last executing test programs:

3.030251428s ago: executing program 7 (id=27):
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x782, 0x0)
ioctl$SPKRTONE(r2, 0x80085301, &(0x7f0000000040)={0x0, 0x200})
execve(0x0, 0x0, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xa, 0x3, 0x1, 0x8}, {0x20, 0x7, 0xfe, 0xc}, {0x9b1e, 0x22, 0xf, 0x4}]})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="c2a650000001932432d36083c8c7060000003882", &(0x7f0000000000)=0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[])
syz_emit_ethernet(0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000c000001080045f4001dfffa000007019005000000aae000008243df9078e400000000"])
ioctl$DIOCGETSTATUS(r0, 0xc2084415, &(0x7f0000001ac0))
r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$DIOCXBEGIN(r3, 0xc0104451, &(0x7f0000000040)={0x3, 0x408, &(0x7f0000000c40)=[{0x1, './file1\x00', 0x80000001}, {0x1, './file2\x00', 0x8}, {0x1, './bus\x00', 0x11}]})
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='[\x00\x00\x00', 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$DIOCRADDTABLES(r0, 0xc450443d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xe0)
r5 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000180)={0xfffffffe, 0x2, 0xe3, 0x6, "b689b697405dbb69cb2affa2c8f58722378e3062", 0x2, 0xc})
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

2.819497974s ago: executing program 4 (id=42):
fstatat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
r1 = setsid()
r2 = socket$inet(0x18, 0x3, 0x102)
sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x3, 0x8, "00000000000000000000000000000001", 0x100}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000003c0)="6488020000003a9a0000000000000000dd2a39d68efbfffffffffffa8f4424c69fff84410a8591a0bf67bcfe9b8af84a50dbb1fcb4366ee88d6c4086899bcaccbe30f11394b6576ab7f50c9cd2d87c2dccdb76fd45cda31626f579e6c6e8dc1f5b5dcb4f3d4d7cfdb72764bf99789a8dcde090b4acfa18f8c1f4cce6ce0dbe7609a7e663b538ceabb05ad6b9f33ff649f61226708f5469023d8f1f6ac0a404", 0x9f}], 0x1, 0x0}, 0x6)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{r0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x6, 0x0, 0xfffffffffffffffc}, 0x6, 0xfffffffffffffffd, 0x9, 0x0, 0x200000000000, 0x1, r1, 0x0, 0x0, 0x6, 0x0, 0x1000}) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0)

2.736152625s ago: executing program 4 (id=45):
r0 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r0, 0xffff, 0x40, 0x0, 0x0)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, &(0x7f0000000140)="34967ba6a70e1f", &(0x7f0000000080)=0x7, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x10000)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0xffff7fff, 0x1, 0x3, 0x10, [{0x3ff, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0xa}, {0x6, 0xffffffff, 0x4, 0x2}, {0x2, 0x0, 0x200, 0x6}, {0x8, 0x3, 0x80000000, 0x807}, {0x2, 0x48001, 0x14000009, 0xa}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfcf0, 0xb}, {0x0, 0x7, 0x31, 0x8b}, {0x5, 0x7, 0x8002, 0x1}, {0xa44f, 0x0, 0xa38c000, 0xe1}, {0xf, 0x2, 0x0, 0x8}, {0x2000df, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x3, 0x4}, {0xd15, 0xd655, 0x400003, 0x6}]})
r4 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BIOCIMMEDIATE(r4, 0x80044270, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0x2800c1, 0xf, 0x0, 0x80000001, 0x50001, 0x0, 0x1, 0x0, 0x8000000000000008, 0xbf})
r5 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r6 = socket(0x18, 0x3, 0x0)
ioctl$DIOCGETTIMEOUT(r1, 0xc008441e, &(0x7f0000000b80)={0x2, 0xa57})
ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0))
r7 = socket(0x18, 0x1, 0x0)
setsockopt(r7, 0x1000000029, 0x3b, &(0x7f0000000100), 0x0)
ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100))
r8 = socket$inet(0x2, 0x3, 0x0)
setsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f00000000c0)={0x0, 0xd}, 0x10)
ioctl$FIONREAD(r8, 0x80146950, &(0x7f00000001c0))
ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f0000000180)={0x10, 0x2, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x29c1}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x49}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x100000001}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xd669}, {&(0x7f0000400000/0xc00000)=nil, &(0x7f0000bf9000/0x1000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000596000/0x2000)=nil, 0x4}, {&(0x7f0000f1e000/0x11000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f00005d7000/0x4000)=nil, &(0x7f00006d7000/0x1000)=nil, 0x6}, {&(0x7f0000820000/0x2000)=nil, &(0x7f00008a8000/0x1000)=nil, 0xf}, {&(0x7f0000558000/0x2000)=nil, &(0x7f0000d49000/0x4000)=nil, 0x8700000000000000}, {&(0x7f00004d6000/0x2000)=nil, &(0x7f0000971000/0x2000)=nil, 0x8}, {&(0x7f000085b000/0x1000)=nil, &(0x7f0000d9b000/0x4000)=nil}], './file0\x00', 0x9, 0x7, 0xfffffffb, 0x4, [0x75, 0x1, 0x0, 0xfffffffa, 0x1ff, 0xe44c, 0x2, 0x10, 0x1, 0x1, 0x8, 0x9, 0x9, 0x10001, 0x7, 0x1, 0x4, 0x4, 0x54a, 0x80000001, 0x2, 0x68e, 0x6, 0x7ff, 0x3, 0xc, 0x7fff, 0xb, 0xc0c, 0x2, 0x3, 0x3ff, 0x80, 0x3, 0x8, 0x5114, 0x3, 0x9, 0x13, 0x9, 0x4, 0x3ff, 0x7, 0x4, 0x2, 0xc53, 0x0, 0x8, 0x2, 0x8, 0x7, 0x5e028000, 0x14bd6ab6, 0x220c, 0x9, 0xb, 0x7b, 0x8, 0x9, 0xc0, 0x8, 0x3, 0x3, 0x2, 0x2b, 0x0, 0xfffffff9, 0x1, 0xd, 0x7f, 0x993, 0x40, 0x9, 0x7, 0x2, 0x3, 0xae, 0x6, 0x7, 0x1, 0x0, 0xeac6, 0xffff, 0x9, 0x900, 0x151191f5, 0x4, 0x4, 0x8, 0x0, 0x8, 0xd, 0xb0000, 0x7, 0x7, 0xe24, 0x4, 0x8001, 0xea, 0x1, 0x6, 0x4, 0x7, 0x1, 0xfffffff9, 0x1, 0x21e1f9d8, 0x2, 0x1, 0xabf, 0x7, 0x4, 0x9, 0x8, 0x8, 0x7ff, 0x60, 0x8, 0x480, 0xe, 0xf, 0x7, 0x9, 0x9, 0x7, 0x4, 0xd, 0xb90, 0xfffffffe, 0xffffffff, 0x4, 0x8, 0x400, 0x5, 0x10000, 0x0, 0x7, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fffffff, 0x3, 0x200, 0xa5a, 0x1, 0x100, 0x3200000, 0x6, 0x3, 0x9, 0xa55, 0xffffffff, 0x9, 0x4, 0x9, 0x9, 0xfffffff0, 0x1000, 0xda6, 0xd, 0x2, 0x9, 0x7, 0xf, 0x200, 0x6, 0x802000, 0xff, 0x8, 0x8, 0x15f, 0x6, 0x400, 0x2, 0xfffffff9, 0x1, 0x8, 0x1, 0x4, 0x2, 0x5, 0x1000, 0x10000, 0x8000, 0x1, 0x0, 0x8, 0x8c, 0x3ff, 0xd7, 0xffffa19f, 0x3, 0x8000, 0x8, 0x2, 0x2, 0x7c, 0x8, 0xe8d, 0xfffffff9, 0xfe00, 0x8, 0x2, 0x6, 0x800, 0xd2, 0x9, 0xc, 0x80, 0x1000, 0x5, 0x100, 0x20000, 0x4, 0x10000, 0x1000, 0x7, 0x9, 0x5d, 0x7, 0xfffffffb, 0x5, 0x8, 0xb, 0x5, 0x19, 0x1, 0xc088, 0x253, 0x2, 0x5, 0x5, 0x8001, 0xfffffffa, 0x0, 0x7, 0x1, 0x7ff, 0x7, 0xf06f, 0x8001, 0x7, 0x68, 0x80, 0x4, 0x80000001, 0x81, 0x4, 0x6, 0x0, 0x25, 0x101, 0x0, 0x3ff, 0xe, 0x5, 0x9, 0xfffffffb, 0xb, 0x0, 0x101, 0x6, 0x0, 0x180, 0x8, 0x5, 0x2, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x2, 0x6, 0x401, 0x6ea, 0xffff7fff, 0x9, 0x45b, 0x5, 0x4, 0x1000, 0x1ff, 0xebc0, 0x7fff, 0x0, 0x0, 0x7, 0x7, 0xd, 0x7, 0x7, 0x9, 0x1, 0xd, 0xa9fd, 0x7fffffff, 0x6, 0xde45, 0x6, 0x4, 0xff, 0xffff, 0x6df, 0x8, 0x2, 0xff, 0x0, 0xf, 0x10000, 0x5, 0xff, 0x2, 0xffffffff, 0x10000, 0x7, 0x4, 0x10000, 0xfffffe23, 0x4, 0x8001, 0x1, 0x9, 0xeca, 0x0, 0x5, 0x1, 0x4, 0x5, 0x9, 0xffff, 0x2, 0x1ff, 0x3, 0x101, 0x4, 0x3, 0x449b0ccc, 0x800, 0xd, 0x4d05, 0xa, 0x101, 0x8, 0x3ff, 0x5, 0x4, 0x3, 0x7fffffff, 0xfffffeff, 0x1, 0x95, 0x2, 0x9, 0x7b5, 0x8, 0x1, 0xea, 0x407a, 0x8, 0x2, 0x3, 0x1, 0x800, 0xd, 0x2, 0x0, 0x1, 0x1ff, 0xffff8001, 0x2, 0x3, 0x3, 0x3, 0x10, 0x8, 0x1e15, 0xb03, 0x1c19, 0x1, 0x6, 0x80, 0x400, 0x72, 0x4, 0x4, 0x3, 0x40, 0x4, 0xa94f, 0xc0, 0xa, 0x800, 0xa58f, 0x48, 0x7, 0x6, 0xffffffff, 0x8007, 0x4, 0x5, 0xfffff91b, 0x9ce7, 0xc87, 0x0, 0x9, 0x4, 0xff, 0x1, 0x4, 0x7, 0x3de1, 0x29, 0x5, 0x9e, 0x5, 0x3, 0x8d08, 0x6, 0x10000, 0x2, 0xfffffffd, 0xd1d, 0x600, 0x272585bc, 0x7fffffff, 0x5, 0x9, 0x8, 0x1ff, 0x400, 0x401, 0x1, 0xfffffff7, 0xd, 0x80, 0xb3e, 0x40, 0x8, 0x7ff, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x6, 0x5, 0x1, 0x2, 0x976, 0x7, 0x6162, 0xd76c, 0x4, 0x2a1c75f9, 0x40, 0x9945, 0xb054, 0x8000, 0x6, 0x5, 0x8, 0x3d, 0x9, 0x4040000, 0xffff, 0xaa9cbf5, 0x5, 0x9, 0x200, 0x2, 0x2, 0x2, 0xfffff121, 0xfff, 0x2, 0x40, 0x9, 0x5, 0x2, 0x7ae, 0x9, 0x9, 0xfffffffd, 0x8b1f, 0x7, 0x1, 0x4, 0xd4, 0x4, 0xffffffff, 0xfffff000, 0x8, 0x8, 0x8, 0x7fffffff, 0x6, 0xd866, 0x6, 0x2, 0x401, 0x3, 0x8, 0x3, 0x0, 0x1, 0x0, 0x6, 0x9]})

2.735846988s ago: executing program 5 (id=46):
setreuid(0x0, 0xee01)
r0 = geteuid()
setresuid(r0, r0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x7, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)

2.718083918s ago: executing program 4 (id=49):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x9, 0x775, 0x0, 0x2, "de3a255b2aa88baec7700b1367663dfad48366a1", 0x3, 0x400})
poll(&(0x7f0000000140)=[{r0, 0x2c322bb18de6ea7a}], 0x1, 0x3) (async)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xa, 0x3, 0x1, 0x8}, {0x20, 0x7, 0xfe, 0xc}, {0x9b1e, 0x22, 0xf, 0x4}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c2a650000001932445d3bea6a9b9695e0acf8d1ba3ee29d441aa6083c8c70600001c700c5a", &(0x7f0000000000)=0x25, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x10000, 0x4)
lseek(r2, 0x20000004, 0x0) (async)
getdents(r2, &(0x7f0000000800)=""/4096, 0x1000)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[])

2.712195071s ago: executing program 7 (id=50):
r0 = open(&(0x7f0000000000)='./file1\x00', 0x800, 0x31)
ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000040)=0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f00000000c0)=0x34)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
pread(r2, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5)
execve(0x0, 0x0, 0x0)
fchdir(r1)

2.710904034s ago: executing program 5 (id=52):
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01100000000000000000000000000000bbfe8000000000000000000000000000aa8f"])
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$TIOCFLUSH(r0, 0xc00c7006, &(0x7f0000000080)=0x500)
syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452000280000000060069078e0000002ac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500280a390780000"])
r1 = socket(0x2, 0x4001, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x2b0c, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00", 0x2})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="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"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98)
connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x6}, 0x10)
sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, &(0x7f0000000280), 0x0)
sysctl$net_inet_tcp(&(0x7f00000019c0)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000001a00), 0x0, 0x0, 0x0)
shutdown(r1, 0x2)
syz_emit_ethernet(0x39, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x2b, 0x0, 0x0, 0x1, 0x3c, 0x0, @rand_addr=0x8, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf4, 0xa3}, {"aaed4f"}}}}}})
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01100000000000000000000000000000bbfe8000000000000000000000000000aa8f"]) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async)
ioctl$TIOCFLUSH(r0, 0xc00c7006, &(0x7f0000000080)=0x500) (async)
syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452000280000000060069078e0000002ac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500280a390780000"]) (async)
socket(0x2, 0x4001, 0x0) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x2b0c, 0x0) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00", 0x2}) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="3bf2ee74e747c82dad6eb2a36f925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c5e15d0d2921d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26010000005f8ce92bcefd3eceefabee7e3ebe0def2975135acdf694b5d1275a9807ef9e0dd96d5d22fcd1289c80d3135ee0d4ccf9cf3d6f8ce70202fcd0738c22516d797a6d4d4577073c00a40824915d35dfeb96c0edbd0fc1381ac8d1c3a91ad2d50588da310100000000000000a7c210e97256c8538d64f6ef4ee0513d784dcd7abd974898cd9876d750b23a36c756c3edf75a3d576af5f2a5edc217ca61ebb52a7692889975c180baac6798938ec34cd37b28436db93be49e1907dba3eec9a40afdf9058648e598fd163ba9361ccc99fb6ccd7068422c486a7eb35daa8a6cfbbc01269fe7088b3fd869af60bc0c60136c7717064a9d46c82544ca34442be10218d1fd37ba0603b4f2aec29fa14dba20301a961810d2094eb17e9f4d263cb6cddf913c915a11060c88fd5f3030febd07d4e57c9ae190725f3c590000002f5fabdf894005e7b3280d96ec12d3af346a940924986ba166f3d97bc1db4eff00"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98) (async)
connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x6}, 0x10) (async)
sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, &(0x7f0000000280), 0x0) (async)
sysctl$net_inet_tcp(&(0x7f00000019c0)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000001a00), 0x0, 0x0, 0x0) (async)
shutdown(r1, 0x2) (async)
syz_emit_ethernet(0x39, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x2b, 0x0, 0x0, 0x1, 0x3c, 0x0, @rand_addr=0x8, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf4, 0xa3}, {"aaed4f"}}}}}}) (async)

2.666364744s ago: executing program 3 (id=53):
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x119)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f00000002c0)='./file0/file0\x00')
setuid(0xffffffffffffffff)
rename(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000001c0)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
ioctl$TIOCDRAIN(r0, 0x2000745e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb5219f1000b913f1, 0x10)
pwrite(r1, &(0x7f0000000140)='O', 0xf4cf2, 0xb30e)

2.66340796s ago: executing program 3 (id=56):
r0 = socket$inet(0x2, 0x1, 0x0)
clock_gettime(0x4, &(0x7f00000001c0))
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)="ea0000010000496552590000", 0xc)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003916, 0xffffffffffffffff)
getgroups(0x7, &(0x7f0000000000)=[0x0, <r1=>0x0, 0x0, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0x0, 0x0])
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9a)
open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb6)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x100)
ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, 0x0)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2)
setresgid(r1, r2, 0x0)
ioctl$DIOCKILLSTATES(r3, 0x0, &(0x7f00000002c0)={{0x6, 0x1}, 0x31, '\x00', 0x8c, {@addrmask={@v6=@rand_addr="2217ad359df72afa71968d5c06a41eee", @v4=@broadcast, 0x0, 0x0, 0x3}, [0x90b, 0x90], 0xeb, 0x2, 0x7}, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v4=@local={0xac, 0x14, 0x0}, 0x0, 0x0, 0x3}, [0x9, 0x8], 0x40, 0x3, 0x200}, './file0\x00', './file0\x00', 0x577, 0xd})
r4 = setsid()
ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x306, r4)

2.641617784s ago: executing program 1 (id=57):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@in, &(0x7f0000000200)=0x10, 0x2000)
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v6=@empty, @v4=@broadcast], [0xd, 0x8040], 0x1c, 0x2}, {[@v6=@empty, @v6=@mcast2], [0x46], 0x4004, 0x14}], {{0x246, 0x46, 0xfa, 0x7ff}, 0x7bf, 0x4, 0xfff00001, 0x0, 0x8, 0x16, 0x16}, {{0x0, 0x7, 0x4, 0x8}, 0x1, 0xc86, 0x10007, 0x6, 0x3ff, 0xf0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0xd, 0x2, 0xf23b, 0x4, [[0xa, 0x3], [0x3, 0x834c]], [[0xfc000002, 0x4], [0x4, 0x6]], 0x9, [0x1d6, 0x79], 0x1, 0x2, 0x7f, 0x2, 0x10, 0x3, 0x5, 0x83, 0x5, 0x8, 0x1, 0xce57}})
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
select(0x0, 0x0, &(0x7f0000000040)={0x50}, &(0x7f0000000080), 0x0)
mprotect(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x2)
ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe})
shutdown(r1, 0x1)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000040)="6cf1", 0x2)
write(r3, &(0x7f0000000600)="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", 0x39c9a083)
execve(0x0, 0x0, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$DIOCXBEGIN(r5, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0})
ioctl$DIOCSETSTATUSIF(r4, 0xc0284414, &(0x7f0000000140)={'./file0/file0/fi', &(0x7f00000000c0)=""/118, 0x4, 0x3, 0x0, 0x4})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$DIOCXCOMMIT(r4, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="9751be9212515c7e41cb099a511ee61f21af03dbf4f878b96f47f5fff258b4688e4d1af6b8baf5e303074c407a72c32bd16efa31b4aaed5b2fa61aa73423c792efabf4f1a1821725d83fee6650a2130e64d86edd7d2c7878920afd4e836b528fd6069e8429707860dcade1b8a543d259377e5a10d636a00848d463fca859b0bd68b12fddfae068f5e8e618b1ad7066a18e39e5382d296d1bb1ed2732b5245b47717b34f40287149c77223ad6dfa8c1d639d84836f1e7f06b61f221b60b599885beca388a1e4c9190f8e926db2b9df7317f73252d7e35", 0xd6}], 0x1)
sysctl$kern(&(0x7f0000000100)={0x1, 0x28}, 0x2, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r6)
fchmodat(r6, &(0x7f0000000240)='./file0\x00', 0x8b, 0x2)

2.449441318s ago: executing program 3 (id=58):
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ffbf, 0x0) (async)
r0 = socket$inet6(0x18, 0x4002, 0x0)
getsockopt(r0, 0x29, 0x27, 0x0, 0x0) (async)
preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/206, 0xce}], 0x1, 0xf009)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) (async)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
mknod(0x0, 0x2000, 0x33b9)
r2 = open(0x0, 0x800, 0x4ebfac6bbaf7900) (async)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x300000006}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000003c0)={0x0, 0x9, {[0xfffffbfffffffffb, 0xfffffffffffffffe, 0x0, 0x100200000, 0x6, 0x7, 0x81b, 0xffffffffffffffff, 0x0, 0x7, 0x93, 0xfffffffffffffff8, 0xfffffffffffbffff, 0x200000000002, 0xb, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff7, 0xa, 0x49f, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x200020100000001, 0x8000, 0x40000000, 0xfffffffffffffff9, 0xb, 0x411000, 0xfffffffeffffffff], [0xd, 0x1fffffffff7, 0xfffffffffffffffd, 0x4000000, 0x5, 0x8ffffffe], [{0x0, 0x8, 0x8, 0x7f}, {0x1, 0x22, 0x5, 0x586}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5}, {0x0, 0x5, 0xd9c, 0x8}, {0x0, 0x8, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0x8}, {0xe, 0x100, 0x40000001, 0xf}], {0x1, 0x8, 0x80200006, 0x1}, {0xfffe, 0x6, 0xb, 0x5}}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$DIOCRTSTADDRS(r2, 0xc0a86b02, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0x40, 0x3}, 0x0, 0x4, 0x0, 0xd, 0x8d, 0x4, 0x1, 0xc, 0x3}) (async)
socket(0x18, 0xc003, 0x3a)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1e7ba37ccd182d17) (async)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
open(&(0x7f0000000040)='./file0\x00', 0x80, 0x1c0) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BIOCSETIF(r3, 0xc0285108, &(0x7f0000000400)={'tap', 0x0}) (async)
r4 = socket(0x18, 0x2, 0x0)
connect(r4, &(0x7f0000000080)=@in6={0x1c, 0x18, 0x0, 0x40000006, "000000000000000000000000ffff0001", 0x7}, 0x1c)
fcntl$getown(r1, 0x5) (async)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)=0x7)
r5 = socket(0x2, 0x5, 0x5)
connect$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x200000e3}, 0x10)
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIOGETOWN(r6, 0x4004667b, &(0x7f00000000c0)) (async)
sendmmsg(r5, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x404)

2.447449996s ago: executing program 2 (id=61):
r0 = socket(0x2, 0x1, 0x0)
shutdown(r0, 0x2) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffff9c, 0xc01064c7, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000100)=[<r2=>0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffff9c, 0xc00464c9, &(0x7f00000001c0)={r2}) (async)
getsockname$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) (async)
ioctl$DIOCSETSYNCOOKIES(r1, 0xc0014462, &(0x7f0000000040)=0x2) (async)
ioctl$FIONREAD(r0, 0xc0287533, &(0x7f0000000140))

2.368030105s ago: executing program 5 (id=63):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
readv(r1, &(0x7f0000001740)=[{&(0x7f0000000280)=""/242, 0xf2}], 0x1)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, 0x0}, 0x40)
sendmmsg(r2, &(0x7f0000000000)={{0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0, 0xfffffffffffffff6}}, 0x42, 0x410)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000080)='\t\x00\x00\x00', 0x4)
connect(r4, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x0, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c)
getpeername$unix(r4, 0x0, &(0x7f00000000c0)=0x4d)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00')
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f0100000000000000903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0xb)
ioctl$TIOCSETA(r5, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x4, 0x6})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x20000000000002bc, &(0x7f00000000c0)=[{0x1, 0x8b, 0x5, 0x8}, {0xb1, 0x8, 0x20, 0xb00}, {0x486, 0xfe, 0x9, 0xc0000000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a80fe8000000000000000000000000000aaff020000000000000000018816fad0a6c8"])
write(r0, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe)

2.361182762s ago: executing program 2 (id=65):
r0 = semget(0x0, 0x1, 0x281)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0xa, 0x66, 0x1, 0x7}, {0x30, 0x7, 0xfe, 0xc}, {0x9b1e, 0x8, 0xf}, {0x4, 0x5, 0xef, 0x6}]})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x2, 0x6}, {0x40, 0xf, 0xd2, 0x3}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x10)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
truncate(&(0x7f00000000c0)='./file0\x00', 0x400000000000007f)
readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}], 0x1)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xfff8, 0x4, 0xe9, 0x8}, {0x4, 0xf, 0xe8, 0x9}, {0x2, 0xe2, 0xff, 0xe}]})
write(r1, &(0x7f0000000300)="f81ad3e4004800009db6a1cb4973", 0xe)
semctl$GETPID(r0, 0x0, 0x4, 0x0)
open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0xb6)
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000100)=""/173)
syz_emit_ethernet(0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="8d46e4c45991ffffffffffff86dd605f6a40004a00a90200000000000000b100000000000400ff010000000000000000000000030000000008b864000000a9baf83a91c524ab504d8229d4d00cea99ef7caf32ae4ebecaf4ce207d2ee360b7ba4359fd29430e801d5c1aef4a5a1a5bd24855bd5b54c5f613805d674033a7cbb9"])

2.360692636s ago: executing program 1 (id=67):
pipe2(0x0, 0x10004)
r0 = socket(0x2, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10070000000000", 0x8)
ioctl$FIONREAD(r0, 0x801c693d, &(0x7f00000001c0))
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x6)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r0])
sysctl$net_pipex(&(0x7f0000000c40)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, &(0x7f0000001cc0), 0x0)

2.360456938s ago: executing program 4 (id=68):
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async)
munlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

2.262264682s ago: executing program 3 (id=70):
r0 = open(&(0x7f0000000040)='./file1\x00', 0x80, 0xa0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x80008, 0xfffffff9, 0x3, 0x1, 0x44ad, 0x7fffffff, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x6})
r3 = socket(0x18, 0x3, 0x80)
sendmmsg(r3, &(0x7f0000001400)={{&(0x7f0000000080)=@in6={0x1c, 0x18, 0x3, 0x8, "98ea59710f32f1990a90af484110064d", 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7c00000001"], 0x88}}, 0x38, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
closefrom(r0)

2.261919091s ago: executing program 2 (id=71):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000140)='./file0\x00', r0, 0x1})
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d2e0b"])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x7fffffffffffffff, 0x20001fffffffd})
ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x1, 0x2, 0x2, 0x8001, 0xfffffffffffffffe, 0x6, 0x7fffffffffffffff, 0x0, 0x9, 0x800, 0x3, 0xffffffffffffffff, 0x400000008000000, 0x3, 0xa, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x6, 0x40000002, 0xa, 0xfffffffffffffffb, 0x11003, 0x4], [0xd, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffff6, 0x4], [{0xdb6e, 0x4, 0x0, 0x40007d06}, {0xfffc, 0x2, 0x5, 0x4000}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x4, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0xfffff3d8, 0x0, 0x8000000000000008}, {0x0, 0x2006, 0x40000, 0x6}, {0x6b7, 0x0, 0x10000002}, {0x0, 0x7, 0xfffffffc, 0xa}], {0x2000, 0xb, 0x8}, {0x29, 0x0, 0x4, 0x2}}})
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='r\x00')
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
r2 = kqueue()
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETA(r3, 0xc0284459, &(0x7f00000001c0)={0x44, 0x7, 0x7, 0x1, "00ecffffff0000010000000400", 0x3, 0x5})
kevent(r2, &(0x7f00000000c0), 0x56, 0x0, 0x7fff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r4 = socket(0x18, 0x3, 0x0)
r5 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r4, 0xc038694e, &(0x7f0000000100))
open(0x0, 0x18289, 0x198)
execve(0x0, 0x0, 0x0)

2.257783526s ago: executing program 4 (id=72):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000400), 0x60220, 0x0)
r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0)
connect$inet6(r1, &(0x7f0000000680)={0x1c, 0x18, 0x3, 0x0, '\x00\x00\x00\x00\b\x00', 0x1}, 0x98)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x66, 0x1, 0x7}, {0x30, 0x7, 0xfe, 0xc}, {0x9b1e, 0xfb, 0xf, 0x4}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
clock_settime(0x100000000000000, &(0x7f0000000000)={0x80000001})
minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[])
r2 = socket(0x6, 0x2, 0x0)
socket$inet(0x2, 0x1000, 0xb)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0xfffffffffffffffd, 0x2, 0x100200000, 0x200100000004, 0xaaeb, 0xa77, 0xffffffffffffffff, 0x4, 0x6, 0x95, 0xfffffffffffffff8, 0x4, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x80000001, 0xfffffffffffffffa, 0xff, 0x5e, 0x100000000007b98, 0x800, 0x6, 0x4, 0x8000000000000003], [0x8, 0x8000, 0x40000000, 0x800, 0xa, 0x11001, 0xffffffff00000000], [0xc, 0x800001fffffffffb, 0x80000001, 0x4000002, 0xfffffffffffffffa, 0x90000000], [{0x20, 0x10400000, 0x0, 0x7d06}, {0x10, 0x1e, 0x5, 0x20000000000000}, {0x9, 0x0, 0xfffefffe, 0x280}, {0xb, 0x80004, 0x5, 0xfffffffffff7ffff}, {0x101, 0x2, 0x7f, 0xc}, {0xc69, 0x2000009, 0x9, 0x1ffffffffffffffc}, {0x5, 0x0, 0xfffffff7, 0x7}, {0x1, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000004}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
connect(r3, &(0x7f0000000080)=@in6={0x1c, 0x18, 0x0, 0x40000006, "00000000000000000000000000000001", 0x7}, 0x1c)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
pread(r2, &(0x7f0000000340)="f5f8fd28698a3bbf077ae4fc6b50e0ae5162df396125192edfeaf786dd26f2c2e41e1d5bf0b3320d5823daae909779bb674f362f465de50dd11059f934b7854ce739eb51a0e7969974b83935bd12e771ec2e0895bf5d6bd90482fd357b69df88b91acf69869ae5887e310f1eb8e9a30fe1dde65628a5d3db072df7157eefdef0d5fc3ec473afde88149e7d917728edb5274c9d9c3370c9d72a12", 0x9a, 0x4)
connect$inet(r4, &(0x7f0000000480)={0x10, 0x2, 0x2, 0x56}, 0x10)
pipe2(&(0x7f0000000500)={<r5=>0xffffffffffffffff}, 0x10004)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000640)={0x9, &(0x7f00000005c0)=[{0x2d2f, 0x0, 0x7, 0x3ff}, {0x0, 0xef, 0xba, 0x6}, {0x6a8, 0x2, 0x9e, 0xe0}, {0x3, 0xa}, {0x2, 0x0, 0x4, 0x9}, {0x5, 0x8d, 0x6, 0xd06}, {0xd, 0x9, 0x8, 0x9}, {0x1e, 0xd9, 0xfa, 0x8ed6}, {0x7, 0x5, 0x2, 0x9}]})
write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mquery(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x7)
rmdir(0x0)
ioctl$BIOCGRTIMEOUT(r4, 0x4010426e, &(0x7f0000000080))
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})

2.256398805s ago: executing program 6 (id=73):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) (async)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6000000100003b020182c124b80eaba90c00d6ea67b40000ff170000000000000000000000000001"])

1.100508722s ago: executing program 6 (id=74):
ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000000))
accept4(0xffffffffffffff9c, 0x0, 0x0, 0x4000)
syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@broadcast, @random="0000c9db73f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast1}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0x6, 0x0, {0x5, 0x4, 0x1, 0x1c, 0x2, 0x66, 0x0, 0x4, 0x2f, 0x4, @local={0xac, 0x14, 0x0}, @broadcast}}}}}})
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000000), 0x4)

879.882184ms ago: executing program 7 (id=75):
r0 = socket$inet6(0x18, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0x11, "0000000000000000000000fd98000100", 0x7}, 0x1c)
r1 = socket$inet6(0x18, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0xfffffffffffffffd, 0x2, 0x100200000, 0x200100000004, 0x7, 0xa77, 0xffffffffffffffff, 0x4, 0x6, 0x95, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x80000001, 0xfffffffffffffffa, 0xff, 0x5e, 0x100000000007b98, 0x800, 0x6, 0x0, 0x7fffffffffffffff], [0x8, 0x8000, 0x40000000, 0x800, 0xb, 0x11001, 0xffffffff00000000], [0xc, 0x800001fffffffffb, 0x80000001, 0x4000002, 0xfffffffffffffffa, 0x90000000], [{0x20, 0x10400000, 0x0, 0x7d06}, {0x2, 0x1e, 0x5, 0x20000000000000}, {0x9, 0x0, 0xfffefffe, 0x280}, {0xb, 0x80004, 0x5, 0xffffffffffffffff}, {0x8, 0x2, 0x7f, 0xc}, {0xc69, 0x2000009, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0x1, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}})
r2 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0xc2)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c})
r3 = syz_open_pts()
close(r3)
syz_open_pts()
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
sysctl$kern(&(0x7f0000000100)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="05000000", 0x4)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000480)={0xf66b, 0x7, 0xfffbfffb, 0x5ffbfb5b, "420067177c030000c4000000002100", 0x5, 0x5})
r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x10, 0x11)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
writev(r3, &(0x7f0000000340)=[{&(0x7f00000009c0)="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", 0x6c7}], 0x1)
ioctl$FIONREAD(r2, 0x8020691f, &(0x7f00000001c0))

879.196808ms ago: executing program 1 (id=76):
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
fcntl$setstatus(r0, 0x4, 0x6365914bee2f76bf) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f00000002c0)={0x10, 0x2, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x81}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xb}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x815}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xc44}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x9}, {&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x100000009}, {&(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x87}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x52ed}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x2}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x486}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f000020a000/0xa000)=nil, &(0x7f00001fe000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x4}, {&(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x22a93509}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, 0xca00000000000000}], './file0\x00', 0xff, 0xf32, 0x2, 0x9, [0x3, 0xffffffff, 0x1, 0x98, 0xc, 0x9, 0x8, 0xf810, 0x9, 0x0, 0x6, 0x9, 0x4, 0x6, 0x6, 0x4d, 0x248c3011, 0x400, 0x1, 0x7fff, 0x6, 0x5, 0x1, 0x2, 0x2, 0x7, 0x7, 0x7f, 0x3, 0x5, 0x2, 0x6, 0xffffffff, 0x5, 0x7, 0x4, 0x200, 0x8, 0x7ff, 0x8, 0x10001, 0x400, 0xffff, 0xffcb, 0x0, 0x10, 0x9, 0x4, 0xe, 0x3, 0x0, 0x4000, 0x6, 0x7ff, 0x9, 0x8001, 0x9, 0x1, 0x0, 0x8, 0x3, 0xffff, 0x4c1, 0xff, 0x8, 0xb4ce, 0x4, 0xff, 0xb1b, 0x3, 0x7, 0xffff, 0x10, 0x6d, 0x6, 0xc, 0x800, 0x0, 0x1, 0x80000000, 0xfffffe01, 0x235, 0x2, 0x10, 0x6, 0x8, 0xff, 0x87, 0xd0e491c, 0xb1b3, 0x6, 0xb081, 0x7, 0x7, 0xad6, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x3, 0x80000000, 0x3a68, 0x3, 0x1, 0x5, 0x500000, 0x9, 0x120, 0x0, 0x1d, 0xea, 0x6, 0x8, 0xfff, 0x5, 0x0, 0x5, 0x5, 0x5, 0xf7c, 0x1, 0x4, 0x4, 0x0, 0x3, 0x0, 0x8, 0x761, 0x1, 0x3, 0xee9b, 0x8000001, 0x9, 0x101, 0x400, 0x8, 0x8, 0xffff8001, 0x9, 0xc70, 0x4, 0x2, 0x0, 0x7fffffff, 0x1, 0x5, 0xa, 0x8, 0x1, 0x0, 0xd, 0x80000000, 0x4, 0xffffffff, 0x7fffffff, 0x9000, 0x274, 0xe, 0x9, 0x7, 0x5, 0xfffffffc, 0x800, 0x1, 0x6, 0x1, 0xf2d, 0x2313, 0x3, 0x3, 0xad, 0x10, 0x9, 0x3, 0x694, 0x7, 0xb, 0x3, 0x0, 0x3, 0xb, 0x8, 0x6, 0x8, 0x7, 0xc2b, 0x1, 0x100, 0x1000, 0xf0, 0x80008000, 0x9, 0x7fff, 0x7, 0x3fd4adb4, 0xff, 0x4, 0x0, 0x2, 0x5, 0x1, 0x5, 0x1, 0x0, 0x7, 0x7, 0x1, 0x8, 0x7, 0x5, 0x6, 0x8, 0x1000, 0x2, 0x1, 0x6, 0x3, 0x19490d64, 0x9, 0x8, 0xfffffff8, 0xe, 0xb6, 0x6, 0x0, 0x8001, 0x401, 0x0, 0x2, 0xf, 0x9, 0x9, 0x10000, 0x7, 0x4, 0x1, 0x10000, 0x200, 0x1000, 0x7, 0x9c, 0x48, 0x100, 0x5, 0x80000001, 0x8, 0x5, 0x6, 0xffffffff, 0x10, 0x7, 0x8, 0x9, 0x10000, 0x10004, 0x6, 0x3, 0xc, 0xffff7fff, 0x0, 0x6e19, 0x75e, 0x1, 0x1, 0x4, 0xfffffc00, 0x74000000, 0x10000, 0xffffffff, 0x1, 0x8fd, 0x5, 0x5, 0x10000, 0x9, 0x48, 0x10001, 0x2519, 0xfff, 0x7fff, 0x3ff, 0x3, 0x9, 0x5, 0x10, 0x1, 0x493, 0x7000000, 0x100, 0x3, 0x0, 0x6, 0x4, 0x8, 0x10001, 0x77205600, 0x1, 0xffffffff, 0x6, 0x6, 0x1, 0x2, 0x8, 0x4, 0x46, 0x1, 0x6, 0xebeb, 0x7ff, 0x4d6, 0x2, 0x1, 0x7, 0x383, 0x3, 0x101, 0x0, 0xa265, 0x4, 0x100, 0x0, 0x4, 0x20000001, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x8, 0xffffffff, 0x1, 0x200, 0x3, 0x2, 0x8, 0x3, 0x9, 0x7, 0xbd8e, 0xd10e, 0x4, 0x9, 0x6, 0x0, 0x2, 0x40, 0x95f9, 0x6, 0x5, 0xfdf, 0x4, 0xe, 0x400, 0x6, 0x1001, 0x8, 0x3, 0x3, 0x7fffffff, 0x7, 0x8002, 0x0, 0xbdb3, 0x1ff, 0xffffffff, 0x7, 0x9, 0x9e4, 0x5, 0x5, 0x4000000c, 0x800, 0x8, 0x6, 0x9, 0x6d3b, 0x6, 0x0, 0x0, 0x5d, 0x90b9, 0x0, 0x5df, 0x80, 0x6, 0x6, 0x381, 0x800, 0x8, 0xd, 0x9, 0x35, 0x8, 0x8000, 0x0, 0x14, 0x10001, 0x7, 0x401, 0x0, 0x80000001, 0x4, 0x4, 0x1, 0x80006, 0x1, 0x7, 0x80, 0x565d6e35, 0x2c37, 0xf0, 0xffffffff, 0x7, 0x3, 0xadd, 0x7, 0x5, 0x80010000, 0x4, 0x7, 0x22, 0x20b, 0x0, 0x700, 0x401, 0x7, 0x9, 0x40, 0x2, 0x6, 0x6, 0x7, 0x7, 0xffff7fff, 0x1, 0x0, 0x1, 0x6af5, 0x6, 0x7, 0x10, 0x1, 0xfffffff9, 0x8, 0x2, 0x3, 0x6, 0x9, 0xe, 0x4, 0x7, 0x4, 0x592, 0x5, 0x9, 0x6, 0x401, 0x7, 0x3, 0xffffffff, 0x55f3, 0x16, 0x3, 0x0, 0xfffffe00, 0x3ff, 0x3, 0xffffffff, 0x80, 0x2, 0x4eed, 0x3, 0x8, 0x3, 0x4, 0x83, 0x7073e5a8, 0x4, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0xf, 0x5, 0x7, 0x1, 0x6, 0x0, 0x0, 0x1, 0xffffad64, 0x101, 0x7, 0xc5, 0x5d5b, 0x2, 0x5, 0x3ff, 0x6, 0x7fffffff, 0x3ab, 0x80, 0x800081, 0x7, 0x8, 0x9, 0x4, 0x25f5a4a4, 0x80]}) (async)
ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffffff, 0x80245753, &(0x7f0000000040)={0x3, './file0\x00', './file0\x00'}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async)
sysctl$kern(&(0x7f00000002c0)={0x1, 0x48}, 0x2, &(0x7f0000000300)="d5abcb47c0e5", &(0x7f0000000380)=0x6, &(0x7f00000003c0)="c464b9b3", 0x4) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BIOCSETIF(r1, 0xc0285108, &(0x7f0000000400)={'tap', 0x0})
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000300)={{0x0, 0x6347}, {0x0, 0xffffffffffffffff}}, 0x2f)

759.908533ms ago: executing program 7 (id=77):
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x9, 0x2, 0x1, 0x2, "cd00220004000000000000000000000000008000", 0x40048003, 0x6})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x9d6)
open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4)
socket$unix(0x1, 0x1, 0x0)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = kqueue()
r2 = accept$inet6(r0, &(0x7f0000000440), &(0x7f0000000480)=0x1c)
listen(r2, 0x0)
kevent(r1, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x13, 0x80}, {{r0}, 0xffffffffffffffff, 0x62}], 0x6, 0x0)
select(0x0, 0x0, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180))
r3 = syz_open_pts()
syz_open_pts()
syz_open_pts()
lseek(r3, 0x2, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0xae, 0x4, 0x100000000, 0xc8}, {{}, 0xfffffffffffffff6, 0x8, 0xe97adb715d25d342, 0x6, 0x4}], 0x1, 0x0, 0x80000000, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffe, 0x6, 0x2, 0x100200000, 0x400000000001, 0x81, 0xa77, 0xffffffffffefffff, 0x7, 0x3, 0x2, 0x9, 0x3, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x1, 0x7, 0x2, 0x5e, 0x100000000007b98, 0x800, 0x6, 0x2, 0x7fffffffffffffff], [0x20000fffffffe, 0x8000, 0x40000000, 0x6, 0xb, 0x11001, 0x128], [0xc, 0x800001fffffffffb, 0x80000005, 0x4000002, 0xbffffffffffffffa, 0x90000000], [{0x20, 0x10410000, 0x4, 0x7d06}, {0x402, 0x1e, 0x5, 0x20000000000007}, {0xd, 0x0, 0xfffefffb, 0x280}, {0xb, 0x80004, 0x5, 0xffffffffffffffff}, {0x2, 0x2, 0x4, 0xc}, {0x3, 0x2000009, 0x9, 0x2000000000000000}, {0x7, 0x0, 0xfffffff7, 0xb}, {0xa, 0x104, 0x1, 0xfffffffffffffffc}], {0x1, 0x800008, 0x80000006, 0x3}, {0xfbfe, 0x16, 0x6d1, 0x6}}})
r4 = kqueue()
kevent(r4, &(0x7f0000000000), 0x96, &(0x7f0000000340), 0xfffa4961, 0x0)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0)
ioctl$TIOCSETA(r5, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6})
open$dir(&(0x7f00000000c0)='.\x02/file0\x00', 0x10, 0x135)
rename(&(0x7f0000000000)='.\x02/file0\x00', &(0x7f0000000040)='.\x02/file0/file0\x00')

759.065548ms ago: executing program 5 (id=79):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x3, 0x2}, {0x0, 0xfffffffc}, {0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x1, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x3, 0x2000000}, {0x0, 0x3}, {0x3, 0x918}, {0x1, 0xfffffffc}, {0x1}, {0x0, 0x3}, {}, {0x1, 0x7}, {0x2, 0x3}, {0x3}, {0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x57fd}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r1 = socket$inet(0x2, 0x1, 0x6)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100))
fcntl$setstatus(r0, 0x4, 0x40)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})

617.235601ms ago: executing program 0 (id=81):
clock_getres(0x4, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000000029, 0x3d, &(0x7f0000000040)="00fb534f", 0x4)
clock_settime(0x3, &(0x7f0000000000)={0x5, 0x1}) (async)
clock_settime(0x3, &(0x7f0000000000)={0x5, 0x1})

617.002515ms ago: executing program 3 (id=82):
r0 = socket(0x2, 0x1, 0x0)
shutdown(r0, 0x2)

616.720229ms ago: executing program 1 (id=83):
poll(0xffffffffffffffff, 0x0, 0xffd)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
poll(0xffffffffffffffff, 0x0, 0xffd) (async)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async)

571.368845ms ago: executing program 6 (id=84):
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x19e) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x19e)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) (async)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9)
ioctl$TIOCFLUSH(r1, 0xc0187009, &(0x7f0000000080))
getgroups(0x4, &(0x7f0000000080)=[0xffffffffffffffff, <r2=>0x0, 0xffffffffffffffff, 0x0])
fchownat(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r2, 0x2)
truncate(&(0x7f0000000300)='./file0\x00', 0xf)

570.597262ms ago: executing program 7 (id=85):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff}) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x8, 0xffeffffc, 0x7fff, 0x4, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200}) (async, rerun: 64)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) (rerun: 64)
connect$inet(r1, &(0x7f0000000180)={0x10, 0x2, 0x3, 0xf28}, 0x10) (async)
r2 = open(&(0x7f0000000ec0)='./bus\x00', 0x10000, 0x1d654c1f2e55442f)
ioctl$DIOCGETSTATUS(r2, 0x8004630b, &(0x7f0000000f80)) (async)
mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x90) (async)
setsockopt(0xffffffffffffffff, 0x180, 0x6, &(0x7f0000000100)="72941cf9bbec606dd8f438af0740368bf7aad8e4e9cb8b0606281cbf07456e1a46b5f90642fdb87a09057de2c4b264bc0c2ea1d0c826164fa46d430e58941a5e134371d93f4fc7bb95adbf76b17075c9fdf5c707b86c9d236993bce294fc1bcae3dfb1e93462239520191f83b6be2d9fae0408a471459dc510c09efd385ebd9a54184f0773daaeeba058537b68a737f2f64fc181618de4ed6f68705c2611a66080de78b438383cd3f3e15279efea54daa2cad0f83e82f1cf6159632dbf3e02a0846ad0f6686c3a4d76dd", 0xca) (async)
socket(0x10, 0x4000, 0x2)
openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async, rerun: 64)
r3 = syz_open_pts()
close(r3) (async)
syz_open_pts() (async)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x8}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x5, 0x1, 0x6, 0x8bfd}, {0x800, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]})
poll(&(0x7f0000000000), 0x35, 0x0) (async)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) (async)
mknod(0x0, 0x2000, 0xd02)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0xa, 0x1, 0x7, 0x10, [{0x3ff, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x30000000}, {0x100806, 0xffffffff, 0x4, 0x6}, {0x2, 0x0, 0x200, 0x6}, {0x7ff, 0x3, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0x1, 0xb}, {0x0, 0x7, 0x31, 0xb}, {0x5, 0x4, 0x8002, 0x1}, {0xa44d, 0xfffb, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0x80, 0x8}, {0x2000df, 0x9, 0x15, 0x9}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x3, 0x4}, {0xd15, 0xd655, 0x400003, 0x6}]}) (async, rerun: 32)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x1, 0x6, 0xf, 0x1, 0x80000001, 0x50001, 0x0, 0x0, 0x0, 0x8000000000000008, 0xbf}) (async, rerun: 32)
socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r4 = socket(0x18, 0x3, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0)
r5 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480))
sendto$unix(r5, &(0x7f0000000500), 0x0, 0x408, 0x0, 0x0) (async, rerun: 32)
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32)
close(0xffffffffffffffff)

570.290361ms ago: executing program 0 (id=86):
ioctl$AUDIO_START(0xffffffffffffffff, 0x20004126)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
fcntl$setstatus(r0, 0x4, 0x40)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
pwrite(r0, &(0x7f00000000c0)="a7", 0x1, 0x40007)

569.870295ms ago: executing program 4 (id=87):
setuid(0xee01) (async)
setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a})
r0 = syz_open_pts()
close(r0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
socket(0x18, 0x3, 0x0) (async)
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f0000000380)) (async)
r1 = socket(0x18, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x80206932, &(0x7f0000000100)) (async)
r2 = syz_open_pts() (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0096608b28a8fa4256ce585c76462106b8e512c7396f7d94dfae661ba1aec27f948c2971ce36bd9a9c15c0faba04a42ffbd4c0409a1826869e167a3ef8945780fe188a9d5d16e8dffa2b9d14a25c3ce90b5255b63d6e194f59032c0cb6c2b764d48c54da16d4df03", 0x4e}], 0x1) (async)
writev(r0, &(0x7f0000000240), 0x0) (async, rerun: 32)
execve(0x0, 0x0, &(0x7f0000000500)) (async, rerun: 32)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000240)={0x400, 0x8, 0x5, 0x9000001, "91492ff6bd5300", 0x6}) (async)
kevent(0xffffffffffffffff, 0x0, 0x3ff, 0x0, 0x80007fd, 0x0) (async)
syz_open_pts()
setsid()
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r3 = syz_open_pts()
close(r3)
syz_open_pts() (async)
ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5) (async)
select(0x40, &(0x7f0000000140)={0x9, 0x80, 0x3ff, 0x8000000000000001, 0x5, 0x21e0, 0x7ffffffffffffffe, 0xfffffffffffffffa}, 0x0, &(0x7f0000000200)={0x8000000000000004, 0x8000000000000000, 0x5, 0x401, 0x1, 0x2, 0x1, 0xfffffffffffffffd}, 0x0)
ioctl$TIOCSCTTY(r2, 0x20007461) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
ioctl$TIOCFLUSH(r3, 0x80047410, &(0x7f0000000040)) (async, rerun: 64)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (rerun: 64)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc0) (async)
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0xfffff89c, &(0x7f0000000180)=[{{0xffffffffffffff9c}, 0xffffffffffffffff, 0x97, 0x80, 0x0, 0xfffffffffffffffd}, {{r4}, 0xfffffffffffffffc, 0x46, 0x0, 0x84}], 0x6, 0x0)

347.148586ms ago: executing program 7 (id=88):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x8}, 0x0, 0x0, 0x0)
close(0x3)
r0 = socket(0x6, 0x3, 0xff)
setsockopt(r0, 0x1000000000029, 0xb, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4)
sendmmsg(r0, &(0x7f00000000c0)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x7, "ff0116ff000000000000000000000004"}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x608)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

346.674335ms ago: executing program 0 (id=89):
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000000)={&(0x7f0000000180), 0x2b})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0)
r1 = msgget$private(0x0, 0x43)
msgsnd(r1, 0x0, 0x0, 0x0)
stat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000040)=0xc)
setresgid(0x0, 0x0, r4)
lstat(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getegid()
setresgid(r6, r6, 0x0)
setresgid(0x0, r6, 0x0)
r7 = getpgrp()
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
fcntl$lock(r8, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x20001fffffffd})
r9 = fcntl$getown(0xffffffffffffffff, 0x5)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000540)={{r2, r4, r5, r6, 0x2c, 0xb, 0x0, 0x0, 0xa12b}, 0x0, 0x0, 0x3, 0x40, 0x9a, r7, r9, 0x1a5, 0x0, 0x0, 0x0, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
open(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0xb2)

346.397466ms ago: executing program 2 (id=90):
r0 = socket(0x10, 0x4, 0x0)
openat$tty(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r0, 0x80606949, &(0x7f00000001c0))
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x10004)

346.012718ms ago: executing program 6 (id=91):
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={0x0, r0})
getgroups(0x7, &(0x7f0000000000)=[0x0, <r1=>0x0, 0x0, 0xffffffffffffffff, <r2=>0x0, 0x0, 0x0])
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0)
r3 = syz_open_pts()
flock(r3, 0x1)
fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x300, 0x100000001})
syz_open_pts()
sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000204}, 0x4, 0x0, 0x0, 0x0, 0x0)
syz_open_pts()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffffb8)
setresgid(r1, r2, 0x0)
setegid(0x0)
r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fchownat(r4, &(0x7f00000001c0)='./file1\x00', 0x0, r2, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
setresgid(0x0, r6, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37)

223.682667ms ago: executing program 1 (id=92):
openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0)
r0 = kqueue()
getgroups(0x7, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0])
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x407ff, 0xfffffffb, 0x3, 0x101, 0xa, 0x1, 0x3, 0x10, [{0x402, 0xfe3, 0xffffff26, 0x71803}, {0xfffffffd, 0x700b7fe, 0x800002, 0xa}, {0x100806, 0xffffffff, 0x4, 0x2}, {0x2, 0x0, 0x200, 0x6}, {0x4, 0x3, 0x80000000, 0x8}, {0xfa6, 0x47fff, 0x84, 0x4}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfcf0, 0xb}, {0x1000, 0x7, 0x31, 0xb}, {0x5, 0x4, 0x8002, 0x1}, {0xa44e, 0xfffb, 0xa38bfff, 0xe1}, {0x80000cb, 0x2, 0x80, 0xa}, {0x2000df, 0x9, 0x7ff, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x7fffff, 0x4}, {0xd15, 0x3, 0x400003, 0x6}]})
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007", 0xd, 0x2, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609907a600302c03cb69ff02000000000000000000000000000102009078000000036900de000006160600000000000000000000000000000000fe80ff3e726defbd0410aedb00000000000000000000000000bb78a6"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000080086dd60db8344ffb10608feff0000010000ff80f144000020080000000000000000b8eddb001500000000008ff954af4e2209189078037f3cd2"])
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x194d, 0x0, 0x2f)
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xfffffffb, 0x2800c1, 0xf, 0x0, 0x1040807, 0x5, 0xfffffff9, 0x0, 0x0, 0x6, 0x20000000000000})
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100))
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0x5, 0xfffffffffffffffd, 0x2, 0x100200000, 0x200100000004, 0x1, 0xa77, 0xffffffffffffffff, 0x4, 0x6, 0x95, 0xfffffffffffffff8, 0x0, 0x200000000002, 0x11, 0x1000004, 0xfffffffffffffffe, 0x400000000100], [0xb, 0x80000001, 0xfffffffffffffffa, 0xff, 0x5e, 0x90000000000, 0x800, 0x6, 0x0, 0x1], [0x8, 0x9, 0x40000000, 0x80000001, 0xc, 0x11001, 0xffffffff00000000], [0xc, 0x800001fffffffffb, 0x80000001, 0x3, 0xfffffffffffffffa, 0x90000000], [{0x20, 0x10400000, 0x1, 0x7d06}, {0x2, 0x1e, 0x5, 0x20000000000000}, {0x9, 0x0, 0xfffefffe, 0xbc63}, {0x7, 0x80004, 0x5, 0xffffffffffffffff}, {0x8, 0x2, 0x7f, 0xe}, {0xc65, 0x2000009, 0x9, 0x2000000000000000}, {0x5f6, 0x0, 0xfffffff7, 0xb}, {0x1, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}})
kevent(r0, &(0x7f0000000000), 0x96, &(0x7f00000004c0), 0x7ffa4960, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r4, 0xcd604404, &(0x7f0000000000)={0x1, 0x2, 0x7, 0x3f, "201800", 0xfffffff9, 0x40000002})

223.374584ms ago: executing program 2 (id=93):
mknod(&(0x7f0000000000)='./file0/file0\x00', 0x5be3fb02ba61d4fd, 0x1e5f)
setuid(0xee01)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c)

222.638246ms ago: executing program 6 (id=94):
sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, &(0x7f0000000240), 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
mkdir(&(0x7f0000000000)='./file2\x00', 0x9c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x44)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='./file2\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4)

221.40985ms ago: executing program 0 (id=95):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4)
sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x10}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random="e04b1c561ac4", [], {@ipv6={0x86dd, {0x0, 0x6, "000001", 0x0, 0x3b, 0x2, @rand_addr="0182c124b80eaba90c00d6ea67b400", @mcast2}}}})

80.243908ms ago: executing program 1 (id=96):
r0 = socket(0x18, 0x1, 0x0)
close(r0)
socket(0x24, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f0000000040)="0128d1eb17c4ca62de2fa058d80dba9180c2a16cf12095dcc1216a33782bcefd16", 0x21, 0x6, 0x0, 0x0)
getpeername(r0, &(0x7f0000000080)=@un=@abs, &(0x7f00000000c0)=0x8)
setsockopt(r0, 0x6, 0x41, &(0x7f0000000280), 0x1c)
socket(0x18, 0x1, 0x0) (async)
close(r0) (async)
socket(0x24, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
sendto$unix(r1, &(0x7f0000000040)="0128d1eb17c4ca62de2fa058d80dba9180c2a16cf12095dcc1216a33782bcefd16", 0x21, 0x6, 0x0, 0x0) (async)
getpeername(r0, &(0x7f0000000080)=@un=@abs, &(0x7f00000000c0)=0x8) (async)
setsockopt(r0, 0x6, 0x41, &(0x7f0000000280), 0x1c) (async)

68.718046ms ago: executing program 5 (id=97):
r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x8}, {r1, 0x80}], 0x2, 0x9)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8)
r2 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setuid(0xee01)
chflagsat(r2, &(0x7f00000001c0)='./file0\x00', 0x10001, 0x0)

19.221611ms ago: executing program 6 (id=98):
r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x787, 0x7ff, 0x3, 0x1, 0x40ad, 0x7fffffff, 0x100007, 0x2, 0x2, 0xfffffffffffffffe, 0x3ff})
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
closefrom(r0)
r3 = socket$inet(0x2, 0x1003, 0x9)
connect(r3, &(0x7f0000000040)=@un=@file={0x7, 0x0, './file0\x00'}, 0xa)

9.869758ms ago: executing program 0 (id=99):
readv(0xffffffffffffff9c, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000140)=""/100, 0x64}], 0x3)
r0 = syz_open_pts()
socket(0x21, 0x8000, 0x7)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080})
syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806000108000604000aaaaaaaaaaabb00000000aaaaaaaaaabbac1400aad2d9bb4c236d827ac6d7eff3f6d0e32fae79ac651792cb1be5b31f58e6506e78cd9c5fe41da5a86915b69912da323ebe7ea676872c7c7a470b41ea8d39db6ed9939ea3d3f414ff109ae6ba79ac00abadebe2a744254714bb6856708596e3f7d7adfc57844528b63a8c9ef455b322611c6ac4878a56dae572075b3772432e7ae0dc68f3731186b8a076a697fc4836fcec130e5c517efbd4d2b468d8e76a48dffbbf88956a1612e670fb4cce26ca99ab5ace8be51935b1"])
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x100000001})

9.339128ms ago: executing program 2 (id=100):
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000080)={0x0, 0x3, <r0=>0xffffffffffffffff, 0x0, 0x10000})
mkfifoat(r0, &(0x7f00000000c0)='./file1\x00', 0x6)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff})
r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
fsync(r1)
closefrom(r1)
mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2)

1.655803ms ago: executing program 0 (id=101):
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000080)='./file0\x00', 0x8}) (async)
lseek(r0, 0xd, 0x1) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
bind(r0, &(0x7f0000000140)=@un=@abs={0x8, 0x1, 0x0, 0x1}, 0x8) (async)
bind$unix(0xffffffffffffff9c, &(0x7f0000000180)=@file={0xfa, 0x0, './file0\x00'}, 0xa) (async)
rmdir(&(0x7f00000001c0)='./file0\x00')
ioctl$DIOCSETTIMEOUT(r1, 0xc008441d, &(0x7f0000000200)={0xd, 0x4}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000240)={0x0, 0x1, <r2=>0xffffffffffffffff, 0x0, 0xbd2})
getdents(r2, &(0x7f0000000280)=""/38, 0x26) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01864c1, &(0x7f00000002c0)={0x0, 0x1, <r3=>0xffffffffffffffff, 0x0, 0x1})
connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x1, 0x0, 0x1}, 0x8)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r3, 0xc028575d, &(0x7f0000000340)={0x3ff, 0x6, './file0\x00', 0x6be6, 0x8c4b, 0x3, 0xff}) (async)
r4 = openat$dri(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dri/renderD128\x00', 0x800, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x2000641e) (async)
listen(r3, 0x7) (async)
sysctl$kern(&(0x7f00000003c0)={0x1, 0x12}, 0x2, &(0x7f0000000400)="919843036f40eea3dcadf39ba291a9ca20667dd37279d11e17d91b61237e0f7261d718b5644aa27cc515c5e6d40c61085dae1857ab5e843a9d7e874eba", &(0x7f0000000440)=0x3d, &(0x7f0000000480)="f8bbd5bcd02eff057ecc06e4802ecd3c94f6469ebd67331c7a3a3cc1ad96a14a3e2e68677767853cda570b94f03e4a3143a902f9d6fc246c5736bb7c9086783c99b6fe6ccba6a249943aac945dca1169d1ba2666658a96ec5fc0ab03590d7300d497b9412f879458835eb0c3532569bc2a498ea5b85c37fc1368fa99dfab7ee9066c284bf0c5b3fe55de2f6db6d98c3a9728701c930bb08a8e66286519ba1ad9477c5075", 0xa4) (async)
getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000540)=""/33, &(0x7f0000000580)=0x21) (async)
socket(0x1, 0xc004, 0x2) (async)
ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000840)={0x4, 0x3, 0x5, 0xa6, &(0x7f00000005c0)=""/166, 0x96, &(0x7f0000000680)=""/150, 0xdb, &(0x7f0000000740)=""/219}) (async)
futimes(r1, &(0x7f0000000880)=[{0x9, 0x2}, {0xfffffffffffffff8, 0x9}]) (async)
fcntl$getflags(r1, 0x0)
shutdown(r3, 0x0) (async)
clock_settime(0xffffffffffffffff, &(0x7f00000008c0)={0x8, 0x80000000})
getdents(r2, &(0x7f0000000900)=""/223, 0xdf) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000a00)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000a40)={r5}) (async)
ioctl$DIOCSETLIMIT(r3, 0xc0084428, &(0x7f0000000a80)={0x2, 0xffff}) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000ac0)={0xfffff1d0, 0x3, 0x2, 0x2, 0xb, 0x92, 0x1, 0x10, [{0x4c, 0x8, 0x5, 0x6}, {0x11, 0x8, 0xf73, 0x2}, {0x3, 0x6, 0x8, 0x4}, {0x2, 0x8e3, 0x0, 0x5}, {0x1f3, 0x9, 0xe6, 0x4}, {0x6, 0x6, 0x7, 0x5}, {0x0, 0x13b, 0xffffffff, 0x80}, {0x7fff, 0xa, 0x3, 0x4554}, {0x10, 0x4, 0x1f4, 0xb}, {0x9, 0x321, 0x2, 0x4}, {0xe, 0xfffffffd, 0x0, 0x1}, {0x5, 0x5, 0x2, 0xc2f9}, {0x101, 0xfffffff2, 0x8ea9, 0x1}, {0x268915, 0x8, 0x8001, 0x3ff}, {0x1, 0x200, 0x6, 0x5}, {0x5, 0xfff, 0x1, 0x7}]}) (async)
closefrom(r1)

775.131µs ago: executing program 5 (id=102):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
getgroups(0x7, &(0x7f0000000000)=[0x0, <r1=>0x0, 0x0, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0x0, 0x0])
setresgid(r1, r2, 0x0)
setregid(0x0, 0x0)
r3 = socket(0x18, 0x3, 0x0)
setsockopt(r3, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4)
connect$inet(r3, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x1000}, 0x10)
setrlimit(0x7, &(0x7f0000000000)={0x6, 0x7})
syz_emit_ethernet(0x51, &(0x7f00000000c0)={@broadcast, @random="e04b1c561ac4", [], {@ipv6={0x86dd, {0x0, 0x6, "000300", 0x1b, 0x3b, 0x2, @rand_addr="0182c124b80eaba90c00d6ea67b400", @mcast2, {[], @generic="c5b5de5ad2f05aaf045dc2b2aba35cb91cc61ab47dd79e1fc5a5be"}}}}})
sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, &(0x7f0000000080)=0x32, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000080)={0x2, 0x3})
writev(r0, &(0x7f0000002280)=[{0x0}], 0x1)

0s ago: executing program 3 (id=103):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x8000000007, 0x1000300000080, 0xffffffffffffffff})
flock(r0, 0x1)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x920e, 0x3, 0x1, 0x8, "e53078d45d4c51000000001800bcd3ffe60c2000", 0x8, 0x8})
writev(r1, &(0x7f00000015c0)=[{&(0x7f0000000040)="68ef941cc7ea01b32660f99722bbd9ab98570c2c298de2bcb81a7b342708439294c3794f1615ec8ae38887bb410f3dfcb12fcebb91be4c2cb98f2cf6b2250f7be46b8d0d", 0x44}], 0x1)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x1, 0x2ff, 0x100000001})
ioctl$TIOCCDTR(r0, 0x20007478)
r2 = syz_open_pts()
ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
Connection to 10.128.1.104 closed by remote host.
pckbd_enable: command error

OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-a.c.syzkaller.internal) (tty00)

login: ktrace write failed, errno 27, tracing stopped
uvm_fault(0xfffffb806ccd5b90, 0x98, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff81e62248 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff80002a234f60
gsbase 0xffff80002999dff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff81e62248
Starting stack trace...
panic(ffffffff834f058c) at panic+0x1d0
kerntrap(ffff80002a234eb0) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff80003c3b8d18,fffffb806118e6d0,ffff80002a235090) at dovutimens+0x368
sys_futimes(ffff80003c3b8d18,ffff80002a2351e0,ffff80002a235130) at sys_futimes+0x208
syscall(ffff80002a2351e0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x5c650345920, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 99 3 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 303098  71500      0           0          0    0  syz-executor
*445225   7803      0         0x2          0    1  syz-executor
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7c0f125426e0, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffb806ccd5b90, 0x98, 0, 1) -> e
ddb{1}> show kasan
No such command
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7c0f125426e0, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a3026b0
rbx                                0
rdx                                0
rcx               0xffff80002a2227d8
rax                             0x32
r8                0xffff80002a3025e0
r9                0xffff80002a3022a8
r10               0xb1edc6285c08135d
r11               0x83532308037496fc
r12                                0
r13                                0
r14               0xffff80002a2227d8
r15                                0
rip               0xffffffff8105a3ee    savectx+0xae
cs                               0x8
rflags                          0x46
rsp               0xffff80002a302630
ss                              0x10
savectx+0xae:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=445225 pid=7803 tcnt=1 stat=onproc
    flags process=2<EXEC> proc=0
    runpri=86, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a222d08,0xffff800045fefcb0
    process=0xffff800045ff6b58 user=0xffff80002a2fd000, vmspace=0xfffffb800b1f73d0
    estcpu=36, cpticks=13, pctcpu=0.8, user=1, sys=11, intr=0
ddb{1}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 71500  303098  92196     0  7           0          0           syz-executor
  9211  183442  56249     0  2           0          0           syz-executor
  9211  326443  56249     0  2           0  0x4000000           syz-executor
 68909  112959   5888     0  2           0          0           syz-executor
 68909   13379   5888     0  3           0  0x4000000 sbar      syz-executor
 68909  293414   5888     0  3           0  0x4000080 fsleep    syz-executor
 74382  133124  16445     0  2           0          0           syz-executor
 74382  108230  16445     0  3           0  0x4000080 fsleep    syz-executor
 37127  260781  22014     0  2           0          0           syz-executor
 37127  198450  22014     0  3           0  0x4000080 fsleep    syz-executor
 89754  458875   8353     0  2           0        0x1           syz-executor
 89754  127292   8353     0  3           0  0x4000080 fsleep    syz-executor
 89754   99003   8353     0  3           0  0x4000080 fsleep    syz-executor
 89754  161566   8353     0  3           0  0x4000080 fsleep    syz-executor
 48337  224427  92988 60929  2      0x2010    0x80000           syz-executor
 48337  370728  92988 60929  3      0x2010  0x4000000 suspend   syz-executor
 48337  189724  92988 60929  4      0x2010  0x4080000           syz-executor
 17219   79528      1     0  3    0x100003       0x80 ttyin     getty
  8353  191580  28023     0  3         0x2       0x80 nanoslp   syz-executor
 16445  412432  28023     0  3         0x2       0x80 nanoslp   syz-executor
 92196  259246  28023     0  3         0x2       0x80 nanoslp   syz-executor
 92988  173290  28023     0  3         0x2       0x80 nanoslp   syz-executor
* 7803  445225  28023     0  7         0x2          0           syz-executor
 56249  381864  28023     0  3         0x2       0x80 nanoslp   syz-executor
 22014   34056  28023     0  3         0x2       0x80 nanoslp   syz-executor
  5888   19506  28023     0  3         0x2       0x80 nanoslp   syz-executor
 28023  443810      1     0  2         0x2        0x1           syz-executor
 77705  361602      0     0  3     0x14000      0x200 bored     smr
 56662  464664      0     0  2     0x14000      0x200           zerothread
 93553  212418      0     0  3     0x14000      0x200 aiodoned  aiodoned
 84466  342382      0     0  3     0x14000      0x200 syncer    update
 57917  252439      0     0  3     0x14000      0x200 cleaner   cleaner
 17054  112500      0     0  3     0x14000      0x200 reaper    reaper
 32492  334958      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 71450   37217      0     0  3     0x14000      0x200 bored     viomb
 46740   64167      0     0  3     0x14000 0x40000200 acpi0     acpi0
 94621  381776      0     0  3     0x14000 0x40000200           idle1
 45412  245024      0     0  3     0x14000      0x200 bored     softnet1
 53342  182819      0     0  2     0x14000      0x200           softnet0
 22648  238695      0     0  2     0x14000 0x40000200           systqmp
  1532   48011      0     0  3     0x14000      0x200 bored     systq
 26170   78706      0     0  3     0x14000      0x200 tmoslp    softclockmp
 54749  158592      0     0  3     0x14000 0x40000200 tmoslp    softclock
  9866  479504      0     0  3     0x14000 0x40000200           idle0
     1    5769      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{1}> show all locks
Process 71500 (syz-executor) thread 0xffff80002a223768 (303098)
shared rwlock uobjlk r = 0 (0xfffffb80743617d8)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvm_fault_lower_lookup+0x53
#3  uvm_fault_lower+0x89
#4  uvm_fault+0x274
#5  upageflttrap+0xa9
#6  usertrap+0x430
#7  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffb800b1f78a0)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x430
#7  recall_trap+0x8
Process 9211 (syz-executor) thread 0xffff80003c3b8020 (326443)
exclusive rwlock vmmaplk r = 0 (0xfffffb806ccd58c0)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  kpageflttrap+0x2f4
#6  kerntrap+0x19d
#7  alltraps_kern_meltdown+0x7b
#8  _copyin+0x5b
#9  ffs_write+0x769
#10 VOP_WRITE+0x101
#11 vn_write+0x1d3
#12 dofilewritev+0x2bd
#13 sys_write+0xa2
#14 syscall+0xbd4
#15 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffb806ceb1a08)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vn_write+0x18f
#6  dofilewritev+0x2bd
#7  sys_write+0xa2
#8  syscall+0xbd4
#9  Xsyscall+0x128
Process 68909 (syz-executor) thread 0xffff80003c3b8d18 (13379)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a81b00)
#0  witness_lock+0x5f1
#1  syscall+0xaf4
#2  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11044  12016K   12157K 166960K     12267        0
            pcb    18     14K      16K 166960K       115        0
         rtable   245      8K       8K 166960K       392        0
             pf    36     18K      38K 166960K        67        0
         ifaddr    42      7K       7K 166960K        49        0
        ifgroup    55      2K       2K 166960K        64        0
         sysctl     1      1K       9K 166960K         6        0
       counters    70     37K      37K 166960K       124        0
       ioctlops     0      0K       4K 166960K      1520        0
            iov     0      0K       0K 166960K         1        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1352     85K      85K 166960K      1488        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     4      0K       0K 166960K         5        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    16     61K      93K 166960K       232        0
           proc    20     33K     163K 166960K       566        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        12        0
       in_multi    95      6K       6K 166960K       110        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     1      0K       0K 166960K         6        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    43    201K     201K 166960K        43        0
           exec     0      0K       1K 166960K       441        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   127     82K     185K 166960K      3902        0
       UVM aobj     5      2K       2K 166960K         5        0
     pinsyscall    19     38K     106K 166960K      1422        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         7        0
            NDP    13      0K       2K 166960K        32        0
           temp    36   9114K    9150K 166960K     10045        0
         kqueue     3      6K      20K 166960K        40        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       40    0       40     2     1     1     1     0     8    1
rtentry    176      117    0        8     6     0     6     6     0     8    0
unpcb      144       85    0       83     1     0     1     1     0     8    0
syncache   336        4    0        4     1     1     0     1     0     8    0
tcpcb      736       32    0       31     1     0     1     1     0     8    0
arp        136       18    0        0     1     0     1     1     0     8    0
inpcb      328      196    0      194     6     4     2     6     0     8    1
nd6        152       26    0        3     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192      26    0       26     2     1     1     1     0     8    1
pfstscr     40        1    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pfstitem    24       34    0        0     1     0     1     1     0     8    0
pfstkey    128       34    0        0     2     0     2     2     0     8    0
pfstate    448       33    0        0     4     0     4     4     0     8    0
pfrule     1360      24    0       19     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      522    0       40    33     0    33    33     0     8    0
art_table   40      523    0       40     6     0     6     6     0     8    0
art_node    32      117    0       17     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        1     1     0     1     1     0     8    1
semapl      72        3    0        1     1     0     1     1     0     8    0
shmpl      112        2    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1736    0      259    93     0    93    93     0     8    0
ffsino     296     1736    0      259   114     0   114   114     0     8    0
nchpl      144     2076    0      374    64     0    64    64     0     8    0
rtmask      32        2    0        2     1     1     0     1     0     8    0
vnodes     216     1925    0        0   107     0   107   107     0     8    0
namei      1024    6492    0     6492     5     4     1     2     0     8    1
percpumem   16       78    0       27     1     0     1     1     0     8    0
kstatmem   264       33    0        6     2     0     2     2     0     8    0
scxspl     216     8756    0     8756     5     3     2     3     1     8    2
plimitpl   152       38    0       26     1     0     1     1     0     8    0
sigapl     424      559    0      524     7     1     6     7     0     8    0
knotepl    120      267    0        0     9     0     9     9     0     8    0
kqueuepl   224       50    0       46     1     0     1     1     0     8    0
pipepl     344      134    0      107     3     0     3     3     0     8    0
fdescpl    528      543    0      524     3     0     3     3     0     8    0
filepl     160     2239    0     2075    10     0    10    10     0     8    0
lockfpl    104       55    0       55     1     0     1     1     0     8    1
lockfspl    48       26    0       26     1     0     1     1     0     8    1
sessionpl  144       32    0       29     1     0     1     1     0     8    0
pgrppl      48       41    0       30     1     0     1     1     0     8    0
ucredpl    104      207    0      203     1     0     1     1     0     8    0
zombiepl   144      547    0      547     2     1     1     1     0     8    1
processpl  1232     559    0      524     5     0     5     5     0     8    0
procpl     664      726    0      681     5     0     5     5     0     8    0
sockpl     752      326    0      321     8     5     3     8     0     8    1
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       1    0        0     1     0     1     1     0     8    0
mcl4k      4096     121    0        0    16     0    16    16     0     8    0
mcl2k      2048      27    0        0     4     0     4     4     0     8    0
mextrefs    64       27    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      160    0        0    10     0    10    10     0     8    0
bufpl      272     4181    0      105   272     0   272   272     0     8    0
anonpl      32     4973    0        0    41     0    41    41     0   247    0
amapchunkpl 152   11185    0    10835    21     5    16    21     0   158    1
amappl16   200     1592    0     1567     6     4     2     5     0     8    0
amappl15   192       86    0       86     1     1     0     1     0     8    0
amappl14   184      453    0      452     1     0     1     1     0     8    0
amappl13   176      211    0      210     1     0     1     1     0     8    0
amappl12   168      799    0      782     2     0     2     2     0     8    0
amappl11   160       11    0       11     1     1     0     1     0     8    0
amappl10   152       64    0       64     1     1     0     1     0     8    0
amappl9    144      275    0      275     1     1     0     1     0     8    0
amappl8    136      100    0      100     1     1     0     1     0     8    0
amappl7    128      148    0      146     1     0     1     1     0     8    0
amappl6    120      154    0      154     1     1     0     1     0     8    0
amappl5    112      101    0      101     1     1     0     1     0     8    0
amappl4    104      310    0      305     1     0     1     1     0     8    0
amappl3     96     1990    0     1929     3     0     3     3     0     8    0
amappl2     88      716    0      693     2     0     2     2     0     8    0
amappl1     80    11003    0    10888    15    10     5    15     0     8    0
amappl      88     3092    0     2979     4     0     4     4     0    92    0
uvmvnodes   80       99    0        0     3     0     3     3     0     8    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72        4    0        0     1     0     1     1     0     8    0
uaddrrnd    24      543    0      524     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      543    0      524     1     0     1     1     0     8    0
vmmpekpl   168     6435    0     6402     2     0     2     2     0     8    0
vmmpepl    168    43842    0    43005    86    46    40    86     0   357    0
vmsppl     488      542    0      524     5     1     4     5     0     8    0
rwobjpl     80    15499    0    15080    25     4    21    24     0     8    0
pdppl      4096    1093    0     1048   101    54    47    85     0     8    2
pvpl        32     9117    0        0    74     0    74    74     0   265    0
pmappl     256      542    0      524     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      557    0       64    15     0    15    15     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff839d6ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83a81300) at __mp_lock+0x192
softintr_dispatch(2) at softintr_dispatch+0x125
dosoftint(2) at dosoftint+0x54
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff83a81300) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x125
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff83a81300) at __mp_lock+0x192
syscall(ffff80002a282820) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7da9dbe6a710, count: 1
ddb{0}> trace
x86_ipi_db(ffffffff839d6ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83a81300) at __mp_lock+0x192
softintr_dispatch(2) at softintr_dispatch+0x125
dosoftint(2) at dosoftint+0x54
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff83a81300) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x125
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff83a81300) at __mp_lock+0x192
syscall(ffff80002a282820) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7da9dbe6a710, count: -14
ddb{0}> machine ddbcpu 1
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7c0f125426e0, count: 14
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7c0f125426e0, count: -1
ddb{1}>