last executing test programs:

6.477317505s ago: executing program 3 (id=6948):
r0 = shmget(0x2, 0x4000, 0x208, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_STAT(r0, 0x2, 0x0) (async, rerun: 32)
shmctl$SHM_UNLOCK(r0, 0x4) (rerun: 32)

6.403294116s ago: executing program 3 (id=6951):
setrlimit(0x8, &(0x7f0000000000)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x9789, 0xfffffffb, 0x3, 0x80a19e, "bb081aa9000800f7beae58beff0f00", 0x71, 0x4})
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f00000000c0)=0x8)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)

5.970904367s ago: executing program 3 (id=6954):
mprotect(&(0x7f00007fc000/0x4000)=nil, 0x4000, 0x4)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000140)="a17cbfc0caecfb6b75c44a18a62caa380128303ea6eb5ed2fe302a895615d9008a050537b06670d53261a39d44d6cceb41029be1ab69c4a0a1aa451b981029d2f023a1", 0x43)
close(r3)
write(r2, 0x0, 0x0)
sysctl$kern(&(0x7f0000000100)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0)
socket(0x1, 0x6, 0x12)

5.000815597s ago: executing program 3 (id=6982):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
setregid(0x0, r4)
setregid(r4, r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={<r6=>0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
setregid(0x0, r7)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
r8 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r8)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r9 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
mkdir(&(0x7f0000000000)='./file0\x00', 0x60)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='r\x00')
write(r9, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
symlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00')
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r10 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r10, 0x0)
bind(r0, &(0x7f0000001880)=@in={0x2, 0x2}, 0xc)
sendmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000ffff00ff2a612cecf300000000000000"], 0x18}, 0x40f)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x5, 0x0, r4, r3, r4, 0x22, 0x2400}, 0x10, 0x40, r6, r2, 0x2, 0x4, 0x7fffffffffffffff, 0x4})
ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})

4.791293174s ago: executing program 3 (id=6983):
unlink(&(0x7f0000000a80)='.\x00') (async)
r0 = socket$inet(0x2, 0x5, 0xf)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="f5031717e1652080d981f75f781a5873592bad1207ad51bfe4b576377c1002fe22e8a5667ab0ed336d5b4f56cd451f6764b2373b09b5997c7bee10ad0ac60156316d550ade8240776b8faa8cd09414621e8f57c63462cc18f09b23c514223fa79ef1c19f3b67b318971f55a56d95aeb1eda7c6563ff59309fce279d13600a1262e71c006cf55966a4c0d9450061a279d290207a9be029cdd359d2ba6096439a165298804b1f14b8802d071ebff58928b701eecbba4d5fc01aecf5209abee33be5eea7fbe6a1d0350461fe9030c874b306798e9672d6eb2e470315424656d654d3b0b75", 0xe3) (async)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) (async)
r2 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x5, 0x0, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x1}) (async)
ioctl$TIOCSTOP(r2, 0x2000746f) (async)
syz_open_pts() (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0)
ioctl$WSKBDIO_GETBACKLIGHT(r1, 0x400c5711, &(0x7f0000000100))

4.790349905s ago: executing program 3 (id=6984):
setrlimit(0x2, &(0x7f0000000040)={0x60000000, 0xfffffffffffffffe})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xdffdff7e, 0x1603d0a, "04e4577e0700000007ffe500", 0x6, 0x9})
r2 = socket(0x18, 0x1, 0x0)
getsockopt(r2, 0x29, 0x3d, 0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000001b00)="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", 0x171}], 0x1)
open(&(0x7f0000000380)='./file0\x00', 0x100, 0x0)

3.243643344s ago: executing program 4 (id=7009):
r0 = socket$inet(0x2, 0x3, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x1, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x1008402})
fsync(r1)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pipe2(&(0x7f0000000180), 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
sendto$inet(r0, &(0x7f0000000040)="59f31a7dea47f59a28f58c2984f23d979bf7055713cb85402d060905b1e1674ac6e8b1931e26fe1cb58230c368a7ddb3b9060f5df9610a8f179d51500bc1", 0x3e, 0x406, &(0x7f0000000080)={0x2, 0x0}, 0xc)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='r\x00')
socket$inet(0x2, 0x3, 0x0) (async)
close(r0) (async)
socket$inet(0x2, 0x1, 0x0) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x1008402}) (async)
fsync(r1) (async)
mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) (async)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async)
pipe2(&(0x7f0000000180), 0x4) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) (async)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) (async)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) (async)
sendto$inet(r0, &(0x7f0000000040)="59f31a7dea47f59a28f58c2984f23d979bf7055713cb85402d060905b1e1674ac6e8b1931e26fe1cb58230c368a7ddb3b9060f5df9610a8f179d51500bc1", 0x3e, 0x406, &(0x7f0000000080)={0x2, 0x0}, 0xc) (async)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='r\x00') (async)

3.216237185s ago: executing program 4 (id=7016):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
pwritev(r1, &(0x7f0000002740)=[{&(0x7f0000000000)="370aea", 0x3}], 0x1, 0x3fffe)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = socket(0x18, 0xc003, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, 0x0, 0x0)
getsockopt$sock_int(r3, 0xffff, 0x8, 0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x18, 0x3, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONREAD(r4, 0x81206919, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.987695689s ago: executing program 4 (id=7022):
kqueue() (async)
r0 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x3, 0x1}, {0x8, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}})
kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)

2.987339842s ago: executing program 4 (id=7023):
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa"]) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000000540)={0x0}, 0x10, 0x6)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000003680)="00020000", 0x4) (async)
listen(0xffffffffffffffff, 0x361) (async)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xc) (async)
r3 = open(&(0x7f00000015c0)='./file0\x00', 0x800, 0x4ebfac6bbaf7941)
lseek(r3, 0xfffffffffffffff7, 0x1)
setsockopt(r2, 0x401, 0x1, &(0x7f0000000100)="53222d4b2ad65513a28556cf5453c8e6431e2886130154eb4584ae9817760dbb818124855bf81ee394abc15ad4d5611298bfb6a453ef76912efee209b8670ebcff2f686fe17e4da3326c96d9bd27cafe402c40257cdc850f5f979c5e27c844a53a35043dc0411bc01b15e92b2722afd59b658d5967c4f455424e5c4146ec11416425744fa9085a48cbff903f46230339f08feed619d985d7815c814065fc254d040b7d39b440bdea7adb50e49f5327786e4e39f4f2", 0xb5) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9)
readv(r4, 0x0, 0x0) (async)
r5 = openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0xfffffffffffffffc, 0xffffffffffffffff, 0x100200004, 0x6, 0x7, 0xdf60, 0x3, 0xfffffffffffffffe, 0x20002f00, 0x93, 0x100000003, 0xfffffffffffffffe, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x3, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x9, 0x40000000, 0x0, 0x0, 0x11000, 0xffbfffff00000000], [0x104, 0x1fffffffffc, 0x7ffffffffffffffc, 0x100000002, 0x52adeb15, 0x7], [{0x4, 0x0, 0x4, 0x7}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x20, 0x2, 0x0, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x7, 0x6}, {0xfffe, 0x45, 0x6d5, 0x6}}})
ioctl$WSKBDIO_GETENCODINGS(r5, 0xc0105715, &(0x7f0000000140))
preadv(r4, &(0x7f00000003c0)=[{0x0}], 0x1, 0x1000) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0xd1d8adf9783f0fcf)
ioctl$PCIOCWRITE(r4, 0xc0107003, &(0x7f0000000140)={{0x63, 0x0, 0x4b}, 0x401, 0x7ab9, 0x7})
ioctl$VNDIOCCLR(r4, 0x80384601, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000080)='./file0\x00', 0x8}) (async)
r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(r6, 0xc1045763, &(0x7f0000000280)={0xfffffffb, [{0x3, 0x4}, {0x2, 0x3ff}, {0x1, 0x1}, {0x2, 0x1ff}, {0x3, 0xdd1c}, {0x2, 0x80b}, {0x2, 0x806}, {0x2, 0x9}, {0x2, 0xa30d}, {0x3, 0x4666}, {0x2, 0x43b}, {0x3, 0xffffffff}, {0x1}, {0x3, 0xd0fc}, {0x3, 0xfc9f}, {0x1, 0x8000}, {0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x2, 0x7fffffff}, {0x2, 0x61c1d777}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0xfffffff7}, {0x3, 0x1}, {0x1, 0xfff}, {0x2, 0x2}, {0x1, 0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x1cc}]}) (async)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0x4)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x200}) (async)
r7 = syz_open_pts()
close(r7) (async)
r8 = syz_open_pts()
ioctl$TIOCSETD(r8, 0x8004741b, &(0x7f0000000080)=0x9)

2.886751061s ago: executing program 4 (id=7027):
setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62})
r0 = syz_open_pts()
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x7c, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb405000000e9ff009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x8)
ioctl$TIOCSETA(r1, 0xc4504445, &(0x7f0000000740)={0x5, 0xffff, 0x2, 0xffff, "0400000000800000ebb178d952d6d31962fff0d1", 0xfffffffe, 0x2})
close(r0)
syz_open_pts()
ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040))

2.769995063s ago: executing program 4 (id=7029):
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x0, "fc686b340da1e4795af94547bd1305d65c21963c", 0x0, 0x2})
sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = msgget$private(0x0, 0x80)
msgrcv(r0, 0x0, 0x0, 0x1, 0x1000)
setuid(0xffffffffffffffff)
r1 = socket(0x800000018, 0x1, 0x7)
msgctl$IPC_RMID(r0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x6, &(0x7f0000000140)=[{0x0, 0x3, 0x0, 0x4}, {0x8, 0x2}, {0x6, 0x2, 0x4, 0x4}, {0x5, 0x1, 0x0, 0xb}, {0x5646, 0xfc, 0x4, 0x8}, {0xe, 0x5, 0xb6, 0x1000}]})
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="b7e5c9a0e4633e0a45ba6fc2a9619952c802dee7807fc155ccfe3b6aff94d061", &(0x7f0000000000)=0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r3, &(0x7f0000000000)="ed", 0x1)
recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0)
shutdown(r4, 0x0)
r5 = socket$inet(0x2, 0x4002, 0x0)
r6 = syz_open_pts()
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000002c0)={<r7=>0x0}, &(0x7f0000000300)=0xc)
fcntl$lock(r6, 0xe4085d14b08dc2d, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x1000300000000, r7})
fcntl$lock(r6, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x63, 0x100000001})
shutdown(r4, 0x0)
dup2(r5, r4)
close(r3)
r8 = syz_open_pts()
ioctl$TIOCSTAT(r8, 0x20007465, 0x0)
ioctl$TIOCSETD(r8, 0x8004741b, &(0x7f00000000c0)=0x7)
readv(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

2.256674378s ago: executing program 5 (id=7052):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async)
ioctl$BIOCGETIF(0xffffffffffffffff, 0x4020426b, 0xfffffffffffffffe) (async)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000001100)="46f9c8b51a5e41cefa2f3d1cd616c2fa62905e64aacbebc4849d309c13915499150ddde50bcba97b499a6753db2201fe56d92256660512c6dec1ea1eae87fca0b9a2e6623318e8aba3dc2862860b6968643858046668003578a6d7e93865860a744c09dcae8a7b5991e81759f32ffa63f7d02f5058337d68c34c98c19123f2eeefc9cc91228a44980f79ccd8d9fb3235d295b5604a5ffb444f66e105cd3c9310c0da41b7ef2a0742a5617f9c7b09eb81eb5cacca52beb6df1e1096dba18fa02f4b839fa4", 0xc4}], 0x1) (async)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x4) (async)
execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
chroot(&(0x7f0000000100)='./file0\x00')
syz_open_pts()
r2 = syz_open_pts()
recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/120, 0x78, 0x801, &(0x7f0000000340)=@in6={0x18, 0x0, 0x9, 0x4}, 0xc) (async, rerun: 64)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x7) (rerun: 64)
getppid()
setrlimit(0x8, &(0x7f0000000180)={0xb, 0x54}) (async, rerun: 32)
r3 = syz_open_pts() (async, rerun: 32)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0)={<r4=>0x0, 0x0, <r5=>0x0}, 0xc)
syz_open_pts() (async)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, <r6=>0x0}, 0xc)
setgroups(0x9, &(0x7f0000000380)=[0x0, 0x0, r6, r5, 0x0, r5, r6, 0x0, 0x0]) (async)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x0}, 0xc)
close(r3)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x5d, 0x0, 0x2800, 0x0, 0x0, 0x6}, 0x400) (async)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async)
clock_getres(0x0, &(0x7f00000000c0)) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)
syz_open_pts() (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (rerun: 32)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000d24, r4) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})

2.256072733s ago: executing program 5 (id=7054):
r0 = kqueue()
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x205b9d)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
sysctl$vfs_nfs(&(0x7f00000002c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000300)="cce47d35", &(0x7f0000000380)=0x4, &(0x7f00000003c0), 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000300)=[{{r1}, 0xfffffffffffffffe, 0x11}], 0x7, 0x0, 0x0, 0x0) (async)
kevent(r2, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0) (async)
kevent(r0, &(0x7f0000000140), 0xe4a, 0x0, 0xa9fa, 0x0)

2.25467592s ago: executing program 1 (id=7056):
r0 = getpid()
setpgid(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r0})
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r4 = getppid()
select(0x0, 0x0, 0x0, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0x9, 0x1}, {0x84, 0x11, 0x5, 0x4}, {0x9e, 0x18, 0xff, 0x6}]})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1841, &(0x7f0000000000)={0xd, 0x3})
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x54)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[])
setpgid(0x0, r4)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)

1.545877141s ago: executing program 6 (id=7067):
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x18, 0x1, 0x0, 0x1ff}, 0xc)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x0, 0x0}, 0x8)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000180)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44162df3867d25aff254e68dbf44ff53559bdaccfdf6b9e3957261167908bdf9ab63a1900bb07c4a19fe9c74c43e44665d8aa04db2150d2379c95abab88ba171048ff14200a5133cab96cb52dc062c67abb716c06191ca3a1528fd52a92bd16fe9e644b5465e76e17a9df0821b2bf250fa4298ed528be8a422cbea36aceaa0bce82558eadcb5904a61b694ccd0d6fc6ddafdd6224fb0c7a8ffd13019f8edee2119978b8832e94a404d59383d8b4380a6efbe86282b2a44", &(0x7f0000000040)=0x10011, 0x0, 0x5a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xd}, 0x4, &(0x7f0000000100)="a388bb9e710f123ce5b6c3fc7c6fa254460dd72057901b563e65900154482e0c5d7fd4347a17f9641d38a40aee3b7d738ba720f9c8ba1f62a0de73731884", &(0x7f0000000140)=0x3e, &(0x7f0000000280)="fb4dfba676dffba5b7dc62a989046c8c65cdfb121595f4724e0bb522458a3798619038fdca3bc7bb4dbc71fcfa05522662babaea14fea0e074fc1b97191ed7b03d4be0934af46bea0ad56279505950383ef24902e768f3e2310aaaa95982795d362cdff355452ec0", 0x68)

1.54524119s ago: executing program 6 (id=7068):
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) (async)
r0 = syz_open_pts()
close(r0) (async, rerun: 32)
ioctl$TIOCCDTR(r0, 0x20007478) (rerun: 32)
syz_open_pts()
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x26, 0xfffffffe}], 0x1}) (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x9, 0x8, 0x3, 0x0, "c233609d6c4cdc0c958ef2c8c425140f6762ea17", 0x0, 0xffffff24}) (async, rerun: 32)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x800007ff, 0x67, 0x2010001, 0x200499, "04000000e6f13d1554eb0d6600ff0700", 0x2, 0xfffffbbf}) (rerun: 32)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000580)="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", 0x169}], 0x1)

1.394897781s ago: executing program 6 (id=7073):
msgctl$IPC_SET(0x0, 0x1, 0x0) (async, rerun: 32)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async, rerun: 32)
select(0x40, &(0x7f0000000040)={0x40007, 0xe, 0x5, 0x8000000000000003, 0x200, 0x205, 0x5afc, 0x2a}, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x80, 0xc3)
r1 = socket(0x2, 0x3, 0x1)
setsockopt$sock_int(r1, 0xffff, 0x1023, 0x0, 0x0) (async)
mknod(0x0, 0x8000, 0x3) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x10, 0xfd, 0x6}, {0x3, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[]) (async)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) (async, rerun: 32)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x51) (rerun: 32)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) (async)
setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000040)="8858cd06", 0x4)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r5 = socket(0x2, 0x2, 0x0)
bind(r5, &(0x7f0000000000), 0x10)
ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000080)=0x82) (async)
setsockopt(r4, 0x10, 0x8, &(0x7f00000000c0)="980238452149197771416b3794858dff649b042697dd56f94697ebff0926a9", 0x1f) (async)
r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r6, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})

1.394303792s ago: executing program 6 (id=7075):
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000000)) (async)
r1 = socket(0x18, 0x3, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async, rerun: 64)
close(r1) (async, rerun: 64)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r2 = socket(0x2, 0x1, 0x0)
close(r2) (async, rerun: 32)
openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x21, 0x0) (async, rerun: 32)
open(&(0x7f0000000040)='./file0\x00', 0x78e, 0x20)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
socket$unix(0x1, 0x5, 0x0)
syz_extract_tcp_res(&(0x7f0000000080), 0x4, 0x40)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) (async, rerun: 64)
sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
getitimer(0x0, 0x0) (async)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6000ffffff)
write(r2, &(0x7f0000001680)="04bd", 0x2)

1.393436042s ago: executing program 5 (id=7076):
syz_extract_tcp_res(&(0x7f0000000000), 0x5, 0x9)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0)
r2 = fcntl$dupfd(r0, 0xa, r1)
mknod(&(0x7f0000000100)='./file0\x00', 0xc000, 0x66)
chroot(&(0x7f0000000140)='./file0\x00')
pwrite(r1, &(0x7f0000000180)="1cafc95eb4536328da30063064d6cb84913d17fcff900f433c9abf86b32538df0863e1e380846e780034d005a70b6670ad7eab1ac3049e94c4dbadf44d1a2bda2cac62ce3b8450fb12b21f8cb9af8ff8a2eaba0ff1770d0dc9c39e5b51564012143abbd5d4c94dc4f73ddf", 0x6b, 0x6)
syz_extract_tcp_res(&(0x7f0000000200), 0x7ff, 0x200)
syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0)
connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x1}, 0x8)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fchmod(r3, 0x14)
ioctl$KDSETLED(r3, 0x20004b42, &(0x7f0000000300)=0x2)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000340))
writev(r3, &(0x7f0000000480)=[{&(0x7f0000000380)="3e9402f83c7e4d627e421d07e93201d56b99a15d405ee9a22ac82e421e0ed66f88c6849332deab020425fc8800644e90", 0x30}, {&(0x7f00000003c0)="60ad5db364a7bec0e94b0c10ea9bfc9860251b1778d1755398299ac859a62d76ffc34eefeb8ccff01971339961392753e103499a99e8891684bd36c4a1eb29787b1ae4000dc6dd3d9b49fcdc4486d1ea9b74e5048ea7a4435d189d18b01d49f62f6cc35d445690e77ed186f634fdff2a2d34379b8cb6e968cfc7917d0ea7077ea4270a7db299c5493a0847a0927734a5fde4906d3d3939", 0x97}], 0x2)
socket(0x18, 0x2, 0xa0)
read(r0, &(0x7f00000004c0)=""/4096, 0x1000)
fchdir(r1)
r4 = open(&(0x7f00000014c0)='./file0\x00', 0x10100, 0x10)
execve(&(0x7f0000001500)='\x00', &(0x7f0000001640)=[&(0x7f0000001540)=',\x02@]\x01%%/:\xca-\x00', &(0x7f0000001580)=',\x00', &(0x7f00000015c0)='/dev/rvnd0c\x00', &(0x7f0000001600)='(*\\\x00'], &(0x7f00000016c0)=[&(0x7f0000001680)='/dev/ttyCcfg\x00'])
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000001700)={0x0, <r5=>0x0}, &(0x7f0000001740)=0xc)
r6 = getgid()
fchown(r4, r5, r6)
r7 = accept$inet6(r2, 0x0, &(0x7f0000001780))
setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x66, &(0x7f00000017c0)={0xc, 0x1, 0x3, 0xca5e, 0x7}, 0xc)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x4812, r7, 0x7)
chflagsat(r4, &(0x7f0000001800)='./file0\x00', 0x1, 0x2)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000001880)={0x2, 0x40})

1.273237909s ago: executing program 1 (id=7078):
mkdir(&(0x7f0000000000)='./file0\x00', 0x41)
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')
unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00')
sysctl$kern(&(0x7f00000017c0)={0x1, 0x12}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2, 0x100)

1.27267158s ago: executing program 1 (id=7080):
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0x0, 0x0, 0xfffffffffffffffe, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x1], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10], [0x6], [0x4, 0x0, 0x0, 0x165, 0x0, 0xa], [{0x0, 0x10, 0x8, 0x8000000000000}, {0x0, 0x0, 0xfffffff9}, {0x1000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000, 0xffff}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x0, 0x9, 0x0, 0x1}, {}, {0x0, 0x28000000, 0x0, 0x1}], {0x5, 0xfffffffd, 0x3}, {0x0, 0x5, 0x9}}})
r0 = kqueue()
kevent(r0, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x25, 0xfe, 0x7}, {0x48, 0x53, 0x9, 0x37}, {0x9e, 0x19, 0x0, 0x95c}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000580)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000580)={0x3, &(0x7f0000000000)=[{0x87, 0x1, 0x0, 0x1}, {0x5, 0xf9, 0x3}, {0x6, 0x80, 0x6, 0x8}]})
sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[])
kevent(r0, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0x0, 0x0, 0xfffffffffffffffe, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x1], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10], [0x6], [0x4, 0x0, 0x0, 0x165, 0x0, 0xa], [{0x0, 0x10, 0x8, 0x8000000000000}, {0x0, 0x0, 0xfffffff9}, {0x1000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000, 0xffff}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x0, 0x9, 0x0, 0x1}, {}, {0x0, 0x28000000, 0x0, 0x1}], {0x5, 0xfffffffd, 0x3}, {0x0, 0x5, 0x9}}}) (async)
kqueue() (async)
kevent(r0, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x25, 0xfe, 0x7}, {0x48, 0x53, 0x9, 0x37}, {0x9e, 0x19, 0x0, 0x95c}]}) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000580)={0x3, &(0x7f0000000000)=[{0x87, 0x1, 0x0, 0x1}, {0x5, 0xf9, 0x3}, {0x6, 0x80, 0x6, 0x8}]}) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[]) (async)
kevent(r0, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (async)

1.182895844s ago: executing program 1 (id=7083):
socket(0x18, 0x8000, 0xbf)
writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000007c0)="7f454c35c5c41a", 0x7}], 0x1)
execve(0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9e, 0x411}, 0x4, 0x800100000001, 0x0, 0x0, 0x0, 0x2, 0x40000000001, 0x4})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000100))
r1 = socket(0x18, 0x1, 0x0)
close(r1)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

1.181395318s ago: executing program 1 (id=7085):
socket(0x2, 0x3, 0x0)
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x6, 0x1, 0x4, 0xffffd6c3, 'b\x00\x00\x00\x00\x00\x00\x00\x00!\x00', 0x2000005, 0x6})
select(0x40, &(0x7f0000000080)={0xc2, 0xe1, 0x2, 0x2, 0x9, 0xfeffffeffffffffe, 0x8}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=""/251, 0xfb}], 0x1, 0x0}, 0x42)
writev(r2, &(0x7f0000000400)=[{&(0x7f00000005c0)="6472357799c6470a45ea19c5a1de", 0xe}], 0x1)
write(r2, &(0x7f0000000040)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74b65d267fefb275700f04cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737abaed6fc41250440030cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8b2da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56c0c51ac6983a1c1820f7b3ae7e9d9e93525f7dcf8e322b9dbe76baa19915307b384bf3afecbab8a53cf1c3162610d96adc5a602165529e0406a344ac30584f7663d0b22103", 0xed)
readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/128, 0x80}], 0x8)
syz_open_pts()
socket(0x2, 0x3, 0x0) (async)
syz_open_pts() (async)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x6, 0x1, 0x4, 0xffffd6c3, 'b\x00\x00\x00\x00\x00\x00\x00\x00!\x00', 0x2000005, 0x6}) (async)
select(0x40, &(0x7f0000000080)={0xc2, 0xe1, 0x2, 0x2, 0x9, 0xfeffffeffffffffe, 0x8}, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=""/251, 0xfb}], 0x1, 0x0}, 0x42) (async)
writev(r2, &(0x7f0000000400)=[{&(0x7f00000005c0)="6472357799c6470a45ea19c5a1de", 0xe}], 0x1) (async)
write(r2, &(0x7f0000000040)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74b65d267fefb275700f04cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737abaed6fc41250440030cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8b2da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56c0c51ac6983a1c1820f7b3ae7e9d9e93525f7dcf8e322b9dbe76baa19915307b384bf3afecbab8a53cf1c3162610d96adc5a602165529e0406a344ac30584f7663d0b22103", 0xed) (async)
readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/128, 0x80}], 0x8) (async)
syz_open_pts() (async)

1.055945029s ago: executing program 1 (id=7090):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0xe, 0x8}, {0x6, 0x40, 0x5, 0x5000000}]})
socket(0x800000018, 0x3, 0x0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
r3 = syz_open_pts()
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000140)=0x9)
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000380)=0x3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0)
pipe2(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
writev(r4, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1)
close(r5)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

989.897079ms ago: executing program 7 (id=7094):
madvise(&(0x7f000003c000/0x2000)=nil, 0x2000, 0x5)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0)

989.495498ms ago: executing program 7 (id=7095):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$TIOCFLUSH(r0, 0xc0107004, &(0x7f0000000080)=0x7f)
socket(0x2, 0x1, 0x0) (async)
r1 = socket(0x2, 0x1, 0x0)
setsockopt(r1, 0x0, 0x6, 0x0, 0x0)

907.110924ms ago: executing program 7 (id=7096):
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x12, 0x6, 0x3}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x5d)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
socket(0x38, 0x4, 0x5)
r1 = msgget(0x3, 0x300)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x5, r2, 0x0, 0x0, r3, 0x7f, 0x8}, 0x6, 0x2a2, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x100000001, 0x40})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)

894.085288ms ago: executing program 7 (id=7097):
r0 = socket(0x18, 0x3, 0x0)
close(r0)
r1 = socket(0x18, 0x3, 0x0)
setsockopt(r1, 0x1000000029, 0x1a, &(0x7f0000000080)='\"\x00\x00\x00', 0x4)
r2 = getegid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, r2, 0x51, 0x200}, 0xc, 0x8001, 0x2})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f050000002010000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118eab0000000cc00fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4abd1182d000000002002", 0x8a, 0x0, 0x0, 0x0)
r3 = socket(0x11, 0x3, 0x0)
getsockname$unix(r3, &(0x7f0000000180)=@file={0x0, ""/28}, &(0x7f00000001c0)=0x1e)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="6059147f1e3c8b422d77ae8d64d7bae62b397f227c49fb33af52de225e074d8081cca52b", 0x24}], 0x1, 0x0}, 0x6)

893.46116ms ago: executing program 7 (id=7099):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100)
ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x258b, 0xc4, 0x5, 0x0, 0x7ff, 0xffffffff, 0x1, 0x1, 0x8db4673757fbf4d3, 0x6, 0x101}) (async)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
setrlimit(0x8, &(0x7f0000000980))
pipe(0x0)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f0000000000)={0x6}, 0x5, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
close(r1)

892.761182ms ago: executing program 0 (id=7100):
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000037001800000000000000010000010000000000000000000000080008002b1a0000000000042c00000000003a002b000007fffffffe06004e"]) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
setuid(0xffffffffffffffff)
r0 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) (async)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}})
kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x8c, 0xfffff, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x8000000000000002, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffff9, 0x88, 0x1, 0xffffffff, 0x3}, {{}, 0xfffffffffffffffa, 0x35, 0x80, 0x9, 0xf4}, {{}, 0xffffffffffffffff, 0x6, 0x20, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0xffffffff}, {{}, 0xffffffffffffffff, 0x28, 0x2, 0x1f70, 0x80000000000005}], 0xb19, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) (async)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) (async)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) (async)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) (async)
open(&(0x7f0000000080)='./file0\x00', 0x8111, 0x40)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async)
close(r2)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r3 = socket(0x2, 0x3, 0x1)
connect$unix(r3, &(0x7f0000000000), 0x10)
write(r3, &(0x7f0000000180)="39f29fff56576a8d", 0x8)

812.178227ms ago: executing program 0 (id=7101):
mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xfffffffd)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
setreuid(0xee00, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x8, 0x100)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000140)={0x0, 0x567, 0x0})
setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x6, 0x1, 0x35)
ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100))
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248d, 0x80, 0xffff, 0x1, 0x8021, 0x2, 0x4000001, 0x2, 0x1, 0x1, 0xf1d})
ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000200)=0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f00000002c0)={<r5=>0x0}, &(0x7f0000000380)=0xc)
setpgid(r5, r5)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080)=@file={0x1}, 0x2, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5)
socket(0x18, 0x1, 0x0)

807.996234ms ago: executing program 0 (id=7102):
r0 = socket$unix(0x1, 0x5, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000080)={'./file0\x00', 0x7, 0x9c, 0x2, 0x0, 0x3, 0x5, 0x6, 0x2, 0x0, 0x8, 0x1})
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}})
setuid(0xffffffffffffffff)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"])
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000380)={0x1, 0x1, 0x34, 0x27ff, 0x4}, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x2, 0x2, 0x0)
bind(r4, &(0x7f0000000000), 0x10)
r5 = kqueue()
kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)

752.567252ms ago: executing program 0 (id=7104):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r2, 0x0, 0x9, 0x0, 0x0)
ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x5266, 0x100000003})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)

751.988026ms ago: executing program 0 (id=7106):
r0 = socket(0x18, 0x3, 0x7)
close(r0)
r1 = socket(0x800000018, 0x2, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8f3, 0x0, 0x0, 0x0, 0x0, 0x22, 0x4}, 0x0, 0x1008, 0x0, 0x0, 0x5, 0x5e, 0x40000000000, 0xe63})
setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4)
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f0000000200)})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r2 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x10, 0x2, 0xa2)
connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2b, &(0x7f0000000140)="6744d6e1", 0x4)

751.573851ms ago: executing program 0 (id=7107):
mprotect(&(0x7f00007fc000/0x4000)=nil, 0x4000, 0x4) (async)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async, rerun: 32)
pipe2(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0) (rerun: 32)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) (async, rerun: 64)
write(r2, &(0x7f0000000080)="c30516845e", 0xff55) (async, rerun: 64)
close(r3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000040f70004000086dd6000000000183a01fe7600000000000000000000000000bbff02000000000000010000000000018284"])
connect$unix(0xffffffffffffff9c, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) (async, rerun: 64)
setuid(0xee01) (async, rerun: 64)
r6 = msgget$private(0x0, 0xb)
msgctl$IPC_STAT(r6, 0x2, 0x0) (async)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r7, &(0x7f0000000340), 0xd4e688a67930cd) (async)
close(r8)
socket(0x2, 0x2, 0x1) (async)
write(r7, 0x0, 0x0)
socket(0x1, 0x6, 0x12)

531.576338ms ago: executing program 7 (id=7109):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket(0x18, 0x3, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x84000000, 0xffff63de, 0x5, 0x2, 0x8, 0x1, 0x44, 0x10, [{0x5, 0x9, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0xf85, 0x40e2, 0xf, 0x100}, {0x3, 0x2000007, 0x5, 0x93}, {0x788c, 0xffff, 0x8, 0x5}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x2006, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x5, 0x4, 0x400009, 0xa1}, {0x3, 0x1ff, 0x4, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) (async)
r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000180)="4d02cd076b79b855a6007a16e4f2df6e8ab78f3c8f66ccf1e6fc6b2a583ef6e1e0dcc600c55b03a2f4f021dd87b4521ce3697aebfb21c489e6feef116202755134689ab39f67366ab3d2014f9b23eeb2428908cd7af95680df545f60612d59653480cf74490fbad770", 0x69}, {&(0x7f0000000480)='.', 0x1}], 0x2) (async)
setuid(0xee01)
r5 = getppid()
ktrace(0x0, 0x5, 0x40000424, r5)
execve(0x0, 0x0, 0x0) (async)
fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x200000001}) (async)
getsockname$unix(r2, &(0x7f0000000400)=@file={0x0, ""/4095}, &(0x7f0000000000)=0x1001)
r6 = kqueue()
kevent(r6, &(0x7f0000000240)=[{{}, 0xfffffffffffffff9, 0x3, 0x12, 0xffffffffffffff81, 0x47}], 0x8, 0x0, 0x1, 0x0) (async)
syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@generic={0x1e}}}}}) (async)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1, 0x0}, 0x1000) (async)
sendmmsg(r1, &(0x7f0000000040)={0x0, 0x7}, 0x10, 0x60e)

530.292292ms ago: executing program 6 (id=7110):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x4})
setsockopt(0xffffffffffffffff, 0x29, 0x6c, &(0x7f0000000040), 0x4)
mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x200007, 0x7, 0x101, 0xb, 0x8, 0x10001, 0x10, [{0xc, 0x7, 0x4, 0x35}, {0x7, 0xfffffffc, 0x10000008, 0xfffffff8}, {0x9, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x8}, {0x401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x101}, {0xa, 0x7ff, 0x14, 0x8}, {0x5, 0x81, 0x1, 0x9}, {0xfffffffe, 0x7, 0xc8, 0x88}, {0x3, 0x10001, 0x9, 0xaeb}, {0x7ff, 0x9, 0x8, 0x4}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x2, 0x6}, {0x4, 0x80000000, 0x6}, {0x0, 0x1, 0x2, 0xfe}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc)
setsockopt(0xffffffffffffffff, 0x1000000000029, 0x3d, &(0x7f0000000040)="00000080", 0x4)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x3, 0x6c0d}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75)
sysctl$hw(&(0x7f0000000240)={0x6, 0x1bdb47003c7a2eea}, 0x2, 0x0, 0x0, &(0x7f0000000000)="ed97bc45be1bcf3243fff34d09649486c262eebe00448a6aff178c5e09a20241d4dd414f0327c7f7323c823028cbe4c8a4a9ab81da041b3db3dccb52001ca07eddd173eff1daa4d3938ef7c80c5568ad040de09a67fcff556d2272cd9089c8f237cc6416e34cfb47c5f71d1a6896ddd50f1d1fe81e17e8180df37c2e72d881fb6eb3ae32b3c347d456dcb047", 0x8c)

529.222064ms ago: executing program 5 (id=7111):
socketpair(0x1, 0x8000, 0x54, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x810, r0, 0x1)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
setsockopt(r1, 0x6, 0x41, 0x0, 0x0)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sysctl$hw(&(0x7f0000000100)={0x6, 0xb}, 0x2, &(0x7f0000000080)="bd0f192e", &(0x7f00000000c0)=0x4, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0)
ioctl$WSKBDIO_GETBELL(r2, 0x40105704, &(0x7f0000000180))

385.488044ms ago: executing program 6 (id=7112):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffb, 0x6, 0x3fffffff, 0x2, 0x0, 0x7f}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000240)=0x8)
unveil(0x0, &(0x7f00000003c0)='c\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = dup(r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x2, 0x0)
bind(r1, &(0x7f00000001c0)=@un=@file={0x0, './file0\x00'}, 0xa)
connect$unix(0xffffffffffffffff, &(0x7f0000000280), 0x2)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x2000000000000, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet(0x2, 0x4000, 0x3)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, 0x0, 0x0)
r4 = socket(0x18, 0x1, 0x0)
r5 = semget$private(0x0, 0x1, 0x80)
r6 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r6, 0xffffffffffffffff)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r7=>0x0}, &(0x7f00000000c0)=0xc)
r8 = socket$inet6(0x18, 0x2, 0x0)
getsockopt$sock_int(r8, 0xffff, 0x1001, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffffb4)
r9 = getuid()
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, <r10=>0x0}, 0xc)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000140)={{0x100, r6, r7, r9, r10, 0x1f, 0x5}, 0x7, 0xfffffffffffffffa})
setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

385.288253ms ago: executing program 5 (id=7113):
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x801) (async)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x21)
ioctl$TIOCDRAIN(r0, 0x2000745e) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async)
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, 0x0)

382.99889ms ago: executing program 5 (id=7115):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TIOCSCTTY(r0, 0x20007461)
ioctl$TIOCEXCL(r0, 0x2000740d)
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x90a, 0x0)
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x20112, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r2, 0x4})
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000180)={&(0x7f0000000140)=[{0x80, 0x9}, {0x23, 0x2}, {0x23, 0xff}, {0x5, 0x800}, {0x85, 0x2}, {0x42, 0x101}], 0x6})
fcntl$getown(r2, 0x5)
execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\':\x00', &(0x7f0000000280)='/dev/pf\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='$)&,^{@#)[}\x00'])
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000380)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, 0xc)
getpgid(r3)
ioctl$KDGKBMODE(r0, 0x40044b06)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000003c0)={0x4, 0x9, 0x3, 0x5a3, "0ec05a35014ccf632090981a7c30c2120d189e8e", 0x7, 0x3})
ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000400)={0x0, 0x7, {0x10001, 0x1ff}})
open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x1)
setsockopt(r0, 0x6, 0x4, &(0x7f0000000480)="80f48b59d535851c70cc4fa9261dca15856795f1267839a6e8ee5333e4fb49c354cd90", 0x23)
r6 = socket$inet(0x2, 0x8000, 0x6)
connect$unix(r0, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x2}, 0x8)
recvfrom$inet(r6, &(0x7f0000000500)=""/154, 0x9a, 0x0, &(0x7f00000005c0)={0x2, 0x1}, 0xc)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000600)={0x81, 0x2858, 0x2, 0x4, "94ecdf5cb178668c975dcc3ce595b25bac1a07bf", 0x4, 0x8})
preadv(r1, &(0x7f0000002800)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/164, 0xa4}, {&(0x7f0000001700)=""/30, 0x1e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/59, 0x3b}, {&(0x7f0000002780)=""/79, 0x4f}], 0x6, 0x3)
nanosleep(&(0x7f0000002880)={0x9, 0x7}, &(0x7f00000028c0))
ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000002900)=0x2)
close(r6)
getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000002940)={<r7=>0x0}, 0xc)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000002980)={{0x0, r4, r5, r4, r5, 0x1}, 0x1, 0x2, r3, r7, 0x2b, 0x0, 0x5})
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000002a00))
getpgrp()
socket(0x0, 0x8002, 0xf7)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000002a40)={0x40, 0x6, 0x0, 0x6, "28c7dab653fe81af0383d420d29641132ae3e1a0", 0x6, 0xedaf})

236.273801ms ago: executing program 2 (id=7119):
r0 = syz_open_pts()
syz_open_pts()
poll(&(0x7f0000000140)=[{r0, 0x80}], 0x1, 0x8001)
syz_open_pts()
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000040)=0x1)
select(0x86, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x100000000000001, 0x1000006, 0xffffffffffffffff, 0x2}, 0x0, &(0x7f0000000240)={0x60, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x9, 0x1ff, 0xffc}, 0x0)

235.913453ms ago: executing program 2 (id=7120):
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x3a366294)
r0 = socket(0x18, 0x1, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x8)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00')
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00')
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00')
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240), &(0x7f00000001c0)=0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
r2 = socket(0x24, 0x2, 0x0)
getsockopt(r2, 0x4, 0x10000002, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0xcc)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r3, 0x0)
r4 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000240), &(0x7f00000001c0)=0xc)
ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0))
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)

235.770976ms ago: executing program 2 (id=7121):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000080)={0x80000001, 0x7fffffff, 0x7, 0x1, 0x3f, 0x3, 0xbdd, 0x10, [{0x9, 0x1ff, 0x7, 0x8}, {0x5, 0x9, 0x8, 0x400}, {0x80000001, 0xffff, 0x8, 0x2}, {0x3, 0xffffffff, 0x3}, {0xfffffffc, 0xfff, 0x3, 0xf}, {0x8000, 0xfffffff8, 0x6, 0x5}, {0x4, 0x5, 0x10001, 0x8}, {0x1, 0x0, 0x6, 0x7}, {0x8d5, 0x7, 0x3, 0x57710724}, {0x18000000, 0x6, 0x9, 0x4}, {0x3ff, 0x2, 0x7, 0x12d989da}, {0x2, 0x4, 0x5f7, 0xb3}, {0x1fe80000, 0x9, 0x1, 0x10001}, {0x0, 0x1, 0xf25f, 0x4}, {0x61, 0x8, 0xd, 0xfffffff8}, {0x2, 0x80, 0xf, 0x401}]})
setsockopt$inet_opts(r0, 0x0, 0x200000000000a, 0x0, 0x0)
clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f})

1.703135ms ago: executing program 2 (id=7122):
syz_emit_ethernet(0x93, 0x0)
syz_extract_tcp_res(&(0x7f0000000080), 0x4ae, 0x2)
mknod(0x0, 0x1ffa, 0x0)
socket(0x1, 0x2, 0x0)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x91, 0x0, 0x6}, {0x3, 0xf, 0xff, 0x8}, {0x6, 0x80, 0xb2}]})

1.393946ms ago: executing program 2 (id=7123):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4aed, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x800}, 0x7, 0xb, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000000})
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SPKRTUNE(r0, 0x20005302, 0xfffffffffffffffe)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x408, 0x0, 0x0) (async)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x408, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket(0x11, 0x5, 0x3) (async)
r1 = socket(0x11, 0x5, 0x3)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=7124):
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x60, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
fsync(r0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8b}, 0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
sendmsg$unix(r1, 0x0, 0x404)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
close(r1)
unveil(0x0, &(0x7f00000000c0)='r\x00')
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0)
sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getitimer(0x0, 0x0)
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, 0x0)

kernel console output (not intermixed with test programs):


OpenBSD/amd64 (ci-openbsd-multicore-8.us-central1-b.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts.
login: pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
uvn_flush: obj=0xfffffd8065ba4080, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
pckbd_enable: command error
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
pckbd_enable: command error
wskbd0: can't attach mux (error=5)
pckbd_enable: command error
malloc(): allocation too large, type = 127, size = 1073510800
�j���|����E1\�:pppx: unable to set addresses for pppx1, error=17
WARNING: thread `nfsio' (30033) exits with status -1
WARNING: thread `nfsio' (502469) exits with status -1
WARNING: thread `nfsio' (171095) exits with status -1
WARNING: thread `nfsio' (199802) exits with status -1
WARNING: thread `nfsio' (323441) exits with status -1
WARNING: thread `nfsio' (170145) exits with status -1
WARNING: thread `nfsio' (236741) exits with status -1
WARNING: thread `nfsio' (519508) exits with status -1
WARNING: thread `nfsio' (8961) exits with status -1
WARNING: thread `nfsio' (437012) exits with status -1
WARNING: thread `nfsio' (182647) exits with status -1
WARNING: thread `nfsio' (206080) exits with status -1
WARNING: thread `nfsio' (350421) exits with status -1
WARNING: thread `nfsio' (297487) exits with status -1
WARNING: thread `nfsio' (417490) exits with status -1
WARNING: thread `nfsio' (248523) exits with status -1
WARNING: thread `nfsio' (231454) exits with status -1
WARNING: thread `nfsio' (442343) exits with status -1
WARNING: thread `nfsio' (397675) exits with status -1
WARNING: thread `nfsio' (61483) exits with status -1
denied attempt to set clock forward to 52172937113390
malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock back 4263431321 seconds
denied attempt to set clock back 4263431322 seconds
malloc(): allocation too large, type = 29, size = 16796513700
pppx: unable to set addresses for pppx1, error=17
uvn_flush: obj=0xfffffd806cb56878, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock back 4263431332 seconds
denied attempt to set clock back 2115947687 seconds
denied attempt to set clock back 2115947687 seconds
malloc(): allocation too large, type = 29, size = 16796513700
./file0./bus./file0./file0 ��uvn_flush: obj=0xfffffd8068968218, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock back 4246129839 seconds
malloc(): allocation too large, type = 29, size = 16796513700
WARNING: thread `nfsio' (302179) exits with status -1
WARNING: thread `nfsio' (230768) exits with status -1
WARNING: thread `nfsio' (267133) exits with status -1
WARNING: thread `nfsio' (520066) exits with status -1
WARNING: thread `nfsio' (517267) exits with status -1
WARNING: thread `nfsio' (351806) exits with status -1
WARNING: thread `nfsio' (478284) exits with status -1
WARNING: thread `nfsio' (178847) exits with status -1
malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock forward to 965624464127
denied attempt to set clock back -9223372032591346485 seconds
denied attempt to set clock back 78 seconds
malloc(): allocation too large, type = 29, size = 16796513700

OpenBSD/amd64 (Amnesiac) (tty00)

login: malloc(): allocation too large, type = 29, size = 16796513700
malloc(): allocation too large, type = 29, size = 16796513700
�jload: 7.61  cmd: getty 70480 [ttyin] 0.00u 0.01s 0% 330k
malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock forward to 52172937113390
�jmalloc(): allocation too large, type = 29, size = 16796513700
  ���Cʋ�����k~B)�S���		�ҿ��u�kZ�W}K�γ]��0�M�፤��B��\Sn�g�v��
�j���|����E1\�:denied attempt to set clock back 2115947765 seconds
malloc(): allocation too large, type = 6, size = 287762939904
denied attempt to set clock back -9223372032591346442 seconds
denied attempt to set clock back 3692148993 seconds
malloc(): allocation too large, type = 29, size = 16796513700

	

	
	

OpenBSD/amd64 (Amnesiac) (tty00)

login: �j���|����E1\�:pppx: unable to set addresses for pppx1, error=17
malloc(): allocation too large, type = 29, size = 16796513700
denied attempt to set clock back 143 seconds


	malloc(): allocation too large, type = 29, size = 16796513700
�j
OpenBSD/amd64 (Amnesiac) (tty00)

login: malloc(): allocation too large, type = 29, size = 16796513700
malloc(): allocation too large, type = 29, size = 16796513700
-!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700
$%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 134217894 3%#/.$3
9*<5,<? -1-!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700
$%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431472 3%#/.$3
$%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 177 3%#/.$3
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
uvn_flush: obj=0xfffffd806d2647f0, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
syncing disks... done
serialport: VM disconnected.