last executing test programs:

2.228667905s ago: executing program 4 (id=364):
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2)
setitimer(0x1, &(0x7f0000002900), 0x0)
setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xffff, 0xfe, 0xfffffff6, 0x0, '\x00', 0x0, 0x2})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="b249cd0000000000000001c3960d2dae1a0aae727e4ce647b0c1fab2133d1c5c49f222db36ac78fefa7f72a5904f5f8bc1707d76f8085aa6b78cdfb2f84700b994dc8ab4afcadf209fdd1013e3cce170697d102fe0cb44826710bb59f01e22a2db00635d2dcb9c8ce38bb726c7d7e86e02d79c9877e10a", 0x77}], 0x1)
r2 = dup2(r1, r0)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000300)={0x538, 0x9, 0x1, 0x7fd, "2c21a7000000004ea80873ca9e5fd700", 0x6, 0xffffffff})
poll(&(0x7f0000000000)=[{r2, 0x40}], 0x1, 0x0)
sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, 0x0, 0x0, &(0x7f00000001c0), 0x0)

2.048911537s ago: executing program 4 (id=368):
writev(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000000c0)="e22800beda63fcfc1a3d1fe4b7ca2a9a34a5b0a4650b222e482712c8085b03c5fd702c38dc1c75067aa75d163a9885af5ee96ca261a3ea19ab6e27e87602d70c6ec5ad1c79847f8e9e4ac3c7dddfd5c6e1416aa3398f45256f19dd45560956155202", 0x62}], 0x1)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))
select(0x40, &(0x7f0000000180)={0x4e, 0x20000044809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f0000000140)=[{0x42, 0x3}, {0x80, 0x1ff}, {0x47, 0x3fe}, {0x0, 0x10000}], 0x4})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)

1.83161979s ago: executing program 6 (id=377):
open(&(0x7f0000000140)='./file0\x00', 0x58e, 0x122)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
syz_open_pts()
r0 = socket(0x18, 0x3, 0x0)
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x100001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x53b6, 0x8, 0x0, 0x0, 0x0, 0x4, 0x10000000000009, 0x8000000000000})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x8, 0x70)
getsockname(r3, &(0x7f0000001740)=@un=@file={0x0, ""/4092}, &(0x7f0000000180)=0xffe)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f00000001c0))
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f00000003c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
socket(0x1e, 0x3, 0x0)
sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)
close(r2)
r5 = socket(0x2, 0x4001, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r5, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4)
close(r2)
recvfrom(r1, &(0x7f00000002c0)=""/252, 0xfc, 0x803, &(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x2}, 0x8)
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)

1.830368876s ago: executing program 4 (id=379):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, <r1=>0xffffffffffffffff]) (async, rerun: 64)
r2 = dup(r0) (rerun: 64)
ioctl$BIOCGETIF(r2, 0x4020426b, &(0x7f0000000180)={""/16, @ifru_vnetid}) (async)
chown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r1)
ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0xbd8, 0x0, 0x100, '\x00ix\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x3e, 0xfffffffc}) (async)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r3 = socket(0x18, 0x1, 0x0)
close(r3) (async, rerun: 32)
r4 = socket(0x18, 0x2, 0x0) (rerun: 32)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ftruncate(r3, 0x6)
nanosleep(&(0x7f00000025c0), &(0x7f0000001180))
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

1.720418208s ago: executing program 1 (id=383):
r0 = socket(0x2, 0x1, 0x0)
fcntl$setown(r0, 0x6, 0xffffffffffffffff)
connect$inet(r0, &(0x7f00000010c0)={0x2, 0x3}, 0xc)
mknod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4401)
r1 = syz_open_pts()
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000180)=0x62)
sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
open(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x81)
readlink(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"})
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000001080)=0x9f5)
r3 = syz_open_pts()
ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000040)=0x8000)
open(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x11)

1.607588768s ago: executing program 4 (id=386):
r0 = open(&(0x7f0000000380)='./bus/\x00', 0x40, 0x4ebfac6bbaf7949)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) (async)
write(r0, &(0x7f0000000200)="092020000022000000ff4278ad535c2a415642000000005624b77b6a0a5f", 0x1e) (async)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async)
symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00')
open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60eda7fd00083a00fe8000000000000000000000000000aa000000000066015a5b0000000000000081"])

1.522548939s ago: executing program 4 (id=389):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
pwrite(r1, &(0x7f00000000c0)="a7", 0x1, 0x40007)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f"])
mkdir(&(0x7f0000000240)='./file0\x00', 0x1)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00')
mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x41)
chroot(&(0x7f0000000100)='./file0/file1\x00')
unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00')
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0)
r3 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write(r3, &(0x7f0000000100), 0xfffffe5d)
sysctl$kern(&(0x7f0000000140)={0x1, 0x2f}, 0x2, &(0x7f0000000000)="e14612e6472dbde1db9664044c807a8d293b6ee08fdeaa3024c5e1f3eb6cfae7beadc21b7bc297e95313617df4450013b15a709ff081e10f64ef143f477541306b964d952399c703307c545a94794716c1aa82d50afb7c3c5621275e9665674a3e0e02e49551b71cc8fe551fcf5d75b9181f075c9ac1d68b06640e6662d7e600f4feee15d49dab22113b79323a681c3d629a5015965aa4fe84938c42a42fd7aea5405059f513868b06ffecae4cfe619479f68116962b8b507423f987", 0x0, 0x0, 0x0)

1.522381103s ago: executing program 0 (id=390):
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
unveil(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='r\x00')
open$dir(&(0x7f00000000c0)='./file2/file0\x00', 0x662, 0x0)
getuid() (async)
getuid()

1.522231516s ago: executing program 5 (id=391):
syz_open_pts()
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
fcntl$getown(r0, 0x5)

1.382403662s ago: executing program 5 (id=394):
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
setreuid(0xee00, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x710, 0x0)
setreuid(0xee00, 0x0)
ktrace(&(0x7f0000000080)='./file0\x00', 0x2, 0x40001a14, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000400)="56cf5daafc6597872431ff6c668c28adc33a60651a078a116b3548a8be66444658a069b71e92feadcd7b3434dadfc4fc3fd4ef7525b58b0086932b0a93463511a8889f58073c33282b2afa1967c7908d4d0aea830b68a43711d6c4457ec4a41a772d6ae311730b7823d96ef1c25a7bae68954da1ffde05cf138758ef54d053a94bce1d28f7ea235a66647b6db6eda0d5e78db16b66fae3f13fb8d25610c09b96003d8776b05dcc0dd56881e848483a0826bb010e52d7207026a59074a6a4c0f7677a7a35a8d29e875aebabef354e082b69112d486781c897abf6bb9a1be014c358af0deaaf1701cf", 0xe8}, {&(0x7f00000000c0)="46c4f10bc87c57f494288740223f05da53bade43d96cee8b67a2bda851f346b3ec9514ee7d0936290b45282695c91e2a70b65200f542ea22fd10e92e681b7d17f388cd46b789f244bb552adb6aef00b7e486f48e4cc1313a28f16195c6202c2ccb8c51bdae1106", 0x67}, {&(0x7f0000000180)="6a4f939b9120a9a9809353ee8ab94d9d91982e88125e29ab412d900938c67b9869bc54c26b6074d2a35d9d398f962d89ba53ee17d2e213e3ab6f3979ec0a52db259bf5213f9f085a6ea854d0a9429e9c8ae4502adb1d8605e2001f6891d3e9f68939bddd0f20ca0424c518bf522d50f4df260b3dad2d000ce1940d5d2b0d02d0b498ae6e324cc6fde7a660bf569c4837d7a408a2ce2e3394d529632e37105b9cc837618031080e760d63a1683936e78eb6058a2c73956f99378324d8e2b6ec205f4cbc3f685ea145ede3ba5a469c6cade196c9e9c6e452e9ae5a7c2930f8c6616a72bcc7a0dfb30cf9e1fcd28bc84ef0", 0xf0}, {&(0x7f0000000580)="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", 0xdc2}], 0x4)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x1e4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
socketpair(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000001dc0)={0x0}, 0x10, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0), 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)

1.382173102s ago: executing program 1 (id=395):
mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffff000001"], 0x18}, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xfa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x8, 0x80000001, 0x17ffd, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f86, 0x200, 0x9}, {0x7ffffffe, 0x800, 0x3}, {0x400, 0x7ff, 0x1002802, 0x4d8a}, {0x5, 0x2, 0x3, 0xb4}, {0x8000008, 0xd16e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x4, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x412c83d1}, {0x3, 0x6, 0x20004, 0xc}, {0xb8c, 0x4, 0x8, 0x2c4}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0xc}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
shutdown(r1, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x4)
open(&(0x7f0000000180)='./file0\x00', 0x80, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x67}, 0x2, &(0x7f00000000c0)="eb7a7f3256", &(0x7f0000000100)=0x5, &(0x7f00000001c0)="c0824eb9f041f6d324ec60585787d1fd0d483b580aedb65a4c46032840947c9ad399f832314c23ea73c60ebb089aa694cff75e9634d7a3aedb1cd622fe2a0f5a9db5584a4f8e7acb17fbd210c040169dac373ee94aa4f2ad02b575b30c87dd163781d148bf897cf149bbc813ce34621ae4007ecd2af205d9e8bf018235dbf22a57ce74a197f266d617be010580", 0x8d)

1.380945787s ago: executing program 6 (id=396):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) (async)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) (async)
write(0xffffffffffffffff, &(0x7f0000000080)="b53ffdc1ea6a0a702de14482d278bd58dd47d57e606b8f20515c96482014de1fd6f0", 0x22)
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x545, "225e190400000000000000000edd0000f400", 0x5, 0x400}) (async)
sendto$unix(r1, &(0x7f00000000c0)="b1000504f053167bc92020404467690000040000", 0x42, 0x400, 0x0, 0x0) (async)
sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000280), 0x0, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES8, @ANYRESHEX=r0, @ANYRES8, @ANYRES32=r1, @ANYRESOCT=r1, @ANYBLOB="58bcf6d864ecb6d4beab34829bc24a62ef288803e30330a52ec1454046f593002ab5921b09b7bebc4f78a45ec1db830960056e11c67e84a48004408165cb54a805e46e732fc92de8fab8aed51f2063e547fccf930d55ab102f5bc2aadd8802389ae5d694e13840b231013e222a40ce8c738051ce846e733bcbda0b5184f592161d5714a70d71f0f870628b41ac8ee8c98de1a49079af01d6160dc8c33aef46ce8e9c20b16450e78653ad011481c20d443665d07a2bb5f695af99dae466aab0e76e0189bc4fa393483cf60259ec", @ANYRES8=r0])
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
ftruncate(r3, 0x40000000007)
recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@in6, 0xc, &(0x7f0000000180)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000240)=""/214, 0xd6}], 0x2, &(0x7f0000000380)=""/85, 0x55}, 0x801) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) (async)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)

1.175113149s ago: executing program 6 (id=397):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002640), 0x80, 0x0)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000002700)={0x1, &(0x7f0000002680)=[{0x5ee0, 0x4, 0x31, 0x7f}]})
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3})
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="66e1629b6174aaaaaaaaaabb86dd60062e0b"])
execve(0x0, 0x0, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, &(0x7f0000000140)="a371e18adf10", &(0x7f0000000100)=0x6, 0x0, 0x0)

1.174667298s ago: executing program 3 (id=398):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x4001, 0x0)
r2 = fcntl$dupfd(r1, 0x2, r1)
close(r2) (async)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x12, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
r3 = socket(0x2, 0x2, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
kevent(r0, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffd, 0x0, 0x2, 0x1, 0x1ff}], 0x800, &(0x7f0000000100)=[{{r4}, 0xffffffffffffffff, 0x18, 0x4, 0x9a18, 0x8}, {{0xffffffffffffff9c}, 0xfffffffffffffffb, 0x48, 0x10, 0x10, 0xce}, {{r2}, 0xfffffffffffffffc, 0x4, 0x1, 0x58, 0x4}, {{r0}, 0xfffffffffffffffb, 0x41, 0x80000000, 0x75c, 0x3}, {{r2}, 0xfffffffffffffff8, 0x10, 0x20, 0x81, 0x42}, {{r2}, 0xfffffffffffffffb, 0x188, 0x20000000, 0x98f, 0xfffffffffffffff4}, {{}, 0xfffffffffffffffb, 0xa, 0x20000000, 0x5}, {{r0}, 0xfffffffffffffff8, 0x60, 0x1, 0xb4e5, 0x3}], 0x2, &(0x7f0000000200)={0x5, 0x9})
connect$unix(r3, &(0x7f0000000000), 0x10) (async)
r5 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async)
dup2(r5, r3)

1.1743963s ago: executing program 3 (id=399):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) (async)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1, 0x4) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
unveil(0x0, &(0x7f0000000080)='c\x00') (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0xc, 0x11, 0x0, 0xfffff4b2}, {0x44, 0x1, 0x30, 0x407}, {0x6, 0x0, 0x0, 0x7fd}]})
write(r1, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0x40b)

1.173062658s ago: executing program 0 (id=400):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000005c0)="c5eabfedf9e2015c9271000000000000b6396d296b3ceeceedf043984f89c27155e201d6e3447033fb16bef290815a31f61acdb2572a3a39ef8777056f28e4f441cfdf5c2660407f", 0x48}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="011b08f6cd95bc50e604e5bfce26f3073b5ea761890ef912a750f60da1058e1dfd270c8a675f7478ce6a13155ec1dd5ed879a7019ee14e631bf741cf36b2c3f2066606d800", &(0x7f0000000080)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000011907800000004ffffffff0b019078000b0003451725018f73b3536859b081bc8d83a409000200680001ed11061affffffff00000000"])
fchmod(0xffffffffffffffff, 0xd1)

1.172888936s ago: executing program 3 (id=401):
symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000000)='./file0/file0/../file0/file0\x00') (async)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00')
open(&(0x7f0000000300)='./file0/file0/../file0/file0\x00', 0x80, 0x30)

1.14994849s ago: executing program 3 (id=403):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}})
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00')
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='x\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x545, "225e1904000000000000000000dd0000f400", 0x5, 0x100})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
r1 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
close(r0)
r2 = socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendto(r2, &(0x7f0000000180)="55a88cf450ab54bceb7c562daaa8df08e30d4b0adfa9e2732baf2a646708da1696c6d71659a2a4a01858aef7a260fdec31a89f9ec3206132835cc8447734a640c339a75e31fe6f9b95a309b1b235a1bc8b69cb89d26f14104b3aae3bb32312b8e0f03ce5316be2f073a47c64580418f6b4e8b58b7b2e68cfc96892dc0b98cfe3d9a10e8fe005f8be1314c9f40082611b96deab235e2de2278bdb0e8a5b27b56ff70b914a6ed9f0b233f39173cdf569f4", 0xb0, 0x2, 0x0, 0x0)

1.149708741s ago: executing program 6 (id=404):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x10a)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x535a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x18, 0x2, 0x0) (async)
setuid(0xffffffffffffffff) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x60) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, 0x0) (async)
seteuid(0xffffffffffffffff) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r3 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r3, 0x80286987, &(0x7f00000001c0)) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/221, 0xdd}, 0x0) (async)
chroot(&(0x7f0000000740)='.\x00') (async)
r6 = socket(0x2, 0x8002, 0x0)
r7 = dup(r6)
r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff)
close(r8)
socket(0x2, 0x2, 0x0)
shutdown(r8, 0x2) (async)
sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async)
ioctl$BIOCFLUSH(r2, 0x20004268)
mlock(&(0x7f0000250000/0x4000)=nil, 0x4000)
r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async, rerun: 32)
r10 = kqueue() (rerun: 32)
kevent(r10, &(0x7f00000000c0)=[{{}, 0xfffffffffffffffa, 0x80, 0x1, 0x1, 0x1000}, {{}, 0xffffffffffffffff, 0xc8, 0x4, 0x9, 0x6d0}, {{}, 0xfffffffffffffff9, 0xa, 0x1, 0x692, 0x3}, {{}, 0xfffffffffffffffb, 0xa8, 0x4, 0x6b}, {{r9}, 0xffffffffffffffff, 0x434a6e215736647b, 0x2, 0x3b85, 0x8001}], 0xf, &(0x7f0000000200), 0xc14, 0x0) (async)
select(0x40, &(0x7f0000000080)={0x8, 0x1, 0xffff, 0x1, 0x101, 0x8, 0x0, 0x4}, &(0x7f0000000100)={0x400, 0x200, 0xffffffffffff8001, 0x6, 0x1, 0xfffffffffffffff7, 0x8, 0xc914}, &(0x7f0000000140)={0xc, 0x563d, 0x5, 0x800, 0x2, 0x7fffffff, 0xac2b, 0x8a7}, &(0x7f0000000180)={0x0, 0x3})
setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000200)={0x5dd, 0xe}, 0x10)

1.040357692s ago: executing program 2 (id=406):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0xc)
accept$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc)
setitimer(0x0, &(0x7f0000000000)={{0xffd, 0x4}, {0x6}}, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ddee36ee6e0e1b0378c5bd98e071b6e8e656195650", 0x15}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="00a0a78d0ca82026dec3e59be543bfcb4c969b0000000000000017bc333f1255636e7295358972f4af81643f60710e000000000000bf4875744b0000000000002bba63f1", &(0x7f0000000080)=0x44, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[])
getitimer(0x0, 0xfffffffffffffffe)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2d)
getsockname$inet6(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc)
r2 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = socket(0x2, 0x4001, 0x0)
r4 = dup(r3)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
close(r5)
r6 = socket(0x2, 0x2, 0x0)
r7 = syz_open_pts()
syz_open_pts()
syz_open_pts()
fchflags(r7, 0x0)
connect$unix(r6, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x2, 0x4)
dup2(r5, r2)
utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={{0x2, 0x4}, {0xfffffffffffffff8, 0x4}})

1.039091242s ago: executing program 0 (id=407):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0xc39, 0x0, 0x0, 0xffffffff}]}) (async, rerun: 32)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (rerun: 32)

1.037430253s ago: executing program 3 (id=408):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0x64, 0x0, 0x0)
writev(r0, &(0x7f0000000640), 0x1)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8})
socket$inet(0x2, 0x3, 0x2) (async)
setsockopt$inet_opts(r0, 0x0, 0x64, 0x0, 0x0) (async)
writev(r0, &(0x7f0000000640), 0x1) (async)
openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) (async)
ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) (async)

1.037150245s ago: executing program 7 (id=409):
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe05) (async)
sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) (async)
open$dir(&(0x7f0000000000)='./file0\x00', 0x20, 0x0)

1.037005973s ago: executing program 6 (id=410):
stat(&(0x7f0000000040)='.\x00', &(0x7f0000000380))
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd00)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0xd)
sendmmsg(r0, &(0x7f00000026c0)={0x0, 0x20000008}, 0x10, 0x0)

822.130968ms ago: executing program 2 (id=411):
setgroups(0x0, 0x0)
r0 = getpid()
syz_emit_ethernet(0x17a, &(0x7f00000001c0)=ANY=[@ANYRES16=r0])
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
fcntl$getown(r1, 0x5)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x40001000, r0)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000000c0), 0x782, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000000)={0x1, 0x5})
symlink(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='./file0\x00')
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$VNDIOCSET(r3, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0})

821.124479ms ago: executing program 0 (id=412):
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="7f37ce070000003d965a1564287bafc1d6d531c28c4a7eaa13e5232a74bba3779ca27b8e0d00000004fe8a4cc330bb35350cb60a9a374aa8a836289681106692", 0x40}], 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

807.058798ms ago: executing program 3 (id=413):
clock_getres(0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x0, &(0x7f00000000c0)})
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r0 = socket(0x1, 0x2, 0x0)
ftruncate(r0, 0x4)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4)
recvmsg(0xffffffffffffffff, 0x0, 0x1)
acct(&(0x7f0000000000)='./file0\x00')
mknod$loop(0x0, 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(0x0, &(0x7f0000000a40)='./file0\x00')
sysctl$net_inet_carp(0x0, 0x0, &(0x7f0000000c80)="4fe8033f6410cc504e14b6419843566872116d6f3074d705e19ce85ebf7ac4842f8acc88cdec6db1a74ce36601e44d5175150ebb3bb4f685a3540bcbad05f4119354e65dfbccf59afaeb45e5d5cd839ddb156482d46b3cbe3f9ee0ffc1cda0fe6a1a9625cb660ccc2bf6dd5793a4f19b9f", 0x0, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000000)={0x1fff, 0x2, 0x7, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
r3 = open$dir(&(0x7f0000001640)='./file0\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000900)=[{&(0x7f0000000100)="db", 0x1}], 0x1)
r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x52e5)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)

805.92413ms ago: executing program 5 (id=414):
syz_open_pts()
openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_pts()
syz_open_pts() (async)
r0 = kqueue()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xe090, 0x0, 0x6}) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0x5, 0x8, 0x3, 0x100000000, 0x60d, 0x80000000, 0x31a9, 0x8, 0xfffffffffffffff7, 0x2efd, 0x4, 0x0, 0x0, 0x1, 0x800004, 0x4, 0x2, 0x4], [0x5, 0x5, 0xfffffffffffffff8, 0x8000000000, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x47], [0x8, 0x8, 0x100040000000000, 0x0, 0x3, 0x6, 0xfffffffffffffffe], [0x100, 0x5, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x1, 0xc, 0x0, 0x1ff}, {0x2, 0x2, 0x5, 0x4}, {0x0, 0xfffffffd, 0xfffffffe, 0x5}, {0x1008, 0x3, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x7fffffff, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0xc, 0x200, 0x9}], {0x0, 0xb, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) (async)
kevent(r0, &(0x7f0000000100), 0xe4a, 0x0, 0x4000a9fa, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x22, 0x51)

786.10816ms ago: executing program 7 (id=415):
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc211800b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x2, 0x0, 0x0)
setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffa, 0xffffffffffffffff})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r0, &(0x7f0000000000), 0x10)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80)
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffc, "32cd8b6a4682fe4b8c1a6c230000005d31000094"})
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x9ac0, 0xfffffff7, 0x8006, 0x800, "97e845bfacc310dadb363bdeb8cf00000000000e", 0x0, 0x8000007})
socket(0x2, 0x2, 0x0) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r1, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc211800b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x2, 0x0, 0x0) (async)
setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffa, 0xffffffffffffffff}) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
bind(r0, &(0x7f0000000000), 0x10) (async)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) (async)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80) (async)
ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffc, "32cd8b6a4682fe4b8c1a6c230000005d31000094"}) (async)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x9ac0, 0xfffffff7, 0x8006, 0x800, "97e845bfacc310dadb363bdeb8cf00000000000e", 0x0, 0x8000007}) (async)

689.989038ms ago: executing program 6 (id=416):
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0)
r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x3)
ftruncate(r1, 0x80002)
r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x4)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000300)="ef5f47042c3ef55c05f507830000000000000002921724e2c991788f9ca05a5029dd63a26ed54b162b1c4d7bfb1f9094dca81f4f0e152f134dfc9419482361135de570f815f504465bacfc6cd12438f311ae6b3321caa2536b30575d5f28fd3636ab64b9c8219b085bbd29f82c47364b", 0xff84)
sendmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={0x10}], 0x10, 0x9}, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffc, "32cd8b6a4682fe4b8c1a6c230000005d31000094"})
close(r4)
unveil(0x0, &(0x7f0000000140)='c\x00')

537.72517ms ago: executing program 0 (id=417):
r0 = msgget(0x1, 0x200)
msgsnd(r0, &(0x7f00000004c0)={0x2, "a3034954e67e6967c8ba18075f29de704de89a831676cb7f70d9ed0fedd883daac7399f978ec0487ce520745cfe6bab4a9f1c4d2ed300200a49171f92b56f02f0591e8cc"}, 0x4c, 0x800)
r1 = socket$inet(0x2, 0x4000, 0x9)
socket$inet(0x2, 0x2, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100)
select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180))
sendmsg$unix(0xffffffffffffffff, 0x0, 0x40e)
setrlimit(0x7, &(0x7f0000000600)={0x10, 0xffc})
openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSDIRFILT(r3, 0x8004427d, &(0x7f0000000080)=0x4ee6f8eb)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x7f00, 0x2000, 0xfc}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x0, 0x0, 0x8001}}}}}})
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
recvfrom(r2, &(0x7f0000000540)=""/163, 0xa3, 0x2, 0x0, 0x0)
r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VNDIOCSET(r4, 0xc0285108, &(0x7f0000000140)={0x0, 0x0, 0x0})
nanosleep(&(0x7f00000002c0)={0x2, 0xfb}, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000000)="c09191c1a1857912f952095d2b4d1aba76a277b95a2115a8df9d59a5c9", 0x1d}, {&(0x7f0000000040)="3e882e21b437d154cae4ed8b3a534e9e0621a5a27450278d802d8eb51c4fc1af33c2c6c557c415c791223c5b25db03348cf3edfa0bdb25faa6ec15bef1b2c5a541b6e585191353a982c714e5651115c0db7c3cd4abb200520614549c626e7f8a3a0efdee9753eea2ff3b08edc0270d45288c450a253bcd1125328f22b8d31c3430f1673f42deab89f08e432110d98fb5a96b04478e6b50f9b11efc85cbad4ec92b29a78e02e36f60066dfe274b9577fdf5b2df94f80ce90bb4d6df926f41380c13d136d3f9ad2328443dbdd9fbcd13fb9e185620e5", 0xd5}, {&(0x7f0000000140)="fcbbd4188c2208b2f6a1f5ab8f8c7b42492605306c96b88e1fe85ff8ae5ddae953226e7de63ec1a3acf41a0516bed972d4bf2235a25f9e85d4c1d821bbc856b0b9dd60d8fc68064bfcd4b69cdf0266b0181ecc96b36ce77d5175dccbd69ee8811fdfaef377a6999fd6b2c4f0f1acc45ab16713614a30ad5dfb1860", 0x7b}, {&(0x7f00000001c0)="f65b77bdffaaafba0ca626e550034061c02fb907c4b15a826dd739e37a2c56297d075207e0fef6ee3933269a16b38799c1e743aa8791a131931853bc2687c2d9eb8f319be6732ce5922c4dfca8741005bf74139537b2232ee51edd9d35a042ad2bd7853c", 0x64}, {&(0x7f0000000240)="c2ab3f1ae3d4432915d3fabf8d887fa25c597a28f6ca386b2f846270cd95", 0x1e}, {&(0x7f0000000280)="91654f888c96fbdf909489e8bd86f9cb8b862de63858d7e4a65df548ec2e49a952a74d2ffc64d3c91087dda69cebdaf200d5082a2cfcae4f4e53453dd81ec192f5b29b9bb3e03049481fa08be0533ac789a70ee2367e50", 0x57}, {&(0x7f0000000300)="d4293cda4191a10f424e6c1f120754a4f70a0ddc0bd906ece52939150190b8c04065483afdfe5812c7cc88c55468ef415d47bce1011c32a19affa9d1f16bf00e298f6206d9f922c5271395228ead9468d35869784467d7d4cf38413f9b15826e5746804b8541a56ea889d154271058c58967329a21a3b81f2cda8ccdf431502a128e2958942c08d3cc60eef97ff627f92d4faf4052bf90896c8f360c1617b975f0b3efa55d0a1d3bd054d01b02bca27a111681aa3ee35213e72d87ce6ef58eeda657fe2f3bd5f23e9f0ddea15e9059e4d243653952bfe9ba6d21aeecadf8306e6ab9", 0xfffffffffffffdd6}, {&(0x7f0000000400)="6640dcf075e278798917986fb548d56a2853818249e6560b74685b", 0x1b}], 0x8)

534.477516ms ago: executing program 1 (id=418):
shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x9, 0x101, 0x80000001, 0x80000001, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0xa, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1e1, 0x10002, 0xc, 0x3}, {0x4007ff, 0x2, 0x8, 0x9}, {0x0, 0x5, 0x8, 0x4}, {0x3, 0xfffffffa, 0x9, 0x6}, {0xfffffff8, 0x7, 0x5}, {0x0, 0x1, 0x1001, 0x30004}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xb, {0xffffffffffffffff, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="859000042d00ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe80"]) (async)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0xb, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) (async)
setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcb878cbb5b149f6510faffe60babda6719aa", 0x14) (async)
setsockopt$sock_int(r2, 0xffff, 0x1021, &(0x7f0000000040)=0x5fc, 0x4)

530.57334ms ago: executing program 2 (id=419):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", &(0x7f0000000140)=0xfe1e, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$inet(0x2, 0x4003, 0x1)
setsockopt(r0, 0x0, 0x15, 0x0, 0x0)
setpgid(0x0, 0xffffffffffffffff)

408.218779ms ago: executing program 4 (id=420):
sysctl$hw(&(0x7f00000000c0)={0x6, 0xb}, 0x4d, 0x0, 0x0, 0x0, 0x0)
socket(0x2, 0x1, 0x2)
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
ioctl$TIOCDRAIN(r0, 0x2000745e)
unveil(0x0, &(0x7f0000001d00)='c\x00')
mknod(&(0x7f00000003c0)='./bus\x00', 0x80, 0x200)
sysctl$kern(&(0x7f0000000100)={0x1, 0x10}, 0x2, &(0x7f00000001c0)="07c3ce46a04cfe48a2ef7db0fc2e022bc36eb93b49b293df9ca764d1ffcf1a6d24fde4df1aa6866bdfbc2bb088cb15fce39c7a6d16daf732251d63eb55ed8e496e8d8d99346833a127039d81fbb4e82fb3f23c7ad5a9ad1b15693f08c2fb9fc73d3240bfda5ac993930c4ac14f7512b49c25a85ec02b43aff9a10039e723aba8797dc18ea3fceb64915e5e1700b4360a4275e5e9b202909d1f47ea1797f7a41eed5027fb64c5d581453db1ae7bf9a76adf1b7423450bfbc6d184cdf70d885477641b305179cb2ddcf943ebe59621400e161bcef832c4206e5e2c72fd70783706070c", &(0x7f00000002c0)=0xe2, &(0x7f0000000300)="b0f62b2e7acdbfcdb3b9836fa4837528731f364df15d95fa6ff6df6724ed76489b494d271213e64083ed1f663e64e67693ddf67283ffcc0013caf3e5259584ab6fb9acae67c27bc3015a4c6258304ba8daf8dccdf121c0e34c89f633c2af41e90ec05d9b2238e6fc83e052181a6cc009bc8d6f00936120d0a3a64eaf9d72cbe6f7aced5d1928961a2671ff02d8e0c0fc1339f16626", 0x95)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x8000, 0x8)
sendto(r2, 0x0, 0x0, 0x8, 0x0, 0x0)
setuid(0xee01)
writev(0xffffffffffffffff, 0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0xc0207534, 0x0)
r3 = semget(0x0, 0x1, 0x281)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x10, 0x0, 0x0)
semctl$GETNCNT(r3, 0x0, 0x3, 0x0)
open(0x0, 0x200, 0x0)
semget(0x0, 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffc, "32cd8b6a4682fe4b8c1a6c230000005d31000094"})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d)
select(0x40, &(0x7f0000000180)={0x7c9, 0x44809e9d, 0xd1d9, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)

405.923925ms ago: executing program 1 (id=421):
mkdir(0x0, 0x0)
setgid(0xffffffffffffffff)
r0 = socket(0x18, 0x1, 0x0)
dup2(r0, 0xffffffffffffff9c)
setuid(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fchdir(r1)
chdir(&(0x7f00000001c0)='./file0\x00')
ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x8, 0x0)
r2 = semget$private(0x0, 0x2, 0x6)
r3 = getgid()
setgroups(0x0, 0x0)
setreuid(0x0, 0x0)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, r3, 0x0, r3, 0x122, 0x31}, 0xfffffffd, 0x388c, 0x10})
r4 = msgget$private(0x0, 0x0)
msgrcv(r4, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000180), &(0x7f0000000200)=0x8)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r5 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1, 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
unveil(0x0, &(0x7f0000000080)='c\x00')
msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8})
msgsnd(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7"], 0xe, 0x800)

405.225056ms ago: executing program 1 (id=422):
r0 = socket(0x18, 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x25)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mprotect(&(0x7f00004ec000/0x4000)=nil, 0x4000, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0xf6, 0xffff7ffb, 0x8000085, 0xfffffff8, "102e2641ee66093af219e33600", 0xfeffff7f, 0x4})
r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
kevent(r4, 0x0, 0x57e2, &(0x7f0000000840)=[{{r4}, 0xfffffffffffffff9, 0x24, 0x2, 0x855, 0x8}, {{r4}, 0xfffffffffffffffa, 0x93, 0xf0000000, 0x2, 0x6}, {{}, 0xfffffffffffffffc, 0x88, 0x1, 0x3b8, 0x4d7}, {{r4}, 0xfffffffffffffff9, 0xcd, 0x10, 0x75800000000000, 0x200007}], 0x41a1, 0x0)
sendmsg(r4, 0x0, 0x7)
ioctl$TIOCSETA(r4, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8})
ioctl$TIOCGTSTAMP(r4, 0x4010745b, &(0x7f0000000140))
writev(r2, &(0x7f0000000180)=[{&(0x7f0000002cc0)="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", 0x216}, {&(0x7f0000000040)="ea5baf2cce8f360213ec341cd2dc7a092efdcab4170459dde31f89474826372fd04e27eacb015ce5859ec1e172e7cb64917acddf81544a2586ccf2e1394c8c6b6351e2fc91b1a80d700adb16edc8b61e46f04d1a7797caddd926f318c3dd0e8a2256ab4aa387d606345e6e13f002ec057a7064cf855cec7299b97a3d47e9ae80561d1ac929993be75f00c9a2ce4c400936b94fad0d7a2588c40b841c19e9470d1a14bd051f6330e0c19e4a0fa60916b1e0d300fa8e87e7a54591da171436294a4f598e624bb814286c3bb359a097d23873fefe6cf6f975857dd4c976cc3385667527445c597a4990", 0xe8}], 0x2)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f00000002c0)={0x4, 0x2, 0x8, 0xe00, 0xc5, 0x70, 0x8, 0x10, [{0x2, 0x1, 0x9}, {0x4f1, 0xcf0, 0x15, 0x2}, {0x7, 0xfffffffc, 0x9bb, 0x7ff}, {0xe, 0x7, 0x2, 0x3}, {0x6, 0x3, 0x800, 0xb}, {0x3, 0x7fffffff, 0x80, 0x6}, {0x9, 0x81, 0x2, 0x6}, {0x9, 0x7, 0xc}, {0x1000, 0x8, 0x9, 0x7}, {0x5, 0x5, 0x7, 0x1}, {0x1, 0x9e2, 0x7, 0xd}, {0x4, 0xffffffff, 0x80, 0x3}, {0xde, 0x2, 0x1, 0x8fa}, {0x6, 0x8, 0x5, 0xb}, {0x3, 0x0, 0x8fe2, 0x997}, {0x1, 0x200, 0x47e7}]})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setsockopt(r0, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000040)=@in6={0x18, 0x0}, 0xc, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x438}, 0x0)

402.292196ms ago: executing program 5 (id=423):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0)
fchown(r0, 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
setitimer(0x1, &(0x7f0000000200)={{0xce3, 0x2}, {0x0, 0xad}}, 0x0)
getsockopt$sock_int(r1, 0xffff, 0x1, 0x0, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = geteuid()
lchown(&(0x7f00000000c0)='./file1\x00', r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
socket(0x18, 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x5}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x20, 0x2a)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r5 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000600)={0x9, 0x81, 0x1, 0xffffffff, "f2693e9bcc32d5a514d182589970879a62bfc48d", 0x1, 0xd})
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
read(r5, &(0x7f00000009c0)=""/4096, 0x1000)
syz_open_pts()
r7 = socket(0x18, 0x2, 0x0)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x2}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r7, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20, 0x401}, 0x0)

306.401256ms ago: executing program 2 (id=424):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x8000)
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
getpeername(r1, &(0x7f0000000040)=@in, &(0x7f0000000140)=0xc)
dup(r0)
syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff08ffffffffaaaaaaaaaabb86dd60006f3300383a008a211dd10001000000000000de74f8fffffffffffbff000000000000000000aa02009078000000006000004000003a01fe35dbed3a00000000000000000000aa00000000000000000000ffff0f1ab5678f"])
ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x4, 0x8}, {0x22, 0x5}], 0x2})
mknod(&(0x7f0000000280)='./file0\x00', 0xc0, 0x1)
unlink(&(0x7f0000000200)='./file0\x00')

304.408637ms ago: executing program 5 (id=425):
r0 = syz_open_pts()
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000001000)=0x4)
sysctl$net_inet_gre(&(0x7f0000000100), 0xb, &(0x7f0000000140)="b1904dafec59a7020b8701ab", &(0x7f0000000300)=0xc, &(0x7f00000001c0)="b3ec1747e9b6ccd50c640969ea4e0af98258ff93e2786b628cb8b79c18f4044d5aa55d0d7529853f433c3212359ea5a366376bbfec1ad9d13ee04cac8ba55681f7625ab699e9629749ef05efe45c699ef4958189661c694dd7089ef7ffc5612379a7488c1a061c6a4566680bcf5cef322c11e063a52072023a85d7aaf2cc9bd1fd1fd354261500353f165f9e103899db41c37f436050c1f537ec9542b44bbd91f9e7917ff57d2f751cb69b5e83317316c243c44899fe14398a3ea970989a8277cedacd2b239da45aa6fc18b7f52b558da19fefc86df5946586ad45ffb38099f02084a332073cc8b657", 0xe9)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3)
ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000000)={0x8000, 0x100, 0x5})

303.432746ms ago: executing program 7 (id=426):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async)
select(0x40, &(0x7f0000000040)={0x40009, 0x5, 0x4008, 0x8000000000000003, 0x3, 0x1000000000090, 0x4c}, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async)
socket(0x10, 0x5, 0x2) (async)
mknod(0x0, 0x2000, 0x100) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r1 = socket(0x2, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
sendto(r1, &(0x7f0000000080)="0101", 0xfd84, 0xe1, 0x0, 0x0) (async)
shutdown(r1, 0x2)
ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})

303.146621ms ago: executing program 7 (id=427):
syz_emit_ethernet(0xac, &(0x7f0000000040)={@random="b90531074b01", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x9e, 0x0, 0x2, 0x0, 0x3a, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @udp={{0x0, 0x2, 0x8}, {"47b3dec0f15f7d5c3de142425af10845cf71a20e2e8fc07e90fa89aa098d3b4bcd9a9ed94a5130a5bec9be693674757892c541e9b521a7bd7d6662636d940713e093243ce408cdd5a756143933e393bea62395a01fc4d94cb901b94c3fc94c8a25e8a6ebb9ca00016c574fac0bd0d208bacd33b70a42c0cc01a2f94dbee2fa233590"}}}}}})
syz_emit_ethernet(0xac, &(0x7f0000000040)={@random="b90531074b01", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x9e, 0x0, 0x2, 0x0, 0x3a, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @udp={{0x0, 0x2, 0x8}, {"47b3dec0f15f7d5c3de142425af10845cf71a20e2e8fc07e90fa89aa098d3b4bcd9a9ed94a5130a5bec9be693674757892c541e9b521a7bd7d6662636d940713e093243ce408cdd5a756143933e393bea62395a01fc4d94cb901b94c3fc94c8a25e8a6ebb9ca00016c574fac0bd0d208bacd33b70a42c0cc01a2f94dbee2fa233590"}}}}}}) (async)

94.870568ms ago: executing program 5 (id=428):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x7, &(0x7f0000000d80)=[{0x2, 0xa0, 0x3, 0x6}, {0x8, 0xb, 0x0, 0xbf6}, {0x0, 0x9, 0x1, 0x10}, {0x69, 0x1, 0x0, 0x9}, {0x3, 0x2f, 0x0, 0x4}, {0xd, 0x0, 0x9, 0x7}, {0x7, 0x67, 0x7, 0x6dd8}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8)
sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100)="688b20b5", &(0x7f00000001c0)=0x4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000100)='.\x00', 0x200, 0x0)
symlinkat(&(0x7f0000000080)='./file2\x00', r0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000900)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
unlink(&(0x7f0000000800)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000240)="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", 0x9d0}], 0x1)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
poll(0xffffffffffffffff, 0x0, 0x80000)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000e00)={0x3, &(0x7f0000000000)=[{0xc, 0x0, 0xed, 0x409}, {0x40, 0x7b, 0x14, 0x7}, {0x1b1, 0x1d, 0x20, 0x4d3}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x36, &(0x7f0000000000)="03000000", 0x4)
r3 = kqueue()
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000180)=0xc)
chown(&(0x7f0000000000)='./bus\x00', 0xffffffffffffffff, r4)
kevent(r3, &(0x7f0000000080), 0x2008000, 0x0, 0xfffffff9, 0x0)
kevent(r3, &(0x7f00000001c0), 0x9635, 0x0, 0xa543, 0x0)
open$dir(&(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x110)
unveil(&(0x7f0000000140)='./bus\x00', &(0x7f0000000c40)='c\x00')

83.051895ms ago: executing program 7 (id=429):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async)
open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea0700083a00feffffffff00000000000000000000aa0000e0ffffff00000d4ad3af0000000081"])
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000100)=0x7)
readv(r1, &(0x7f0000002680)=[{0x0}], 0x1) (async)
ioctl$TIOCCLRVERAUTH(r1, 0x2000741d)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='(\'(#+,#^.{,\x00'], &(0x7f00000001c0)=[&(0x7f0000000140)='.:\x00'])

82.154051ms ago: executing program 2 (id=430):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x2, 0x2}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
poll(0x0, 0x0, 0x40007) (async)
ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)) (async, rerun: 32)
unveil(0x0, &(0x7f0000000300)='W\x00') (rerun: 32)
r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
socket(0x18, 0x3, 0x0)
mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async)
socket(0x1, 0x2, 0x0) (async, rerun: 32)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 32)
kqueue()
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0x800}, {}, {0x0, 0x7fff}, {}, {}, {0x0, 0x9}, {0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x6}, {0x3, 0x3}, {}, {}, {0x0, 0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x7}, {0x2, 0x9}, {}, {0x3, 0x800}, {0x0, 0x8}, {0x3}, {0x3}, {}, {0x2, 0x8001}, {0x0, 0x4}]}) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f00000000c0)="b10005040000000000000000340000001a5113fecea10500fef96ecfc72fd3357a89583535673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc2feb3fda1139b672f4d3360223e7d026ba8af630037a840c4f2bd53eb067e7335a069d7ac434e0c0000000000008904000000000022830cf41bed66f40066ccdcf3e4999d9d20002002c5dbfad800000008e371a3f8340412051e00000000000002000000000000", 0xb1, 0x0, 0x0, 0x0) (async)
bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x3}, 0x8) (async)
sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x20c) (async)
ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f0000000080)={{0x0, 0xb}, 0x0, 0x4})

2.539488ms ago: executing program 1 (id=431):
r0 = socket(0x18, 0x2, 0x0) (async)
r1 = socket(0x18, 0x2, 0x0)
r2 = dup2(r0, r1)
setsockopt(r2, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f0000000500)={'./bus\x00', 0x5, 0x200, 0x4}) (async)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0) (async)
kqueue() (async)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x7c, 0x2, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0xb}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[]) (async)
r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
ioctl$FIOASYNC(r4, 0x80047470, &(0x7f00000000c0)=0x5) (async)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYRES16=r4])
setsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f0000000000)={0xf85, 0x3}, 0x10)

1.83421ms ago: executing program 2 (id=432):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0) (async)
shutdown(r0, 0x2)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xfa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x3ff, 0x80000001, 0x1fffd, 0x10, [{0x0, 0x3, 0x4, 0xa28}, {0xc5f, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f86, 0x0, 0x9}, {0x80000000, 0x800, 0x3}, {0x401, 0x7ff, 0x1002805, 0x4d8a}, {0x2, 0x86, 0x3, 0xb4}, {0xce1, 0xd16f, 0x4f9, 0x2d}, {0x2, 0x803, 0x17, 0x6}, {0x2, 0x7f, 0x5, 0x9}, {0x4, 0x90, 0xd1b, 0x88}, {0x1c4, 0x40000005, 0x2, 0x3}, {0x7ff, 0x6, 0x7, 0x9}, {0xb8c, 0x4, 0x8, 0x2c4}, {0x29a7171a, 0xfffffffa, 0x1, 0x6}, {0x200002, 0x7, 0xfffffff9, 0xfffffffd}, {0x0, 0x1, 0x1002, 0xc}]}) (async)
connect$inet6(r1, &(0x7f0000000040)={0x18, 0x3, 0x24cfd78b, 0x80000001}, 0xc) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
unveil(0x0, &(0x7f0000000780)='c\x00')

929.037µs ago: executing program 7 (id=433):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x3a366294)
sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000240))
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000100)=""/4096, 0x1000}], 0x2, &(0x7f0000001140)=""/234, 0xea}, 0x803)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1c}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)

0s ago: executing program 0 (id=434):
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="cb4f69c83b01ffffffffffff86dd61b91d3a00082c034bda00000000000000000000000000bb4079e811670a1ec2952a4234926cce073300000300000000"])
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
socket(0x2, 0x2, 0x0) (async)
r1 = socket(0x2, 0x2, 0x0)
getsockopt$sock_int(r1, 0xffff, 0x2000, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r2 = openat(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0)
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$WSDISPLAYIO_GVIDEO(r3, 0x40045744, &(0x7f0000000180))
r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r4, 0xc0a86b03, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async)
ioctl$VNDIOCCLR(r4, 0xc0a86b03, &(0x7f0000000200)={0x0, 0x10000, 0x0})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", &(0x7f0000000140)=0xfe1e, 0x0, 0x0)
munmap(&(0x7f0000137000/0x4000)=nil, 0x4000)
socket$inet(0x2, 0x8000, 0x5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts.
pckbd_enable: command error
WARNING: thread `nfsio' (79529) exits with status -1
WARNING: thread `nfsio' (114156) exits with status -1
WARNING: thread `nfsio' (122572) exits with status -1
WARNING: thread `nfsio' (411650) exits with status -1
WARNING: thread `nfsio' (97663) exits with status -1
WARNING: thread `nfsio' (18733) exits with status -1
WARNING: thread `nfsio' (101552) exits with status -1
WARNING: thread `nfsio' (97106) exits with status -1
WARNING: thread `nfsio' (199733) exits with status -1
WARNING: thread `nfsio' (306433) exits with status -1
WARNING: thread `nfsio' (403624) exits with status -1
WARNING: thread `nfsio' (379136) exits with status -1
WARNING: thread `nfsio' (353041) exits with status -1
WARNING: thread `nfsio' (500683) exits with status -1
WARNING: thread `nfsio' (47745) exits with status -1
WARNING: thread `nfsio' (280228) exits with status -1
WARNING: thread `nfsio' (507625) exits with status -1
WARNING: thread `nfsio' (112208) exits with status -1
WARNING: thread `nfsio' (407768) exits with status -1
WARNING: thread `nfsio' (163064) exits with status -1
pckbd_enable: command error
pckbd_enable: command error
WuAvRmN_IfNaGu:lt S(P0xL NffffOfTd 8LO0W5EfbRE7Df 5ON cT8R, 0AxP1 6E2X9I0T0 ,c 0 
0,Stopped at     alltraps_kern_meltdown+0xb8:    movl    %ebx,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 388011  38871      0           0  0x4000000    0  syz-executor
*380667  38871      0           0  0x4000000    1  syz-executor
alltraps_kern_meltdown() at alltraps_kern_meltdown+0xb8
copy_fault() at copy_fault
syscall(ffff80002abea910) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc94c4b12070, count: 11
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: uvm_fault(0xfffffd805fb7f5c8, 0x162900, 0, 2) -> e
ddb{1}> trace
alltraps_kern_meltdown() at alltraps_kern_meltdown+0xb8
copy_fault() at copy_fault
syscall(ffff80002abea910) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc94c4b12070, count: -4
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002abea540
rbx                                0
rdx               0xffff800001486240
rcx               0xffff80002a298540
rax                             0x2a
r8                0xffff80002abea470
r9                                 0
r10               0x583001ec83e0f558
r11               0x4d33523a410621d7
r12                              0x3
r13                             0x16
r14               0xffff80002abea910
r15               0xffff80002abea700
rip               0xffffffff8332b20b    alltraps_kern_meltdown+0xb8
cs                               0x8
rflags                         0x246
rsp               0xffff80002abea4c0
ss                              0x10
alltraps_kern_meltdown+0xb8:    movl    %ebx,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=380667 pid=38871 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=36, usrpri=82, slppri=36, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a2982b0,0xffff800034be02d8
    process=0xffff80003c452138 user=0xffff80002abe5000, vmspace=0xfffffd805fb7f5c8
    estcpu=32, cpticks=3, pctcpu=0.2, user=0, sys=5, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 97759   35058  25287      0  2           0                syz-executor
 97759  205562  25287      0  2   0x4000000                syz-executor
 97759  436880  25287      0  3   0x4000080  fsleep        syz-executor
 97759    8336  25287      0  2   0x4000000                syz-executor
 89838  451210  24301      0  2           0                syz-executor
 89838  237341  24301      0  3   0x4000080  fsleep        syz-executor
 89838  173717  24301      0  2   0x4000000                syz-executor
 56507  382381   2902      0  2           0                syz-executor
 56507  465926   2902      0  3   0x4000080  fsleep        syz-executor
 38871  259062  95632      0  2           0                syz-executor
 38871  388011  95632      0  7   0x4000000                syz-executor
*38871  380667  95632      0  7   0x4000000                syz-executor
 38871  269840  95632      0  2   0x4000000                syz-executor
 89684  318080  51137      0  2           0                syz-executor
 89684  331036  51137      0  2   0x4000000                syz-executor
 89684  287170  51137      0  3   0x4000080  fsleep        syz-executor
 89684   56024  51137      0  3   0x4000080  fsleep        syz-executor
 11439  437923      0      0  3     0x14200  acct          acct
 25287   44235  76840      0  2       0xc82                syz-executor
 73100   61105      0      0  3     0x14200  bored         sosplice
  2902  436153  76840      0  3        0x82  nanoslp       syz-executor
 51137  107949  76840      0  3        0x82  nanoslp       syz-executor
 95632  412115  76840      0  3        0x82  nanoslp       syz-executor
 59528  221513  76840      0  2       0xc82                syz-executor
 99741  381494  76840      0  2         0x2                syz-executor
 24301  132821  76840      0  3        0x82  nanoslp       syz-executor
 80181  328440  76840      0  2         0x2                syz-executor
 76840  400873  10272      0  3        0x82  kqread        syz-executor
 10272  234907  31580      0  3    0x10008a  sigsusp       ksh
 31580  309801  97131      0  3        0x98  kqread        sshd-session
 97131  392945  79807      0  3        0x92  kqread        sshd-session
 52432  190374      1      0  3    0x100083  ttyin         getty
 79807   60146      1      0  3        0x88  kqread        sshd
 15236   71349  54296     74  3   0x1100092  bpf           pflogd
 54296  215957      1      0  3        0x80  sbwait        pflogd
  4618   15398  42704     73  3   0x1100090  kqread        syslogd
 42704  302797      1      0  3    0x100082  sbwait        syslogd
 15367  521792      1      0  3    0x100080  kqread        resolvd
 35501   21140  89048     77  3    0x100092  kqread        dhcpleased
 99600  232612  89048     77  3    0x100092  kqread        dhcpleased
 89048  429931      1      0  3        0x80  kqread        dhcpleased
 78623  435420      0      0  3     0x14200  bored         smr
 25450  517184      0      0  2     0x14200                zerothread
 29657  143194      0      0  3     0x14200  aiodoned      aiodoned
 15343  186356      0      0  3     0x14200  syncer        update
 40292  449260      0      0  3     0x14200  cleaner       cleaner
 15560  192212      0      0  3     0x14200  reaper        reaper
 31930  200044      0      0  3     0x14200  pgdaemon      pagedaemon
 31107  342071      0      0  3     0x14200  bored         viomb
 50354  467280      0      0  3  0x40014200  acpi0         acpi0
 90890  300909      0      0  3  0x40014200                idle1
 43459  383843      0      0  3     0x14200  bored         softnet3
   693  209414      0      0  3     0x14200  bored         softnet2
 85440  367866      0      0  3     0x14200  bored         softnet1
 53647   52853      0      0  3     0x14200  bored         softnet0
 31856  333450      0      0  3     0x14200  bored         systqmp
  1674  185238      0      0  3     0x14200  bored         systq
 94688  195614      0      0  3     0x14200  tmoslp        softclockmp
 57269  319809      0      0  2  0x40014200                softclock
 92760   58298      0      0  3  0x40014200                idle0
     1   88787      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 97759 (syz-executor) thread 0xffff800034be1c68 (205562)
exclusive rwlock fdlock r = 0 (0xffff8000fffea278)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x367
#2  doopenat+0x173
#3  syscall+0xbc6
#4  Xsyscall+0x128
Process 89684 (syz-executor) thread 0xffff800034be0038 (331036)
exclusive rwlock fdlock r = 0 (0xffff8000fffeb2b8)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x367
#2  sys_socketpair+0x2f5
#3  syscall+0xbc6
#4  Xsyscall+0x128
Process 99741 (syz-executor) thread 0xffff80002a2999c0 (381494)
exclusive rrwlock inode r = 0 (0xfffffd806ba45400)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x367
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x283
#7  ufs_mkdir+0x113
#8  VOP_MKDIR+0x102
#9  domkdirat+0x179
#10 syscall+0xb08
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806cd41558)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x367
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vfs_lookup+0x109
#6  namei+0x7aa
#7  domkdirat+0x8b
#8  syscall+0xb08
#9  Xsyscall+0x128
Process 80181 (syz-executor) thread 0xffff8000ffff3720 (328440)
exclusive rrwlock inode r = 0 (0xfffffd806dd229b0)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x367
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vget+0x2bd
#6  ufs_ihashget+0x185
#7  ffs_vget+0x8c
#8  ufs_lookup+0x19f8
#9  VOP_LOOKUP+0x6e
#10 vfs_lookup+0x8fa
#11 namei+0x7aa
#12 dounlinkat+0xc1
#13 syscall+0xb08
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806cd308b0)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x367
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vfs_lookup+0x109
#6  namei+0x7aa
#7  dounlinkat+0xc1
#8  syscall+0xb08
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10209  11054K   11343K 166960K     11803        0
            pcb    17     12K      12K 166960K       112        0
         rtable   242      9K       9K 166960K       453        0
             pf    36     18K      21K 166960K        77        0
         ifaddr    46      8K       8K 166960K        65        0
        ifgroup    55      2K       2K 166960K        89        0
         sysctl     4      1K       9K 166960K        10        0
       counters    68     36K      37K 166960K       100        0
       ioctlops     0      0K       4K 166960K      1602        0
            iov     0      0K      16K 166960K        43        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1335     84K      85K 166960K      1726        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        14        0
         VM map     2      1K       1K 166960K         2        0
            sem    11      0K       0K 166960K        78        0
        dirhash    12      2K       2K 166960K        27        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    16     57K      93K 166960K       579        0
          sigio     0      0K       0K 166960K         9        0
           proc    73     91K     128K 166960K       638        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        55        0
       in_multi    99      7K       7K 166960K       128        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     1      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    91    413K     413K 166960K        91        0
           exec     0      0K       1K 166960K       468        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   249    169K     182K 166960K      7117        0
       UVM aobj    28      2K       4K 166960K        33        0
     pinsyscall    41     82K     105K 166960K      1733        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K        42        0
            NDP    12      0K       2K 166960K        41        0
           temp    52   8677K    8802K 166960K     22236        0
         kqueue    13     20K      28K 166960K        89        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       69    0       66     1     0     1     1     0     8    0
rtentry    176      137    0       29     6     0     6     6     0     8    0
unpcb      144      256    0      235     2     1     1     2     0     8    0
syncache   336        6    0        6     2     1     1     1     0     8    1
tcpqe       32        2    0        2     2     1     1     1     0     8    1
tcpcb      808      119    0      112     3     1     2     3     0     8    1
arp        128       21    0        2     1     0     1     1     0     8    0
inpcb      384      517    0      506     8     3     5     5     0     8    3
nd6        144       30    0        4     1     0     1     1     0     8    0
pkpcb       40        5    0        5     1     0     1     1     0     8    1
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1192      11    0       11     2     1     1     1     0     8    1
pppxif     1504       1    0        1     1     0     1     1     0     8    1
pffrag     232        3    0        0     1     0     1     1     0   482    0
pffrnode    88        3    0        0     1     0     1     1     0     8    0
pffrent     40        5    0        2     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       3    0        1     1     0     1     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       46    0        2     1     0     1     1     0     8    0
pfstkey    128       46    0        2     2     0     2     2     0     8    0
pfstate    384       46    0        2     5     0     5     5     0     8    0
pfrule     1344      26    0       18     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     1     0     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      559    0      106    29     0    29    29     0     8    0
art_table   32      561    0      106     4     0     4     4     0     8    0
art_node    16      135    0       41     1     0     1     1     0     8    0
sysvmsgpl   40       13    0        8     2     1     1     1     0     8    0
semapl     112       75    0       66     1     0     1     1     0     8    0
shmpl      112       30    0        5     1     0     1     1     0     8    0
dirhash    1024      27    0       10     3     0     3     3     0     8    0
dino2pl    256     2393    0      886    95     0    95    95     0     8    0
ffsino     288     2393    0      886   109     0   109   109     0     8    0
nchpl      144     3199    0     1505    63     0    63    63     0     8    0
rtmask      32        3    0        3     1     1     0     1     0     8    0
uvmvnodes   80     2660    0        0    55     0    55    55     0     8    0
vnodes     216     2660    0        0   148     0   148   148     0     8    0
namei      1024   10887    0    10886     4     3     1     2     0     8    0
percpumem   16       65    0       16     1     0     1     1     0     8    0
pfiaddrpl  120        1    0        0     1     0     1     1     0     8    0
kstatmem   264       48    0       22     2     0     2     2     0     8    0
scxspl     216    10097    0    10097    10     2     8     8     1     8    8
plimitpl   152      300    0      283     1     0     1     1     0     8    0
sigapl     424      911    0      861    11     2     9     9     0     8    2
knotepl    120      505    0        0    16     0    16    16     0     8    0
kqueuepl   224      130    0      119     2     1     1     2     0     8    0
pipepl     336      144    0      117     3     0     3     3     0     8    0
fdescpl    520      871    0      841     3     0     3     3     0     8    0
filepl     160     4530    0     4304    14     3    11    13     0     8    1
lockfpl    104       98    0       95     1     0     1     1     0     8    0
lockfspl    48       45    0       42     1     0     1     1     0     8    0
sessionpl  144       25    0       16     1     0     1     1     0     8    0
pgrppl      48       37    0       20     1     0     1     1     0     8    0
ucredpl    104      643    0      629     1     0     1     1     0     8    0
zombiepl   144     1121    0     1120     1     0     1     1     0     8    0
processpl  1208     911    0      861     7     1     6     6     0     8    1
procpl     656     1733    0     1671     9     1     8     8     0     8    2
srpgc       96        2    0        2     1     1     0     1     0     8    0
sosppl     168        1    0        1     1     0     1     1     0     8    1
sockpl     728      858    0      823    10     4     6     7     0     8    2
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     113    0        0    15     0    15    15     0     8    0
mcl2k      2048      21    0        0     3     0     3     3     0     8    0
mtagpl      96       21    0        0     1     0     1     1     0     8    0
mbufpl     256      187    0        0    12     0    12    12     0     8    0
bufpl      280     3306    0      125   228     0   228   228     0     8    0
anonpl      32     9647    0        0    78     0    78    78     0   246    0
amapchunkpl 152   22539    0    22026    32     4    28    31     0   158    7
amappl16   200     2464    0     2402    18    12     6    15     0     8    2
amappl15   192        6    0        5     1     0     1     1     0     8    0
amappl14   184      141    0      128     1     0     1     1     0     8    0
amappl13   176       10    0       10     1     1     0     1     0     8    0
amappl12   168     1550    0     1520     4     1     3     3     0     8    0
amappl11   160       49    0       35     1     0     1     1     0     8    0
amappl10   152       34    0       34     1     1     0     1     0     8    0
amappl9    144      275    0      275     1     1     0     1     0     8    0
amappl8    136       23    0       20     1     0     1     1     0     8    0
amappl7    128      112    0       99     1     0     1     1     0     8    0
amappl6    120      190    0      187     1     0     1     1     0     8    0
amappl5    112      125    0      115     1     0     1     1     0     8    0
amappl4    104      332    0      313     1     0     1     1     0     8    0
amappl3     96     4431    0     4315     5     1     4     4     0     8    0
amappl2     88      682    0      620     2     0     2     2     0     8    0
amappl1     80    10679    0    10074    16     1    15    15     0     8    0
amappl      88     6303    0     6131     5     0     5     5     0    92    0
dma65536   65536      1    0        1     1     0     1     1     0     8    1
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       32    0        5     1     0     1     1     0     8    0
uaddrrnd    24      871    0      841     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      871    0      841     1     0     1     1     0     8    0
vmmpekpl   168     8891    0     8848     3     0     3     3     0     8    0
vmmpepl    168    61155    0    59166   102     6    96   100     0   357    4
vmsppl     480      870    0      841     6     1     5     5     0     8    0
rwobjpl     72    21177    0    17503    67     0    67    67     0     8    0
pdppl      4096    1749    0     1682   105    34    71    85     0     8    4
pvpl        32    15872    0        0   129     1   128   128     0   265    0
pmappl     256      870    0      841     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      394    0       41    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83878ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37
acpitimer_delay(1) at acpitimer_delay+0x58
comcnputc(800,2c) at comcnputc+0x29b
cnputc(2c) at cnputc+0x61
db_putchar(2c) at db_putchar+0x65c
kprintf() at kprintf+0x2aba
db_printf(ffffffff83400d6b) at db_printf+0x9b
fault(ffffffff833a0175) at fault+0xa7
kpageflttrap(ffff80003ac020a0,162900) at kpageflttrap+0x385
kerntrap(ffff80003ac020a0) at kerntrap+0x14a
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
end trace frame: 0xffff80003ac02410, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff83878ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37
acpitimer_delay(1) at acpitimer_delay+0x58
comcnputc(800,2c) at comcnputc+0x29b
cnputc(2c) at cnputc+0x61
db_putchar(2c) at db_putchar+0x65c
kprintf() at kprintf+0x2aba
db_printf(ffffffff83400d6b) at db_printf+0x9b
fault(ffffffff833a0175) at fault+0xa7
kpageflttrap(ffff80003ac020a0,162900) at kpageflttrap+0x385
kerntrap(ffff80003ac020a0) at kerntrap+0x14a
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
copyout() at copyout+0x57
syscall(ffff80003ac024f0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc94a4740820, count: -17
ddb{0}> machine ddbcpu 1
Stopped at      alltraps_kern_meltdown+0xb8:    movl    %ebx,%gs:0x688
alltraps_kern_meltdown() at alltraps_kern_meltdown+0xb8
copy_fault() at copy_fault
syscall(ffff80002abea910) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc94c4b12070, count: 11
ddb{1}> trace
alltraps_kern_meltdown() at alltraps_kern_meltdown+0xb8
copy_fault() at copy_fault
syscall(ffff80002abea910) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc94c4b12070, count: -4