last executing test programs:

5.542117426s ago: executing program 5 (id=3383):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x1, 0x8}], 0x10}, 0x0) (async)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="42bd8049c214041324", 0x9}], 0x1, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async)
r3 = socket(0x800000018, 0x1, 0x0)
getsockname$unix(r3, 0x0, &(0x7f00000010c0)) (async, rerun: 64)
r4 = kqueue() (rerun: 64)
accept$inet(r3, 0x0, &(0x7f0000000580))
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x0, 0xfffffffd}, {0x1, 0xa}, {0x2}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async, rerun: 64)
r5 = dup2(r4, r3) (rerun: 64)
ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x5e, &(0x7f00000001c0)='./file0\x00', 0x8})
execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000280)='\'\\,\x00', &(0x7f00000002c0)='\'-\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\\*]-\x00', &(0x7f00000003c0)='{,$\x00', &(0x7f0000000400)='\'-)\x00'], &(0x7f00000005c0)=[&(0x7f0000000480)='}%)\\)-\\&)\x00', &(0x7f0000000500)='$!-\x00'])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

4.517420524s ago: executing program 4 (id=3415):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000080)})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
fchflags(r0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="ec68258bb3ad477307e429000000fb7a8c653dd0496612451637425a14c314028e4965e3a142988e6eb4129210a293a21b27d2307c", 0x35}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000300)="e15a79c7de1e2c6bf7635a54862902af05fa112d7df2cc2f55ee5a9da407454c098507911cdce2e8d2498b4317040000000095aec9653f6fba00cc0000", &(0x7f0000000080)=0x3d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f00000000c0)={0xc9b})
r1 = shmget$private(0x0, 0x3000, 0x411, &(0x7f00006ca000/0x3000)=nil)
r2 = getuid()
setreuid(0x0, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}})
r5 = fcntl$getown(r0, 0x5)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={<r6=>0x0}, 0xc)
shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x5, r2, r4, 0x0, 0xffffffffffffffff, 0x102, 0x7}, 0x801, 0x8, r5, r6, 0x2, 0x0, 0xc})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])

4.512605644s ago: executing program 4 (id=3416):
getrusage(0xffffffffffffffff, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'})
execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0)
socket(0x18, 0x3, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000080)="87ffbcd1c32aa24c86ba59a7b41d342fb10637b26f41", 0x16}], 0x1, 0x5)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000200)={0x2, 0x278})
execve(0x0, 0x0, 0x0)

4.349454898s ago: executing program 4 (id=3420):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{}, {0x2}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8)
sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100)="688b20b5", &(0x7f00000001c0)=0x4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc1", 0x2}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

4.217216098s ago: executing program 4 (id=3422):
r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x40, 0x95)
mknodat(r0, &(0x7f0000000100)='./bus\x00', 0x8, 0x7)
open(&(0x7f00000000c0)='./bus\x00', 0x20, 0x154) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) (async)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async)
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) (async)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
fcntl$lock(r2, 0x9, &(0x7f0000000280)={0x0, 0x1, 0x3b5, 0x1000381210089}) (async)
fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x3, 0x300, 0x4c1, 0x369000000, 0xffffffffffffffff})
mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) (async)
link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00')
semget(0x1, 0x3, 0x95)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
r3 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154)
write(r3, 0x0, 0x0)
getrlimit(0xb6cd6b62ad06a5ce, &(0x7f0000000040))

4.148493764s ago: executing program 4 (id=3426):
r0 = socket(0x1, 0x5, 0x0)
close(r0)
r1 = semget(0x0, 0x3, 0x2c0)
semop(r1, &(0x7f0000000080), 0x19)
semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000180)=[0xb2, 0x1, 0x1])
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000140)=""/44)
r2 = socket(0x18, 0x3, 0x0)
close(r2)
socket(0x18, 0x3, 0x3a)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x200}, 0x0, 0x7})
r3 = socket(0x18, 0x3, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
getsockopt(r2, 0xe, 0x2, &(0x7f0000000040)=""/55, &(0x7f0000000080)=0x37)
write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c)

4.147167058s ago: executing program 4 (id=3428):
r0 = syz_open_pts()
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
setuid(0xffffffffffffffff)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x1, 0x5, 0x8cbe, 0x9, "909c992f86cd2092107e9479749d3b6d7f164aeb", 0x8, 0x7f})
writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="b305782146294dcbb86fb2c2ccc1624d4a3e35d69a1c9c89b74aacaa51d8dd7c50553dbd58a111716f9f1dbff02eaf668240fd7b52d20506dfbadc0d000000000000000000000000000000008c277aa3d05694d7528ae923febd9ea67b175459f130092f", 0x64}], 0x1)
r2 = syz_open_pts()
ioctl$TIOCSBRK(r2, 0x2000747b)
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080))
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3, 0x2})
setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54})

2.86239412s ago: executing program 0 (id=3467):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x4f47)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0)
ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000140)=0xfffffffc)
ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000100)={&(0x7f0000000000)='./bus\x00', 0x90b, &(0x7f00000000c0)='./bus\x00', 0x6})

2.744842033s ago: executing program 5 (id=3470):
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, [], {@ipv6={0x86dd, {0x8, 0x6, 'd&x', 0x10, 0x2c, 0x6, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@hopopts={0x2c}], @udp={{0x2, 0x3, 0x8}}}}}}})
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f0000000600)=[{0x21, 0x8000}, {0x23, 0xf045}], 0x2})
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000240)="119a13ebc68ab1a1fee0bfce5c80300b18cad765c9d3859e6325038abaeb8c5b6140ddb01d63cc596f5649dc3726849b273405e4b32dae9122776c22ceb661d2eac236055060a3b895a0094fb57e7cf1423ebe48395cca863d1f18dd0dcb5ff1c544f5304af71221d17dc96068c35d67b2c13295ef1319f9bcae756fb78b70ab3c9bd187ba0306914445ebeb965ec11e9290a00bcc6b2076fd545a4d3b730cbdf571744e31a7a54d3a52c37e0e76938af249ad605a639d5c3dbcceeda706b6c16e38a84ff72d316a5f3d285c256fbda9a7a394cd2760ced14f2805157256f19469c367d5fecf0dab44baa689aeca0fb48830800b08ad2504c13bb3c671d02de3235be794afebf4fd6fb28034530a986468febda9a3e24551569aa4c2c5f8f0593c27fe3723fa5a71366a65e1ef96955efc94bf5a035af5fa7d162592502ab7a0f8d25bf5c66b20a83f88c3140a6c56c28a9ea518ffb3211ad4ea41d2dd8f242b837486e7d03295c134561e1e3656f78522aeaaa8962f96de9a557c64263c634f17afa5715705c46d31d2a361ee5a11b0f4a6047383a44d4bc8c71de12c96f33b993f768e816f241c21b0119c9cca88bd28f2343a0d039b1d2397a3a5975875ec251896ed0a98feeb4d8e1e7a71808a12aa821df01d69f9b983b96d69a58ba3f5a3788d80d3d96327f3404122e5cdd0bf5237dd336d2e7980a5008d78543d8f513283cf7bc70ddd7c6b0d2e5c464de9937dab24a981d6eaadb077f93c0d849c38d1b3097c1ee84f61e921f28b2883c859c1f638ccd0cb9ba5aabe29948cfdf758c67ad36cbb3f36514380d97ec3040e8b39c90e7129f67f211aed39474c0467685d9d8a6ca3b1541ffb93b99d530e9b3df55bd94fba55d1f8e737e1d80ac3b159c5005ec80c63880634e432b48aaad88b841c93599f0696e7e59ef471174f2dfb732bab55d3265ce2ebd217d260a987357a5888afeb4cf6623b3a8d1f68fbbb4d011d237e321f256c9a", 0x2c9}], 0x1)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x1, 0x3, "c9f7d246000000023b0bca8f00875a6e80f775d2", 0xfffffffc, 0x6}) (async)
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000080)={&(0x7f0000000140)=[{0x26}, {0x3, 0x8}], 0x2}) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x3d}, 0x2, &(0x7f0000000040)="beb42eeb089fe9b40c6bec57b93718676ff4fb240b8c93836e3368d69e9a98e251b55082369631b57459768a69f172d0503a94e34fe30e37723adc2360b8ff5ac99e91c6bb08", &(0x7f00000000c0)=0x46, &(0x7f0000000100)="ad621c5160c519b64c3c0cd8680c309911ab8c", 0x13)

2.663095644s ago: executing program 5 (id=3473):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79)
setpgid(0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
syz_open_pts()
syz_open_pts()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = socket(0x2, 0x2, 0x0)
dup(r0)
socket$unix(0x1, 0x5, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = getppid()
setpgid(0x0, r1)
r2 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r2})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r4 = fcntl$getown(r3, 0x5)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000000029, 0xe, &(0x7f00000000c0), 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, r4)

2.662083444s ago: executing program 0 (id=3474):
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0x80146950, &(0x7f0000000100))
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
close(r3)
r4 = syz_open_pts()
close(r4)
ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000000)=0x1)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1)
r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
poll(&(0x7f00000000c0)=[{r2, 0x100}, {r4, 0x100}, {r5, 0x80}, {r0, 0x1}, {r0, 0x20}, {r2, 0x4}, {r2, 0x40}, {r2, 0x20}], 0x8, 0x5)

2.341057821s ago: executing program 5 (id=3478):
r0 = socket(0x18, 0x2, 0x0)
r1 = socket(0x10, 0x0, 0x4)
write(r1, &(0x7f00000000c0)="aee99da2", 0x4)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000140), 0x4)
syz_emit_ethernet(0xb6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b4f69c83b01ff0cf7ffffff86dd61b91d3a00802c03050000000000000000000000000000bb4079e811670a1ec2952a422d926cce0733820005ffffff833a", @ANYRES16=r0])

2.340611369s ago: executing program 5 (id=3479):
sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x7}, {}, {0x3}, {0x3}, {}, {0x3}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x3}, {0x3, 0x7218}, {0x0, 0x2}, {0x0, 0x7ff}, {0x2}, {}, {0x3}, {}, {}, {0x2, 0x80001}, {}, {0x0, 0x200}, {0x2}, {0x2, 0x2}, {0x2, 0xa}, {0x2}]})
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000180)={'./file0\x00', 0x9, 0xf6c8, 0x8, 0x1, 0x2, 0x2, 0x8, 0x0, 0x2, 0xfffffffffffffff7, 0x401})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37)

2.324631282s ago: executing program 5 (id=3480):
setrlimit(0x5, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x5, 0x5, 0x9, 0x676, "9cdc452efcc57f40002f4c0000002f9a68cd3304", 0x403, 0x2082})
writev(r0, &(0x7f0000000140)=[{&(0x7f00000009c0)="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", 0xff}], 0x1)

1.777914119s ago: executing program 0 (id=3487):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0) (async, rerun: 32)
r1 = syz_open_pts() (async, rerun: 32)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="10", 0x1}, {&(0x7f00000000c0)="002c327509b3952f73c28370a3fa3cf808e7d02b57bc83071966448d7746ab8e6c3657c63f3bdf840ef0c1a86ce7c85906e0cdcc343f20d5c45a9b0186020a6ec95228d997a4490efed4c15fb9e161d0d90c12ea4616adb1e21979094bf55b53a7161e454f51900734ccb90fc0dd689c9602b96501b7", 0x76}, {&(0x7f0000000300)="a655a814b6ab45315ec7c7e17fe50833b53e53d5861fe42549029ace1114097d5d61fa6df7042218f4bb758453325ff94d300209c650443b8160e6d9814d55a8de51a87701f9619c0000563719ff6d2429704598a21ccd3c91cf00cd58239c314abf77509dfdd2", 0x67}], 0x3)
unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='x\x00')
open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x7f, 0x4, 0x3ff, 0xac21, "8bbfb00cc54ee2221ba79c162f4b406bdcb6fde6", 0x8, 0x6}) (async)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
open(&(0x7f0000000080)='./file1\x00', 0x80, 0x125) (async)
writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000800)="d64742cc96e82c6e37a46b47f2516527c6d019b4250e24d559bd88dc8de63ff29e97010d9d292465f789c5c1", 0x2c}], 0x1)
read(r1, &(0x7f0000000200)=""/255, 0xff)
openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)

1.658529316s ago: executing program 0 (id=3490):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSETA(r1, 0xc088444f, &(0x7f0000000000)={0x0, 0x4002, 0x20000, 0x0, "01d04b0a0047c1d100", 0x81, 0x3c6})
sysctl$hw(&(0x7f0000000200)={0x6, 0x13}, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x47)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$hw(&(0x7f00000000c0)={0x6, 0xa}, 0x2, &(0x7f0000000280), &(0x7f0000000080), 0x0, 0x0)
sysctl$hw(&(0x7f0000000000)={0x6, 0x4}, 0x2, &(0x7f0000000100)="a517394595cba66471fa42e9740fb964a99c3c7cfbe788602754f9a3ff4d08dc599167f076486e319220358253f6dfa4bdfc5aaed5ea3eef53ac154473867f2fa0de86aa", &(0x7f0000000040)=0x44, &(0x7f0000000180)="0c88cb9cd03aeec228b785453e94c8d84966007e2be24cc6ec87fe088f8ae2a7563cfdc8565100ad71295e4ce4fcc406890d2f0f8129a54f87edc9baa0c64e635fe2876d0b94fb76950488c0319253dda21576ca01a8610f2dc1fce2afe97d2155a3923841083796e00bda1c6e95e77df004409dd5120b2d3be7", 0x7a)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$TIOCSETA(r1, 0xc088444f, &(0x7f0000000000)={0x0, 0x4002, 0x20000, 0x0, "01d04b0a0047c1d100", 0x81, 0x3c6}) (async)
sysctl$hw(&(0x7f0000000200)={0x6, 0x13}, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x47) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$hw(&(0x7f00000000c0)={0x6, 0xa}, 0x2, &(0x7f0000000280), &(0x7f0000000080), 0x0, 0x0) (async)
sysctl$hw(&(0x7f0000000000)={0x6, 0x4}, 0x2, &(0x7f0000000100)="a517394595cba66471fa42e9740fb964a99c3c7cfbe788602754f9a3ff4d08dc599167f076486e319220358253f6dfa4bdfc5aaed5ea3eef53ac154473867f2fa0de86aa", &(0x7f0000000040)=0x44, &(0x7f0000000180)="0c88cb9cd03aeec228b785453e94c8d84966007e2be24cc6ec87fe088f8ae2a7563cfdc8565100ad71295e4ce4fcc406890d2f0f8129a54f87edc9baa0c64e635fe2876d0b94fb76950488c0319253dda21576ca01a8610f2dc1fce2afe97d2155a3923841083796e00bda1c6e95e77df004409dd5120b2d3be7", 0x7a) (async)

1.65230474s ago: executing program 2 (id=3493):
ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f0000000100)=0x6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mkdir(&(0x7f0000000100)='./file0\x00', 0x51)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')
r0 = syz_open_pts()
ioctl$TIOCSTOP(r0, 0x2000746f)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000))

1.53970288s ago: executing program 0 (id=3495):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000005, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x2, 0x8, 0x80000008, 0xfffffff9}, {0x8, 0xf86, 0xfffffffe, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0xd197, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0x20000ce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x10, 0x10001}, {0x2, 0x82, 0x5, 0x9}, {0x0, 0x8001, 0xd1b, 0x19b1}, {0x1ce, 0x10001, 0x6, 0x3}, {0x4, 0x9, 0x9, 0x9}, {0xb8c, 0x8, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x400006}, {0xfffffffc, 0x6, 0x5}, {0x8000, 0x1, 0x1004, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ktrace(&(0x7f0000000240)='./file1\x00', 0x0, 0x810, 0x0)
getsockopt(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0xcd5331e3)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x4001, 0x0)
r2 = fcntl$dupfd(r1, 0x2, r1)
close(r2)
r3 = socket(0x2, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000000), 0x10)
r4 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
r5 = socket(0x18, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x2, r5)
close(r6)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f0000010000903abf65b18d7c51f78bf808ff", 0x15}], 0x1}, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5a9da4070000006ebb807e7fa1d2498b4317bf23566927ba3938828c00009534c8653d66ba0000000000ad9d75521657637528b1edb7ac126ee524a44ee4ff13eb30295f130208", &(0x7f0000000080)=0x61, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x0, 0x0})

1.539150188s ago: executing program 2 (id=3496):
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='y', 0x1)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="ee598032db0d9783dc80886d4b09127b81fb48382a1e0c1f721131030a38a065323377c426f6694e451b13cf689029b2d517defed1325eab21c8219bdcd44c4aeeaaf3829b6e585872afb6e1f0f01aecb8", 0x51)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r1, 0xc0a86b03, &(0x7f0000000200)={0x0, 0x10000, 0x0})
ioctl$WSDISPLAYIO_WSMOUSED(r1, 0x80185758, &(0x7f00000000c0)={0x3, 0x8, {0x0, 0x6}})

1.538817212s ago: executing program 0 (id=3497):
r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
pread(r0, 0x0, 0x0, 0x80000000)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000140)=0xc)
fcntl$setown(r2, 0x6, r3)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x12b)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1010, 0xffffffffffffffff, 0x0)
sysctl$vfs_nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)

1.395779407s ago: executing program 2 (id=3499):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x21, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r0 = socket(0x18, 0x3, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{}, {}, {}, {}, {0x87bddc2eb7165cba}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {0x0, 0x1}, {0x1}, {0x0, 0xb}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x40000000}, {}, {0x3, 0xffffffff}, {}, {}, {}, {}, {0x2}, {0x0, 0x5}]})
setuid(0xee01) (async)
setuid(0xee01)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
syz_emit_ethernet(0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200100000001d, 0x0, 0x0) (async)
setsockopt$inet_opts(r1, 0x0, 0x200100000001d, 0x0, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x8, [{&(0x7f0000431000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100d3b5}, {&(0x7f0000419000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7f}, {&(0x7f0000419000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x9}, {&(0x7f0000ff4000/0x3000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f00006b8000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000076e000/0x2000)=nil, 0x2}, {&(0x7f000006d000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f000041f000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000000000005}, {&(0x7f0000197000/0x3000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x3}, {&(0x7f000069e000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f000042f000/0x1000)=nil, &(0x7f0000689000/0x3000)=nil, 0x3}, {&(0x7f0000418000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00000a6000/0x3000)=nil, 0x1}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000ff0000/0x3000)=nil, &(0x7f0000fed000/0x10000)=nil, 0x1000039fa}, {&(0x7f000042f000/0x3000)=nil, &(0x7f0000239000/0x2000)=nil, 0x3}], './file0\x00', 0xfffffffe})
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
socket(0x16, 0x5, 0x6) (async)
socket(0x16, 0x5, 0x6)
mknod(0x0, 0x2000, 0xd01)
open(0x0, 0x0, 0x0) (async)
r3 = open(0x0, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0x34}, {0x100, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0x400, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x1, 0x8}, {0x40002, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cf, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb89, 0x555981a8, 0x8, 0x112b}, {0x29a71717, 0x8, 0xfffffffd, 0x6}, {0xc, 0x2000005, 0x5, 0x848}, {0x0, 0x1, 0x1002, 0x30004}]})
getppid() (async)
getppid()
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0)
ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x0, 0xff, 0x8, 0x6})
r4 = dup2(r0, r0)
getpgrp() (async)
r5 = getpgrp()
fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x2, 0x1, 0x80, 0x8, r5})
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x9, "8a314e87c68bc2208d35940a033ae01b7bed40b3", 0x6})

1.240628766s ago: executing program 2 (id=3505):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0)
r2 = dup2(r1, r0)
close(r0) (async)
connect$unix(r2, 0x0, 0x0)

1.235315497s ago: executing program 2 (id=3507):
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x45}, 0x2, &(0x7f00000000c0)="1b8a2bcef4ae2ad11bba5c759b49e0c2c8d28b47020c99bd108be265a8414dae0ada22a5d7dce595cdb2c02ff97b02835fadd7dda9a11db318fc4b04af61d3", &(0x7f0000000100)=0x3f, &(0x7f0000000140)="45ff2dd393c190b88fd198c2dd184fb98c08962214378fde7b4e2f30382f9584abaceb4a8c3aa4364875eef889e33e0f0d4594fdbbad21bffa8874a3ac8b32003a52baf46d64515a2e9d7fd4f69aaa6207e5e12566c76a6fe92fae4c17da4ff45b48bef5fabd1ceb63f3123c8b4359fd09d70e78a0f1095e6e945b2e5798a6617b9b6a35bd8281b879441f436994bbc30eea249737060635e4339695bcb91ca66945f02370d28d22dfe4eed17a1bf0fb69", 0xb1)
syz_open_pts()
syz_open_pts()
r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
pwrite(0xffffffffffffffff, &(0x7f0000000080)="4af177", 0x3, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0x790}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0)
sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_divert(0x0, 0x0, &(0x7f0000000040)="e0ad22", 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r5 = dup(r4)
ioctl$BIOCSBLEN(r5, 0xc0044266, &(0x7f0000000100))
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
fcntl$setstatus(r4, 0x4, 0x4)
syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000000600)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4)
fcntl$lock(r1, 0x9, 0x0)

1.0085492s ago: executing program 3 (id=3509):
syz_emit_ethernet(0x4a, &(0x7f00000015c0)={@random="9175d799f1e2", @random="3cc72272119b", [], {@ipv6={0x86dd, {0x5, 0x6, "90bbe9", 0x14, 0x3b, 0xe0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback, {[], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x401, 0x0, 0x2}}}}}}})

1.008043209s ago: executing program 2 (id=3510):
mprotect(&(0x7f00003ef000/0x1000)=nil, 0x1000, 0x0)
r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0xc)
r1 = socket(0x2, 0x2, 0x0)
getsockname(r1, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc)
open(0x0, 0x80, 0xcb)
syz_emit_ethernet(0xe, &(0x7f0000001680)={@broadcast, @empty, [], {@generic={0x8848}}})
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
mprotect(&(0x7f0000467000/0x2000)=nil, 0x2000, 0x4)
mmap(&(0x7f0000f82000/0x1000)=nil, 0x1000, 0x0, 0x2011, r0, 0x0)
munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mquery(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x9)
setrlimit(0x5, &(0x7f0000000980)={0x46, 0x56})
r2 = syz_open_pts()
fchdir(r2)
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x807, 0x3, 0xffff, 0x200495, "084880fa870000bd090088d11554e90d6602ff07", 0xb52, 0x2a6d})
writev(r2, &(0x7f00000029c0)=[{&(0x7f0000002a40)="793d4acf593accd5284d97b182ffa2c4dc236b5c27db05fe46d9a1fe6e442829bd478ea62ea8df42767f4fb6e013a64f31d48884f5b440d8ec138a22c7f4abe9ad2990de976eb4db3eb06d0e146feff17166df0ccf82cd18dc8858594a08d4634152d486b0a80999314144593c0266d319bffa61ce051f0115de9fd1fe24bff844111e1f8b9148c3ef86c3e67a9d904cd3c55daa021867a953a7c4ffc715783cc09729751c18bff830418236397fc44dee62747a4c041c5cd9b75426a28431832757c770a68c4de235b6e93f7d5e13677dff35709bde80666a060641a082eae0ffc93023a7732574ac77c73d5ffb8179be0b85e62017b6271cc45fa5a820e534e05e6bfd7293c5aa9235713bd920097a975462f0faf1777fde75f33c049cba0dbbd7cb0b026e75b200214ed99bc0e21e0f72b6e6ab1533ae5bac9f7e772aa992b763b81e870e3d7a77a23e197144b85c1e760bed34ea9610e94e79bf4e4ca49edf7ecea9131b7d5fd4c1590ec7f479b241634908f0f2b8ee6adde837328ba1bcaf3d8b4dd6f722de9f2479c95f8b2e52a1171b23a6dee5a6f1a1866d34513996d57eee23405432923fbef097e8f3a3a19d9b7e0e242156f6b24d350d3a7abcb5857830220e5d5db123a3f0fdfe193bffaf4ec962d8f2ab3d7dd3441b985e54622e5998defe32f0f356b9db2264c4ccae0e334221b0e53774178123ca342a489fc5963364fba5fefcc9d5007caa82db2f1a3833eec513764a8f3a53921ce6a5c06bb1338c5e5c98d32310d9e5bd95bd1c095b10d41f9cb92c0d80556b218316ea913f300dc41e3a2b17985a92935caceeea3169be2f5154882d", 0x259}], 0x1)
r4 = socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aa"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket$inet(0x2, 0x1, 0x0)
getsockopt$sock_int(r5, 0xffff, 0x1008, &(0x7f00000002c0), &(0x7f0000000100)=0x4)
bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
r6 = socket$unix(0x1, 0x2, 0x0)
shutdown(r4, 0x2)
sendmsg$unix(r6, &(0x7f0000000140)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x8)
read(r3, &(0x7f00000009c0)=""/4096, 0x1000)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x2, &(0x7f0000001480)="4ba7841143175a319d82c85c66ddbabe4d20d6c90758f73f9092178b67099fbb9a053ffe4885163d21d969434491ad5d03e628d94eb34b74c7b7e3d24afe21ffb0c864cb888c0007a0a7567f69a657766e07db3db8004a504e17a44850d9b2ef", &(0x7f0000000040)=0x60, 0x0, 0x0)

1.007764998s ago: executing program 6 (id=3511):
r0 = getpid()
getpgid(r0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa)
r2 = syz_open_pts()
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x100}, {r2}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x10}, {r2, 0x40}, {r2, 0x8}, {0xffffffffffffffff, 0x1}], 0x9, 0x2)
r3 = syz_open_pts()
poll(&(0x7f0000000200)=[{r2, 0x100}, {r3}, {0xffffffffffffffff, 0x100}, {r2, 0x10}, {r2, 0x1}, {0xffffffffffffffff, 0x80}, {r2, 0x2}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x8}, {r3, 0x20}, {0xffffffffffffffff, 0x8}], 0xb, 0x7ffd)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
pwritev(r4, &(0x7f0000001d00)=[{0x0, 0xffffffffffffffa5}, {&(0x7f0000000800)="c2be4855", 0x4}], 0x2, 0x20009)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000000c0)={0x0, 0x1}, 0x10, 0x400)

883.517674ms ago: executing program 3 (id=3512):
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="417a80442d", 0x5}], 0x1) (async)
execve(0x0, 0x0, 0x0)
close(r0)

880.712819ms ago: executing program 6 (id=3513):
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x2}, 0x4, &(0x7f0000000040)="e07feb87cc802f0369015c8c4250f49a21b4900690d84823f1e8921b00c470605dfdc1a83aa2b658ac", &(0x7f0000000140)=0x29, 0x0, 0x0)
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x2}, 0x4, &(0x7f0000000040)="e07feb87cc802f0369015c8c4250f49a21b4900690d84823f1e8921b00c470605dfdc1a83aa2b658ac", &(0x7f0000000140)=0x29, 0x0, 0x0) (async)

880.0906ms ago: executing program 3 (id=3514):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000463000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2b}, {&(0x7f00002ae000/0x1000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x3ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'})
unveil(0x0, &(0x7f0000000140)='c\x00')
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x28, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x4da}, 0xf09, 0x10025, 0x0, 0x0, 0x2000007, 0xf, 0x1, 0xadf8})
r1 = msgget$private(0x0, 0x280)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000240)=""/207)
ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3f5393ca16ab319, 0x50)

879.006667ms ago: executing program 3 (id=3515):
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000001200)={0x29f57365, 0x4, 0x3, 0xffffffff, "8b030003000100787d902b56d864d3c3a3f4d3c9", 0x4000000})
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f460032b34b77e382526b1572da7", 0x2e}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x18, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4)
writev(r0, &(0x7f0000002300)=[{0x0}, {&(0x7f00000001c0)="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", 0xe50}], 0x2)

878.622294ms ago: executing program 6 (id=3516):
r0 = getgid()
setregid(r0, r0)
setrlimit(0x4, &(0x7f0000000000)={0x7, 0x100000001}) (async)
setrlimit(0x4, &(0x7f0000000000)={0x7, 0x100000001})

716.245296ms ago: executing program 3 (id=3517):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80000801, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x30000}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x3}, {0x7ff, 0x4, 0x8, 0x5}, {0xb8c, 0x4, 0x6, 0x6}, {0x29a71717, 0xfffffffa, 0x4, 0x6}, {0x4, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(r1, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0})
setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f00000001c0)=0x5, 0x4)
syz_emit_ethernet(0x66, &(0x7f00000011c0)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6036e28200303b0001984b0e23742b40c3fa3d76af5fc1fafe8000000001000000000000000000aa0136c95e86000000605adf000000000000000000000000000000ffffac1400bbff010000000000000000000000000001"])
recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@un=@abs, 0x8, 0x0, 0x0, &(0x7f0000000280)=""/115, 0x73}, 0x40)
open(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', 0x10, 0x90)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x9}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0xa}, 0x4, 0x0, 0x0, &(0x7f0000000000)='\t\x00\x00\x00', 0x4)

715.826343ms ago: executing program 6 (id=3518):
r0 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000180)=0x9, 0x4)
r1 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r1, 0xf3)
setuid(0xffffffffffffffff)
rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00')
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x3, &(0x7f00000000c0)="0020a3db", &(0x7f00000001c0)=0x4, 0x0, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43260c7c59f, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xfffffffffffffffe}, {0x10000000000000}}, 0x2)

714.862401ms ago: executing program 3 (id=3519):
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = socket(0x11, 0x3, 0x0)
recvmsg(r1, &(0x7f0000000780)={&(0x7f0000001a00)=@un=@file={0x0, ""/4103}, 0x1009, 0x0, 0x0, &(0x7f0000000740)}, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0x2, 0x83, 0x400f}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001900)="258bbd4ed141349dc2fb0b2ac35b53f7e749787f8e18259cd52eea6790d91fad", 0x20}], 0x1, 0x0, 0x0, 0xc2d839217c176b2e}, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="f58ac4d51a61494f6efc2c36688b841dd6510fd5e53215b1b35aa3a44dc1311e32414069d5031b04cec07087748a4cbdaa1cbc934c51a54426dbb1593c8acb8c04ecbecd90ed160336d12e29a9", &(0x7f0000000080)=0x4d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setitimer(0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[])
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7864)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
truncate(&(0x7f0000000180)='./file0\x00', 0x100000000)

714.145524ms ago: executing program 6 (id=3520):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0)
ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = socket(0x11, 0x3, 0x0) (async, rerun: 32)
r2 = semget(0x0, 0x1, 0x281) (rerun: 32)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000340)={{0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x7}, 0x401, 0x4}) (async)
sendto$unix(r1, &(0x7f0000000280)="b1000501600000000000000007000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af63003728211e000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0)

713.372779ms ago: executing program 6 (id=3521):
mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x6381)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x4001, 0x0)
minherit(&(0x7f000073a000/0x3000)=nil, 0x3000, 0x3)
r1 = socket(0x11, 0x3, 0x0)
sendmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="cac73c", 0x3}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0, 0x44}}, 0x10, 0x2, 0x0)
r2 = dup(r0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
syz_extract_tcp_res(&(0x7f0000000080), 0x100, 0x7fffffff)
close(r3)
r4 = socket(0x2, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95)
r6 = getppid()
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff})
fcntl$setown(r7, 0x6, r6)
r8 = getuid()
sendmsg$unix(r5, &(0x7f00000006c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000200)="472e527a85b0ce5c54ef108f5c5db5edb550429172a9b9740f452dec82c13d965627e32063a4b6b387682f32bf031b429673a4a19d90904b66aafa1f1b1dc11a98fdaa024669f1833e998a25ee9e486f852b027d451e1458e6c4b413914aae70410ebc7d9f26c465957d9a1e805c14a2283cd52b620f81b4c0c4fe08d701f8ee278337475aa185640ee30d24cd15f28127f644743c2dd333e7", 0x99}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[@cred={0x20, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r6, r8, 0xffffffffffffffff}], 0x60, 0xa598e3503c13fa19}, 0x1)
poll(&(0x7f0000000080)=[{r5, 0x27}], 0x1, 0x0)
poll(0x0, 0x0, 0x401)
close(r5)
execve(0x0, 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
r9 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r9, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)

251.326375ms ago: executing program 7 (id=3531):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r1 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0) (async)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={<r3=>0x0}, 0xc)
fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x1280000000000, 0x3, r3})
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x9}, {0x0, 0x4}}, 0x0)

247.138674ms ago: executing program 1 (id=3532):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x2}, 0x8)
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="825a4fc3b1f0b0c7c8bd020000107c60f76c090804000000007bd16e8fb2bcccf69affebfdbb31c0c7313e675feadedbb13dc9a05fca2d1c500fcee64eca81a98dfddc6d76c692b7807f8b4791c2f7d917f05dbf7d54447abbf221cd91d723bf8ded0838d04fa7a65182b05c3c15e13c88e39a02a95abcc8f8d0098d3c7954b5", 0x80}], 0x1}, 0x0)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f0000000000)={0x0, 0x8001, 0x0})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
close(r2)

246.347236ms ago: executing program 7 (id=3533):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0) (async)
r2 = getpid() (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r3 = socket(0x2, 0x1, 0x0)
bind(r3, &(0x7f0000000000), 0x10)
listen(r3, 0x0) (async)
r4 = socket(0x2, 0xc001, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10) (async)
r5 = socket(0x2, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000000), 0x10) (async)
close(r3) (async)
fcntl$setown(r0, 0x6, r2) (async, rerun: 64)
write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) (async, rerun: 64)
execve(0x0, 0x0, 0x0)

245.94517ms ago: executing program 1 (id=3534):
pipe(&(0x7f0000000640)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x18, 0x2, 0x0)
close(r1)
r2 = socket(0x800000018, 0x3, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x80000002000007, 0x7, 0x0, 0x0, 0x3, 0x2, 0xfa5, 0x100})
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket(0x18, 0x2, 0x0)
r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x80047476, &(0x7f00000001c0)={0x80000000, 0x2, 0x3, 0xfffffff0, 0x0, 0x100, 0x10, 0x10, [{0xfffffffb, 0x5, 0xe, 0x4}, {0x7, 0x7fff, 0xf, 0x3}, {0x8001, 0xffffffff, 0x7fffffff, 0x9}, {0x2, 0x0, 0xdb4d, 0xc}, {0x6, 0x2, 0x3, 0xa}, {0xfffffffd, 0xce63, 0x9, 0x2d4}, {0xb, 0x6, 0x80009, 0x56d6}, {0x4, 0x100, 0x2, 0x8000017}, {0xc6e9, 0xe, 0x6, 0x6}, {0x1d, 0x5, 0x81, 0x7f}, {0x400, 0xa82, 0x6, 0x1}, {0x386, 0x7, 0x6c}, {0x20002c15, 0x10, 0x8, 0x4}, {0x8eb, 0x200, 0x220, 0xde14}, {0x2, 0xffff, 0xfff, 0x5}, {0x200, 0x1, 0x6d2, 0x6}]})
lseek(r4, 0x4, 0x1)
r5 = dup2(r1, r3)
setsockopt(r5, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
setsockopt$sock_int(r0, 0xffff, 0x2000, &(0x7f0000000180)=0xfffffffe, 0x4)
write(r0, 0x0, 0x0)
mknod(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0)
rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00')
r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$VMM_IOC_CREATE(r6, 0xc2585601, &(0x7f0000000080)={0x10, 0x47, [{&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0xe9d0}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x8}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0xffffffff}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xe}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x3e}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x54}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x80000000})
symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

97.089694ms ago: executing program 7 (id=3535):
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
r0 = socket(0x2, 0x4001, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r0, &(0x7f0000000000), 0x10)
syz_emit_ethernet(0x97, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x89, 0x66, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @multicast2}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0xffff, 0x0, 0xfffd, {[@md5sig={0x13, 0x12, "68927ec59016a8acf097f7270ff92eba"}, @generic={0x3, 0x4, "2793"}]}}, {"7d7d9d332a7a7489ecdfd825eb02000000a5539548f4df640ccfdeeb5b2e28976b6f8534a753cce1e6c6561d568efb9474c61ee36844e9fcdbf5d26448b111de01380b964de11d76ca"}}}}}})
open(&(0x7f0000000000)='./file0\x00', 0x6f0, 0x4)

90.944052ms ago: executing program 1 (id=3536):
r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
sendmsg(r0, &(0x7f00000009c0)={&(0x7f0000000040)=@un=@file={0x2699759e3517dbee, './file0\x00'}, 0xa, &(0x7f0000000580)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="976bdb49d08ae2e973087a89e00d7686dcee34f25116782ee65da2abfd447e50e180f8d2c6426dc877af33f75bcc996915e46b4856735fcfb75d3ee0a539807c2fd1bf2c752f155fb1ae8fa1b814efefe4e4a7989a3c23cc51", 0x59}, {&(0x7f00000001c0)="5489f41b93b0c226c29f56ccbdedae16359da2e0d797547ca799039c47df0e965fce9d78fec9713fe9d9efea9d49272299ce49b9c6fb467f66553d6d54e80a08bc41b5271d1a4370eac8fbcc7129f12a8989ac84319180d87c9eecce62afe51425d80715174a0abd19a257252d53670174613ba861be751274842c83a403d3c445196a263ebd93afd646aca8d15d3e2b03833fd075185c98ce188aeadf7795f3a24c8a1430f8384ebeedb6c13fa64cc460fad0c65b0ed7af62d499a9a7ed83d08ba48d0c4b0ae8ad23b64c751460a32411f25b2d3e7550430f5e9c8f78a4e3a06ea9cd5328c42753", 0xe8}, {&(0x7f00000002c0)="d170577ba7e6c6a4954d12c8505414a16427290879c67fa9c25f1fd54029cb28f570baec79cfda93756668a0a307f9b737fbac242df74c227103e0b7e19540ccad9074d0895e8d333b94f39d6673778d6281e492b01573e60f3d936383c282904b242ff6cc707e57b19f90bbb1c4d3154c02f23f9fd0acf6c72a6508f0f3c8678489d25642f5aa0222710ca20065f163bcfe5d6f1aa36a22bae5874ca93652cc0840612d63669004b24981c8c5120b54d83133cd0792296d1f460b75c4f948bf6c27cf30748d692a5e306ca9635bd7ee73801a18795cca76d56cdf1f2ab5956aa566ab6a46b853499476782807e34650b3289d5a58ded9b7", 0xf8}, {&(0x7f00000000c0)="dee5", 0x2}, {&(0x7f00000003c0)="b8d2280a2b6cd4ee04dca96226284132249130a2c171aa203c01295c99da37fd146da2b3e8863c0685b194122657a1fa0e521266eabd4e2b75f65f3b66e574c22ee72ea37ff991b637556e290d55f50f840bcf5575c3de09620c541f139588d63f1010854bc50462cbf3e42cfebfe64ee2657b174a566499ea6261b77d511ba0d339b109753d", 0x86}, {&(0x7f0000000480)="5e7fe2af8af665af649768b610922301ebe24b8bd954dc0105267f09e9ec24e8b62c07b2ff73bf21f14b6aeaa41cb721cd8df1b38e0dd7c601225d56913ead9fb0c6e3f162e516211c0de4554d947f41a83a2ac305b3fc1cc6e71c8cda9872d893e2f194afe2190ea93a6fb05f227a87510928fe4e8fee211066c85ddb1daa2c925f9bacfd5061652f671bad77f7e81efd14f72113de0271cbddf503bc42707b4ad8d8bf6d74e0a501f0733e8c14495190994136dca3170e6ff63777dc197b6aea46a24ac581043bd3cbcf1229", 0xcd}], 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3a0}, 0x400)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
close(r1)
r2 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffefc, 0xfffffffe, {[0xfffffffffffffffc, 0x10000000004ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x6, 0x3}, {0x2, 0x9d1, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffe, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0x1}, {0xfffe, 0xfffffffc, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}})
kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)

89.636998ms ago: executing program 7 (id=3537):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4)
minherit(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3)
r0 = syz_open_pts()
close(r0)
syz_open_pts()
syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae04226b86dd609907a600382c03cb697ae53e336f000000500000000000ff02000000000000000000000000000102009078001000036900de0000060108fe8000000000000000000000000000bbff0100000000000000000000000000010400000b00000000"])
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0x3, 0x7b, 0x7, 0x4})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffff5a)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCGDLTLIST(r2, 0xc010427b, &(0x7f00000000c0))
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xbc, 0x2, 0xa, 0xf4, "64a50a92728ca4ba3b764eb07600", 0x7, 0x42})
ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000040)=0x8)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
r3 = socket(0x11, 0x3, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETA(r4, 0xc008441e, &(0x7f0000000200)={0x2003, 0xfff, 0x4009, 0x0, "97a2e900", 0x4, 0xbff})
setsockopt(r3, 0x11, 0x3, &(0x7f0000000140)="12000000", 0x4)
sendto$unix(r3, &(0x7f0000000580)="b10005010000009f0500070105000000331c13fecea70500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297bd8aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71d808e5ed405080000fca653181afc9d3f0100"/177, 0xb1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2012, r3, 0x10)
poll(&(0x7f0000000000)=[{r0, 0x44}], 0x37, 0x7)

88.842209ms ago: executing program 1 (id=3538):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1495)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xfffffff8, {0xfffffffdfffffffb, 0x4}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x18, 0x1, 0x0) (async)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TIOCSETA(r1, 0xc4504441, &(0x7f0000000080)={0x7, 0x60c02044, 0x8, 0x7, "97a2e900", 0xffffff80, 0x8})
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000b80)="cc60d3d79a", 0x5}, {&(0x7f0000000580)="b389e5a8b7b42eab8dd001567bf060f91830248a71c5dee1166b59c4ef543361de7a61fffe2deffcdecfac1b430529b4d0ebb18536ae4676751dc168251b05ef6e4ff8fb58a1ce4807c469445cddb07f4a0e4059bfb280e68232e507ea8251201fd18a7c6b1bdb3a6dc68505fe21d0c3d76ec7e42a09ca18db03", 0x7a}], 0x2)
r2 = kqueue()
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x870c3, 0x7, 0x7, 0x102, 0x5, 0x33a, 0x210002, 0x10, [{0x1, 0x7, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0xfa6, 0x0, 0xaf9}, {0x1, 0x800, 0x9}, {0x7dab, 0x1831ee74, 0xd, 0x4}, {0x2, 0x6, 0x3, 0x99}, {0x8, 0x1, 0x4f8, 0x6d}, {0xc, 0x803, 0xa2, 0x8}, {0x2, 0x82, 0x1, 0x8}, {0x6, 0x7fff, 0xc7, 0x88}, {0x2b, 0x50001, 0x6, 0x5}, {0x7ff, 0x9, 0x4c91, 0x2}, {0xb8c, 0x4, 0x101, 0x6}, {0x29a71717, 0x4, 0xc6, 0x9}, {0x10000, 0x7, 0x2006, 0x400}, {0x0, 0x1, 0x4, 0x10001}]})
kevent(r2, &(0x7f0000000000), 0x9a, &(0x7f00000002c0), 0xffdb4163, 0x0)
r3 = kqueue()
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
kevent(r3, &(0x7f0000000340)=[{{}, 0xfffffffffffffffe, 0x8, 0xfffff, 0x2, 0x100}, {{r3}, 0xffffffffffffffff, 0x6a, 0x80000000, 0xffffffffffff7fff, 0xe}, {{}, 0xfffffffffffffffd, 0xc4, 0x1, 0xfffffffffffffffb, 0x1000}, {{r2}, 0xfffffffffffffff9, 0xc2, 0x4, 0x1, 0x101}, {{}, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0xf}, {{r4}, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0xfb5}, {{r2}, 0xfffffffffffffffb, 0x40, 0x80000000, 0x8000000000000001, 0x401}, {{}, 0xfffffffffffffff8, 0x4, 0x4, 0x6}, {{r2}, 0xfffffffffffffffa, 0xb, 0x40000000, 0x9, 0x4}], 0x94, &(0x7f0000000300), 0xfffb4160, 0x0)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETA(r5, 0xcd504404, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x0, "cded210800add5780337d2745db975390a120004", 0x47ffd, 0x6}) (async)
ioctl$TIOCSETA(r5, 0xcd504404, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x0, "cded210800add5780337d2745db975390a120004", 0x47ffd, 0x6})
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x0)
ioctl$TIOCGFLAGS(r5, 0x4004745d, &(0x7f0000000280))

8.598242ms ago: executing program 1 (id=3539):
sendmsg(0xffffffffffffffff, 0x0, 0x9)
shmget(0x3, 0x1000, 0x2c2, &(0x7f0000fff000/0x1000)=nil)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1, 0x10, 0x3a, 0x7}, {0x8, 0x2, 0x89, 0xfffffffd}, {0x1006, 0x8, 0xb, 0x7}, {0x7, 0x9, 0xf7, 0xd51b}, {0x0, 0x9, 0x8, 0xdf}]})
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r1 = socket(0x24, 0x2, 0x0)
getsockname(r1, 0x0, &(0x7f0000000080))
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r2, &(0x7f0000000480)='\x00'/14, 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet(0x2, 0x2, 0x0)
setuid(0xee01)
r4 = dup(r3)
ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000000)=0xa)
setsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f00000000c0)="fd0cc085", 0x4)

2.763952ms ago: executing program 7 (id=3540):
mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @multicast1}, "4efd960686b2b4d9"}}}}})
write(r0, 0x0, 0x0)
setitimer(0x2, &(0x7f0000000080)={{0x4, 0x4}, {0x4}}, 0x0) (async)
setitimer(0x2, &(0x7f0000000080)={{0x4, 0x4}, {0x4}}, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x4, 0x3}, {0x2}}, &(0x7f00000000c0))
r1 = openat$pci(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$PCIOCREAD(r1, 0xc0107002, &(0x7f0000000080))
utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x80, 0x6}, {0x1, 0x1}}) (async)
utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x80, 0x6}, {0x1, 0x1}})
pledge(0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x6a)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) (async)
munmap(&(0x7f000000e000/0x400000)=nil, 0x400000)

2.446311ms ago: executing program 1 (id=3541):
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff})
r0 = kqueue()
kevent(r0, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0)
kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000040), 0x400, &(0x7f00000002c0), 0x5f, 0x0)
r2 = kqueue()
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0xc2d839217c176f2d}, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)

0s ago: executing program 7 (id=3542):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="d9bdb1d453b8d228fa79338ff8b57c744b8458f0915fe69399503a9643178057a544077d2204664c25691adaea0ac6031770338f48b77563ce8461f3172d836d448df0900828b001c19eba7ffa00000000b61e", 0x53}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x8, 0x2a)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000400)=[{0x8, 0x81, 0xc0, 0x2}]})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x0, 0x8, 0x7, 0x1b, '\x00', 0x1, 0x10008})
setrlimit(0x4, &(0x7f0000000240)={0x10001, 0x2})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xff7fffffffffffff, 0x0, 0x25})
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000001c0)="a3f7c0cdcc2ad2c755444c8e", 0xc)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x7fffffff}, {0x5, 0xfffffffffffffffa}})
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xb}, 0x4, &(0x7f0000000100), 0x0, 0x0, 0x0)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts.
in6_pcbnotify: Huh?  Thought we never got called with mapped!
pckbd_enable: command error
0#+"$%.!",%: #/--!.$ %22/2

OpenBSD/amd64 (Amnesiac) (tty00)

login: pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
WARNING: thread `nfsio' (71685) exits with status -1
WARNING: thread `nfsio' (182158) exits with status -1
WARNING: thread `nfsio' (168220) exits with status -1
WARNING: thread `nfsio' (7180) exits with status -1
WARNING: thread `nfsio' (488345) exits with status -1
WARNING: thread `nfsio' (473190) exits with status -1
WARNING: thread `nfsio' (487229) exits with status -1
WARNING: thread `nfsio' (397876) exits with status -1
WARNING: thread `nfsio' (98158) exits with status -1
WARNING: thread `nfsio' (30077) exits with status -1
WARNING: thread `nfsio' (247402) exits with status -1
WARNING: thread `nfsio' (159839) exits with status -1
WARNING: thread `nfsio' (118216) exits with status -1
WARNING: thread `nfsio' (430033) exits with status -1
WARNING: thread `nfsio' (229109) exits with status -1
WARNING: thread `nfsio' (115195) exits with status -1
WARNING: thread `nfsio' (257986) exits with status -1
WARNING: thread `nfsio' (354444) exits with status -1
WARNING: thread `nfsio' (23311) exits with status -1
WARNING: thread `nfsio' (452098) exits with status -1
pckbd_enable: command error
WARNING: thread `nfsio' (222197) exits with status -1
WARNING: thread `nfsio' (386272) exits with status -1
WARNING: thread `nfsio' (38671) exits with status -1
WARNING: thread `nfsio' (511283) exits with status -1
uvn_flush: obj=0xfffffd807bb07cb0, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
malloc(): allocation too large, type = 6, size = 287762939904
�j���|����E1\�:
OpenBSD/amd64 (��~���1X���%�ʂ�}�ne�/�hnQ3��Sz��_�+WlE����Z`&rO�5�.&�=pT��Y��2C4�+D�B�>\��ca
�6$ps����K�
*�;�I20<z�>_�*�.�dX�~��r�k+"�NN@��K
��8�a�o�kn"r���'
ߠe���������_��h��lB�
�׉(8j�UԨ���vl���5�ȡG���3G�\L�����N)t��) (tty00)

login: pckbd_enable: command error
wskbd0: can't attach mux (error=5)
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error

OpenBSD/amd64 (Amnesiac) (tty00)

login: WARNING: thread `nfsio' (48823) exits with status -1
WARNING: thread `nfsio' (182323) exits with status -1
WARNING: thread `nfsio' (70627) exits with status -1
WARNING: thread `nfsio' (432450) exits with status -1

OpenBSD/amd64 (Amnesiac) (tty00)

login: denied attempt to set clock forward to 13622315181289262
$%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 13903790157999918
0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17
sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e
    SENSE KEY: Illegal Request
     ASC/ASCQ: Invalid Command Operation Code
denied attempt to set clock back 0 seconds
malloc(): allocation too large, type = 29, size = 16796513700
fuse: Cannot find fusebuf
pppx: unable to set addresses for pppx1, error=17
uvn_flush: obj=0xfffffd805d78e478, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
witness: lock order reversal:
 1st 0xffffffff83848e08 &cq->cq_mtx (&cq->cq_mtx)
 2nd 0xffffffff83881e10 &sched_lock (&sched_lock)
lock order [1] &cq->cq_mtx (&cq->cq_mtx) -> [2] &sched_lock (&sched_lock)
#0  mtx_enter+0x4a
#1  sleep_setup+0xc6
#2  msleep_nsec+0x10b
#3  dt_ioctl_record_stop+0xbc
#4  dtclose+0x109
#5  spec_close+0x466
#6  VOP_CLOSE+0x132
#7  vn_closefile+0x12b
#8  fdrop+0x121
#9  closef+0x192
#10 syscall+0xbd4
#11 Xsyscall+0x128
lock order [2] &sched_lock (&sched_lock) -> [1] &cq->cq_mtx (&cq->cq_mtx)
#0  mtx_enter+0x4a
#1  clockintr_cancel+0x2f
#2  mi_switch+0x16f
#3  sleep_finish+0x2d8
#4  sys_futex+0xa99
#5  syscall+0xbd4
#6  Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffffffff83881e10,9,0) at witness_checkorder+0x10b9
mtx_enter(ffffffff83881e00) at mtx_enter+0x4a
sleep_setup(ffffffff83848e58,220,ffffffff833f8599) at sleep_setup+0xc6
msleep_nsec(ffffffff83848e58,ffffffff83848df8,220,ffffffff833f8599,ffffffffffffffff) at msleep_nsec+0x10b
dt_ioctl_record_stop(ffff80000146a000) at dt_ioctl_record_stop+0xbc
dtclose(11e5f,9,2000,ffff80002a2b7248) at dtclose+0x109
spec_close(ffff80003c482da0) at spec_close+0x466
VOP_CLOSE(fffffd806f8250e8,9,fffffd80097fb478,ffff80002a2b7248) at VOP_CLOSE+0x132
vn_closefile(fffffd800d014078,ffff80002a2b7248) at vn_closefile+0x12b
fdrop(fffffd800d014078,ffff80002a2b7248) at fdrop+0x121
closef(fffffd800d014078,ffff80002a2b7248) at closef+0x192
syscall(ffff80003c483000) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb7fcd409d00, count: -14
ddb{1}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff80003c482ab0
rbx                                0
rdx               0xffff800001476580
rcx               0xffff80002a2b7248
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff80003c482990
r9                0x8080808080808080
r10               0x675f347ce92bb035
r11               0xffbac8c90fcb2cf4
r12               0xfffffd8003f00dc0
r13               0xfffffd80046eea28
r14                              0x3
r15               0xffffffff833e07fd    substchar+0x9188
rip               0xffffffff82d2ae85    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c482aa0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=97972 pid=55692 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a2b6550,0xffff80002a2b6fc0
    process=0xffff80003b824020 user=0xffff80003c47e000, vmspace=0xfffffd806b76e9a8
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 55692  462209  38702      0  2           0                syz-executor
*55692   97972  38702      0  7   0x4000000                syz-executor
 53595  319433  19898      0  7           0                syz-executor
 53595  289715  19898      0  3   0x4000080  kqread        syz-executor
 53595   74463  19898      0  2   0x4000000                syz-executor
 40465  241513  48650      0  3        0x80  nanoslp       syz-executor
 40465   45590  48650      0  3   0x4000080  kqsel         syz-executor
 40465  178611  48650      0  3   0x4000080  fsleep        syz-executor
  9009  318471  62168      0  3        0x80  nanoslp       syz-executor
  9009  180199  62168      0  3   0x4000080  sbwait        syz-executor
  9009  287339  62168      0  3   0x4000080  fsleep        syz-executor
 45865   64010  82601      0  3      0x3000  suspend       syz-executor
 45865   16028  82601      0  3   0x4081000  biowait       syz-executor
 45865  326275  82601      0  3   0x4081000  inode         syz-executor
 48650  252045  90058      0  3        0x82  nanoslp       syz-executor
 93121  391194  90058      0  3        0x82  wait          syz-executor
 59318  226576      1      0  3        0x80  nanoslp       init
 82601  367039  90058      0  3        0x82  nanoslp       syz-executor
 16600   93156  90058      0  3        0x82  nanoslp       syz-executor
 48756   56423      0      0  3     0x14200  bored         sosplice
 23263  171254  90058      0  3        0x82  nanoslp       syz-executor
 38702  394927  90058      0  3        0x82  nanoslp       syz-executor
 62168  112060  90058      0  3        0x82  nanoslp       syz-executor
 19898  429869  90058      0  3        0x82  nanoslp       syz-executor
 90058  227298  57821      0  3        0x82  kqread        syz-executor
 57821  186186  12193      0  3    0x10008a  sigsusp       ksh
 12193   11232  61802      0  3        0x98  kqread        sshd-session
 61802   78952  45868      0  3        0x92  kqread        sshd-session
 45868  304449      1      0  3        0x88  kqread        sshd
 74683  500193   1777     74  3   0x1100092  bpf           pflogd
  1777  176743      1      0  3        0x80  sbwait        pflogd
 88544  145231  30068     73  3   0x1100090  kqread        syslogd
 30068  121467      1      0  3    0x100082  sbwait        syslogd
 36770  402664      1      0  3    0x100080  kqread        resolvd
 27253  438205  72492     77  3    0x100092  kqread        dhcpleased
 94059  306275  72492     77  3    0x100092  kqread        dhcpleased
 72492   84166      1      0  3        0x80  kqread        dhcpleased
 66133  413318      0      0  3     0x14200  bored         smr
 50999  137949      0      0  3     0x14200  pgzero        zerothread
 35814  487491      0      0  3     0x14200  aiodoned      aiodoned
  9286  169529      0      0  3     0x14200  syncer        update
  1495   40896      0      0  3     0x14200  cleaner       cleaner
 14082   64144      0      0  3     0x14200  reaper        reaper
 99486  430128      0      0  3     0x14200  pgdaemon      pagedaemon
 84639  240254      0      0  3     0x14200  bored         viomb
 38552  424619      0      0  3  0x40014200  acpi0         acpi0
 27482  161214      0      0  3  0x40014200                idle1
 78053  336020      0      0  3     0x14200  bored         softnet7
 36909  270280      0      0  3     0x14200  bored         softnet6
 87377  426590      0      0  3     0x14200  bored         softnet5
 83012  353851      0      0  3     0x14200  bored         softnet4
 17961   85228      0      0  3     0x14200  bored         softnet3
 26829  332524      0      0  3     0x14200  bored         softnet2
 57712   54334      0      0  3     0x14200  bored         softnet1
 16905  398602      0      0  3     0x14200  bored         softnet0
 35732  243013      0      0  3     0x14200  bored         systqmp
 18814  308485      0      0  3     0x14200  bored         systq
 39902  386347      0      0  3     0x14200  tmoslp        softclockmp
  1781  365951      0      0  3  0x40014200  tmoslp        softclock
 87208  381790      0      0  3  0x40014200                idle0
     1  499521      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex &cq->cq_mtx r = 0 (0xffffffff83848e08)
#0  witness_lock+0x5f1
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x13b
#3  clockintr_unbind+0x56
#4  dt_ioctl_record_stop+0xbc
#5  dtclose+0x109
#6  spec_close+0x466
#7  VOP_CLOSE+0x132
#8  vn_closefile+0x12b
#9  fdrop+0x121
#10 closef+0x192
#11 syscall+0xbd4
#12 Xsyscall+0x128
Process 55692 (syz-executor) thread 0xffff80002a2b7248 (97972)
exclusive rwlock dtlk r = 0 (0xffffffff837835f8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  dt_ioctl_record_stop+0x2e
#3  dtclose+0x109
#4  spec_close+0x466
#5  VOP_CLOSE+0x132
#6  vn_closefile+0x12b
#7  fdrop+0x121
#8  closef+0x192
#9  syscall+0xbd4
#10 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8392bc80)
#0  witness_lock+0x5f1
#1  vn_closefile+0x41
#2  fdrop+0x121
#3  closef+0x192
#4  syscall+0xbd4
#5  Xsyscall+0x128
exclusive mutex &cq->cq_mtx r = 0 (0xffffffff83848e08)
#0  witness_lock+0x5f1
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x13b
#3  clockintr_unbind+0x56
#4  dt_ioctl_record_stop+0xbc
#5  dtclose+0x109
#6  spec_close+0x466
#7  VOP_CLOSE+0x132
#8  vn_closefile+0x12b
#9  fdrop+0x121
#10 closef+0x192
#11 syscall+0xbd4
#12 Xsyscall+0x128
Process 45865 (syz-executor) thread 0xffff80003c43ea90 (16028)
exclusive rrwlock inode r = 0 (0xfffffd80638547e8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vn_write+0x18f
#6  dofilewritev+0x242
#7  sys_write+0xa2
#8  syscall+0xbd4
#9  Xsyscall+0x128
Process 45865 (syz-executor) thread 0xffff80003c43ed28 (326275)
exclusive rrwlock inode r = 0 (0xfffffd8063854c88)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  vn_open+0x15a
#8  doopenat+0x35b
#9  syscall+0xbd4
#10 Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10258  11158K   11735K 166960K     13366        0
            pcb    17     16K      21K 166960K       811        0
         rtable   203     14K      15K 166960K      1163        0
             pf    44     19K   67487K 166960K       443        0
         ifaddr    38      7K       9K 166960K       280        0
        ifgroup    63      2K       3K 166960K       489        0
         sysctl     4      1K       9K 166960K        31        0
       counters    72     37K      38K 166960K       506        0
       ioctlops     0      0K       8K 166960K      2314        0
            iov     0      0K      28K 166960K       232        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1416     89K      90K 166960K      3881        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        63        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       376        0
        dirhash    12      2K       3K 166960K        81        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     236K 166960K      3941        0
          sigio     0      0K       0K 166960K       143        0
           proc    66     99K     164K 166960K      1404        0
        subproc    72      4K       4K 166960K       220        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     2      0K       0K 166960K       699        0
       in_multi    57      4K       7K 166960K       393        0
    ether_multi     1      0K       0K 166960K        39        0
            mrt     1      0K       0K 166960K        17        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   229   1023K    1023K 166960K       229        0
           exec     0      0K       1K 166960K      1024        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K        11        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   267    188K     197K 166960K     36351        0
       UVM aobj   131      8K       8K 166960K       137        0
     pinsyscall    42     84K     101K 166960K      5439        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       219        0
            NDP    14      0K       2K 166960K       207        0
           temp    90   8652K    8908K 166960K    205619        0
         kqueue    14     22K      36K 166960K       794        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      629    0      624    10     8     2     3     0     8    1
rtentry    176      418    0      354     5     0     5     5     0     8    0
unpcb      144     2813    0     2795    22    20     2     6     0     8    1
syncache   336        4    0        4     2     2     0     1     0     8    0
tcpcb      736     1175    0     1170    24    23     1     7     0     8    0
arp        128       51    0       40     1     0     1     1     0     8    0
inpcb      328     3859    0     3848    45    42     3    18     0     8    1
nd6        144       59    0       45     1     0     1     1     0     8    0
pkpcb       40       42    0       42    11    10     1     1     0     8    1
kcovpl      48       24    0       16     1     0     1     1     0     8    0
mppekey    1024       2    0        2     1     1     0     1     0     8    0
ppxss      1192     166    0      166     4     3     1     1     0     8    1
pppxif     1504      21    0       21     6     5     1     1     0     8    1
pfstscr     40        6    0        6     2     2     0     1     0     8    0
pffrag     232       22    0       18     1     0     1     1     0   482    0
pffrnode    88       20    0       16     1     0     1     1     0     8    0
pffrent     40       47    0       42     1     0     1     1     0     8    0
pfosfp      40     1428    0     1428     5     5     0     5     0     8    0
pfosfpen   112     1428    0     1428    21    21     0    21     0     8    0
pfrktable  1344       4    0        4     4     3     1     1     0     8    1
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24      256    0      151     1     0     1     1     0     8    0
pfstkey    128      272    0      166     4     0     4     4     0     8    0
pfstate    384      262    0      159    12     0    12    12     0     8    0
pfrule     1344      39    0       32     2     1     1     2     0     8    0
rttmr      136        3    0        3     3     3     0     1     0     8    0
art_heap8  4096       7    0        3     7     3     4     5     0     8    0
art_heap4  256     1718    0     1399    50    22    28    42     0     8    1
art_table   40     1725    0     1402     7     1     6     7     0     8    0
art_node    32      410    0      357     2     0     2     2     0     8    0
sysvmsgpl   40        6    0        5     1     0     1     1     0     8    0
semupl     112        3    0        3     3     3     0     1     0     8    0
semapl     112      370    0      360     1     0     1     1     0     8    0
shmpl      112      134    0        6     4     0     4     4     0     8    0
dirhash    1024      63    0       46     3     0     3     3     0     8    0
dino2pl    256     8696    0     7147    98     0    98    98     0     8    0
ffsino     296     8696    0     7147   120     0   120   120     0     8    0
nchpl      144    14026    0    13436    65    35    30    65     0     8    3
rtmask      32       33    0       33     6     6     0     1     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   50763    0    50762     8     7     1     2     0     8    0
percpumem   16      268    0      217     1     0     1     1     0     8    0
kstatmem   264      322    0      288     3     0     3     3     0     8    0
scsiplug    72       23    0       23     8     8     0     1     0     8    0
scxspl     216   116273    0   116272    16    15     1     8     1     8    0
plimitpl   152      926    0      905     1     0     1     1     0     8    0
sigapl     424     4242    0     4187     9     1     8     9     0     8    0
knotepl    120      853    0        0    25     0    25    25     0     8    0
kqueuepl   224     1554    0     1542    20    17     3     7     0     8    1
pipepl     344      585    0      557     8     4     4     6     0     8    1
fdescpl    528     4181    0     4149     3     0     3     3     0     8    0
filepl     160    28919    0    28687    44    29    15    21     0     8    3
lockfpl    104     2568    0     2566     5     3     2     2     0     8    1
lockfspl    48      692    0      690     1     0     1     1     0     8    0
sessionpl  144       42    0       34     1     0     1     1     0     8    0
pgrppl      48      211    0      195     1     0     1     1     0     8    0
ucredpl    104     4194    0     4179     1     0     1     1     0     8    0
zombiepl   144     5421    0     5417     3     2     1     1     0     8    0
processpl  1248    4242    0     4187     6     0     6     6     0     8    0
procpl     664    10601    0    10537     8     1     7     8     0     8    0
sosppl     168       31    0       29     8     7     1     1     0     8    0
sockpl     752     7472    0     7438    78    71     7    23     0     8    2
mcl64k     65536     28    0        0     4     0     4     4     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      3    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     114    0        0    14     0    14    14     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048     108    0        0     9     1     8     8     0     8    0
mtagpl      96        5    0        0     1     0     1     1     0     8    0
mbufpl     256     1166    0        0    71     0    71    71     0     8    0
bufpl      280    49198    0    43055   440     0   440   440     0     8    0
anonpl      32    16549    0        0   134     0   134   134     0   246    0
amapchunkpl 152  128995    0   128106    90    55    35    39     0   158    0
amappl16   200    17414    0    17207   124    94    30    36     0     8    8
amappl15   192        3    0        3     3     3     0     1     0     8    0
amappl14   184      173    0      162     1     0     1     1     0     8    0
amappl13   176        6    0        6     4     4     0     1     0     8    0
amappl12   168     5087    0     5055     3     1     2     2     0     8    0
amappl11   160       54    0       39     1     0     1     1     0     8    0
amappl10   152       11    0       10     1     0     1     1     0     8    0
amappl9    144      272    0      272     1     1     0     1     0     8    0
amappl8    136       23    0       20     1     0     1     1     0     8    0
amappl7    128      158    0      147     1     0     1     1     0     8    0
amappl6    120      347    0      343     1     0     1     1     0     8    0
amappl5    112      219    0      208     1     0     1     1     0     8    0
amappl4    104      319    0      301     1     0     1     1     0     8    0
amappl3     96    26468    0    26348     6     2     4     4     0     8    0
amappl2     88      913    0      851     2     0     2     2     0     8    0
amappl1     80    25711    0    25129    14     0    14    14     0     8    0
amappl      88    34759    0    34566     5     0     5     5     0    92    0
dma65536   65536      2    0        2     1     1     0     1     0     8    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma16384   16384      1    0        1     1     1     0     1     0     8    0
dma4096    4096       3    0        3     3     3     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        8    0        8     3     3     0     1     0     8    0
dma128     128      264    0      264     8     8     0     1     0     8    0
dma64       64        9    0        9     4     4     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       20    0       19     1     0     1     1     0     8    0
aobjpl      72      136    0        6     3     0     3     3     0     8    0
uaddrrnd    24     4181    0     4149     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     4181    0     4149     1     0     1     1     0     8    0
vmmpekpl   168    29709    0    29654     3     0     3     3     0     8    0
vmmpepl    168   270103    0   267856   163    48   115   119     0   357    8
vmsppl     488     4180    0     4149     6     1     5     5     0     8    0
rwobjpl     80    75518    0    68353   159     4   155   155     0     8    0
pdppl      4096    8369    0     8298   117    46    71    85     0     8    0
pvpl        32    25719    0        0   207     0   207   207     0   265    0
pmappl     256     4180    0     4149     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      423    0      114    10     0    10    10     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff83847ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf
clockintr_dispatch(ffff80002a313d50) at clockintr_dispatch+0x3b1
lapic_clockintr(0,0) at lapic_clockintr+0x51
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
end of kernel
end trace frame: 0x7a1137867cf0, count: -7
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffffffff83881e10,9,0) at witness_checkorder+0x10b9
mtx_enter(ffffffff83881e00) at mtx_enter+0x4a
sleep_setup(ffffffff83848e58,220,ffffffff833f8599) at sleep_setup+0xc6
msleep_nsec(ffffffff83848e58,ffffffff83848df8,220,ffffffff833f8599,ffffffffffffffff) at msleep_nsec+0x10b
dt_ioctl_record_stop(ffff80000146a000) at dt_ioctl_record_stop+0xbc
dtclose(11e5f,9,2000,ffff80002a2b7248) at dtclose+0x109
spec_close(ffff80003c482da0) at spec_close+0x466
VOP_CLOSE(fffffd806f8250e8,9,fffffd80097fb478,ffff80002a2b7248) at VOP_CLOSE+0x132
vn_closefile(fffffd800d014078,ffff80002a2b7248) at vn_closefile+0x12b
fdrop(fffffd800d014078,ffff80002a2b7248) at fdrop+0x121
closef(fffffd800d014078,ffff80002a2b7248) at closef+0x192
syscall(ffff80003c483000) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb7fcd409d00, count: -14