last executing test programs:

8.858064643s ago: executing program 6 (id=15):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
mknod(&(0x7f0000000380)='./bus\x00', 0x3a0914c44f7b202d, 0x5)
setuid(0xee01)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0)
ioctl$TIOCEXCL(r0, 0x2000740d)
r1 = getgid()
setregid(0xffffffffffffffff, r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r3, 0x8060693d, &(0x7f0000000100))

8.526883842s ago: executing program 6 (id=25):
mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x2)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts() (async)
r1 = syz_open_pts()
socket(0x18, 0x1, 0x0) (async)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
socket(0x800000018, 0x1, 0x0) (async)
r3 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x22, 0x4)
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0x200003})
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x3}, 0x64) (async)
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x3}, 0x64)
syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000000000000014"])
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4817, 0xffffffffffffffff, 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1f95d27d48731892, 0x7, 0x1}, 0x8)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="63d80d25971411ee09b57f1531ce491eb741fe1fc0750609d6e7e74a2fd36e550489336441d068026d6773858ef80f64e92eaa9f474a6dcd7f6c3b37e3d8de1dda84d07ad817666fc791aecf6a69a37b9eb63851e7898728c37d434e0e47a4cf58354af9417112e9919c639519dc101521d1d167d57bc59c4851a0115386482c57fbbe8ccbda813520c5181e9fa201c9773f1a29f61849454db90f0f517e5b79553f", 0x56}], 0x1)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x3, 0x8, 0x6, 0x1005, "a151dc32cbc214cfc93a0fab000000002000", 0x41180ab2, 0x7})
socket$inet(0x2, 0x2, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) (async)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
ioctl$TIOCSTAT(r1, 0x20007465, 0x0) (async)
ioctl$TIOCSTAT(r1, 0x20007465, 0x0)
readv(r0, &(0x7f0000000780)=[{&(0x7f0000003940)=""/4096, 0x1000}], 0x1) (async)
readv(r0, &(0x7f0000000780)=[{&(0x7f0000003940)=""/4096, 0x1000}], 0x1)
semop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x3, 0x1800}, {0x4, 0x1ff}], 0x2)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff08ffffffffaaaaaaaaaabb86dd60006f3300383a008a211dd10001000000000000de74f8fffffffffffbff000000000000000000aa020090780000020000000040000b3a01d709966e08a321c366000000000000aa0000000000c21200e17ec76511356e378f"])
mprotect(&(0x7f000076b000/0x2000)=nil, 0x2000, 0x2)
socket(0x18, 0x1, 0x0) (async)
r5 = socket(0x18, 0x1, 0x0)
close(r5)
r6 = socket(0x18, 0x2, 0x0)
setsockopt(r6, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4)

7.380169335s ago: executing program 6 (id=30):
mknod(0x0, 0x2000, 0x6381)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = syz_open_pts()
fchown(r1, 0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4)
r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000540))
mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202)
rename(0x0, &(0x7f0000000180)='./bus\x00')
kqueue()
r3 = socket(0x18, 0x1, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x3)
r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x84c7aa6835e42185, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f0000000100)={0x1, 0x1})
ioctl$TIOCSTOP(r2, 0x2000746f)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ec736a84f763dfb43d4ba679326f86cd74c45e9fefa4fecbb9054b41141f086f3e3597a69e4b85a0026c489c00e4def09f8fc6e1186a9a7ef7de4d6e53867246f24111aff890116f8ff9dcd17944d81c337ada1f0e42be914b2817eddec365660ff82d8b2ef8c80590b99b6cd6c6676c3a33c7cb17922152f1743956b34918fe806727f0317c3baf91410985eb2e41ebda32ed30bfa104b54ca77b0648990d9cf2fcab51d2458ddd097c76ce88ac1609d10ae2615ef566b93a59354f1f76cf6c97f57be45377830ce7a125855aedc4f7faaab51dc972"])
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f00000001c0)="ea00eb0100000000", 0x8)
r6 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r7, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000007, 0x101, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8000, 0xfffffff9}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0x6, 0x803, 0x8, 0x8}, {0x2, 0x5, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x7, 0x10001, 0xc, 0x3}, {0x408, 0x5, 0x8}, {0x6, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r7, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r7, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})

6.809049447s ago: executing program 6 (id=54):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x61, 0xf, 0x0, 0x1}, {0x20, 0x4, 0x10, 0x9}, {0x9e, 0x5, 0x0, 0x7}]})
write(r1, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe)
r2 = socket(0x2, 0x3, 0x0)
r3 = kqueue()
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r4 = socket(0x18, 0x3, 0x3a)
getsockopt(r4, 0x29, 0x66, 0x0, 0x0)
r5 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0))
kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
ioctl$FIONREAD(r2, 0xc0206921, &(0x7f0000000040))
r6 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r6, 0xc0206923, &(0x7f00000001c0))
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x4e6c)
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000000c0)=0x9)

6.224356564s ago: executing program 0 (id=63):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000000)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1, 0x0}, 0xffffffff}, 0x10, 0xc2, 0x0)
shutdown(r1, 0x0)
close(r1)
r2 = socket(0x18, 0x3, 0x0)
setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000040)={0x7, 0x6}, 0x10)
getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000080)={0x5, 0x4}, 0x10)
close(r0)

6.223951722s ago: executing program 6 (id=64):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
r1 = socket$inet(0x2, 0x8003, 0x0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/76, 0x4c}, 0x800)
setsockopt(r1, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaa0c88aa2c30b89a032d242ac01fb6380414aabb08004500001c3d47ae3bb8660001000000169078e0000002000000000000"])
setpgid(0x0, 0x0)
r2 = getppid()
setpgid(0x0, r2)
syz_open_pts()
fcntl$getown(0xffffffffffffffff, 0x5)
r3 = getppid()
kevent(r0, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffffc, 0x0, 0x40000000, 0x4, 0x9}, {{r0}, 0xfffffffffffffffa, 0x41, 0x0, 0x4, 0x3a}], 0x1a4d, &(0x7f0000000280), 0x2, &(0x7f00000002c0)={0x100, 0x9})
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4, 0x0, r3, r3, 0x0, 0x0, 0x0, 0xffffffffffffffff})
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$unix(r5, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r6 = syz_open_pts()
close(r6)
syz_open_pts()
ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000000)=0x8)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="cff5c05664da486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a30352e3b0b2e4247b103", 0x31}], 0x1)
r7 = fcntl$getown(r4, 0x5)
ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x1a2c, r7)
r8 = semget(0x3, 0x6, 0x6ef0efb9973148ad)
semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000280)=[0x7, 0x4, 0x10])

5.789880438s ago: executing program 0 (id=76):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TIOCSETA(r1, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"})
close(r1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0)
ioctl$VMM_IOC_READREGS(r1, 0xc2485607, &(0x7f0000000480))
pipe(&(0x7f0000000100))
poll(0x0, 0x0, 0x20000100)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0x9, 0x1}, {0x84, 0x11, 0x5, 0x4}, {0x9e, 0x18, 0xff, 0x6}]})
sysctl$hw(0x0, 0x0, &(0x7f0000000200)="00061b000f3e8095043fa8985d012c000001003d0817c53fcb7c6d40b5bf661080397500"/45, &(0x7f0000000000)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r3, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe)
close(r2)
close(r0)
madvise(&(0x7f00005a3000/0x4000)=nil, 0x4000, 0x2)
syz_open_pts()

5.081125211s ago: executing program 4 (id=98):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x801)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
writev(r0, &(0x7f0000001b80)=[{&(0x7f00000001c0)="8c6f8380197d8756adc1b005b76fa1d63509", 0xfffffebb}], 0x1)
ioctl$TIOCDRAIN(r0, 0x2000745e)
execve(0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x212)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f)
ioctl$FIONREAD(r1, 0xc0206917, &(0x7f00000001c0))
mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x5e07963dbfff, 0x2)
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0)
ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000500)={0x10, 0x9, [{&(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x9db}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3ed5f3fa}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x401}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x70}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x401}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff5000/0x7000)=nil, 0xfffffffffffffffd}, {&(0x7f00003fd000/0xc00000)=nil, &(0x7f0000495000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f00007c4000/0x4000)=nil, &(0x7f0000c5b000/0x4000)=nil, 0xffffffff7fffffff}, {&(0x7f0000443000/0x4000)=nil, &(0x7f0000ea1000/0x3000)=nil, 0x5}, {&(0x7f0000544000/0x1000)=nil, &(0x7f0000d0f000/0x4000)=nil, 0x1}, {&(0x7f00007ba000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d3c000/0x1000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00006fe000/0x4000)=nil, 0x3ff}], './file0\x00', 0x5})
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="b3a698e0601be3c3f5dec4d70e82d6df14ef4384b2eb83880cd341b56fda1509a6ad99e7f92a95950e7aafe749edfe132aa98a38c8dc2ad0c94513570002c6e95c1b491ec4774241", 0x48}, {&(0x7f0000000300)="054b0d1dbd0cacfbf2886d1daa39816b4bcaa737cb4225c1565e746fda665c7a1061e384ece3080000000000000018625bf25ee0515f6eea821d2bf4f2eeb6832462fdbe17af83bab0330d63e3da538a1da5c7e43644559665a0dd6a4fcf8c1a91ced5dc252526d62cd0d409f657d7eb63c43749716683a0968ce9d85af3e297d66f281ca855d30dbdca78d7fb948fb56eed99a74a20ce7cccf9109d8fcba1dc345cb1e6427ad0073f373300c84ca848e1d461522ad846cf9f00ae63abc93e878e6a38e74df5891d34974daadb3106892c19e27df1409c3a863fbb30cdb3ff2cd6fb01068d8ccc", 0xe7}], 0x2)
write(r3, &(0x7f0000000080)="e0cc6d9870e7f4660c35c65d9de33be0b2af38ed0adea440b65e7020d04434db9374b01b99e18ede11fd38335dd527196d5a385a14eaa115563b8062cb279d847036e211ec5f28c01481041475723bcc25037d796d59ec77391169754e6d74e688d311a025004e5455def01a667264373073f2dde987a8aaeafcd6693ecdf255efa4f445af018d8c6c5d2e161038864a24ac3b5d23e8e71ef9bf15b379efd71bd63419b081ac07acfd70859b749f1ef17815cfa0220519b53916342f0dde83eefa4fe15e73a95f85ce00"/223, 0xdf)
execve(0x0, 0x0, 0x0)

4.948564403s ago: executing program 0 (id=107):
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
setrlimit(0x2, &(0x7f0000000100)={0x60000000, 0x60000000}) (async)
r1 = syz_open_pts()
close(r1) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x0, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) (async)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x1}], 0x1, 0xfffffff8) (async)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0)

4.93004952s ago: executing program 0 (id=112):
r0 = socket(0x18, 0x2, 0x0) (async)
r1 = socket(0x18, 0x2, 0x0) (async, rerun: 32)
r2 = kqueue() (rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x80, 0x0) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
read(r2, 0x0, 0x0) (async, rerun: 64)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (rerun: 64)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async, rerun: 32)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 32)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) (async)
rename(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='./file2\x00')
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd4, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x100, 0xffffffff, 0x3, 0xa24}, {0xc5c, 0x1ff, 0x8, 0x1ff}, {0x800008, 0x20f05, 0x200, 0x6}, {0x7ffffffe, 0x3, 0x3, 0x1}, {0x3fd, 0x11, 0x1002802, 0x4d8a}, {0x4d9, 0xff, 0x3, 0xb}, {0x8010008, 0x7, 0x81f0, 0x2d}, {0x400006, 0x833, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000004, 0x10, 0xd1b, 0x80000088}, {0x1c4, 0x5, 0x8, 0x412c8391}, {0x3, 0x6, 0x20002, 0x4000000c}, {0xb8d, 0x4, 0x7f, 0x2}, {0x29a71720, 0x2, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0xc}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (rerun: 32)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9)
ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0xc, 0x1, 0x9, 0xfff}, {0x4, 0xc, 0x80, 0x1}, {0x6, 0x85, 0x7, 0xa}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async)
ioctl$VNDIOCSET(r5, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32)
recvmmsg(r1, &(0x7f0000000440)={0x0, 0x5}, 0x10, 0x0, &(0x7f0000000480)={0xd88}) (async, rerun: 32)
r6 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) (async)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000000c0)='{!-$*\x00', &(0x7f0000000280)='\xaa\xaa\xaa\xaa\xaa'], &(0x7f0000000340))
ioctl$FIONREAD(r0, 0x801869a3, &(0x7f0000000100))

4.85003165s ago: executing program 4 (id=113):
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="370dc7cc4e61858942", 0x9}, {&(0x7f0000000100)="a84e817b9896878852e9cd2a3c73b0aac067acb891e64dd80cdda06bc66ce0d4585525f413835dcb5f4ea6bc67a8e9a274f0003cb5324931ba0216ba7a1670bef900d24b651828b5372b7d6c2a2cf5b74d1397e637d0af32d68107631eb282cd4a3bd94b13274a63a3e8542af830d73ed951d4925d09b6a89615b982bed42bfc69b92477d0a364b875ca5bd8fcbcf18e3f452477691d6c37e02b7e406effd1f10a89e5429c27b94ee841cf3b52085044552a2ca0e11a0eb0e7bdfb1404beef7da73f22b67e7d653d4e7166c9f1b0", 0xce}, {&(0x7f0000000240)="e77c7c42313c4e58cf89a0fdcec77a1ef7e3d8e6a9941df2c86f848f8542e5", 0x1f}, {&(0x7f0000000280)="4a8f699c50e500e6d1e0d9ca41a088ae5deee77ecbdbed3772de54449bdffa7815db69ba19f7a60b3008bbcb0a478bed850097b349f61f710b92", 0x3a}, {&(0x7f00000002c0)="f7827fb33539e066b405e42b70b8d3ca631d16b02246dfe7794f42470ab41195ae175ce602702017d20535e0499939a1fe6a6005e697960b900dbafc39c0c6dc2a933f68f777714987", 0x49}, {&(0x7f0000000340)="da8f439aa9617e6f827fcb2506ea6096f109dfe10a7324aa438cfd42c3910700d7a963547fcb2e5681edbebe1b38280711fceb2afa2504e61facf76c6a414826a65d3497a3c3949817c1cdd2d8716fc831552a8d8d4ed8090727fa6931dd29c531295be217534e6b518265fb50d81a3952c829b067e62b8ef2e27ad0e13074a8d5a74daf878b3d320b7601211e800f", 0x8f}, {&(0x7f0000000700)="db044e57c3b666fe95e7384a711f8e0566e12d0f504c5622618195e703d7528145cf685188c957e3680f4b4d29917d6629790f9d4b755116de89d5f67f144ee5853df65c49fc8811b6ce5ebea0c92e9282bae43092f57d8af973009f307153f943fa09aa22f2eb336fa2e8307981681a941f31508853eb5443d0972ea83537c431b78aa99d34a1ccb186271da4dbad", 0x8f}, {&(0x7f0000000540)="e1dcbe8ac26c42356d41fe322dcd60b06716b16526301f943f229b46b993ca3565d471180d6a0f9b55bf6c40567e9b0de87755f1a1cd6963e891f32d9c5d529346b2c5a9ad6be06f338cb6258223b89a283bcab888bdba4626ce19883824b9333a4c28c8b6ac316212b06cc6b026eba2d9b32c1f4d1a27e9de1a94136a810c8243700e4233cb3ce4589f1462d06a8f85c8aa8b927d9270ba511f8700a619fc63c74c2a6f72ec015ad7bad2b817c04bd8db4ae8dbdeee67c489bbc860ee192726c6a5ba38e307dc92bc96307e1e722e61b45c466d5e38a4f119", 0xd9}, {&(0x7f00000004c0)="2c1f038a85f62f228a9f7c66c25a3c0b8efe648ca1b103bd8cccbbf7d57c5a18ed0a8f95d5a059c07a81b32ad66a65ae8fbef775f03ec3c1", 0x38}], 0x9, 0x0, 0x0, 0x406}, 0x8)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0xc008441e, &(0x7f0000000200)={0x2003, 0xfff, 0x9, 0x80000, "97a2e900", 0x4, 0xbff})
readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/35, 0x23)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
r2 = syz_open_pts()
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x401, 0x3fc}, {0x1, 0xc0000}}, 0x0)
r3 = socket(0x1, 0x2, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x5, 0x80002001, 0x3, 0x10, [{0x0, 0xfe3, 0x6, 0x71800}, {0x3, 0x4, 0x0, 0x7}, {0x6, 0x1, 0x8, 0xaf9}, {0x2, 0x0, 0x4f}, {0x1, 0x3, 0x9, 0x7}, {0x2, 0x47fff, 0x10000009, 0x5}, {0x80000cdb, 0xbffffff5, 0x4, 0x6a}, {0x2000a, 0x803, 0x9, 0x1}, {0x8, 0x83, 0xffffffff, 0x102}, {0xfffffc00, 0x2, 0x2, 0xfffffffd}, {0xa44f, 0xfff9, 0x48a, 0xe1}, {0xcb, 0x2, 0x8, 0x16}, {0xe0, 0x4, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0x100006}, {0x6, 0x5, 0x25, 0x3}, {0x81, 0x33, 0x4, 0x2}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
socket(0x6, 0x3, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x3, 0x1, 0x7ff, 0xfffeffff, 0x1, 0x1, 0x1, 0x2004007, 0xff})
r4 = socket(0x18, 0x3, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0xf, 0x100800000000009}, {0xfffffffffffffffc, 0xfff7}}, 0x0)
ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100))
close(r2)
r5 = syz_open_pts()
ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="d9050000004100000000000008bbe00000010c029078083429"])
sendmmsg(r6, &(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0)
readv(r5, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d)
writev(r2, &(0x7f0000001880)=[{&(0x7f0000000100)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0x94}, {&(0x7f00000001c0)="4ac86e940c07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed", 0x3d}, {&(0x7f0000000200)="0076f965e5368d8a2ce261ea12ce28665881a3", 0x13}], 0x3)
ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x9, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2})
ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000400)=0x10000)

4.846242431s ago: executing program 4 (id=115):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000007, 0x101, 0x80000001, 0xa1b2, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x80000007}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x482, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1000c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0)
execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0)
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0x8028698c, &(0x7f0000000100))
r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x5, 0x103}], 0x1})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c)
readv(r4, &(0x7f0000001f80)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x93, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0x10001, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800b, 0x6}, {0x401, 0xd, 0x2800, 0x9}, {0x2004, 0x650, 0x3, 0x100007}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x8100, 0x14, 0x8}, {0xd0f5, 0x20000082, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x2}, {0x8, 0xa, 0x8}, {0xb94, 0x7, 0x6, 0x1}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1000c, 0x5, 0x7, 0x4}, {0x2, 0x1, 0xfff, 0x130be239}]})
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000040)='\r\x00\x00\x00', 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$ddb(&(0x7f0000000240)={0x9, 0x1}, 0x2, &(0x7f0000000300)="02bbb50b4012aa7328f042004598dca66d74cc518142c05578670e2b489a7c0848926f2fb0f9e0a004a9e184cd48929994ace871d0f2c0040d3acdbfe42e94277f8046e17852c1e1db70c5511fe476ff1bea4676a48a174cb680ee2d895befbaae68a00c6103e7d992fbc99f", &(0x7f0000000380)=0x6c, &(0x7f00000003c0)="c6b52a519706e172", 0x8)
ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0x2}, 0xc, 0x2a2, 0x0, 0x0, 0x1, 0x80000000000000f, 0x6, 0x3f})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)

3.772128137s ago: executing program 4 (id=134):
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0xa2)

3.652568843s ago: executing program 4 (id=136):
open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r2, &(0x7f0000000100)="e8", 0x1)
r4 = kqueue()
r5 = socket(0x2, 0x3, 0x0)
connect$unix(r5, &(0x7f0000000000), 0x10)
r6 = dup(r5)
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000040)=0x4, 0x4)
setsockopt$inet_opts(r6, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4)
ioctl$VMM_IOC_RESETCPU(r6, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x4ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0x30, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x10], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x7ffffffd, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x6, 0x0, 0xfffffffffefdfffe], [0x1000, 0x20000000000, 0x0, 0x100000002, 0x4], [{0x0, 0xc, 0x4, 0x1000000000007d06}, {0xfffe, 0x2, 0x1, 0x8}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x100c, 0x0, 0x6, 0xffffffffffffffff}, {0x0, 0xfffffffd, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0x1}, {0xfffe, 0x0, 0x401}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0xffffffff, 0xf}, {0x203, 0x10, 0x4, 0x4}}})
kevent(r4, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
shutdown(r1, 0x2)
recvmmsg(r3, &(0x7f0000000880)={0x0, 0x6}, 0x10, 0x60, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
r8 = semget(0x0, 0x0, 0x438)
semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, r7}, 0x0, 0x7fffffffffffffff})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27)

3.650123579s ago: executing program 4 (id=140):
pwritev(0xffffffffffffff9c, &(0x7f0000000700)=[{&(0x7f0000000400)="075cb5f59edb0197f578377e33cd9f000000000000000000bf5be62780731998f976ee4bd7522c8a1c42912f071204e2e935f7f5d591edd2e89d760a49cf9bda1a636abece57e0cb467218e4133b00d76a372b3a830fa0d716f723c13c4fded3cc73fb19562b2de52c6a2dd034b0324b64a6268e423ea9eb567aa7e6b4fc08d8feff2095c637daa000"/148, 0x94}, {&(0x7f0000001840)="221ae9cb6291c823e669219b885864d95b9e81e1506dfd6891613a5e0c574ced0fa3a11105c7dfa435baf54daffcc4d5e2588277f93f9dec9e23bba630abdc0a9071efe69157aaac76c3073bc8f6e438471bd230b4ac41a7efe3de804b138619b27c37f8ae5868fc95a9c37ba6d051f7db70907118c743c6da58bb51b9c0bb8ebccca86dab74677000252a694e524232e7e120cb78c6dbf3db772cc4f947d7633d668e7c9d65042788936ef6b55ae465f0c8c1bb6152501fe7fb806500253fcb48c04a43fb6510f33a6c192594a3951e449689f8f665b538771aa684e826015f896eb0ae1b419e1a3791d67836", 0xed}, {&(0x7f0000000340)="7cac97023c57cf917acdea96c4992d94e8b9bf8169f542994e4a90956ec62668ab09ce97bb3eeb2009ce488ec2620d1bf6d5033cc4538991ac302e6e7a344ebf53d0f6f87abf4bd3c565c3170ef9c26b1fb22c247c7f1d00c1f63212b3ac6ffa348e7cc09dc29cc72e4f0d3478c28c4c5976e1cc6af108ad6b84522256", 0x7d}, {&(0x7f00000001c0)="8d39639b42e4ff50a4a083bded98f4f9420645ca3a7a532b42ecd9b0c1412979f196deb4ca494e01ab02bc20e185d116", 0x30}, {&(0x7f00000004c0)="d1a85c40c63607444d7e92b63cfb45b06c0cd1eb3f22b6e590b511400be564e259b5d7419cf63a270a8143b76fd25bc52d2c305c9c3405180ffa26906806e20d9342c6009053da8564534006cca6fc8695c256c5aebb0fa8ce9bf8111e5b50780afd56aefbbe5ffa54c394cd353f0b058ea674c584e4484e41c7b92acc8e3a4c0c40a69566c8f08245969a", 0xffffffffffffffd1}, {&(0x7f00000006c0)="8c9c3b17657cbf9542d453766fd84e97bd0821333f8a386e3a3dcf62fbf29fc1e9a466093b6a87584e23e791929992151e5ade5166e5833050eb95", 0x3b}, {&(0x7f0000000840)="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", 0xfffffea9}], 0x5, 0x61a) (async)
setrlimit(0x1, &(0x7f0000000980)={0x42, 0x3fb}) (async)
r0 = socket(0x1e, 0x3, 0x0)
sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d7710200"/16, 0x10}], 0x1}, 0x0) (async)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f00000005c0)="b1000503000004000000080007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad092f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c230000a37f50b6051eeab71d1889e000"/165, 0xa5, 0x7, 0x0, 0x0) (async)
r2 = syz_open_pts()
close(r2) (async)
syz_open_pts() (async)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000140)=0x7) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async)
r3 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async)
r4 = kqueue()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x6, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x1}, 0xffffffffeeffffe8, 0xef9, 0x0, 0x0, 0x5d, 0x40000000000000, 0x40000009a, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000000029, 0xa, &(0x7f0000000340)='\x00\x00\x00\x00', 0x4)
setsockopt(r5, 0x2b, 0x9, &(0x7f0000000200)="06008900514a8b5e71ab36117ded2bdc7f98be89f913457fe1b98823ea05fe6d6c23f7bddd843805dea346566d5bbd79a9bff6f0eec5c171d9caaf79576b40bd26f474e271fcf19ba483943804da6804b7d160aa06f0d57435e96b8980b7f483ce03", 0x62) (async)
kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async)
r6 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r6, 0x80146953, &(0x7f00000001c0)) (async)
ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f0000000100)) (async)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r7 = syz_open_pts() (async)
r8 = open$dir(&(0x7f0000000040)='./file1\x00', 0x3e0, 0x0)
sendsyslog(&(0x7f0000000280)="142137ef2d2fe67a22e0e6b4bd154ca32d80943e8d4455c401715c7b0d35eba985a6d535164c3995b7b60d651a9b35de17a77452376bbbd055e1f2485cb7388587ce46b2d690a927c55b48d0783b691b87f9de063c35006c02bec761293138ac397ed865b3da", 0x66, 0x0) (async)
ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0xffffffff, 0x3, 0xd96, 0x7, "840a977d68f9b34b4a4f3cbf8f412caed70d4e32", 0x8, 0x1d}) (async)
select(0x40, &(0x7f0000000000)={0xfffffff7fffffffd, 0x0, 0x9, 0x0, 0x800, 0x1, 0x0, 0x10000000}, 0x0, 0x0, 0x0) (async)
mknodat(r8, &(0x7f0000000080)='./file1\x00', 0x80, 0xffffe6c4)

3.212606741s ago: executing program 3 (id=150):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x7, 0x2, 0x3, 0x9}, {0x6, 0xf7, 0x1, 0x3}]})
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xbffffffffffffff6, 0x1000100010008, 0xffffffffffffffff})
r1 = kqueue()
kevent(r1, &(0x7f0000000080), 0x40, 0x0, 0xa, 0x0)
kevent(r1, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000280)={@local, @broadcast, [{[], {0x8100, 0x3}}], {@generic={0x8003}}})

3.21172416s ago: executing program 3 (id=151):
r0 = socket(0x18, 0x3, 0x3a)
sysctl$kern(&(0x7f0000000040)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) (async)
setsockopt(r0, 0x2, 0x18, &(0x7f00000001c0)="207a91fd5b5e208381335fa7eaa7d80b00000000004000"/33, 0x21)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x1}, 0xc) (async)
sysctl$vm(0x0, 0x0, &(0x7f0000000000)="43a262d7", 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}) (async)
sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000040)="06950100000000000000720d294b00", &(0x7f00000000c0)=0xfffffffffffffeb8, 0x0, 0x12) (async)
r2 = socket(0x18, 0x2, 0x0)
close(r2) (async)
r3 = socket(0x800000018, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="f442c68dcbea10000000000000b86200000086a5000056c778b76c26f3"], 0x10}, 0x40a)
r4 = semget(0x3, 0x1, 0x44)
semctl$SETVAL(r4, 0x3, 0x8, &(0x7f0000000240)=0x8) (async)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e", &(0x7f0000000080)=0x3c, &(0x7f0000001c00)="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", 0x1c6)
sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92b", &(0x7f0000000080)=0x8b, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8)
r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000009c0), 0x80, 0x0)
fcntl$getown(r5, 0x5)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000ac0)=0x5)
openat(r5, &(0x7f0000000040)='./file0\x00', 0x200, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f00000002c0)="abf734f14a4819137aa3fb4fede70914bb67340f459d8806085867fde6f3eceea7d85b9e4b487e5ea752729d4421276fe97a8f07a77efc742151f530da628321", &(0x7f0000000280)=0x40, 0x0, 0x0)

3.103966606s ago: executing program 3 (id=155):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x2, 0x2, 0x6, 0x100000007})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r1 = socket(0x18, 0x3, 0x0) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc})

3.103496807s ago: executing program 5 (id=156):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0000fe00010008004a"])
syz_emit_ethernet(0x1f3, &(0x7f0000000240)={@broadcast, @broadcast, [{[], {0x8100, 0x5, 0x0, 0x4}}], {@ipv4={0x800, {{0x3b, 0x4, 0x2, 0x2a, 0x1e1, 0x68, 0x1, 0x62, 0x2f, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x23, 0x4, [@broadcast, @empty, @multicast2, @empty, @broadcast, @loopback, @remote={0xac, 0x14, 0x0}, @empty]}, @timestamp={0x44, 0x20, 0x1, 0x3, 0x3, [{[], 0x100}, {[], 0x7}, {[], 0x2}, {[], 0xe}, {[], 0x4}, {[@remote={0xac, 0x14, 0x0}], 0x2}]}, @ssrr={0x89, 0xf, 0x9, [@remote={0xac, 0x14, 0x0}, @loopback, @loopback]}, @timestamp={0x44, 0x1c, 0x0, 0x1, 0x3, [{[], 0x400}, {[@multicast1], 0x3b3d}, {[], 0x101}, {[], 0x2}, {[], 0x6}]}, @noop, @rr={0x7, 0x2b, 0xfd, [@multicast1, @multicast1, @multicast2, @loopback, @local={0xac, 0x14, 0x0}, @multicast2, @empty, @remote={0xac, 0x14, 0x0}, @multicast1, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0xf, 0xc, [@rand_addr=0x10000, @loopback, @multicast2]}, @ra={0x94, 0x6, 0x2e8}, @generic={0x1, 0xc, "f5a3cbad85edd3fb8123"}, @ssrr={0x89, 0x1b, 0x0, [@remote={0xac, 0x14, 0x0}, @multicast1, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @empty, @local={0xac, 0x14, 0x0}]}]}}, @udp={{0x1, 0x3, 0x8}, {"2dad1b0c5f0e741380291a9f401930c78daaef136f2e3766ae400e7a79cb2dd18ad190370aab2ede12cbc281e502f5089c7aada690ea8c16409d87d06df1c719cb8b77704d338fe80ddd8bf0b9d04ff6499bf5f83dd4510a92ef3a8eb731c59570586ff51a861cb1235d57b9f9f4b316c0ea9df7f602fecf48b1ee5b4b9593d4d7527123846e480cbf179910607a83e159938bf3d39d7817fcd204e3897c7bc1a6a2aed17c4166e69038673c4e0aa49737cc26acf56885841a69a87c58a8cdbcaa865af2c56359145565db7c59527b60afa0a8bca2788f770ae31715d0110b952fe988a42324a1b3c270ad6803"}}}}}})
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0)
ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x2f, 0xffff, 0x40a9, 0x20000003, "0400000000800000ebb178d952d6d31962fff0d1", 0x9, 0x2})
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000040)={'./file0\x00', 0x5, 0x4, 0x3, 0x1, 0x5, 0x3, 0x4, 0x0, 0x0, 0xfffffffffffffff7, 0x2})

3.039341571s ago: executing program 3 (id=159):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x258f, 0x8c3, 0xfff6, 0x1, 0x7ff, 0xdfffffff, 0x1, 0x1, 0x2, 0x6, 0x101})
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r2 = socket(0x18, 0x2, 0x0)
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439", 0xe}], 0x1}, 0x404)
ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0))
open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f)
open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x2, 0x44f, 0x6}, &(0x7f0000000040)={0xffb, 0x8, 0x2006, 0x7, 0x2, 0x0, 0x2}, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x2, 0x44f, 0x6}, &(0x7f0000000040)={0xffb, 0x8, 0x2006, 0x7, 0x2, 0x0, 0x2}, 0x0, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x14c2, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x2, 0x2, 0x1, 0x6})
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
close(r1)

3.033436631s ago: executing program 5 (id=160):
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000480)='\x00'/14, 0xffffffffffffffc3)
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x2000000000000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000001e80)="e8431f34d5249ec3a478373af696a565249aad6051f8d6b96a4cc51d2f2ae3002c8464f0663ff38d0f02ed6bcf6d5b2b2031ee301000ab5535d48cd8fba76b949e4c074e26cb7656bc3bc158efa4d1aab311", &(0x7f0000001f40)=0x52, &(0x7f0000001f80)="b5e7d306", 0x4)
recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0)
r3 = socket(0x2, 0x3, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r3, &(0x7f0000000000), 0x10)
getpeername$unix(r3, 0xffffffffffffffff, &(0x7f0000000080))
ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f0000000000)={0x5, './file0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
ioctl$BIOCSDLT(r4, 0x8004427a, &(0x7f0000000100)=0x1000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/254, 0xfe}], 0x2, 0x0}, 0xffffffff}, 0x10, 0xc3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg(r5, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)

3.026298015s ago: executing program 5 (id=162):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x18}, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x0) (async)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

2.924277781s ago: executing program 3 (id=166):
unveil(0x0, 0x0)
unveil(0x0, &(0x7f0000000300)='W\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
chflags(&(0x7f0000000040)='./file0\x00', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r2 = kqueue()
r3 = dup(r2)
kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r3}, 0xfffffffffffffffa, 0x17, 0x40000080, 0x100}], 0x5, 0x0, 0x7, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
kevent(r4, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0)
close(r0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
r5 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @loopback, @mcast2}}}}}}})
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000050"])
ioctl$TIOCSFLAGS(r5, 0x8004745c, &(0x7f0000000300)=0xf5f)

2.607536308s ago: executing program 3 (id=168):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/193, 0xc1}], 0x1, 0x0}, 0x40)
sendmmsg(r1, &(0x7f00000000c0)={0x0, 0x7}, 0xffffffffffffffa6, 0x400)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {}, {}, {0x3}, {0x0, 0x20000000}, {0x2, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {0x0, 0xa}, {0x0, 0x1080}, {0x3, 0x400000}, {0x0, 0xa1f9}, {0x2, 0x3}, {0x3, 0x800}, {}, {0x0, 0x7ff}, {0x5, 0xfa3}, {}, {0x3}, {0x3, 0x400}, {0x0, 0x3}, {0x2}, {0x0, 0xfffffffd}, {0x0, 0x9}, {0x3}, {}, {0x1, 0xa}, {0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="9702", 0x2}], 0x1)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0xd4e688a67930cd)
close(r5)
mmap(&(0x7f000038c000/0x2000)=nil, 0x2000, 0x1, 0x5012, 0xffffffffffffffff, 0x1)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x7, 0x40, 0x6, 0x15b4000}, {0x3, 0xb, 0x2}, {0x13, 0x1, 0x4, 0xa}, {0xd9, 0xf7, 0x9f, 0x4}, {0x5, 0x8, 0x9, 0x5}, {0x1a2, 0x1, 0x5, 0xbd1b}]})

2.148638547s ago: executing program 5 (id=179):
sysctl$hw(&(0x7f00000002c0)={0x6, 0xe}, 0x2, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)=0x7, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x4001, 0x0)
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2)
r3 = socket(0x2, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4)
connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x1}, 0x8)
setsockopt$sock_int(r3, 0xffff, 0x1023, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x58, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000009, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x1, 0x400000000006, 0x5, 0x8000000000000001})
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r5 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x0)
ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x800, 0x120)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6385c4080014708100000000001a000000000000000000000000000000fffffffe00ffff"])
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9)

2.147571397s ago: executing program 0 (id=181):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r0 = socket$inet(0x2, 0x4000, 0xff)
shmget$private(0x0, 0x2000, 0x348, &(0x7f0000ffd000/0x2000)=nil)
r1 = dup(r0)
ioctl$BIOCGHDRCMPLT(r1, 0x40044274, &(0x7f0000000000))
r2 = msgget$private(0x0, 0x0)
msgsnd(r2, &(0x7f0000000040)={0x0, "916efab9d009edb91b54d7781e121f23ea5aa790fe"}, 0x1d, 0x800)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, <r3=>0x0, <r4=>0x0}, 0xc)
r5 = getegid()
fchown(r1, r3, r5)
syz_emit_ethernet(0x3c, &(0x7f00000000c0)={@random="129f446c953c", @remote, [], {@arp={0x806, @generic={0x6, 0x8013, 0x6, 0xa, 0x4, @remote, "d0d388b93206b5fd4dda", @broadcast, "b92c02373b4e6af905066a8c6238accb"}}}})
r6 = semget(0x1, 0x1, 0x20)
semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000100)={{0x4, r3, r4, r3, 0xffffffffffffffff, 0x1, 0x5}, 0x80000000, 0x6, 0x2})
r7 = socket(0x20, 0x4000, 0xf7)
ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f0000000180)=0xec)
ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f00000001c0)=0x80000000)
ioctl$FIONREAD(r7, 0x4004667f, &(0x7f0000000200))
syz_emit_ethernet(0x40, &(0x7f0000000240)={@empty, @local, [{[], {0x8100, 0x2, 0x0, 0x2}}], {@generic={0x8036, "93d4577b8bbf76adfc85ad62236921c00e4f0a2f44507baaf593aff86e98f7100b4321e6b94dabb4a573ec8252cd"}}})
sendto(r1, &(0x7f0000000280)="097803ec4868221f97796d123b5bc0832b1a28e8108295ff5b1dfc9eee533b6c49cd49349150aad64f6f94f3e6e0ab7c78a71c45bf1e041bc5085dfaa358ae3f6c0cc0f2e0a3483839286a7bc19430bd54b46f9472df09d4fb562c14d1197c811c30378838a5e86f9c90bd46b8c93fc4fe7141f5bcd9330265c5fb3c7d41cfde8c945420d898f79408931e28fe3ef5bc90a7cddf7986318380a0", 0x9a, 0x3, &(0x7f0000000340)=@un=@abs={0x1, 0x0, 0x3}, 0x8)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000380)=""/90)
getgroups(0x1, &(0x7f0000000440)=[<r8=>r4])
chown(&(0x7f0000000400)='./file0\x00', r3, r8)
shmget$private(0x0, 0x2000, 0xca, &(0x7f0000ffe000/0x2000)=nil)
shmget(0x2, 0x11000, 0x82, &(0x7f0000fef000/0x11000)=nil)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000480)={0x7f, 0x27a, {0xf, 0x4}})
chdir(&(0x7f00000004c0)='./file0\x00')
ioctl$WSKBDIO_GETMODE(r0, 0x40045714, &(0x7f0000000500))
getpeername$inet(r0, &(0x7f0000000540), &(0x7f0000000580)=0xc)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x6, 0x1, 0x4, 0x100}]})

2.049081019s ago: executing program 0 (id=186):
r0 = socket(0x11, 0x3, 0x0) (async)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x0)
mknod(0x0, 0x1ffa, 0x0)
rename(0x0, 0x0)
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000000c0)) (async)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
rename(&(0x7f0000000240)='./file1\x00', 0x0) (async)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)='./file0/file0\x00')
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0x2, 0x4, 0xfffbfffe, 0x40000005, "ff14e7130b40000200", 0x2, 0xfffffffe})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$unix(r3, &(0x7f0000000140)=@file={0x1, './file0/file0\x00'}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
setsockopt(r0, 0x11, 0x1, &(0x7f0000000340)="1fed00be", 0x4)
r5 = fcntl$dupfd(r1, 0x0, r4)
ioctl$TIOCSTOP(r5, 0x2000746f) (async)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000ed710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba090000001de371a3f8343732051ed6b71989e0000405f8fffffe13000000", 0xb1, 0x2, 0x0, 0x0)

1.807692334s ago: executing program 1 (id=188):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x200, 0x5, 0xffffdfa2, 0xffffff8a, "08ed909900006a49260da02948b06321f385ffe6", 0x4000000, 0x20008})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffe, 0x10000001, 0x200000000000, 0x6, 0xfffffffffffffe01, 0x6, 0x4, 0x400}, 0x0, 0x0, 0x0)
r2 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r2)
sysctl$vm(&(0x7f0000000640)={0x2, 0x7}, 0x2, 0x0, 0x0, &(0x7f00000007c0), 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0)
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d02565dfbdd60de5f231e000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r4, 0x0)
r5 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r5, &(0x7f00000005c0)=[{&(0x7f00000009c0)="4e174776da", 0x5}], 0x1)
r6 = socket(0x18, 0x2, 0x0)
setsockopt(r6, 0x1000000000029, 0x3f, &(0x7f0000000140), 0x0)
execve(0x0, 0x0, 0x0)
clock_gettime(0x3, &(0x7f0000000080))

1.719509581s ago: executing program 2 (id=192):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
r1 = socket(0x1, 0x1, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, 0x0)
fcntl$getown(r0, 0x5)
setsockopt(r1, 0x200, 0xd8, &(0x7f0000000080)="ef9f8e1b315eb7e9b3555a56ccf65b3324deb173cce0b792bb53f4016e0fe3c8384f8213cd5caad8f3a1fa0d256d06cc7fdab1b82b947ab9431a845d92a9c0753b04c38247e8501d624ce4bdebb4356fbfb5d97495d7ed62be107a8a1d473588c9a70d2ce46a92e6e8bd720213cf4556718b015cab047f28260fb680c2ca78c0dcaba82a15d6595185b290bee18bf0b81834b27ea0f3a96f960f0473559e3016ebd6bd3f4985c20c2a83318b5b2972d047054c917189ca24e8b3", 0xba)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000200)=[{0x40, 0x6, 0x4, 0x6}, {0x1, 0x2, 0x9, 0x8}, {0x400e, 0x91, 0x53, 0x4}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[])

1.599064217s ago: executing program 1 (id=195):
r0 = socket(0x11, 0x3, 0x0)
msgget$private(0x0, 0x200)
getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000040)=0x10)
semop(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79c9)
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x9711e361c498d1f2, 0x0)
getrusage(0xffffffffffffffff, &(0x7f00000001c0))
writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000002c0)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e09000000d886eafbe03881d25b7b59f701322b3a109a13436e486b0a6eee", 0x62}], 0x2)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0)

1.598050874s ago: executing program 7 (id=196):
r0 = socket(0x2, 0x3, 0xfe)
r1 = shmget$private(0x0, 0x1000, 0x205, &(0x7f0000ff4000/0x1000)=nil)
r2 = shmat(r1, &(0x7f0000ff5000/0x3000)=nil, 0x2000)
shmdt(r2)
accept$unix(r0, 0x0, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000002c00)={0x4, 0x18, 0x29, 0x29}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0xffffffffffffffa6, &(0x7f0000000040)="00000000e408278de8750e30ab0f2aa5bb24723d299583010a0f6267522fb6ec3cc0961b69747d789ef2e13ae911b08f", 0x4)
sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x29}, 0x4, &(0x7f00000000c0)="7f4b64dd1459cf59c48bb27f5a699ebf2bb611759716c91518e186ac65f7647837b7a5b8b5", &(0x7f0000000100)=0x25, &(0x7f0000000140), 0x0)

1.597177717s ago: executing program 2 (id=197):
select(0x40, &(0x7f0000000080)={0x2, 0x9, 0x9, 0xf62, 0xfffffffffffffffb, 0x3, 0x1b92, 0xf}, 0x0, &(0x7f0000000140)={0x100000001, 0x2, 0x8, 0xb22, 0x8000000000000001, 0x9a3, 0x0, 0x6}, 0x0)

1.478536913s ago: executing program 7 (id=198):
setrlimit(0x7, &(0x7f0000000640)={0x5, 0x8})
r0 = syz_open_pts()
close(r0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = syz_open_pts()
setrlimit(0x1, &(0x7f0000000900)={0x73, 0x3})
r2 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa)
rename(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='./file2\x00')
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd4, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x100, 0xffffffff, 0x3, 0xa24}, {0xc5c, 0x1ff, 0x8, 0x1ff}, {0x800008, 0x20f05, 0x200, 0x7}, {0x8, 0x3, 0x3, 0x1}, {0x3fd, 0x11, 0x1002802, 0x4d8a}, {0x4d9, 0xff, 0x3, 0xb}, {0x8010008, 0x7, 0x81f0, 0x2c}, {0x400006, 0x833, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x4, 0xffff, 0xd1b, 0x80000088}, {0x1c4, 0x5, 0x8, 0x412c8392}, {0x3, 0x6, 0x20002, 0x4000000c}, {0xb8d, 0x4, 0x7f, 0x2}, {0x29a71720, 0x2, 0x4, 0x6}, {0x4, 0x7, 0xfffffff9, 0xfe}, {0x0, 0x8, 0x1002, 0xc}]})
readv(r1, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/250, 0xfa}, {&(0x7f00000007c0)=""/197, 0xc5}], 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1a5f)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xffffffc, 0x7, 0xc3, 0x71000}, {0x7b86, 0x8, 0x4, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x8800, 0x80000001, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x82, 0x4, 0x3}, {0x4, 0x28101, 0x93, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0xc3b, 0x80000003, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0xbc3d, 0x4, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r6 = socket(0x18, 0x2, 0x0)
shutdown(r6, 0x2)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}})
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0xe}, {0x3e, 0x40, 0x7, 0x4}]})
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9)

1.477136501s ago: executing program 1 (id=199):
open(&(0x7f0000000080)='./file0\x00', 0x80000000000206, 0x0)
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r0, 0x1000000000029, 0xb, 0x0, 0x0)
r1 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1, r1, 0x0, 0x0, 0x0, 0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x1, 0xfffffffe}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0x4}, {0x3}, {}, {0x3}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {}, {0x0, 0x9}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {0x1}, {}, {0x2}, {}, {}, {}, {}, {0x1}, {0x0, 0x57fd}]})
r3 = kqueue()
kevent(r3, &(0x7f0000000000), 0x8, &(0x7f00000001c0), 0x15, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x80000001, [{0x2}, {0x0, 0xeffffffe}, {}, {0x0, 0x56}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0xc8}, {0x5, 0x2}, {0x2, 0x800000}, {0x3}, {0x1}, {0x3}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {}, {}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {}, {0x0, 0xc}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x11}]})
sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000003, 0x80000081, 0x5, 0x10, [{0x0, 0x101, 0x4, 0x71000}, {0x7, 0x88, 0x20008, 0x4}, {0x8, 0x6, 0x0, 0x7ff}, {0x3, 0x900, 0xffff}, {0x3fd, 0x200326, 0x2800, 0x7}, {0x82, 0x27f6, 0x4, 0x80099}, {0x8, 0x4, 0x4f8, 0x6d}, {0xc, 0x801, 0x8, 0x4}, {0x6, 0x82, 0x9, 0x9}, {0x7, 0x100, 0x5, 0x200}, {0x1e6, 0x10005, 0xc, 0x6}, {0x7fe, 0x9, 0x8}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171c, 0x3, 0x1, 0x5}, {0xfffffe00, 0x7, 0x4, 0xffffffff}, {0x0, 0x1, 0x1002, 0x1}]})
sysctl$kern(&(0x7f0000000040)={0x1, 0xa}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe67)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f00006e0000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x400000d3b5}, {&(0x7f0000ca6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000e82000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b932}, {&(0x7f0000ec8000/0x4000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0xe2e}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005ea000/0x3000)=nil, 0x6}, {&(0x7f000025e000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x81}, {&(0x7f0000005000/0x1000)=nil, &(0x7f00005e5000/0x2000)=nil}, {&(0x7f0000ba0000/0x4000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x10000000001}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x8}, {&(0x7f0000707000/0x4000)=nil, &(0x7f0000a1d000/0x4000)=nil, 0x812b}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000b0f000/0x2000)=nil, 0x6}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000094c000/0x1000)=nil, 0xb}, {&(0x7f000001e000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000c03000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x4}], './file0\x00', 0xfffffffe})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffff9c, 0x82485608, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
r4 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @rand_addr=0x2c, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@broadcast, @rand_addr=0x10]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x7832, 0x3ff, 0x1, 0x9}}}}})
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(0xffffffffffffffff, 0x80206979, 0x0)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})

1.476256382s ago: executing program 2 (id=200):
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r0 = syz_open_pts()
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5)
r2 = fcntl$dupfd(r0, 0xa, r0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="eff5d54cfe8817589117376223d693453b24077b51dd97d42828cf0df934be1ad6ab03baf107b9b39aae8674793eb48780a5c965dbb5ea8507feca976513b60a08b980c600348c597d05a3e6470b6f6d49d012815a07ba10b2950aa3b7a718f1df90db1237", 0x65}, {&(0x7f0000000140)="e3b4ec38890c9c405058e3084a", 0xd}, {&(0x7f0000000300)="b19915acb53a5ec9ccf8a8ab0dbe8936411e8e8b4a61551f5bd168e52cce9927c7949ef660162ffb5228b0e68b8da9fa135cd309c5a309d7606d8bb1c13458e70ebde927c76235f2dc4fcd27b53a7cf5f7516fcac0136261ee57f9b9217246d296", 0x61}], 0x3)
close(r1)
close(r0)
syz_open_pts()
open(&(0x7f0000000080)='./file0\x00', 0x80000000000206, 0x0)
r3 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000230, r3)
setreuid(0xee00, 0x0)
ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x40001930, r3)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='r\x00')
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSFILDROP(r4, 0x80044279, &(0x7f0000000000)=0x2)
syz_emit_ethernet(0x135, &(0x7f0000000100)=ANY=[])
truncate(0x0, 0x100000000)

1.475731079s ago: executing program 1 (id=201):
r0 = kqueue()
dup(r0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x186)
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x110)
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x0)
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0x808c694d, &(0x7f0000000100))
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0)
close(r1)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x40}, {r3, 0x4}], 0x2, 0x3)

328.528443ms ago: executing program 2 (id=202):
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x200, &(0x7f0000000080)='./file0\x00', 0x8}) (async)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='*$\\!\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/rvnd0c\x00', &(0x7f0000000200)='/dev/rvnd0c\x00'], &(0x7f00000004c0)=[&(0x7f0000000280)='/dev/rvnd0c\x00', &(0x7f00000002c0)='-\x00', &(0x7f0000000300)='/dev/rvnd0c\x00', &(0x7f0000000340)='(\x00', &(0x7f0000000380)='/dev/rvnd0c\x00', &(0x7f00000003c0)='/dev/rvnd0c\x00', &(0x7f0000000400)='/dev/rvnd0c\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00']) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000580)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f00000005c0)=0xc)
ktrace(&(0x7f0000000540)='./file0\x00', 0x2, 0x0, r1) (async)
r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0)
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000640)={0x0, 0x3, 0x1, 0x8000, "76afa0dbd42c2abfa8228378072f95c7ef06c991", 0x8, 0x4}) (async)
r5 = socket(0x2, 0x3, 0xc0)
r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000680), 0x10, 0x0)
ioctl$VNDIOCCLR(r6, 0x80384601, &(0x7f0000000740)={&(0x7f00000006c0)='./file0\x00', 0x8, &(0x7f0000000700)='./file0\x00', 0x8})
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000780)={0xffff, 0x0, 0x47c, 0x5, "f7712c223e83dcc7bf6597dee80a00b26b31534e", 0x2, 0xff}) (async)
connect(r5, &(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x2}, 0x8)
lchown(&(0x7f0000000800)='./file0\x00', r2, r3) (async)
ioctl$VNDIOCCLR(r6, 0x80384601, &(0x7f00000008c0)={&(0x7f0000000840)='./file0\x00', 0x2, &(0x7f0000000880)='./file0\x00', 0x8})
r7 = syz_open_pts()
ioctl$TIOCGETA(r7, 0x402c7413, &(0x7f0000000900))
socket(0x10, 0x2, 0x40) (async)
fcntl$setstatus(r4, 0x4, 0x40)
r8 = syz_open_pts()
r9 = kqueue()
r10 = fcntl$dupfd(r8, 0xa, r9) (async)
ioctl$TIOCNOTTY(r7, 0x20007471) (async)
fchflags(r6, 0x10000) (async)
r11 = getpgid(r1)
fcntl$setown(r6, 0x6, r11)
ioctl$BIOCSDLT(r10, 0x8004427a, &(0x7f0000000940)=0xa)
ioctl$WSDISPLAYIO_DELSCREEN(r10, 0x80085754, &(0x7f0000000980)={0xf8c5, 0x4}) (async)
ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000009c0)={0x1, 0xfff, 0x0, 0x9, "24cd864920f909e7874ffdc17c7981c5211ffa7a", 0x3, 0x6})
sysctl$kern(&(0x7f0000000a00)={0x1, 0x51}, 0x2, &(0x7f0000000a40)="0ab9a1ee39f8c9d59702fd7fe9c9c6c623e44b7e3a148a4bac4c03183037da3da9718430d24e825d7443c260177e66aa93c50005c1c4cf65e89cb7cc190f51cd3bc1c9487d3394d8b6d17fc61b25d03e6497c3df383acf1cb6d47b98b60da09893b7ff8b41f74a1a4fe85bdd77fcde0466e2a8af552dd546ee17bea808f3c0909795d691a977e82733aa71566f50fb7c982833868e0be47a3088d561bee9f9244e99c52d3ac6fbd5d7d98e4fec80a4661402992b0bd673c053a49de52f33c6e622259452ee69b2ee2f1dc2b2f14cc6edb2d9afe118c2f50caf07829229c7cd80c95002c7fb86078cb79211", &(0x7f0000000b40)=0xeb, &(0x7f0000000b80)="91fdd0a99d5d174a171dcf49a99cc77a6123e52cd2736d8a888efcb32b6364974a091aef9860661a085874c9bde580a8aed12396b7b08e62d9460da801113e8636728ec16531ee74ded8f8cb94dbef3c203c7e130520be9942c9e348ce5d17fa0e4633ecc362b1fa3ace1a42", 0x6c) (async)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x8004746b, &(0x7f0000000c00)=0x7fffffff)

308.381312ms ago: executing program 6 (id=203):
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4)
r0 = kqueue()
kevent(r0, 0x0, 0x10001, 0x0, 0x7e36, &(0x7f0000000300)={0xfffffffffffffffd, 0xe6})
setrlimit(0xa00a2adee21ce02b, 0x0)
mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r1 = kqueue()
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f00000000c0)={0xf, 0x1})
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x0, 0x297, 0xffff0000, 0x1, 0x5, 0xe, 0x8000000c, 0x2, 0x0, 0x100000000644, 0xffffffffffffffc8})
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0xfffffffb, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0xf, 0x100006}, {0x4, 0x9, 0x7, 0x3}, {0x0, 0x5, 0x4, 0x30000}]})
select(0xffffffffffffff79, &(0x7f0000000180)={0xa, 0x44809e9d, 0x100000004, 0x7, 0x800, 0x10001, 0x1000000000005, 0x2000000010000008}, 0x0, 0x0, 0x0)
ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x8, 0x200297, 0xfffefffd, 0x0, 0x5, 0xd87, 0x8000000c, 0x1, 0x2, 0x280000003, 0xffffffffffffffc6})
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
r6 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
open(&(0x7f0000000080)='./file0\x00', 0x2, 0x100)

307.968339ms ago: executing program 5 (id=204):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x406}, 0x0)
r0 = socket(0x18, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f4601faa903493e339865dce0f225d", 0x2f}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
writev(r1, &(0x7f00000005c0), 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
r3 = kqueue()
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setuid(0xffffffffffffffff)
ioctl$BIOCLOCK(r4, 0x20004276)
syz_emit_ethernet(0x1000e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"])
ioctl$BIOCSFILDROP(r4, 0x40047477, &(0x7f0000000000)=0x1)
kevent(r3, &(0x7f0000000280)=[{{r3}, 0xfffffffffffffffa, 0x30, 0x2, 0x7ed79adb, 0x8}, {{r3}, 0xffffffffffffffff, 0x1, 0x4, 0x9, 0x7ff}], 0x2, 0x0, 0x2, 0x0)
ioctl$TIOCSETA(r2, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe})

307.622742ms ago: executing program 7 (id=205):
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet6(0x18, 0x1, 0xb8)
sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000080)="c96547df1994818611bf4007d956363167c0eb0d000000000000b97ddbaaa24c063aa893edb5e7120dbe606f91cc989123a3669c3062fd7e7448d8b32a66edd859fe7850ee82bba1d4efbb19e2b3fde8f90403d6321ad520adcbb6e0142d5cc87343638dd6972ffffc2ab319e779be25a65d068fc1950f1b9e540bb51eea8c8adbc7dcde8573a75f77283106b095efcbae8a246254d9be", 0x0, 0x0, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x7b2b5482f7eba89e, &(0x7f0000000180), &(0x7f0000000040)=0x4)

129.153958ms ago: executing program 7 (id=206):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
socket$inet(0x2, 0x2, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
close(r1)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="10", 0x3}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea10070000000000", 0x8)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]})
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x7fff, 0x7, 0xd5, "00000000000000000000001500", 0x3, 0x1})
openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async)
r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x2005})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)

123.523005ms ago: executing program 2 (id=207):
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async, rerun: 64)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (rerun: 64)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, 0x0})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
r0 = socket(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000000), 0x10) (async)
sysctl$net_inet6_icmp6(0x0, 0x0, 0x0, &(0x7f0000000300)=0xfffffe16, 0x0, 0x0) (async)
sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x11}, 0x4, &(0x7f00000001c0)="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", &(0x7f0000000100)=0x104, &(0x7f0000000180)="05d5c7db928550cd2e7763ee247cf85def643f007fc900"/42, 0x2a) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async)
mlock(&(0x7f00004ac000/0x1000)=nil, 0x1000)

122.500085ms ago: executing program 5 (id=208):
openat$diskmap(0xffffffffffffff9c, 0x0, 0x20, 0x0)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x90, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x0, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x11002, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x5, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x2, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}})
r0 = kqueue()
kevent(r0, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0)
kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)

115.958191ms ago: executing program 7 (id=209):
r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x5)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x48)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x10001, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4}, {0x6, 0xc, 0x8, 0x7}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x652, 0x3, 0x9a}, {0x2, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0xd851, 0x7310, 0x5, 0x5}, {0xfffffffd, 0x8001, 0x6, 0x4}, {0x2, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x1000008, 0x2}, {0xb90, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x7, 0x3, 0xac, 0xb9}, {0x9, 0x0, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r2 = socket$inet(0x2, 0x2, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7)
sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x3, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc)

8.046171ms ago: executing program 2 (id=210):
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xca)
r0 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) (async)
poll(0x0, 0x0, 0x1) (async)
setrlimit(0x6, &(0x7f0000000180)={0x200, 0x95f}) (async)
select(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffff9, 0x800, 0x2, 0x0, 0x4, 0x5, 0x7}, &(0x7f0000000040)={0x6, 0xc1, 0x1, 0x300, 0x100000000, 0x5dce, 0x865a, 0x9}, &(0x7f0000000080)={0x9, 0xffffffffdfffff00, 0xb0, 0x4, 0x0, 0x6, 0x3800000000000000, 0x9}, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x5c, 0x5, 0x25, 0x5}, {0x3, 0x10, 0xfd, 0x9}, {0x6, 0x4, 0x53, 0x80000000}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg(r2, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
kqueue() (async)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x40, 0x100)
syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b03356d0140558d3dfd766d0a62aab10b9bfe4d1aafbaf5c2c66da2acf4faeb1e580100907828"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000480)="823bbdb8cc7de4a0c462c3a4088617f981aa31e6abbbdabb26a52ad70000000025bb92cd831a9f9a3f308696ee47d9013c10cf42f44918db42e28a82d0b77efcc3f48600f4a72e5bde1cc51b5a6f80728820484b966cd888e553314d962dd42f3a5f813c9e74d80b43c81406495d5d987897fa00dda5e106e3f71133d4756ddf0d18e0a9389ec55798f473e5bca74e7565624cdad8372d1ab8c8dc6916e79b54", 0xa0}], 0x1)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async)
sendmsg$unix(r2, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
close(r2) (async)
r4 = socket(0x2, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10) (async)
unveil(0x0, &(0x7f00000000c0)='r\x00')
sysctl$net_inet_esp(&(0x7f00000004c0)={0x4, 0x2, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffc71) (async, rerun: 32)
syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYRES32]) (rerun: 32)

2.809561ms ago: executing program 1 (id=211):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x20, 0x0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x2, 0x6, 0x100000007}) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3920500000000000000fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3e0900abee7e3ebe806fdb4f6af569ae94b5d1271871a2e68a827d0080c926123522", &(0x7f0000000080)=0x4, &(0x7f0000000180)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae19000001009d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521798686e472b70b560f7021f567adf4d", 0xffe4)
faccessat(r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x3)

2.123232ms ago: executing program 7 (id=212):
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
setrlimit(0x8, &(0x7f00000000c0)={0x8, 0x54})
r0 = socket(0x1, 0x2, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
socket(0x6, 0x3, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x3, 0x1, 0x7ff, 0xfffeffff, 0x1, 0x1, 0x1, 0x2004007, 0xff})
socket(0x18, 0x3, 0x0)
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x42b78c, 0xd0f, 0xfffbfc03, 0x80a199, "bb080006020900d91050080000000f00", 0x1, 0x5})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000340)={0xe, 0x2, 0x80000000, 0x6, 0xa, 0x10000, 0x501a, 0x10, [{0x90, 0xfd21, 0x7, 0x6}, {0xbb6, 0x0, 0x6, 0x777}, {0x2000005, 0x7, 0x81, 0x200}, {0x0, 0x1, 0x8, 0x1}, {0x4, 0x7, 0x5, 0x100}, {0xb1e4, 0x3ff, 0xfff}, {0x1, 0x9, 0xffffffff, 0x9}, {0x16, 0x6, 0x10}, {0xd, 0x17, 0x4, 0x4}, {0x3, 0x9c, 0x1, 0x1}, {0xffffffff, 0x8, 0x9, 0x8}, {0x424, 0x9a0, 0x8, 0x3}, {0x9, 0x2, 0x3, 0x4}, {0x8bc, 0x0, 0x200, 0x6}, {0x4, 0xfffffff3, 0x7, 0x7}, {0xfffffffc, 0x9, 0x0, 0x800}]})
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
r2 = socket(0x18, 0x1, 0x0)
r3 = socket$inet(0x2, 0x3, 0x0)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
r5 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
close(r5)
open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120)
chroot(&(0x7f0000000740)='.\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)

0s ago: executing program 1 (id=213):
r0 = socket(0x18, 0x2, 0x0)
r1 = socket(0x18, 0x3, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005016000009f05000500070000000018", 0x12, 0x2, 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100))
connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x7}, 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts.
pckbd_enable: command error
denied attempt to set clock forward to 495890607918
pckbd_enable: command error
mode = 0100604, inum = 107123, fs = /
panic: ffs_valloc: dup alloc
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
  47817  94978      0         0x2          0    0  syz-executor
*476101  25305      0         0x2          0    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff83365f40) at panic+0x1e5
ffs_inode_alloc(fffffd806c457a98,41ed,fffffd80097fb5b0,ffff80002a319d68) at ffs_inode_alloc+0x94e
ufs_mkdir(ffff80002a319dd0) at ufs_mkdir+0xfc
VOP_MKDIR(fffffd806d312980,ffff80002a319f30,ffff80002a319f60,ffff80002a319e60) at VOP_MKDIR+0x101
domkdirat(ffff80002a272d08,ffffff9c,72a46153be10,1ff) at domkdirat+0x179
syscall(ffff80002a31a0e0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x72a46153beb0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: ffs_valloc: dup alloc
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83365f40) at panic+0x1e5
ffs_inode_alloc(fffffd806c457a98,41ed,fffffd80097fb5b0,ffff80002a319d68) at ffs_inode_alloc+0x94e
ufs_mkdir(ffff80002a319dd0) at ufs_mkdir+0xfc
VOP_MKDIR(fffffd806d312980,ffff80002a319f30,ffff80002a319f60,ffff80002a319e60) at VOP_MKDIR+0x101
domkdirat(ffff80002a272d08,ffffff9c,72a46153be10,1ff) at domkdirat+0x179
syscall(ffff80002a31a0e0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x72a46153beb0, count: -8
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a319ae0
rbx               0xffff8000299eeddf
rdx                                0
rcx               0xffff80002a272d08
rax               0xffff8000299edff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xb1e20f1dfafda0db
r11               0x8433c01e5dd5906e
r12               0xffff8000299eebe0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff8324b8f5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a319ad0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=476101 pid=25305 tcnt=1 stat=onproc
    flags process=2<EXEC> proc=0
    runpri=76, usrpri=76, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffffc2a0,0xffff80002a272550
    process=0xffff8000ffff3500 user=0xffff80002a315000, vmspace=0xfffffd800b0277a0
    estcpu=36, cpticks=29, pctcpu=0.18, user=0, sys=29, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 21862  143681  75411      0  3        0x80  nanoslp       syz-executor
 21862  390567  75411      0  3   0x4000080  kqread        syz-executor
 21862  482813  75411      0  3   0x4000080  fsleep        syz-executor
 98805  354632      0      0  3     0x14200  bored         sosplice
 94978   47817  41530      0  7         0x2                syz-executor
 75411  429975  41530      0  3        0x82  nanoslp       syz-executor
 95080   50207  41530      0  3        0x82  wait          syz-executor
 15344   56836  41530      0  3        0x82  nanoslp       syz-executor
*25305  476101  41530      0  7         0x2                syz-executor
 70770  389606  41530      0  3         0x2  biowait       syz-executor
 41530   39743   8356      0  3        0x82  wait          syz-executor
  8356  287133  74232      0  3    0x10008a  sigsusp       ksh
 74232   94360  89257      0  3        0x98  kqread        sshd-session
 89257   16355  32153      0  3        0x92  kqread        sshd-session
 13198  467814      1      0  3    0x100083  ttyin         getty
 32153  505526      1      0  3        0x88  kqread        sshd
 32139  259492  49803     74  3   0x1100092  bpf           pflogd
 49803   85145      1      0  3        0x80  sbwait        pflogd
 20088   23105  56748     73  3   0x1100090  kqread        syslogd
 56748  377249      1      0  3    0x100082  sbwait        syslogd
 53745  334308      1      0  3    0x100080  kqread        resolvd
 93874   92629  88050     77  3    0x100092  kqread        dhcpleased
 17718  202892  88050     77  3    0x100092  kqread        dhcpleased
 88050  453071      1      0  3        0x80  kqread        dhcpleased
 55161  404159      0      0  3     0x14200  bored         smr
 80098  351815      0      0  3     0x14200  pgzero        zerothread
  6303  128222      0      0  3     0x14200  aiodoned      aiodoned
 18006  304820      0      0  3     0x14200  syncer        update
 68450  439186      0      0  3     0x14200  cleaner       cleaner
 60155  316595      0      0  3     0x14200  reaper        reaper
 42975  345155      0      0  3     0x14200  pgdaemon      pagedaemon
 14585  300389      0      0  3     0x14200  bored         viomb
 59825  179180      0      0  3  0x40014200  acpi0         acpi0
 59366  400948      0      0  3  0x40014200                idle1
 12496   87413      0      0  3     0x14200  bored         softnet1
 60853  218047      0      0  3     0x14200  bored         softnet0
 47786   77401      0      0  3     0x14200  bored         systqmp
 26041  231927      0      0  3     0x14200  bored         systq
 84782  188729      0      0  3     0x14200  tmoslp        softclockmp
 30103  327920      0      0  3  0x40014200  tmoslp        softclock
 11814   33985      0      0  3  0x40014200                idle0
     1  436855      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 25305 (syz-executor) thread 0xffff80002a272d08 (476101)
exclusive rrwlock inode r = 0 (0xfffffd806e264120)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x279
#7  ufs_mkdir+0xfc
#8  VOP_MKDIR+0x101
#9  domkdirat+0x179
#10 syscall+0xb17
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806c457b38)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  domkdirat+0x8b
#8  syscall+0xb17
#9  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839def08)
#0  witness_lock+0x5f1
#1  syscall+0xaf4
#2  Xsyscall+0x128
Process 70770 (syz-executor) thread 0xffff8000ffffc2a0 (389606)
exclusive rrwlock inode r = 0 (0xfffffd806c1448f8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vget+0x2a2
#6  ufs_ihashget+0x185
#7  ffs_vget+0x8c
#8  ufs_lookup+0x1a36
#9  VOP_LOOKUP+0x6e
#10 vfs_lookup+0x93a
#11 namei+0x7ca
#12 dounlinkat+0xc1
#13 syscall+0xb17
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806c144d98)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vget+0x2a2
#6  cache_lookup+0x351
#7  ufs_lookup+0x1e3
#8  VOP_LOOKUP+0x6e
#9  vfs_lookup+0x93a
#10 namei+0x7ca
#11 dounlinkat+0xc1
#12 syscall+0xb17
#13 Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10200  11028K   11273K 166960K     11615        0
            pcb    17     12K      12K 166960K        48        0
         rtable   256      9K      11K 166960K       399        0
             pf    36     17K      21K 166960K        74        0
         ifaddr    44      7K       7K 166960K        55        0
        ifgroup    57      2K       2K 166960K        74        0
         sysctl     4      1K       9K 166960K        11        0
       counters    70     37K      37K 166960K        96        0
       ioctlops     0      0K       4K 166960K      1524        0
            iov     0      0K      16K 166960K        16        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1467     92K      92K 166960K      1648        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        77        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    13     45K      89K 166960K       344        0
          sigio     0      0K       0K 166960K         6        0
           proc    72    115K     180K 166960K       546        0
        subproc    72      4K       4K 166960K        73        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        35        0
       in_multi    99      7K       7K 166960K       111        0
    ether_multi     1      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       400        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   216    158K     177K 166960K      4979        0
       UVM aobj    77      5K       5K 166960K        79        0
     pinsyscall    38     76K     102K 166960K      1473        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         9        0
            NDP    13      0K       1K 166960K        36        0
           temp    39   8647K    8714K 166960K     17517        0
         kqueue    15     22K      31K 166960K        92        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       47    0       44     1     0     1     1     0     8    0
rtentry    176      118    0        4     6     0     6     6     0     8    0
unpcb      144      135    0      118     1     0     1     1     0     8    0
syncache   336        4    0        4     1     0     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      736       58    0       53     1     0     1     1     0     8    0
arp        136       20    0        1     1     0     1     1     0     8    0
inpcb      328      394    0      384     7     0     7     7     0     8    5
nd6        152       26    0        0     1     0     1     1     0     8    0
pkpcb       40        5    0        5     1     0     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192      13    0       12     1     0     1     1     0     8    0
pffrag     232        4    0        0     1     0     1     1     0   482    0
pffrnode    88        4    0        0     1     0     1     1     0     8    0
pffrent     40        5    0        1     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       4    0        4     1     0     1     1     0     8    1
pfanchor   1288       1    0        1     1     0     1     1     0     8    1
pftag       88        1    0        1     1     0     1     1     0     8    1
pfstitem    24       37    0        0     1     0     1     1     0     8    0
pfstkey    128       37    0        0     2     0     2     2     0     8    0
pfstate    384       37    0        0     4     0     4     4     0     8    0
pfrule     1344      24    0       19     2     1     1     2     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      457    0        2    29     0    29    29     0     8    0
art_table   40      460    0        2     5     0     5     5     0     8    0
art_node    32      118    0       14     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        1     1     0     1     1     0     8    1
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112       75    0       65     1     0     1     1     0     8    0
shmpl      112       76    0        2     3     0     3     3     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1972    0      461    96     0    96    96     0     8    0
ffsino     296     1972    0      461   117     0   117   117     0     8    0
nchpl      144     2469    0      767    64     0    64    64     0     8    0
rtmask      32        2    0        2     1     0     1     1     0     8    1
vnodes     216     2262    0        0   126     0   126   126     0     8    0
namei      1024    7759    0     7758     1     0     1     1     0     8    0
percpumem   16       63    0       13     1     0     1     1     0     8    0
pfiaddrpl  120        1    0        1     1     0     1     1     0     8    1
kstatmem   264       42    0       14     3     0     3     3     0     8    0
scxspl     216    13314    0    13313    10     2     8     8     1     8    7
plimitpl   152      164    0      145     1     0     1     1     0     8    0
sigapl     424      654    0      610     7     1     6     7     0     8    0
knotepl    120      296    0        0     9     0     9     9     0     8    0
kqueuepl   224      146    0      136     3     0     3     3     0     8    2
pipepl     344      149    0      122     3     0     3     3     0     8    0
fdescpl    528      637    0      610     3     0     3     3     0     8    0
filepl     160     3249    0     3035    16     0    16    16     0     8    5
lockfpl    104       75    0       73     1     0     1     1     0     8    0
lockfspl    48       35    0       33     1     0     1     1     0     8    0
sessionpl  144       23    0       14     1     0     1     1     0     8    0
pgrppl      48       33    0       16     1     0     1     1     0     8    0
ucredpl    104      297    0      284     1     0     1     1     0     8    0
zombiepl   144      614    0      610     1     0     1     1     0     8    0
processpl  1232     654    0      610     5     0     5     5     0     8    0
procpl     664     1033    0      987     6     0     6     6     0     8    1
sosppl     168        3    0        3     1     0     1     1     0     8    1
sockpl     752      583    0      553    11     0    11    11     0     8    7
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     114    0        0    15     0    15    15     0     8    0
mcl2k      2048      20    0        0     3     0     3     3     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      164    0        0    11     0    11    11     0     8    0
bufpl      280     5434    0      130   379     0   379   379     0     8    0
anonpl      32    11311    0        0    92     0    92    92     0   246    0
amapchunkpl 152   15724    0    15308    28     0    28    28     0   158    5
amappl16   200     3192    0     3164    25     7    18    23     0     8    8
amappl15   192        7    0        7     1     1     0     1     0     8    0
amappl14   184        5    0        5     1     1     0     1     0     8    0
amappl13   176      423    0      422     1     0     1     1     0     8    0
amappl12   168      994    0      956     3     1     2     3     0     8    0
amappl11   160        4    0        4     1     1     0     1     0     8    0
amappl10   152       51    0       37     1     0     1     1     0     8    0
amappl9    144      249    0      249     1     1     0     1     0     8    0
amappl8    136       28    0       25     1     0     1     1     0     8    0
amappl7    128       82    0       79     1     0     1     1     0     8    0
amappl6    120      282    0      269     1     0     1     1     0     8    0
amappl5    112       79    0       69     1     0     1     1     0     8    0
amappl4    104      417    0      386     1     0     1     1     0     8    0
amappl3     96     2542    0     2470     4     1     3     3     0     8    0
amappl2     88      760    0      686     2     0     2     2     0     8    0
amappl1     80    10171    0     9589    14     0    14    14     0     8    0
amappl      88     4213    0     4073     5     0     5     5     0    92    0
uvmvnodes   80     2262    0        0    47     0    47    47     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       78    0        2     2     0     2     2     0     8    0
uaddrrnd    24      637    0      610     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      637    0      610     1     0     1     1     0     8    0
vmmpekpl   168     7037    0     6993     3     0     3     3     0     8    0
vmmpepl    168    48821    0    47112   104     0   104   104     0   357    7
vmsppl     488      636    0      610     5     0     5     5     0     8    1
rwobjpl     80    19446    0    16208    74     0    74    74     0     8    0
pdppl      4096    1282    0     1220    96    24    72    84     0     8   10
pvpl        32    19639    0        0   159     0   159   159     0   265    0
pmappl     256      636    0      610     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      268    0       26     7     0     7     7     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837cdff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839ded00) at __mp_lock+0x192
intr_handler(ffff80002a3ce970,ffff80000007aa80) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff839ded00) at __mp_lock+0x199
syscall(ffff80002a3ceb40) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7c4895937ed0, count: 6
ddb{0}> trace
x86_ipi_db(ffffffff837cdff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839ded00) at __mp_lock+0x192
intr_handler(ffff80002a3ce970,ffff80000007aa80) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff839ded00) at __mp_lock+0x199
syscall(ffff80002a3ceb40) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7c4895937ed0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff83365f40) at panic+0x1e5
ffs_inode_alloc(fffffd806c457a98,41ed,fffffd80097fb5b0,ffff80002a319d68) at ffs_inode_alloc+0x94e
ufs_mkdir(ffff80002a319dd0) at ufs_mkdir+0xfc
VOP_MKDIR(fffffd806d312980,ffff80002a319f30,ffff80002a319f60,ffff80002a319e60) at VOP_MKDIR+0x101
domkdirat(ffff80002a272d08,ffffff9c,72a46153be10,1ff) at domkdirat+0x179
syscall(ffff80002a31a0e0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x72a46153beb0, count: 7
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83365f40) at panic+0x1e5
ffs_inode_alloc(fffffd806c457a98,41ed,fffffd80097fb5b0,ffff80002a319d68) at ffs_inode_alloc+0x94e
ufs_mkdir(ffff80002a319dd0) at ufs_mkdir+0xfc
VOP_MKDIR(fffffd806d312980,ffff80002a319f30,ffff80002a319f60,ffff80002a319e60) at VOP_MKDIR+0x101
domkdirat(ffff80002a272d08,ffffff9c,72a46153be10,1ff) at domkdirat+0x179
syscall(ffff80002a31a0e0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x72a46153beb0, count: -8