last executing test programs:

6.212196216s ago: executing program 0 (id=1250):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000200)={0x0, r0, 0x3})
socket$inet6(0x18, 0x4000, 0xd)
r1 = socket(0x20, 0x8000, 0x3)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x39}, 0x66, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf7101797afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0)
sysctl$hw(&(0x7f0000002bc0)={0x6, 0xe}, 0x2, &(0x7f0000002c00)="4c3fb4305332b4", &(0x7f0000002d00)=0x7, &(0x7f0000002d40), 0x0)
sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e770400"/151, &(0x7f0000000000)=0x97, &(0x7f00000001c0), 0x0)

6.16620331s ago: executing program 4 (id=1253):
r0 = socket(0x2, 0x1, 0x0)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0}, 0xc)
fchown(r0, 0x0, r1) (async)
poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x104}, {0xffffffffffffffff, 0x80}, {r0, 0x90}], 0x3, 0x9) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async)
read(r0, &(0x7f0000000080)=""/4096, 0x1000)

6.103962325s ago: executing program 4 (id=1256):
sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, &(0x7f0000000040)="3279db3e", &(0x7f00000000c0)=0x4, &(0x7f0000000140), 0x0)
getitimer(0x0, 0xfffffffffffffffe)
sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, &(0x7f0000000040)="3279db3e", &(0x7f00000000c0)=0x4, &(0x7f0000000140), 0x0) (async)
getitimer(0x0, 0xfffffffffffffffe) (async)

6.103396148s ago: executing program 5 (id=1257):
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r0 = socket(0x18, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000040)="b83d99b0096d4810809ed8c7ec8b6d0c5abbf79f7b86ef52b53c95fd149cb01b0022441c671b019899a92ef99f68761551126ff94530b634e50684d519309d0bffffe2a534f1472664696234a8738a8e9179b327d1195462822732ecaa254f38655cedda02d75f5516681d42cd77170b4d19a04c76", 0x75, 0x602, 0x0, 0x0)
setrlimit(0x8, &(0x7f00000002c0)={0x45, 0x61})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0x27ffb, 0x4004b6d, 0x8008081, 0x7ffffff8, "102e2618007be2dfe7d62007f533e2942b7a3ceb", 0x10000f, 0x200009})
writev(r1, &(0x7f0000002780)=[{&(0x7f0000002800)="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", 0x23c}], 0x1)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
r2 = socket(0x18, 0x2, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt(r2, 0x1000000029, 0x3f, &(0x7f0000000000)="6744d6e1", 0x4)
writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1)

6.102907608s ago: executing program 4 (id=1258):
accept$inet6(0xffffffffffffffff, &(0x7f0000002140), 0xffffffffffffffff)
mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x100)
unlink(&(0x7f0000000240)='./bus\x00')

6.1023421s ago: executing program 5 (id=1259):
r0 = syz_open_pts()
r1 = socket(0x2, 0x4001, 0x0)
r2 = dup(r1)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
close(r3)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x2, 0x2, 0x0)
bind(r4, &(0x7f0000000000), 0x10)
connect$unix(r4, &(0x7f0000000000), 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080), 0x4)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0x4)
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x10002fffffffe})
syz_open_pts() (async)
socket(0x2, 0x4001, 0x0) (async)
dup(r1) (async)
fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) (async)
close(r3) (async)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x2, 0x2, 0x0) (async)
bind(r4, &(0x7f0000000000), 0x10) (async)
connect$unix(r4, &(0x7f0000000000), 0x10) (async)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080), 0x4) (async)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0x4) (async)
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x10002fffffffe}) (async)

5.902454416s ago: executing program 4 (id=1260):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
mknod$loop(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async)
link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)

5.902197055s ago: executing program 5 (id=1261):
syz_emit_ethernet(0xd5, &(0x7f0000000340)={@random="e4d26f88648f", @empty, [{[{0x88a8, 0x1, 0x1, 0x1}], {0x8100, 0x7, 0x1, 0x1}}], {@ipv4={0x800, {{0x15, 0x4, 0x1, 0x22, 0xbf, 0x67, 0x1, 0x1c, 0x2, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0x20, 0x3, 0x0, 0x7, [{[], 0x7}, {[@multicast2]}, {[@empty], 0x7f}, {}, {[], 0x4}]}, @timestamp={0x44, 0x1c, 0x9, 0x3, 0x1, [{[], 0xfffffff7}, {[@local={0xac, 0x14, 0x0}], 0x4b78e022}, {[], 0x8}, {[@loopback], 0xfffffffb}]}, @ssrr={0x89, 0x3, 0xfb}]}}, @udp={{0x3, 0x2, 0x8}, {"dd1e3e43ac299631368d1c44940dbf36b8286157f2b804f6b0daeb4d25a5904378e5df2b2303eb2712e5e6b0e257f7af0b166a427ea54f920c16d4c5d1929f2159eb330082812152a546a2e2f969c8fcbb180a34beb13e39ff9e43b0220942cebf1593"}}}}}})
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r0, 0x0, 0x13, 0xffffffffffffffff, &(0x7f0000000040))
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40020802)
setreuid(0xee00, 0x0)
r3 = getuid()
setreuid(0x0, r3)
stat(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1)
close(r1)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)

5.900972698s ago: executing program 4 (id=1262):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/242, 0xf2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
setitimer(0x0, &(0x7f0000000000), &(0x7f0000000300))
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
syz_emit_ethernet(0x49, &(0x7f0000000180)=ANY=[])
r2 = socket(0x18, 0x3, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_ethernet(0x1000e, &(0x7f0000000480)=ANY=[])
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x7ff, 0x1}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000140)={0x1, 0x55}, 0x4000000000000004, 0x0, 0x0, 0x0, 0xfffffffffffffede)
select(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

4.834689494s ago: executing program 2 (id=1270):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x1, 0x4, 0xffff}, {0x4, 0x0, 0x1, 0x444}, {0x6, 0xd, 0x0, 0x401}]}) (async, rerun: 64)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (rerun: 64)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f00000001c0)) (async)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="6aab0d39f90c8b623e98b31257e54d657eae63062335637d041943a5695e10ff90804d6a98e11e043d6d043cbb", 0x2d}], 0x1, 0xb9)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(r0, &(0x7f0000000700)="d80b00"/14, 0xe)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x6000, 0xe02) (async)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x1e)
kevent(0xffffffffffffffff, &(0x7f00000002c0), 0x6, 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000200)={&(0x7f00000001c0)})
fcntl$lock(0xffffffffffffffff, 0x8, 0x0) (async)
r2 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async)
ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f00000000c0)={&(0x7f0000000040)='.\x00', 0x65, 0x0}) (async)
fcntl$lock(r2, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x4, 0xffffffffffffffff})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r3 = socket(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
bind(r3, &(0x7f0000000000), 0x10) (async)
listen(r3, 0x0) (async)
socket(0x2, 0x1, 0x0) (async)
r4 = socket(0x2, 0x8001, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)

4.572092931s ago: executing program 2 (id=1271):
syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16])
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, &(0x7f00000000c0)=0x80, 0x4) (async)
sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, &(0x7f0000000200)="078d51e4", &(0x7f00000002c0)=0x4, &(0x7f0000000300), 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)

4.570670718s ago: executing program 2 (id=1274):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x1, 0x2, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd)
clock_settime(0x100000000000000, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000eb3000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000836000/0x2000)=nil, &(0x7f0000228000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000f32000/0x2000)=nil, &(0x7f000040b000/0x1000)=nil, 0xb9b7}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000022000/0x1000)=nil, 0x1}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil, 0x1}, {&(0x7f0000c9e000/0x2000)=nil, &(0x7f00007b1000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f00003b5000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x7ff}, {&(0x7f0000d23000/0x4000)=nil, &(0x7f0000729000/0x1000)=nil, 0x1}, {&(0x7f00007a1000/0x800000)=nil, &(0x7f000025b000/0x2000)=nil, 0xe11}, {&(0x7f0000788000/0x2000)=nil, &(0x7f0000375000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f000038c000/0x2000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f00007da000/0x4000)=nil}, {&(0x7f0000527000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0xca}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x808}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000494000/0x3000)=nil}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x40})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0)
ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd})
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0x80606955, &(0x7f0000000100))

4.5221412s ago: executing program 2 (id=1276):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x2}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0)
clock_settime(0x100000000000000, &(0x7f0000000000)={0xfc1ecc7f, 0x200})

4.520234474s ago: executing program 2 (id=1278):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000040)={0x6, 0x3, 0x8, 0x7, "9846c2deebb109f2d5a9606be695202b9452038b", 0x3, 0x8})
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080))
fchflags(r0, 0x0)
getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
r1 = socket$inet6(0x18, 0x8000, 0x0)
ioctl$VT_SETMODE(0xffffffffffffff9c, 0x80087602, &(0x7f0000000140)={0x1, 0xd, 0x6, 0x54d, 0x4})
recvfrom$inet6(r1, &(0x7f0000000180)=""/62, 0x3e, 0x82, &(0x7f00000001c0)={0x18, 0x0, 0x7, 0x5}, 0xc)
getsockopt(r1, 0x7, 0x9, 0xfffffffffffffffe, &(0x7f0000000200))
r2 = socket(0x6, 0x4, 0x0)
select(0x40, &(0x7f0000000240)={0x0, 0x400, 0xe7, 0x1, 0xa03, 0x8, 0x0, 0xc}, &(0x7f0000000280)={0x8, 0x30, 0x3, 0x4, 0x0, 0x8, 0x200, 0x61ac88c6}, &(0x7f00000002c0)={0x8, 0x1, 0xfffffffffffffffe, 0x1, 0x2, 0x9, 0x7fffffff, 0x7}, &(0x7f0000000300)={0x2313, 0x9})
ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x4, 0x8, 0x6, 0x0, 0x5}, {0x0, 0x4, 0xfff, 0x3, 0x4}, {0x8, 0x6, 0x0, 0x97, 0xb}, {0xb, 0xa00, 0x5, 0x800, 0x7}, {0x3, 0x1, 0x7, 0x8, 0x2}]})
unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0x10000, 0x28)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
recvfrom$inet6(r1, &(0x7f0000000440)=""/210, 0xd2, 0x841, &(0x7f0000000540)={0x18, 0x2, 0xffffffff, 0x4a}, 0xc)
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000580)=0xf1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={<r4=>0xffffffffffffffff})
getsockname(r4, &(0x7f0000000600)=@in6, &(0x7f0000000640)=0xc)
sysctl$vm(&(0x7f0000000680)={0x2, 0x6}, 0x2, &(0x7f00000006c0)="419c4213e1182ffe238df3015f6282ba0ef0d3971824c2ffcf8ee21d2b93e3ac3f71e103c30848f1e56711a7714d881f", &(0x7f0000000700)=0x30, &(0x7f0000000740)="c553d9958b634b470ef703faac2250ef367fd75cca2ca97d88a54e4b5b41568bb39d70952a9dfb623c82cbe316e0f00af87bd01b8c93e7ef11ca02dd484538b266a1d1a82f5c7fd56d34b2ff8e374c48e9c9c6220c9e3d1bced7d31eda58bddb49b64722bd931eb14f2791d00734d5c06f7a7e406d81171d087c12db3b8719289758", 0x82)
getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000800), &(0x7f0000000840)=0x10)
close(r4)
socket(0x1, 0x8005, 0x5)
socketpair(0x20, 0x3, 0x1, &(0x7f0000000880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
select(0x40, &(0x7f00000008c0)={0x8001, 0xfffffffffffffffb, 0x5, 0x6, 0x4, 0x9, 0x10, 0x2}, &(0x7f0000000900)={0x200, 0xa2, 0x4, 0x7, 0x4, 0xe0, 0x7, 0x3}, &(0x7f0000000940)={0x4, 0xd, 0x7fff, 0x380000000000, 0x76, 0x0, 0x49, 0x18000000}, &(0x7f0000000980)={0x7fff, 0x8})
r6 = dup2(r2, r3)
ioctl$WSDISPLAYIO_SETSCREEN(r6, 0x80045756, &(0x7f00000009c0)=0xfffffffd)
ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000a00)={0x3, 0x800})
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc)

4.170363834s ago: executing program 7 (id=1281):
symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00')
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f00000000c0)='x\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[B'])
syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"])
r1 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))
mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r2, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r2, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
truncate(&(0x7f0000000180)='./file0\x00', 0x100000000)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x4, 0x0, 0x0)
r3 = kqueue()
r4 = accept(r0, 0x0, &(0x7f0000000080))
r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
kevent(r0, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff9, 0x88, 0x4, 0x9, 0x5}, {{r3}, 0xfffffffffffffffd, 0x4, 0xf0000000, 0x7, 0x3}, {{r0}, 0xfffffffffffffff8, 0xd1, 0x80, 0x8}, {{r4}, 0xffffffffffffffff, 0x10, 0x1, 0x4, 0xaf36}, {{r0}, 0xfffffffffffffffb, 0x92, 0x1, 0x8, 0x9}], 0x9, &(0x7f0000000280)=[{{r0}, 0xfffffffffffffffb, 0x14, 0x4, 0x4}, {{r5}, 0xfffffffffffffffc, 0x89, 0x1, 0x7, 0xffffffffffffffad}, {{r0}, 0xfffffffffffffffa, 0x40, 0x40000000, 0x9, 0x8}], 0x10, &(0x7f0000000140)={0x6, 0x2000})

4.14854502s ago: executing program 3 (id=1282):
sysctl$kern(&(0x7f0000000180)={0x1, 0x4b}, 0x2, &(0x7f0000000140)="1ba353f0", &(0x7f00000037c0)=0x4, &(0x7f0000000080), 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x24}, 0x2, &(0x7f0000000300)="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", &(0x7f0000000000)=0x1ad, &(0x7f0000000080)="de5bd9387600e5e5c307aa956e8b2cf524c19c560e44f2aecbf9e4f1ce2255f999a169352b06952a2384c96121b9a9cabfe94cdbee1e100d975dd7c252cb220aa14c74dc5ec299deb03235a037e711374ad5835479b24be3c7eee05fba471b20a27f4ddd7b2bd651", 0x68)

4.147757998s ago: executing program 7 (id=1283):
r0 = socket(0x2, 0x3, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x27, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="582383a432ce44e08e23b16f3aec414a7aadc2068e1e2ea661696efb258f1a1b7f6b6ef206c774efcf04017ae1445254d236d2c3d6cb30228688317603eb51bb", 0x40}], 0x1)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "062500", 0x28, 0xc, 0x0, @rand_addr="0000000000000000000000a82400", @loopback, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @loopback}}}}}})
setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000040)=0x2, 0x4)
mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf)
chdir(&(0x7f0000000000)='./file0\x00')
open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)

4.147185482s ago: executing program 3 (id=1284):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x7fff, 0x1)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
setrlimit(0x8, &(0x7f0000000980))
openat$pf(0xffffffffffffff9c, 0x0, 0x101, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

4.144401647s ago: executing program 7 (id=1285):
syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000ffffff1ee39852ffffff86dd606805fc00103b00ff020000000000000000000000000001fe8000000000000000000000000000aa0701000000000000c204"])
r0 = fcntl$getown(0xffffffffffffff9c, 0x5)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x100000000000000, r0})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0xfffffffffffffe20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x26, 0x0, 0x5, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x420f}]})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="582383a432ce44e08e23b16f3aec414a7aadc2068e1e2ea661696efb258f1a1b7f6b6ef206c774efcf04017ae1445254d236d2c3d6cb30228688317603eb51bb669f6353b6fa9660", 0x48}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="20a3c4d7da9baec577f3ffff5b0700000000690000000086d5417a0f", &(0x7f0000000080)=0x1c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x19, 0x0})
write(0xffffffffffffffff, &(0x7f0000000240)="d80b00"/14, 0xe)
r1 = socket(0x2, 0x3, 0x0)
close(r1)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x4, &(0x7f0000000300)=[{0x8beb, 0x7f, 0x3, 0x8}, {0x3, 0x0, 0x5, 0xf}, {0xfffa, 0x7, 0x6d, 0x6}, {0x7fff, 0x6, 0xc, 0x8001}]})
write(r3, &(0x7f00000002c0)="d81ad3ede1f3bd8558d5c7364888", 0xe)
socket(0x18, 0x2, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = getpid()
fcntl$setown(r4, 0x6, r5)
bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r4, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
close(r4)
setsockopt(r2, 0x1000000029, 0x31, &(0x7f00000001c0)="ffffffffffffffff", 0x8)

4.142431298s ago: executing program 7 (id=1286):
r0 = socket(0x18, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x200, 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x15, &(0x7f0000000240), 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x1001}]}) (async)
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async)
ktrace(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
fcntl$lock(r4, 0x8, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffdfffffd, 0x1000300010008}) (async)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async)
flock(r4, 0x1)
fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) (async, rerun: 64)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (rerun: 64)
ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x6, &(0x7f00000000c0)='./file0\x00', 0x8})
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, &(0x7f0000001740)={0x6, 0x3b9aca00})

3.600592548s ago: executing program 0 (id=1288):
sysctl$hw(&(0x7f0000000000)={0x6, 0xc}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0)

3.590502842s ago: executing program 0 (id=1290):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x4, 0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x3, 0x9)
setsockopt(r1, 0x1000000000029, 0x4, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x402)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r2=>0x0}, 0xc)
setreuid(0x0, r2)
r3 = syz_open_pts()
ioctl$TIOCSTAT(r3, 0x20007465, 0x0)
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x9)
close(r3)
execve(0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x142)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6380)
r4 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
select(0x40, &(0x7f00000004c0), &(0x7f0000000080)={0x1ff}, 0x0, 0x0)
poll(&(0x7f0000000480)=[{r4, 0x4}], 0x1, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80, 0x5f62b36307a8c1ea)

3.585489035s ago: executing program 6 (id=1291):
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401})
r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff})
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x1cd1e00)
open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)

3.585000779s ago: executing program 6 (id=1292):
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79c9) (async)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79c9)
r1 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r1, 0x0) (async)
chown(&(0x7f0000000200)='./file0\x00', r1, 0x0)
setreuid(0x0, r1) (async)
setreuid(0x0, r1)
setreuid(r1, 0xffffffffffffffff)
getuid() (async)
r2 = getuid()
r3 = accept(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000140)=0x8)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={<r4=>0x0}, &(0x7f00000001c0)=0xc)
fcntl$setown(r3, 0x6, r4) (async)
fcntl$setown(r3, 0x6, r4)
chown(&(0x7f00000000c0)='./file0\x00', r2, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
select(0x40, &(0x7f0000000000)={0x1b, 0x5, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0)
dup2(r6, r5)

3.382364615s ago: executing program 6 (id=1293):
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0)
ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f00000000c0)={""/16, @ifru_broadaddr=@un=@abs}) (async)
ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f00000000c0)={""/16, @ifru_broadaddr=@un=@abs})
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r3 = syz_open_pts()
openat(r2, &(0x7f0000000540)='./file0\x00', 0x80, 0x0)
close(r3)
syz_open_pts() (async)
r4 = syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5)
r5 = socket(0x18, 0x2, 0x0)
getsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async)
getsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VNDIOCGET(r6, 0x41946465, &(0x7f0000000040)={'./file0\x00', 0xffffffff}) (async)
ioctl$VNDIOCGET(r6, 0x41946465, &(0x7f0000000040)={'./file0\x00', 0xffffffff})
ioctl$TIOCSBRK(r4, 0x2000747b)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000240)=""/107}, {&(0x7f00000002c0)=""/176}, {&(0x7f0000000440)=""/225}], 0x3) (async)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000240)=""/107}, {&(0x7f00000002c0)=""/176}, {&(0x7f0000000440)=""/225}], 0x3)
mknod(&(0x7f0000000100)='./file0\x00', 0x100, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)

3.38140896s ago: executing program 6 (id=1294):
r0 = socket(0x2, 0x1, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000040)=0x1ff, 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r0, &(0x7f0000000000), 0x10)
execve(0x0, 0x0, 0x0)

2.882505879s ago: executing program 5 (id=1295):
r0 = socket(0x11, 0x8003, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0)
ioctl$VNDIOCSET(r1, 0x80045102, &(0x7f0000000000)={0x0, 0xfffffffffffffff8, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
recvmmsg(r0, &(0x7f0000000cc0)={0x0, 0x8}, 0x10, 0xc0, &(0x7f0000000d00)={0x100000000, 0x5036})

2.875908837s ago: executing program 5 (id=1296):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
getrlimit(0x4, 0x0)
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
r3 = socket$inet(0x2, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x21, &(0x7f0000000240), 0x0)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0xfffffffc)
readv(r2, &(0x7f0000002740)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000500)="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", 0x194, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000014c0)="56aa65c92d24e57323fb6fd278b6d3274e3c2325c7fecef88d8cb5e490dc54d83cd8f18524d4e4f87e65c91331ecf360c233206356c33f186a3503b39fcf91695b276620ea038e681657983ef377c789fb54db9995cc905466", 0x59}, {&(0x7f0000000300)}], 0x2)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$VNDIOCSET(r0, 0x80184601, &(0x7f0000000340)={0x0, 0x9, 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) (async)
open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) (async)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async)
getrlimit(0x4, 0x0) (async)
syz_open_pts() (async)
close(r1) (async)
syz_open_pts() (async)
socket$inet(0x2, 0x2, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_opts(r3, 0x0, 0x21, &(0x7f0000000240), 0x0) (async)
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0xfffffffc) (async)
readv(r2, &(0x7f0000002740)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r4, &(0x7f0000000500)="94010516200000000000002797888fd1f838a311000000000000b13886ca3849451ae3c3051020741038f5538551f30ce390500e08fecea11ea8fef96e4fc748e93f0b780486aebdbe781e4d8f5eef9187a869a4d3a4cbba982fd825582fe223ed00f4c8b2ca3ebbc259699a1f132e27acb5d62934e4fd89070000000000000070c1f5a872c88dff7cc53c894303b2a0a85ff3faa800000000009ec7ab3a34c29000000000000000000000000000002d7e4a5d76cc3f9cff2ed2243e56fa277603c5cc1e047326bcf6b67b75d00bf6ee330b6a80874b70559d9975ebd13da2447a78aa4b00cd0ba1870215607bb912e3d7325183ce69456b4b6ca927871c81672a54ec695c5bdeb842836656f917945cc076f87dc714dfe0aa2947252df350707b22884a7730cb6dba8742110fbe9ec7481885274387e0b1dbe5695122604819b0b2294b7b20726a5d4fcb44f62d00fabb2f247a166d8d79d05b8cc370f5c11db58aedca632a83acd58ff0ea0a3dca58ccb03cce466cda735017196ff346c32717397d6ec6952ec90de81ed297b2509e130f0000", 0x194, 0x0, 0x0, 0x0) (async)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000014c0)="56aa65c92d24e57323fb6fd278b6d3274e3c2325c7fecef88d8cb5e490dc54d83cd8f18524d4e4f87e65c91331ecf360c233206356c33f186a3503b39fcf91695b276620ea038e681657983ef377c789fb54db9995cc905466", 0x59}, {&(0x7f0000000300)}], 0x2) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
ioctl$VNDIOCSET(r0, 0x80184601, &(0x7f0000000340)={0x0, 0x9, 0x0}) (async)

2.642208535s ago: executing program 4 (id=1297):
msync(&(0x7f0000343000/0x2000)=nil, 0x2000, 0x0)
r0 = socket(0x18, 0x3, 0x3)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f0000000440)=""/151, 0x97}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f00000005c0)=""/95, 0x5f}, {&(0x7f0000000700)=""/235, 0xeb}], 0x6, &(0x7f0000000800)=""/17, 0x11}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1b0)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff) (async)
setuid(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
chmod(&(0x7f0000000180)='./file0\x00', 0x227)
setuid(0xee01) (async)
setuid(0xee01)
open$dir(&(0x7f0000001640)='./file0\x00', 0x2, 0x0) (async)
r3 = open$dir(&(0x7f0000001640)='./file0\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000900)=[{&(0x7f0000000100)="db", 0x1}], 0x1)
r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x52e5)
setsockopt(r0, 0x1000000029, 0x39, 0x0, 0x0) (async)
setsockopt(r0, 0x1000000029, 0x39, 0x0, 0x0)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r6 = socket(0x11, 0x3, 0x0)
sendto$unix(r6, &(0x7f0000000000)="b1000504b10004000000a30001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async)
sendto$unix(r6, &(0x7f0000000000)="b1000504b10004000000a30001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000000080)={0x0, 0x0}) (async)
ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000000080)={0x0, 0x0})
r7 = socket(0x18, 0x2, 0x0)
setsockopt(r7, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async)
setsockopt(r7, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
r8 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x4)
renameat(r8, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00')
r9 = dup(r7)
setsockopt(r9, 0x1000000000029, 0xd, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14)
setsockopt(r1, 0x4, 0x1, &(0x7f0000000ac0)="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", 0x1b5)

1.492733942s ago: executing program 2 (id=1312):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = accept$inet(r0, &(0x7f0000000000), &(0x7f00000002c0)=0xc)
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000300)=0x6)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/124, 0xfd00}], 0x10000000000001bc)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000140)={0x3, 0x2, 0xffb0, 0x1, 0x0, 0x1, 0x7e, 0x10, [{0x4, 0xffffffff, 0x8, 0x10001}, {0x5, 0x6, 0x80004, 0x9}, {0x100, 0x1, 0x2, 0x10}, {0xe, 0x9, 0x1ff, 0x4}, {0xe1, 0x3, 0x8, 0x9}, {0x504c, 0x6, 0x1}, {0x81, 0x5, 0x0, 0x7}, {0x6, 0x3, 0x9, 0x8001}, {0x9, 0x1, 0xfffffff7, 0x7}, {0x3, 0x8, 0x1800000, 0x3}, {0x7, 0x7ff, 0x3, 0xc0}, {0x1, 0x401, 0x6, 0x2}, {0x0, 0xeb30, 0x0, 0x1000}, {0x7, 0x7984, 0x7ff, 0x91}, {0x6cfe07b8, 0x5, 0x8, 0xeb7}, {0x2, 0x5, 0x5, 0x3ff}]})
write(r0, &(0x7f00000000c0)="c3", 0xffffffed)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4)
fsync(r1)

1.321424025s ago: executing program 1 (id=1315):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$TIOCSTAT(r0, 0x40384900, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3)
socket(0x10, 0x2, 0x8)

1.321066447s ago: executing program 1 (id=1316):
open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="7004f5b37527", [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x8, 0x3a, 0x0, @rand_addr="3be1e300", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@echo_request}}}}})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
r2 = kqueue()
kevent(r2, &(0x7f0000000000)=[{{}, 0xffffffffffffffff, 0x5, 0x10, 0x6f9, 0x9}], 0x962, 0x0, 0xffffffff, 0x0)

1.320194552s ago: executing program 1 (id=1317):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x3f, 0x10, [{0x5, 0x6, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x1}, {0x4, 0xe2, 0xf, 0x104}, {0xf5, 0x7, 0xf15, 0x4}, {0x788c, 0xffff, 0x8, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xffffe2e8}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x800, 0x8bfd}, {0x0, 0x0, 0x8, 0x9}, {0x3, 0xc7cb, 0x800000, 0xa6a}, {0x401, 0x6, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48e}, {0xffffffff, 0x101, 0x3, 0x9}, {0x3, 0x2, 0x2, 0x69}]})
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ftruncate(r0, 0x48001000007)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0)
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000040)=0xf)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
select(0x40, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x79, 0x29, 0x4, 0x10001, 0xfff, 0x4}, 0x0, 0x0, 0x0)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000002c0)=0xfffffffa)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @random="d0b5049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x30, 0x3a, 0xfc, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x2c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @empty}}}}}}})

1.318651436s ago: executing program 1 (id=1318):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xb, 0xc0fa, 0x6, 0x6, "fa3924cefebc6bb389bf485f3ebe56053315dc20", 0x800, 0x8002})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x3, &(0x7f0000000440)="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", &(0x7f0000000080), &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4)
r0 = syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000240)={0xfffffffc, 0x8, 0x17, 0x0, "52e8eba3a8000000135a29e4c8ce565500", 0xffffff80})
poll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0xb51a, "1a2198b59b58505f40edabfaffffece900"})
sysctl$net_inet_ipip(&(0x7f0000000100), 0x8, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)

1.318011648s ago: executing program 1 (id=1319):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x26, 0x39, &(0x7f0000000380)="00550f00"/19, 0x13)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x0, 0x0, 0x0, {[0x400000000000, 0x0, 0x3, 0x80040001, 0x0, 0x4, 0x0, 0x0, 0xa00000000000000, 0x9, 0x0, 0x0, 0x9, 0x101, 0x0, 0xffffffffffffffff, 0x0, 0x3], [0x41f204b1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffd], [0x8, 0xf5e, 0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x11, 0x2], [{}, {0x0, 0x8cbc}, {0x0, 0x0, 0x4, 0xf}, {0x0, 0x0, 0x20000000}, {0x0, 0x3, 0xc8, 0x7fffffffffffffff}, {0x1, 0x3, 0x80, 0xfffffffffffffff8}, {0x1}, {0x0, 0x0, 0xfffffffe, 0x80000000000}], {0x2}, {0x1, 0x0, 0x0, 0x2}}})
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x80)
open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
select(0x88, &(0x7f0000000000)={0xfffffffffffffff7, 0x7ff, 0x7b, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffe}, 0x0, 0x0, 0x0)
close(r1)
r2 = kqueue()
kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x400, &(0x7f0000000500)="83569ed428ca7e74c1b16fd94f5a2488360912f105b9d507379fb6b9356f09ff96dcdf1c44f9971111f141b6d3c74e0f0130cbcccb935616335cdd8ab9c56f8b375ea6717b19a58aea61f2221139c868e9a5c2476718901f914ce6753118c6dbad21d31d039d8250a048e6d9071d742d8aec8adf94a801ee0b31a6ee0416c78d6c93e2bb0e8f5baae7f72a2a33d02086a96eba5edbbd", 0x96)
r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x3}, 0x4, &(0x7f0000000880), 0x0, 0x0, 0x0)
ioctl$BIOCSETWF(r3, 0x80104277, 0x0)
write(r3, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='r\x00')
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open(0x0, 0x80, 0x11f)
openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = socket(0x2, 0x8007, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
sysctl$kern(&(0x7f0000000080)={0x1, 0x53}, 0x2, &(0x7f0000002bc0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa6585f5121e188e238a435bf223e0ccaa74d6e6b85b6cfeed70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde8652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce90bcefd3e022d30a37fceefabee7e3ebe806f6af569ae94b5d1275bf4c1bfa6d40c007d505900f9daa99e4278fdd58df04f053518af1fe5f644b3abc08bfecc1e27d71e1740789b4fecdac35dddfa17a309698ee26a1debc2a6cc8d7e0963f72f8a0ec3eef1beefa7ffdb4871974381c9148f9f15db2f87fb959faeb7e0f7b89f6d581870abfa555edefeaaea78731a820d1c23c9a9005ff0a75ddd86555666ad2f563e94962470f949e320737f10aeede1c1618a20ce7d152734add534ce5139fdb4cdfe8dc9bdbb48358efb6cb678f831f489d5931df95a96895fa8bdbdf49af97bf8337bf0439f0e8d3c47d7a274f0112e0cdf144560cd8eda85abfa1f0d8ac02d912d53e3f2e52d3767595cc29156dd66d7ae51385a2f3831185494766d5b4cd4890f51011293097c74810000000000000000001b4969c81925fbaca909ae3aa1e23810b07f7237e7992503dd81ba46bd5224094243dad734d4b1627948dcc74c59bbed7de7ace9d1fd9f4d2e02ab8f26de0c3b76352a694861890d8637da1ab0282a122b1a64d2c6e7fa1e551cac2fbbe8f12b1201eabae231625916092f00000000000000", &(0x7f0000000000)=0xff38, &(0x7f0000000400)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555c020f0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdcfa0bd1c59ba3ccbad6c8af80516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110e701b5aca715b809db12bb3a673713716cdf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c70000008000000000fa455013521f98686e472b70b560f7021f567a", 0xee)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f00000001c0))
kevent(r2, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa7fd67572210786dd6007558300183701fe8000000000000000000000000000aaff020000000000000000000000000001"])
sysctl$hw(&(0x7f0000000200)={0x6, 0x18}, 0x2, 0x0, 0x0, &(0x7f0000000140)="01000000", 0x4)

75.052127ms ago: executing program 1 (id=1320):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x9)
sysctl$kern(&(0x7f0000000180)={0x1, 0x4b}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f00000009c0)="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", 0x18e}], 0x1)
r2 = socket(0x18, 0x3, 0x0)
fcntl$dupfd(r2, 0x0, r2)
sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, &(0x7f0000000380)="b9d55a65edf95002004cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f36195ac49fb6ee8486947aae9157493458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0)
r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0xf, 0xfffffffc, 0x3, 0x4, "0100dd2d018000000000005e00", 0x2, 0xfffffffc})
r4 = socket(0x11, 0x3, 0x0)
setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x800a, 0x101}, 0x10)
sendto$unix(r4, &(0x7f00000000c0)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f8343712050500b71d8000090005080000fca65361ba84913f0100"/177, 0xb1, 0x408, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000440)=""/97, 0x61}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000580)=""/249, 0xf9}], 0x3, 0x5)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000040)={0x0, <r6=>0x0}, 0xc)
dup2(r4, r4)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, <r7=>0x0}, &(0x7f0000000180)=0xc)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, &(0x7f0000000000), 0x0, 0x0)
setreuid(r6, r7)
bind$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x2}, 0x8)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x7, &(0x7f00000006c0)={0x4, 0xd})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4)
sysctl$kern(&(0x7f0000000140)={0x1, 0x46}, 0x2, &(0x7f0000000180)="41a174145d330040016f954ca72baa940052585c29f363562e5b8f5c1df5a17cbd1f1076c7d39cfb604af35385226921b638be0cbeb95ac1d06444db761948c30651029123e8002414f64bd56d6a4a2b5d5e2346ff6aa11c0c1a4613c7667defa84c087fa0813ba4b559c2217248acffab98ac8ea25e7d1d0329db80dbc0db5f7eff10034a925c6d5b8c38ce8f375b26315d4e203a418bec433bdacb2c6c03fb08b48c762a42f59b382e7a6592f3e34f996f4de68d5c3b04d681fa654232a89287e61de25ef1a7f19c04fe1e777a0907db06d9", &(0x7f0000000280)=0xd3, &(0x7f00000002c0)="1ec6a7146b203e11acd12b9b30e64c3b074c7d9698d395c297bc7a708ede636b485b9cefbb8386fe6bfb7be909d580197b6f445ec2260d1e48503a13ab9a7ad9a6ea70fe0ad1fa8411faa38d82f8a61665097c8387cd9f362ddc08e7f98701454471880f1f5cd2501abbdfb96cacab1e85f9c418f6807679e91185056f3361c9c063560b1cc83abf12aec221ef7dbaae8a96fcc9e05ad0316f3c463e27f79c0cbf", 0xa1)

74.024824ms ago: executing program 3 (id=1321):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
syz_emit_ethernet(0xe, &(0x7f00000002c0)={@local, @local, [], {@generic={0x8035}}})
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0xffffffffffffffff}, 0x0, 0x0, 0x0)
r0 = kqueue()
r1 = dup2(0xffffffffffffff9c, r0)
kevent(r0, &(0x7f0000000200)=[{{r1}, 0xfffffffffffffffd, 0x20, 0x20, 0x8001, 0x4}, {{r1}, 0xfffffffffffffff8, 0x0, 0x10, 0x8, 0xffffffffffffa386}], 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x32)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x18, 0x1, 0x0) (async)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x4000}, 0x2f, 0x4000000000085b, 0x0, 0x0, 0x4f7, 0x100000000, 0x9, 0x6}) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x4000}, 0x2f, 0x4000000000085b, 0x0, 0x0, 0x4f7, 0x100000000, 0x9, 0x6})
r4 = socket(0x18, 0x2, 0x0)
close(r4)
munlockall() (async)
munlockall()
r5 = socket(0x800000018, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
socket(0x800000018, 0x1, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getgroups(0x4, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0x0]) (async)
getgroups(0x4, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, <r7=>0x0])
setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, r7}, 0xc)
bind$unix(r6, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) (async)
bind$unix(r6, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async)
r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
dup2(r8, r2)

73.758668ms ago: executing program 7 (id=1322):
r0 = socket(0x18, 0x2, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x611, 0x0)
r1 = getpid()
ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x40000530, r1)
pledge(&(0x7f0000000280)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95 \x00\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kG\x00\x00\x00\x00\x00@\x00\x01\x00\x00\xeb\x91vr)\\\xf2:\'2.\xee\xb6\xd9P#\x0f\xcdH\xf8\x9el\x03(r\xd4\x9a\x0f\f\xdb<\xb4B\x95\x15\xb6\r\x00', 0x0)
sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='%'], 0x25}, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
r2 = socket(0x1, 0x5, 0x0)
ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0))
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f00000000c0)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e490900000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a1f133ea7acb5d602000d7d0100000001f0ffff2002000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000000000000036000000", 0xb1, 0xc02, 0x0, 0xffffffa7)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8)
accept$unix(r0, 0x0, &(0x7f0000000240))

70.056498ms ago: executing program 7 (id=1323):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000040)={0x1, 0x8001, 0xd3, 0x8001})
ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0xffff, 0x1ff, 0x7, 0x5, 0x8}, {0x6, 0x0, 0x1, 0x1, 0x1}, {0x81, 0x7, 0x8, 0xfc00, 0x3}, {0x4b4, 0xbb0, 0x5, 0x400, 0x6}, {0x4, 0x4, 0xc, 0x5, 0x5}, {0x1ff, 0x7f, 0x4, 0x3, 0xb46d}, {0x80, 0x7, 0x800, 0x3, 0x9}, {0x8, 0x4, 0x3, 0x6fc8, 0x9}, {0x2, 0xc, 0xffff, 0x0, 0xffff}, {0x5, 0x8, 0x9, 0x8, 0x8}]}) (async)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa, 0x2) (async)
r1 = socket(0x1, 0x4000, 0x60) (async)
r2 = semget(0x2, 0x3, 0x24b)
semctl$GETNCNT(r2, 0x3, 0x3, &(0x7f0000000180)=""/230)
semctl$GETNCNT(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000000280)=""/107) (async, rerun: 64)
semop(r2, &(0x7f0000000300)=[{0x3, 0x6, 0x1800}, {0x0, 0xce8c}, {0x4, 0x38, 0x1800}, {0x0, 0x6, 0x1000}, {0x4, 0x5, 0x1800}, {0x0, 0xe, 0x1000}, {0x4, 0xfff0, 0x1c00}], 0x7) (async, rerun: 64)
ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f0000000340)={0x7ff, 0x80, 0x7ff}) (async)
ioctl$WSKBDIO_SETBACKLIGHT(r0, 0x800c5712, &(0x7f0000000380)={0x8000, 0xc, 0x9})
semctl$SETVAL(r2, 0x1, 0x8, &(0x7f00000003c0)=0x10) (async)
r3 = semget$private(0x0, 0x0, 0x7730d71e2d8d2611)
semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000400)=""/159) (async, rerun: 32)
getsockname$inet6(r1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) (async, rerun: 32)
r4 = socket(0x10, 0x4000, 0x81)
ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000540)={0x1f24, 0x7, 0x7, 0xfffffffb}) (async, rerun: 32)
r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000580), 0x8, 0x0) (rerun: 32)
ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f00000005c0)={0xfffffffd, 0x8, 0x6, 0x8, 0xc48e, 0xe, 0x6, 0x10, [{0xc005, 0x6, 0x2, 0x4}, {0x2, 0x8, 0x80000001, 0x10}, {0x0, 0xc3d4, 0x3, 0xf564}, {0x3, 0x8, 0x1}, {0x6, 0xb66, 0x8, 0x8}, {0x3, 0xe, 0x200, 0x8000}, {0x59, 0xc07, 0xb}, {0x7, 0x4, 0x7}, {0x0, 0x3fdf, 0x1, 0x5}, {0x0, 0x8001, 0x5, 0x6}, {0x8, 0x0, 0x3, 0x8}, {0x5, 0x2, 0x1, 0x4}, {0x81, 0x401, 0x6, 0x4}, {0x1, 0x80000001, 0x4, 0x7}, {0xffffff00, 0x1, 0x8001}, {0xffffff81, 0x703, 0x6f66, 0x8}]}) (async)
nanosleep(&(0x7f0000000700)={0x5, 0x7}, 0x0)
r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0)
ioctl$TIOCEXCL(r6, 0x2000740d) (async, rerun: 32)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000780)=""/58) (rerun: 32)
ioctl$TIOCSTART(r6, 0x2000746e) (async)
r7 = socket(0x20, 0x2, 0x6) (async)
r8 = openat(r6, &(0x7f0000000d80)='./file0\x00', 0x40, 0x72)
r9 = openat$tty(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async, rerun: 64)
r10 = openat$klog(0xffffffffffffff9c, &(0x7f0000000e00), 0x200, 0x0) (async, rerun: 64)
r11 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r4, &(0x7f00000010c0)={&(0x7f00000007c0)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000d00)=[{&(0x7f0000000800)="c7815db92bd25972b01bf3074fc9688a63671c381463f2d852fbade66233f21d889860146e445b4c39f367c4bc2fde9e8ba00305ada5b9ed322270c1415e3fe981ff3264b3f1e3dbb0b724fed4a0be00a60930b8015d7b0b5a3700e0ae4986623529ffe7a3dafe057da4f84f84b9456609806c0d74a6d731d2361a42e9eb65579c5a0413407b3b774a3dbe64d5682600c94f7dc459775f2456af4c2d604af89f2a24f4ec2edf05c96c52b2fc69f40d56a885655890f9375bead4f5", 0xbb}, {&(0x7f00000008c0)}, {&(0x7f0000000900)="65a0908e5883bf653964fa42bb3fdf8921cf684a5388555fb3adeab9ccfb378b24aba9fcf77ad3cca18d247d29bbebdc649cc02cb3afa21c99057d6999440c400f1cc1d47ea6ee7639386b958fe27a42daf1570a21533975bcacdde6d5a5b11097b0cbe6462a362463aa7289caf10633a02e94420c251f0ccaf9620bb2275e151f2ddaea0ab53b03bcb31987eb649d3b67dabd1438b65747bd9b82232f2b1e027f1a131eb850dfe4086cf9b696cdf095858f4b91a92499831b83c70e798b713d4ca2b1cef226197d49d989f239b4ca469345a733e6d7bfe66973ce487ef02dac25a33a32e8315cc04ce0f16e805a", 0xee}, {&(0x7f0000000a00)="32ff46691752d6a7d5c502a96ce66fcbf03fd21bdfbe8e468b8e886d78322d16f40dc67e5fcf314eca087b0336de507c43f853879a1fbbefc2a4cbe8905d81504c11058050918dea8bf137fd2aa36992a16dfb9bd2719166c8b23c33", 0x5c}, {&(0x7f0000000a80)="4f2590d9cbf3fee2eb8b214e49650251600394471b8a531dca19eaff1eb70c24898847c174dab1e39ecc44097b812ba8cad035af328c040cc88684e090f475addf4d30b1bb0578bd9b7c3487cda72c1f992005906eaa67733bc4eb4b8cb98f851eb82e761090a3da91efcf2da8b35688f699fd90edf55d8ceae03ff7ec1817124052505687e0583bed0b1ae7322335c978f8f99916c188770b68476f067f9737dddea598aef48b93c02c8f3af4e2906fe643d5da456f95f6cff7597f48107666dbd864e6aa4cb2f5a8897479edc5158d3129358902f5a90df0b29f70a103ff2dcd419c6fb3acf0ce071d22eec387bb81753d7bf10a49bde3", 0xf8}, {&(0x7f0000000b80)="e54453d329cfea316632f7bd458602748d4e32e23099e0b3e95c8b593846e6cddd8d28ef2321c94ee8d071e907cab4d2b7fb554331d032843e3b47a75271c3496dc5665d90458afde85fd5a99e1145f01d259c3485caa022af58aa7cb1f50711c36948e90611f12a27e4a720231f18abc1f13eca2635ea9e75a047b4068504799a1eafe7f7b78adb0ab50c0227864debf21e4a2d373f1b3c5b0cc3e315ef0792064cd05f9ca3360c314f6d0945128d8c779a24811751f0fc5de88dd89400b9e22508e47815fe31d57ffedef2b07a9605d30bba4dc2098da7570cc3c9fcce327bae2db80ba8d2d95d1b61c2dc1280bffa1d61cfb024", 0xf5}, {&(0x7f0000000c80)="85a10f6c3caff88ba3490a6f18b47583e4095c2064b805e99f512ac39e190ebd4c46f18503d0148be206805ff824a7a731482cbda7024f61d1136c786c66191cd582ef2cd8c96f7fba4858d7937de237058fcdd492de62fa479869cfef31b28698bbd0660f66c3822311f09584aa5b7aeea357", 0x73}], 0x7, &(0x7f0000000f40)=[@rights={0x28, 0xffff, 0x1, [r0, 0xffffffffffffffff, r7, r1, r4]}, @rights={0x28, 0xffff, 0x1, [r5, r1, r8, r4, r4, r9]}, @rights={0x38, 0xffff, 0x1, [0xffffffffffffffff, r5, r0, r10, r0, r5, r6, r6, r0]}, @rights={0x20, 0xffff, 0x1, [r6, r4, r11]}, @rights={0x30, 0xffff, 0x1, [r6, r1, r4, r4, r1, r1, 0xffffffffffffffff, r4]}, @rights={0x20, 0xffff, 0x1, [r4, r0, r4]}, @cred={0x20}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff}, @rights={0x18, 0xffff, 0x1, [r4]}, @cred={0x20}], 0x170, 0x40c}, 0x404)

38.861348ms ago: executing program 0 (id=1324):
r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0xa, 0x0)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0x0, 0xffffffff, 0x7, 0x8, "f2a7a6dcd15b9b4f17e3869af9fd3517295b45a7", 0x0, 0x2})
r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in, &(0x7f00000000c0)=0xc)
setsockopt$sock_int(r1, 0xffff, 0x1008, &(0x7f0000000100)=0x1, 0x4) (async)
r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$VT_SETMODE(r2, 0x80087602, &(0x7f0000000180)={0x0, 0x8, 0x7, 0x34}) (async)
r3 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x8) (async)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000001c0)={0x27, 0x6, 0x1, 0x1, "9fb15fd6cc72f2640c90aaad7ae477c4dd43d1de", 0x80000001, 0xecc})
r5 = semget$private(0x0, 0x0, 0x0)
semctl$GETALL(r5, 0x0, 0x6, &(0x7f0000000200)=""/4096)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
chroot(&(0x7f0000001240)='./file0\x00') (async)
ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000001280)={0x95c5, 0x9, 0xfff, 0x6})
r7 = socket(0x6, 0x8000, 0xa)
poll(&(0x7f00000012c0)=[{r7, 0x8}, {r1, 0x16}, {r4, 0x20}, {r0, 0x100}, {r4, 0x40}, {r4, 0x40}, {r4, 0x2}], 0x7, 0x10000) (async)
select(0x40, &(0x7f0000001300)={0x3, 0x9, 0x2, 0x7, 0x6, 0x5, 0x100000001, 0x1000}, &(0x7f0000001340)={0x2, 0x356, 0x8, 0x400, 0x1, 0xbb, 0x3, 0xdd35}, &(0x7f0000001380)={0x2, 0x2, 0x0, 0x2, 0x7f, 0x8, 0x8001, 0x4}, &(0x7f00000013c0)={0x5, 0x480000000000000}) (async)
mknod(&(0x7f0000001400)='./file0\x00', 0x8000, 0x5)
writev(r6, &(0x7f00000018c0)=[{&(0x7f0000001440)="ec1749915b4d1b6c401d056ea10d593027c73c7a87aace087895b743b0eda55a22d6802100db3d04ab2a07c8fcacc5b6962cea452014be644388906d844640e9418a7ee711b08e5219eab7bf2b63090572c680e04fc891ba925a9a67045c19e2f0c0084d41356dcf7e251251a5241d8b5ecd78ff8fe6cbf616336dc3a0829e6cb30c6d65cef2d2fa0952530bcfe9223f089ab35d82f9151a99e43a505133109b845b424648c8fd61650e6cc4429117dac3e559748bc20f6ae57e9f1f2b6bc384698c6b1605b3f06542c0d0ddf80501b02b6aa682498971731954091cce68df5c566914795a2675909e834c626eb442c7d255003e34839c82", 0xf8}, {&(0x7f0000001540)="ae4a232811526ec1", 0x8}, {&(0x7f0000001580)="1da1e8901772446770df6f2fce9a", 0xe}, {&(0x7f00000015c0)="0990", 0x2}, {&(0x7f0000001600)="627398e3379231cf25b858aafb99c011c2d3371489b6a2a9156d1a7fff175ebcb367fa7822676e5341545a91a01817693699faaaf8e1a8bc7fab6c523effafb791d3229959b21bddf55c3e1e50dfa7574437e511f23713586c8f59c947f4a05c455c7996c61b1aeac07bb4165796a9863b889844c10e557ae7e019243e6bf005d17ad34c7bdd2929b13599c80e25173bcde40cee1e37a37a7e001dc72f0ea2ca7c99e4", 0xa3}, {&(0x7f00000016c0)="190b761bb67adaa6c146eb8b23ff270e350652fd6dbc73cb33900c84062bf687b1a40a0d6341a94fb8e4e43020d5978723f84f3291f9e74f6e42eaaab11faf810afcdcc0e83ffdf33140ff084d83017cd0da17ecda6512f80464122146664799f13002ed6709b9", 0x67}, {&(0x7f0000001740)="311e013587482ed6771c76710b8a87c1f5702aed63681559d3a58f4ff704b307004ef58af6bef7a75c308e3f7bb17023336c92e7c1427304099a18ac6f446d50c4ea034960952ca287c464b6b407235744e99207e873591434a99404f34fbd9d080b120fc2b0613afe7ee0f89fe7032dcc7c71dace3ff6672b7532330ff62a1b69da7f4513fcbd78f142f02b23a88d1c98e6c6fcaf2785e5b0ebcf9ced415f47ee9a25433ed867a9f14211ccae476962c88af7d60c957403f825f7760ec6d7027a2ec30fc5a9e5339d1f28fd26e49f0918f5cca530d9cd6bc14d93f6085313b0d3", 0xe1}, {&(0x7f0000001840)="0408f596bfec2acebd9c125cacc28db7106d92d68e08521d26e2d5fc6913d171d0ed1c3bb97461815ec28b0949107b589e9bc289fdedad15f458ecf5763737fd4364a64add6f281690ffb2fe2b295f48f9b82c65b679d276d09224b48ba34b011690dc4ca30ba3a89e8ce7d0c45dce3bdc9165525b", 0x75}], 0x8) (async)
fsync(r2) (async)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1) (async)
ioctl$TIOCMBIC(r6, 0x8004746b, &(0x7f0000001940)=0x9) (async)
recvmmsg(r6, &(0x7f0000002c40)={&(0x7f0000002c00)={&(0x7f0000001980)=@in, 0xc, &(0x7f0000002ac0)=[{&(0x7f00000019c0)=""/50, 0x32}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/116, 0x74}, {&(0x7f0000002a80)=""/47, 0x2f}], 0x4, &(0x7f0000002b00)=""/213, 0xd5}, 0x8000}, 0x10, 0x1040, &(0x7f0000002c80)={0x3, 0x5})
semctl$SETVAL(r5, 0x4, 0x8, &(0x7f0000002cc0)=0x739f) (async)
getpeername$unix(r1, &(0x7f0000002d00)=@file={0x0, ""/257}, &(0x7f0000002e40)=0x103)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000002f00)={&(0x7f0000002e80)='./file0\x00', 0x1, &(0x7f0000002ec0)='./file0\x00', 0x8})
ioctl$TIOCCLRVERAUTH(r2, 0x2000741d) (async)
getuid()
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000002f40)=""/38)

38.225205ms ago: executing program 6 (id=1325):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x1b}, 0x80000000000004, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1025, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x6, 0x5}, {0x16, 0x5, 0x7f, 0x40916b12}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
r1 = socket(0x18, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x802069c5, &(0x7f00000001c0))
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="582383ba32ce44e08e23b16f3aec414a7aadc2068e1e2ea600006efb258f1a1f7f6b6ef206c774efcf04017ae14452ec54d21fd2b5d6cb3022868831", 0x3c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="f969af96dacc73312091501d94a34b71000000005c6fd13194245ebbd0a75af9875656e8b9169b9d609e0b4927cab28f2769b43df6bd7881952832ccb0afe61320de54c663201382cf2fdd41d979475a12fe81de3738a8b932a39f52f5f76d78", &(0x7f0000000080)=0x60, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[])
r2 = socket(0x800000018, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e6, 0xfffb}, 0x0, 0x0, 0x5})
socket$inet(0x2, 0x4000, 0x1)
r3 = socket(0x800000018, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)

37.810342ms ago: executing program 3 (id=1326):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ff})
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x6, r1)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, <r2=>0x0}, 0xc)
r3 = getegid()
setgid(r3)
setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={r1, r2, r3}, 0xc)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000180))
close(r4)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x31, 0x0, 0x0)
setsockopt(r5, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
mknod(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ff}) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
getpid() (async)
fcntl$setown(r0, 0x6, r1) (async)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100), 0xc) (async)
getegid() (async)
setgid(r3) (async)
setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={r1, r2, r3}, 0xc) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x18, 0x1, 0x0) (async)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000180)) (async)
close(r4) (async)
socket(0x18, 0x2, 0x0) (async)
setsockopt(r4, 0x1000000029, 0x31, 0x0, 0x0) (async)
setsockopt(r5, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x2, 0x0) (async)

37.518412ms ago: executing program 0 (id=1327):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000140)=0xffff, 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @rand_addr="20f4372e0865915f577ee80000008000", @mcast2, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x96d}}}}}}) (async, rerun: 64)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) (rerun: 64)
mprotect(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x1) (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x2)
getsockname(r2, &(0x7f0000000080)=@in, &(0x7f0000000100)=0xc)
ioctl$WSDISPLAYIO_GETSCREEN(r1, 0xc0245755, &(0x7f0000000000)={0x8001, './file0\x00', './file0\x00'})

14.861946ms ago: executing program 3 (id=1328):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x4004667b, &(0x7f0000000340)={0x0})
syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="e55b82439d3b", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3c, 0x28, 0x67, 0x2, 0x8, 0x62, 0x0, @loopback, @loopback}, @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0xfff, 0x0, 0x6}}}}}})

12.100242ms ago: executing program 6 (id=1329):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4ce, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x8000000000008000}, {0x1, 0x8000}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="f969fe55838aa69c47afaadacc73312091501d94a34b71000000005c6fd17bdd031de7693194245ebbd0a75a", &(0x7f0000000080)=0x2c, 0x0, 0x0) (async)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="f969fe55838aa69c47afaadacc73312091501d94a34b71000000005c6fd17bdd031de7693194245ebbd0a75a", &(0x7f0000000080)=0x2c, 0x0, 0x0)
ioctl$BIOCFLUSH(r0, 0x20004268) (async)
ioctl$BIOCFLUSH(r0, 0x20004268)
socket$inet(0x2, 0x3, 0x0) (async)
r2 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r2, 0x0, 0x5, 0x0, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000700)="d80b00"/14, 0xe)

11.33437ms ago: executing program 5 (id=1330):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r0 = socket(0x18, 0x2, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x1}, {0x64, 0x2, 0x0, 0x6}, {0x6, 0xf0, 0x3, 0x80000000}]})
write(0xffffffffffffffff, &(0x7f00000002c0)="d81ad3ede1f3bd8558d5c7364888", 0xe)

1.091716ms ago: executing program 0 (id=1331):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000200)={@broadcast, @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x6}]}}, @icmp=@echo}}}})

0s ago: executing program 3 (id=1332):
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) (async)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1)
syz_emit_ethernet(0xb2, &(0x7f0000000000)={@random="323e54cf24a9", @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "7facaa", 0x7c, 0x3c, 0x0, @empty, @empty, {[@hopopts={0x8, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}, @routing={0x2f, 0x8, 0x0, 0xf6, 0x0, [@empty, @loopback, @mcast1, @rand_addr="6b14f4c89dc26d7c47efa8ceb8ec8299"]}, @dstopts={0x88, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x1}]}], @tcp={{0x1, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xfffd, 0x0, 0x5d}}}}}}})
poll(&(0x7f0000000ac0)=[{}], 0x1, 0x887b)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
malloc(): allocation too large, type = 6, size = 73015894016
pckbd_enable: command error
uvn_flush: obj=0xfffffd8068545ad0, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
fuse: Cannot find fusebuf
pckbd_enable: command error
denied attempt to set clock forward to 13622315181289262
C0#+"$%.!",%: #/--!.$ %22/2

OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
uvn_flush: obj=0xfffffd8065bc4440, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
denied attempt to set clock back 50 seconds
pckbd_enable: command error
witness: lock order reversal:
 1st 0xffff800010fd2c98 sbufrcv (&so->so_rcv.sb_lock)
 2nd 0xfffffd806e641a88 inode (&ip->i_lock)
lock order [1] sbufrcv (&so->so_rcv.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff834385bd -> 0xffffffff833a5512 is missing
lock order [2] inode (&ip->i_lock) -> [1] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_do_enter_write+0xb7
#1  sblock+0xb7
#2  soreceive+0x28e
#3  fifo_read+0x11a
#4  VOP_READ+0x102
#5  vn_rdwr+0x15b
#6  vndsetcred+0xa1
#7  vndioctl+0xe6c
#8  VOP_IOCTL+0xac
#9  vn_ioctl+0xf8
#10 sys_ioctl+0x5c3
#11 syscall+0xbc6
#12 Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd806e641a88,9,0) at witness_checkorder+0x1047
rw_do_enter_write(fffffd806e641a70,1) at rw_do_enter_write+0xb7
rrw_enter(fffffd806e641a70,1) at rrw_enter+0xc6
VOP_LOCK(fffffd805f747460,2001) at VOP_LOCK+0xa6
vn_lock(fffffd805f747460,2001) at vn_lock+0xa4
vfs_getcwd_common(fffffd805f747460,fffffd805f747898,0,0,200,0,9edc4182c04341d9) at vfs_getcwd_common+0xd1
vn_isunder(fffffd805f747460,fffffd805f747898,ffff80003c5b8038) at vn_isunder+0x56
unp_externalize(fffffd805ed2b900,33,0) at unp_externalize+0x286
soreceive(ffff800010fd2bb8,ffff80003c4e4128,ffff80003c4e40d8,0,ffff80003c4e4118,ffff80003c4e429c,de26b5e3d13d6862) at soreceive+0xc73
recvit(ffff80003c5b8038,6,ffff80003c4e4270,0,ffff80003c4e4320) at recvit+0x40a
sys_recvmsg(ffff80003c5b8038,ffff80003c4e43d0,ffff80003c4e4320) at sys_recvmsg+0x1bf
syscall(ffff80003c4e43d0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f4167cedf0, count: -14
ddb{1}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff80003c4e3bb0
rbx               0xfffffd800470c4f8
rdx               0xffff80000142abc0
rcx               0xffff80003c5b8038
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff80003c4e3a90
r9                0x8080808080808080
r10                0x9751bc5211ac0b1
r11               0x66a4d9060a9c596a
r12                                0
r13               0xfffffd8003f24f00
r14                              0x3
r15                       0xffffffff
rip               0xffffffff810240e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c4e3ba0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=453878 pid=78755 tcnt=2 stat=onproc
    flags process=1000000<CHROOT> proc=4000000<THREAD>
    runpri=50, usrpri=50, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c5b8558,0xffff80003c5b94c8
    process=0xffff80003c56a050 user=0xffff80003c4df000, vmspace=0xfffffd806beac570
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 70774  157388  95710      0  7           0                syz-executor
 70774  265207  95710      0  3   0x4000080  fsleep        syz-executor
 78755  268421  98014      0  3   0x1000080  fsleep        syz-executor
*78755  453878  98014      0  7   0x5000000                syz-executor
 44722  191157   6073      0  3        0x80  fsleep        syz-executor
 44722   18138   6073      0  2   0x4000000                syz-executor
 68126  152915  33430      0  3        0x80  fsleep        syz-executor
 68126  334210  33430      0  3   0x4000080  kqpoll        syz-executor
 68126  435299  33430      0  3   0x4000080  fsleep        syz-executor
 39330  466012  25821      0  3        0x80  fsleep        syz-executor
 39330  149221  25821      0  3   0x4000080  nanoslp       syz-executor
 39330   13164  25821      0  3   0x4000080  fsleep        syz-executor
 46142   80616  28324      0  3        0x80  fsleep        syz-executor
 46142   73451  28324      0  3   0x4000080  fifor         syz-executor
 11722  178012  86178      0  3        0x80  fsleep        syz-executor
 11722  233570  86178      0  3   0x4000080  piperd        syz-executor
 65944  363429  28398      0  3        0x80  fsleep        syz-executor
 65944   52717  28398      0  3   0x4000080  sbwait        syz-executor
 13485  230399      1      0  3    0x100083  ttyin         getty
 28324  418727  17943      0  3        0x82  nanoslp       syz-executor
 28398   60644  17943      0  3        0x82  nanoslp       syz-executor
 47057  442535  51567      0  3        0x82  sbwait        sshd-session
 69163  227680      0      0  3     0x14280  nfsidl        nfsio
 57128  496150      0      0  3     0x14280  nfsidl        nfsio
 50060  337688      0      0  3     0x14280  nfsidl        nfsio
 24797  434173      0      0  3     0x14280  nfsidl        nfsio
 64373  471988      0      0  3     0x14280  nfsidl        nfsio
 28010  220545      0      0  3     0x14280  nfsidl        nfsio
 58767  514525      0      0  3     0x14280  nfsidl        nfsio
 94173  154034      0      0  3     0x14280  nfsidl        nfsio
 28377  101355      0      0  3     0x14280  nfsidl        nfsio
 49748  214254      0      0  3     0x14280  nfsidl        nfsio
 41357  172960      0      0  3     0x14280  nfsidl        nfsio
  2863  415624      0      0  3     0x14280  nfsidl        nfsio
 54462   49656      0      0  3     0x14280  nfsidl        nfsio
  7500  385037      0      0  3     0x14280  nfsidl        nfsio
 29202  521450      0      0  3     0x14280  nfsidl        nfsio
 21078  398315      0      0  3     0x14280  nfsidl        nfsio
 59310  389744      0      0  3     0x14280  nfsidl        nfsio
 80680  343184      0      0  3     0x14280  nfsidl        nfsio
 53522  274054      0      0  3     0x14280  nfsidl        nfsio
  2578  182047      0      0  3     0x14280  nfsidl        nfsio
 80735  324239      0      0  3     0x14200  bored         sosplice
 45359  279289  79210      0  3    0x100082  sbwait        arp
 79210   52531      1      0  3    0x10008a  sigsusp       sh
 25821   25094  17943      0  3        0x82  nanoslp       syz-executor
  6073   16189  17943      0  3        0x82  nanoslp       syz-executor
 95710  480648  17943      0  3        0x82  nanoslp       syz-executor
 33430  437710  17943      0  3        0x82  nanoslp       syz-executor
 86178  133216  17943      0  3        0x82  nanoslp       syz-executor
 98014  142541  17943      0  3        0x82  nanoslp       syz-executor
 17943   61665  66797      0  3        0x82  kqread        syz-executor
 66797  450676  36345      0  3    0x10008a  sigsusp       ksh
 36345  430883  49492      0  3        0x98  kqread        sshd-session
 49492  408777  51567      0  3        0x92  kqread        sshd-session
 51567   58141      1      0  3        0x88  kqread        sshd
 16988  104508  51673     74  3   0x1100092  bpf           pflogd
 51673  482236      1      0  3        0x80  sbwait        pflogd
 88367  265631  28376     73  3   0x1100090  kqread        syslogd
 28376  459970      1      0  3    0x100082  sbwait        syslogd
 98956  480462      1      0  3    0x100080  kqread        resolvd
  8605   14272  70510     77  3    0x100092  kqread        dhcpleased
 35018  219544  70510     77  3    0x100092  kqread        dhcpleased
 70510  167039      1      0  3        0x80  kqread        dhcpleased
 32603  179861      0      0  3     0x14200  bored         smr
  1865  342811      0      0  3     0x14200  pgzero        zerothread
  6944  211774      0      0  3     0x14200  aiodoned      aiodoned
 38927   51486      0      0  3     0x14200  syncer        update
 80822  165420      0      0  3     0x14200  cleaner       cleaner
  9611  156815      0      0  3     0x14200  reaper        reaper
 64566  476257      0      0  3     0x14200  pgdaemon      pagedaemon
 47569  206293      0      0  3     0x14200  bored         viomb
 11763   52588      0      0  3  0x40014200  acpi0         acpi0
  3317  436547      0      0  3  0x40014200                idle1
  5313  197166      0      0  3     0x14200  bored         softnet3
 25138  409094      0      0  3     0x14200  bored         softnet2
 40076  365706      0      0  3     0x14200  bored         softnet1
 30149  312259      0      0  2     0x14200                softnet0
 10198  374504      0      0  3     0x14200  bored         systqmp
 40138  239259      0      0  3     0x14200  bored         systq
 55479  408780      0      0  3     0x14200  tmoslp        softclockmp
 45032  107166      0      0  3  0x40014200  tmoslp        softclock
  4282   73210      0      0  3  0x40014200                idle0
     1  460368      0      0  3     0x80082  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 70774 (syz-executor) thread 0xffff80003c5b8558 (157388)
exclusive rwlock uobjlk r = 0 (0xfffffd806bec1ee8)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  uvm_fault+0x1e9
#3  upageflttrap+0xa9
#4  usertrap+0x2d8
#5  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffd806bca5840)
#0  witness_lock+0x5bb
#1  rw_do_enter_read+0x3af
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4b
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x2d8
#7  recall_trap+0x8
Process 78755 (syz-executor) thread 0xffff80003c5b8038 (453878)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83906af8)
#0  witness_lock+0x5bb
#1  unp_externalize+0x14e
#2  soreceive+0xc73
#3  recvit+0x40a
#4  sys_recvmsg+0x1bf
#5  syscall+0xbc6
#6  Xsyscall+0x128
exclusive rwlock sbufrcv r = 0 (0xffff800010fd2c98)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  sblock+0xb7
#3  soreceive+0x28e
#4  recvit+0x40a
#5  sys_recvmsg+0x1bf
#6  syscall+0xbc6
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10239  11183K   12368K 166960K     13463        0
            pcb    20     15K      17K 166960K       355        0
         rtable   209      9K      10K 166960K       482        0
             pf    38     18K      26K 166960K       163        0
         ifaddr    39      6K       7K 166960K       102        0
        ifgroup    59      2K       2K 166960K       192        0
         sysctl     4      1K       1K 166960K         8        0
       counters    66     36K      37K 166960K       204        0
       ioctlops     0      0K       4K 166960K      1794        0
            iov     1      8K      25K 166960K        78        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1530     96K      96K 166960K      2920        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       5K 166960K        20        0
         VM map     2      1K       1K 166960K         2        0
            sem    27      3K       3K 166960K        68        0
        dirhash    12      2K       2K 166960K        39        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    20     73K      93K 166960K      1492        0
          sigio     0      0K       0K 166960K        27        0
           proc    73     91K     127K 166960K       737        0
        subproc    81      5K       5K 166960K        96        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       158        0
       in_multi    78      5K       7K 166960K       154        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     0      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   235   1049K    1049K 166960K       235        0
           exec     0      0K       1K 166960K       629        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         3        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   255     74K      87K 166960K     15500        0
       UVM aobj    15      5K       5K 166960K        19        0
     pinsyscall    48     96K     106K 166960K      2660        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       183        0
            NDP    13      0K       1K 166960K        74        0
           temp    78   8648K    8716K 166960K     57003        0
         kqueue    13     20K      34K 166960K       278        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      123    0      117     1     0     1     1     0     8    0
rtentry    112      143    0       55     4     1     3     4     0     8    0
unpcb      144     1499    0     1477    14    12     2     6     0     8    1
syncache   336       12    0       12     6     5     1     1     0     8    1
tcpqe       32        2    0        2     2     2     0     1     0     8    0
tcpcb      808      591    0      583    20    16     4    11     0     8    3
arp        120       22    0        6     1     0     1     1     0     8    0
inpcb      376     1731    0     1717    34    29     5    15     0     8    3
nd6        136       33    0       12     1     0     1     1     0     8    0
pkpcb       40       16    0       16     3     2     1     1     0     8    1
kcovpl      48       10    0        1     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     0     1     1     0     8    1
ppxss      1168      52    0       52     2     1     1     1     0     8    1
pppxif     1472       5    0        5     3     3     0     1     0     8    0
pfstscr     40        2    0        2     1     1     0     1     0     8    0
pffrag     232       11    0        6     1     0     1     1     0   482    0
pffrnode    88       10    0        6     1     0     1     1     0     8    0
pffrent     40       14    0        9     1     0     1     1     0     8    0
pfosfp      40     1428    0     1428     5     5     0     5     0     8    0
pfosfpen   112     1428    0     1428    21    21     0    21     0     8    0
pfstitem    24      105    0       56     1     0     1     1     0     8    0
pfstkey    128      107    0       58     2     0     2     2     0     8    0
pfstate    376      106    0       57     6     0     6     6     0     8    0
pfrule     1344      23    0       18     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      587    0      219    32     6    26    27     0     8    2
art_table   32      589    0      219     4     0     4     4     0     8    0
art_node    16      141    0       63     1     0     1     1     0     8    0
sysvmsgpl   40       32    0       18     1     0     1     1     0     8    0
semupl     112        4    0        4     2     2     0     1     0     8    0
semapl     112       64    0       39     1     0     1     1     0     8    0
shmpl      112       16    0        4     1     0     1     1     0     8    0
dirhash    1024      36    0       19     3     0     3     3     0     8    0
dino2pl    256     4291    0     2784    95     0    95    95     0     8    0
ffsino     280     4291    0     2784   109     0   109   109     0     8    0
nchpl      144     6407    0     4716    63     0    63    63     0     8    0
rtmask      32       14    0       14     3     3     0     1     0     8    0
uvmvnodes   80     5255    0        0   108     0   108   108     0     8    0
vnodes     216     5255    0        0   292     0   292   292     0     8    0
namei      1024   22901    0    22901     1     0     1     1     0     8    1
percpumem   16      116    0       69     1     0     1     1     0     8    0
kstatmem   264      112    0       86     4     1     3     3     0     8    1
scsiplug    72        4    0        4     3     2     1     1     0     8    1
scxspl     216    20509    0    20509    12    11     1     8     1     8    1
plimitpl   152      378    0      359     1     0     1     1     0     8    0
sigapl     424     1819    0     1745     9     0     9     9     0     8    0
futexpl     64    26544    0    26534     1     0     1     1     0     8    0
knotepl    120      597    0        0    18     0    18    18     0     8    0
kqueuepl   216      522    0      512     5     4     1     3     0     8    0
pipepl     328      284    0      252     6     3     3     6     0     8    0
fdescpl    504     1778    0     1743     5     0     5     5     0     8    0
filepl     152    12927    0    12681    35    22    13    18     0     8    2
lockfpl    104      449    0      447     1     0     1     1     0     8    0
lockfspl    48      162    0      160     1     0     1     1     0     8    0
sessionpl  144       34    0       24     1     0     1     1     0     8    0
pgrppl      48       49    0       30     1     0     1     1     0     8    0
ucredpl    104     2794    0     2781     1     0     1     1     0     8    0
zombiepl   144     1745    0     1745     1     0     1     1     0     8    1
processpl  1176    1819    0     1745     6     0     6     6     0     8    0
procpl     656     4032    0     3948     8     0     8     8     0     8    0
srpgc       96        8    0        8     3     2     1     1     0     8    1
sosppl     168        7    0        7     4     3     1     1     0     8    1
sockpl     688     3386    0     3344    45    38     7    20     0     8    3
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       3    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     129    0        0    17     0    17    17     0     8    0
mcl2k      2048      37    0        0     5     0     5     5     0     8    0
mtagpl      96       59    0        0     2     0     2     2     0     8    0
mbufpl     256      297    0        0    18     0    18    18     0     8    0
bufpl      280     6167    0      136   431     0   431   431     0     8    0
anonpl      24   228311    0   222566    89    37    52    60     0   184    7
amapchunkpl 152   50207    0    49580    45    18    27    32     0   158    1
amappl16   200     3864    0     3789    41    34     7    17     0     8    0
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184      132    0      118     1     0     1     1     0     8    0
amappl13   176        7    0        6     1     0     1     1     0     8    0
amappl12   168     2455    0     2419     4     1     3     3     0     8    0
amappl11   160       51    0       36     1     0     1     1     0     8    0
amappl10   152        2    0        2     1     1     0     1     0     8    0
amappl9    144      255    0      255     1     1     0     1     0     8    0
amappl8    136       26    0       23     1     0     1     1     0     8    0
amappl7    128      117    0      102     1     0     1     1     0     8    0
amappl6    120      217    0      211     1     0     1     1     0     8    0
amappl5    112      131    0      121     1     0     1     1     0     8    0
amappl4    104      344    0      325     1     0     1     1     0     8    0
amappl3     96    10302    0    10174     4     0     4     4     0     8    0
amappl2     88      736    0      665     2     0     2     2     0     8    0
amappl1     80    13753    0    13062    18     2    16    16     0     8    0
amappl      88    14986    0    14795     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       2    0        1     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        7    0        7     2     2     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       21    0       20     1     0     1     1     0     8    0
aobjpl      72       18    0        4     1     0     1     1     0     8    0
uaddrrnd    24     1778    0     1743     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1778    0     1743     1     0     1     1     0     8    0
vmmpekpl   168    15819    0    15768     3     0     3     3     0     8    0
vmmpepl    168   112279    0   110093   126    27    99   106     0   357    1
vmsppl     456     1777    0     1743     5     0     5     5     0     8    0
rwobjpl     64    35228    0    28815   105     1   104   104     0     8    0
pdppl      4096    3563    0     3486   115    38    77    85     0     8    0
pvpl        32    18124    0        0   148     2   146   147     0   265    0
pmappl     248     1777    0     1743     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      328    0       68     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff8383aff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839068f0) at __mp_lock+0x199
intr_handler(ffff80002a422940,ffff800000069c00) at intr_handler+0xe1
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a
__mp_lock(ffffffff839068f0) at __mp_lock+0x1a3
softintr_dispatch(0) at softintr_dispatch+0x5b
Xsoftclock() at Xsoftclock+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
__mp_lock(ffffffff839068f0) at __mp_lock+0x1a3
uvm_fault(fffffd806bca5740,4d4728b1000,0,1) at uvm_fault+0x1ee
upageflttrap(ffff80002a422e40,4d4728b1000) at upageflttrap+0xa9
usertrap(ffff80002a422e40) at usertrap+0x2d8
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7b38f00c0de0, count: -16
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(fffffd806e641a88,9,0) at witness_checkorder+0x1047
rw_do_enter_write(fffffd806e641a70,1) at rw_do_enter_write+0xb7
rrw_enter(fffffd806e641a70,1) at rrw_enter+0xc6
VOP_LOCK(fffffd805f747460,2001) at VOP_LOCK+0xa6
vn_lock(fffffd805f747460,2001) at vn_lock+0xa4
vfs_getcwd_common(fffffd805f747460,fffffd805f747898,0,0,200,0,9edc4182c04341d9) at vfs_getcwd_common+0xd1
vn_isunder(fffffd805f747460,fffffd805f747898,ffff80003c5b8038) at vn_isunder+0x56
unp_externalize(fffffd805ed2b900,33,0) at unp_externalize+0x286
soreceive(ffff800010fd2bb8,ffff80003c4e4128,ffff80003c4e40d8,0,ffff80003c4e4118,ffff80003c4e429c,de26b5e3d13d6862) at soreceive+0xc73
recvit(ffff80003c5b8038,6,ffff80003c4e4270,0,ffff80003c4e4320) at recvit+0x40a
sys_recvmsg(ffff80003c5b8038,ffff80003c4e43d0,ffff80003c4e4320) at sys_recvmsg+0x1bf
syscall(ffff80003c4e43d0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f4167cedf0, count: -14