2     0     2     2     0     8    0
uaddrrnd    24     1535    0     1504     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1535    0     1504     1     0     1     1     0     8    0
vmmpekpl   168    13887    0    13833     3     0     3     3     0     8    0
vmmpepl    168   101372    0    99358   112    10   102   104     0   357    4
vmsppl     480     1534    0     1504     7     2     5     5     0     8    0
rwobjpl     72    32154    0    26338   106     0   106   106     0     8    0
pdppl      4096    3077    0     3008   109    36    73    85     0     8    4
pvpl        32    17719    0        0   143     0   143   143     0   265    0
pmappl     256     1534    0     1504     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      478    0       64    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff83879ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
mtx_enter(ffffffff839f8570) at mtx_enter+0xd2
wakeup_n(ffff80000002c000,1) at wakeup_n+0x54
task_add(ffff80000002c000,ffff800000039530) at task_add+0x167
ifiq_input(ffff8000000394c0,ffff80003c4308b8) at ifiq_input+0x4b0
vio_rxeof(ffff80000002c400) at vio_rxeof+0x40b
vio_rx_intr(ffff80000019f800) at vio_rx_intr+0x98
vio_queue_intr(ffff80000002c400) at vio_queue_intr+0x59
intr_handler(ffff80003c430a60,ffff800000079d80) at intr_handler+0x11d
Xintr_ioapic_edge26_untramp() at Xintr_ioapic_edge26_untramp+0x18f
__sanitizer_cov_trace_const_cmp4(0,2) at __sanitizer_cov_trace_const_cmp4+0x1e
mtx_enter(ffffffff839f8570) at mtx_enter+0xaf
endtsleep(ffff80002a2ba2a8) at endtsleep+0x39
timeout_run(ffffffff83862048,ffff80002a2ba338) at timeout_run+0x13d
softclock_process_tick_timeout(ffff80002a2ba338,0) at softclock_process_tick_timeout+0x22b
softclock(0) at softclock+0x16b
softintr_dispatch(0) at softintr_dispatch+0x140
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x95
mtx_enter(ffffffff839f8570) at mtx_enter+0xdd
sleep_setup(ffff80003c430f10,120,ffffffff833d7766) at sleep_setup+0xc6
sys_futex(ffff800031c7f228,ffff80003c4310b0,ffff80003c431000) at sys_futex+0xa04
syscall(ffff80003c4310b0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd8ef6a57620, count: -27
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffff8000299dee00,9,0) at witness_checkorder+0x10fb
mtx_enter(ffff8000299dedf0) at mtx_enter+0x4a
clockintr_cancel(ffff8000299de2f8) at clockintr_cancel+0x2f
mi_switch() at mi_switch+0x172
ast(ffff80003c427db0) at ast+0x165
intr_user_exit() at intr_user_exit+0x3c
end of kernel
end trace frame: 0x70ba05b8db90, count: -7