last executing test programs:

7.639461s ago: executing program 4 (id=664):
setreuid(0xee00, 0x0)
r0 = getuid()
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0x19, 0x10, 0x0, 0x3ff}, {0x16, 0xa, 0x5, 0x400f}]})
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b07eec3d06422d596f51e337031a7b4565ef3bf6b55f88162ed28c476ec2625b89ca9982fb12581a5bf6b25629ae8c8b6eaae4a3f7d8d3e35052668552dbab12b7775f04a2d08e30", 0x48}], 0x1)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
r3 = syz_open_pts()
mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x20005900)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r4, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'})
poll(&(0x7f0000000340)=[{r4, 0x1}], 0x1, 0x9)
poll(&(0x7f00000011c0)=[{r3, 0x4}], 0x1, 0x8000007)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[])
setreuid(0x0, r0)
socket(0x20, 0x1, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f00004d8000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8000000000b936}, {&(0x7f00001da000/0x4000)=nil, &(0x7f000072c000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000363000/0x3000)=nil, &(0x7f0000704000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0xa}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xd}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12a}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x9}, {&(0x7f0000241000/0x2000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000135000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x5}], './file0/file0\x00', 0xfffffffe})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket(0x18, 0x1, 0x0)
close(r5)
r6 = socket(0x18, 0x2, 0x0)
setsockopt(r6, 0x1000000029, 0x2e, 0x0, 0x0)

6.08081596s ago: executing program 1 (id=690):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r0, &(0x7f0000000480)='\x00'/14, 0xe)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffff9, 0x9, 0x2, 0x8000000000000000}], 0x1127, 0x0, 0x400, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e)

6.07933918s ago: executing program 1 (id=691):
r0 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001}) (async)
open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async)
sendmsg$unix(r1, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async)
close(r1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x10000, &(0x7f0000000180)='./file0\x00', 0x8})
unveil(0x0, &(0x7f00000000c0)='r\x00') (async)
open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0)

6.079019907s ago: executing program 1 (id=692):
clock_getres(0x5, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x8003, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/76, 0x4c}, 0x800)
setsockopt(r0, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="4fc480a8cd1d80d3f4426b7f64f79a279ffa02cba758fb9c2407e767dae1ee1d81ed923ac1c0c01665c950bb63b9bdcc047ae80a1b3cfa6ef3caaa13cded2aa63a172b723ef4d0a0cbf7122a90ece0bdc16acc5a13e9b9e1a38739840552f9e1d6dea566dbf44221a3ef20ee42592420be1e31e3053683328b4386bed4caaa4bdc25706d1c1f7e0b2fc4fecf09097681ec1accb6254061c8bad827506f8f4b6a8559538ed3322eadeb07ed634488", 0xae) (async)
r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async)
r2 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
setitimer(0x0, &(0x7f0000000140)={{0x24, 0xffffffffffff0001}, {0x7ff8, 0x1000000009}}, 0x0) (async)
ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async)
clock_gettime(0x3, &(0x7f0000000000))

4.268383086s ago: executing program 0 (id=697):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000040)={0x8, 0x101, 0x9, 0x6})
ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0xd)
ioctl$BIOCPROMISC(r1, 0x20004269)
r2 = dup(r1)
r3 = socket(0x1, 0x3, 0x5)
getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000100)={<r4=>0x0, 0x0, <r5=>0x0}, 0xc)
getsockname$inet(r3, &(0x7f0000000140), &(0x7f0000000180)=0xc)
ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f00000001c0))
fcntl$lock(r1, 0x7, &(0x7f0000000200)={0x3, 0x2, 0x3, 0x3, r4})
r6 = socket$unix(0x1, 0x5, 0x0)
getgroups(0x1, &(0x7f0000000240)=[<r7=>r5])
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
ioctl$BIOCPROMISC(r2, 0x20004269)
getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000280)=""/208, &(0x7f0000000380)=0xd0)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x2000740d)
syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344, <r8=>0x41424344}, 0x8, 0x7b)
syz_extract_tcp_res(&(0x7f0000000400)={<r9=>0x41424344}, 0x6, 0x8)
syz_emit_ethernet(0x372, &(0x7f0000000440)={@broadcast, @broadcast, [{[{0x88a8, 0x0, 0x0, 0x4}], {0x8100, 0x0, 0x0, 0x3}}], {@ipv6={0x86dd, {0xc, 0x6, "bb4b62", 0x334, 0x2f, 0x8, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x11, 0x0, 0xf, 0x1, 0x0, 0x17, 0x65}, @hopopts={0x16, 0x1d, '\x00', [@generic={0x40, 0x5, "242dec3681"}, @generic={0x5, 0xe3, "e1dca629dc2020c0c4f07e80a0b51c12c9f59249e76f531f81e016b642e0a621727c5b259748fb84b74a76c6c81060c13ee937bc6b59840486982540863abed69dcbe586fe2cbd95dcf87bfc26915b6d9b175ad3786e7ac7e84ac722bf2ffcb818a708e3c630b3d0a4df04514731a338d7a7fde9c1400a482ccfeaba11ca74fc51ecf387d6265cae73bd770120c8976c3a4f3e239a9f1c537931bcb9fcc78bbf72d8313fb591ca796c5f41cbf6dbb044eca955c8ba502f220499b0e39b690d9d5a7d66f8a47378268c83da4c0483362fba118f1e1ffa961654ebfe9ac46c0a76c52286"}]}, @dstopts={0x37, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}, @fragment={0x81, 0x0, 0xa8, 0x1, 0x0, 0x2, 0x67}, @dstopts={0x67, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x800}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x401}, @generic={0x93, 0xc6, "48b6ef128ce0e818cec472477f62ffb80ec63e3da3c1e4cf9a21e12ef3caa71a0958be72952220ab614f5b0a7d1ddbee4f74136a82f572dd328a89b55e8779f5489122140af3ce214e4e1f98e12a6a6ba4093840892001f20ccc64e95ad74049b467c2d117009455738d903cc85ca23adb8507b19c4a3b656d7962c91c0ed4a544ca3af106b0d713c46e23e3b50c2b262b3e10a93b8a652cdbababc1c8835e01b297611d62ee5b7d1d46ba7cb07e083a418d1387bdd00d1876707b304e399e102394f6c08970"}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}]}, @dstopts={0x67, 0x1, '\x00', [@pad1, @generic={0x5}, @pad1, @ra={0x5, 0x2, 0xb}]}, @dstopts={0x89, 0x1, '\x00', [@ra={0x5, 0x2, 0xfff7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0xc, 0x0, 0x0, 0x9}], @tcp={{0x0, 0x3, r8, r9, 0x0, 0x0, 0x14, 0x1, 0x6, 0x0, 0x38f, {[@sack={0x5, 0x22, [0x0, 0x40, 0xf1d6, 0x5, 0x9, 0x9, 0x3, 0x7]}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @eol, @md5sig={0x13, 0x12, "4dbf3981744a42bf4c38656def1b6abf"}]}}, {"6c55e67ca22e8b7afb4edda6fd7f7fed58b15e171ab2143706e9fe22a4dccc735835beae40d631003ab5688d39d74281086ff1e06c8143a552363c6c5a426756e092264766eb4e47efab7461a133505c5675430c2c4a368426e5a7e689267c664604787de335befa06d882c80f4ea7d5b90099f7c38e1442b2c2ed1c8d67806602a1c74667e0884b49c680936158a7fac0341620"}}}}}}})
getdents(r2, &(0x7f00000007c0)=""/6, 0x6)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000800)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000840)=0xc)
setgroups(0x6, &(0x7f0000000880)=[r10, r5, r5, r5, r7, r5])
sysctl$vm_swapencrypt(&(0x7f00000008c0)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000900)="37e7c1ece27bb162fa75536c8b4a2e78a0cadd1470c4be5629ce2ed74b22a5f3741e1be64a2f0dc542966ec9702bf41c186117c21d032152f29e5807db0aef09c5264a997f721502a74900ce0bdc1a", &(0x7f0000000980)=0x4f, &(0x7f00000009c0)="aaa9cc657433e0f08d9baae5bd0b8465b5386a12a0dd54f7c6be39cfc4170569819c6e4a3df4710f8b12829134e745e9a5052a14445320e96155a00ec9cb5753c23adb85d715d113bfda638d0997cfa0a1b2eada5ea112bb11b7d04853a07fe34ffb69b32e8ba97618f3be5f744a71b77a3a1dffaf341740d7bee34d0596bd3912a55c4e5b6388afc527494f7b9917b1f9f1e4f8a43507daeeb0fade694d05fa314ad085bc42ac1a9b22e10dc84c9fb7ff33d00c9feec60fadb73db2dce682ed558890cff190bf2af76d4c62c0b451696c6cb938cab38fd5db949f1af8", 0xdd)
setgroups(0x1, &(0x7f0000000ac0)=[r10])
open(&(0x7f0000000b00)='./file0\x00', 0x1, 0x190)
fchmod(r0, 0x11)
mkdir(&(0x7f0000000b40)='./file0\x00', 0x88)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000b80)={0x7, 0x7, 0x75, 0x8})

4.208504507s ago: executing program 4 (id=698):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$WSDISPLAYIO_GETSCREEN(r0, 0x42087007, &(0x7f0000000080)={0x0, './file0\x00', './file0\x00'}) (async, rerun: 64)
sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
mknod(&(0x7f0000000180)='./file0\x00', 0x100, 0x412dfc)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async, rerun: 64)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (rerun: 64)
ioctl$TIOCSETA(r1, 0xcd504406, &(0x7f0000000740)={0x6, 0x9, 0x0, 0x1, "97aa224ff1c14649ebb10600000000000000c1d1", 0x0, 0x3}) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"}) (async)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64)
ioctl$TIOCSETA(r3, 0xcd504407, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (async)
r4 = socket(0x1, 0x2, 0x0) (async, rerun: 32)
r5 = socket(0x11, 0x3, 0x0) (rerun: 32)
recvmsg(r5, &(0x7f0000000140)={&(0x7f0000001440)=@in6, 0xc, 0x0, 0x0, &(0x7f0000001340)=""/223, 0xdf}, 0x800) (async, rerun: 32)
close(r5) (async, rerun: 32)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) (async)
r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="258b300ad1", 0x5}], 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32)
sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc", &(0x7f0000000080)=0x15, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) (async, rerun: 32)
syz_emit_ethernet(0x138, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
setuid(0xee01) (async)
kqueue()
ioctl$FIONREAD(r4, 0xc0106978, &(0x7f00000001c0))

4.208218491s ago: executing program 4 (id=699):
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x6, r1)
ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r1)

4.207782595s ago: executing program 0 (id=700):
openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x8, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x765f}, {0x7, 0x6, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0xafd}, {0x1, 0x7ff, 0x7}, {0x10401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x5, 0x10003, 0x99}, {0xcdf, 0x1, 0x4f4, 0x6f}, {0x7, 0x6, 0x14, 0xb}, {0x2, 0x2, 0x4, 0x9}, {0x6, 0x8001, 0x4, 0x88}, {0xffffffc9, 0x10001, 0x9, 0xaeb}, {0x2, 0x9, 0x4, 0x5}, {0xb8c, 0x4004, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x7, 0x6}, {0x7, 0x205, 0x1}, {0xffffffff, 0x1, 0x4, 0x30000}]}) (async)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) (async)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
ftruncate(r0, 0x8531) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async, rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (rerun: 32)
stat(0x0, &(0x7f0000000280))
socket(0x18, 0x3, 0x3a)
r1 = socket(0x2, 0x4001, 0x0) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) (async)
r3 = fcntl$dupfd(r1, 0x2, r1)
close(r3) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r4, 0x0) (async)
socket(0x2, 0x1, 0x0) (async)
shutdown(r3, 0x2) (async)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

4.207152103s ago: executing program 4 (id=701):
r0 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r0, 0x2, 0x20, 0x0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2a, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x100100}, {0x6, 0xa, 0x83, 0x400f}]})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="dd5bd74bbb3bb98f4e0d1ddcdceff73b683b86b9", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000380)="6f0baee9cefcf22b2a0200000000000000dbef94e8f09b50d5bf93b22bd044c6361265c4f17475a913f906c4a141b84726862ffc8dbd7f67402fbb112c5559ed2327ce9aea77dd2c2ccf7372682ae02518f7bafdb69f09874a43451ac9080000000d3d25b998508fa8ae379f7b13f7846265d01d700df709fb80223b8e06ba9e", &(0x7f0000000080)=0x80, 0x0, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1)
ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0xfffffffe, 0x0, 0x5, 0xb, "0000000000000000fffd00b32100004000", 0x1, 0x10008})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
write(0xffffffffffffffff, &(0x7f00000001c0)="9d5c0567777051eb0d090a7f2b08ce9df6e31d853c2cab5868880e68140b4645714bdb40a9f92678fcce5e6cbd3c9ecb53a03827d502f786613b0c7605b1252d9a8e0ada6875c692bb9566bf3eeb90291173c510b0fc717b3886af42806488506db03b3d663a4ef30b78672c984379f601167228ee71bafc918a3ac0c931ae4ba06278238c3ccf79e0290e51506f1f34dd64d1862e881f2a35c6b2ace8", 0x9d)
r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r4 = semget(0x3, 0x4, 0x2b9)
semctl$GETALL(r4, 0x0, 0x6, 0xfffffffffffffffe)
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000100)="72f7dd96cea19d1320c2ea16ec136c3dd580ec99f5fd5376e3a4410947216bbcb63577afe0cd9115747cb18e7f10fb612803ab09c0c8527ac8f12dcae5f98d10a50e4832f61d9cfcbddcb3ba6dd191bd267943a6bad7e66da8dd03ba9baf7ae87028c6e07b3fba24f0ddd72645d878d3ce397c8d7c7b0445213a9e381690ad762eb549c0f7a06669309422fc6813a7fbf46156c60eac1989", 0x98)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000001300)=ANY=[])

3.99685049s ago: executing program 4 (id=702):
r0 = socket(0x800000018, 0x1, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x100], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x20000000, 0x0, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x0, 0x0, 0x0, 0x11000], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x1}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x4, 0x965, 0x0, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x800000, 0x0, 0x2}}})
r1 = kqueue()
kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0)
r2 = socket(0x18, 0x1, 0x0)
r3 = socket(0x18, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff})
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000000029, 0x3e, 0x0, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r3, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22)
r5 = socket(0x800000018, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = syz_open_pts()
ioctl$TIOCCONS(r6, 0x80047462, &(0x7f0000000040)=0x8000)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0}, 0x1042)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(r7, &(0x7f0000000340)="b10086af5b3604000000003571000000c4b6b43b95f6f0e30200004991f7aacf5f882b295dbdaa0500000051e2f0ad3ebbc853699a1f4548996b82e6f0ac84fb68139b676c70335c223e7d0c132bfa896443a42102000000720fd18bfb695564b670000000800400a6050000000000002002fb030c2300008abfb71d89e000040502000001000000003e4b45a827dde6070000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000b657000507141f7e3ec659bd6bbcb4ab62fdc720cc49ca824b12c67db75bc508ca1ed23ac842dcadd532ed3db8bd664e054233bfff0c906f39b42ea5be5fc7d0ab5f60b9bc16a3452071a1dc007d4f829f3ca990dfa4beb4f3958ba0df2aef8225d2bfffb7fda10f5c7231e14aab8cce93aed69841524965f8fcdfcd62f18d6edd071767b3e248e162057b770008ffac4026e54f4c998114d866183273c3d8c5792c62521df1d745a210b49b3c7953a742", 0x171, 0x0, 0x0, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt(r2, 0x1000000029, 0xe, &(0x7f0000000000), 0x0)
socket(0x6, 0x8005, 0x3)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="8faa02ede655fffeffffffff86dd605f6ad900483a0000000000000000000000000000000000fe8000000000000000000000010000aa02009078000010006006c33e00000000fe800000000000000000000000c82e5ad60de2b71d418d6b0000aaff0200000000000000000000000000033a0100000000"])

3.995836118s ago: executing program 0 (id=703):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x3ff}, {0x6, 0xa, 0x5, 0x400f}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="f968f845920e63", 0x7}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f95f84cf3080532b380920fdfe1a8899f603b6bbe471af73571c17c96bbdb6dd5fec77a54ecac9073e1212a01ac4638ff7f90f902b579a52bac68e4c5b07110c24024470413f0b761a2ab46c0f00d3045cb6be9569680aa651b3d51d21d48111", &(0x7f0000000080)=0x61, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x16, 0x0, @empty, @multicast2}, @udp={{0x1, 0x2, 0x8}}}}}})
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000700)="9b9b6d4c", 0x4}, {&(0x7f00000002c0)="968ce1c69d9498126527e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a7f2ec5c0d23a134ee65c5f70eee9f43f9c71342063cfdf9eb60982d3ed95723da70920bd1c6331d3e4e1891e80699e9058b7a39ae56ffa1c545b3dfa90cd36699a984bdaedff8dbf3d11d74e26036a", 0x7a}], 0x2)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000500)="670100000000000000f1b8d24e2217f981aa6a78ef1d357e382526b1616bf6932da7386d53c21ffd9037dcb8253c71b25cc4a113e83bfdc87b83dade35a400af2781f9a079d7dd4f6a483047274a1795a6980492ebcbe8c1aa188311d5ed0d597d521cef829ccd01f8a44b627559d73440d8be993d2c3da69715bb977e2e", 0x7e}], 0x1)
execve(0x0, 0x0, 0x0)

3.994482326s ago: executing program 4 (id=704):
ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0xf7ff, 0xffff0694, 0x5, 0x7, "97a2e900", 0x8, 0x9}) (async, rerun: 32)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) (rerun: 32)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x4) (async)
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x7) (async)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x7)
ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, 0x0) (async, rerun: 32)
execve(0x0, 0x0, 0x0) (async, rerun: 32)
open(0x0, 0x40, 0x102) (async, rerun: 64)
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) (async, rerun: 64)
r1 = kqueue()
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x80, 0x0)
renameat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00') (async)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f00000001c0)={'./file0\x00', 0x0, 0x6, 0x7ff, 0x1, 0x61b, 0x67b40639, 0x4, 0x0, 0x0, 0xfe9, 0x7fffffff})
syz_emit_ethernet(0x143, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004e660135006539bd0000000000000001ac1400aa892301e0000002ac1400aae00000020000b82300000000e0000002e000000200000008004e204e2000089078f14661b2c641752c8c96173d0400000000000000d635da87897a674618790f5cb0f4b9eafd33a404b632e75d7c214c961d91ba70dbbed11b59ced22702ece3ae6327377c375f1ae74a548d309dca020f3ea8049bad20b891a6e3cb8507e2f23f641b294641f981a48ddc6a9176c71910f700a0de547f4b6abb4596597324acde50e3f8c8b411677c9b6204aa08467dff1588abed132b725451ddfeedf57297285d2c0a5b333b8ebbe54fbd9317dbffc0d42c9485255fc5a332ac607d59837d080087ac1dc798cbf7e1cd174b37d16be203a4458cb9386b01f20dee7e547e69aec033f0de839aaf4d34e1cc7d850346cc7b0b5a6a305c4d4da41fb9ea1a270a3d564ed15acaf71438cfa17d263e9a538d4545326ea32f1de72748512386828cb15d4d0270f6f6"]) (async)
kevent(r1, 0x0, 0xe4a, 0x0, 0xa9fa, 0x0) (async)
select(0x40, &(0x7f0000000000)={0x6, 0x401, 0x2000000000000000, 0x7, 0xffffffffffffc2ec, 0x2, 0x8000, 0x7}, &(0x7f0000000040)={0x8, 0x5, 0x200, 0x6, 0x0, 0x4, 0x5, 0x8}, &(0x7f0000000140)={0x80, 0x5, 0x7, 0x7, 0x7f, 0xffffffff, 0x4, 0x7fffffffffffffff}, &(0x7f0000000180)={0xfffffffffffffd32})
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

3.993900198s ago: executing program 0 (id=705):
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x2000, 0x5)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="30c47992f29e3a166e6f783bdfe063346223993d29ca610a07d5af19b96eeec252b7b0377aca6096bcfb33bb563a26ffb6ea432358ec18e5914195093197dcdc6ea34d036f8a9f64bccbf32d5b91f1850cbe497a4232", 0x56}], 0x1)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x3}, {0xb1, 0x10, 0x1, 0x100}, {0x6, 0x5, 0x83, 0x400f}]})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)="d3b6e8e656ffffffffffffff5e0000000000000000001c158100000011000000", 0x20}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc02284fc157cbbd3f2c9772f90a6f320364b78b49186b36fc", &(0x7f0000000080)=0x2d, 0x0, 0x0)
setuid(0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x88)
writev(r3, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d", 0x89}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0)
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r2, &(0x7f0000000480)='\x00'/14, 0xe)
execve(0x0, 0x0, 0x0)

3.321930627s ago: executing program 2 (id=715):
syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYRES64])
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x2)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x80)

3.32158252s ago: executing program 6 (id=716):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
writev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="d3b6e8e656ffffffffffffff5e0000000000000000001c158100000011000000006e7c056199b8bc470000000000000069f73a0ef5cdd53e1085298943", 0x3d}], 0x1)
ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000000))
sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc02284fc157cbbd3f2c9772f90a6f320364b78b49186b36fc", &(0x7f0000000080)=0x2d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])

3.319879618s ago: executing program 2 (id=718):
mknod(&(0x7f0000000200)='./file0\x00', 0x20, 0x287e)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95)
r1 = socket(0x18, 0x1, 0x0)
getsockopt(r1, 0x29, 0x3e, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x139, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1", 0xffffffff, 0x159f})
mknod(&(0x7f0000000280)='./file0\x00', 0x61ebaed1ccd82476, 0x987)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
ioctl$TIOCSETA(r2, 0xcd504407, &(0x7f0000000740)={0x0, 0x0, 0x1000000, 0x0, "97a2224ff1c14649ebb178922cc9795a6b47c1d1"})
r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x4}, {r0, 0x8}, {r2}, {r3, 0x10}], 0x4, 0x0)
close(r0)
mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x6000, 0x1)
bind(0xffffffffffffff9c, &(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0xa)

3.317327402s ago: executing program 6 (id=719):
r0 = open(0x0, 0x40, 0x281)
mmap(&(0x7f0000447000/0x3000)=nil, 0x3000, 0x3, 0x3012, 0xffffffffffffffff, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
kqueue()
r2 = dup(r0)
ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000100))
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, 0x0)
setsockopt(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r4 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
r5 = kqueue()
kevent(r5, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x1aa03f95, 0x0)
r6 = socket(0x2, 0x1, 0x0)
socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r6, 0xc0206923, &(0x7f00000001c0))
seteuid(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r7 = kqueue()
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
kevent(r7, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
r8 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r8, 0x80206919, &(0x7f00000001c0))
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="8b4f69c83b01ffffffffffff86dd61b91d3a00002c03fe8000000000000000000000000000bb4079e811670a1ec2952a4234926cce07ffc0325e40b1c00c8149491ef063f233ec1532c9aed2182a044dc6d2bd422cab1253c4fa1f2fec1bb16c3d88588354dc3e1a8a7b0332de86df082a4a423e8236cb4cadfedffd0ae77487ef6cc83added38f08270749a17e226f312fe6e904d82db8fac647f1bfcd179c84915c4f5287f3bd412b300c6"])

3.291766152s ago: executing program 2 (id=721):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0x400101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = kqueue()
readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x65) (async)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x20000052e5) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x1b}, 0x4, 0x3d3, 0xffffffffffffffff, 0x0, 0x8, 0x9, 0xb, 0xffc}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async)
r3 = open(&(0x7f0000000380)='./file0\x00', 0x100, 0x4ebfac6bbaf781a)
setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) (async)
fcntl$lock(r3, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) (async)
select(0xff01, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x2, 0x4, 0x8000000000000000, 0xb}, &(0x7f0000000140)={0x1, 0xffffffffffffcca3, 0x101, 0x40000000003, 0x5, 0x7, 0x0, 0x6}, &(0x7f0000000300)={0x4, 0x8000000000000000, 0x3d, 0x100, 0x200009, 0xda0, 0x5, 0xe}, 0x0)

3.291535733s ago: executing program 6 (id=722):
mknod(&(0x7f0000000480)='./file1\x00', 0x2000, 0x201b1a)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000280)="b1000503000004000000010001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0)
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00')
open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0)

2.201730141s ago: executing program 2 (id=725):
r0 = syz_open_pts()
ioctl$TIOCSCTTY(r0, 0x20007461)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$TIOCSCTTY(r1, 0x20007461)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x1)
shutdown(r2, 0x0)
connect$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x0}, 0x8)
ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f00000000c0))
connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)
setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000180)=0x5, 0x4)
getsockopt$sock_int(r2, 0xffff, 0x1004, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$WSDISPLAYIO_LDFONT(r4, 0x8058574d, &(0x7f0000000280)={'./file1\x00', 0x4, 0x8, 0x8, 0x1, 0x6, 0xe4, 0x7fffffff, 0x2, 0x2, 0x1, 0x2})
shutdown(r2, 0x1)
ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000380)={&(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)='\x00', 0x1})
fcntl$lock(r3, 0x8, &(0x7f00000003c0)={0x3, 0x0, 0x101, 0x400, 0xffffffffffffffff})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x10004)
setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000440)="142ad6c582d464d0f10f969893b6ae7a7adbba6888fa8c7ebefdf7197b952f188c4b9aa6b9caa822b6", 0x29)
r7 = open(&(0x7f0000000480)='./file1\x00', 0x800, 0x18)
unlink(&(0x7f00000004c0)='./file0\x00')
getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000540)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, 0xc)
chown(&(0x7f0000000500)='./file0\x00', r9, 0x0)
sendto$unix(r4, &(0x7f0000000580)="23a61ee394ab098a3c66b148a42a9cb4d0d11a844674a573cb1b975f804f1d125f3a7f322bcab7a764ccf86c4a6b385313581b3ee4ca305a625c99fdb24b69f04f7593e1ba33bb5e3895c79c9f23c41afd9c5b0d617eb5d2d2bac08b23c86f222aeac820975425079e6eb6ca4e05ddf75553e0b3a2d578c181cdae2ceb4051fb8ce59da7fbc21581e5f4031e4f7541c86db996034c07f19c4ecc1f9336edf2ba09", 0xa1, 0x1, &(0x7f0000000640)=@file={0x0, './file1\x00'}, 0xa)
close(r2)
r11 = getuid()
r12 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000a00), 0x80, 0x0)
sendmsg$unix(r6, &(0x7f0000000b40)={&(0x7f0000000680)=@file={0x1, './file2\x00'}, 0xa, &(0x7f0000000980)=[{&(0x7f00000006c0)="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", 0xfc}, {&(0x7f00000007c0)="32bd1e66d859d4be2616098e0a1aeb9188a9e635c30b52e4ecf6972828d1ed9c75b5718bcc4d1011ff74a2c61c56394749f0b8e1f7203b3457c1ef39fcfcc094d9bcf052b02ab89cc7c43cd551327655b824c149b06e6d381d79b606e459762271f0102bd74bf204e54f5157f5", 0x6d}, {&(0x7f0000000840)="880eea6c113961ba97c4d9112fde683d86f6ad74b81563aa9fe6559590992596013d300af1bd637e56128d747b9f146b893ec3ce523429cfc2b46d9b7e4cf007480f97c8e250222f2acfd6db11103a1044d48b917a8f529cf6a3a400b70feed8a225c779a48b78a869d6528e454d9d148cdbfb836a45b32bf3975ee396570ce27fe769582c3590f387ceab953798448c56e53e8993", 0x95}, {&(0x7f0000000900)="32b14f5f75adb316daec5322b3e04b710df3359cc4f70ca59bfe6960b89577822555c4b96b622289df26", 0x2a}, {&(0x7f0000000940)="07fc7e1a2241b2cdb905ccbfe1d0301d3993f85f7cc5690a6f84e99b1413ff75c47d72cbe6bd9206864e7346612b5244c1314ea46fdc051f1bfe3a846623cb86", 0x40}], 0x5, &(0x7f0000000a40)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r11, r10}, @cred={0x20, 0xffff, 0x0, r8, r9, r10}, @rights={0x18, 0xffff, 0x1, [0xffffffffffffff9c, r12]}, @cred={0x20, 0xffff, 0x0, r8, r9, r10}, @cred={0x20, 0xffff, 0x0, r8, r9, r10}, @rights={0x30, 0xffff, 0x1, [r2, r3, r1, r3, r2, r3, r4]}], 0xc8, 0x400}, 0x4)
r13 = accept$inet6(r3, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r14 = socket$inet(0x2, 0x8000, 0x6d)
poll(&(0x7f0000000c40)=[{r13, 0x8}, {r14, 0x10}, {r7, 0x40}, {r2, 0x10}, {0xffffffffffffffff, 0x1}, {r1, 0x2}], 0x6, 0x0)

2.200501298s ago: executing program 6 (id=727):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x6, 0x3}, {0xb1, 0x10, 0x1, 0x100}, {0x6, 0x4, 0x83, 0x400f}]})
sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r1, &(0x7f0000000480)='\x00'/14, 0xe)
syz_emit_ethernet(0x71, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x5, 0x63, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @broadcast}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x12, "590400000000000000da6b826896349c"}]}}, {"935b95b6a1fa073099b4e3a3decf5dda5e3c969a76a76e2a196b00"/39}}}}}})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x6, 0x3}, {0xb1, 0x10, 0x1, 0x100}, {0x6, 0x4, 0x83, 0x400f}]}) (async)
sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) (async)
write(r1, &(0x7f0000000480)='\x00'/14, 0xe) (async)
syz_emit_ethernet(0x71, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x5, 0x63, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @broadcast}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x12, "590400000000000000da6b826896349c"}]}}, {"935b95b6a1fa073099b4e3a3decf5dda5e3c969a76a76e2a196b00"/39}}}}}}) (async)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async)

2.153196684s ago: executing program 1 (id=728):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='s', 0x1}], 0x100000000000038b}, 0x1)
r0 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil)
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x16}, 0x4, &(0x7f0000000100)="9f70b9a8fb92b0e1249a285cfa719a9d54b60a1d994561cd470123b63bdc622ee96c2e7e6b002bfa61e9a8a14d23b59ae375d78c38412638", &(0x7f0000000140)=0x38, &(0x7f00000002c0)="f05cf79e366f92e0082590044baecce4dde72c0387e357cd83ec8170d66a7e66cdf0edd5611d0c5adb4c2409da97f3556ac6c0bd26f7757f119e8cd5872f9ffe275c09ca174d21c377b6daacecdc56af0e4e1ce803c3d5e1b455a2d056e6e854ca2070eeecc40833fb4e99eb8952259222e0ee336753bc5a6c6da95e3c490aef89f4b5d6c2524e16e4b65339fa2b0633b532039fe97e9b6436a3be7cfb8d1a32cfb14adf3d4ada947aad04ce8a095b090c1cab96598f4e9dc6d581", 0xbb)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x3, 0x8}, {0x26, 0x5}], 0x2})
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r2, 0x80184404, 0x0)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r3 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
r5 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r5, 0x80206997, &(0x7f00000001c0))
recvmmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0}, 0xfffffffffffffeb1, 0x841, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6)

2.150296084s ago: executing program 2 (id=730):
symlink(&(0x7f0000000140)='.\x00', &(0x7f0000000100)='./file0\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
ftruncate(r0, 0x8531)
r1 = syz_open_pts()
fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x81, 0x1000300000000})
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000002})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[])
r4 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0xa)
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000080)='./file0\x00', r5, 0x2})
r7 = open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0)
close(r7)
close(r5)
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='r\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xb)

2.149230319s ago: executing program 1 (id=731):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$VT_OPENQRY(r0, 0x40047601, &(0x7f0000000080))
openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) (async)
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r1, 0xc290560b, &(0x7f0000000000)={0x1, 0xfff, 0x210d})

2.090879157s ago: executing program 2 (id=732):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
r1 = socket(0x18, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000100)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0)
socket(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x900)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x8ecba1eee9e3bf3f)
truncate(0x0, 0x5ffffffffd)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000))
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1810, r5, 0x9)
truncate(0x0, 0x620000000)
r6 = socket(0x2, 0x1, 0x0)
r7 = dup(r6)
shutdown(r6, 0x1)
r8 = dup2(r7, r6)
select(0x40, &(0x7f0000000300)={0x1, 0xffffffffffff8000, 0xb4, 0x8001, 0x5, 0xc959, 0x91, 0x5441}, &(0x7f0000000340)={0x7f, 0x9, 0x6f4d, 0x4, 0xfffffffffffffff9, 0x3ff, 0x4}, 0x0, 0x0)
rename(&(0x7f0000000280)='./file0\x00', 0x0)
r9 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
writev(r9, &(0x7f00000000c0), 0x0)
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00')
ioctl$BIOCSRTIMEOUT(r8, 0x8010426d, &(0x7f0000000100)={0x2eaf, 0xe6c})
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

2.089120849s ago: executing program 6 (id=733):
syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYRES64=0x0])

2.072349076s ago: executing program 1 (id=734):
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0xfffffffe, 0x4)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0xa)
r1 = msgget$private(0x0, 0x22)
msgget(0x3, 0x244)
msgctl$IPC_RMID(r1, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x5, 0x800440}, {0x84, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]})
r2 = socket(0x18, 0x2, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="000000d860a82060dec3e59be543bfcb449377b76614632250b46f16a822dabfe1792314b1ed12705beea02875758ce32405ccc046fcc745bf8c54e0610c14dd677cae275cf8cff389c01d23bd2f", 0x0, 0x0, 0x0)
ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0))
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
mknod(&(0x7f0000000080)='./file0\x00', 0x1ffa, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181c, 0x100000000000008, 0x9}, 0x0, 0x0, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r6 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f00005e4000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x8}], './file0/file0\x00'})
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2)

2.072138108s ago: executing program 6 (id=735):
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x801)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x10005, 0x0})
unlink(&(0x7f0000000240)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x64, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x68, 0x0, 0x0)
setuid(0xee01)
connect$unix(r1, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x10001, 0x80000004, 0x80000001, 0x80000000, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x4, 0x0, 0x8, 0xfffffff8}, {0x8, 0x5, 0x0, 0xafd}, {0x1, 0x800, 0x7}, {0x401, 0x7fffffff, 0xe, 0xfffffffd}, {0x2, 0x6, 0x3, 0x1}, {0x5, 0x1, 0x4f8, 0x6d}, {0xa, 0x804, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0x20000000, 0x6}, {0x4, 0xffffaac4, 0x9, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xb, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30000}]})
r2 = socket(0x18, 0x3, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000100))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_timeval(r3, 0xffff, 0x1006, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r4 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100))
execve(0x0, 0x0, 0x0)

1.980083879s ago: executing program 5 (id=739):
write(0xffffffffffffffff, &(0x7f0000000340), 0xd4e688a67930cd)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
close(0xffffffffffffffff)

1.951440626s ago: executing program 5 (id=742):
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$lock(r0, 0x9, &(0x7f00000000c0)={0x0, 0x1, 0x7ffffffffffffffb, 0x1000100000004})
r1 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1)
fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x2, 0x2, 0x8, 0x0, r1})
sysctl$kern(&(0x7f0000000140)={0x0}, 0x0, &(0x7f0000000000)="44aa6d99733c538c99027f0815218f", &(0x7f0000000080)=0xf, 0x0, 0xffd2)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="172160030f70", @empty, [], {@ipv6={0x86dd, {0x6, 0x6, "0cf5b8", 0x8, 0x0, 0x1, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@fragment={0x33, 0x0, 0x4, 0x0, 0x0, 0x8, 0x67}]}}}}})
sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x36}, 0x4, &(0x7f00000001c0)="af4b2ea20fc41af3ca258dde5b1347b90b", &(0x7f0000000200)=0x11, &(0x7f0000000240), 0x0)

1.8811308s ago: executing program 5 (id=744):
nanosleep(&(0x7f0000000280)={0x0, 0x1e49824d}, 0x0)
seteuid(0xffffffffffffffff)
shmget(0x0, 0x4000, 0x602, &(0x7f0000ff9000/0x4000)=nil)
shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
close(0xffffffffffffffff)
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f00000000c0)='x\x00')
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000009c0)="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", 0x1d4}], 0x1)
ioctl$TIOCSETA(r0, 0xcd504404, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x6})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfeffffffffffffff})
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))
sysctl$kern(&(0x7f00000000c0)={0x1, 0x18}, 0x2, &(0x7f0000000200)="71f91eca6e5b134eb788237b3a1080132a79e201e3a2ce3471ac00501dd4a34bfec305000000000016715f8bb168ea9141b0c46b11f0e6cf52b7d99d82088e3efb7f6b648bf9854cd0797bdf3a0a5e5213eae1398714925b4f8524963581060862912d7c45e0f784d7388040b731952e0479b5018f4b34b8228fbf0c42665094fb1bbf63206a53fdd7cbfab4d7018898390f841c38de88adc12815ccfb316674ea2de2c457cb6e21b8aaf49a55a09f0a5554e633fd549836f12df2000000", &(0x7f0000000100)=0xbe, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0)

496.385382ms ago: executing program 3 (id=754):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x117, 0x200000b, 0x101, 0x80000001, 0x80000001, 0x80, 0x10, [{0x0, 0x17, 0x0, 0x71000}, {0x5, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x40200726, 0x2800, 0x7}, {0x2, 0x55d, 0x5, 0x1}, {0xce3, 0xffffffff, 0x4f8, 0x6e}, {0x6, 0x803, 0x14, 0xa}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1de, 0x10001, 0xc, 0x6}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0xfff, 0x406}, {0xc, 0x7, 0xffff215d}, {0x0, 0x21, 0x1002, 0x30004}]}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x400000000, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
r1 = socket(0x2, 0x2, 0x0)
open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) (async)
symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x1, 0x2, 0x200}, {0x2, 0x2, 0x3, 0x1}, {0x1dbe, 0x5, 0x6, 0xbfb6}]}) (async)
open(&(0x7f0000000300)='./file0/file0/../file0/file0\x00', 0x80, 0x30) (async)
ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) (async)
r2 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) (async, rerun: 64)
read(r2, &(0x7f0000000340)=""/4096, 0x1000) (rerun: 64)

490.615552ms ago: executing program 7 (id=755):
writev(0xffffffffffffffff, 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x46a32b33)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0)
ioctl$BIOCSRTIMEOUT(r3, 0xc0307006, &(0x7f0000000080)={0x1, 0x10})

487.792092ms ago: executing program 3 (id=756):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
getpeername$unix(r0, 0x0, &(0x7f00000000c0))
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8000000000000001}) (async)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x48)
r3 = kqueue() (async)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="dd5bd70bbb4bb98f4e0d1ddcdceff73b683b86b9", 0x14}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="b119000066ec31f2fa0026399be533bfcb4c96ff54000000000247260882675d066a1329135711654b9e372eeb9ba36ee76ceb70a9a2e79ccdd66a0640", &(0x7f0000000080)=0x3d, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_emit_ethernet(0xe8, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000ffffffffffff807ceba73ce7781bda879dc769c1f7c874e6a36747e3f77e2713e625d63970159cd5ee60bdb26bb6580c6472a8dc5df7f1a64ba4f2fe4ad9d00c6ef25d601f75f6a1d7936886db94a0a44bc9c892bb61a8c9cf36c3851887b7cfef7ae7d47e5a6c65ee377e34ae4980b00990def3ff281fd8261f62d71c21b325dd165e01cc9b669ddbe189ea45c3dca03af533dca3cbac89b344e9390f18c6776e8d14df1d6c22c97d92cd7a1993b966a00bee52714acb7fb5253eabb73d874f3513c796f295fb0766e29079e849ef67bc350e2b79f90e82e493f83a754b636958eb"]) (async)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x65, 0x0})
write(r5, &(0x7f0000000480)='\x00'/14, 0xe)
kevent(r2, &(0x7f0000000300)=[{{r0}, 0xfffffffffffffffd, 0xe2, 0x8, 0x2000000006, 0x101}, {{r5}, 0xfffffffffffffffb, 0xd1, 0x40, 0xf, 0xffffffffffffff34}, {{}, 0x1, 0xd0, 0x4, 0x7, 0x9}, {{}, 0xfffffffffffffff9, 0xc1, 0x80000000, 0x94f, 0x357a}, {{r3}, 0xfffffffffffffff8, 0x0, 0x1, 0x9, 0x10000}, {{r1}, 0xfffffffffffffffe, 0xb46d82ef5b8e4108, 0x41, 0x36b, 0xb84c}, {{}, 0xfffffffffffffff8, 0xbc, 0xfffff, 0x7ffc, 0x4}, {{r4}, 0xfffffffffffffffa, 0x20, 0x8, 0x200000000003, 0x1}, {{}, 0xfffffffffffffffc, 0x0, 0x1, 0x8, 0xd}, {{r4}, 0xfffffffffffffff9, 0x10, 0xf0000000, 0x2, 0x7}], 0x101, &(0x7f0000000180)=[{{r2}, 0xfffffffffffffffd, 0x62, 0x0, 0x8, 0xfffffffffffffffd}, {{r5}, 0xffffffffffffffff, 0x50, 0x20}], 0x6, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8f5f84cf71b59c7a00c37082", &(0x7f0000000080)=0x3d, 0x0, 0xffffffffffffff57) (async)
r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TIOCGWINSZ(r6, 0x40087468, &(0x7f0000000100)) (async)
r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) (async)
ioctl$TIOCOUTQ(r6, 0x40047473, &(0x7f00000001c0)=0x9) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43260c7df9b, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0x19, 0x10, 0x0, 0x3ff}, {0x16, 0xa, 0x5, 0x400f}]}) (async)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="b07eec3d06422d596f51e337031a7b4565ef3bf6b55f88162ed28c476ec2625b89ca9982fb12581a5bf6b25629ae8c8b6eaae4a3f7d8d3e350526685", 0x3c}], 0x1)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000004c0)="008451af1969ae090000009875bd8e74e870c2074144695ea5351629e13da7988616a0e8e48e245a", &(0x7f0000000080)=0x28, 0x0, 0x0)
mprotect(&(0x7f00005e1000/0x4000)=nil, 0x4000, 0x2)

485.385269ms ago: executing program 0 (id=757):
syz_emit_ethernet(0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r1 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r2, 0x40046b01, &(0x7f0000000200)={0x0, 0x10000, 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000300)=[{0x7, 0x9, 0xcd, 0x6}, {0x4d, 0x0, 0x0, 0x43e}, {0x6, 0xfd, 0x0, 0xffffff7e}]})
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[])
syz_emit_ethernet(0x0, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async)
ioctl$VNDIOCCLR(r2, 0x40046b01, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000300)=[{0x7, 0x9, 0xcd, 0x6}, {0x4d, 0x0, 0x0, 0x43e}, {0x6, 0xfd, 0x0, 0xffffff7e}]}) (async)
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[]) (async)

484.504361ms ago: executing program 5 (id=758):
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_pts()
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xd, 0xfffffff9}, {0x8, 0x8000b86, 0xffffff7d, 0x9}, {0xfff, 0x8800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xe, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0x5}, {0xfffffffd, 0x9, 0x4, 0x30005}]})
mprotect(&(0x7f000040b000/0x2000)=nil, 0x2000, 0x4)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]})
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000280)="d3ee0811d73c7310f8ff21a1b26bc1ccdcf57f4a000000090000000000349cba4a7b35a4657d919f32df21e5", 0x2c}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc02284fc157cbbd", &(0x7f0000000080)=0x1c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[])
socket(0x2, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r3}, 0x2, 0x0, 0x8, 0x4, 0x5}], 0x3, 0x0, 0x6, 0x0)
sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x2}, 0x65, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'})
poll(&(0x7f0000000340)=[{r2, 0x1}], 0x1, 0x9)
r5 = dup(r1)
kevent(r2, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffb, 0x3a, 0xfffff, 0x2, 0x5}], 0xffffffd7, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffe, 0x52, 0xf0000000, 0x1, 0xfb}, {{r5}, 0x7, 0xb, 0x80000000, 0x3, 0x9}, {{r0}, 0xfffffffffffffffb, 0x96, 0x4, 0xac, 0x7}], 0x0, &(0x7f0000000140)={0x400000000000000, 0x4})
poll(&(0x7f00000011c0)=[{r1, 0x4}], 0x1, 0x8000007)

433.103052ms ago: executing program 3 (id=759):
sysctl$kern(&(0x7f0000000000)={0x1, 0x39}, 0x2, &(0x7f0000000140)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be3272000000004d81e8c6efb7eec1db1400d8b263d59dfed66c4ed38fe03c278e4c5d8ee99bf0d5bb7391465f353ee9c8914b6e2c976099e18db4d06c986dcfc9f18aa4c30cbc956139ed6d0197c4ec67f672b994b77dea7b4afe7885757c915e495aa858d16b5bd0077d15738a250c078c4411c8960631c3310fefc953bc", &(0x7f0000000100)=0xe1, 0x0, 0x0)
ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "01000000d000"})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4)
sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4)

429.60521ms ago: executing program 5 (id=760):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/248, 0xf8) (async, rerun: 32)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (rerun: 32)

423.449872ms ago: executing program 0 (id=761):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x6, 0x100000002, 0xb, 0x7})
r0 = socket(0x800000018, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1842, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
r2 = semget(0x0, 0x1, 0x281)
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000240)=""/122)
semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000040))
r3 = semget(0x1, 0x1, 0x104)
semctl$GETZCNT(r3, 0x3, 0x7, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000200)=0xc)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
ioctl$TIOCSETA(r4, 0xc4504445, &(0x7f0000000740)={0x42f, 0xffff, 0x40a9, 0x20000003, "0400000000800000ebb178d952d6d31962fff0d1", 0x6, 0x2})
sysctl$kern(&(0x7f0000000040)={0x1, 0x4e}, 0x61, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0xd, 0x0, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xfffffffe, 0x4)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r5 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
r6 = msgget$private(0x0, 0x10)
msgsnd(r6, &(0x7f0000000180)=ANY=[], 0xe2, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil)
shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x0)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
msgrcv(r6, &(0x7f0000000780)={0x0, ""/18}, 0x1a, 0x2, 0x1000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x48e}, 0x6, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x4, 0x4000000807})
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r8 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000000000)=0x10000, 0x4)

422.969676ms ago: executing program 3 (id=762):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x10, 0x5, 0x4)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r0, 0x1000000029, 0x9, 0x0, 0x0)

422.433832ms ago: executing program 5 (id=763):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0)
ioctl$FIONREAD(r0, 0xc0206921, &(0x7f0000000380))
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000280)={0x2, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x200000], [], [{0x1}, {0x0, 0x0, 0x4}], {0xfffe, 0x0, 0x0, 0x7fffffffffffffff}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
select(0x40, &(0x7f0000000000)={0x1b, 0x6, 0x4, 0x4, 0xb, 0xfffffffffffffff5, 0x200, 0xfffffffffffffffc}, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x8003, 0x0)
mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x2, 0x71000}, {0x7, 0x8, 0x9, 0xfffffff9}, {0x8, 0x8000b86, 0xffffff7c, 0x9}, {0x9d37, 0x8800, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x9, 0x4, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES64])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x3, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
write(r4, 0x0, 0x0)
write(r2, &(0x7f00000001c0)="ed365aa405e3a4ac8f2e58bbfcd858623884ea423d56765fbaeb7ba173380700000000400000d6a2dd351560fdc0324197e20c136a6ea815bd04f80537b92bf8b7671413acf98ffd14057d", 0xffef)

220.434075ms ago: executing program 3 (id=764):
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x8)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x8)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = dup(r1)
sendmsg(r2, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001dc0)="508c4f890f5f11177f48b48c4b48af693e1ff30206c8f7ab84255bcab25951cf2d0881f68db2df88ccbabe68609a89dd6ec58d853697d6977a1ee7a786d3c6cedc9a8ba444bd79c21023d53387c29ecaf44ccab0787c3197d33405a501b107313fb3c4efb4f79d37982ad516e02ba689a1c7be4a8ec59491eac62d40ccf1cca2417d78f2d4c27f8f9d9080ececd0c51b1e4f96eeffcf6622c31b2ddc78af2376d46c3d7944d243b22035b22cc474d043fcb1d171201d9598e1c20913c02c3dce3a6d7ce98ae9a8f465d37397d755c3b73f05d8dcc7", 0xd5}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="c9aad688903545106f81127dce", 0xd}, {&(0x7f0000002f00)="d770931ab6792880246a208764eb0be182", 0x11}, {&(0x7f0000002f40)="9b6cab27508c52d01484041bf53d68669b285206a4b9c1b134ddf70a45f56eb3b45294096569dd9d70f6fe492104cfba6bf51902e27664b6e286f2b7e964af7ea6f1ae10f67323cc2e66462c9f59c675ae6577502f418f4ce97252614694", 0x5e}], 0x5, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/952], 0x3b8}, 0x40c)

218.751238ms ago: executing program 3 (id=765):
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x40)
open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x4, 0x0, 0x0, @rand_addr}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0x6}}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
pwritev(r2, &(0x7f0000000000)=[{0x0, 0x47}], 0x1, 0xa)
setsockopt$inet_opts(r1, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4)
sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x2, 0x1, 0x0)
setsockopt(r3, 0x0, 0x21, &(0x7f0000000000)='\v\x00\x00\x00', 0x4)

215.345681ms ago: executing program 7 (id=766):
rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') (async)
symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r0 = syz_open_pts() (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000000)="ed", 0x1)
recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0xfffffffffffffe8e, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) (async)
shutdown(r2, 0x0) (async)
readv(r2, &(0x7f0000000600)=[{0x0}], 0x1) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"])
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x2, 0x1, 0x0)
bind(r3, &(0x7f0000000000), 0x10) (async)
listen(r3, 0x0) (async)
r4 = socket(0x2, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
sendto(r4, &(0x7f0000000080)="0101", 0xfd84, 0xe1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000008c0)={0x0, 0xb}, 0x10, 0x0, 0x0) (async)
close(r1)
close(r0)
syz_open_pts()
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x7)
msgsnd(0x0, &(0x7f0000000280)={0x3}, 0x8, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="a568c14719210631c4cb449655740cc28b13d1ca0d58e11a950594af54602162cbed1b4737f3f8a5fa5bc91b3a45de8f244741a2", 0x34}, {&(0x7f00000009c0)="7d57fab696ef30b93490177074860d", 0xf}], 0x2) (async)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x50)
ioctl$TIOCSCTTY(r0, 0x20007461) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x2) (async)
listen(r2, 0x3)

211.702872ms ago: executing program 7 (id=767):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
ioctl$BIOCSETIF(r0, 0x40384900, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80184902, &(0x7f0000000040)={0x3, '.\x00'})
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000180)='./file0\x00')
r1 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x124)
close(r1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f00000001c0)={0x1, 0x9})
flock(r1, 0x8)
socket(0x18, 0x2, 0x9ef)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x4, 0x1, 0x0, 0x40005}, {0x3c, 0xff, 0x20, 0x407}, {0x4006, 0x22, 0x3, 0x2}]})
write(r4, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0x40b)
ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000300)={0x0, 0xfffffff8, 0x0, 0x8, "000000000000000051de6e5f436aa4ae00", 0xfffffff9, 0x10005})
sysctl$kern(&(0x7f0000000800)={0x1, 0x4a}, 0x2, 0x0, 0x0, &(0x7f0000000980), 0x0)
sysctl$vfs_ffs(&(0x7f0000000380)={0xa, 0x1, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0)
fcntl$setflags(r1, 0x2, 0x0)
open$dir(&(0x7f00000002c0)='./file0\x00', 0x10000, 0x101)
ioctl$BIOCSRSIG(r3, 0x80044272, &(0x7f0000000080)=0x6)
ioctl$SPKRTONE(r3, 0x80085301, &(0x7f0000000000)={0x3, 0xab35})

199.259876ms ago: executing program 7 (id=768):
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x67, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x14, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7ff, 0x0, 0x1}}}}}}})

744.315µs ago: executing program 7 (id=769):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f0000000140)=[{0x8d, 0x2}, {0x45, 0x1ff}], 0x2})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x10d)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0)
setrlimit(0x8, 0x0)
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000100)={&(0x7f00000002c0)=[{0x87, 0xfffd}, {0x100, 0x8}], 0x2})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2e}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000300)="314a625eb0d2b4314750d5d5fa2570b02c27eeeb5352b632a88f62c605e2001acbb037b1d63a29e3987858bc60ff7166ffa272000000000ec43b9f47fd9ed7a44500b1000000000000", 0x49, 0x9, 0x0, 0x0)
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01)
open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0)
flock(r3, 0x1)
openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
mprotect(&(0x7f00003ed000/0x3000)=nil, 0x3000, 0x2)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
socket(0x18, 0x2, 0x0)
r4 = syz_open_pts()
readv(r4, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1)
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000140)={0x1, 0x0, 0xfbfffffe, 0x0, "d76c2b44f7fff7ee1e2630000000000000c000"})
syz_open_pts()
ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000040)={0x7ff, 0x800c, 0xfffffffd, 0xe33f, "00674700000000006a0000b5beb1ff427d3fd400", 0x10000006, 0xfffffffa})
setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})

0s ago: executing program 7 (id=770):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xfffe, 0xc, 0x30, 0x2}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000000080)={0x0, 0x4}, 0x10, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r2, 0x6, 0x1, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000003200)={0x4, 0x2, 0x0, 0x21}, 0x4, &(0x7f0000003240), 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x14c)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181c, 0x100000000000008, 0x9}, 0x0, 0x0, 0x0)
open(0x0, 0x80, 0x120)
select(0x40, &(0x7f0000000280)={0xe5a, 0x40, 0x3ff, 0x7, 0xe83, 0x0, 0x0, 0x3}, &(0x7f00000002c0)={0x5, 0x6, 0xfffffffffffffffa, 0x4, 0x7fffffff, 0x0, 0x7f, 0x3000000000000000}, &(0x7f0000000340)={0x80, 0x7fffffff, 0x40, 0x2, 0x10000, 0x921, 0xb, 0x3}, &(0x7f0000000380)={0x1, 0x6})
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="b100050300000400000000000700000033", 0x11, 0x0, 0x0, 0x0)
r3 = socket(0x18, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="77bd673bb5b8cc0c16ed080500000000000000d7f4601faa903493e339865dce0f225da73c1eede2526d", 0x2a}], 0x1)
r4 = msgget$private(0x0, 0x10)
msgrcv(r4, &(0x7f0000000600)={0x0, ""/41}, 0x31, 0x2, 0x0)
sysctl$kern(&(0x7f0000000200)={0x1, 0x1d}, 0x3fffffffffffffc0, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r3, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
sendto$unix(r5, &(0x7f0000000400)="2f474549a921985e86e52637ac502001a52eb95176b32ce4d0743581e9a8b0fedd111b241907fb67ba5019b025eedaa8211b52fc3333324e20c65d9f0c24413e04caa3b75fff5c19583a010c315ef4f69fa4dc953112ecb012185eee378b3f4b4ca72829c359accf47a8b46178e59e362c8a9c6698a17fa3998148e4b1452447a705375af7fcdef830fb0d0b3002bc069df58d763dfd2fc4fc53933649c527eb651019e7d039a17640bab061575b2803e9cd7b1707dec3f909e36a6192d16e62dafa8ace2311ffa971ddc1407d9e39c2c4b690aae4f3da4bc3", 0xd9, 0xa, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0xa)
syz_emit_ethernet(0x9f, &(0x7f0000000540)=ANY=[@ANYBLOB="8acab156bc15aaaaaaaaaabb88a81a0081004d00080045a400890068f6e700f090787f000001ac1400bb4e82a08c05089078fa67bf1b1c6405fa9985263d177a6cf8d734a9f28c654f416cd8c29ed5541fddefa1391a46ede6a9420f56323473e0ab74450512dc07ef3415f05c6bfb1c017b2a069d010d77197b18162feef28859bc4a9c72c092c8622a0817144b04041c2d43aadc6928d7eb5b38cc33e51a"])
poll(0x0, 0x0, 0x401)
syz_open_pts()
syz_open_pts()
syz_open_pts()
r6 = socket$unix(0x1, 0x5, 0x0)
listen(r6, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
fuse: Cannot find fusebuf
pppx: unable to set addresses for pppx1, error=17
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
uvm_fault(0xffffffff838c9688, 0xffff8000014f404a, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      arp_rtrequest+0x66f:    movzwl  0xc(%r15,%rbx,1),%ecx
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*170161  76533      0           0  0x4000000    0  syz-executor
 424263  30899      0         0x2          0    1  syz-executor
arp_rtrequest(ffff800000039058,1,fffffd806bc66700) at arp_rtrequest+0x66f
rtrequest(1,ffff80003c41b8d0,0,ffff80003c41b850,0) at rtrequest+0xc5c
rtm_output(ffff8000014e7e00,ffff80003c41b978,ffff80003c41b8d0,0,0) at rtm_output+0x876
route_output(fffffd806cc41300,ffff8000014d7cb8) at route_output+0x9a1
route_send(ffff8000014d7cb8,fffffd806cc41300,0,0) at route_send+0xd7
sosend(ffff8000014d7cb8,0,ffff80003c41bb18,0,0,808) at sosend+0x804
sendit(ffff80003c4427e8,3,ffff80003c41bc10,808,ffff80003c41bcc0) at sendit+0x721
sys_sendto(ffff80003c4427e8,ffff80003c41bd70,ffff80003c41bcc0) at sys_sendto+0x8d
syscall(ffff80003c41bd70) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa917c59e920, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xffffffff838c9688, 0xffff8000014f404a, 0, 1) -> e
ddb{0}> trace
arp_rtrequest(ffff800000039058,1,fffffd806bc66700) at arp_rtrequest+0x66f
rtrequest(1,ffff80003c41b8d0,0,ffff80003c41b850,0) at rtrequest+0xc5c
rtm_output(ffff8000014e7e00,ffff80003c41b978,ffff80003c41b8d0,0,0) at rtm_output+0x876
route_output(fffffd806cc41300,ffff8000014d7cb8) at route_output+0x9a1
route_send(ffff8000014d7cb8,fffffd806cc41300,0,0) at route_send+0xd7
sosend(ffff8000014d7cb8,0,ffff80003c41bb18,0,0,808) at sosend+0x804
sendit(ffff80003c4427e8,3,ffff80003c41bc10,808,ffff80003c41bcc0) at sendit+0x721
sys_sendto(ffff80003c4427e8,ffff80003c41bd70,ffff80003c41bcc0) at sys_sendto+0x8d
syscall(ffff80003c41bd70) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa917c59e920, count: -10
ddb{0}> show registers
rdi                             0x20
rsi                             0x90
rbp               0xffff80003c41b720
rbx                             0xde
rdx                                0
rcx                0x100040600080100
rax               0xfffffd805c7d95e0
r8                              0x10
r9                0xfffffd806bc66700
r10               0x3966dff32f9142e7
r11               0xf06541b0b3395b0d
r12                             0x3e
r13               0xfffffd805c7d9500
r14               0xfffffd806bc66700
r15               0xffff8000014f3f60
rip               0xffffffff820c31cf    arp_rtrequest+0x66f
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80003c41b6a0
ss                              0x10
arp_rtrequest+0x66f:    movzwl  0xc(%r15,%rbx,1),%ecx
ddb{0}> show proc
PROC (syz-executor) tid=170161 pid=76533 tcnt=3 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=50, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c443228,0xffff800037ff1c68
    process=0xffff80003c41e6e0 user=0xffff80003c416000, vmspace=0xfffffd806c23e1f8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=1
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 76533    7238  99879      0  3        0x80  fsleep        syz-executor
*76533  170161  99879      0  7   0x4000000                syz-executor
 76533   71488  99879      0  2   0x4000000                syz-executor
 99682    2524  23087      0  3        0x80  fsleep        syz-executor
 99682  361014  23087      0  2   0x4000000                syz-executor
 63451  126199  30899      0  3        0x80  fsleep        syz-executor
 63451  323772  30899      0  3   0x4000080  msgwait       syz-executor
 37880  388185  29146      0  3        0x80  fsleep        syz-executor
 37880  302940  29146      0  3   0x4000080  fifow         syz-executor
 20305  299486  64703      0  3        0x80  fsleep        syz-executor
 20305  480650  64703      0  3   0x4000080  sbwait        syz-executor
 21983  287263  24233      0  3        0x80  fsleep        syz-executor
 21983  102914  24233      0  3   0x4000080  msgwait       syz-executor
 29146  203529  48261      0  2       0xc82                syz-executor
 81021  161741      0      0  3     0x14280  nfsidl        nfsio
 46065   76619      0      0  3     0x14280  nfsidl        nfsio
 63351  301727      0      0  3     0x14280  nfsidl        nfsio
 20918  502816      0      0  3     0x14280  nfsidl        nfsio
  8603  133155      0      0  3     0x14280  nfsidl        nfsio
 34562  343593      0      0  3     0x14280  nfsidl        nfsio
 79428  100627      0      0  3     0x14280  nfsidl        nfsio
 21056  392296      0      0  3     0x14280  nfsidl        nfsio
 88325  157859      0      0  3     0x14280  nfsidl        nfsio
  2727  523828      0      0  3     0x14280  nfsidl        nfsio
 53056  295649      0      0  3     0x14280  nfsidl        nfsio
  8165  478830      0      0  3     0x14280  nfsidl        nfsio
  4359  245931      0      0  3     0x14280  nfsidl        nfsio
 92365  149380      0      0  3     0x14280  nfsidl        nfsio
 22879   68575      0      0  3     0x14280  nfsidl        nfsio
 28879   21319      0      0  3     0x14280  nfsidl        nfsio
 34165  318478      0      0  3     0x14280  nfsidl        nfsio
  3593  429627      0      0  3     0x14280  nfsidl        nfsio
 24791  379523      0      0  3     0x14280  nfsidl        nfsio
 91427  122777      0      0  3     0x14280  nfsidl        nfsio
  6376  434465      0      0  3     0x14200  acct          acct
 19835  333148      0      0  3     0x14200  bored         sosplice
 30899  424263  48261      0  7         0x2                syz-executor
 36026  328604  48261      0  2         0x2                syz-executor
 64703  247770  48261      0  3        0x82  nanoslp       syz-executor
 19556  299718  48261      0  3        0x82  wait          syz-executor
 99879  246373  48261      0  2       0xc82                syz-executor
 23087  338559  48261      0  2       0xc82                syz-executor
 24233  313134  48261      0  3        0x82  nanoslp       syz-executor
 48261   34279  47701      0  3         0x2  netlock       syz-executor
 47701  175792  48914      0  3    0x10008a  sigsusp       ksh
 48914  284050  57989      0  3        0x98  kqread        sshd-session
 57989  488844  35611      0  3        0x92  kqread        sshd-session
 24618  239164      1      0  3    0x100083  ttyin         getty
 35611  341969      1      0  3        0x88  kqread        sshd
 36388  430295  25690     74  3   0x1100092  bpf           pflogd
 25690  197880      1      0  3        0x80  sbwait        pflogd
 90150  205403  81025     73  3   0x1100090  kqread        syslogd
 81025  355849      1      0  3    0x100082  sbwait        syslogd
 11401   85373      1      0  3    0x100080  kqread        resolvd
 89995  323494  31053     77  3    0x100092  kqread        dhcpleased
 40161  331841  31053     77  3    0x100092  kqread        dhcpleased
 31053  211025      1      0  3        0x80  kqread        dhcpleased
 88029  131495      0      0  3     0x14200  bored         smr
 95270   61271      0      0  2     0x14200                zerothread
 92139  402549      0      0  3     0x14200  aiodoned      aiodoned
 73361  128644      0      0  3     0x14200  syncer        update
 98253  362560      0      0  3     0x14200  cleaner       cleaner
 83984  457142      0      0  3     0x14200  reaper        reaper
 73954  502283      0      0  3     0x14200  pgdaemon      pagedaemon
  8348  154716      0      0  3     0x14200  bored         viomb
 28290  507067      0      0  3  0x40014200  acpi0         acpi0
 67924   95024      0      0  3  0x40014200                idle1
 71718  418961      0      0  3     0x14200  bored         softnet3
 65931  442228      0      0  3     0x14200  bored         softnet2
 61820  137685      0      0  3     0x14200  bored         softnet1
 82626  289421      0      0  3     0x14200  bored         softnet0
 63916   99522      0      0  3     0x14200  bored         systqmp
 84196  457573      0      0  3     0x14200  bored         systq
  2694  234967      0      0  3     0x14200  tmoslp        softclockmp
 51678  174622      0      0  2  0x40014200                softclock
 28453  311582      0      0  3  0x40014200                idle0
     1  414718      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 76533 (syz-executor) thread 0xffff80003c4427e8 (170161)
exclusive rwlock netlock r = 0 (0xffffffff8380fcc0)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x377
#2  rtm_output+0x78c
#3  route_output+0x9a1
#4  route_send+0xd7
#5  sosend+0x804
#6  sendit+0x721
#7  sys_sendto+0x8d
#8  syscall+0xbc6
#9  Xsyscall+0x128
exclusive rwlock sbufsnd r = 0 (0xffff8000014d7e90)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x377
#2  sblock+0xb7
#3  sosend+0x2e2
#4  sendit+0x721
#5  sys_sendto+0x8d
#6  syscall+0xbc6
#7  Xsyscall+0x128
Process 36026 (syz-executor) thread 0xffff8000ffffd9a8 (328604)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83981930)
#0  witness_lock+0x5bb
#1  vn_statfile+0x40
#2  sys_fstat+0xcf
#3  syscall+0xbc6
#4  Xsyscall+0x128
Process 48261 (syz-executor) thread 0xffff80002a2ba7c8 (34279)
exclusive rwlock sbufsnd r = 0 (0xffff800010fd6d48)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x377
#2  sblock+0xb7
#3  sosend+0x2e2
#4  dofilewritev+0x23c
#5  sys_write+0xa2
#6  syscall+0xbc6
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10206  11032K   11623K 166960K     13228        0
            pcb    17     16K      17K 166960K       299        0
         rtable   234      8K       8K 166960K       472        0
             pf    39     18K      82K 166960K       271        0
         ifaddr    45      8K       8K 166960K        76        0
        ifgroup    60      2K       2K 166960K       121        0
         sysctl     4      1K       9K 166960K        44        0
       counters    70     37K      37K 166960K       122        0
       ioctlops     0      0K       4K 166960K      1674        0
            iov     0      0K      24K 166960K        48        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1499     94K      94K 166960K      2526        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       9K 166960K        17        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       105        0
        dirhash    12      2K       2K 166960K        45        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      93K 166960K       918        0
          sigio     0      0K       0K 166960K        11        0
           proc    72     91K     128K 166960K       632        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        66        0
       in_multi    98      7K       7K 166960K       131        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     1      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       415        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   244    153K     167K 166960K      9882        0
       UVM aobj    30      2K       2K 166960K        31        0
     pinsyscall    42     84K     106K 166960K      2032        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        57        0
            NDP    13      0K       2K 166960K        50        0
           temp    62   8691K    8815K 166960K     60237        0
         kqueue    16     26K      28K 166960K       154        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       74    0       70     1     0     1     1     0     8    0
rtentry    176      145    0       39     6     0     6     6     0     8    0
unpcb      144      521    0      496     4     3     1     4     0     8    0
syncache   336        5    0        5     3     3     0     1     0     8    0
tcpqe       32        1    0        1     1     1     0     1     0     8    0
tcpcb      736      178    0      170     2     1     1     2     0     8    0
arp        128       24    0        3     1     0     1     1     0     8    0
inpcb      328      986    0      971     7     2     5     7     0     8    3
nd6        144       31    0        5     1     0     1     1     0     8    0
pkpcb       40        8    0        8     3     2     1     1     0     8    1
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1192      16    0       16     2     1     1     1     0     8    1
pppxif     1504       5    0        5     2     1     1     1     0     8    1
pffrag     232        8    0        2     1     0     1     1     0   482    0
pffrnode    88        7    0        2     1     0     1     1     0     8    0
pffrent     40       77    0       69     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       68    0       22     1     0     1     1     0     8    0
pfstkey    128       68    0       22     2     0     2     2     0     8    0
pfstate    384       68    0       22     5     0     5     5     0     8    0
pfrule     1344      60    0       53     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      584    0      121    32     2    30    30     0     8    1
art_table   32      586    0      121     4     0     4     4     0     8    0
art_node    16      139    0       48     1     0     1     1     0     8    0
sysvmsgpl   40        8    0        8     1     0     1     1     0     8    1
semapl     112      101    0       91     1     0     1     1     0     8    0
shmpl      112       28    0        1     1     0     1     1     0     8    0
dirhash    1024      39    0       22     3     0     3     3     0     8    0
dino2pl    256     2987    0     1475    96     0    96    96     0     8    0
ffsino     288     2987    0     1475   109     0   109   109     0     8    0
nchpl      144     4224    0     2534    64     0    64    64     0     8    0
rtmask      32        3    0        3     2     2     0     1     0     8    0
uvmvnodes   80     3926    0        0    81     0    81    81     0     8    0
vnodes     216     3926    0        0   219     0   219   219     0     8    0
namei      1024   15012    0    15012     1     0     1     1     0     8    1
percpumem   16       76    0       26     1     0     1     1     0     8    0
kstatmem   264       64    0       36     4     1     3     3     0     8    0
scsiplug    72        3    0        3     1     0     1     1     0     8    1
scxspl     216    15214    0    15214    10     9     1     8     1     8    1
plimitpl   152      231    0      214     1     0     1     1     0     8    0
sigapl     424     1238    0     1167    10     1     9     9     0     8    0
knotepl    120      569    0        0    17     0    17    17     0     8    0
kqueuepl   224      236    0      223     2     1     1     2     0     8    0
pipepl     336      165    0      138     3     0     3     3     0     8    0
fdescpl    520     1198    0     1167     3     0     3     3     0     8    0
filepl     160     7237    0     7006    16     3    13    16     0     8    2
lockfpl    104      219    0      217     1     0     1     1     0     8    0
lockfspl    48       99    0       97     1     0     1     1     0     8    0
sessionpl  144       25    0       16     1     0     1     1     0     8    0
pgrppl      48       49    0       32     1     0     1     1     0     8    0
ucredpl    104     1048    0     1035     1     0     1     1     0     8    0
zombiepl   144     1168    0     1167     1     0     1     1     0     8    0
processpl  1240    1238    0     1167     6     0     6     6     0     8    0
procpl     656     2497    0     2419     8     0     8     8     0     8    0
srpgc       96        2    0        2     1     1     0     1     0     8    0
sosppl     168        4    0        4     2     2     0     1     0     8    0
sockpl     728     1599    0     1555    10     3     7    10     0     8    2
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl8k      8192       6    0        0     1     0     1     1     0     8    0
mcl4k      4096     119    0        0    15     0    15    15     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      38    0        0     5     0     5     5     0     8    0
mtagpl      96      140    0        0     4     0     4     4     0     8    0
mbufpl     256      345    0        0    22     0    22    22     0     8    0
bufpl      280     5875    0      129   411     0   411   411     0     8    0
anonpl      32    15380    0        0   126     2   124   124     0   246    0
amapchunkpl 152   32508    0    31861    41     6    35    35     0   158    7
amappl16   200     4860    0     4481    45    12    33    33     0     8    0
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184      117    0      105     1     0     1     1     0     8    0
amappl13   176        6    0        6     2     2     0     1     0     8    0
amappl12   168     1852    0     1821     3     1     2     2     0     8    0
amappl11   160       49    0       35     1     0     1     1     0     8    0
amappl10   152       32    0       32     1     1     0     1     0     8    0
amappl9    144      253    0      253     1     1     0     1     0     8    0
amappl8    136       54    0       51     1     0     1     1     0     8    0
amappl7    128      128    0      115     1     0     1     1     0     8    0
amappl6    120      196    0      192     1     0     1     1     0     8    0
amappl5    112      130    0      120     1     0     1     1     0     8    0
amappl4    104      324    0      303     1     0     1     1     0     8    0
amappl3     96     6382    0     6269     4     0     4     4     0     8    0
amappl2     88      662    0      600     2     0     2     2     0     8    0
amappl1     80    11854    0    11257    15     1    14    15     0     8    0
amappl      88     9060    0     8888     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      256    0      256     2     1     1     1     0     8    1
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       30    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1198    0     1167     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1198    0     1167     1     0     1     1     0     8    0
vmmpekpl   168    10684    0    10639     3     0     3     3     0     8    0
vmmpepl    168    81401    0    79059   120     4   116   116     0   357    1
vmsppl     480     1197    0     1167     6     2     4     5     0     8    0
rwobjpl     72    27467    0    22225    97     0    97    97     0     8    0
pdppl      4096    2403    0     2334    99    28    71    85     0     8    2
pvpl        32    21435    0        0   176     3   173   173     0   265    0
pmappl     256     1197    0     1167     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      400    0       36    11     0    11    11     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
arp_rtrequest(ffff800000039058,1,fffffd806bc66700) at arp_rtrequest+0x66f
rtrequest(1,ffff80003c41b8d0,0,ffff80003c41b850,0) at rtrequest+0xc5c
rtm_output(ffff8000014e7e00,ffff80003c41b978,ffff80003c41b8d0,0,0) at rtm_output+0x876
route_output(fffffd806cc41300,ffff8000014d7cb8) at route_output+0x9a1
route_send(ffff8000014d7cb8,fffffd806cc41300,0,0) at route_send+0xd7
sosend(ffff8000014d7cb8,0,ffff80003c41bb18,0,0,808) at sosend+0x804
sendit(ffff80003c4427e8,3,ffff80003c41bc10,808,ffff80003c41bcc0) at sendit+0x721
sys_sendto(ffff80003c4427e8,ffff80003c41bd70,ffff80003c41bcc0) at sys_sendto+0x8d
syscall(ffff80003c41bd70) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa917c59e920, count: -10
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x1a
__mp_lock(ffffffff83981728) at __mp_lock+0x199
syscall(ffff80002a3d7270) at syscall+0xae6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70cf897747f0, count: 8
ddb{1}> trace
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x1a
__mp_lock(ffffffff83981728) at __mp_lock+0x199
syscall(ffff80002a3d7270) at syscall+0xae6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70cf897747f0, count: -7