last executing test programs:

2.889388295s ago: executing program 1 (id=163):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190)
ftruncate(r0, 0x10000)
ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000040)={0x20e89, 0xd})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_timeval(r1, 0xffff, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
r2 = socket(0x2, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14)
sendto$unix(r2, &(0x7f0000000280)="1e786d7bb28b8a56c9c3dce2c6de3f70141135142860a64b7f61148b196f8f0abbe38e6461bc406978c24144ecff9efeabe6e76671389f9e4cabb106278aec7d074158af465a1e06fc4a632527aa6a91dde506c5d62c87b25e7bee5e74d9ec1e7e4f2908f64155031d31ae40d2942c4ad584fa4aa7dc820ebdfbaad7b2b225d3bda03aaeb67ed437a5f17c70e9f500adb8ad7df88e757ffe2ecf5d1c61ca9293fd8aff8a7dd6130a19c69f7d69f6da593a95e1b2bbd40fa9d479d8fb2e1cfd8b89dcbdbc6f7472fc74c3a4979e64c4df4562ff26092e23f75f89fb4e9506e9447aad641803f3c5d0a6c8120697a0b597daa564fb039cd3942e6098c0738d6d5499c2552f9c612174dde1e2e8b6caed7630835e8f87ae683470fe3240b78559964a4bac09162c253e699bb2799d1f65b0fc739b1bc81d22e9b0640ec1d0baf37f020df2e43f91adebab6dd38cdff324eaa271173199502446f20a4823784736fe2f87c6d53ddd02d4343d1c81e33fb575eaa3372d8fe0f924086641305c6be74682f483e4719ae9583b0c78421ac9b989178b3a56bfdbf0af5d46bf78f5681145fe5426be1c6cfdffc0c9cf491398165b87cb0b31a21933d82f77c6d26c042dcec06980471890c98def398a9f81602661caa3dc65d2bc16e9f68cd4d62350060afc03c65a7b24a7298f8508797597da5dcd5b05862c057ccd815eb1e6d6ca701f0d04b32d4d70c37add6f037278b15ced0da79599e066d503e1a3625f410ee202fb39820db10e27dd6c4424d0f16216d1006a491bb69c69bd63f646bb34f2b0550aaaa63503281263212ee1530386036925bab2ca36e04e1ba1054102c76a0e43630fecc9bc23a7ed0acfed0f01b7b84b0f659cee36e428823548c836f0724a7059790899eacf4971e749ab2e2ffb69932d6a5bf51d10383604ec139fcc0646c0cb6f3a80b0dde2edfac06ce72260faee2b0519fceaa41f5b7baf274322ffb795abb0d40273f81c510addb89866994f0252bbb427239a9e86899a113c52a634e401045293e4a7f4bcdb73fcbecc23fdbeb77afc55d0fa23d5f8eca16944072ad8e7cde6825d400f959320db1bddb124abb5efb76e015c1a98f3b66b318f763ce6caca64050e52634ac7863b00c406ee2864fb608b3bd50686666892b9d6dba7917f65824c0e7c6c0f8576fcdd5bea898bfb6ea6a9d2d6bc40c4b9ef54e071da9c2c7be94f2c57552cfc84edf8cdb5e03ec6c29f7378255818eb3d0fa4945b4e0296bb6eb31b5b22921ee8c16556552347e3f494d1b70cb9fad6f50a7be8237b6ca11f4f9a86cbfce3a4d779f392f0f1e832e2a1d4d1d524d4f843e4e42f595e2a76f2da57d9ed79539898300a83d874a138e3de63e26c1d25b74c0e15034edfd2f7d6a025c20cf3d99301dc2b050c2f4b703b5b126ed45651039bebf227dd69fc12de3818c2cdfae49ec835b5025a62b2a4f3ff889c90193f0d59f248200a7fe5143536cfffcbea0ad17d56ec91b6d7078aa62f36c1243c5ad69b5c5e51ca10eb2b2a56dbb0e3fe950b6fe10751b13975ec84ecaf528a49ed6d375dd3a8cb09978fae9cf31a96519ab0c72b67063d5fe744c115c9b6025b37cf5fe32f06b0b7db7748d051829f02c45c100d0107ab2c4f6de0d7254f8518868864a4f65806ab2df2892a97f9c970da28b7480e01ec8da12654ea867bd4e69de9e6da405da03355f81fac5ef778c22ea3e553e59ce7a56e8f13e1103b0270af9c61ce207dce48ce1b417cc8332cde046e627a3d106de10d3d52ccbd36fa43f7c6a7a0a9314bccfabbabbc0bf051c2511270820d5221cc94012cda23bde1287693c60c58b5b9f00d6278f57281b9e1231dc6f259e16f0dd2a0c95d596a9d5174a4e3baa992c69ad80bdc3913ddb6e117cdd35a28814f89c865288026d6d4b8f781add8260e7c8a2043d20749ef6220dc0e49523a84cd76bf86461d9e50352e44511cf8badd422329b2a8c6231b194c23bd0a5fa735f5d81cd6d7d30b268826692deecae4dd", 0x59d, 0x1, 0x0, 0x0)
close(r2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x88, 0x0)
sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x10, 0x0)
ftruncate(r0, 0x8)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000000029, 0x2f, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101)
connect(r0, &(0x7f0000000000)=@in6={0x18, 0x3, 0x1, 0x7}, 0xc)

2.417332338s ago: executing program 1 (id=170):
r0 = syz_open_pts()
r1 = fcntl$dupfd(r0, 0x0, r0)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
r2 = semget$private(0x0, 0x3, 0x55e)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x401, 0x0, 0x0, 0x0, 0x0, 0x188, 0xffff}, 0xaad3, 0x109e, 0x3})
semop(r2, 0x0, 0xa00)
semctl$SETALL(r2, 0x0, 0x9, 0xfffffffffffffffe)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000400)={0x4, 0x3ff, 0xf84, 0x4, "ef9931588a76bf80575c74c65f04744a34497ed8", 0x6af1})
r3 = socket(0x2, 0x4001, 0x0)
r4 = fcntl$dupfd(r3, 0x2, r3)
mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0xffffffff)
close(r4)
socket(0x2, 0x1, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
shutdown(r4, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
poll(&(0x7f00000007c0)=[{0xffffffffffffffff, 0x2}], 0x1, 0xffffffff)
poll(&(0x7f0000000440)=[{r1, 0x125}], 0x1, 0x1)
syz_open_pts()

2.127761558s ago: executing program 5 (id=175):
r0 = socket(0x1, 0x2, 0x1)
ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) (async)
socket(0x10, 0x5, 0x5)

1.749497054s ago: executing program 1 (id=177):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000840)={0x3, 0x0, 0x5, 0x1000100000000})
flock(r0, 0x3) (async)
flock(r0, 0x3)
r1 = socket$unix(0x1, 0x2, 0x0)
accept(r1, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc)
socketpair(0x18, 0x2, 0x7, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
close(r2)

1.748753667s ago: executing program 5 (id=178):
r0 = syz_open_pts() (async)
open$dir(0x0, 0xf02, 0x186) (async)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac9", 0x4}], 0x1) (async)
r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x10, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100400000000000}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, &(0x7f0000000640), &(0x7f0000000080), 0x0, 0x0)
r2 = semget(0x0, 0x1, 0x0)
semop(r2, &(0x7f0000000000), 0x23) (async)
r3 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x4) (async)
r4 = open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x10) (async)
symlink(&(0x7f00000001c0)='.\x02/file1/file0\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000dc0)='./file0\x00', r5, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') (async)
rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') (async)
kevent(r1, &(0x7f00000004c0)=[{{r3}, 0xfffffffffffffffc, 0x80, 0xfffff, 0xa}], 0x3ff, &(0x7f0000000580)=[{{r3}, 0xfffffffffffffffa, 0xb0, 0x2, 0xe, 0xffffffff}, {{r0}, 0xfffffffffffffff9, 0x0, 0xa0000004, 0x7, 0x8}], 0x4, &(0x7f0000000540)={0x3, 0x5}) (async)
unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
fcntl$lock(r4, 0x9, &(0x7f0000000840)={0x2, 0x1, 0x0, 0x1000100000000})
flock(r0, 0x1) (async)
unveil(0x0, &(0x7f00000000c0)='c\x00') (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x7777, 0x3, 0xfffffff9, 0x80a1ba, "bb08a5590209ff0100000800001b0f00", 0x3f, 0x9})
mprotect(&(0x7f00000dd000/0xa000)=nil, 0xa000, 0x4) (async)
unveil(&(0x7f0000000480)='./file0\x00', &(0x7f0000000180)='x\x00')
fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x1, 0x0, 0x7fffffff, 0x100000001})
syz_emit_ethernet(0x1e3, &(0x7f00000005c0)=ANY=[])

1.748471359s ago: executing program 5 (id=179):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080})
flock(r0, 0x1)
execve(0x0, 0x0, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x100000001})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000000), 0x10)
connect$unix(r1, &(0x7f0000000000), 0x10)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
write(r2, 0x0, 0x0)

1.539452614s ago: executing program 5 (id=180):
getrusage(0x1, 0x0)
syz_emit_ethernet(0xb8, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xaa, 0x67, 0x0, 0x0, 0x11, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x66, 0x0, "7ece73b20003192e34557614197e848921653c2d12e8f9f30a87d356c4155235945219eb0ff8e0a9359aba00ab2c766a8d2538109e965677ae2a3f0b9557b60bec5eac4fdae4810dafbc70c2bf4eac84c8f89d2efa342f6e4c6a3505d550818844bcbac315ca5b22a5f91f2d139b2a394514b499b21a10005f9bf7aba72ced9e09fc39ad99b31ff325b6432e2dde"}}}}})
socket(0x24, 0x1, 0x0)

1.538113908s ago: executing program 5 (id=181):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000004, 0x9, 0x0, 0xffe})
r0 = socket(0x6, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5)
kqueue()
r2 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r2, 0xffff, 0x40, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000000029, 0x3e, &(0x7f0000000040)="0cfb534f", 0x4)
select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000024c0)={0x1fe, 0x10000, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)

1.249906893s ago: executing program 3 (id=195):
r0 = socket(0x1, 0x400000002, 0x0)
r1 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x0, './bus\x00'}, 0x8)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x300000001})
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x6b, 0x10, 0x3, 0x8000000000000101}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"])
openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x5, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r3 = dup2(r1, r0)
getsockopt(r0, 0x29, 0x2c, 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000980)={0x1000, 0x100000})
r4 = syz_open_pts()
close(r4)
syz_open_pts()
read(r4, &(0x7f00000019c0)=""/4111, 0x100f)
unveil(0x0, &(0x7f00000001c0)='c\x00')
close(r1)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff)
setsockopt(r0, 0x80, 0x8001, &(0x7f0000000100)="e7f6b63f9646e7db055430633e5772fa7d02f6e1ddea115b61c2125d559f85748201c336771e2e97edd03651141fb2fb67e4b9f3691061c479773f260b460b1a15b06331649f8d6cf778b513062afec625961de4965dc27b59cf71003c3463076d2e6a10fdd38429934f130f34585f42c70d1dcbdd0cad860bac6ac6af9f0397eb1e22089514de8e1ae9f16ede9c5f5adc38e6ebb2e3eccad9f237081ebae036f5ea91ac9999f1478b10891264327434b7a1b9", 0xb3)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket(0x18, 0x1, 0x0)
setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
bind(r3, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x3}, 0x8)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0xffffffffdf003fff, 0x3)

1.246245188s ago: executing program 3 (id=196):
ioctl$WSDISPLAYIO_GETSCREEN(0xffffffffffffffff, 0xc0245755, &(0x7f0000000000)={0x3, './file0\x00', './file0\x00'})
r0 = open(&(0x7f0000000040)='./file0/file0\x00', 0x8c0, 0x100)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000080))
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0xb7e2327e1f63e159, 0x0)
ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000140)={'./file0\x00', 0x71d, 0xf82, 0x7}) (async)
ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000140)={'./file0\x00', 0x71d, 0xf82, 0x7})
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000580)="3375850df1e599c56fff2e9911b7de5e57bfcf80446b5124e28bf1fc2d9c967a5cf3dd54406f9fa1878ff201839517c27a0e5c602741fc671c85441a459c8b4318c2742898a7e206fcb4b1ecc78470fd4afcd1968e12e8b13f9cd407704877af3742c4b3609260fec4b0b73ff1b17ef2d3880951a037a7298a7a4499d789460970b334ff0dce527e609e03ad5dc4d0fd33a28fc733edb3772582d9bcc3a3ceb48810f10d84b43ff61fe439666665ffc846178b78f8c93ebc8f3f2bf9085ea036915d784f6f42d71854", 0xc9}, {&(0x7f0000000680)="d111e5705cfc9804f8967640212caac7a31155cdb2019e8df6064d28897fa0f539fdef66f679c8873d52740a075338ffa6bd0e061b44dd2cdad9eec1d8f534b3b8a8dbd6da898a3e715dc53e3ee6b9683af02cb56f", 0x55}], 0x2)
syz_emit_ethernet(0x2bd, &(0x7f0000000740)={@empty, @random="73676ac80ddb", [{[{0x88a8, 0x4, 0x1, 0x3}], {0x8100, 0x0, 0x1, 0x3}}], {@ipv6={0x86dd, {0x1, 0x6, "1932be", 0x27f, 0xff, 0x7f, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, {[@fragment={0x11, 0x0, 0x34, 0x0, 0x0, 0x4, 0x68}, @dstopts={0x0, 0xf, '\x00', [@generic={0x4, 0x76, "d2ca0d92302dcb4072fbf13aad4e0f349fad6699ff3f1f5e936bdaa0710812bf674aa14d9d786870b99b4cd65d381a8d581199ad18f39dab14fa978c79143f48244c2c0251bf5a041b172d7a1eeca44ac14eb2a3acfd3a595d6bfe9e3316afe1675a07fa02b740745fd61c443876a74a23da52194876"}, @enc_lim={0x4, 0x1, 0xfb}, @pad1]}, @fragment={0x1d, 0x0, 0xe2, 0x1, 0x0, 0xf, 0x66}, @routing={0x6c, 0xa, 0x0, 0x80, 0x0, [@loopback, @loopback, @empty, @mcast2, @mcast2]}, @dstopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @hopopts={0x2, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}, @jumbo={0xc2, 0x4, 0x80000001}, @ra={0x5, 0x2, 0x3ff}]}, @fragment={0x61, 0x0, 0x5, 0x0, 0x0, 0x10, 0x64}, @routing={0x89, 0xe, 0x0, 0x9b, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @mcast2, @empty, @loopback]}, @dstopts={0x11, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}], @icmpv6=@ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1, 0x19, "c277a73b52cc8f4bf0790b3c847e87c395d1f2e922f3226351df140866def874de4bd2a9f1d34ef2fd94e24b1a2e961127237d11557161864b4a6bf0b2dd2a36941acec16dfacbfd5800d7cfe582f405e6751ce3b0ba7f08e6e165d0c50202e31b3034bfb9ed7a3a1ee975076321b9ec5bbf3e44146bc89dc42f1ea49139e63eeea1922e14e14d1131831e2ada641952b7d47b902c4e24ea81a433a88018e6cea92845e87c2b85b22c697559bb69f3fa54dc0c7534fec68c1efb550a0196c10523b75f8ebbd6423d6153dba8a8"}]}}}}}})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000a40), 0x400, 0x0) (async)
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000a40), 0x400, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f0000000a80)={0x2, 0x9, './file0\x00', 0x44fa, 0x2a9, 0x0, 0xf})
getpid() (async)
getpid()
msgsnd(0x0, &(0x7f0000000ac0)={0x0, "97726fb5bd83ff41967d7fe9b70463b66e46a85964d91f9f8f65f8851df8683ecab1d48917119591c019b7240b62bbf0e99ddebb1b5fe5623cb7f44cad2c1e9d825ef80fcafba3582a1de179f14ad9414a08675d371078487f553616f0264fc603adaa71e2f111a621fb302ebdd8a7e8c8a548a88c31cb22c270079f6363500b6475922695d8a3d68dffe2275e910f99a3ac96cf4df25a4ed5233a3720d286990971f5de226f1fc1571dcc8640c8b605c2a117ce5176d78ffdd44ddbcbb8f30a4d80a0f4e1bc4ed9bc939116"}, 0xd4, 0x800)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000c00), 0x8, 0x0) (async)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000c00), 0x8, 0x0)
kevent(r0, &(0x7f0000000bc0)=[{{r1}, 0xfffffffffffffffe, 0x4, 0x20000000, 0x4, 0x5}], 0xd086, &(0x7f0000000c40)=[{{r1}, 0xffffffffffffffff, 0x0, 0x1, 0x7, 0x8}, {{r3}, 0xfffffffffffffffa, 0x14, 0x80000000, 0x4, 0x2}, {{r0}, 0xfffffffffffffffd, 0x32, 0x80, 0xb964, 0x5}], 0x8, &(0x7f0000000cc0)={0x0, 0x6}) (async)
kevent(r0, &(0x7f0000000bc0)=[{{r1}, 0xfffffffffffffffe, 0x4, 0x20000000, 0x4, 0x5}], 0xd086, &(0x7f0000000c40)=[{{r1}, 0xffffffffffffffff, 0x0, 0x1, 0x7, 0x8}, {{r3}, 0xfffffffffffffffa, 0x14, 0x80000000, 0x4, 0x2}, {{r0}, 0xfffffffffffffffd, 0x32, 0x80, 0xb964, 0x5}], 0x8, &(0x7f0000000cc0)={0x0, 0x6})
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000d40)={0x2, &(0x7f0000000d00)=[{0x81, 0xff, 0x1, 0x7}, {0x401, 0xf7, 0x9, 0x914b}]}) (async)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000d40)={0x2, &(0x7f0000000d00)=[{0x81, 0xff, 0x1, 0x7}, {0x401, 0xf7, 0x9, 0x914b}]})
r4 = socket(0x18, 0x2, 0x2)
ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000d80)={0x6, './file0\x00', './file0\x00'})
openat$vnd(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0)
socket$inet6(0x18, 0x4, 0x3) (async)
r5 = socket$inet6(0x18, 0x4, 0x3)
bind(r5, &(0x7f0000000e00)=@in6={0x18, 0x0, 0x7fffffff, 0x5}, 0xc)
sendmmsg(r5, &(0x7f00000011c0)={&(0x7f0000001180)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)="acbe1c4994ba25d4f1c4cd281f024ae37ff501d6f68c769bb90f7a9bd66bc6", 0x1f}], 0x1, &(0x7f0000000ec0)=[{0xd8, 0x1, 0x5, "9ef84b54a2080e6531ffb48529f4e9ed4287b195c8ef3fea6eaaefd03e995579995c8613c2b042cd5de512b1a99072839c8bec7b5b9e8f69fbe938816f0ff503a482dab4eae95c707ba782c99de756fdc7a2defb1b3217660183ece9a3d58a68eb088f209f3b932a043459b8b6b5fa49bf63779a3c0dc076ae558659c82056db063b36bb5348910ac3066e383d8826cba6e7f41ae4237c97272760dbf9405ee51c5012e4678649ba56d22018c4a59bc85ae89c1192f1f5e3b3eeba7943c162e78b535d91"}, {0x20, 0xffff, 0x0, "307dd8874a957b6df799c0b774"}, {0x100, 0x1, 0x80, "f8fa4fbebf051de7edd61e2cf68fdad618614090c2666c3145ae3af242451178c5d5bd11ed5b0fbca519d19837902f3e23c7255034456e8f25f59eca469a03dba7f20611913ec12396d19047596cb5e96a8d69d9f5132e227e56253e4ec075ac78582c3cee439fe022b785b52d05cc1b1a8e82518dfb86c7273f15c174d52c8122c66cc8ff212406a8244df5b64c5b03e77c9c26c51fd896964c9ce0590e4623477377d048a19fa63b335c2d104ec920e1626fc2dc9df176875f999bc9fa3aabb804bb951f743bdba0718f45db95a179d7f21358a75435bc15774fdb0045d8d328a79caf3b6dbc7792"}, {0x98, 0xffff, 0x3, "948c3dbaa47ece46d59ec4203ad02477767df5913d2d3cedda56c21639fac1f447de1906c1c9c646984f9afcb636d50736755995057b55c01540afc90fd734b7ae08e86f489fc4c590b58124ea63f7b8ea1e5d6471da097494cb1d918f5142ac158b2c142dea58823f00a70aaf956994495684f8cf38a7cd85d0020bf63d0257b9bcb901"}], 0x290}, 0xe}, 0x10, 0x0)
chroot(&(0x7f0000001200)='./file0/file0\x00') (async)
chroot(&(0x7f0000001200)='./file0/file0\x00')
syz_extract_tcp_res(&(0x7f0000001240), 0xaf06, 0x0)
sysctl$kern(&(0x7f0000001280)={0x1, 0x33}, 0x2, &(0x7f00000012c0)="4dd055925b322138183bf79eb01e30acf83f5797a24abd0e1117faaa3a9b88e53960c4f4ee3d293d94b7fc12a0ad3bf1a538f4fea4c7a901b0e51729cb7d0c4ccb0f5c4f7f7b78efea180d064f827d2df6775bc3987dcdf08c69c81fb7268490bcd21563854a66c360bac141b761f8845370bd53775a7d4ed242dc0cd18fcce10c0b83b5cf1cb163572b4090e06a", &(0x7f0000001380)=0x8e, &(0x7f00000013c0)="36bc7c91ceb3519183fe0b5b115f2c2f1518ec21270f5b0b2278beaa1b6b7068c6d398ec42b80f5fce068a89a1016b1ba8130204088478cfdb7e2310d5f957afc3b63d7d739910cbe17ad0ccfa144515cc76a67e4fb3396b867436f97169764de9110b69a87838468d3fbd09f6dd477bc8bc0d6f304c05cc6d50", 0x7a)
bind(r0, &(0x7f0000001440)=@in6={0x18, 0x0, 0x4, 0x8000}, 0xc)
semget(0x1, 0x4, 0x5a)
ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000001480)=0x2) (async)
ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000001480)=0x2)
sysctl$kern(&(0x7f00000014c0), 0x2, &(0x7f0000001500)="e8f2e5cb185849f95f314dc2fa4e76981601ffccdafa01da32e8001996476d59c38beae4e3018d5af46cfabc1c8da4c7ac99f4e9e9c32a68e355e4c4a32588614140cb476c8d639d0314b88807d4cbee37ae4e3562e333df3ee67d2ddfa5ec69eab997bb67fcad202b5d48e32292e866f90300d4d91d0ed27608014b7de8df85216addc94aa1d413cb91b5f9170c6fb044c831933e89d9c095f0520583a91c2d8415166b43df69bb9071d82eb15c87d4b25beb14de3c4455d71c9100b60c697390f6a665f1704dadd71ce5624b13fc0958ceb0b780de3189e4a7e11960042a543e43b5d45baaca712a1662", &(0x7f0000001600)=0xeb, &(0x7f0000001640)="f41a5b95ca1ffe741680fb6e011d560b8a3dfc9bac7574571f8b697bddd76703677e44250704319440970f507e6ef38dcd30b94cbcdaeb12fb856c8389fecfa8314db1c9142278b9896d951936aec1c698c650609d", 0x55)
mkdirat(r4, &(0x7f00000016c0)='./file0\x00', 0x20) (async)
mkdirat(r4, &(0x7f00000016c0)='./file0\x00', 0x20)

1.126860791s ago: executing program 3 (id=205):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = socket(0x1, 0x5, 0x0)
close(r0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r1 = socket(0x2, 0x4001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r1, &(0x7f0000000000), 0x10)
shutdown(r0, 0x1)
shutdown(r0, 0x1)
rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00')

1.050663632s ago: executing program 1 (id=207):
r0 = open(&(0x7f0000000380)='./file0/file0/file0\x00', 0x80000000000206, 0x8)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x10000000000000, [{&(0x7f0000753000/0x3000)=nil, &(0x7f00007f5000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00007aa000/0x5000)=nil, 0x8}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000095000/0x4000)=nil, 0x7a5}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000007d000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f000068b000/0x2000)=nil, &(0x7f0000254000/0x4000)=nil, 0x2000000000009}, {&(0x7f00003b7000/0x1000)=nil, &(0x7f00002c6000/0x4000)=nil, 0x2}, {&(0x7f000055d000/0x4000)=nil, &(0x7f000051e000/0x4000)=nil, 0xb}, {&(0x7f00000a6000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, 0x6}, {&(0x7f00000b6000/0x3000)=nil, &(0x7f0000243000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000261000/0x3000)=nil, 0x4f}, {&(0x7f0000245000/0x2000)=nil, &(0x7f0000160000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000067b000/0x1000)=nil, 0x6}, {&(0x7f0000fed000/0x10000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffbfffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f0000246000/0x2000)=nil, 0x101}, {&(0x7f00003e3000/0x1000)=nil, &(0x7f000031a000/0x3000)=nil, 0x1000039f9}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x500ffffffb}], './bus\x00', 0x81})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)="ec2e4a373c2268d08a564b6846d126378c83a488c6bcb3a8e604c08ddaccf5211e2fdd7a9b4b6ec671de63f79e7bcc70acab29c4ecb56a4071a69a5621115a49741def0ec4f1970b7103b9170c2a0248bab67050f13dc8f700c2409f6f48a625ec7cca", 0x63}, {&(0x7f00000000c0)="0858535d36aabb63b8b839ad277bc24fb68609b00a2404c343920d744943c7cdb2e8682fcc9995922d2aa0c1d4c20f5b5bae27fa41298a3be7110733bf758145df076c5a715fd92a58007787cdc58f125bced039def1fe21afb832cbdf1fb80a08cc2687", 0x64}, {&(0x7f0000000180)="6fbd2e5eb66c4ab1c171e3a9c5eca55b2489765923794e1ae0f3f5ffe5dfaf761ca6a6871a9fa5df22295ca72d11c54c1b4808bc3f20add752f869b9e58d8a1e58e1628868ff21b9ab59679e669bccc55c9013a8c606c5ec68c4be0329d21fae17e8ad73635ddba1e2c6eb04311181882930c425ada7cd8e36b9980b9b614443c2eca6f7778a659b595535e9b173c579b6c440f3a5335ca06347bfa28a36f9bec883be2b266fbc93aea61242be06dceed0a3dedddc487b1fcab79c0145e082c951866724d6d41b39c00aa7ee634237e197b861c5d4ac35a896375ef9bad429a76afa009a0d2155aea0", 0xe9}, {&(0x7f0000000400)="3263101f8ae9e871744ecaf6b27c1797de", 0x34}, {&(0x7f0000000680)="6f69e85f081d56505039e02b5e72dd1122fbb2ce822ffc7b5f13e6b1efec5abdaa98d56fe162940ce3bb8932e8228a593d572020b609e76ddd6db732a7df873ea373a2b4a0522a56492f9ddb7a93f551bee6dbe0c523ddb2c8a3a85b17afc0177b08cfada325d9d441aec6870329e08b3419b9969fee51c3982ef918540c2ec4621711c5b3eaa1ee08a10b08027517f0a6b5a458ba414f8a06a134318a0a29439b9b0193239bfb8414e4990cd0cc7caaa87a4e62e3df721836249d73708d3820395a44724d8fe67c65a276bab6f97a9447dc1e74d743229698f0111aac38", 0xde}, {&(0x7f0000000540)="03fe62c932f66a2c9b25218a8778bfed80b04fc96a1318f5a9b7933527371672a47c9da83407de560dfdf458dcc13f4fcf4213b80995dd1e15c8f3862d4317ef14fad37e3a61c85a7ecbf0b9bc12e24eb281452d0fc04b782d6c4ba4cccb5046e2b345aa2cab2d000000000000df6d1d52eabe5b2dda45f5ef0ec004d63a23628333f628cde01dd2767bfb548169a6a40627278f06ae41d4636872e16bc8462701", 0xa1}, {&(0x7f0000000440)="b39617c95e1a6180000f579681c628ae60283ece887e66fd32d32f6b91fc5d9651946bc4059e4822951f0e2073858190c241655036667bd9b7a734e9c0bd80c43e382fdc0803f266302f", 0x4a}], 0x7)
write(r0, &(0x7f0000000140)="09435ded", 0x4)
write(r0, &(0x7f00000003c0)="092020406575e1ef00a2e29be2e79448e009ce9d0a", 0x15)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
r2 = semget$private(0x0, 0x3, 0x55e)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x401, 0x0, 0x0, 0x0, 0x0, 0x188, 0xffff}, 0xaad3, 0x109e, 0x3})
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, &(0x7f00000011c0)="71f91e5a", &(0x7f0000000080)=0x4, 0x0, 0x0)
semop(r2, 0x0, 0xa00)
semctl$SETALL(r2, 0x0, 0x9, 0xfffffffffffffffe)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f00000002c0)={{0x18, 0x1, 0x9, 0x2}, {0x18, 0x0, 0xe922, 0x4}, 0xa15c, [0xfffffffb, 0x4, 0x8, 0x2, 0xd30e, 0x4, 0x8f0, 0x3]}, 0x3c)
socket(0x18, 0x0, 0xe2)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
semctl$GETNCNT(r2, 0x3, 0x3, &(0x7f0000000300)=""/115)

1.050272548s ago: executing program 3 (id=208):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='W\x00')
setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000003, 0x2}}, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
dup2(r1, r0)
bind(r0, &(0x7f0000000280)=@in6={0x18, 0x1, 0x5, 0xd48c}, 0xc)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x25, 0x9, 0x2}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004609002c0064000903379078ffffffff00000000010702004e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="621e178990680001"])
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='W\x00') (async)
setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000003, 0x2}}, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) (async)
dup2(r1, r0) (async)
bind(r0, &(0x7f0000000280)=@in6={0x18, 0x1, 0x5, 0xd48c}, 0xc) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x25, 0x9, 0x2}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x4) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004609002c0064000903379078ffffffff00000000010702004e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="621e178990680001"]) (async)

921.787356ms ago: executing program 3 (id=215):
sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000002740), 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000e00)="54ee5236a08c33430e", 0x9}], 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffff}, 0x10, 0x1000, &(0x7f0000003f00)={0x9, 0x20fdc7})

921.186712ms ago: executing program 1 (id=217):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async)
r1 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) (async)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0)
r3 = dup2(r1, r2)
getsockopt$sock_int(r3, 0xffff, 0x1023, 0x0, 0x0) (async)
listen(r0, 0x0) (async)
shutdown(r0, 0x2)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x0)

625.383053ms ago: executing program 1 (id=221):
sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="b1000504000004000000940a6c289ff38b8110e6adc6a695080003000000331c1302", 0x22, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$BIOCGHDRCMPLT(r1, 0x40044274, 0x0)
r2 = dup2(r0, r0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f00000000c0)=""/179, 0xb3}], 0x63, 0x9)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
pipe2(&(0x7f00000003c0), 0x10000)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
fcntl$getown(r5, 0x5)
listen(r5, 0x78f5e986)
connect$unix(r4, &(0x7f0000000100)=@file={0xd1653077bafa0114, './file0/file0\x00'}, 0x10)
recvmmsg(r2, &(0x7f00000005c0)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/92, 0x5c}], 0x1, 0x0}, 0x9a5}, 0x10, 0x3000, 0x0)
r6 = socket(0x11, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1007, &(0x7f0000000200)=0x711, 0x4)
setsockopt$sock_int(r6, 0xffff, 0x4, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffe476cae4cedc86dd60db09000008000300000000000000000000ffffe0000001ff"])
r7 = socket$inet(0x2, 0x2, 0x0)
r8 = socket$inet(0x2, 0x1, 0x6)
getsockopt(r8, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe)
setsockopt$inet_opts(r7, 0x0, 0x1, &(0x7f0000000000)="e0667f551ef6", 0x6)
recvmmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x2000, 0x0)
write(r2, &(0x7f00000002c0)="35a7a5ec408e40f62c0be2180d906b77695dda40c43b06b5ec406da06c300412ee011e7325f823f0240ac1f4d31b92577638e7ea7f02d05e622a260e10bccc976ce91818c0e5f0e32cb6bf1788b3081b720cbbc9af6b548e437f255f8907da8bce8cb54f1ca9203a86617f06fbd051634d60cf73f577ce690f091c34ef34faad4e6b150f5dcca1b48623b751a15164ce2ef0a96a9ea312620ea1a94d53095f4aed0a74383337af", 0xa7)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f00000000c0)=0xc)

625.180534ms ago: executing program 5 (id=222):
sysctl$vfs_ffs(&(0x7f0000000100)={0x4, 0x1, 0x13}, 0x3, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
read(r1, &(0x7f0000000000)=""/126, 0x7e)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000480)={0x3e, 0x8000b, 0xa9, 0xfffffff8, "0a6400b72860147bcc0100d49a4184de82e1c800", 0x6, 0x100000c})
ioctl$TIOCSTAT(r1, 0x20007465, 0x0)
sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0)
r2 = msgget$private(0x0, 0x596)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000300)=""/12)

623.450767ms ago: executing program 7 (id=223):
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) (async)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x40)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)='#!', 0x2}], 0x1)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)='\n\x00', 0x2}], 0x1)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = syz_open_pts()
ioctl$TIOCSTOP(r1, 0x2000746f) (async)
ioctl$TIOCSTOP(r1, 0x2000746f)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0x2, 0x966b, "ff14e7b0ad1e0a6ca600", 0x6, 0x3f001})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
syz_open_pts()
openat$null(0xffffffffffffff9c, 0x0, 0x20, 0x0) (async)
openat$null(0xffffffffffffff9c, 0x0, 0x20, 0x0)

487.47279ms ago: executing program 3 (id=224):
r0 = kqueue()
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x802, 0xffffffffffffffd, 0x1, 0xc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1], [0x63, 0x9, 0x2ff, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x7, 0xfffffffffffffff8], [0x7fffffffffffffff, 0x8, 0x0, 0x0, 0x9], [0xdb9d, 0x0, 0x0, 0x165, 0x0, 0x9], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x4}, {0x1000, 0xa, 0x0, 0x1}, {0x0, 0x1000, 0xfffd, 0x1}, {0x0, 0x0, 0xc8, 0x7fffffffffffffff}, {0x9, 0xd, 0x0, 0x1}, {0x0, 0x0, 0xaa, 0xfffffffffffffff9}, {0x0, 0xfffffff5, 0xc00000}], {0xffeb, 0xfffffeff, 0x7fff, 0xf5a752c}, {0x0, 0x6, 0x10000000, 0x2}}})
r1 = kqueue()
kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
kevent(r1, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (async, rerun: 64)
r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r2, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r3, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async)
setitimer(0x1, &(0x7f00000000c0)={{0x20ffffffff}, {0x9}}, 0x0) (async)
getrusage(0x0, &(0x7f0000000000)) (async, rerun: 32)
listen(r2, 0x421) (rerun: 32)
kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0)

479.936979ms ago: executing program 7 (id=226):
r0 = syz_open_pts()
socket$unix(0x1, 0x2, 0x0)
close(r0)
setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62})
r1 = syz_open_pts()
ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x9)
r2 = socket(0x2, 0x4001, 0x0)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x5)
r3 = fcntl$dupfd(r2, 0x2, r2)
close(r3)
socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080), 0x4)

438.505171ms ago: executing program 0 (id=228):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x4898e4346cf0c1fb, 0x0)
ioctl$BIOCLOCK(r0, 0x20004276)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
socket(0x10, 0x3, 0x1b)
ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000080)={0x0, 0x8})
r2 = socket$inet6(0x18, 0x2, 0x9)
getsockopt(r2, 0x3, 0x8, &(0x7f00000000c0)=""/17, &(0x7f0000000100)=0x11)
write(r0, &(0x7f0000000140)="aabf57d25047d21006e1cab7f233ea081f92b8cfb1265897a5352313be062ac884eca8113f87c6895620cd15b78adea63dcd4c7d0f0e855794917e055b5cb9d04e07d4d696ae26a808dcae39d9983e47825983484e9617b5ba8f93723a0808f4af73", 0x62)
r3 = socket$inet(0x2, 0x8000, 0x9)
ftruncate(r3, 0x3)
ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f00000001c0)={0x3, 0x1000, 0x8, {[0x3, 0xa76, 0x6, 0x7ff, 0x0, 0x3, 0x7fff, 0x2, 0x843, 0x80000001, 0x101, 0x9, 0x52, 0x0, 0x2, 0x6, 0xfe, 0x2], [0x10001, 0x3ff, 0x1, 0x2, 0x3, 0x6, 0x1, 0x7f, 0x7f, 0x5], [0x8, 0x0, 0x3, 0xffffffffffff5060, 0x0, 0x5, 0x4], [0xfffffffffffffff1, 0x8, 0x8, 0x9, 0x4, 0x7fffffffffffffff], [{0x3, 0xfff, 0x3d2908d8, 0x624}, {0x9, 0x8001, 0x3, 0x2}, {0x3, 0x1, 0x1000, 0x9}, {0x2, 0x8, 0xffff, 0x1}, {0x5, 0x3, 0xc, 0x7fffffffffffffff}, {0x8, 0x80, 0xc, 0x7}, {0x2, 0x8, 0x5d, 0x3f}, {0x5, 0x3, 0x8000, 0x1}], {0x4, 0x3ff, 0x7, 0x1}, {0x2, 0x80000001, 0x60, 0x2}}})
r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0)
read(r4, &(0x7f0000000480)=""/162, 0xa2)
ioctl$KDENABIO(r1, 0x20004b3c)
r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
fchdir(r5)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0)
ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000600)={0x7, &(0x7f00000005c0)=[{0x8001, 0x73, 0x8, 0x7fffffff}, {0x4, 0x7, 0xfd, 0xd66}, {0xa, 0xbe, 0x5, 0xf7}, {0x6, 0xff, 0x79, 0x8}, {0x3, 0xb, 0x8, 0x9}, {0x3, 0x7, 0x4, 0x5}, {0x9, 0x4, 0xf3, 0x80000000}]})
ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000640)={'./file0\x00', 0x4, 0x2bf1, 0x3a94, 0x0, 0x4, 0x6, 0x5, 0x0, 0x1, 0x445, 0x1})
faccessat(r6, &(0x7f00000006c0)='./file0/file0\x00', 0x2, 0x2)
r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0)
ioctl$VT_ACTIVATE(r7, 0x20007605, &(0x7f0000000740)=0x2)
ioctl$TIOCGWINSZ(r4, 0x40087468, &(0x7f0000000780))
fcntl$getflags(r0, 0x1)
sysctl$net_inet_ah(&(0x7f00000007c0)={0x4, 0x2, 0x33, 0x1}, 0x4, &(0x7f0000000800)="a3eedb9fd1e7f827acc97a454ddff5c9b495767ff79b39e6ef42e9cfd5b185e842067a75796a28844a116e98090f0da8b86a33742337fc731f0893b4412e028cbed846fb21964a21e360308fad237ec4e20f8348cd645da79d3e969a58d59a118a949edf8140c1c7c0891b838f678b12c94c964da5d2c84b46b10fcd5fd9a338e93213edd50bcd2e9fa95b348488e959a08e2474445281369b4501c4ac0b663b2169bb60152ac178d7b5cb61235f4f", &(0x7f00000008c0)=0xaf, &(0x7f0000000900)="ab6a7b1438215037ce21a563c22e462041c7188ed09470491b167da1073fe37fad64886a093d59a7d85d9a598e4f5fd189f9556b60d868f3e19d0b6aa0700b981e9157a36b507d43c866ab98ccd71eb5e559e403245f4811f98d88f4cdc81d03ebb1c2edd68f387f7942ee15b2efcca6ad3ffbb9b1e03709173c548f1ab6be83be888cc319004ed1245f2a22767e38089b18fdc89095ce4f4d594fceee337fb566eab377ba00d6cc319aa107d513a8e5cac2ac3dc26a1f26225824c27ce09231d32a4a8d3c49165ec239a0281e68efb40acbafce68cb92b2eb6154e624b78b5248ce74577c2f", 0xe6)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r1, 0xc028575d, &(0x7f0000000a00)={0x6, 0xbd, './file0\x00', 0x2, 0x3ff, 0x9, 0x3})
ioctl$VT_OPENQRY(r1, 0x40047601, &(0x7f0000000a40))
pread(r4, &(0x7f0000000a80)="f43103a82030c33fc97c8f53579988b384cc40157f206b23ba37c3cb8d263ce1d87f5dcef5a4225d519711bf", 0x2c, 0x3)
r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000ac0), 0x20000, 0x0)
fcntl$dupfd(r8, 0xa, r4)

437.861227ms ago: executing program 2 (id=230):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
r3 = socket(0x18, 0x4001, 0x0)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100400000000000})
r4 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5)
r5 = kqueue()
kevent(r5, &(0x7f0000000000)=[{{r4}, 0xfffffffffffffffc, 0x21, 0x2, 0x6, 0xd}], 0x1, 0x0, 0x3ff, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x615, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000012e000/0x2000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r6 = dup(r1)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x7fff, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20001}, {0x2, 0xdf, 0xf}, {0x0, 0x7, 0x2f11, 0xb}, {0x3, 0xffff, 0x80cf, 0x1}, {0x3, 0x800, 0x7, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8008000, 0x44cf, 0x800007}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x101}, {0x200003, 0x80000000, 0x9, 0x4}, {0x81, 0x101, 0x7, 0x5}, {0x9be2, 0x8, 0x6, 0x69}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
r7 = kqueue()
getpeername$inet(r3, &(0x7f0000000200), &(0x7f0000000240)=0xc)
kevent(r7, 0x0, 0xfffffbfd, 0x0, 0x1, 0x0)
execve(0x0, 0x0, 0x0)
close(r6)

437.651946ms ago: executing program 0 (id=231):
syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaae1e56d2b948b4d6192a35e8faaaaaa080046f80020fffd0000070190780000ffffe0000001440406011100907800000008"])
r0 = socket(0x800000018, 0x1, 0x0)
listen(r0, 0x1)
setsockopt(r0, 0x8, 0x9, &(0x7f0000000000)="d9b04466f0586dcea07c706b46c8b21dcbaf499a302c", 0x16) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r1, 0x0, 0x23, 0x0, 0x0) (async)
bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8) (async)
getsockopt(r0, 0x40, 0xe406, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16)

292.981896ms ago: executing program 4 (id=232):
execve(&(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r0 = syz_open_pts()
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)='\a', 0x1}], 0x1)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff})
close(r0)
execve(0x0, 0x0, 0x0)

292.355567ms ago: executing program 0 (id=233):
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) (rerun: 32)
r0 = socket(0x18, 0x4000, 0x0) (async, rerun: 64)
kqueue() (async, rerun: 64)
r1 = syz_open_pts()
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000000c0)=0x10000) (async)
r2 = socket$inet(0x2, 0x1, 0x0) (async)
r3 = socket(0x2, 0x2, 0x0) (async)
r4 = socket(0x1, 0x4001, 0x0)
setsockopt(r4, 0x1000000000029, 0x800009, &(0x7f0000000440)="03001f00967fb419291a47a6b59730644d8c0f3fe102efe689dac50f91e8d0066df6a164e8b379e401e51d5203acc622dd8284f453fecbf4c958c4e069d45964a8dd729bad1da3dd9b6901392164d8b3c8fccc562535375bb5c383a95915b29dc30a52ed26abc8995128ff5dc6f3c6fbff9f696198", 0x75)
setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) (async, rerun: 64)
setsockopt(r3, 0x0, 0x4, &(0x7f0000000240)="f5ffffff", 0x4) (async, rerun: 64)
select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8, 0x8, 0x9ce8, 0x40000, 0x0, 0x9}, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r3, &(0x7f0000000200)=@un=@abs={0x0, 0x0, 0x2}, 0x8) (async)
r5 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x20, &(0x7f0000000180)=0x6, 0x4)
connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) (async)
r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0)
ioctl$BIOCGRSIG(r6, 0x40044273, &(0x7f0000000340)) (async)
write(r5, 0x0, 0x0) (async)
setsockopt(r2, 0x6, 0x0, &(0x7f0000000140)="e9f2d779", 0x4) (async, rerun: 64)
r7 = socket(0x10, 0x1, 0x11) (rerun: 64)
setitimer(0x0, &(0x7f0000000100)={{0x0, 0x8}, {0xffffffff}}, 0x0) (async, rerun: 32)
r8 = dup(r7) (rerun: 32)
getsockopt$sock_timeval(r0, 0xffff, 0x3, &(0x7f0000000380), &(0x7f0000000400)=0x10) (async, rerun: 32)
ioctl$WSMOUSEIO_SRES(r6, 0x80045721, &(0x7f00000001c0)=0x6) (async, rerun: 32)
fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) (async)
ioctl$FIONREAD(r2, 0x80146945, &(0x7f00000002c0))

291.0589ms ago: executing program 7 (id=234):
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0)

290.729077ms ago: executing program 0 (id=235):
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d1", 0x20}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000})
flock(r0, 0x1)
flock(r0, 0x3)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x100000000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r1)
mmap(&(0x7f0000433000/0x4000)=nil, 0x4000, 0x0, 0x5012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0)={<r3=>0x0}, &(0x7f0000000040)=0xc)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101)
ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f00000001c0)=0xc)
r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fcntl$lock(r4, 0x1, &(0x7f0000000180)={0x3, 0x0, 0xc, 0x1, r3})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)
r5 = socket(0x11, 0x3, 0x0)
connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x2}, 0x8)
connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x0}, 0x8)
read(r5, &(0x7f0000000240)=""/96, 0x60)
setsockopt(r2, 0x1, 0x3, &(0x7f0000000300)="d9a87b9cd36fa1e8a42d7f995e1915c30d109562a3b1621e31d6f2d3537c67bba4fff912f337cb286a659fbf23012839d655f53a810a34cb5a9aeffaddf7fad411a93f1bf96145d3125fbf6fc849b23f03fabef26296aaec2870e496653b0775508ab66170f8ca13798c5a10a6d4773d579e0c0cd0b7b81661723581954591ce4daf91e4f14ee11aa95e2e5340ad246f042ab0b09f1a9e492cbfa85669c9d8f41b6488c0952927ff2deeacb927315491153f0ce4c4b09bb8dc926ea10b8cc48073d641d34a", 0xc5)

273.432191ms ago: executing program 4 (id=236):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r1, 0xffff, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
accept(r0, &(0x7f00000000c0)=@in, &(0x7f0000000340)=0xc)
listen(r0, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0x2be00000000000, 0x1, 0x2, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2eff, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xaa, 0x2000000000002, 0xce7], [0x0, 0x1, 0xfffffffffffffffc, 0x8000ffffffff, 0xf9, 0x7b99, 0x201, 0x2000c, 0x6], [0x2, 0xfffffffffffffffb, 0x40000000, 0x4, 0xffffffffffffffff, 0x10fff, 0xfff7fffffffffffe], [0x4, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x7d06}, {0xfffc, 0x7, 0x5, 0x2}, {0x10, 0x101, 0x1, 0x814}, {0x3, 0x5, 0x9, 0x80000004}, {0x10, 0x2, 0x0, 0x80a}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0xa0000, 0x4, 0xf6}, {0x0, 0x965, 0x3, 0x9}], {0x2400, 0x8, 0x10000}, {0x0, 0xfffffffc, 0x3, 0x2}}})
r3 = kqueue()
kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
listen(0xffffffffffffffff, 0x9)
socket$unix(0x1, 0x5, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
getsockopt$sock_int(r1, 0xffff, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async)
accept(r0, &(0x7f00000000c0)=@in, &(0x7f0000000340)=0xc) (async)
listen(r0, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0x2be00000000000, 0x1, 0x2, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2eff, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xaa, 0x2000000000002, 0xce7], [0x0, 0x1, 0xfffffffffffffffc, 0x8000ffffffff, 0xf9, 0x7b99, 0x201, 0x2000c, 0x6], [0x2, 0xfffffffffffffffb, 0x40000000, 0x4, 0xffffffffffffffff, 0x10fff, 0xfff7fffffffffffe], [0x4, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x7d06}, {0xfffc, 0x7, 0x5, 0x2}, {0x10, 0x101, 0x1, 0x814}, {0x3, 0x5, 0x9, 0x80000004}, {0x10, 0x2, 0x0, 0x80a}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0xa0000, 0x4, 0xf6}, {0x0, 0x965, 0x3, 0x9}], {0x2400, 0x8, 0x10000}, {0x0, 0xfffffffc, 0x3, 0x2}}}) (async)
kqueue() (async)
kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async)
listen(0xffffffffffffffff, 0x9) (async)

273.105578ms ago: executing program 6 (id=237):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b61"])
sysctl$net_inet_etherip(&(0x7f00000000c0), 0xa, &(0x7f00000011c0)="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", 0x0, 0x0, 0x9)

188.825845ms ago: executing program 7 (id=238):
setrlimit(0x8, &(0x7f0000000080)={0x45, 0x56})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5)
read(r0, &(0x7f0000000340)=""/217, 0xd9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write(r0, &(0x7f0000000500)="c5", 0x1)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mquery(&(0x7f00003c2000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x5)
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00')
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101)
sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCDRAIN(r2, 0x2000745e)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xa7ffd, 0x4b6b, 0xfff5, 0x21d8b78a, "0700a460770db80a7f00001700002fcaaed2439a", 0x3db, 0x800003a})
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000900)="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", 0x5f3}], 0x1)

187.756531ms ago: executing program 6 (id=239):
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000840)={0x3, 0x0, 0x5, 0x1000100000000})
r1 = syz_open_pts()
flock(r0, 0x3)
close(r0)
ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000000)=0xfffffff7)

185.970934ms ago: executing program 4 (id=240):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x80000000, [{&(0x7f0000597000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0x100007}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f00006a7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x80004bb6}, {&(0x7f0000768000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x40000000000000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0xfffffffffffffff9}, {&(0x7f0000107000/0x4000)=nil, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x97}, {&(0x7f00002e4000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0xf}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000826000/0x2000)=nil}, {&(0x7f000058b000/0x4000)=nil, &(0x7f00004c2000/0x3000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000197000/0x4000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f00004a7000/0x1000)=nil}, {&(0x7f0000e5c000/0x2000)=nil, &(0x7f0000239000/0x1000)=nil, 0x4000000000}], '.\x00', 0xfffffffe})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x18, 0x1, 0x0) (async)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000100)=0x20001, 0x4) (async)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000100)=0x20001, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x2, 0x0)
getsockopt$sock_int(r2, 0xffff, 0x1003, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async)
getsockopt$sock_int(r2, 0xffff, 0x1003, &(0x7f0000000040), &(0x7f0000000100)=0x4)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x402)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x10e}, 0x2, 0x8, 0x1}) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x10e}, 0x2, 0x8, 0x1})
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000200)=[0xfdfb]) (async)
semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000200)=[0xfdfb])
semop(0x0, &(0x7f00000000c0), 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket(0x18, 0x1, 0x0) (async)
r3 = socket(0x18, 0x1, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r4, 0x0, 0xb, 0x0, 0x0) (async)
getsockopt(r4, 0x0, 0xb, 0x0, 0x0)
close(r3) (async)
close(r3)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

185.766165ms ago: executing program 6 (id=241):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x38, 0x0, 0x0)
connect(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4)
select(0x40, &(0x7f0000000080)={0x1, 0x1, 0xc00000000, 0x8000, 0x6, 0x8, 0xffff, 0xffffffffffffffff}, &(0x7f0000000100)={0x800100000000, 0x9, 0xc800000000000000, 0x4, 0xb, 0x3, 0x1f09, 0xa}, &(0x7f0000000140)={0x1, 0x9, 0xb7cf, 0x4ad, 0x10001, 0x80000000, 0x5}, &(0x7f0000000180)={0x8e8, 0x1})
sysctl$vm(&(0x7f00000000c0)={0x2, 0xc}, 0x2, &(0x7f0000000340)="592e128d", &(0x7f00000015c0)=0x4, 0x0, 0x0)
socket(0x18, 0x1, 0x0) (async)
setsockopt(r0, 0x1000000029, 0x38, 0x0, 0x0) (async)
connect(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa) (async)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
socket(0x18, 0x1, 0x0) (async)
setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async)
select(0x40, &(0x7f0000000080)={0x1, 0x1, 0xc00000000, 0x8000, 0x6, 0x8, 0xffff, 0xffffffffffffffff}, &(0x7f0000000100)={0x800100000000, 0x9, 0xc800000000000000, 0x4, 0xb, 0x3, 0x1f09, 0xa}, &(0x7f0000000140)={0x1, 0x9, 0xb7cf, 0x4ad, 0x10001, 0x80000000, 0x5}, &(0x7f0000000180)={0x8e8, 0x1}) (async)
sysctl$vm(&(0x7f00000000c0)={0x2, 0xc}, 0x2, &(0x7f0000000340)="592e128d", &(0x7f00000015c0)=0x4, 0x0, 0x0) (async)

185.361581ms ago: executing program 2 (id=242):
rename(&(0x7f0000004580)='.\x00', &(0x7f00000045c0)='./file0\x00')
sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x1, 0x0)
getsockname$unix(r0, 0x0, &(0x7f0000000340)) (async)
r1 = dup(r0)
sendmmsg(r1, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000100)=[{&(0x7f0000000040)="221d5099715b77e8b8ebf557a8d9350988f905e27804ff8621835497cbb811d504a045c190b5dafd89de45f0ebcc24be6141d61aa8847a4916ee6e93d6678f7a49bde8914097bcab98d76f4f26e1d3c0627eda83b68e8bc83ab6d004bbad3c7cda178c960ef65b0bf0e9bf2e46820f150620da327c16a9ea3bb616a8d9a440e38cded4495c4606cad87ede2ddccd9dd1883d1c9eebb96523c1155736b84bccbb12a9e8043fb00f2c48f8e12da70fd22d499c8bd925d76afee4ed52c9fcafe3b8", 0xc0}], 0x1, &(0x7f0000000380)=[{0x30, 0xffff, 0x0, "1573d913b26063c1d212dbfb46419d7a9e2f36d0dc7eec9cbb52fe"}, {0xd8, 0xffff, 0x18b, "d7a40c0dff5896b9d5814f461f11e65f713bc5a7de07c40ee7aa3be2da1f637d91a189d1a54d3c85122489d1fc233baf9396e8d41e842bec2a30114d6f5d05f511e0d3c095f95faba8a965ffdef12af92aff39a31c47f77645333b78ac416c3d65a25bb3bce1e265c7c7b8189eb2705f7c0ae607e65a8a8b48c22939ddb523ba24b1ab4c8a21fbe35d85704387501e8791cb45cddf8413e8a1edb733972ab34dd1b3e62bebdffafe3a07e55c413cb09dc5b7fd37f8efbb24b67d6fdd78fb1f4f05da79f7b7"}, {0x58, 0xffff, 0x9, "d1cd295ab04c3b9876741e4767ec925f2e08b7b252ebd4143e839626cdeb32c186606fffc528d246e8823a98a807a05008d18969700fc3882c56af5a87f9ad857aaa7c7e3e4526"}, {0x18, 0xffff, 0x80000001, "efdd53"}, {0xe0, 0xffff, 0x7fffffff, "b5b4283fe6768cd7fc3cbe04326b60e2a09914b203bba89027f9e979ffecbb623dea2aa3a97de77388f182b6366bbb3b0737a60d7c5a9c3378f35d95fcdadd99dd8b139fb2388b3ffdd14111a495e8637c91078a3af2564359982ed92276b470feae342bcf12e6b08143d1855d6ac70c0b145bbb4e17e950316800f080bcf3e48e5f7e025b2f20df0ec848db1cc0672c507f38edc8f377d1f2f949f405912d4561e56ae0760b3ac54a9c2423b331c4e77713956662e4721ab501d346c0dbbb740e828ad1c901f10b2067af0a08d1ad40"}, {0x108, 0x1, 0x8, "ab52efa58fb8e1b6b168f1f0303c28dca3248486aa52157a632c98ef28ffa0a7ababefef28e0ae87ae367138e14e0fad00033f83212eabb0fb6add6114bb0ecd183df1ce26b3e058df8cfcf8942373f39a41ffc4c4606f4ae98239625369c3ce11949d95ddf600af16aed28a42476f5bce7df87a6b7f23af3161dc374aafc8cecd654c54297e4b50b08cb5271c8655a6078bde17889544bf442e8a7bbb90158022c3b05795c645af30a3b3c45d1d8baa14415dbd219640411c5fe5c0f6e8972667fa4b7b3c721357659378543b39fa2bd6fe18bfb5dff0ae708cdc5a68bf358e2375413bc38f2d44f2197a4b8560d1e899fef90dac6f"}, {0x90, 0xffff, 0x7, "a9ebbba697643dfc8cb096a3bf7ca32b6fa6713faa6931d86e8e5c352bb65a2bb5a36c5653d3acc6c79ec40e63464608933d0b1ef7e0920072834aafbb7875dc9933c5c5e3912e70d9ceb0c5e34f54b6d4b98df99fb01d5068a214294e447dfbec47c77a6f40deae900fae891f423385c796d09601e0e5dd03337aadc0"}], 0x3f0}, 0x2}, 0x10, 0x406)

157.449816ms ago: executing program 4 (id=243):
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b798e5806ce228c9299f7504ece5be73983b5ee545a916d1cba8ee64", 0x3e}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x9011, 0xffffffffffffffff, 0x400000000000000) (async)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x1, 0xfffffffefffffffd, 0x2fffffffc}) (async)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async)
open$dir(&(0x7f0000000000)='.\x00', 0x200, 0x0)
select(0x40, &(0x7f0000000400)={0x2, 0x2, 0x7, 0x5, 0xb3, 0x8, 0x0, 0x5}, &(0x7f0000000440)={0x10, 0xfffffffffffffff8, 0xda0, 0x4, 0x7, 0x1, 0xfffffffffffffffd, 0xe3}, 0x0, 0x0) (async)
rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
rename(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='./file2/file0\x00') (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53})
r1 = syz_open_pts()
close(r1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540), 0x1000000000000133, 0x0}, 0x42) (async)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000001240)="b98626a29965082695e5539601b3986156a76cf8822022f4f1b294416f82f1a1801936584da6ae0f8c9a1c16c77246f7349efcf381ca990d72d075510388fdebbba708d8d6b5fb6e2e32ada19a31e2ad021667", 0x53}], 0x1) (async)
r3 = socket(0x18, 0x1, 0x0)
close(r3) (async)
socket(0x18, 0x2, 0xff) (async)
sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806)

155.7045ms ago: executing program 7 (id=244):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0x5, 0xe000000, 0x10db, 0x0, "3749c7a40dea0000170000000000000000ff0100", 0x2, 0x5})
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1)
close(r2)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)="b9", 0x1}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r0, &(0x7f0000000000), 0x10)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r3 = open(&(0x7f0000002280)='./file0\x00', 0x1, 0x1e4)
open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x17, 0x2}, 0x6)
r4 = socket(0x1, 0x2, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0xffffffff, 0x0, 0x0, 0x0, 0x140, 0x90, 0xfffe}, 0x1, 0x804, 0x0, 0x0, 0x7, 0x9, 0x80000000})
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000000)=0xfffffffa)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa7905245d1bc986dd64cb8ed800803c00000000000000000000000000000000000000000000000000000000000040"])
r5 = semget$private(0x0, 0x2, 0x506)
semctl$GETALL(r5, 0x0, 0x6, 0xffffffffffffffff)
write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e)

155.465385ms ago: executing program 4 (id=245):
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
chmod(&(0x7f0000000000)='./file2/file0\x00', 0x141)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
ftruncate(r0, 0x8531)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xffffffffffffff2a, 0x0, 0xffffffffffffffb7)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
r1 = socket(0x1, 0x5, 0x0)
close(r1)
mquery(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xb)
rename(&(0x7f0000000440)='./file2/file0\x00', &(0x7f00000001c0)='./file2\x00')

155.304975ms ago: executing program 2 (id=246):
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mknod(&(0x7f0000000080)='./file2/file0\x00', 0x1000, 0x6)
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0])
sysctl$hw(&(0x7f0000000040)={0x6, 0x17}, 0x2, &(0x7f0000000100)="bd0f192eec0600682241f789467dcddac3d3651bdd6c3f06228d1a068d156ec160c3", &(0x7f0000000000)=0x22, 0x0, 0x0)

91.906782ms ago: executing program 0 (id=247):
r0 = socket(0x11, 0x4000, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x1000, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006}, {0x2, 0x7, 0xf}, {0x0, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x24, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xdffffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x4000006, 0x7fff}, {0x0, 0xfffdfff8, 0x400005, 0x8bfb}, {0xfffff0ce, 0x8000000, 0x5, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x3, 0x5}, {0x9be2, 0x108001, 0x6, 0x69}]})
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x1, 0x5, 0x8cbd, 0x9, "909c92107e9479099d3b7d7f164aeb006335a34e", 0x2, 0x7f})
read(r2, &(0x7f00000001c0)=""/159, 0x9f)
syz_open_pts()
sendto$unix(r0, &(0x7f0000001540)="b100050400000000000008000301000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebb4257699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd007f720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a01f90006ee01bc43eaea8c500000002100000000000020208a371a3f80004000000000000000100000000000000100000", 0xb1, 0x40a, 0x0, 0x0)

91.651982ms ago: executing program 6 (id=248):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffb, 0x2000001, 0x2, 0x1, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xce5], [0xfffffffffffffffe, 0x80000002, 0x6, 0xffffffff, 0x100, 0x7b99, 0x1fe, 0x3, 0x10000000000001], [0x100000001, 0x2, 0x40000000, 0x0, 0x2, 0x101, 0x1], [0x100, 0x20000000000, 0x401, 0x3, 0xffffffffffeffffe, 0x8], [{0x10, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x2}, {0x0, 0x0, 0xfffffffe, 0x5}, {0x3, 0x7, 0x6, 0x80000001}, {0x0, 0x2, 0x0, 0x808}, {0xb, 0x2003, 0x3, 0x1fffffffffffffff}, {0x0, 0x0, 0x3}, {0x0, 0x962, 0x0, 0x200000000008}], {0x2000, 0x1000001, 0x5}, {0x0, 0x0, 0x8, 0x9}}})
r0 = kqueue()
kevent(r0, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
socketpair(0x1, 0x8000, 0x6, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt(r2, 0xffff, 0x3ff, &(0x7f0000000040)=""/84, &(0x7f00000000c0)=0x54)
close(r0)

88.573919ms ago: executing program 2 (id=249):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f0000000040)={0x1, 0x4c}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f0000d80000/0x2000)=nil, &(0x7f00006ad000/0x1000)=nil}, {&(0x7f0000001000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc}, {0x0, &(0x7f0000e08000/0x4000)=nil, 0x10000}, {0x0, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffffffffffffffff}, {0x0, 0x0, 0x9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000b72000/0x4000)=nil, 0x1}, {&(0x7f00001d0000/0x2000)=nil, &(0x7f00001d2000/0x1000)=nil}, {&(0x7f00006ad000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a80000/0x1000)=nil}, {&(0x7f0000eef000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d3000/0x2000)=nil}, {&(0x7f00009ff000/0x1000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil}], './file0/../file0\x00'}) (async)
write(r0, 0x0, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r2, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x1, './file0/../file0\x00'}, 0x13, &(0x7f0000000580)=[{&(0x7f0000000240)="185a08482f02c2a54bf1feb2db74f790a7a082a89bd8b0", 0x17}, {&(0x7f0000000280)="7c5cfee8d7b6affbf5ea16d218cce9eeb11853a5d6f31e6cf282e34d63c45b035e3b49c2be67a9a76210cfe16be98e4fb11d1b96768652c6db72fed1702ef5538c249ded8d35f995699a8f96b7f60f98dc2909a4762e4ac3933f410b559006bc45ca85e095e07bf312c0ac74170288675f53af0eed9070d5ecbef76b08f5e8dec4192a94085c10c70c50158f631071cccde9e169dd262371f6b829ed335331e063f7606fe40e819f7956a56dcdbdb5f25c2d49bc481eff43cc7c7d083b6a81dd580ed36e8e0a77c3d5df41c3880f70", 0xcf}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="f827fe1f240309be97017901b18008469fd2b3219e6ffa9536c5947e85ac1d252eb54dd19f874860af5f38d68249ec6d862b7ff8d2e016a15c2db093c374b58f5ed7ccfc7dccad6ca8244b065a64fda98862b15d7ceedf6892cbdb29131ee2ed", 0x60}, {&(0x7f0000000440)="9a8a775d9e783583a3786bca576302d2b6365eae659e6bdeef1511f3b2a492b3b8ebee6d70acdc903e7861f960c3dc126275866bf00b6ab1fa079bdcc11547ec316c9e8e372d3c202718af2d0d05f8184b04f5c381d52cba6f53798c92f4309d4d129924bdfe61a1d178d9794622246fefaace76985730dc7d", 0x79}, {&(0x7f00000004c0)="a31d34c8ec165049a32e2810bf83e601b206e1e912af1f6be71a3a84fe4019a0f1a7bdb06d56198613a3715ba1815dbfde1cf882f7ce4d292ad58266f6405c79f6a5f4c12cc2472081d5da3c6a42e4704c00554fa66bc6ff42e70e55045976d610f3d438e771c5241804788132ae37c700f95a5c74c07ed3a0344b3862fb1ef21c01b24d90f7a5fdcffd3d2f1c086193fa06226ec2ca8c3a03e96933357eed625aff03857b520f0f2d1b6de83aedfde9aa629f889ecfbd", 0xb7}], 0x6, 0x0, 0x0, 0xa}, 0x8) (async)
recvmmsg(r1, &(0x7f0000000040)={0x0, 0xff}, 0x10, 0x42, 0x0) (async)
socket(0x18, 0x2, 0x0) (async)
r3 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r3, 0x0, 0x6, &(0x7f0000000180)="b1f5d915", 0x4) (async)
getsockopt$sock_int(r3, 0xffff, 0x1, 0x0, 0x0)

88.280446ms ago: executing program 2 (id=250):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x802069ad, &(0x7f0000000100))
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x2, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1)
r3 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r3, 0x0, 0x13, 0xffffffffffffffff, &(0x7f00000000c0))
r4 = dup(r2)
dup2(r4, r1)
connect$unix(r1, &(0x7f0000000000), 0x10)
ftruncate(0xffffffffffffffff, 0x10000)
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
semget(0x0, 0x1, 0x280)
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x4b6b, 0xfff7, 0x21d8b78c, "2700a460990d000009000000ff00", 0x40004, 0x40})
writev(r5, &(0x7f0000000840)=[{&(0x7f0000000900)="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", 0x71b}], 0x1)
semget(0x0, 0x4, 0x75cca3ce9f125c20)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x8d198f24dce7acfd)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, r7, 0x0)
r8 = msgget$private(0x0, 0x1ba)
msgrcv(r8, 0x0, 0x0, 0x3, 0x1000)

80.060205ms ago: executing program 4 (id=251):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x8, 0x2, 0x1}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080), 0xc)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9dce)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
close(r5)
r6 = socket(0x2, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
select(0x40, &(0x7f0000000080)={0x2, 0x6, 0x100000000000, 0x3, 0x5, 0xcdb5, 0x1, 0xd66a}, 0x0, &(0x7f00000002c0)={0x7b, 0x3, 0x80000009, 0x8, 0x800000007, 0x9, 0x8, 0x80100000}, 0x0)
execve(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r7 = socket(0x2, 0x1, 0x0)
bind(r7, &(0x7f0000000000), 0x10)
ioctl$FIONREAD(r0, 0x40047307, &(0x7f0000000100))

5.502385ms ago: executing program 6 (id=252):
select(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x8, 0x0)
kqueue()
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
dup2(r1, r0)
select(0x0, 0x0, 0x0, 0x0, 0x0) (async)
open$dir(&(0x7f0000000140)='.\x00', 0x8, 0x0) (async)
kqueue() (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
dup2(r1, r0) (async)

5.035465ms ago: executing program 6 (id=253):
r0 = syz_open_pts() (async, rerun: 64)
syz_open_pts() (rerun: 64)
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x2100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}})
r1 = kqueue()
r2 = kqueue()
kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) (async, rerun: 32)
kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async, rerun: 32)
close(r1) (async)
r3 = syz_open_pts()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000740)={0x804, 0xfff, {[0xa, 0x1, 0x5, 0x80, 0x1, 0x6, 0x9d1, 0x1, 0x9fffffffffffffff, 0x2, 0x2, 0x3, 0x5, 0x4477, 0xdf, 0x2, 0x5, 0x280000001], [0x80000001, 0xfffffffffffffffc, 0xe, 0xd83, 0x3, 0xc, 0x30ac00000, 0x2fc6476f], [0xffffffffffffff01, 0x5, 0xc, 0xa, 0xfffffffffffffff7, 0x6e, 0x6], [0xfffffffffffffff8, 0x6, 0x8c, 0x5, 0x400, 0x6], [{0x4, 0x1, 0xfffffff8, 0x800}, {0xc1c6, 0x3, 0x7, 0xdff}, {0x1000, 0x8cd4e02, 0x2b2, 0x8}, {0x0, 0x1, 0x10000, 0xdd}, {0x1, 0x8, 0x3, 0x4}, {0x200, 0x4, 0x9, 0x2}, {0x1, 0xe40b, 0x6, 0x6}, {0x9, 0x401, 0xb, 0x2}], {0x0, 0x8, 0xffffffff, 0x7}, {0xc1, 0x116dc000, 0x6, 0xfff}}})
close(r3) (async)
syz_open_pts()
ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x8, 0xf7fffbfc, 0x80a19f, "0101000000f167d91151a5000000002200", 0x100, 0x4000001}) (async)
writev(r3, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
r4 = socket(0x18, 0x1, 0x0)
r5 = socket(0x800000018, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 32)
listen(r5, 0x1) (async, rerun: 32)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) (async, rerun: 64)
setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000680)=0x2, 0x4) (rerun: 64)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32)
sendto$inet(r4, &(0x7f0000000100)="5e0deda4", 0x4, 0x404, 0x0, 0x0) (rerun: 32)
r6 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r6, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_pts()
syz_open_pts() (async)
lseek(r0, 0xffffffffffffffff, 0x0)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$BIOCGDLTLIST(r7, 0xc010427b, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[0x8000, 0xe52, 0x1]})

2.868594ms ago: executing program 7 (id=254):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
pipe2(&(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x4)
poll(&(0x7f0000000100)=[{r1, 0x1}, {r0, 0x80}, {r2, 0x10}, {r3, 0x4}, {r0, 0x8}, {r1, 0x4}, {r0, 0x10}, {r1, 0x1}], 0x8, 0x7)
sendto(0xffffffffffffffff, 0x0, 0xfffc, 0xc, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x5ff}, 0xc)
r4 = socket(0x18, 0x1, 0x0)
sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
close(r5)
socket(0x2, 0x2, 0x0)
fcntl$setstatus(r5, 0x4, 0xc4)
shutdown(r5, 0x1)
setsockopt(r5, 0x7ff, 0x4, &(0x7f0000000140)="4a5fb5dbe50bc079c7481189faeab1488e4a6085b0689e89c61486af04d752de56dc01e1fc58107823429b78019b76404257fda6c552828a72a2203e5af569d475a10129c8976e4f9283a7ad284f981ca17d012607695decb96411ecc9b400b7374f06cffce2be50f796c40941aa740e299c1cea8f1ea8d5694cc73512a7629263a2872048ed48432816a211407c2dd34952148a195f876de9cc6724ffb621b0219fb6779d9aaae2b3f740f1b27afa3db8c9fa4eaff738d4491e17d3261ca4b7fb9c6d7ac59ecc73c7cdcdeb8c4fa50440478051f7d2f73a11038c3df31943190961ac1370a972de6096548897ce94cdd171a06639b6a7ddc0", 0xf9)
bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000004, 0x9, 0x0, 0xffe})
r6 = socket(0x800000018, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
sysctl$hw(&(0x7f0000000080)={0x6, 0x5}, 0x2, &(0x7f0000001540)="00020000", &(0x7f0000000000)=0x4, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.327253ms ago: executing program 2 (id=255):
r0 = shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000)
shmctl$IPC_RMID(r0, 0x0)
pipe2(&(0x7f0000000700)={<r1=>0xffffffffffffffff}, 0x4)
readv(r1, &(0x7f0000001640)=[{&(0x7f00000012c0)=""/122, 0x7a}], 0x1)
sysctl$hw(&(0x7f0000000000)={0x6, 0xb}, 0x5, &(0x7f0000000040), 0x0, 0x0, 0x0)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x1000)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x8, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0xae, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x6}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x4, 0x0, 0x7}, {0x7, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}})
r2 = socket$inet(0x2, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0x4)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x8, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0xae, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x6}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x4, 0x0, 0x7}, {0x7, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}})
r3 = socket$inet(0x2, 0x2, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0xb}, 0x2, &(0x7f0000001940), &(0x7f0000000100)=0xfffffffffffffe70, 0x0, 0x0)
r4 = socket(0x2, 0x2, 0x0)
mquery(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x1, 0x10, r4, 0x9)
setsockopt(r4, 0x0, 0x18, 0x0, 0x0)
close(r3)
sendmsg(r3, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0x4)
shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil) (async)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) (async)
shmctl$IPC_RMID(r0, 0x0) (async)
pipe2(&(0x7f0000000700), 0x4) (async)
readv(r1, &(0x7f0000001640)=[{&(0x7f00000012c0)=""/122, 0x7a}], 0x1) (async)
sysctl$hw(&(0x7f0000000000)={0x6, 0xb}, 0x5, &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x1000) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x8, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0xae, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x6}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x4, 0x0, 0x7}, {0x7, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) (async)
socket$inet(0x2, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0x4) (async)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x8, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0xae, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x6}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x4, 0x0, 0x7}, {0x7, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) (async)
socket$inet(0x2, 0x2, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0xb}, 0x2, &(0x7f0000001940), &(0x7f0000000100)=0xfffffffffffffe70, 0x0, 0x0) (async)
socket(0x2, 0x2, 0x0) (async)
mquery(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x1, 0x10, r4, 0x9) (async)
setsockopt(r4, 0x0, 0x18, 0x0, 0x0) (async)
close(r3) (async)
sendmsg(r3, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0x4) (async)

0s ago: executing program 0 (id=256):
r0 = socket(0x800000018, 0x1, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={{0x7f, 0xfffffffffffffffe}, {0x0, 0x7}}, 0x2) (async)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x96)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts.
uvn_flush: obj=0xfffffd806872af10, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
kernel: protection fault trap, code=0
Stopped at      witness_checkorder+0xb5:        movl    0x20(%r14),%r15d
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
witness_checkorder(deadbeefdeadc007,9,0) at witness_checkorder+0xb5
mtx_enter(deadbeefdeadbff7) at mtx_enter+0x95
prsignal(deadbeefdeadbeef,14) at prsignal+0x36
reaper(ffff8000ffffd230) at reaper+0x2ec
end trace frame: 0x0, count: -4
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a234920
rbx                                0
rdx                                0
rcx               0xffff8000ffffd230
rax               0xffffffff838b2ffe    cpu_info_full_primary+0x1ffe
r8                               0x2
r9                                 0
r10               0xdc6b16abdbdf9d79
r11               0xe08b0eb7865e10db
r12               0xdeadbeefdeadc0fe
r13                              0x9
r14               0xdeadbeefdeadc007
r15                                0
rip               0xffffffff819f9825    witness_checkorder+0xb5
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002a234880
ss                              0x10
witness_checkorder+0xb5:        movl    0x20(%r14),%r15d
ddb{0}> show proc
PROC (reaper) tid=105564 pid=10529 tcnt=1 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000fffffc88,0xffff8000ffffcfa8
    process=0xffff8000ffffb9c0 user=0xffff80002a22f000, vmspace=0xffffffff838d91a8
    estcpu=0, cpticks=6, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
  1295  331056   9290  32767  2        0x10                syz-executor
 28873  229597   2513  32767  2        0x10                syz-executor
 28873  100221   2513  32767  3   0x4000090  fsleep        syz-executor
 50663  241104   7866  32767  2        0x10                syz-executor
 50663   79323   7866  32767  3   0x4000090  fsleep        syz-executor
 50663  422787   7866  32767  2   0x4000010                syz-executor
 50663  186329   7866  32767  2   0x4000010                syz-executor
 47293  171814  59794  32767  3        0x90  nanoslp       syz-executor
 47293   96530  59794  32767  3   0x4000090  kqread        syz-executor
 47293  133846  59794  32767  3   0x4000090  fsleep        syz-executor
 50911  100707  19768  32767  3        0x90  nanoslp       syz-executor
 50911  505088  19768  32767  3   0x4000090  ttyin         syz-executor
 50911  267265  19768  32767  3   0x4000090  fsleep        syz-executor
 92091  523023  24186  32767  3        0x90  nanoslp       syz-executor
 92091  470638  24186  32767  3   0x4000090  sbwait        syz-executor
 92091  147893  24186  32767  3   0x4000090  fsleep        syz-executor
 59794  331824  54695  32767  3        0x90  nanoslp       syz-executor
 25368  229655  20409  32767  7        0x10                syz-executor
 19768  439876    254  32767  3        0x90  nanoslp       syz-executor
  2513  375549  87054  32767  2        0x10                syz-executor
  7866  322741  50591  32767  3        0x90  nanoslp       syz-executor
 24186  449161  32800  32767  3        0x90  nanoslp       syz-executor
  9290  267371  89720  32767  3        0x90  nanoslp       syz-executor
 20409   78971  36148      0  3        0x82  wait          syz-executor
 50591  120065  36148      0  3        0x82  wait          syz-executor
   254  453173  36148      0  3        0x82  wait          syz-executor
 75661  117096  36148      0  3        0x82  wait          syz-executor
 54695  400429  36148      0  3        0x82  wait          syz-executor
 87054  404642  36148      0  3        0x82  wait          syz-executor
 32800  211772  36148      0  3        0x82  wait          syz-executor
 89720   60168  36148      0  3        0x82  wait          syz-executor
 36148  240693  71187      0  3        0x82  kqread        syz-executor
 71187  279769  84742      0  3    0x10008a  sigsusp       ksh
 84742  395546  31954      0  3        0x98  kqread        sshd-session
 31954  467848  89810      0  3        0x92  kqread        sshd-session
 43083  450875      1      0  3    0x100083  ttyin         getty
 89810  280310      1      0  3        0x88  kqread        sshd
 89792  124189  21488     73  3   0x1100090  kqread        syslogd
 21488  352966      1      0  3    0x100082  sbwait        syslogd
 46921  373974      1      0  3    0x100080  kqread        resolvd
 49839   36855  22143     77  3    0x100092  kqread        dhcpleased
 16587  399804  22143     77  3    0x100092  kqread        dhcpleased
 22143  316300      1      0  3        0x80  kqread        dhcpleased
 75994  309277      0      0  3     0x14200  bored         smr
 73576    8801      0      0  2     0x14200                zerothread
 96789  153863      0      0  3     0x14200  aiodoned      aiodoned
 47686  169272      0      0  3     0x14200  syncer        update
 85994  161517      0      0  3     0x14200  cleaner       cleaner
*10529  105564      0      0  7     0x14200                reaper
 51362  376360      0      0  3     0x14200  pgdaemon      pagedaemon
 59798  176921      0      0  3     0x14200  bored         viomb
 86006  420255      0      0  3  0x40014200  acpi0         acpi0
 34400  341211      0      0  3  0x40014200                idle1
 15143  330225      0      0  3     0x14200  bored         softnet1
 57802  487238      0      0  3     0x14200  bored         softnet0
 79587  153843      0      0  3     0x14200  tqbarend      systqmp
   909  317319      0      0  3     0x14200  bored         systq
 15706  455135      0      0  3     0x14200  tmoslp        softclockmp
 79848   34059      0      0  3  0x40014200  tmoslp        softclock
 42764  174878      0      0  3  0x40014200                idle0
     1  508931      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 25368 (syz-executor) thread 0xffff8000fffe7778 (229655)
exclusive rrwlock inode r = 0 (0xfffffd806cb79200)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vget+0x2a2
#6  ufs_ihashget+0x185
#7  ffs_vget+0x8c
#8  ufs_lookup+0x1a36
#9  VOP_LOOKUP+0x6e
#10 vfs_lookup+0x93a
#11 namei+0x7ca
#12 dounlinkat+0xc1
#13 syscall+0xb17
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806d232a10)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  dounlinkat+0xc1
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 10529 (reaper) thread 0xffff8000ffffd230 (105564)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8393b308)
#0  witness_lock+0x5f1
#1  __mp_acquire_count+0x58
#2  sleep_finish+0x2d8
#3  rw_do_enter_write+0x1dc
#4  knote_processexit+0x2b
#5  reaper+0x26d
#6  proc_trampoline+0x10
Process 79587 (systqmp) thread 0xffff8000ffffe298 (153843)
shared rwlock systqmp r = 0 (0xffffffff83842068)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11055  12019K   12034K 166960K     12146        0
            pcb    17     12K      12K 166960K        17        0
         rtable   241      6K       7K 166960K       362        0
             pf    31     16K      16K 166960K        31        0
         ifaddr    42      7K       7K 166960K        44        0
        ifgroup    50      2K       2K 166960K        50        0
         sysctl     2      1K       9K 166960K         6        0
       counters    70     37K      37K 166960K        70        0
       ioctlops     0      0K       2K 166960K        34        0
            iov     0      0K      12K 166960K        21        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1335     84K      84K 166960K      1603        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       5K 166960K         7        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        17        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    24     89K     125K 166960K       396        0
          sigio     0      0K       0K 166960K         3        0
           proc    58     99K     163K 166960K       514        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       172        0
       in_multi    99      7K       7K 166960K       108        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    91    413K     413K 166960K        91        0
           exec     0      0K       1K 166960K       379        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   248    168K     192K 166960K      5224        0
       UVM aobj    42      3K       3K 166960K        42        0
     pinsyscall    45     90K     116K 166960K      1449        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        25        0
            NDP    11      0K       2K 166960K        27        0
           temp    75   8680K    8746K 166960K      8213        0
         kqueue    17     26K      30K 166960K        90        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      122    0      118     3     0     3     3     0     8    2
rtentry    176      114    0        2     6     0     6     6     0     8    0
unpcb      144      349    0      264     4     0     4     4     0     8    0
syncache   336        6    0        6     1     0     1     1     0     8    1
tcpcb      736      106    0      101     1     0     1     1     0     8    0
arp        136       18    0        0     1     0     1     1     0     8    0
ipq         40        1    0        0     1     0     1     1     0     8    0
ipqe        40        2    0        0     1     0     1     1     0     8    0
inpcb      328      392    0      383     7     0     7     7     0     8    6
ip6q        72        2    0        0     1     0     1     1     0     8    0
ip6af       40        2    0        0     1     0     1     1     0     8    0
nd6        152       27    0        1     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      458    0        2    29     0    29    29     0     8    0
art_table   40      459    0        2     5     0     5     5     0     8    0
art_node    32      114    0       12     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        2     1     0     1     1     0     8    1
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112       15    0        5     1     0     1     1     0     8    0
shmpl      112       39    0        0     2     0     2     2     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     2155    0      643    95     0    95    95     0     8    0
ffsino     296     2155    0      643   117     0   117   117     0     8    0
nchpl      144     2705    0     1018    63     0    63    63     0     8    0
vnodes     216     2236    0        0   125     0   125   125     0     8    0
namei      1024    8190    0     8190     1     0     1     1     0     8    1
percpumem   16       50    0        0     1     0     1     1     0     8    0
kstatmem   264       24    0        0     2     0     2     2     0     8    0
scxspl     216     8241    0     8241     8     1     7     7     1     8    7
plimitpl   152      109    0       84     2     0     2     2     0     8    0
sigapl     424      679    0      627     7     0     7     7     0     8    0
knotepl    120      306    0        0    10     0    10    10     0     8    0
kqueuepl   224      192    0      180     5     0     5     5     0     8    4
pipepl     344      130    0      100     3     0     3     3     0     8    0
fdescpl    528      663    0      627     4     0     4     4     0     8    0
filepl     160     3800    0     3397    17     0    17    17     0     8    0
lockfpl    104       86    0       84     1     0     1     1     0     8    0
lockfspl    48       36    0       34     1     0     1     1     0     8    0
sessionpl  144       24    0        8     1     0     1     1     0     8    0
pgrppl      48       36    0       12     1     0     1     1     0     8    0
ucredpl    104     1098    0     1079     1     0     1     1     0     8    0
zombiepl   144      628    0      627     1     0     1     1     0     8    0
processpl  1232     679    0      627     5     0     5     5     0     8    0
procpl     664     1128    0     1066     7     0     7     7     0     8    1
sosppl     176        3    0        3     1     0     1     1     0     8    1
sockpl     752      866    0      768    11     0    11    11     0     8    1
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     126    0        0    16     0    16    16     0     8    0
mcl2k      2048      30    0        0     4     0     4     4     0     8    0
mtagpl      96        1    0        0     1     0     1     1     0     8    0
mbufpl     256     1188    0        0    75     0    75    75     0     8    0
bufpl      280     2688    0      119   184     0   184   184     0     8    0
anonpl      32    11662    0        0    95     0    95    95     0   246    0
amapchunkpl 152   16769    0    16174    40     0    40    40     0   158   10
amappl16   200     2306    0     2243    28    12    16    24     0     8    8
amappl15   192       46    0       46     1     1     0     1     0     8    0
amappl14   184        6    0        5     1     0     1     1     0     8    0
amappl13   176      433    0      432     1     0     1     1     0     8    0
amappl12   168      993    0      949     3     0     3     3     0     8    0
amappl11   160        8    0        8     1     1     0     1     0     8    0
amappl10   152       43    0       33     1     0     1     1     0     8    0
amappl9    144      257    0      257     1     1     0     1     0     8    0
amappl8    136       18    0       16     1     0     1     1     0     8    0
amappl7    128       74    0       73     1     0     1     1     0     8    0
amappl6    120      270    0      259     1     0     1     1     0     8    0
amappl5    112       70    0       63     1     0     1     1     0     8    0
amappl4    104      398    0      375     1     0     1     1     0     8    0
amappl3     96     2661    0     2568     4     0     4     4     0     8    1
amappl2     88      813    0      736     2     0     2     2     0     8    0
amappl1     80    10442    0     9897    14     0    14    14     0     8    1
amappl      88     4484    0     4305     6     0     6     6     0    92    1
uvmvnodes   80      109    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       41    0        0     1     0     1     1     0     8    0
uaddrrnd    24      663    0      627     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      663    0      627     1     0     1     1     0     8    0
vmmpekpl   168     7099    0     7062     2     0     2     2     0     8    0
vmmpepl    168    49917    0    47888   109     0   109   109     0   357   13
vmsppl     488      662    0      627     7     1     6     6     0     8    1
rwobjpl     80    16563    0    15550    29     0    29    29     0     8    4
pdppl      4096    1333    0     1254   111    26    85    97     0     8    6
pvpl        32    19989    0        0   162     0   162   162     0   265    0
pmappl     256      662    0      627     4     1     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      347    0       29    10     0    10    10     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
witness_checkorder(deadbeefdeadc007,9,0) at witness_checkorder+0xb5
mtx_enter(deadbeefdeadbff7) at mtx_enter+0x95
prsignal(deadbeefdeadbeef,14) at prsignal+0x36
reaper(ffff8000ffffd230) at reaper+0x2ec
end trace frame: 0x0, count: -4
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8393b100) at __mp_lock+0x192
__mp_acquire_count(ffffffff8393b100,1) at __mp_acquire_count+0x58
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8
biowait(fffffd806da3a010) at biowait+0xc6
bwrite(fffffd806da3a010) at bwrite+0x2e7
ufs_dirremove(fffffd806da56e90,fffffd806cb79160,800c,1) at ufs_dirremove+0x290
ufs_rmdir(ffff80003a7f22f0) at ufs_rmdir+0x238
VOP_RMDIR(fffffd806da56e90,fffffd8067553878,ffff80003a7f23c8) at VOP_RMDIR+0x192
dounlinkat(ffff8000fffe7778,ffffff9c,78c03a885d10,8) at dounlinkat+0x2e0
syscall(ffff80003a7f2540) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78c03a885d00, count: -14