last executing test programs:

3.828292928s ago: executing program 2 (id=3):
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000080)="741ad85d9f945ecdd7e4ffffffff000063b82792b26cff2414a0dee861bd8acd0000158b318100000000c00600d513a0619527c62715f2717d78444f5b1f758ba1086cbaec45eaa62435dfb84cad60daf6779849932654afd18ea1ecc560a1a8b60fb25168df3c2fa3fe5cb65a33bbd2937fd60a86fae0f61b6d196d85d5df9c2b56f6eb45f81bbb30cb227446a42e7db2928030089049dc81a6935221df0f52430f79179b11c5ca12d402", &(0x7f0000000200)=0xfec1, 0x0, 0xd1ef4960be19f686)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') (async)
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00')
setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x62})
r0 = syz_open_pts()
close(r0) (async)
close(r0)
syz_open_pts() (async)
syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000200)={0xfffffff9, 0x0, 0x1, 0x8, "d5fe2679d5ee3cf8a0a91de797376a903e863cc5", 0x1003, 0x7ff})
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2)
readv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/1, 0x1}], 0x1)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000100)={0x10, 0x9, [{&(0x7f00007d1000/0x4000)=nil, &(0x7f0000b65000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00005a9000/0x4000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000297000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000433000/0x3000)=nil}, {&(0x7f0000626000/0x2000)=nil, &(0x7f000093c000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000da9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f000008f000/0xc000)=nil, &(0x7f0000c17000/0x3000)=nil}, {&(0x7f0000b64000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f000062b000/0xf000)=nil, &(0x7f000018b000/0x1000)=nil, 0x2}, {&(0x7f00003f4000/0x4000)=nil, &(0x7f0000af4000/0x13000)=nil, 0x200000000000000}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000601000/0x4000)=nil, 0x8}, {&(0x7f0000601000/0x3000)=nil, &(0x7f0000b08000/0x1000)=nil}, {&(0x7f000064c000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000251000/0x4000)=nil, &(0x7f00006c9000/0x1000)=nil}], './file0\x00', 0x3})
r1 = socket(0x2, 0x2, 0x0)
socket(0x20, 0x1, 0x4) (async)
r2 = socket(0x20, 0x1, 0x4)
setsockopt(r2, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) (async)
setsockopt(r2, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4)
dup2(r2, r1) (async)
dup2(r2, r1)
recvfrom$inet(r1, &(0x7f0000000500)=""/51, 0x33, 0x1040, &(0x7f0000000540)={0x2, 0x1}, 0xc) (async)
recvfrom$inet(r1, &(0x7f0000000500)=""/51, 0x33, 0x1040, &(0x7f0000000540)={0x2, 0x1}, 0xc)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000000300)={0x4, 0x2, 0x0, 0x13}, 0x4, &(0x7f0000000340)="38bba605aa454e7ed3eb4f6d3d99693d416d3f55a07b0994d8d9e30264b988eaee23838286602e0b56b985f82b839290962e747eef647645b7bcfd6fe09ed96947310603a86ef46952ff61ba", &(0x7f00000003c0)=0x4c, &(0x7f0000000400)="14e047968f5790fd5425dbbbcfa77c6a39cfc7d82f050599941683d4a3b175737df886d55e637f0fa1699aa703fb9f03ed0703e00fb0acbfc47c372eb05504ea3aed46ba0248294b94be169f487696ac988cefa646aaf9f6280c150ca3f8ad24e73660310dde085d022d803c92929420d4baa3a520bbb72dd8a3c8d93b7a6b2efe8327d6003ddd67947c8055", 0x8c)
syz_emit_ethernet(0x138, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1, @ANYRES16])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r1, &(0x7f0000000000), 0x10)
r3 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4)
connect$unix(r3, &(0x7f0000000000), 0x10) (async)
connect$unix(r3, &(0x7f0000000000), 0x10)
write(r3, 0x0, 0x0)
sendmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000)
unveil(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f00000000c0)='r\x00')
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})

3.753053626s ago: executing program 3 (id=4):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8)
open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x84)

3.592200744s ago: executing program 3 (id=11):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000100)={0x0, 0x0, {0x100000000000000}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), &(0x7f0000000080)=0x10)

3.591830866s ago: executing program 3 (id=12):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x800, 0x84) (async)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x800, 0x84)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0xd4e688a67930cd)
read(r3, 0x0, 0x0)
r4 = shmget$private(0x0, 0x1000, 0x308, &(0x7f0000389000/0x1000)=nil)
openat$klog(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
r5 = getuid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000580), &(0x7f0000000140)=0xc) (async)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, <r8=>0x0}, 0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r7, 0x0, r8}})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={<r9=>0x0}, &(0x7f0000000080)=0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) (async)
getsockopt$sock_cred(r10, 0xffff, 0x1022, &(0x7f00000000c0)={<r11=>0x0}, &(0x7f0000000240)=0xc)
getpgid(r11)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0xfffffffd, r5, 0xffffffffffffffff, 0x0, r7, 0x3, 0x81}, 0x1, 0x6, r9, r11, 0x8, 0x621, 0x8}) (async)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0xfffffffd, r5, 0xffffffffffffffff, 0x0, r7, 0x3, 0x81}, 0x1, 0x6, r9, r11, 0x8, 0x621, 0x8})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

3.591481223s ago: executing program 0 (id=1):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x40)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x9)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async)
r1 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000100))
connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x3}, 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x8b) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) (async)
r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async)
r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) (async)
r6 = open$dir(&(0x7f00000007c0)='./file0/file0\x00', 0x80, 0x49) (async)
getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000800)={<r7=>0x0, <r8=>0x0}, 0xc) (async)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000840)={0x0, <r9=>0x0}, &(0x7f0000000880)=0xc) (async)
r10 = getgid() (async)
r11 = fcntl$getown(r1, 0x5) (async)
r12 = geteuid()
r13 = getgid()
sendmsg$unix(r2, &(0x7f00000009c0)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000680)=[{&(0x7f0000000200)="864fb06008e1d8d5710b84f6c6a0f394472683a652697ad8e242cf0e25b5b3946220d8dfd4e7fca6e3717956f770ee5f97dde1a932e187c85e6224f53da62884b4a2c83b57e36331fe048239331f8b912950bab3ab5dc8427d4810e2be710767e3f2c5df3972c6f921ec396bab106a7ca66a291f803389494c2984ccd88d147fcf8a59089a0b7256d2384eccb58134aff99cb2e2b5e0ced0cc79bf73648c070223b2ddb89d57b0b78c39bb1835887c2019e6c0abcced084668b2e3035e9a966a9ffc6c", 0xc3}, {&(0x7f0000000300)="a24a7fb0ebba33e8fe72f2ba2e4c74a91ee6757e08da4791db7a9e5b8d32ad0169b6d60c3adfdfa0db6144144e40027df4c12571257fb84262aba2989d9a9d48d401bfad21f12c196e24ede41f611b0b16270637c67c98d4c57cc72a951fd8ae1bdc3d9d8109f33b4c31df6a76b2d455a299f4b3c767d213081c4c2941b32383c0e1fcb9a3a2abe16b0fc3188c21c8ef157f2cd18d9e2ba31cdd1128a34883351a5c036339e486ed5be0e9304d541f94ae84558af73425647e2e818e4d4905c78a5e8639a9541fc656d88f986f75e49c9459a5c91a572e3b55392ef42bf8081d26dda2b54e94e8c112cfedabe4478f9e89595781", 0xf4}, {&(0x7f0000000400)="15ae7b4a5334226604ad24216b2d34fb7101ee5d3b6cef11f70b762defcf3dbf128239311afd688408450f62b62a1155e41f46e9afd2651b0942615ce8fae2730efd4cc600a89828d5e04e95f6d3c84978c3bf66a6ceea9c4e551812e6b8378ca5cc17a17467831b2e464135fe1c57770438660a53eb5f26290469faefd3e0d7b03da443eecd03c38e1f9a0fbdf12e63c5912d4b53a5981cd969bd6f77c3519678a5f15f737994", 0xa7}, {&(0x7f00000004c0)="868ab0c8543f1f37630495cff5b2fd0efc9ed3715e993981bd01c20f213b1b3a92f6cfe1efa514c4150c6337802b8c8fe9c1ab2fe7fb474b0a7a57d3c65948cd925d28024d76bacc7e8ae8a7d655d15fa425b2970c06ef28f5c1b38b1dba5698aa4691ecb0d9129154e57473b555ef4ef94ea63706c20ff0d179b74406fa834ddeaf7cbc84bff4c27cd6e3fdb24853d9128822298f9d5de742f9c6676fbdccc1cf9a1801306af02f173387ac7486301c480179fa3263e0e263bbd379f0de3e99d5c9fda1", 0xc4}, {&(0x7f00000005c0)="18bed2cfc0db2c3915bcc03dd864e8527ed6c2988699608fdfda7534ceb381b21182b9922fd081b74f440b343daa70c67133c5e8ee42e0f1db286a9168ef6a059d92d67ed594a019c8cbbd502d6028049bff8d9ab4a8a4cdda4c9a20dd6599e56b61287775e376deb52f45bd37b303ad30103e4e165b03ec6e8ba2644ddbc966570e2306799cb56ec7fa", 0x8a}], 0x5, &(0x7f00000008c0)=[@rights={0x20, 0xffff, 0x1, [r3, r1, r0, r0]}, @rights={0x38, 0xffff, 0x1, [r1, r0, r0, r1, r1, r4, r0, r0, 0xffffffffffffff9c, r1]}, @rights={0x30, 0xffff, 0x1, [r5, r1, r1, r0, r1, r1, 0xffffffffffffffff, r1]}, @rights={0x38, 0xffff, 0x1, [0xffffffffffffffff, r1, r1, r1, r1, r0, r0, r6, r0, r1]}, @cred={0x20, 0xffff, 0x0, r7, r9, r10}, @cred={0x20, 0xffff, 0x0, r11, r12, r13}], 0x100, 0x408}, 0x3)
fcntl$setown(r6, 0x6, r7) (async)
readlinkat(r6, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/100, 0x64)
setreuid(r9, r8)
getuid() (async)
ioctl$WSDISPLAYIO_ADDSCREEN(r3, 0x80245753, &(0x7f0000000ac0)={0x4, './file0/file0\x00', './file0/file0\x00'})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000b00), &(0x7f0000000b40)=0xc)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000b80)={0x0, <r14=>0x0}, &(0x7f0000000bc0)=0xc)
setreuid(r14, r9)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) (async)
bind(r5, &(0x7f0000000c00)=@in6={0x18, 0x0, 0x0, 0x3ff}, 0xc)
r15 = getuid()
setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000c40)={r11, r15, r13}, 0xc)

3.56500927s ago: executing program 2 (id=15):
setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
setreuid(0xee00, 0x0)
setreuid(0xee00, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x42, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0xfffffffe, 0x9}, {0x1, 0x800, 0x8003}, {0x401, 0x200722, 0xd197, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x10, 0x8}, {0x2, 0x81, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x26, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71718, 0xfffffffa, 0x1, 0x6}, {0xc, 0x6, 0x5, 0x2}, {0x8000, 0x2, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x2e1, 0x0})
socket(0x11, 0x3, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
pipe(&(0x7f0000000640)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0xd4e688a67930cd)
close(r4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)

3.478476666s ago: executing program 0 (id=16):
r0 = socket(0x800000018, 0x3, 0x0)
setuid(0xffffffffffffffff)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x1, 0x0, 0x4}, {0x7, 0x0, 0x9, 0x6}, {0x3, 0x1, 0x0, 0x400004}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37)
r1 = socket(0x18, 0x3, 0x0)
getsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000180), &(0x7f00000002c0)=0x4)
close(r1)
socket(0x18, 0x3, 0x3a)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf08}, 0xc, 0x8001, 0x3})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getrusage(0x0, &(0x7f0000000480))
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x18, 0x2, 0x0)
close(r3)
r4 = socket(0x18, 0x1, 0x0)
setsockopt(r4, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4)
fcntl$lock(r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f00000003c0)=ANY=[])
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0)
sendmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="6059147f1e3c8b422d77ae8d64d7bae62b397f227c49fb33af52de225e074d8081cca52b2d6c2b965ba04419b36dd26d89b7754d49d601486226a159a203bb892d9098407c519f64be788a505e67f369399766f3741d0013ae4361600532a42b79fe162a44a584e62e9f15fa304958542c561a7ef3d640294472be0b16257f31e5837d9326bf80039ede3fa99208019f8bc8e3bb41b5bb3f", 0x93}], 0x1, &(0x7f00000003c0), 0xfffffffffffffffb}, 0x6)
shutdown(r0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
sysctl$vm(&(0x7f0000000000)={0x2, 0xb}, 0x2, 0x0, 0x0, &(0x7f00000010c0), 0x0)
getsockopt(r5, 0x0, 0xa, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x5d, 0x0, 0x2800, 0x0, 0x0, 0x6}, 0x400)
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6036e28200083b0001984b0e23742b40c3fa3d76af5fc1fafe8000000000000000000000000000aa4e214e2000089078aecb3d4093f87f910e81f2470cd4e23394b98d1cf2c16cd899eae8402303274fcc74fd0579d70c35fc01e9dc4eebed4afb24ed35e32c413a1e5f3066a7d69e0d0a13fb2a50bcacb64e2e803e6f1535a46b82587e52c07ee192e9acdfa1c734f1a807727644868470cf411e8b5da688e05d1d1b2dc9b39930f14d"])

1.99149453s ago: executing program 0 (id=30):
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
setuid(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000200)=0xc)
sysctl$kern(&(0x7f0000000000)={0x1, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x13, &(0x7f0000000000), 0x4)
setregid(r1, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000200)={0x7f, 0x4, 0xfffffff8, 0xa, 0x6, 0x8a7, 0x0, 0x10, [{0x2, 0x1, 0x9, 0x8}, {0x4, 0x8, 0xffffffc0, 0x8}, {0x5, 0x3, 0x1, 0xfffffff9}, {0x7, 0x2, 0x8, 0xa}, {0x7fffffff, 0xe3a, 0x0, 0x3}, {0x8001, 0x7ff, 0x9, 0x4}, {0x3, 0x6, 0x1, 0xa3}, {0x80000000, 0xfff, 0x0, 0x7}, {0x101, 0x7, 0x1, 0x5}, {0x1, 0x7fffffff, 0xffffffff, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x3}, {0x0, 0x6, 0xa, 0x4}, {0x62, 0x4, 0x7, 0x8}, {0x6, 0x7fff, 0x8, 0x1}, {0x2, 0x0, 0x3, 0x7}, {0x0, 0x6, 0x2, 0x5}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
setitimer(0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0x6}}, 0x0)
getitimer(0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$hw(&(0x7f0000000040)={0x7, 0x12}, 0x2, &(0x7f0000001240)="02fc3200", &(0x7f0000000000)=0x4, 0x0, 0x0)
r4 = socket(0x2, 0x3, 0x0)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x909a394771d11041, 0x0)
ioctl$TIOCSETA(r5, 0xc028445a, &(0x7f00000007c0)={0x0, 0x1, 0x6c692eb0, 0x65b, "97a2b7581c6cc9795a6b47c1d100", 0xfffffffc})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIONREAD(r4, 0x80606954, &(0x7f0000000100))
setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000000)=0xc02, 0x4)
write(r3, &(0x7f0000000080)="e4b3aef794c1d978ee157da0c8730f5e311c8bfb229351f0ad9b", 0x1a)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

1.971641199s ago: executing program 1 (id=35):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r0, 0xc290560b, &(0x7f0000000040)={0xb, 0x0, 0x200d})
r1 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r1, 0xc028698d, &(0x7f00000001c0))
openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) (async)
ioctl$VMM_IOC_INTR(r0, 0xc290560b, &(0x7f0000000040)={0xb, 0x0, 0x200d}) (async)
socket(0x2, 0x1, 0x0) (async)
ioctl$FIONREAD(r1, 0xc028698d, &(0x7f00000001c0)) (async)

1.840524789s ago: executing program 0 (id=38):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63df, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000005}, {0x3, 0xfffffffe, 0x6, 0xfff}, {0xffffffff, 0x4baa, 0xf, 0x1}, {0x4, 0xe6, 0x651b1e8a, 0x100}, {0x3, 0x9, 0xf15, 0x2}, {0x788c, 0xffff, 0x7, 0x9}, {0x4, 0x2, 0x3}, {0xfff3, 0xd, 0x28000, 0xffffe2e9}, {0x9, 0x700000, 0x6, 0x7ffb}, {0x3, 0xfffffffc, 0x5, 0x8bfd}, {0x0, 0x8, 0x8, 0x6}, {0x3, 0xc7cb, 0x800000, 0xa6a}, {0x401, 0x4, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x6, 0x101, 0x3, 0xd}, {0x8216, 0x2, 0x2, 0x69}]})
openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
r0 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x4000)
shmat(r0, &(0x7f000014c000/0x4000)=nil, 0x3000)
mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x78)
sysctl$vm(&(0x7f0000000000)={0x2, 0x3}, 0x2, &(0x7f0000000040)="43a086f74756c4e025", &(0x7f0000000340)=0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
sysctl$vm(&(0x7f0000000200)={0x2, 0x7}, 0x2, &(0x7f0000000280)="cba7e4e4efb996c7cc8f6108343a83f29eea8484a715965b6ae7b673838bac9186fbe00ad23832bb04b5d404b32f8a0d193eab0b570120f274b7dff450b8271ec0182de8ee303bd0a4ab0eb4b6180b4786aea42ad63f9d571a7c2d0e2167ecfd3f03c8145fa0ea52a3dfc83d5a020fe8332cd316f3b7f04d70b4cdb47a5ff4b29e66d5c138c45efc59b4d8a2e457356d50311621af1bcf4a2bf0925d40dc8d887b0da1206735644a4b", &(0x7f0000000380)=0xa9, &(0x7f00000003c0)="674f90279dab946c7906ed0e280f7ef513abf9b0d87382748c5dcd71164e57eb451a6216f2a03b7e016642557ee7c9fa2591efe3d3db60d9b4e3ed26df9498116b1ddf971f28b8616e0479ee806913bb7287d727ceee34df7b4447826fa3711f4746152838e003d9", 0x68)
mknod(&(0x7f0000000480)='./file0/file1\x00', 0x4, 0x1e5f)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffc, 0x7, 0x4, 0x71008}, {0x7, 0x4, 0x9, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7}, {0x401, 0x400002, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0xb}, {0x6, 0x180a, 0x14, 0xb}, {0x8, 0x82, 0x50, 0x9}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0x5}, {0xfffffffd, 0x2000009, 0xffff, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = socket(0x2, 0x5, 0x3)
setsockopt(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)="c5", 0x1)
setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f00000000c0)=0x8, 0x4)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r3, &(0x7f0000000000), 0x10)
r4 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4)
connect$unix(r4, &(0x7f0000000000), 0x10)
write(r4, 0x0, 0x0)
poll(&(0x7f0000001180)=[{r1, 0x80}], 0x1, 0xfc7)

1.83942799s ago: executing program 1 (id=40):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0)
select(0x40, &(0x7f0000000100)={0x4, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0)
fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003})
select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f00000000c0)={0xfc, 0x10})
close(r0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003})
unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='x\x00')

1.835782222s ago: executing program 6 (id=42):
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb7600000000000200361b12", 0x82, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket(0x18, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="77bd673bb5b8cc0c16ed080500000000000000d7f4601faa903493e339865dce0f225da73c1eede2526d", 0x2a}], 0x1)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0)
r2 = dup(r0)
setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x5265, 0x100000006})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x2, 0x3, 0x0)
r4 = dup(r2)
dup2(r4, r3)
connect$unix(r3, &(0x7f0000000000), 0x10)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9})
writev(r5, &(0x7f00000000c0)=[{&(0x7f00000009c0)="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", 0xf01}], 0x1)
getpeername$unix(r4, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x8)
sendto(r2, &(0x7f0000000080)="e7920273c94c3c52", 0x8, 0x0, 0x0, 0x0)

1.773343874s ago: executing program 5 (id=47):
syz_emit_ethernet(0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a000000080000000000000000000000000000c5c9ddfaa24f77885b8691dffe8000000000000000000000000000aa02009078000000006006c33e00003a00fe8000000000000000000000000000aa0000000000000000ac1400bb0400000000000000"]) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a000000080000000000000000000000000000c5c9ddfaa24f77885b8691dffe8000000000000000000000000000aa02009078000000006006c33e00003a00fe8000000000000000000000000000aa0000000000000000ac1400bb0400000000000000"])
syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="f1d629e49485aaaaaaaaaabb0800455c001c0000000000019078ac1400bbe06cbd3eae00907800b4494beaea4f48b3b26295a1cbed77d36d513f148967245e29c959ebe1370543fa00da18865e30b67fdef5855e971992ae6b5852eb76d4f71631fc5e810b8df5e0649cd23200e6780f07f1484c46440d6a27633308b3238051c44752ec1f766d"])
syz_extract_tcp_res(&(0x7f00000002c0), 0x0, 0x4)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket(0x11, 0x8003, 0x0)
getsockopt(r1, 0x11, 0x1, 0x0, 0x0)
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) (async)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0)
select(0x40, &(0x7f0000001300)={0x0, 0x8, 0x3, 0x8001, 0x5, 0x7, 0x1, 0x61}, &(0x7f0000001340)={0x8, 0x2128, 0x3, 0x2, 0x56f1f392, 0x4dcf5026, 0xffffffffffffff0b, 0xfffffffffffffffa}, 0x0, 0x0) (async)
select(0x40, &(0x7f0000001300)={0x0, 0x8, 0x3, 0x8001, 0x5, 0x7, 0x1, 0x61}, &(0x7f0000001340)={0x8, 0x2128, 0x3, 0x2, 0x56f1f392, 0x4dcf5026, 0xffffffffffffff0b, 0xfffffffffffffffa}, 0x0, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) (async)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4)
sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f0000001240)="7b88c242baa88981", &(0x7f0000000140)=0xffffffffffffff8e, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x1b, 0x1, 0x1, 0x9, 0x3ff, 0xfbfffffffffffff9, 0x0, 0xdf2}, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000003200)={0x4, 0x2, 0x0, 0x21}, 0x4, &(0x7f0000003240), 0x0, 0x0, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000003200)={0x4, 0x2, 0x0, 0x21}, 0x4, &(0x7f0000003240), 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0)
ftruncate(r2, 0x79c8)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001dc0)="2a5f4cd9b73c31d629e8d68e605e5940744ef138960b671d42c56f79fcb70549247e5504e02f85a6099eff9291731e94399a7e966e783d4073ecd5dc8e540f32190bb47050aee3907495ecf7708d1c295a0836f79ba03ea13db12836c2441989726ffbf7fd1da55bfe2caaf081a1ef55599935c0e60cb0866ee48d420b77a6e269bc30b2650349e16792252c6be8bcc6e9ce2b941299ab505e4779fa1960bb7cf924dcbc53c82e76bcd80731a694d12e8a139d8ecef6f5560939054b7842d25cd7396377f39bcfe2a2383feea17b87393cd892b90742631718b1877d8d83d5f66587e3e5b1e129433ead750143a4c51aa46e78e3b1a54a4634eea2846511719b1637b19ea8c96a95332abd69014f53e91a7319a36efb4052387dc6330aa00b5680142650e8dab5eb6b83ff7d0bbf1293338a8d3e8a6dcd7ed4916279eac230dda46e6fcdebe8a4c12d598883d9392da05791e153d905ce1930aebfc5dfc0fc22a88777c9fbc24c0b021189c3503466bf850f59e6649dd0b40d935ba155a9d7e065df6d90a500be9d7e1e77607d495898a8d6c9c48dda88533e75e760dceae91d670f97ebbe68b845c72eb698a9e0389b15cfe768cd4e524dbe939bc2d8363ae3b71a454a0a0378cd1f36565ab9d1b92263688195df65151ee9b8158c7a5280019a38f00ea05142b3cc832ece46e326e36a55d7a30f866ca97da61a3877612f0d9f23c052edf60a430d3a9acbae3d9f14f22f38a1eeac7df37ae17748a960b9e0d265bf6cdec73bd2a7b5f25035d845d936936cbfe6f013f8d7c73eba2bd9876ff6", 0x241}], 0x1)
ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000002d00))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x42)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x14, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xe, 0x0, 0xb}}}}}}}) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x14, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xe, 0x0, 0xb}}}}}}})
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff})

1.773071744s ago: executing program 6 (id=48):
nanosleep(&(0x7f0000000000)={0x20000000008000, 0x20007}, 0x0)
unveil(0x0, &(0x7f00000008c0)='r\x00')
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='W\x00')
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0)
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000040)=0xf)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
setuid(0xffffffffffffffff)
syz_extract_tcp_res(&(0x7f00000001c0), 0x2, 0x6)
ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x5, 0xffff, 0x0, 0x20000023, "0400000000800000ebb178d952d6d31962fff0d1", 0xfffffffe, 0x2})
ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000100))

1.617996776s ago: executing program 7 (id=51):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2810, r0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0)
ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f00000000c0)=0x7fff)
ftruncate(r0, 0x3)

1.616785854s ago: executing program 5 (id=52):
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2207f981aa6a78ef1d35e6abbbdabb26a52ad7f46003", 0x23}], 0x1)
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x8, 0x0)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x545, "225e190400000000000000000edd0000f400", 0x5, 0x400})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x8, 0x0, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
fcntl$setstatus(r2, 0x4, 0x80)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
poll(0x0, 0x0, 0x2)
sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, 0x0, 0x0, &(0x7f0000000d40)="9a8ee636205ab9a6e106ff1ce3b891d59a68639fad1d722d649146952370eaab28dac869eac5450b6cc4dacd0a82f407548dd3da5775bd95d889ee11a23570e5e1d4566ad6799179accfba44739af0e6e418f127eb3855adaee8722ac9c23192d7049f0689e18c06e54d1760ac99dc5b3fe0e488fa1d36b3db68cea6a40117068ed946eb593707d505325c92c438b534a7753211238d04252e22671fd38754f0e6f76d00aa56c8b185c3b9b51499c0415d26028bb90c1db8f69b8b13a5d7", 0xbe)
sysctl$ddb(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)="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", 0x41f)
openat$pf(0xffffffffffffff9c, &(0x7f0000000640), 0x80, 0x0)
ioctl$TIOCSETA(r0, 0xc450443e, &(0x7f0000000680)={0x9, 0x0, 0x1000001, 0x7, "97a2224ff1c14649ebb178922cc9795a6b47c1d1"})
ioctl$FIONREAD(r2, 0x8020699b, &(0x7f0000000100))
getegid()
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c01120", 0xaf, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec50000008000361b4cc702f5c500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea04000000000000000000", 0xb1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b"])
sysctl$kern(&(0x7f0000000100)={0x1, 0x58}, 0x2, &(0x7f0000000180)="73981a4e", &(0x7f0000000240)=0x4, &(0x7f0000000280), 0x0)
mknod(&(0x7f00000003c0)='./bus\x00', 0x8000, 0xd00)
sysctl$kern(&(0x7f0000000040)={0x1, 0xb}, 0x3ffffffffffffdd4, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x2, 0x8)
execve(&(0x7f0000000480)='./bus\x00', &(0x7f0000000500)=[&(0x7f0000001100)='-/\x8c.@\x00\xc7\xa2/M\xb7\x8c \xb5\xd2v\xd6r}\xa9\x1c\x92M\xab\x8b\x1d\xaa\b*\xec\xf9b#\xe2\xd0\xedf\xe6+\xa6\xf3p;\xc5\xc0\x1c\xee#\xe7K\xea1\xb5\x81M\x00\xcaH\xb8y\xdfN\xf4\xf7y@\xa8K~a\x02\xd3$\xdcT\x94\xa0w\xc24lOs\xc3#\a\xe1\xf2\xc5\xde02\xf8\x87\xb8\xc1\x1c\x9cM\x81\x1a;X\x834\xf6\xcbL\x05\xf0\x11\xa6\x85\a;7\xc3\xf2\f\xf6\xfa\x8dc\x95:\xfev\a\xc7n\xb0\xb0\xc5\\\xf5N\xaf\xaa\xe2\xcfcY\xc5\x9b\x86\v\xd0:n4D\x8f\tdIA\x87\xb7\xb6\xc8g\xac\x91w\xfe\xa4\xda\xa8?5\x8f\x1c\xea/\xb5w\xc0\x97\xc6)\x82Z\x93 \x1b\x18\xfc\xc65\x99c\x99\xbbUR+\x8c/\t\x1f\xc5\xa9-\'\xfdZ\xda\xc4\x10X\xa1\xb6\x83\xd92\xb5\\\xedc\xb6\xb2V\xc6\xf7/\xb4\x0f&\x174', &(0x7f0000000580)='A\xc5\xe6\xedb(\xda\xe8\x02\xa2?\x8eH\xa6\x89n\xf9\xbe\xc4\xeabb\xaen\xd3\xd4\x86\r\x81\xb8 \xaa\xcf\xc7\a#?\xfc\xfe\xa9\xab\xae\xb5\xf5\xec\xeb\xfe\x02\x90\x86\x88 \xa7\x96a9\x88^~\xf0 \x98\xdd!\v-\xabdm\xd0\x13\xed\xb8\xd5\x0f\x907\xddZZ\xb2\x17\xc4w\x7f7\x99P\xc3\xb9hna\x1d\xe8KB\x1dQ\x18\xc5\x8a~/\x8a7oX\x18\x97\a\xe6*\x0f\x8a5k\xabO\xccWVN\x02 GM\b.Y\x11D\xca4V\xc0s\x95JY?!\xd6\xba\xdb\xd9,,', &(0x7f0000000c00)='tap', &(0x7f0000000c40)='tap', &(0x7f0000000200)='*\x00', &(0x7f0000000400)='/dev/pf\x00', &(0x7f0000000d00)='@[$\'\x00', &(0x7f0000000300)='[:#\x00\xb8\x10\xd7+A\xfe\xd5-\xd3\xc5\xe5\xd0\xea>y\x8a\ti\n\xe0B\x9e\x7f*Xv\xefO\xb1U=<\xe9\xbd\x10\x1d\x81\xd6\xde9\xb51\xbd \xf0\xae\x14,\a\x8cI\xc0c8\x90pt\xcb\xaa\xfe\x14\xd4\x18\x1dV\x85j\x05f\xbf 3\x11Ai\x91\x0fCPw\x96\x8cDU<3\xd7\x91\x184\x00\xffM\xa58\xa2X\x12\xe3\xe4:\xa1G\x92:\xc7\x10T\xa3M\xbf\x80 \xdf\xa7\xe7\xc9\x98\x0fC\x12L~\xb2\x9byQ\xcd\xa0ei\xffSB\xab\xac\x8e\x85N_e{oK\xd7*\xda\xce\x99\x93ev\xf1\xfd\b}@\xbe\xbf\x8c4\x96F\xf9*\x19\x8b\xe2\x8c\xa5X\xe4\xf8\xe9\x8a\xb4\xf5', &(0x7f0000000d80), &(0x7f00000002c0)='}\x00'], &(0x7f0000001080)=[&(0x7f0000000e40)='tap', &(0x7f0000000e80)=']\x00', &(0x7f00000006c0)='/d\a\x00\xebcamu\x90|\x00\x00n\x00\xa6\xd2\t\t\xee\'\xc0\xe7Y~;\x0e\x96\xba\xca\xa8\xefz\x02c\x97\x96\x17\xe886d\x9a\xd0\xab\x1d\x8a\x1btb\xe4\xd61\xac\fxh;\a\'L\t=\xfd\x85P\xbd\x83\xfcM\x89h(\x03\xe4sx\x01\xc8\x89\xaf\xa8Y\xaf\xc7\x9bP\x02#5\f\xaa6\xe9D\xc9o\x85\xc3\xb21\xa5\x7f?:\\\xe8^;_K\x86\xbe\xd7\x8b\xdc\x86_\xc0\xdfT\xce\xffn\xa7\xf7\xf1F\xb5\x03:pm`\xfe\r\x89\f\x98d\xac\xf2KO\xf2\xb3v\xc8', &(0x7f0000000f00)='/dev/pf\x00', &(0x7f0000000f40)=':F(+{/+\x00', &(0x7f00000001c0)='.Y:\x1b}*\x00\x1e\xe4v\x8b\xf2\xae\x022&\x00\x80v\xfb\xb7\x89\xd6\xf7\n\xf9\xf7\xcb\x16\xbd', &(0x7f0000000280)='/de\x0f\x7f\x00\x00\x00\x91\x04O\xf5\x9a\xee\xe1\xa8fj&\xab\xc3[H\x15', &(0x7f0000001000)=',\x02', &(0x7f0000001040)='/dev/ps\x8f'])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

1.515544207s ago: executing program 7 (id=53):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0xc2b, 0xffff, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x4}, {0x9, 0x9, 0x7, 0x9}, {0x100, 0xf88, 0xd, 0x9}, {0x200005, 0x800, 0x8007}, {0x403, 0x200727, 0x2803, 0x7}, {0x1, 0x650, 0x3, 0x9a}, {0xce1, 0x3ff, 0x4f8, 0x69}, {0x6, 0x803, 0x14, 0x8}, {0x5, 0x82, 0x5, 0x100005}, {0x6a74, 0x73f, 0xd3d, 0x4}, {0x1c8, 0x12001, 0xc, 0x3}, {0x8, 0xc, 0x5, 0x2}, {0x3, 0x7, 0xc, 0x4}, {0x9eda, 0xeffbfffa, 0x1, 0x6}, {0xc, 0x5, 0x8, 0x10200000}, {0x0, 0x1, 0xfff, 0x30004}]})
r1 = socket(0x18, 0x2, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000001840)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x9, 0x80000001, r2})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdir(&(0x7f0000000100)='./file0\x00', 0x49)
chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000340)={0x2400, 0x100000})
unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00')

1.515140232s ago: executing program 6 (id=54):
openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
rename(&(0x7f0000000100)='./file0\x00', 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async)
unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='x\x00') (async)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0) (async)
setuid(0xee01) (async)
r2 = getpid()
fcntl$setown(r0, 0x6, r2) (async)
close(r1) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000600)='./file0/file0\x00', 0x100000000)

1.512736842s ago: executing program 7 (id=55):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
syz_emit_ethernet(0x76, &(0x7f0000000100)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "00ffff", 0x40, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffffc, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x88, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0xfffffffe}]}]}}}}}}})
fchmod(0xffffffffffffffff, 0xf7fb079a74590f3)

1.507438791s ago: executing program 6 (id=56):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x50})
r0 = syz_open_pts()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet(0x2, 0xe29a4cfcda8b328, 0x5)
setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="a3f7c0cdcc2ad2c755444c8e", 0xc)
ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000300))
close(r0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x2, &(0x7f0000000180)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44162df3867d25aff254e68dbf44ff53559bdaccfdf6b9e3957261167908bdf9ab63a1900bb07c4a19fe9c74c43e44665d8aa04db2150d2379c95abab88ba171048ff14200a5133cab96cb52dc062c67abb716c06191ca3a1528fd52a92bd16fe9e644b5465e76e17a9df0821b2bf250fa4298ed528be8a422cbea36aceaa0bce82558eadcb5904a61b694ccd0d6fc6ddafdd6224fb0c7a8ffd13019f8edee2119978b8832e94a404d59383d8b4380a6efbe86282b2a44", &(0x7f0000000040)=0x10066, 0x0, 0x5a)
r2 = socket(0x2, 0x1, 0x0)
getsockname$inet(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_pts()
syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r4 = socket(0x11, 0x3, 0x0)
r5 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
r6 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
fcntl$lock(r6, 0x9, &(0x7f0000000280)={0x0, 0x1, 0x3b5, 0x1000381210089})
fcntl$lock(r6, 0x8, &(0x7f0000000080)={0x3, 0x300, 0x4c1, 0x369000000, 0xffffffffffffffff})
accept$unix(r4, 0x0, 0x0)
ioctl$TIOCCONS(r3, 0x80047462, &(0x7f00000002c0)=0x6)

1.507098s ago: executing program 5 (id=57):
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="c0af9c5e1db4fd5fff65b414d2ab7e9272d5352c05ee77920d40f1464cd15ae4501e86cd60be18e30e712c4b8436fac4d84d91caad9539b289077278bef8cfb1a82afe28d81f813700006e28156cc484f83301db4fa0b31779689d00df988eed13b563904a37981fa5ee6d2d25e8a5aae6ec0750959e603694727249a6103b8adca7ed6ba35421bb5910aaa5b15ca15ce37e3709fa01e84a66ed3a9d75b4da2ff7cbf5fa9de43e816a501a6914f103560caa401cad3e05fc67d3029f25", 0xbd}, {&(0x7f0000000080)="e8b2187fe8ceb940538dbf", 0xb}], 0x100002e2, 0x5)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r0 = syz_open_pts()
poll(&(0x7f0000000080)=[{r0, 0x100}, {r0, 0x100}, {r0, 0x4}, {r0, 0x10}, {r0, 0x2}, {r0, 0x80}], 0x6, 0xf)
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)=0x1000)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0xe)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="c0af9c5e1db4fd5fff65b414d2ab7e9272d5352c05ee77920d40f1464cd15ae4501e86cd60be18e30e712c4b8436fac4d84d91caad9539b289077278bef8cfb1a82afe28d81f813700006e28156cc484f83301db4fa0b31779689d00df988eed13b563904a37981fa5ee6d2d25e8a5aae6ec0750959e603694727249a6103b8adca7ed6ba35421bb5910aaa5b15ca15ce37e3709fa01e84a66ed3a9d75b4da2ff7cbf5fa9de43e816a501a6914f103560caa401cad3e05fc67d3029f25", 0xbd}, {&(0x7f0000000080)="e8b2187fe8ceb940538dbf", 0xb}], 0x100002e2, 0x5) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async)
syz_open_pts() (async)
poll(&(0x7f0000000080)=[{r0, 0x100}, {r0, 0x100}, {r0, 0x4}, {r0, 0x10}, {r0, 0x2}, {r0, 0x80}], 0x6, 0xf) (async)
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)=0x1000) (async)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0xe) (async)

1.459072841s ago: executing program 7 (id=59):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x7, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setuid(0xffffffffffffffff)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f0000000040)=0x2)
ioctl$BIOCLOCK(r0, 0x20004276)
ioctl$BIOCLOCK(r0, 0x40047477)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
syz_open_pts()

1.458639879s ago: executing program 5 (id=60):
syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db834400681100fe000000010000ff80d1440000200000ff1a00000000000000000000000000aa2f0100000000000004010600010000010000000000000000000000000000000000000000000000000000000000000000000000ffffe0000002ff020000000000000000000000000001000080000000000000000000000000004e204e220008"])
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x51fc)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$VMM_IOC_CREATE(r2, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffe000/0x1000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000003f00)={0x0, 0xfdc7})
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x3)
utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x9, 0x359}, {0xee, 0x55}}, 0x2)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5a9da4070000006ebb807e7fa1d2498b4317bf23566927ba3938828c00009534c8653d66ba0000000000ad9d75521657637528b1edb7ac126ee524a44ee4ff13eb30295f1302", &(0x7f0000000080)=0x60, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0)
ioctl$FIONREAD(r3, 0xc0206921, &(0x7f0000000380))
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff)
r6 = dup2(r5, r4)
fcntl$setstatus(r6, 0x4, 0x4)
socket(0x18, 0x3, 0x0)

1.323767067s ago: executing program 4 (id=62):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r0 = syz_open_pts()
syz_open_pts()
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
pread(0xffffffffffffffff, &(0x7f0000000140)="ad418f04cfbba75fe5098e858c5ec87393cf743d34f221c313afe842d1a521fd51037f3df15f1489e003206fd50593dda58d15df88172bb96539db", 0x3b, 0xecb0)
unveil(0x0, &(0x7f0000000100)='W\x00')
r1 = socket(0x2, 0x1, 0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r2 = socket(0x18, 0x3, 0x0)
r3 = socket(0x1, 0x2, 0x0)
sendmmsg(r2, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000040)=[{&(0x7f0000000200)="6382bf150d9b4dfdadd07583ae66ab518b8bef240ec9c9f103c5f2e02bc0fb545c7af398bacbf5dec06d581d5bad8f96f8f313dc78dab1ebc81f4255045f24dcabe9130431b5a350ca5d13c3434765399d5c36a3b415eaad7a4067a373b8d2252bb5ced0732dfcb1b74f75618ebe1cc3bdc596027d2a4389b777df52092b8f3a67b12e579e0bc3460afb41fc68d9b88d08ebab4795bb92295dcaa0d1af367527e9aee5552d148179cb085051f3f1b588521151e0157cf256d598215b6bee1a2342a6c18d4bb07dbf", 0xc8}, {&(0x7f0000000300)="62012473cc6fce97ae8d4b383a7f31213cbbbb35583963ed057fdacd8e896515cc68c88b6773c4b2ec861849cfbb8d2fbf84e7708a598d7d6a9cc4e3a53a2d8f8db3b32ccf177fa12a2e015361684ebef7d93966c4f58697ff2d4fac29daaa84d6689b0fece08c1650635e5822b4cf553b5c44d17cf69a485622dda843e13f61b8df5cdf6177967cb30eaebcccc86c8eecd01659", 0x94}], 0x2, 0x0, 0xfffffffffffffdb8}, 0x80}, 0x10, 0x4)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r4 = syz_open_pts()
close(r4)
r5 = syz_open_pts()
ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000180)={0x42978c, 0x3, 0xfffbfc03, 0x80a19e, "bb080006020900d91050080000000f00", 0x0, 0xc1})
writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100))
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))
close(r0)
r6 = syz_open_pts()
ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000100)={0x9789, 0x5bc, 0xfffffff8, 0x80a19b, "bb081aa90037215dbeae58be1b00e6001d00", 0x80ff, 0x1000002})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$VNDIOCSET(r7, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8c57fa1180b371d8, 0x11, 0xffffffffffffffff, 0xfffffffffffffff6)

1.322967424s ago: executing program 1 (id=63):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
close(0xffffffffffffffff)
syz_open_pts()
syz_emit_ethernet(0x66, &(0x7f0000000240)={@random="e702f2ffef1f", @random="97b0ae1a006b", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "00de00", 0x6, 0x1, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1}}}}}}})
writev(0xffffffffffffffff, 0x0, 0x0)
chmod(0x0, 0x23f)
open(0x0, 0x0, 0x15b)
getpid()
sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, &(0x7f0000000140)="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", 0x101)
chown(0x0, 0x0, 0x0)
setrlimit(0x1, 0x0)
truncate(0x0, 0x5ffffffffd)
open(0x0, 0x70e, 0x0)

1.322162278s ago: executing program 4 (id=64):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"})
openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x80, 0x29)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x46}, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0)
setgid(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x5)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000005, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0xfffffffe, 0x9}, {0x1, 0x803, 0x8007}, {0x401, 0x200726, 0xd197, 0x8}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x10, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x0, 0x8001, 0xd1b, 0xfffffffb}, {0x1ce, 0x10001, 0xc, 0x3}, {0x26, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0xb, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x6, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x40000480000000, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x4, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0xd8, 0x8, 0xffffffee, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x8}, {0x1, 0x800, 0x3}, {0x401, 0x200726, 0x1, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0x80ce1, 0x1, 0x3, 0x400006d}, {0xa, 0x803, 0x14, 0x8}, {0xffffffff, 0x82, 0x1, 0x9}, {0x20000004, 0x8000, 0xd1b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x975e616}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8a, 0x4, 0x6, 0xfff}, {0x29a71517, 0xfffffffa, 0x6, 0x6}, {0xc, 0x2, 0x6}, {0x0, 0x1, 0x4, 0x4030004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r2 = dup2(r1, r1)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0, 0xffffffffffffff37})
r3 = semget(0x0, 0x1, 0x281)
semop(r3, &(0x7f0000000000), 0x23)
setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, 0x0, 0x0)
r4 = open(0x0, 0x40, 0x132)
ioctl$FIONBIO(r4, 0x82907003, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)

1.321920912s ago: executing program 1 (id=65):
open(0x0, 0x40, 0x100)
r0 = syz_open_pts()
fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000})
flock(r0, 0x1)
flock(r0, 0x3)
r1 = msgget(0x3, 0x280)
msgctl$IPC_RMID(r1, 0x2000000)
syz_open_pts()
syz_open_pts()

1.2615628s ago: executing program 6 (id=66):
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
ioctl$WSKBDIO_GETMODE(r0, 0x40045714, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731ad55c", 0x12}], 0x1)
execve(0x0, 0x0, 0x0)

1.260977067s ago: executing program 7 (id=67):
mknod(&(0x7f0000000000)='./file0\x00', 0x100, 0x5449) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x100, 0x5449)
open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
mprotect(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x4)
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x11, 0x0, 0x0, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000685000/0x3000)=nil}, {&(0x7f0000ccb000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x7}, {&(0x7f00001c4000/0x1000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x7fffffff}, {&(0x7f00007af000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000775000/0x3000)=nil, &(0x7f000068e000/0x12000)=nil, 0x71e9}, {&(0x7f000005b000/0x2000)=nil, &(0x7f00005b7000/0xf000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil, 0x20000002}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ed000/0x1000)=nil}, {&(0x7f0000e90000/0x2000)=nil, &(0x7f00008a2000/0x3000)=nil, 0x800000002fe}, {&(0x7f00001cb000/0x2000)=nil, &(0x7f000069c000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000297000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00002f6000/0x3000)=nil, &(0x7f000010e000/0x1000)=nil, 0x8000000000000005}], './bus/file0\x00'}) (async)
ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000685000/0x3000)=nil}, {&(0x7f0000ccb000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x7}, {&(0x7f00001c4000/0x1000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x7fffffff}, {&(0x7f00007af000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000775000/0x3000)=nil, &(0x7f000068e000/0x12000)=nil, 0x71e9}, {&(0x7f000005b000/0x2000)=nil, &(0x7f00005b7000/0xf000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil, 0x20000002}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ed000/0x1000)=nil}, {&(0x7f0000e90000/0x2000)=nil, &(0x7f00008a2000/0x3000)=nil, 0x800000002fe}, {&(0x7f00001cb000/0x2000)=nil, &(0x7f000069c000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000297000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00002f6000/0x3000)=nil, &(0x7f000010e000/0x1000)=nil, 0x8000000000000005}], './bus/file0\x00'})
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x18, 0x1, 0x0) (async)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])

1.260723131s ago: executing program 5 (id=68):
close(0xffffffffffffff9c)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r0 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000480)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x2, 0x10, r2, 0x0)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @broadcast, [{}], {@arp={0x806, @generic={0x1, 0x812b, 0x6, 0x0, 0x4, @local, "", @remote, "be27c0574ebf894c9babe29227fa6e58"}}}})

1.12420359s ago: executing program 4 (id=69):
syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="4f6d38913c6594e8078600ee44621460", [], "c8d2ca3691508b41"}}}}}}})
syz_extract_tcp_res(&(0x7f00000000c0), 0x8, 0x5) (async)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

1.123863289s ago: executing program 1 (id=70):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x1013, 0xffffffffffffffff, 0xfffffffffff7fffe)
r0 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x48b}, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8000000000, 0x3, 0xfffffffffffffff4, 0x1838})
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r1 = socket(0x800000018, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r2 = kqueue()
kevent(r2, &(0x7f0000000080), 0x3fc, &(0x7f00000001c0), 0x5f, 0x0)
ftruncate(r2, 0x400)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x7}], 0x1})
sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x18, 0x2, 0x0)
close(r3)
socket(0x800000018, 0x1, 0x0)
r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(r4, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x4}, {0x3, 0xfffffffe}, {0x1, 0x300}, {0x3, 0x70b1}, {0x2, 0x11}, {0x2, 0xa}, {0x0, 0x20000001}, {0x1, 0x5}, {0x0, 0x5}, {0x3}, {0x1}, {}, {0x0, 0xa8}, {}, {}, {0x3}, {0x1, 0xfffffffe}, {0x1, 0xb4}, {0x1}, {0x6, 0x1fe}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {}, {0x1, 0x80000000}, {0x2, 0xfffffff8}, {}, {0x0, 0x4ab60683}]})
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000001180), 0x0)

1.123477281s ago: executing program 7 (id=71):
setrlimit(0x1, &(0x7f0000000980)={0x42, 0x3fb})
r0 = syz_open_pts()
close(r0)
mknod(&(0x7f00000002c0)='./file0\x00', 0xc000, 0x1e5f)
socket(0x18, 0x2, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x4}, {0xfff, 0x7ff, 0x14, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa98, 0x4}, {0x1cc, 0x1, 0x0, 0x3}, {0x8, 0x9, 0xf, 0x8000002}, {0xb8c, 0x555981a8, 0x8, 0x4}, {0x29a71717, 0xff, 0xffffffff, 0x6}, {0xc, 0x2000005, 0x5, 0x10000002}, {0x0, 0x1, 0x1002, 0x30004}]})
socket$inet(0x2, 0x3, 0xf)
ioctl$VNDIOCSET(r1, 0x80044403, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x63, 0x6, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd})
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02)
r3 = open(&(0x7f00000006c0)='./bus\x00', 0x100, 0x19c)
readlink(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
close(r3)
ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0xe5, &(0x7f0000000100)='./file0\x00', 0x8})
syz_open_pts()
sysctl$kern(&(0x7f0000000000)={0x1, 0x4c}, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffff40)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0xc)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)="a27e8a0e652116c3bfedbafaf831dc4591a63430f123459d025b26f9c0cc537be97446c6aeab0d6f1589a199a11f096c4340fcf570cd74807b1b88dc34192dc5336e186f2609fc01face548d6807f0ad70c57b59699fed0ae385fd14a28471d40d2d2b959f34cfda2afca69769246abde1d50d0a39fa5b19942fcc4e16ccf4032f597dd5c94fe14366f9631c5160754e2b59e011ff5748931c41e6922f6933f98904283b251f1ea52362b9603c90925929fe87551d4f68bac6e396c1592439649db722815a8fa1c712a0400510de60", 0xcf}, {&(0x7f0000000400)="524f57a9e74bddbc6b1d84a92cea065a1e8584dc1cd7c9d2106dcbd033adf90e3187f12d70f8594e09f61021df36daf8ce14917317e8ca997189435f6d7a587ee3075b1e2c9155869c505ec03f81c4ed5f8b6d12669721380eaa2f54b3d713d491e8d347008c9992b22458a9fa8e634c103dd2f67845e9cf707876dc02a4091611e02dee378674ac095606180bc67876d8e7ee8e8d2b870c078f50ac7bf702dd7ed46ade97300c226825c652cefcdf97b4ac6ba3cdafb4d67d83848e95265480e1fd5368e565b81b46aa421f8d32ab88666783cc8a7b50e9cd04f5553f1f2cfc4d2d4e1d5088e4", 0xe7}, {&(0x7f0000000500)="f2864cc7982eda8db09d14cbbacf3785a0364d58b0316efcedf53c3daa8ea7c423a739c399b02bd1bea1492a26e253b8881058c5e80405ef9e3aa16c8f1c5d735ef8693f3301294877b4c43fe7de430f81bd56e14a9aa684584d6c0081e12b1ef1353a1d47be5a1f3dbb0de8191a7377424b74c271a2d712a675a1dae81d6ecc910bb0d0961994bd324b9d51b52fc088193557da3c5dffc26c4f13db1656e8c46056aba4229424770144b1f7742ea60187e35d9d6daca7c90a332b8f87ad05c75ca428646c49a42c7f774eadb9adbb0a45", 0xd1}, {&(0x7f00000001c0)="3cdb8c2479df2449ca3db2b19cb154c9956d", 0x12}, {&(0x7f0000000240)="4f6ae0330ca8", 0x6}, {&(0x7f0000000280)="cdfdf727e1d0067ad76e004dfd7089672a4c4c5791ed611df77a858b7bcdf55d442e9ca63913880bb6a9fa871e4e51943a7db2", 0x33}, {&(0x7f0000000600)="4ccf39a2370daaf82599f6651d7ac22b280735666c0d748222bc0ae1c911402b0ebcdfc5cf487d9904f152923eba564798df6e8b237e9f9c", 0x38}], 0x7)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x10, 0xb3)
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000080)={0x3, 0x7, 0xe150, 0xffe, "f4ffffff00008471050000000010000447ff00"})
close(r4)
openat(r4, &(0x7f00000000c0)='./bus\x00', 0x20, 0x100)
ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000180)=0x5)

1.122312066s ago: executing program 4 (id=72):
sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, &(0x7f0000001240)="8d960000", &(0x7f0000000040)=0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sysctl$vm(&(0x7f0000000200)={0x2, 0x6}, 0x2, &(0x7f0000000240)="6971282cb80a6f856fccea5c941916135684c20d8f4df76c1961a6b55eb1fcb8da2ae4d0338a881ef63aea8f", &(0x7f0000000280)=0x2c, &(0x7f00000002c0)="1cfcbdb50b2188a180e91b16e8eca053752987d1b02f708948739541cf557c277fe298a6ca7c2174a9c741760a1a5f62fa23e388478fdd1157e177e214328d9943ce55f864304782a8b80805170e1e25ea5b50e59c97017d0d23e3d5636766bf4e93e29400be631e1932232c9d1858ba9d4458ff8684f64d35e8a9fe0ec1aca7bf5b7ecbf3a384", 0x87)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BIOCGETIF(r5, 0x4020426b, &(0x7f00000001c0)={""/16, @ifru_broadaddr=@un=@abs})
setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={r2, r3, r4}, 0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37)

1.122203485s ago: executing program 4 (id=73):
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x36}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x4, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x28, 0x4042})
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x9, 0x0, 0x8, 0x48000, "598abad0666b3949385bb4b3182c96ece5c948f8", 0xffffff81, 0x3})

62.099625ms ago: executing program 6 (id=74):
r0 = syz_open_pts()
r1 = socket(0x18, 0x2, 0x0)
close(r1)
r2 = socket(0x10, 0x1, 0xfd)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x84, 0x48e}, 0x0, 0x8, 0x0, 0x0, 0x40, 0x200, 0x3, 0x1838})
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket(0x800000018, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$TIOCSCTTY(r0, 0x20007461)
execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0)
mprotect(&(0x7f00003f1000/0x4000)=nil, 0x4000, 0x2)
mkdir(&(0x7f0000000100)='./file0\x00', 0x49)
accept(r2, &(0x7f0000000040)=@un=@abs, &(0x7f0000000100)=0x8)

4.62915ms ago: executing program 0 (id=75):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="ec6813b6d238c1ba7c041efef80cbef404191b8662ed2c36e57e21117500000000000000000000000000000000bc3a70f29353c0d7", 0x35}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5a9da4070000006ebb807e7fa1d2498b4317bf23566927ba3938828c00009534c8653f66ba0000000000ad9d7552165763752844f2ff71126ee524a44ee4ff13eb30295f130299c838d226a53be7e406365705ced516cf4475b0a8ee516f233d54e8", &(0x7f0000000080)=0x7c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f0000010000903abf65b18d7c51f78bf808ffb413000000000000000000", 0x20}], 0x1}, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5a9da4070000006ebb807e7fa1d2498b4317bf23566927ba3938828c00009534c8653d66ba0000000000", &(0x7f0000000080)=0x44, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x2, 0x71000}, {0x7, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x9d38, 0x8800, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x9, 0x4, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x2, 0x2, 0x0)
close(r3)
socket(0x2, 0x3, 0xfe)
connect$unix(r3, &(0x7f0000000000), 0x10)
r4 = socket(0x2, 0x3, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
connect$unix(r4, &(0x7f0000000000)=@file={0x0, '\x00'}, 0x3)

2.298865ms ago: executing program 4 (id=76):
getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0])
mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x4001, 0x0)
r1 = socket(0x18, 0x1, 0x0)
r2 = socket(0x2, 0x1, 0x0)
listen(r1, 0x84)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4)
r3 = fcntl$dupfd(r0, 0x2, r0)
close(r3)
r4 = socket(0x2, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
r5 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000080), 0x4)

343.612µs ago: executing program 5 (id=77):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "1a1116f043000000000000fffffffffff700"})
sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa22f3c25db0070162e0086dd60f6190000180600fe8000000000000000000000000000aaff001fb2f810e2853a17d600000001004e204e"])
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f00000005c0), 0x0)
mmap(&(0x7f0000661000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffff9c, 0x0)

0s ago: executing program 1 (id=78):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0xee, 0x8005}, {0x1, 0x7b, 0x1, 0x48}, {0x1ae, 0x8, 0x1, 0x6}]})
syz_emit_ethernet(0x1360, &(0x7f0000000740)=ANY=[])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="d9bdb1d453b8d228fa79338ff8b57c744b8458f0915fe69399503a9643178057a544077d2204664c25691adaea0ac6031770338f48b77563ce8461f3172d836d448df0900828b001c19eba7ffa00000000b61e", 0x53}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x6b)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000400)=[{0x8, 0x81, 0xc0, 0x2}]})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xff7fffffffffffff, 0x0, 0x25})
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
close(r1)
ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f00000000c0)=0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts.
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
witness: lock order reversal:
 1st 0xffffffff8382fe08 &cq->cq_mtx (&cq->cq_mtx)
 2nd 0xffffffff8398da88 &sched_lock (&sched_lock)
lock order [1] &cq->cq_mtx (&cq->cq_mtx) -> [2] &sched_lock (&sched_lock)
#0  mtx_enter+0x4a
#1  sleep_setup+0xc6
#2  msleep_nsec+0x10b
#3  dt_ioctl_record_stop+0xbc
#4  dtclose+0x109
#5  spec_close+0x466
#6  VOP_CLOSE+0x132
#7  vn_closefile+0x12b
#8  fdrop+0x121
#9  closef+0x192
#10 syscall+0xbd4
#11 Xsyscall+0x128
lock order [2] &sched_lock (&sched_lock) -> [1] &cq->cq_mtx (&cq->cq_mtx)
#0  mtx_enter+0x4a
#1  clockintr_cancel+0x2f
#2  mi_switch+0x16f
#3  ast+0x15a
#4  Xsyscall+0x156
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffffffff8398da88,9,0) at witness_checkorder+0x10b9
mtx_enter(ffffffff8398da78) at mtx_enter+0x4a
sleep_setup(ffffffff8382fe58,220,ffffffff833f6be7) at sleep_setup+0xc6
msleep_nsec(ffffffff8382fe58,ffffffff8382fdf8,220,ffffffff833f6be7,ffffffffffffffff) at msleep_nsec+0x10b
dt_ioctl_record_stop(ffff80000148d000) at dt_ioctl_record_stop+0xbc
dtclose(11e5f,81,2000,ffff80003c44ca88) at dtclose+0x109
spec_close(ffff800039c153a0) at spec_close+0x466
VOP_CLOSE(fffffd806285ab48,81,fffffd80097fb6e8,ffff80003c44ca88) at VOP_CLOSE+0x132
vn_closefile(fffffd80695cbe08,ffff80003c44ca88) at vn_closefile+0x12b
fdrop(fffffd80695cbe08,ffff80003c44ca88) at fdrop+0x121
closef(fffffd80695cbe08,ffff80003c44ca88) at closef+0x192
syscall(ffff800039c15600) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9ec217eff50, count: -14
ddb{1}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff800039c150b0
rbx                                0
rdx               0xffff800001453d40
rcx               0xffff80003c44ca88
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff800039c14f90
r9                0x8080808080808080
r10               0xa27531b7652b9da9
r11               0x54db821c9e2d4bbf
r12               0xfffffd8003efcdc0
r13               0xfffffd80046eaa28
r14                              0x3
r15               0xffffffff833e434f    substchar+0xfe6d
rip               0xffffffff81cb5af5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800039c150a0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=277608 pid=89889 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=63, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c44d4e8,0xffff80003c44d790
    process=0xffff80003c026240 user=0xffff800039c10000, vmspace=0xfffffd806afd69a8
    estcpu=26, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 87385    4351      0      0  7     0x14200                sosplice
 97772  181195  19120      0  2           0                syz-executor
 56316  442480  75111      0  2           0                syz-executor
 89889   16141  76583      0  2           0                syz-executor
*89889  277608  76583      0  7   0x4000000                syz-executor
 82020  401070  59115      0  2           0                syz-executor
 82020  111474  59115      0  3   0x4000080  fsleep        syz-executor
 82020  243494  59115      0  3   0x4000080  fsleep        syz-executor
 38519  393713  96384  60928  3      0x3010  suspend       syz-executor
 38519  371384  96384  60928  3   0x4081010  biowait       syz-executor
 38519  133198  96384  60928  3   0x4081010  inode         syz-executor
 38519  305105  96384  60928  3   0x4081010  inode         syz-executor
 58317  372088  11527      0  3      0x3000  suspend       syz-executor
 58317  129123  11527      0  3   0x4081000  biowait       syz-executor
 59115  169766  10340      0  3        0x82  nanoslp       syz-executor
 19120  459089  10340      0  2         0x2                syz-executor
 75111  445136  10340      0  2         0x2                syz-executor
 74345  170352  10340      0  3        0x82  nanoslp       syz-executor
 11527  322761  10340      0  3        0x82  wait          syz-executor
 96384  340898  10340      0  3        0x82  wait          syz-executor
 76583  394020  10340      0  3        0x82  nanoslp       syz-executor
 39698  401535  10340      0  3         0x2  biowait       syz-executor
 10340  433650  72561      0  3        0x82  kqread        syz-executor
 72561  523338  66010      0  3    0x10008a  sigsusp       ksh
 66010  428315  12399      0  3        0x98  kqread        sshd-session
 12399  452353  25077      0  3        0x92  kqread        sshd-session
 34014  450237      1      0  3    0x100083  ttyin         getty
 25077   15167      1      0  3        0x88  kqread        sshd
 70600  394651  91045     74  3   0x1100092  bpf           pflogd
 91045  482855      1      0  3        0x80  sbwait        pflogd
 21194  473838  16495     73  3   0x1100090  kqread        syslogd
 16495  384264      1      0  3    0x100082  sbwait        syslogd
 49738  317116      1      0  3    0x100080  kqread        resolvd
 14130   27936  18741     77  3    0x100092  kqread        dhcpleased
 96420  183372  18741     77  3    0x100092  kqread        dhcpleased
 18741  207092      1      0  3        0x80  kqread        dhcpleased
 74428    8262      0      0  3     0x14200  bored         smr
 61965  380752      0      0  3     0x14200  pgzero        zerothread
 84964  278802      0      0  3     0x14200  aiodoned      aiodoned
 41512  151621      0      0  3     0x14200  syncer        update
 19095  437316      0      0  3     0x14200  cleaner       cleaner
 90457  371083      0      0  3     0x14200  reaper        reaper
 52534  276822      0      0  3     0x14200  pgdaemon      pagedaemon
 34743  398216      0      0  3     0x14200  bored         viomb
 75970  261577      0      0  3  0x40014200  acpi0         acpi0
 31411  474388      0      0  3  0x40014200                idle1
 77447  317546      0      0  3     0x14200  bored         softnet7
 26298  275084      0      0  3     0x14200  bored         softnet6
 46800  379526      0      0  3     0x14200  bored         softnet5
 51821  451165      0      0  3     0x14200  bored         softnet4
 71539  286517      0      0  3     0x14200  bored         softnet3
 76005   97506      0      0  3     0x14200  bored         softnet2
 86203  211853      0      0  3     0x14200  bored         softnet1
 20111  261195      0      0  3     0x14200  bored         softnet0
 39160  413656      0      0  3     0x14200  smrbar        systqmp
 90506  178483      0      0  3     0x14200  bored         systq
 66035  488738      0      0  3     0x14200  tmoslp        softclockmp
 83487    2672      0      0  3  0x40014200  tmoslp        softclock
 72157  414487      0      0  3  0x40014200                idle0
     1  266504      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex sosplice r = 0 (0xffff8000014c2328)
#0  witness_lock+0x5f1
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  msleep_nsec+0x177
#4  taskq_next_work+0x8e
#5  taskq_thread+0xe3
#6  proc_trampoline+0x10
CPU 1:
exclusive mutex &cq->cq_mtx r = 0 (0xffffffff8382fe08)
#0  witness_lock+0x5f1
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  clockintr_unbind+0x56
#4  dt_ioctl_record_stop+0xbc
#5  dtclose+0x109
#6  spec_close+0x466
#7  VOP_CLOSE+0x132
#8  vn_closefile+0x12b
#9  fdrop+0x121
#10 closef+0x192
#11 syscall+0xbd4
#12 Xsyscall+0x128
Process 89889 (syz-executor) thread 0xffff80003c44ca88 (277608)
exclusive rwlock dtlk r = 0 (0xffffffff83864e88)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  dt_ioctl_record_stop+0x2e
#3  dtclose+0x109
#4  spec_close+0x466
#5  VOP_CLOSE+0x132
#6  vn_closefile+0x12b
#7  fdrop+0x121
#8  closef+0x192
#9  syscall+0xbd4
#10 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838d8168)
#0  witness_lock+0x5f1
#1  vn_closefile+0x41
#2  fdrop+0x121
#3  closef+0x192
#4  syscall+0xbd4
#5  Xsyscall+0x128
exclusive mutex &cq->cq_mtx r = 0 (0xffffffff8382fe08)
#0  witness_lock+0x5f1
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  clockintr_unbind+0x56
#4  dt_ioctl_record_stop+0xbc
#5  dtclose+0x109
#6  spec_close+0x466
#7  VOP_CLOSE+0x132
#8  vn_closefile+0x12b
#9  fdrop+0x121
#10 closef+0x192
#11 syscall+0xbd4
#12 Xsyscall+0x128
Process 38519 (syz-executor) thread 0xffff800035408550 (371384)
exclusive rrwlock inode r = 0 (0xfffffd806af9e0e0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vn_write+0x18f
#6  dofilewritev+0x242
#7  sys_write+0xa2
#8  syscall+0xbd4
#9  Xsyscall+0x128
Process 38519 (syz-executor) thread 0xffff80003c44d250 (133198)
exclusive rrwlock inode r = 0 (0xfffffd806af9e208)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  domknodat+0xb4
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 58317 (syz-executor) thread 0xffff800035409a10 (129123)
exclusive rrwlock inode r = 0 (0xfffffd806af9e6a8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vn_write+0x18f
#6  dofilewritev+0x242
#7  sys_write+0xa2
#8  syscall+0xbd4
#9  Xsyscall+0x128
Process 39698 (syz-executor) thread 0xffff80002a2bc018 (401535)
exclusive rrwlock inode r = 0 (0xfffffd806bce5eb8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x279
#7  ufs_mkdir+0xfc
#8  VOP_MKDIR+0x101
#9  domkdirat+0x179
#10 syscall+0xb17
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806ccc0b30)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  domkdirat+0x8b
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 39160 (systqmp) thread 0xffff8000ffffe530 (413656)
shared rwlock systqmp r = 0 (0xffffffff8386acf8)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10209  11109K   11245K 166960K     11361        0
            pcb    17     12K      12K 166960K        34        0
         rtable   187      5K       6K 166960K       271        0
             pf    36     18K      19K 166960K        53        0
         ifaddr    43      7K       8K 166960K        49        0
        ifgroup    55      2K       2K 166960K        64        0
         sysctl     1      1K       9K 166960K         5        0
       counters    68     36K      37K 166960K        76        0
       ioctlops     0      0K       4K 166960K      1565        0
            iov     0      0K      12K 166960K         1        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1347     85K      85K 166960K      1444        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     7      0K       0K 166960K         8        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      89K 166960K       209        0
          sigio     0      0K       0K 166960K         1        0
           proc    72    115K     180K 166960K       544        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        19        0
       in_multi    96      7K       7K 166960K       101        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    61    281K     281K 166960K        61        0
           exec     0      0K       1K 166960K       385        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   235    175K     183K 166960K      3751        0
       UVM aobj     5      2K       2K 166960K         5        0
     pinsyscall    42     84K     102K 166960K      1327        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         8        0
            NDP    12      0K       2K 166960K        30        0
           temp    38   8638K    8714K 166960K      4901        0
         kqueue    13     20K      28K 166960K        35        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       46    0       43     1     0     1     1     0     8    0
rtentry    176       97    0       13     5     0     5     5     0     8    0
unpcb      144       71    0       48     2     0     2     2     0     8    1
syncache   336        3    0        3     1     0     1     1     0     8    1
tcpcb      736       41    0       34     2     0     2     2     0     8    1
arp        128       10    0        0     1     0     1     1     0     8    0
inpcb      328      140    0      127     2     0     2     2     0     8    0
nd6        144       16    0        0     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     0     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192       2    0        2     1     0     1     1     0     8    1
pppxif     1504       2    0        2     1     0     1     1     0     8    1
pfstscr     40        3    0        3     1     0     1     1     0     8    1
pffrag     232        1    0        0     1     0     1     1     0   482    0
pffrnode    88        1    0        0     1     0     1     1     0     8    0
pffrent     40        1    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       20    0        0     1     0     1     1     0     8    0
pfstkey    128       24    0        4     1     0     1     1     0     8    0
pfstate    384       22    0        2     3     0     3     3     0     8    1
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      442    0       47    28     0    28    28     0     8    1
art_table   40      443    0       47     5     0     5     5     0     8    0
art_node    32       97    0       13     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        2     1     0     1     1     0     8    1
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112        5    0        0     1     0     1     1     0     8    0
shmpl      112        2    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1715    0      199    95     0    95    95     0     8    0
ffsino     296     1715    0      199   117     0   117   117     0     8    0
nchpl      144     2012    0      321    63     0    63    63     0     8    0
uvmvnodes   80     1839    0        0    38     0    38    38     0     8    0
vnodes     216     1839    0        0   103     0   103   103     0     8    0
namei      1024    6179    0     6176     1     0     1     1     0     8    0
percpumem   16       53    0        4     1     0     1     1     0     8    0
kstatmem   264       30    0        4     2     0     2     2     0     8    0
scxspl     216    10524    0    10521     3     2     1     2     1     8    0
plimitpl   152       40    0       18     1     0     1     1     0     8    0
sigapl     424      524    0      470     7     0     7     7     0     8    0
knotepl    120      336    0        0    11     0    11    11     0     8    0
kqueuepl   224       37    0       28     1     0     1     1     0     8    0
pipepl     344      110    0       82     3     0     3     3     0     8    0
fdescpl    528      501    0      470     3     0     3     3     0     8    0
filepl     160     1925    0     1692    12     0    12    12     0     8    2
lockfpl    104       46    0       44     1     0     1     1     0     8    0
lockfspl    48       20    0       18     1     0     1     1     0     8    0
sessionpl  144       22    0       13     1     0     1     1     0     8    0
pgrppl      48       30    0       13     1     0     1     1     0     8    0
ucredpl    104      237    0      223     1     0     1     1     0     8    0
zombiepl   144      473    0      470     1     0     1     1     0     8    0
processpl  1248     524    0      470     5     0     5     5     0     8    0
procpl     664      653    0      592     6     0     6     6     0     8    0
sosppl     168        2    0        0     1     0     1     1     0     8    0
sockpl     752      263    0      223     5     0     5     5     0     8    0
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     115    0        0    15     0    15    15     0     8    0
mcl2k      2048      18    0        0     3     0     3     3     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256     1136    0        0    71     0    71    71     0     8    0
bufpl      280     4799    0      122   335     0   335   335     0     8    0
anonpl      32    10004    0        0    81     0    81    81     0   246    0
amapchunkpl 152   11004    0    10474    33     3    30    30     0   158    4
amappl16   200     2470    0     2137    18     0    18    18     0     8    0
amappl15   192        7    0        6     1     0     1     1     0     8    0
amappl14   184      121    0      109     1     0     1     1     0     8    0
amappl13   176       45    0       45     1     1     0     1     0     8    0
amappl12   168     1164    0     1135     3     1     2     2     0     8    0
amappl11   160       69    0       54     1     0     1     1     0     8    0
amappl10   152        2    0        2     1     1     0     1     0     8    0
amappl9    144      282    0      282     1     1     0     1     0     8    0
amappl8    136       20    0       18     1     0     1     1     0     8    0
amappl7    128      112    0      100     1     0     1     1     0     8    0
amappl6    120      181    0      177     1     0     1     1     0     8    0
amappl5    112      135    0      126     1     0     1     1     0     8    0
amappl4    104      298    0      279     1     0     1     1     0     8    0
amappl3     96     1754    0     1650     5     1     4     4     0     8    0
amappl2     88      647    0      588     2     0     2     2     0     8    0
amappl1     80     8562    0     7961    14     0    14    14     0     8    0
amappl      88     3032    0     2871     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        4    0        0     1     0     1     1     0     8    0
uaddrrnd    24      501    0      470     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      501    0      470     1     0     1     1     0     8    0
vmmpekpl   168     5677    0     5639     2     0     2     2     0     8    0
vmmpepl    168    38964    0    36706   101     0   101   101     0   357    0
vmsppl     488      500    0      470     5     0     5     5     0     8    0
rwobjpl     80    15649    0    12576    63     0    63    63     0     8    0
pdppl      4096    1010    0      940   102    30    72    84     0     8    2
pvpl        32    18613    0        0   151     0   151   151     0   265    0
pmappl     256      500    0      470     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      330    0       32     9     0     9     9     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff8382eff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
mtx_enter(ffffffff8382fdf8) at mtx_enter+0xd2
clockintr_dispatch(ffff80003c44b990) at clockintr_dispatch+0x3b1
lapic_clockintr(0,0) at lapic_clockintr+0x51
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
__sanitizer_cov_trace_const_cmp4(0,1) at __sanitizer_cov_trace_const_cmp4+0x35
mtx_enter(ffff8000014c2318) at mtx_enter+0x77
msleep_nsec(ffff8000014c2300,ffff8000014c2318,20,ffffffff833d22c8,ffffffffffffffff) at msleep_nsec+0x177
taskq_next_work(ffff8000014c2300,ffff80003c44bb88) at taskq_next_work+0x8e
taskq_thread(ffff8000014c2300) at taskq_thread+0xe3
end trace frame: 0x0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25
witness_checkorder(ffffffff8398da88,9,0) at witness_checkorder+0x10b9
mtx_enter(ffffffff8398da78) at mtx_enter+0x4a
sleep_setup(ffffffff8382fe58,220,ffffffff833f6be7) at sleep_setup+0xc6
msleep_nsec(ffffffff8382fe58,ffffffff8382fdf8,220,ffffffff833f6be7,ffffffffffffffff) at msleep_nsec+0x10b
dt_ioctl_record_stop(ffff80000148d000) at dt_ioctl_record_stop+0xbc
dtclose(11e5f,81,2000,ffff80003c44ca88) at dtclose+0x109
spec_close(ffff800039c153a0) at spec_close+0x466
VOP_CLOSE(fffffd806285ab48,81,fffffd80097fb6e8,ffff80003c44ca88) at VOP_CLOSE+0x132
vn_closefile(fffffd80695cbe08,ffff80003c44ca88) at vn_closefile+0x12b
fdrop(fffffd80695cbe08,ffff80003c44ca88) at fdrop+0x121
closef(fffffd80695cbe08,ffff80003c44ca88) at closef+0x192
syscall(ffff800039c15600) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9ec217eff50, count: -14