last executing test programs:

3.323666846s ago: executing program 5 (id=317):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809ea0, 0xffffffffffffffff, 0x7, 0x2800000000000000, 0x181c, 0x40, 0x2000000000000004}, 0x0, 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x9, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)

3.088713032s ago: executing program 5 (id=338):
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x2)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xe, &(0x7f00000001c0)="03000000", 0x4) (async)
setsockopt(r1, 0x1000000000029, 0xe, &(0x7f00000001c0)="03000000", 0x4)
write(r0, &(0x7f0000000080)="a81e3d16c77c739f2c9664b648a13127031775588349d814cec65e29cc55d5b4fb5dfee98156064928c6c396b570e65495f845efc4c2c829", 0x38)
setrlimit(0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x0)
close(r2) (async)
close(r2)
socket$inet(0x2, 0x1, 0x0) (async)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x18, 0x1, 0x0)
r5 = accept(r2, &(0x7f00000004c0)=@un=@file={0x0, ""/254}, &(0x7f0000000140)=0x100)
setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14)
mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x205b9a)
r6 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="6a987889e996c8b7cfce067d8ad9ff5d5bcb42c6837496b242030b8a528f0b961a8ad2dd4513d7ca054aa7ae0b2c38c67a2a2a92e3c4136954776bd2268ba48188727e7805d4194280f5f4bb8da445", 0x4f}, {&(0x7f0000000280)="96218e0c5b15e5be01b6bbbf2033d2404081ad5d3a85f2fd7eca170ee1a2c0f28d0533beb6288a8965711b7d9a3b41cb39883cc42a4a738ae030567a50b18a19e23a7900bb6b355a9aa3d7f756e4befccadc55307ae12fdebdc8c21d0fd5ab48905d5ab62428f04c0c8700"/119, 0x77}], 0x2)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) (async)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000300)="ea00000300000000013d65c19799d6473e495cc141a38e2c62217acb6000ce64d6bafe0cfc3f059bff983c73abfe5b673159720f1dbef757cf7f77a896af6302aa5edb80417d1feaffac59903a9ce2ebb94415e56bc43dd504be30da2ba505d4100900001754a262a79aadcfdeba446be3f57fbfc0c9c4c900c2366833c34dfe7d75d4ffc1de08399e3cef2dffa54889", 0x90)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) (async)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
chflags(&(0x7f0000001280)='.\x00', 0x1)

2.936470491s ago: executing program 5 (id=342):
pwrite(0xffffffffffffffff, &(0x7f0000000080)="4f8e8bca7c5076cbbcba046bea103ccb80ecd9b7a7c70364c9ffa85239eb11766937405afd4c03a074c1256c0cd63e0e2376d39174c3134950a1414d6cc18ed8deb1601537951212953e0100ab5c8d6d9d2b9c720cb3d7525361b8269fcebba0cd2f42", 0xfffffffffffffcf1, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f6511f419a83d4275218a89d7a7803f069d851", 0x49)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/123, 0x7b}], 0x1, 0xfffffffffffffff7)
execve(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/224, 0xe0}], 0x1)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0)
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)=0x8)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x138, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$VMM_IOC_READREGS(r3, 0xc2485607, &(0x7f0000000040))

2.124505655s ago: executing program 0 (id=384):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0xd4)
recvfrom$unix(r0, &(0x7f0000000140)=""/168, 0xa8, 0x800, &(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8)
socket(0x18, 0x3, 0x100)
writev(r0, &(0x7f0000001640)=[{&(0x7f0000000200)="e816ff8f769dd2e26fb49d4f01cc52065d1b81646cec0d93e6573f75b17b82a4828812d0105ab68dd94fbd6c4d061bc956b65ad284a5e2995748f5b4027827", 0x3f}, {&(0x7f0000000000)="6085c8d78eca6353df2c4c30449fd766cd86c32268185b15db5e758370cc", 0x1e}, {&(0x7f0000000280)="4ede0e8125e3246065f8746c7da591e4c7444a91a1cdb6b1aece8b300bd96d6c1869795e0b409bf9c82f5496c730a795f94c6c405c6677e7572d5a659fda5a359d0a80e8ec10d576f0299a37c626b161d39fbbd5446b5ce125b45676f7426247fd4b66af239538566277eb2d5ce95e9eb104", 0x72}, {&(0x7f0000000300)="0c2b4375e30a3bd58a68462c4561307546eb0b14e59f8f91476e14c889749012ea71636946b9df985b07b867845837ac4a19cad5e78fc5", 0x37}, {&(0x7f0000000b00)="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", 0x809}], 0x5)

2.045595468s ago: executing program 5 (id=389):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xfffff115, 0x80000001}, {0xffffffff, 0xffffffff, 0x6, 0x2000fff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x0, 0x10007, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0x103, 0xffffffff, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x3, 0x5, 0xb, 0x8bfd}, {0x80000000, 0x0, 0x8, 0x6}, {0x10010000, 0x0, 0x800001, 0x1}, {0x401, 0x4, 0x9, 0x3ff}, {0x3, 0x6e2, 0x2, 0xfffffffd}, {0x3, 0x0, 0x3, 0x9}, {0x9be2, 0x1, 0x1000002, 0x8e}]})
r0 = socket(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x21, &(0x7f0000000140)='!\x00\x00\x00', 0x4)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x4, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/65, 0x41}, 0x40)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r0, &(0x7f0000000000), 0x10)
r1 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4)
connect$unix(r1, &(0x7f0000000000), 0x10)
write(r1, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000100)="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", 0x0, 0x0, 0x0)
r2 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000240)={<r3=>0x0}, &(0x7f0000000280)=0x2)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0xd27d43220c7df9f, r3)
r4 = msgget(0x3, 0x690)
msgctl$IPC_RMID(r4, 0x0)

1.892690277s ago: executing program 3 (id=391):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r1 = syz_open_pts()
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="9272211534fb6fafb8bc861a1972b886de70aca8bdca354ab8cebb7d2d363db9355bea44fcbe69ff2d6ae1aa076912fa7cf545ec843ef56f252bec8a3408f96d99dc0d", 0x43)
close(r1)
r2 = syz_open_pts()
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
read(r2, &(0x7f0000000200)=""/255, 0xff)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10000)
execve(0x0, 0x0, 0x0)
read(r3, 0x0, 0x0)
mmap(&(0x7f00000b0000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x8000000000000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.830465469s ago: executing program 0 (id=398):
r0 = socket(0x2, 0x3, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
close(r1)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2})
r3 = socket(0x18, 0x3, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000000)=0xef000, 0x4)
sendto(r4, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0)
unveil(0x0, &(0x7f0000000000)='x\x00')
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r5 = dup2(r0, r1)
sendto$inet(r5, &(0x7f0000000200)="1b4de69e5ed6e4c1ce6ace088669bc3800c48d42b284f0d0377600364e789e08a8af7eb1284635f6746a520d978fde2285e51b7e11c5a45abc5c6020f078432bb088dd53f51671e3d5ce100b173505a5a34300e960f8a66210abbf7cba50852ab7fde8dd8d3ebc4ee8cccb8020065966c3a8bc183a36ea6e10fd1d129615b6e3b15091ab60cc06a143739c6cc30b770e301736a1", 0x94, 0x80a, &(0x7f0000000040)={0x2, 0x0}, 0xc)
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0xa)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
write(r1, &(0x7f00000005c0)="04c1fa5d1d2873c63e3534826a39b8c05ba166e2fea9aec430502b9192a97de261570076233340459a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc45a02f816f12d1813025ab68ed37dee22a0f2bacdd68e8ccf20b27690204c07000000000000000526daacea5c17ef4d622c0e312f7b3c8bc21cf8f2cac90a00", 0xddc7)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r6 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0))
r7 = open(&(0x7f0000000140)='./file1\x00', 0x10686, 0x8)
recvfrom$inet(r1, &(0x7f00000002c0)=""/211, 0xd3, 0x1041, &(0x7f0000000080)={0x2, 0x0}, 0xc)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r7, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc3, 0x3, 0x1, 0x40803, 0xfffeffff, 0x5, 0x2, 0x1, 0xffffffff95362374, 0x7})
r8 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r8, 0x8080691a, &(0x7f0000000100))

1.663323486s ago: executing program 5 (id=403):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x7, 0x1, 0x4, 0x0, "6f9ddfd64646ca79e08ce663c2c6a8916f7c4510", 0x7fff, 0x3})
ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000340)={'./file0\x00', 0x0, 0x8000, 0x7, 0x0, 0x7, 0x1, 0x277, 0x1, 0x0, 0x1ba, 0x101})
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c)
sysctl$kern(&(0x7f0000000000)={0x1, 0x39}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
syz_emit_ethernet(0x76, &(0x7f0000000400)={@local, @remote, [], {@ipv4={0x800, {{0x11, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @remote={0xac, 0x14, 0x0}, {[@ra={0x94, 0x6, 0x8}, @ssrr={0x89, 0x1f, 0x1b, [@rand_addr=0x1, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}, @broadcast, @loopback]}, @rr={0x7, 0xb, 0x2, [@multicast2, @loopback]}]}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x200}, @generic={0x3, 0x4, "3303"}]}}}}}}})
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000300)=0xd467)
syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@broadcast, @remote, [], {@generic={0x8148, "75c9b95459310c0c3e94bb02a0bd54738a5a98aa2068665ab58a24b98c0fde9a"}}})
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x40000840)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xe0)
unveil(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='x\x00')
ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x9)
select(0x40, &(0x7f0000000500)={0x3, 0x9, 0xc, 0x3, 0x43, 0x40, 0x3, 0x2}, &(0x7f0000000540)={0x9, 0x7, 0x9893, 0x1c, 0x3, 0x401, 0x80, 0x5}, &(0x7f0000000580)={0xdc93, 0x1, 0x3, 0x3, 0x2, 0x7, 0xd, 0xfffffffffffffff7}, &(0x7f00000005c0)={0x52, 0x3ff})
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[])
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {0x2}, {}, {}, {}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x3}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e)
open(&(0x7f0000000480)='./file0\x00', 0x800, 0xde)
setuid(0xee01)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1.593064782s ago: executing program 3 (id=404):
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaab5f8921e484c1ea08885e538aaaa86dd6603816a0000ff300000000000000000c506000000000000fe8000000000000000000000000000aa62847f8644eec4197745c4771c960b68e68b28153b2a842a12ff26019d0aee9636f44ecefd4e1a83534e1c2af33a5aac4cec"])
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async)
r0 = syz_open_pts()
close(r0) (async)
r1 = syz_open_pts()
sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b1000501000000ae05003f01070000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47", 0x8b, 0x400, 0x0, 0x0) (async)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0x80a1a3, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) (async)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
mprotect(&(0x7f0000395000/0x2000)=nil, 0x2000, 0x1) (async)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0xa000000, 0x8, 0x8, 0xfff, "ca244332cfa3e516f5595aac88f4f6b5cdeb87fb", 0x4, 0x3}) (async)
r2 = socket(0x2, 0x4000, 0x9) (async)
r3 = dup(0xffffffffffffffff) (async)
shmget(0x0, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil)
getuid() (async)
getgid() (async)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) (async)
socket(0x18, 0x2, 0x9) (async)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000540)={0x0, <r4=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$unix(r2, &(0x7f0000000700)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000010000000000000e7a3b19700010000001800000000000000ffff009125979c", @ANYRES32=r2], 0x100, 0x3}, 0x400) (async)
openat$wsmouse(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040))
sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000000)=0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x14f6, &(0x7f0000001c00)=ANY=[])
ioctl$VMM_IOC_RESETCPU(r3, 0x82405605, &(0x7f0000000100)={0x4, 0xb3f, {[0xfffffbfffffffffb, 0x3, 0x2, 0x100200000, 0x406, 0x3, 0xdf62, 0xfffffffffffffffe, 0x0, 0x2f01, 0x3, 0x3, 0xfffffffffffffffc, 0x200000000002, 0xd, 0x4, 0x0, 0x400000000100], [0xfffffffffffffffe, 0xaa, 0xffffffffffffffff, 0x20000001, 0x5f, 0x8, 0x4f0e, 0x0, 0x8], [0xff, 0x8000, 0x40000003, 0x4, 0xb, 0x10000000011000, 0xffffffff00000003], [0x1, 0x1fffffffffc, 0x7ffffffffffffffc, 0x6, 0xfffffffffffffffe, 0x1bb9], [{0x0, 0x4, 0x0, 0x7d06}, {0xf7fc, 0x9, 0x5, 0x2aae}, {0x4, 0x0, 0xfffffffa, 0x80}, {0x3, 0x4, 0x7, 0xffffffffffffffff}, {0x0, 0x2, 0x7d, 0x4}, {0x0, 0x1, 0x9, 0xf}, {0xff, 0xfffffffe, 0xfffffff9}, {0x0, 0x100, 0x200000, 0x36}], {0x1, 0xd, 0x0, 0x8000000003}, {0xfffe, 0x3, 0x6d0, 0x6}}})
setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62})

1.592727004s ago: executing program 5 (id=405):
open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0xb5) (async)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0xb5)
setrlimit(0xd, &(0x7f0000000180)={0xd78, 0x163}) (async)
setrlimit(0xd, &(0x7f0000000180)={0xd78, 0x163})
r1 = syz_open_pts()
close(r1) (async)
close(r1)
syz_open_pts()
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1)
write(r1, &(0x7f0000000100)="b281df9e46c01ebfa12c395e47b9f9e6c28ff288546279403989542b8a6178e28ce1428d", 0x24)
utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x2, 0x7}, {0x991, 0x2}}, 0x2)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)

1.416033612s ago: executing program 0 (id=410):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100", 0x1})
sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f00000002c0), 0x0)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, 0x0)
kqueue()
mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000317000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005c5000/0xe000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2b}, {&(0x7f000048e000/0x2000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x5}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x200000000000006}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x83ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404)

1.326900264s ago: executing program 0 (id=413):
setrlimit(0x8, &(0x7f0000000040)={0xb, 0x54}) (async)
close(0xffffffffffffffff) (async)
r0 = syz_open_pts() (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x401, 0x9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x2}) (async)
setuid(0xee01) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async)
r1 = socket(0x800000018, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 64)
read(r0, &(0x7f0000000100)=""/176, 0xb0) (async, rerun: 64)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="00e7f858377b587ee6d78f2cbed805007f85f5f8b64632ca74b91bcee5ab2bb41313ded74c0f6bab1f8f4bff13a1ac72063a2695222dac728132c3dba928a27f0f51895cfaab03d145e670facff48ffc2f896df65589fa0066ee8bf0", 0x5c}], 0x1)

1.159690882s ago: executing program 4 (id=427):
sysctl$kern(0x0, 0x0, &(0x7f0000000380)="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", &(0x7f0000000080)=0x12e, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r0 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x2, 0x87bfbd582f9d3bc3)
mkdirat(r0, &(0x7f0000000200)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
mknod(0x0, 0x1ffa, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0)
r3 = open(0x0, 0x2, 0x0)
setrlimit(0x7, 0x0) (async)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
setreuid(0x0, 0xee01) (async)
r4 = shmget$private(0x0, 0x1000, 0x120, &(0x7f0000002000/0x1000)=nil)
shmctl$IPC_SET(r4, 0x1, &(0x7f00000002c0)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x80, 0x400}, 0xbca2, 0x2b, 0x0, 0x0, 0x2, 0x4b, 0x5})
shmctl$IPC_RMID(r4, 0x0) (async)
fchdir(r1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$net_inet_icmp(&(0x7f0000000240)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f0000000280)="d1b733785094ed42070f416aa77a040f59bc1c33", &(0x7f00000002c0)=0x14, &(0x7f00000004c0)="4a594e90381f66596297806f3793ba041941b3d2ae4e3c136a7421b03cd597b8bdeb01434e16e454a3ffe9f61977f0e96f9747a3721a9dfc1b1a18fc5452e203d1d31a02003f7a6fd0585042641951a9469b07f97794db0f22ed717cf1146ad235e5592ae6c1e053909a123152eaa753020b476a4c82abbd2c5d538d77cecb42d9ffa0d57e68d5196e71fbeb416513fcd0aa0b2264b35d6d37049cc66dde8947ebe166497ce5f26c08546c3fcf3ebc77311bc8ba2637bfece0511b040ce7972424913a03e8c5136e604e6006a401088493efc83d4edc75f19d2696809e1388dafa672d56886cd6e50d4d430218996e09de328792bfed", 0xf6) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27)
setitimer(0x1, &(0x7f0000001fc0)={{}, {0x5}}, &(0x7f0000002000)) (async)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)

1.156341839s ago: executing program 4 (id=429):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="27f5ec23b696420d194a204d9e7446608c129a055166d02fcba6110ad0c87f73cf79000000001f93ecd8264f6ec6702e2e", 0x31}], 0x1)
execve(0x0, 0x0, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x2, 0x2}, {0x2, 0xc0}}, 0x0)

1.091717715s ago: executing program 2 (id=431):
r0 = semget(0x0, 0x1, 0x281) (async)
flock(0xffffffffffffffff, 0x3)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000200)=[0x6, 0xffd, 0x1, 0x3]) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
utimensat(r1, 0x0, &(0x7f0000000400)={{0x4, 0x1}, {0x5, 0x4}}, 0x0) (async)
preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000000)=""/18, 0x12}], 0x4, 0x0)

1.078028355s ago: executing program 2 (id=432):
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(0xffffffffffffffff, 0x80206932, &(0x7f00000001c0))
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6, 0x9}, {0x0, 0xe1bc}, {0x1}, {0x0, 0x3b6}, {0x3, 0x400000}, {0x2}, {0x2, 0x3}, {0x3, 0x803}, {0x2}, {0x0, 0x4}, {0x5}, {0x2, 0x2}, {0x3}, {0x2, 0x20400}, {0x0, 0x200}, {0x2, 0x80000000}, {0x3, 0xfffffffd}, {}, {0x3}, {0x1, 0x2}, {0x1, 0xa}, {0x1}]})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

1.077615913s ago: executing program 2 (id=433):
open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
ktrace(&(0x7f0000000180)='./file0\x00', 0x2, 0x51d73188af82c397, 0xffffffffffffffff)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@random="8f6f77ede655", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x18, 0x3a, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@mld={0x82, 0x0, 0x0, 0x2, 0xa47, @mcast1}}}}}})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="bf3b684c5ae963b4567084e096cf973983ff0f0000000000009405095e7acbf4419893cfd424b75262dc5ade2ab6278ab80849177964f55be2796672f9ed186987b8c19d9295a17b98020f600200"/91, 0x5b}], 0x100000000000033c}, 0x1)

1.07118875s ago: executing program 4 (id=434):
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443f, &(0x7f0000000040)={0x10000, 0x0, 0x87a, 0xe68, "a2a48100", 0xfffffffc, 0xe762})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000040)={0x0}, 0x10, 0x40, 0x0)
close(r0)
unveil(0x0, &(0x7f0000000100)='r\x00')
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
sysctl$hw(&(0x7f0000000100)={0x6, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x1}, 0x8)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$BIOCGDLTLIST(r2, 0xc010427b, &(0x7f0000000040))
connect$unix(r1, &(0x7f0000000000), 0x10)
getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0xf3, 0xff}]})
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SPKRTONE(r3, 0x80085301, &(0x7f0000000000)={0x9, 0x9})
r4 = socket(0x2, 0x2, 0x0)
sysctl$vm(&(0x7f0000000140)={0x2, 0xa}, 0x2, &(0x7f00000001c0)="a43f3fc131960b751a", &(0x7f0000000200)=0x9, &(0x7f0000000240)="97d12c53e335f38541134f357d1be394080ace210f3a8329b6e554108b52d5eab4cdc6a6c6cae5", 0x27)
connect$unix(r4, &(0x7f0000000000), 0x10)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x3, 0x1, 0x8}, {0x18, 0x0, 0x5, 0xa08c}, 0x25f, [0x0, 0x7, 0x30, 0x21, 0x5, 0x80000001, 0x8, 0x5]}, 0x3c)
write(r4, 0x0, 0x0)

1.068154579s ago: executing program 2 (id=435):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xe554a95) (async)
socket$inet(0x2, 0x3, 0x8)
mknod(&(0x7f0000000180)='./file0\x00', 0x6010, 0x637e) (async, rerun: 64)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x0, 0x80, 0x4000000000000006}], 0x0, 0x0, 0x0, 0x0) (rerun: 64)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x66})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts() (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="964b2e8c33", 0x5) (async, rerun: 64)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x9, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x8000004, 0x4}) (rerun: 64)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
socket(0x2, 0x1, 0x0) (async)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f00000004c0)={0x2, 0x400004}) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x0, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x100006, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x7fffffff, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xf}, {0x0, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x8, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x0, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]})
poll(&(0x7f0000000000), 0x35, 0x0) (async)
setuid(0xffffffffffffffff) (async, rerun: 32)
syz_open_pts() (async, rerun: 32)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async)
r3 = socket$inet(0x2, 0x3, 0xfc)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r4 = syz_open_pts()
close(r4) (async)
r5 = syz_open_pts() (async, rerun: 32)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (rerun: 32)
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04})
writev(r4, &(0x7f0000000580)=[{&(0x7f0000000300)="79be63810e000000e42653dcb5e2ed599e7ed9a199990d3405bbc7a35bfeff16cb505e3c359be6d63b1b17328d7b562735fe7e7b2bc760f5d5bab9d900000000008000004f36c45cb7f069e6066c31bcd291dec4bc2a010306a91678", 0x5c}, {&(0x7f0000000380)="6b9f3a33215050ad67a000cf5479c9f5a1c50f10beca9860019108012efa6290dcb999dc2c137202723a64aebb77c4cabef068ff366a8c9b11b797f4e7273ec515ec6eb47309b2c93b39f01ca2a92600b8d77de7522e5843e8954095eab45701c8665ab25ca291a8062e8d506a79d56c0f53fb63cd2763e85ef3a57803a9b7e132006c91f3a4119c97e28ef7abf6b443c8e7984eb687a116e4aa1c1565690e48fe262badabfe02bf0ba5e3796d", 0xad}, {&(0x7f0000000480)="204758a9d4ad", 0x6}], 0x3) (async, rerun: 64)
read(r5, &(0x7f0000000200)=""/255, 0xff) (async, rerun: 64)
execve(0x0, 0x0, 0x0) (async)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

882.726168ms ago: executing program 2 (id=437):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0)=[{{r0}, 0xffffffffffffffff, 0x25, 0x2, 0xfff, 0x2}], 0x1, 0x0, 0x200, 0x0)
close(r0)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xc4)
mkdir(&(0x7f0000000400)='./file0\x00', 0xc2)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file2\x00')
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x1, 0x45}, {0x40, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0xa8, 0xfffff7fe}]})
pread(r0, &(0x7f0000000100), 0x0, 0xfffffffffffffffd)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="6d1d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef83729dc6b2864fe751a9547308b274560731000000120600000026", 0x35}], 0x1)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x34}, 0x2, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
sysctl$net_inet_ipip(&(0x7f0000001c00)={0x4, 0x2, 0x11, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000001cc0)='\x00\x00\x00\x00', 0x4)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendto(r0, &(0x7f0000000200)="b4e1f0be9278c14519eeb019a700635cb995c5b7932462221f66e4e0b0227d7408cb2a06cabcea169305f43e7ee8eb289f8d47c3815de39868b961724aeea0cb0ba89b7d94d3ca1d6aba5024622cd161fc", 0x51, 0x408, &(0x7f0000000280)=@in={0x2, 0x2}, 0xc)
mlock(&(0x7f000002a000/0x2000)=nil, 0x2000)
preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000000029, 0xb, 0x0, 0x4f)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
munmap(&(0x7f000017f000/0x4000)=nil, 0x4000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)

741.073682ms ago: executing program 6 (id=441):
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) (async, rerun: 32)
r0 = syz_open_pts() (rerun: 32)
close(r0)
r1 = syz_open_pts() (async)
ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5)
ioctl$TIOCCBRK(r1, 0x2000747a)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x8, &(0x7f0000000000)=0x8, 0x4) (async)
poll(&(0x7f0000000040)=[{r0, 0x57c52096be7fbd62}], 0x1, 0x0)

730.18806ms ago: executing program 6 (id=442):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r1 = socket(0x2, 0x1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x102)
r3 = dup2(r2, r1)
connect$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8)
ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x1405, "080400000000000000010000000100", 0x4917, 0x7})
ioctl$TIOCCDTR(r0, 0x20007478)

729.964423ms ago: executing program 6 (id=443):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
socket(0x18, 0x1, 0x0) (async)
setuid(0xee01) (async)
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async)
r0 = socket(0x1, 0x2, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}})
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async)
open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) (async)
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x130) (async)
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x802069b5, &(0x7f00000001c0)) (async)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
mmap(&(0x7f00003d3000/0x1000)=nil, 0x1000, 0x2, 0x4010, r3, 0xf52)
setgid(0xffffffffffffffff) (async)
setgroups(0x0, 0x0) (async)
setuid(0xffffffffffffffff)
rename(&(0x7f0000000200)='.\x00', 0x0)

729.347557ms ago: executing program 3 (id=444):
setuid(0xee01)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b7, 0x7}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000090c, 0x800})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5821ffdb1e649b00000000ffffffffffffffffd4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40f}, 0x40a)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x8, 0xffff, 0x0, 0x20000023, "0400000000800000ebb178d952d6d31962fff0d1", 0x5, 0x2})
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x0, 0xb0f, 0xfff}, {0x18, 0x2, 0x8, 0x6}, 0x5, [0x101, 0x7, 0x9, 0xb, 0x5eb, 0x7, 0x2, 0xc80]}, 0x3c)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x10000000, 0xffff63de, 0x5, 0x1ff, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x7, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x3, 0x1)
connect$unix(r1, &(0x7f0000000000), 0x10)
write(r1, &(0x7f0000000140)="33e8fb9dfa5a94cfa943e7662f41f28418d35c4598de390d8f3d62fb", 0x1c)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xce0c, 0x0, 0x37)

729.020371ms ago: executing program 6 (id=445):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x120)

600.746631ms ago: executing program 3 (id=446):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0xf66d, 0xe6f8, 0x2, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff197})
semget(0x0, 0x1, 0x281)
r1 = getuid()
setuid(r1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0)
ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000040)={0x4, 0xfffffffd, 0x1000, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x1000000})
ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
r3 = socket(0x2, 0x3, 0x0)
close(r3)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r4 = socket(0x2, 0x4001, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x800000054})
r5 = syz_open_pts()
close(r5)
syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x40, 0x9, 0xfffdff80, 0x160350d, "02f0ee091a000c1300000fe0ff22850900", 0x1000004, 0x2})
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r6, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r4, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
write(r3, &(0x7f0000001680)="04bd", 0x2)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000000c0), 0xc)
openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)

598.944886ms ago: executing program 6 (id=447):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x9, 0x45}, {0x40, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="452417d45410916bd5813a4df657d22dd12cc560000198a4bd096851539dd38c2d478a05bf", 0x25}], 0x1)
sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00231b000f407061035c2532d7a0ea9200001f00385c24fc3be7d5c1a5db0c8043846b45c6888320424dca5d2c044a51f48cef4008b3b6aea789af305a16b33e3f9ee1f24abe2d475001665eaf211d925f4a4da6a00c37eb3b391c9dadb971164283597b9e2db7f4ed949237f4c9a1739a99ba17381ec85b09675f8f3f121db6322485ba15ec432c0c4484ef388253cb298a0c8577709fcc9324f5ee78c7d6fa35da741e5691f397e0473dec", &(0x7f0000000000)=0xac, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async)
write(r0, &(0x7f00000003c0)="f81ad3010006000000010000f500", 0xe) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r1, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2) (async)
sysctl$hw(&(0x7f0000000080)={0x6, 0x5}, 0x2, &(0x7f00000003c0)="0d004dded735e4e6846ad341364adaa3ac3a2603adcef37d92d22619b4a36fb25b19ca398cc40b27974de7c0d07434585e82f95efab88373049fb39e7780357e4ea4cfebe846a3ea4a3d9bd8ada3b2043a317b6e6ff5c429a2e7949920b4e75f7671d02001d72dae6dc140668b9527d13f97de3d669989149a86ec48dbf865667c76e8cb112386cdf1ccb33e33e4447b227a524f5900000000", &(0x7f00000000c0)=0xfffffffffffffef7, &(0x7f0000000040)="4bbf1a1e7c252fd8a7f370f99fecde9f08bb35c2a7c9ffb65df75d48e76b2c88f433987da44294c332ae76eef306bf6fbccb1477", 0x0)

594.8234ms ago: executing program 7 (id=448):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0x1, 0x7b, 0x7, 0x4})
r0 = kqueue()
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000240), 0x10, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000340)={&(0x7f00000002c0)='./file1\x00', r0})
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1)

594.538564ms ago: executing program 6 (id=449):
sysctl$net_inet6_icmp6(&(0x7f00000001c0)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000240), 0x0)
r2 = syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000680)="96", 0x1}], 0x1)
read(r2, &(0x7f0000000200)=""/255, 0xff)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x80450c)
r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
open(&(0x7f0000000000)='./file1\x00', 0x80, 0x40)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x2, 0x7b4, 0x400, 0x2, 0xe6, 0x73, 0x1, 0x10, [{0xfffffff0, 0x3ff, 0x6db, 0x1000005}, {0x4, 0x8, 0x8, 0x8}, {0x6, 0x2, 0x4, 0xfffffff9}, {0x1, 0x9, 0x2, 0x1}, {0x9d, 0x8, 0x0, 0x1}, {0x4, 0x8, 0x1081, 0x2}, {0x40, 0x1, 0x0, 0x9}, {0x80000001, 0x3fc, 0x7, 0x1ff}, {0x7, 0x0, 0x3, 0x3}, {0x0, 0xff, 0x80000000, 0xb}, {0x5, 0xc9f, 0x5fc, 0xe}, {0x9, 0x6e, 0x617f, 0x1c0}, {0xd, 0x9, 0x2, 0x5}, {0x20002d1, 0x9, 0x8000, 0xffff}, {0x7, 0x8, 0xd450, 0x1}, {0x6, 0xe1a, 0x5, 0xffffcbac}]})
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r4 = socket(0x18, 0xc003, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000180)={0x3, 0x0, 0x83, 0x5}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca)
r5 = getppid()
fcntl$setown(0xffffffffffffffff, 0x6, r5)
fcntl$setown(0xffffffffffffffff, 0x6, r5)
r6 = fcntl$getown(r2, 0x5)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x8001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x181, 0xffff}, 0x3ac, 0x3, r5, r6, 0x40, 0x9, 0x7ff, 0x3a7})
open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)

591.774117ms ago: executing program 7 (id=450):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x200023})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x100, {0x3, 0xfffffffffffffffe}})
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x2, 0x400000, "63742200000000000000009280c9795a6b47c1d1", 0x8000})
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r1, 0x1000000029, 0x3, &(0x7f0000000080)="5e0197b7eb31534a2eaa4e713048e69931929648f48b76b04191884a49b44ab14f52a186c917a23719612bb0f5c4657c1ef4b1abfa144f91f9febe0121f50c86330d979386045f1487df213aec900d2b2ca2c001b088d99abb892cbc6f7180856788aeb056c3113e8aeb6e9ad3bfdf2fabf5a49b73cd8b63264767bb32eafb192a4cb76f3ef4653fdad4b2a84f0c4890ec0885f7fac34dfcf5a168c8db01959b650a16b90bb0f84f8a3032a573345563d6635b8bc4bd15bb053b2e45238d626a3bea450811e655f064034461f812fed54295c38062b150e6e9dd3d3ca3b8d12817019dd46e926dac435cd9a1bf45a54487578a161936eee895453a991b1902d1dd4ade2d", 0x104)
write(r0, &(0x7f0000000280)="c4f23087221d5a2e6336e082d8f60b28ff6d3470037f205fb4d0b9b75a0a7a1fddc9b3814f7960638cea1913b7fee512567668a3e7549fced4852c9720fce79fa0d16b2fb032eb2c6abfb30df0b02a7134c3d045da2efa8bf9b5affc606eee7ea4c348d2e818b0e447c29ef2a3b92df3bc518bf5565efda8df4e59c4ddb2aa0b3e", 0x81)
sendto$inet6(r1, &(0x7f00000001c0)="a8d78ebe5e6168d17290d9446f562be426bd3fe2bd621d0696005d87927918641a8d0f6f3203c851f08ed1f00fcdd7c7bd6706891cb4955bc4d5f470155ea28cb96dfb685a37500dafa716788033e0c3b4560218a24cab84b32ee1fbde9b", 0x5e, 0x8, &(0x7f0000000240)={0x18, 0x2, 0x5, 0x9}, 0xc)
poll(&(0x7f0000000000), 0x200000000000002c, 0x0)

369.770605ms ago: executing program 1 (id=452):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000240)={0x0, 0xf0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x109}], 0x1, 0x0}, 0x80000006}, 0x10, 0x40, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x2047}]})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000380)=ANY=[@ANYBLOB="d66a76c37e8960858d6ee9c0985b46337307497a6ae7b64416fe134f2e74ce9040013bfc64a3f167f533d206bcc3c6456d4fbb8573e2dac6d12152b3912473a548fc0be8fd18ee46e8ab7f5032533429d2dc40f674ae1b32afdf809d856e79fd256f24989f6f45f116507c7089bfea7bed003fdad9df6256e96cdae29a494dd5365c39e2f7783b8646c3c1f9b9df2931c2d634dce6be4da7f6e2adba86c35ffe5b34831084a158c0e656b777b319f4f2915593d5cd1daf9a079e91ad6b54549807c5121027fd8f6996f209e8a8cc3469902ca4ae220200d02652b303820e41804ce528b14b128ff29d99e9c2475c", @ANYRES32=0x0, @ANYRES64=r0])
setuid(0xee01)
mprotect(&(0x7f00000d6000/0x3000)=nil, 0x3000, 0x4)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r1)
close(r4)
r5 = socket(0x2, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000000), 0x10)
r6 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x401, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r7 = kqueue()
kevent(r3, &(0x7f0000000140)=[{{r7}, 0xfffffffffffffffe, 0x8, 0x40, 0x0, 0xa4c6}, {{r4}, 0x2, 0x24, 0x2, 0x101, 0x1}], 0x100, 0x0, 0x80000039, 0x0)
close(r2)
r8 = socket$unix(0x1, 0x4, 0x0)
execve(0x0, 0x0, 0x0)
bind$unix(r8, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r8, 0x300000)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x40, &(0x7f0000000000)={0x400, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0)
syz_open_pts()

364.931487ms ago: executing program 0 (id=453):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x30, 0xf, 0x3, 0x9}, {0x26, 0x9, 0x1, 0xfffffff2}]})
sysctl$hw(0x0, 0x0, &(0x7f0000000300)="50041b02003e807447ff000800000000009586b272f7dedb1f0040003c7c3087de4ada9a933366fe46cace638ab344db6740a1abfa6f432c14a6082d9c0614f7", &(0x7f0000000000)=0x40, 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34)
ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x2)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0})
syz_emit_ethernet(0x33, &(0x7f0000000480)=ANY=[])
pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
rmdir(&(0x7f0000000000)='./file0\x00')

363.670171ms ago: executing program 7 (id=454):
r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x2, 0x2, 0x0)
execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
r2 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f800001000e009078000b0008000003fc0000000400000009"])
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0))
r4 = socket(0x2, 0x2, 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x5a})
r5 = syz_open_pts()
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r6 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110)
write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
chmod(&(0x7f00000000c0)='./file1\x00', 0x8)
chroot(&(0x7f0000000740)='.\x00')
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
close(r5)
setuid(0xffffffffffffffff)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r7 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r7, 0x8020699f, &(0x7f00000001c0))
syz_open_pts()
ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000500)={0x80000002, 0x5, 0x1f, 0xfffff7b4, "8b02000300090a7837b13e13355f4fa7c2f4e300", 0xfffffffd, 0x2})
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
ioctl$FIONREAD(r4, 0x80206919, &(0x7f00000001c0))
socket(0x2, 0x2, 0x0)

261.713806ms ago: executing program 0 (id=455):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r0 = open(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x20)
mmap(&(0x7f0000333000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x100000000) (async)
kevent(0xffffffffffffffff, 0x0, 0xffeffff1, 0x0, 0xb19, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) (async)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
sendto$inet(r1, &(0x7f00000002c0)="63852f9763a97c3312d65c4ab355fb52080a5f360aa7cfd093ccecf97ee70005a3a37825eaea2c0faa41c234d5b3eaa18481cfb88c2341731be0019cad8055c8131d84619bf497a09b09b44cd740081365c0c59c157b98dba4d7f305f898c8da8c5f6c560278845709e616653e3f25398ed95f9f6a096b395a99599fba15cfc58921f154f6954b9ce01d10bb97e2949760a3d33a3cedb63e99cc041e", 0x9c, 0x40c, 0x0, 0x0) (async)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x6, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x4400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x2}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) (async)
r2 = syz_open_pts()
ioctl$TIOCSTART(r2, 0x2000746e) (async)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000380)=""/151, 0x97}], 0x1) (async)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) (async)
kqueue() (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r4)
socket(0x18, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000003f00)={0x0, 0xfdc7})

256.754511ms ago: executing program 3 (id=456):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000300)={&(0x7f0000001a00), 0x12})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x6, 0x45}, {0x40, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0x8, 0xfffff7fe}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="6d1d1a7055c3cbb2864fe751a95473e8874db16946ab4744aeb960e74cc36b95ec92f674560731000000120600", 0x2d}], 0x1)
sysctl$kern(0x0, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000000)=0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[])
openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async)
ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000300)={&(0x7f0000001a00), 0x12}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x6, 0x45}, {0x40, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="6d1d1a7055c3cbb2864fe751a95473e8874db16946ab4744aeb960e74cc36b95ec92f674560731000000120600", 0x2d}], 0x1) (async)
sysctl$kern(0x0, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000000)=0x1, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) (async)

256.077141ms ago: executing program 1 (id=457):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0x7})
mknod(&(0x7f0000000000)='./file0\x00', 0x20a0, 0x5900)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95)
r1 = kqueue()
kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)
dup2(r1, r0)
setsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0)
r2 = socket(0x18, 0x3, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r2, &(0x7f00000000c0), 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
r4 = openat$bpf(0xffffffffffffff9c, 0x0, 0x10, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
symlink(&(0x7f0000000080)='./file1\x00', 0x0)
sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r5 = socket(0x18, 0x3, 0x0)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r5, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22)
r6 = socket(0x800000018, 0x3, 0x1)
bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r7, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000027, 0x101, 0x2004, 0xa1b0, 0x10001, 0x10, [{0x4, 0x288f, 0x9, 0x71002}, {0x3, 0x4009, 0xfffffffd, 0xfffffff9}, {0x1000, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x1, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x3c7, 0x650, 0x3, 0x1}, {0x9, 0xffffffff, 0x8, 0x10000}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x400, 0x5, 0xca9}, {0x8, 0x8009, 0x1000, 0xf3e2}, {0x1cc, 0x10004, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0xb94, 0x807, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1000c, 0x1, 0x5, 0x3}, {0x0, 0x0, 0xfff, 0x20010001}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r7, 0x80184405, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})

247.894575ms ago: executing program 4 (id=458):
r0 = socket(0x24, 0x2, 0x0)
clock_gettime(0xa, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x2400, './file0\x00'}, 0x40)

191.155627ms ago: executing program 3 (id=459):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
setpgid(0x0, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
syz_emit_ethernet(0x42, &(0x7f0000000700)=ANY=[])
r1 = kqueue()
kevent(r1, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x8, 0x1, 0xfffffffffffffff8}], 0x80000000, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x80, 0x1, 0x80000000, 0x1000}], 0x3, &(0x7f0000000140)={0x9, 0x1})

190.694658ms ago: executing program 4 (id=460):
r0 = socket(0x800000018, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) (async)
fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x2, 0x0, 0x400000000, 0x81}) (async)
r1 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0) (async)
fchmod(r1, 0xf3)
setuid(0xffffffffffffffff)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
r2 = socket(0x800000018, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)

188.247274ms ago: executing program 1 (id=461):
syz_open_pts()
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x2, 0x400000, "63742200000000000000009280c9795a6b47c1d1", 0x8000})
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x32, 0x0, 0x0) (async)
setsockopt(r1, 0x1000000029, 0x32, 0x0, 0x0)
sendmsg(r1, 0x0, 0x2)
getpeername(r1, &(0x7f00000001c0)=@in6, &(0x7f0000000180)=0xc) (async)
getpeername(r1, &(0x7f00000001c0)=@in6, &(0x7f0000000180)=0xc)
pipe(&(0x7f0000000040))
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x6, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x7, 0xc48, 0x1000000080000000, 0x8000002a, 0x0, 0xb28f, 0x80000002, 0x61, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x500], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x5, 0x7ffffffd, 0x0, 0x8000000000000, 0x0, 0x2], [0x8, 0x9, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x2, 0x8000000100000002, 0x6], [{0x7ff, 0x90c, 0xffffffff, 0x7d06}, {0x6, 0x202, 0x6, 0x3}, {0x58, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x8, 0xfffffffffffffffe}, {0x0, 0x400, 0x80004, 0x5}, {0x8, 0x2000, 0x40003, 0x2}, {0xff00, 0x0, 0x4}, {0x5f9, 0x9, 0x1fd, 0x459}], {0x0, 0x5, 0x1, 0x849}, {0x203, 0x40010, 0x200006, 0x5}}})
kevent(0xffffffffffffffff, &(0x7f00000000c0), 0xbe96, 0x0, 0xffffffff, 0x0)
select(0x40, &(0x7f0000000000)={0x4, 0x5, 0x10001, 0x0, 0xd9, 0x1ff, 0x1, 0x1}, &(0x7f0000000080)={0xffffffff, 0x1, 0x53fb, 0xdd, 0x6, 0x3, 0x7, 0x9}, &(0x7f00000000c0)={0xfff, 0x9, 0x3f, 0x3, 0xa2, 0x57c2, 0x6, 0x3}, &(0x7f0000000100)={0x2}) (async)
select(0x40, &(0x7f0000000000)={0x4, 0x5, 0x10001, 0x0, 0xd9, 0x1ff, 0x1, 0x1}, &(0x7f0000000080)={0xffffffff, 0x1, 0x53fb, 0xdd, 0x6, 0x3, 0x7, 0x9}, &(0x7f00000000c0)={0xfff, 0x9, 0x3f, 0x3, 0xa2, 0x57c2, 0x6, 0x3}, &(0x7f0000000100)={0x2})

186.938176ms ago: executing program 4 (id=462):
unveil(0x0, 0x0) (async)
syz_emit_ethernet(0x7f, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa00009078ffffffffffffffff4e214e2200"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000409078006d1a47b6684a9b874f051e05b9946b4faed1a62ebd4b20300554157d70ab53bcbea01509456831269c0a0000000000000000fc02b90666892b663cb362f4fdf8d130df780600000028ce"]) (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) (async)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x8, 0x3b9e, 0x289f, 0x7, "9b575e6b7d9cf39d69f3b9914b56ad2f2810faa0", 0x8})
syz_open_pts() (async)
ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000780)=0x7)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r2 = semget$private(0x0, 0x3, 0x8)
semctl$SETALL(r2, 0x0, 0x9, &(0x7f00000000c0)=[0x58, 0x8, 0x4, 0x1, 0x200, 0x7fff, 0x2, 0x0, 0x8, 0xc]) (async)
ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000000)) (async)
r3 = socket$inet(0x2, 0x1, 0x1)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000040)="ea00000100000000", 0x8)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="ea00000100000000b6973fbc", 0xc)
unveil(0x0, &(0x7f0000000140)='r\x00')

183.435605ms ago: executing program 1 (id=463):
sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}], 0x20, 0x400}, 0xa)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0, 0x0, 0x0, 0x31}, 0x0)
r0 = socket(0x800000018, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x104, 0x6, 0x0, 0xfffffffe}, {0x1, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]})
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r1, 0x300000)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2410, r2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x2, 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="140000000000000007000000", @ANYRES8=r0], 0x30, 0xb}, 0x0)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x100, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffffff, 0x80245753, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000ccc000/0x1000)=nil, &(0x7f0000685000/0x3000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x100000001}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c1c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x4}, {&(0x7f0000def000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x6}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000f20000/0x4000)=nil, 0x7f}, {&(0x7f0000d84000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000e82000/0x2000)=nil, 0x2fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x3bf87730}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x1}, {&(0x7f0000d1d000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0x20000})
r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0})
r5 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
r6 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r6, &(0x7f0000000380)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
accept$unix(r1, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9)
socket(0x24, 0x2, 0x0)

24.591678ms ago: executing program 7 (id=464):
pledge(&(0x7f0000000700)='tty V\xef\x86\b3|#\xcbQ8\x19\xce\x89K\x1f\xeb\x11]\xafZ\x13\x12\xe0\x19\x9c\xe6\x98\x0f \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kGS\x00\x00K\x00\x00\x00\x00\x00\x10\xeb\x91vr)\\\x9el\x03(rut\xd4\x9a\xbak\x04\x88J\x19\x9aU8\xee\xcf\xb4B\x95\x15\xb6\r^o\xfa\x03\x8bgI\xbdf\xc0\x9ffXo\x95\xad\x1f\x88\xd5\x95\xd9?!`\xbf\x8a\xeb5&\xdf\xeb\x04rN\\\x10\x18\xc3Unm\x84\vg\xef\xe8\xe3\xb1\x01\xdfZ\xfe\xd0\xa3\xa9E?\xa0\xcc\xd8\x8f\xff\x1e\xcd\x87_\xb9\xc2I<G[\x1a\x02,\xef4\x8ca\xa0m{\xd4t\xf3\xd5*q\xf4*\x0f\xfa\xe0\x00\x00\x00\x00\x00\x00\x00\x00E\xe6\xfc\xc0c~\x13\x8b\f\xbb\xc0\x03\x88\xbf\xce4\xf1\xc7\xdf \x0f/*5\xe0\x86\xbe\x95+\xef\xc3.\x87X\xf7\x1a\xaa\xf7\xae\xff\xe1\xda\xd5\xe7\x95#\xa3\xdb9\xc0\x817\xf7H\xd7\x8d\x7f[)\x03\x92\xae \xffb\x86XHg\xe2\a\xa4\xb8\xd2\xd2\xba\xa6Q\x1a\x8f\x13R\xf8\xeb\x03\xec^0[\x02\xe4\xc0.EI\xc4f}\x12\xd4\x0e\xda\xd7\a\xb5\xe3\x9d\xf2\xaf\xe7\x88\xb5\x9e\xfb4\xbddm\x14\x8a\xf7\xcd\x9cv\xba\x83h\x90\xf1\"\xb3\x88\xd0~\xba\x9dT\x95\xe4\x92\x8f|K\x85\xda\xdd\r|\x8d\xe9\xb1z_:8\xfd\xdeUgs\x13\x13\xe3\x96oN\x9a\xec\xaf\x1c\x88\\\xd1\x87\xb73`\xa3\xfe6\xf5Ik\xb38\x80-|\xf3$\x93\t\x97V\x17\xfaoF\xce\xce\x14\xc70\xf1&\x10~\xbf\xaeE\xaa(\x90*F\xbc\xdd\x82q\xf1v\x8eq\xde|\xe5\xd3\x86\x13^G\x16\x01\xa7\a\xd1\r\xe8\xc6\xc60\xb5\xd5\xb6B\xf7\xad\x94\xea\xd0\xd9\\H\xab\xba\xdfx\xa0-K\xcd\xb1f\xbb\xcf\xb3g#\n\xac\xfd\xb8\x9e\x8b.B\x815\"\xf1\x18\a6:\xdd\x0f:\n-za\x00\"\xbbR\f\x88A\x8aVLm\xd5\xb2\xb8\xfc\x94a\x19\a\x97,\xcd\xa0\x8bj\xac\x02\x97\xf33}G[b\x1f{3\xdfl\x0f\xba3q\x19\x1dB\x82\xb2\x83o\xe8\xac\x8e\xeb\x9d\xef\x1f\x03\xe9X\xff\xec\x02W\x98\x9c\x04{\a\x13\x8f\xe2\xdb\xeexxf?\xb7\n\xc0\xbb\xdc\xff\t\xe2;\x04\x83\x9d\xe9\xf4\xe7W\x85\xb4\xeaA\xb24t\xa4\x1cZ\xc9\x00\x00\x00\xaf\xfa\xbb\x137\x15\\\x18\x95\x14D-v\x06\x1b g;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7\xa9\xfd\x1c\x99J:\xab\xe9`\x1e7\xa9Y\x85\x19F\xea\xaec\xb28\xdc\x96\xc2\x15\x9b\xf4\xfe\xa0q\xc7\x8foXv\xbe\x14\xd8\x1bM\x8a\x1b)\x0e^\xba@\x93\xbaQnJ\xcb\xbc\x18=\x18\xa2\xe3U\x80\xa5q\xcaq\x05\x9f\x1b%\xf6\x12B.\x9f;\xed\x1c\xfe\xbb\x18W\x1dhM\a(\x14\xbf\xad\xf7W@c\xfe\xcc\x807\xf8GR\xac\xab$<\xdc\xdb,\xf8\xd8H\xe9\x00\xb5\x95\b\xd7<\x92\xa3\xd7~\'T\x10\xce\xe4\xc5\xd2\tN\x89H;Fc\xbc\xc7\x8a}oY\xd4UB\xb3\x0f\xaf;\x063\xfe\xad\x92\xb2\xe2\x01\x1b\xb1\x94\xbf\x98!%\x9d\xd0\x80\x85\xc7a\xdb\xa9-\xf2t\xba.\x99\x8e\xa6t_e\xcc\xbfu\xf7\x93\x80\x7f\xfd\x8b\xdek-]\x93J\xbf\xf6\xf0\xe4\xce[7#\f\xa1M\xb63\xf4\xd1\xbd\vc\x13\xa8\xbeL\xaaP\x7f\xd2\xc8\xf9\x94J\x01\xfbLsp\xdfR\x8c\b$~\xb0\x12$\x9b\x8aB\x03\x13\xde\xc8\xa70\xfb\xd7\x06\x95\xfba\x88\xcf\x91\xbc\xb1\xb9\x81\xda<\x0fg\xd7\x8b\xa2\xc2n\x01\xe4\xe7\xdf\xa5m1\xd6oP\xb6\xc0W\xde9\xe6\xbb\x95\xf60Wb\xf4Z\x17\xdfCI\xf9\x92M\xbb\xe9f\x99\x9c\xe7g\xb3\xc5\xdd\xe0\xceS\xed\xc4\x00'/960, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, 0x0, 0x0, 0x0, 0x0)

21.075895ms ago: executing program 2 (id=465):
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005166000009f050000002010000000000000cea10500fef96ee6d1efd3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6e3210200040000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002", 0x8a, 0x2, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = socket(0x2, 0x3, 0x0)
close(r1)
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000680), &(0x7f00000006c0)=0x8)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sysctl$vm(0x0, 0x0, &(0x7f00000000c0)="e00306a5513b7c9730cb1491ff7a", 0x0, 0x0, 0x0)
execve(0x0, &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/speaker\x00'], 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r4 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r5 = socket(0x2, 0x4001, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4)

20.69094ms ago: executing program 1 (id=466):
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x1011, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)

1.710173ms ago: executing program 7 (id=467):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fe, 0x0, 0x1, 0xfd4, 0x3, 0x5, 0x17ffe, 0x10, [{0x0, 0x3, 0x3, 0xa24}, {0xc5c, 0xb, 0x5, 0x1ff}, {0x800008, 0x20f05, 0x1fc, 0x7d2}, {0x7ffffffe, 0x3, 0x3, 0x784c}, {0x3fc, 0xd, 0x1002802, 0x4d8a}, {0x8, 0xff, 0x3, 0xb}, {0x8000008, 0x0, 0x81ea, 0x2d}, {0x2, 0x836, 0x17, 0x3}, {0x2, 0x40087e, 0x5, 0x7}, {0x0, 0xa74d925a, 0xffff, 0x40000088}, {0x1d9, 0x5, 0x4, 0x412c8391}, {0x3, 0xc, 0x20008, 0x40000010}, {0xb8d, 0x4, 0x8, 0x3}, {0x29a7171d, 0x81, 0x200, 0x6}, {0x400000, 0x7, 0xfffffff9, 0x100}, {0x200, 0x8, 0x801005, 0xc}]}) (async)
r0 = socket(0x1, 0x2, 0x0)
syz_emit_ethernet(0x8f, &(0x7f00000001c0)=ANY=[]) (async)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) (async)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000000000) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2)
r3 = socket(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000000), 0x10)
connect$unix(r3, &(0x7f0000000000), 0x10) (async)
r4 = kqueue()
close(r4)
kevent(r4, 0x0, 0x1, 0x0, 0x8, 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
recvfrom$inet(r3, 0x0, 0x0, 0x840, 0x0, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
write(r0, &(0x7f0000000240)="b3b69a8322c988a0b90fd0eadc4828ca523ff0aa4fec6dbb0a6a101052bfaefd15ce1ba1e141569008b3836d6771a26419a40e2f86ca926f1184b52b77cc55fb4a0f1e0aa091aa81f66b4129050e9f9b8fdad7", 0x53) (async)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x64, 0x16, 0x2, 0x2}, {0x1c, 0x3c, 0xb8, 0x3}, {0x3c46, 0x4, 0x36, 0x9}]}) (async)
syz_emit_ethernet(0x10004, &(0x7f0000000280)=ANY=[]) (async)
syz_extract_tcp_res(&(0x7f00000000c0), 0xfffff000, 0x1000)

398.656µs ago: executing program 1 (id=468):
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xd, 0x1, 0x1040807, 0xfffeffff, 0xffffffff, 0x0, 0xea58a3795ec839c9, 0x8, 0x8000000000f6})
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))
getsockopt(0xffffffffffffffff, 0x0, 0x67, 0x0, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$TIOCSETA(r2, 0xc444443b, &(0x7f0000000040)={0xfffffffd, 0x2f, 0xa, 0xe6b, "a2a481001000f4060033000e0100", 0xfffffffc, 0x4})
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = semget$private(0x0, 0x3, 0x54)
mkdir(&(0x7f0000000240)='./file0\x00', 0x1)
unveil(&(0x7f0000000300)='./file1\x00', &(0x7f00000000c0)='W\x00')
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x31, 0x9, 0x9, 0x80000004}, {0x30, 0x68, 0x6, 0xfff}, {0xfffe, 0x5, 0xdc, 0x80}]})
syz_emit_ethernet(0x212, &(0x7f0000000300)=ANY=[])
mkdir(&(0x7f00000003c0)='./file0/file1\x00', 0x75)
ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f0000000340)={0x800, 0xc})
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00')
chroot(&(0x7f0000000100)='./file0/file1\x00')
sysctl$net_inet_ip(&(0x7f0000000600)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000000740), 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0104419, &(0x7f0000000080)={0x5, 0x0, 0xa, 0x2000, "01d00180000000020000000000003c00", 0xbef, 0x915})
semop(r3, &(0x7f0000000240)=[{0x1, 0x1, 0x1000}, {0x2, 0xffff}], 0x2)
semctl$GETVAL(r3, 0x4, 0x5, 0x0)
semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000180)=[0x6, 0x2, 0x23e, 0x4ee, 0xffff, 0x7])
r5 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r5)
ktrace(&(0x7f00000002c0)='./file0\x00', 0x4, 0x40001902, 0x0)

0s ago: executing program 7 (id=469):
mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x406) (async)
open(&(0x7f0000000140)='./bus\x00', 0x8122, 0x2)

kernel console output (not intermixed with test programs):


OpenBSD/amd64 (ci-openbsd-multicore-4.us-central1-b.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts.
login: pckbd_enable: command error
vm_create: uvm_map failed: 12
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
wskbd0: can't attach mux (error=5)
pckbd_enable: command error
witness: shared lock of (rwlock) maddr while exclusively locked
panic: excl->share
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 417758  26809      0           0          0    0  syz-executor
* 28393  99333      0     0x14000      0x200    1  softclockmp
db_enter() at db_enter+0x25
panic(ffffffff833b4a35) at panic+0x1e5
witness_checkorder(ffff8000015a7878,1,0) at witness_checkorder+0x122c
rw_do_enter_read(ffff8000015a7860,0) at rw_do_enter_read+0x99
in6_hasmulti(fffffd80692f93f0,ffff8000015a7800) at in6_hasmulti+0x41
ip6_output(fffffd80692f9300,ffffffff839eee58,0,0,ffff80002a1fece0,0) at ip6_output+0x13bd
mld6_sendpkt(ffff80000154c100,83,0) at mld6_sendpkt+0x385
mld6_fasttimo() at mld6_fasttimo+0x16d
pffasttimo(ffffffff83a15020) at pffasttimo+0x184
timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159
softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7
softclock_thread_mp(ffff8000ffffe298) at softclock_thread_mp+0x86
end trace frame: 0x0, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: excl->share
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff833b4a35) at panic+0x1e5
witness_checkorder(ffff8000015a7878,1,0) at witness_checkorder+0x122c
rw_do_enter_read(ffff8000015a7860,0) at rw_do_enter_read+0x99
in6_hasmulti(fffffd80692f93f0,ffff8000015a7800) at in6_hasmulti+0x41
ip6_output(fffffd80692f9300,ffffffff839eee58,0,0,ffff80002a1fece0,0) at ip6_output+0x13bd
mld6_sendpkt(ffff80000154c100,83,0) at mld6_sendpkt+0x385
mld6_fasttimo() at mld6_fasttimo+0x16d
pffasttimo(ffffffff83a15020) at pffasttimo+0x184
timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159
softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7
softclock_thread_mp(ffff8000ffffe298) at softclock_thread_mp+0x86
end trace frame: 0x0, count: -12
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a1fe930
rbx               0xffff8000299dee07
rdx                                0
rcx               0xffff8000ffffe298
rax               0xffff8000299ddff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x37f77734816f3fb2
r11               0x17ac7962c89c1a77
r12               0xffff8000299dec08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff810e0165    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a1fe920
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (softclockmp) tid=28393 pid=99333 tcnt=1 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    runpri=0, usrpri=50, slppri=0, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffffe000,0xffff8000ffffe540
    process=0xffff8000ffff9340 user=0xffff80002a1f9000, vmspace=0xffffffff83a0c438
    estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 26809  417758  26155      0  7           0                syz-executor
 26809  332233  26155      0  2   0x4000000                syz-executor
 26809  515338  26155      0  2   0x4000000                syz-executor
 99734  344686  74121      0  2           0                syz-executor
 99734  455407  74121      0  2   0x4000000                syz-executor
 40232  141793   6112      0  2           0                syz-executor
 40232  416282   6112      0  2   0x4000000                syz-executor
  4640   63418  45085      0  2       0xc80                syz-executor
  4640  236724  45085      0  3   0x4000080  fsleep        syz-executor
  4640  419115  45085      0  3   0x4000080  fsleep        syz-executor
  4640  357622  45085      0  3   0x4000080  fsleep        syz-executor
 57677  363396  19530      0  2       0xc80                syz-executor
 57677   29461  19530      0  3   0x4000080  kqread        syz-executor
 57677  425630  19530      0  3   0x4000080  fsleep        syz-executor
 68162  294919  56179      0  2       0xc80                syz-executor
 68162  268665  56179      0  3   0x4000080  ttyout        syz-executor
 68162  342283  56179      0  3   0x4000080  ttyout        syz-executor
 68162  361107  56179      0  3   0x4000080  ttyin         syz-executor
 68162  281717  56179      0  3   0x4000080  fsleep        syz-executor
 74121  443270  44121      0  2       0xc82                syz-executor
 26155  462089  44121      0  2       0xc82                syz-executor
 56179   10593  44121      0  2       0xc82                syz-executor
 23466   88063  44121      0  2       0xc82                syz-executor
 45085  306865  44121      0  2       0xc82                syz-executor
 19530  466062  44121      0  2       0xc82                syz-executor
  6112  344238  44121      0  2       0xc82                syz-executor
 40028   46652  44121      0  2       0xc82                syz-executor
 44121  291388  66709      0  3        0x82  kqread        syz-executor
 66709   24822  76616      0  3    0x10008a  sigsusp       ksh
 76616  464869  11978      0  3        0x98  kqread        sshd-session
 11978  131570  98022      0  3        0x92  kqread        sshd-session
 29949   43566      1      0  3    0x100083  ttyin         getty
 98022   90056      1      0  3        0x88  kqread        sshd
 98160  431651  12681     74  3   0x1100092  bpf           pflogd
 12681  427683      1      0  3        0x80  sbwait        pflogd
 42947  175655  69173     73  3   0x1100090  kqread        syslogd
 69173  446576      1      0  3    0x100082  sbwait        syslogd
 30110  441775      1      0  3    0x100080  kqread        resolvd
 44293   79243  27632     77  3    0x100092  kqread        dhcpleased
  2817  367029  27632     77  3    0x100092  kqread        dhcpleased
 27632  326207      1      0  3        0x80  kqread        dhcpleased
 23104  518999      0      0  2  0x40014200                smr
 67462  217836      0      0  2     0x14200                zerothread
 68146  293219      0      0  3     0x14200  aiodoned      aiodoned
 66303  444952      0      0  2     0x14e00                update
 31416   83687      0      0  3     0x14200  cleaner       cleaner
 93262  161755      0      0  3     0x14200  reaper        reaper
 40979  322931      0      0  3     0x14200  pgdaemon      pagedaemon
  3033   41483      0      0  3     0x14200  bored         viomb
 89889  248735      0      0  3  0x40014200  acpi0         acpi0
 33283  380350      0      0  3  0x40014200                idle1
 72794  326609      0      0  3     0x14200  bored         softnet1
 86433  335867      0      0  3     0x14200  bored         softnet0
 80709  427095      0      0  3     0x14200  smrbar        systqmp
 56414  493534      0      0  3     0x14200  bored         systq
*99333   28393      0      0  7     0x14200                softclockmp
 70468  225708      0      0  3  0x40014200  tmoslp        softclock
 31486  148940      0      0  3  0x40014200                idle0
     1  387584      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 80709 (systqmp) thread 0xffff8000ffffea60 (427095)
shared rwlock systqmp r = 0 (0xffffffff83892ca8)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
Process 99333 (softclockmp) thread 0xffff8000ffffe298 (28393)
exclusive rwlock maddr r = 0 (0xffff8000015a7878)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  mld6_fasttimo+0x8c
#3  pffasttimo+0x184
#4  timeout_run+0x159
#5  softclock_thread_run+0xe7
#6  softclock_thread_mp+0x86
#7  proc_trampoline+0x10
shared rwlock netlock r = 0 (0xffffffff83891cc0)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  mld6_fasttimo+0x5f
#3  pffasttimo+0x184
#4  timeout_run+0x159
#5  softclock_thread_run+0xe7
#6  softclock_thread_mp+0x86
#7  proc_trampoline+0x10
shared rwlock timeout r = 0 (0xffffffff83835d78)
#0  witness_lock+0x5f1
#1  timeout_run+0x131
#2  softclock_thread_run+0xe7
#3  softclock_thread_mp+0x86
#4  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11080  12170K   12432K 166960K     12994        0
            pcb    18     12K      12K 166960K        91        0
         rtable   223      8K       9K 166960K       458        0
             pf    34     17K      81K 166960K        99        0
         ifaddr    40      6K       8K 166960K        70        0
        ifgroup    55      2K       2K 166960K       106        0
         sysctl     4      1K       9K 166960K         9        0
       counters    70     37K      37K 166960K       120        0
       ioctlops     0      0K       4K 166960K      1638        0
            iov     0      0K      16K 166960K        26        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1402     88K      89K 166960K      1884        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem    11      0K       0K 166960K        16        0
        dirhash    12      2K       2K 166960K        24        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      85K 166960K       615        0
          sigio     0      0K       0K 166960K         6        0
           proc    72    115K     148K 166960K       602        0
        subproc    72      4K       4K 166960K        82        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     2      0K       0K 166960K       204        0
       in_multi    84      6K       7K 166960K       120        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     4      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   127    572K     572K 166960K       127        0
           exec     0      0K       1K 166960K       502        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   253    160K     178K 166960K      7278        0
       UVM aobj    12      6K       6K 166960K        16        0
     pinsyscall    43     86K     101K 166960K      1770        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        33        0
            NDP    12      0K       1K 166960K        48        0
           temp    79   8680K    8752K 166960K     33177        0
         kqueue    13     20K      28K 166960K       130        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      206    0      203     3     0     3     3     0     8    2
rtentry    176      132    0       38     6     0     6     6     0     8    0
unpcb      144      387    0      370     7     1     6     6     0     8    5
syncache   336        5    0        5     2     1     1     1     0     8    1
tcpcb      736      235    0      230     7     6     1     7     0     8    0
arp        136       21    0        4     1     0     1     1     0     8    0
inpcb      328      711    0      701     9     5     4     7     0     8    2
nd6        152       31    0        7     1     0     1     1     0     8    0
pkpcb       40        4    0        4     1     0     1     1     0     8    1
kcovpl      48        9    0        1     1     0     1     1     0     8    0
mppekey    1024       2    0        2     1     0     1     1     0     8    1
ppxss      1192      19    0       19     1     0     1     1     0     8    1
pppxif     1576       1    0        1     1     1     0     1     0     8    0
pffrag     232        8    0        0     1     0     1     1     0   482    0
pffrnode    88        8    0        0     1     0     1     1     0     8    0
pffrent     40       10    0        2     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       59    0        8     1     0     1     1     0     8    0
pfstkey    128       59    0        8     2     0     2     2     0     8    0
pfstate    448       59    0        8     7     0     7     7     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
rttmr      136        2    0        0     1     0     1     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      544    0      137    29     1    28    29     0     8    2
art_table   40      546    0      137     5     0     5     5     0     8    0
art_node    32      132    0       47     1     0     1     1     0     8    0
sysvmsgpl   40        8    0        6     1     0     1     1     0     8    0
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112       12    0        3     1     0     1     1     0     8    0
shmpl      112       10    0        3     1     0     1     1     0     8    0
dirhash    1024      25    0        8     3     0     3     3     0     8    0
dino2pl    256     2538    0     1034    96     0    96    96     0     8    0
ffsino     296     2538    0     1034   118     0   118   118     0     8    0
nchpl      144     3395    0     1690    64     0    64    64     0     8    0
rtmask      32        3    0        3     2     1     1     1     0     8    1
vnodes     216     2928    0        0   163     0   163   163     0     8    0
namei      1024   11755    0    11755     2     1     1     2     0     8    1
percpumem   16       75    0       25     1     0     1     1     0     8    0
vcpupl     3968       2    0        0     1     0     1     1     0     8    0
vmpool     848        3    0        1     1     0     1     1     0     8    0
kstatmem   264       64    0       36     3     0     3     3     0     8    1
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72        5    0        5     2     1     1     1     0     8    1
scxspl     216    13860    0    13860    10     3     7     8     1     8    7
plimitpl   152      128    0      109     1     0     1     1     0     8    0
sigapl     424      923    0      875     6     0     6     6     0     8    0
knotepl    120      329    0        0    10     0    10    10     0     8    0
kqueuepl   224      320    0      309     6     1     5     5     0     8    4
pipepl     344      159    0      132     3     0     3     3     0     8    0
fdescpl    528      906    0      874     3     0     3     3     0     8    0
filepl     160     5803    0     5573    17     1    16    16     0     8    5
lockfpl    104      152    0      150     1     0     1     1     0     8    0
lockfspl    48       72    0       70     1     0     1     1     0     8    0
sessionpl  144       24    0       15     1     0     1     1     0     8    0
pgrppl      48       41    0       23     1     0     1     1     0     8    0
ucredpl    104      599    0      586     1     0     1     1     0     8    0
zombiepl   144      877    0      875     1     0     1     1     0     8    0
processpl  1232     923    0      875     5     1     4     5     0     8    0
procpl     664     1747    0     1686     6     0     6     6     0     8    0
sosppl     176        2    0        2     2     1     1     1     0     8    1
sockpl     752     1330    0     1300    19     8    11    17     0     8    7
mcl64k     65536     16    0        0     2     0     2     2     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     112    0        0    14     0    14    14     0     8    0
mcl2k      2048      45    0        0     6     0     6     6     0     8    0
mtagpl      96       15    0        0     1     0     1     1     0     8    0
mbufpl     256      230    0        0    15     0    15    15     0     8    0
bufpl      280     4813    0      132   335     0   335   335     0     8    0
anonpl      32     9272    0        0    75     0    75    75     0   246    0
amapchunkpl 152   23983    0    23334    32     0    32    32     0   158    2
amappl16   200     3068    0     3031    19     6    13    16     0     8    8
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184       77    0       77     2     2     0     1     0     8    0
amappl13   176      440    0      439     1     0     1     1     0     8    0
amappl12   168     1275    0     1232     3     0     3     3     0     8    0
amappl11   160        4    0        4     2     1     1     1     0     8    1
amappl10   152       49    0       35     1     0     1     1     0     8    0
amappl9    144      251    0      251     1     1     0     1     0     8    0
amappl8    136       34    0       32     1     0     1     1     0     8    0
amappl7    128       82    0       80     1     0     1     1     0     8    0
amappl6    120      291    0      278     1     0     1     1     0     8    0
amappl5    112       78    0       67     1     0     1     1     0     8    0
amappl4    104      428    0      396     1     0     1     1     0     8    0
amappl3     96     4023    0     3926     3     0     3     3     0     8    0
amappl2     88     1020    0      942     2     0     2     2     0     8    0
amappl1     80    11384    0    10791    15     1    14    14     0     8    0
amappl      88     6457    0     6281     5     0     5     5     0    92    0
uvmvnodes   80      115    0        0     3     0     3     3     0     8    0
dma65536   65536      1    0        1     1     0     1     1     0     8    1
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        7    0        7     2     1     1     1     0     8    1
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       15    0        4     1     0     1     1     0     8    0
uaddrrnd    24      906    0      874     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      906    0      874     1     0     1     1     0     8    0
vmmpekpl   168     8978    0     8939     3     0     3     3     0     8    1
vmmpepl    168    64330    0    62331   100     1    99    99     0   357    9
vmsppl     488      905    0      874     6     1     5     5     0     8    1
rwobjpl     80    19877    0    18807    28     0    28    28     0     8    1
pdppl      4096    1826    0     1752   100    25    75    82     0     8    1
pvpl        32    17281    0        0   142     2   140   141     0   265    0
pmappl     256      908    0      875     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      296    0       37     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837e3ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7a185fc4b100, count: 12
ddb{0}> trace
x86_ipi_db(ffffffff837e3ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7a185fc4b100, count: -3
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff833b4a35) at panic+0x1e5
witness_checkorder(ffff8000015a7878,1,0) at witness_checkorder+0x122c
rw_do_enter_read(ffff8000015a7860,0) at rw_do_enter_read+0x99
in6_hasmulti(fffffd80692f93f0,ffff8000015a7800) at in6_hasmulti+0x41
ip6_output(fffffd80692f9300,ffffffff839eee58,0,0,ffff80002a1fece0,0) at ip6_output+0x13bd
mld6_sendpkt(ffff80000154c100,83,0) at mld6_sendpkt+0x385
mld6_fasttimo() at mld6_fasttimo+0x16d
pffasttimo(ffffffff83a15020) at pffasttimo+0x184
timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159
softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7
softclock_thread_mp(ffff8000ffffe298) at softclock_thread_mp+0x86
end trace frame: 0x0, count: 3
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff833b4a35) at panic+0x1e5
witness_checkorder(ffff8000015a7878,1,0) at witness_checkorder+0x122c
rw_do_enter_read(ffff8000015a7860,0) at rw_do_enter_read+0x99
in6_hasmulti(fffffd80692f93f0,ffff8000015a7800) at in6_hasmulti+0x41
ip6_output(fffffd80692f9300,ffffffff839eee58,0,0,ffff80002a1fece0,0) at ip6_output+0x13bd
mld6_sendpkt(ffff80000154c100,83,0) at mld6_sendpkt+0x385
mld6_fasttimo() at mld6_fasttimo+0x16d
pffasttimo(ffffffff83a15020) at pffasttimo+0x184
timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159
softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7
softclock_thread_mp(ffff8000ffffe298) at softclock_thread_mp+0x86
end trace frame: 0x0, count: -12