last executing test programs: 3.596690054s ago: executing program 5 (id=52): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r0 = socket(0x1, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4) accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x63) r1 = getpid() ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r1) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000200)=""/121, 0x79, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x8) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) 2.418383633s ago: executing program 5 (id=59): r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0xc0) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x57}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)) pwrite(r0, &(0x7f0000001080)="1f", 0x1, 0x9) 2.41671601s ago: executing program 5 (id=62): socket(0x18, 0x3, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x16e) socket(0x800000018, 0x2, 0x0) socket(0x18, 0x1, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x80206910, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x2, 0x71000}, {0x7, 0x8, 0x9, 0x4}, {0x8, 0x8000b86, 0xffffff7c, 0x9}, {0x9d37, 0x8800, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x9, 0x4, 0x30005}]}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') 2.320736044s ago: executing program 6 (id=64): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xfffffffc, "0000000000000000000000000300001100", 0x11, 0x1100a}) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x80, 0xf0000000, 0x0, 0x7}, {{}, 0xfffffffffffffffb, 0x0, 0x40000000, 0xfff, 0x6}, {{}, 0xfffffffffffffffd, 0x42, 0x4, 0x45, 0xfffffffffffffffa}, {{r0}, 0xfffffffffffffffa, 0x40, 0xfffff, 0x8}, {{}, 0xfffffffffffffffa, 0xb2, 0x2, 0x2, 0x5}], 0xf, 0x0, 0x400, 0x0) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000}}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x18, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000240)="000800000000ff00", 0x8) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0xaf8, 0x7, 0x7, 0x8, "114bbfc0137764b85f4b7900f8a2f2a92dd8350c", 0x0, 0x3}) getsockname(r1, 0x0, &(0x7f0000000100)) r3 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r3, 0x29, 0x41, 0x0, 0x0) 2.314996974s ago: executing program 5 (id=65): connect$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockname$inet6(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$sock_int(r0, 0xffff, 0x73fd274f14e86d9, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$sock_int(r0, 0xffff, 0x73fd274f14e86d9, &(0x7f0000000180), &(0x7f00000001c0)=0x4) recvfrom$inet6(r0, &(0x7f0000000200)=""/21, 0x15, 0x42, 0x0, 0x0) sendto(r2, &(0x7f0000000240)="5f5fa5fff297370e0fef3b90e74db886915f7f6e2412b37badee8c049747b1e9030edb81febe85980db9d60f0554c2a2e5521d0f013cf9fb47f79391a0b023ed11bcd7d096e81b7a6f1f860abf2b45d7c8354ef1b4948827a2b3b31f23d0028ff55f46b76fc59720e8bee91ba929136668149275700c00beeb239d281d24d9859d8a657bd849601315a45c13037c9259ee0922270e4300956219821db8374ea1a0445fb8478d2343c2d80d2002fea7229061fb88098b3e7dbdca2c0d122e95977902888a1ac7ebf3", 0xc8, 0x8, &(0x7f0000000340)=@un=@file={0x0, './file0\x00'}, 0xa) sendto(0xffffffffffffffff, &(0x7f0000000380)="8f2baa92186d5e2b08c5ee550420b035f9925376a063634a1ec0a66ae8e35825d2c2c1150afcc982a349dbd4cacf5b039b7061960a27af92e4e52c6b72219030e7fd232ca8c81fa8a4841e3fa3b72dedfb268dd686e03fd7c0f4f5ead7cf528bc48cd2b57b3ab8dbfd17932aaf0b60cd2f1a7895f675d5bf594ff575e71befb77df1545c928a5384971fb15634e0a1e65a3fe430e2821ea69c74cba036614a343528ea926807cbbd4e27910cb3899170895225eb88b7d1e931504c50be9617185e906856060dcbb45d0141a69b44f25bc342b8a8a9b9149ba0c5d11a97557f1cdf222b1ee93bf2b0269cc3", 0xeb, 0x6, &(0x7f0000000480)=@in={0x2, 0x2}, 0xc) msgget$private(0x0, 0x6) msgget$private(0x0, 0x20) (async) msgget$private(0x0, 0x20) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) r4 = accept$unix(r3, &(0x7f0000000500)=@abs, &(0x7f0000000540)=0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x811, r0, 0xfff) recvfrom$inet6(r2, &(0x7f0000000580)=""/245, 0xf5, 0x1040, &(0x7f0000000680)={0x18, 0x2, 0xc93, 0xc}, 0xc) (async) recvfrom$inet6(r2, &(0x7f0000000580)=""/245, 0xf5, 0x1040, &(0x7f0000000680)={0x18, 0x2, 0xc93, 0xc}, 0xc) openat$tty(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) (async) r5 = openat$tty(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0) (async) r6 = openat$pci(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0) kevent(r3, &(0x7f0000000740)=[{{r0}, 0xfffffffffffffffd, 0x89, 0x2, 0x757, 0x6}, {{r4}, 0xfffffffffffffffb, 0x22, 0x1, 0xdf, 0x9}, {{r0}, 0xfffffffffffffff8, 0x2, 0x2, 0x2d, 0x7}, {{r0}, 0xfffffffffffffffa, 0xf6, 0x2, 0x40, 0x5}, {{r1}, 0xfffffffffffffffb, 0xa0, 0x20, 0x5, 0xbe}, {{r3}, 0xfffffffffffffff8, 0x0, 0x1, 0x120000000, 0x100000000}, {{r4}, 0xfffffffffffffffe, 0xaa, 0x1, 0xf0, 0x80}, {{r5}, 0xfffffffffffffffd, 0xdc, 0x1, 0x8, 0x9}, {{r1}, 0xffffffffffffffff, 0x40, 0x1, 0xa18, 0x7f}, {{r6}, 0xfffffffffffffff0, 0x40, 0x20, 0x9, 0xbd5dc80000000000}], 0x8, &(0x7f0000000880)=[{{r3}, 0xfffffffffffffffb, 0x86, 0xf0000023, 0x2, 0x9}, {{r4}, 0xfffffffffffffffa, 0xb1, 0x2, 0x5, 0x6}, {{r0}, 0xffffffffffffffff, 0xcd843929d42bd2b0, 0x20, 0xff, 0x9}, {{r2}, 0xfffffffffffffffe, 0x80, 0x10, 0xab, 0x6564}, {{r3}, 0xffffffffffffffff, 0x80, 0xfffff, 0x9725, 0x3}, {{r3}, 0xfffffffffffffffe, 0x86, 0xfffff, 0x7ff}, {{r4}, 0xfffffffffffffffe, 0x55, 0x1, 0x0, 0x7}, {{r4}, 0xfffffffffffffffb, 0x2, 0x20, 0xf, 0x6}, {{r1}, 0xfffffffffffffffb, 0x14, 0x2, 0x6, 0x7}], 0x3a2, &(0x7f00000009c0)={0x2, 0xfffffffffffffc63}) (async) kevent(r3, &(0x7f0000000740)=[{{r0}, 0xfffffffffffffffd, 0x89, 0x2, 0x757, 0x6}, {{r4}, 0xfffffffffffffffb, 0x22, 0x1, 0xdf, 0x9}, {{r0}, 0xfffffffffffffff8, 0x2, 0x2, 0x2d, 0x7}, {{r0}, 0xfffffffffffffffa, 0xf6, 0x2, 0x40, 0x5}, {{r1}, 0xfffffffffffffffb, 0xa0, 0x20, 0x5, 0xbe}, {{r3}, 0xfffffffffffffff8, 0x0, 0x1, 0x120000000, 0x100000000}, {{r4}, 0xfffffffffffffffe, 0xaa, 0x1, 0xf0, 0x80}, {{r5}, 0xfffffffffffffffd, 0xdc, 0x1, 0x8, 0x9}, {{r1}, 0xffffffffffffffff, 0x40, 0x1, 0xa18, 0x7f}, {{r6}, 0xfffffffffffffff0, 0x40, 0x20, 0x9, 0xbd5dc80000000000}], 0x8, &(0x7f0000000880)=[{{r3}, 0xfffffffffffffffb, 0x86, 0xf0000023, 0x2, 0x9}, {{r4}, 0xfffffffffffffffa, 0xb1, 0x2, 0x5, 0x6}, {{r0}, 0xffffffffffffffff, 0xcd843929d42bd2b0, 0x20, 0xff, 0x9}, {{r2}, 0xfffffffffffffffe, 0x80, 0x10, 0xab, 0x6564}, {{r3}, 0xffffffffffffffff, 0x80, 0xfffff, 0x9725, 0x3}, {{r3}, 0xfffffffffffffffe, 0x86, 0xfffff, 0x7ff}, {{r4}, 0xfffffffffffffffe, 0x55, 0x1, 0x0, 0x7}, {{r4}, 0xfffffffffffffffb, 0x2, 0x20, 0xf, 0x6}, {{r1}, 0xfffffffffffffffb, 0x14, 0x2, 0x6, 0x7}], 0x3a2, &(0x7f00000009c0)={0x2, 0xfffffffffffffc63}) close(r4) (async) close(r4) syz_emit_ethernet(0x2a, &(0x7f0000000a00)={@local, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @empty, @loopback, @remote, @local={0xac, 0x14, 0x0}}}}}) socketpair(0x1, 0x4000, 0x6, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r7, &(0x7f0000000a80)=@in6={0x18, 0x2, 0x5, 0x3}, 0xc) ioctl$WSKBDIO_SETBELL(r3, 0x80105703, &(0x7f0000000ac0)={0x5, 0x4, 0x9, 0x2}) ioctl$TIOCSTOP(r5, 0x2000746f) (async) ioctl$TIOCSTOP(r5, 0x2000746f) syz_extract_tcp_res(&(0x7f0000000b00), 0x5000000, 0xfffffffe) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r9 = semget$private(0x0, 0x1, 0x8) semctl$SETALL(r9, 0x0, 0x9, &(0x7f0000000b40)=[0x3]) (async) semctl$SETALL(r9, 0x0, 0x9, &(0x7f0000000b40)=[0x3]) r10 = accept$unix(r3, &(0x7f0000000b80)=@file={0x0, ""/518}, &(0x7f0000000dc0)=0x208) sendto$unix(r10, &(0x7f0000000e00)="40afc72a16f57314e3aabc4727234b2f0f0a018976f913812f6e79b254aba8e7bbe4272929e6b2a2c39eb93ec7be8edb76f183248ff183cd96f023d93b87c97dcb521f135b93c64a3d44f43b53725b04f110c6786b3eb1aff86df88ebd5498bb30bb6ce13146f154c7559da08d578ed5eb6038dcd2156d2d1454e7aecaf66a02a9a620ccfb7c4057f8fc7fdfaa41993089c27ae5aef8c965e2b7d513c22916a6bf137d3ca6bf3a9c0ae7eb2733f208fb383f96d28b13add4c89ddecb4d8233eedb5a36cf7b83cb3a24f3a90010551e9190adbd55388426a598f670f97cf037000ff36d8b38a48c4889fa5546fdb268e0369360c85608e7", 0xf7, 0x7, &(0x7f0000000f00)=@file={0x0, './file0\x00'}, 0xa) lseek(r8, 0x8000000000000001, 0x2) (async) lseek(r8, 0x8000000000000001, 0x2) 2.31048166s ago: executing program 1 (id=66): r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={0x10}], 0x10, 0x400}, 0x0) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) (async) pipe(&(0x7f0000000000)) 2.30561656s ago: executing program 1 (id=67): sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7bf, &(0x7f0000000380)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x0, 0xff, 0x0, @broadcast, @rand_addr=0xac14ffff}, @generic="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"}}}}) 2.303012491s ago: executing program 1 (id=69): r0 = socket(0x2, 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x6, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xfffffffe, 0x6, 0xfff}, {0xffffffff, 0x4baa, 0x3, 0x1}, {0x4, 0xe6, 0x651b1e8a, 0xfe}, {0x3, 0x7, 0xf19, 0x4}, {0x788c, 0xffff, 0x7, 0x9}, {0x4, 0x53349b65, 0x7}, {0xfff3, 0xd, 0x28000, 0xffffe2e9}, {0x9, 0x700000, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x800, 0x5}, {0x0, 0x8, 0x8, 0x400006}, {0x3, 0xc7cb, 0x800000, 0xa6a}, {0x401, 0x30, 0x9, 0xa1}, {0xf5d3db25, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0xd}, {0x8216, 0x2, 0x2, 0x69}]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x4}) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x800000018, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) 2.289434587s ago: executing program 6 (id=71): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x8001}]}) socket(0x11, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) recvfrom$unix(r1, &(0x7f0000000340)=""/210, 0xd2, 0x2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa) sendto$unix(r1, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="e15a79c7def7ffffff635a54860602af124413450200a1f515b49156f305df5a9da4070000006ebb807e7fa1d2638b4317a564f770e674e94be9ab52a2fc7d146926241b8f4f276c91ad2a72747462a44e2b2e2d2ebe049f278c02d100000000", &(0x7f0000000080)=0x60, 0x0, 0x0) chroot(&(0x7f0000000440)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pipe(&(0x7f0000000280)={0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0xd4e688a67930cd) ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f0000000240)) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="1d", 0x1}], 0x1) close(r2) (async) close(r2) unlinkat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x12, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x12, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[]) 1.135239987s ago: executing program 6 (id=73): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.128146391s ago: executing program 4 (id=74): getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt(r0, 0x1ff, 0x1b, &(0x7f0000000100)="43c666cac43a402d8864a2f1f7d5b2874ea3a6a1a5ec081b041fe74667f34d48894175160914d4793960a61c3a99cce077c91ec390401563b9f618a4dec282dd32b8880ef424334f372f9f54ff8b92b136aa4785cb2e57b5f46e1aa94c814ca2e20243761c1a81ab7aec9690a3de2c903099aec35be3888fb66ba6b243d1d22048", 0x81) mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f00000001c0)) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) 1.127905294s ago: executing program 4 (id=75): r0 = socket(0x18, 0x1, 0x0) getpeername(r0, &(0x7f00000000c0)=@in6, &(0x7f0000000240)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x10b) pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/29, 0x1d}], 0x1) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047470, &(0x7f0000000000)=0x1) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000180)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be0800000000000000882b297be1aa5b23edeb51e2f0ac3ee345787188f8e04abb55bbc257699a1f139b672f4d335d223e7db3008b95665bc6fc211800b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e305000000343712051eeab71d89e0", 0xb1, 0x2, 0x0, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$FIOASYNC(r4, 0x80047460, &(0x7f0000000180)=0x4) r5 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r5) syz_open_pts() writev(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="890000000100000000"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 1.126922941s ago: executing program 6 (id=76): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$TIOCSETA(r1, 0xc1584460, &(0x7f0000000740)={0x2, 0x80002f, 0x2b, 0x10002, "97a2a24ff3c14649ebb178926cc9795a6b47c1d1", 0x3, 0x3}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x200, 0xd, 0x24, 0x1}, {0x82, 0x9, 0x0, 0x2}, {0x2, 0x8, 0xb}]}) syz_emit_ethernet(0x13af, &(0x7f0000000180)=ANY=[]) 1.126466922s ago: executing program 2 (id=77): syz_emit_ethernet(0x46, &(0x7f00000017c0)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x4, 0x7f, 0x7, 0xc500, 0x1ff}}}}}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"}) close(r0) 944.656223ms ago: executing program 1 (id=78): r0 = socket(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x5) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x4) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) 944.275871ms ago: executing program 2 (id=79): r0 = kqueue() mmap(&(0x7f00000c7000/0x1000)=nil, 0x1000, 0x0, 0x5812, r0, 0xb94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="a3f7c0cdcc2ad2c755444c8e", 0xc) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x70c3, 0x4, 0xfffffffc, 0x107, 0x80000000, 0x33a, 0xaea7, 0x10, [{0x0, 0x4, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0x5, 0x3, 0x8000}, {0x7, 0x800, 0x9}, {0x101, 0x0, 0xd, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0x1cde, 0x1, 0x4f8, 0x406d}, {0xa, 0x3, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8c}, {0xf88, 0x10001, 0x6, 0xd34}, {0x7ff, 0x9, 0x7, 0x5}, {0xb8c, 0x4, 0x2, 0x6}, {0x1009, 0x7, 0x1, 0x6}, {0x6, 0x7, 0x2006, 0x400}, {0x200, 0x1, 0x4, 0x2}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x100) (async) r5 = socket(0x2, 0x400000000002, 0x0) getsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71004}, {0x7, 0x4, 0x9, 0x40000003}, {0x6, 0xf88, 0x1, 0x2}, {0x1, 0x800, 0x2}, {0x1, 0x7fffffff, 0xe, 0x7}, {0x2, 0x1, 0x3, 0x9a}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0xfff}, {0x6, 0xfffffff2, 0xc7, 0x88}, {0x4, 0xfffb, 0xb, 0xaeb}, {0x803, 0x40, 0xa, 0x5}, {0xe0, 0x4, 0x1, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x1, 0x7, 0x7}, {0x0, 0x4, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x1c, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xbd, 0x0, 0x1, {[@mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x4}]}}}}}}}}) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) shmat(r2, &(0x7f000055c000/0x4000)=nil, 0x2000) 874.398923ms ago: executing program 6 (id=83): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) setrlimit(0x5, &(0x7f0000000040)={0xc, 0x4e}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000000c0)={0xfffff234, 0x3, 0x3, 0xfffffff8, "2303007cbe0a00817dd8910bb864d3c3a3c92000", 0xa, 0xffffeffd}) writev(r1, &(0x7f0000002540)=[{&(0x7f0000000400)="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", 0x2a2}], 0x1) syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efb0490670000000000010000000000000afffffffefe8000000000000000000000000000aa880c000000000000fe8000"/74]) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x41) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="3622946e18d8c0299689ff4189146fd8659cc6e393bf624d6528e5d3a62673752550edee1cce34357529f9682f3a606ca0ee2f4e278b3c819247f8384e5832d6b4de47206056354683a4f23006f494744b", 0x51}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x2, 0x6, "72729b", 0x8, 0x4, 0x6, @loopback, @local={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x4, 0x0, 0xd, 0x0, 0x0, 0x5, 0x64}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(r4, 0x0) setregid(0x0, 0xffffffffffffffff) ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x2f, 0xffff, 0x40a9, 0x20000003, "0400000000800000ebb178d952d6d31962fff0d1", 0x9, 0x2}) 873.662312ms ago: executing program 5 (id=85): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x4, 0x10, r0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') 777.936585ms ago: executing program 5 (id=87): select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x4000000006, 0x181c, 0xdc, 0x8000}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r1, &(0x7f0000000180)='f', 0x1) write(r1, &(0x7f0000000340), 0xd4e688a67930cd) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x82, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) 768.878458ms ago: executing program 6 (id=91): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VT_ACTIVATE(r2, 0x20007605, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) close(r4) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 577.459444ms ago: executing program 1 (id=97): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0]) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x3, 0x2000007, 0x2b26, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x40000004, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x6fb, 0x2800, 0x7}, {0x1, 0x650, 0xfffffffe, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x5}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x806, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x1}, 0xa, 0x3, 0x0, 0x0, 0x3, 0x80000080000000f, 0x7, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) execve(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') mknod$loop(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) 577.185949ms ago: executing program 2 (id=98): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2012, r0, 0xfffffffffffffffc) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x2, 0x80, 0xf0, 0x8}, {0x7c, 0x9, 0x2, 0x80004a}, {0x6, 0x1, 0x5a, 0xfffff000}]}) (async) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000180)={0x3, 0x1d}) (async) poll(0x0, 0x0, 0x5) (async) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[]) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 577.013301ms ago: executing program 0 (id=99): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', 0x10000, &(0x7f0000000100)='./file0\x00', 0x8}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) 576.679434ms ago: executing program 3 (id=100): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000180)=0xf) close(r0) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x25c5) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x4, 0x7, 0x4, 0x71002}, {0x8, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x0, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x3, 0x650, 0x200, 0x99}, {0x2, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x4000014, 0xa}, {0x2, 0x82, 0x5, 0x5}, {0x6a71, 0x8001, 0xd17, 0x4}, {0xff, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0x2b8c, 0x7, 0x8, 0x209}, {0x29a71717, 0x1b152c62, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x69) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x3, 0x1, 0x100, 0x8a, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x3, 0x7) sendto$unix(r3, &(0x7f0000000480)="b10005136000009f05003e0800000000331c13fecea10500fef96ecfc72fd3357a068d02bc31a3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8faff0037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9b287948a62310db415f779642cdcd71a3f8343712051e", 0xb1, 0x9000000000000000, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) 478.994927ms ago: executing program 0 (id=102): openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="825a4fc3b1f0b0c7c8bd020000107c60f76c090804000000007bd16e8fb2bcccf69affebfdbb31c0c7313e675feadedb", 0x30}], 0x1}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="e15a79c7de1e2c6bf7635a5486298fa9b31bec12f9b5e74ad1d56fa8af0602af1244b81545", &(0x7f0000000080)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(0xffffffffffffffff) r1 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) fchdir(r1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="825a4fc3b1f0b0c7c8bd020000107c60f76c090804000000007bd16e8fb2bcccf69affebfdbb31c0c7313e675feadedb", 0x30}], 0x1}, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="e15a79c7de1e2c6bf7635a5486298fa9b31bec12f9b5e74ad1d56fa8af0602af1244b81545", &(0x7f0000000080)=0x25, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setuid(0xffffffffffffffff) (async) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) (async) fchdir(r1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) (async) 476.023126ms ago: executing program 3 (id=104): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) (async) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x7, 0x401, 0xfffffffb, "0025000051ee8f923fdce8c5a1f315ff00", 0x1011, 0x4}) (async) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x24, 0x2, 0x6) (async, rerun: 64) setsockopt(0xffffffffffffffff, 0x1000000000029, 0x9, 0x0, 0x0) (async, rerun: 64) setsockopt(r1, 0x6, 0x8, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1]) 407.601362ms ago: executing program 0 (id=106): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) readlinkat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000200)) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) (async) readlinkat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000200)) (async) 407.189548ms ago: executing program 2 (id=107): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sysctl$net_inet_tcp(&(0x7f0000000f80)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, &(0x7f0000001040)="2bc7f973", 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) close(r0) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) 403.563505ms ago: executing program 1 (id=109): sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000240)="a32c2aa3085e1749abedbfe5", 0xc) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x70c3, 0x7, 0xa, 0x106, 0x80000001, 0x33a, 0x10005, 0x10, [{0x0, 0x1451, 0x4, 0x71002}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x6, 0x20f86, 0xfffffffe, 0xaf9}, {0xfffffffa, 0x800, 0x7}, {0x10001, 0x8000001, 0xd, 0x9f}, {0x2, 0x6, 0x3, 0x99}, {0x1cdf, 0x1, 0x4f8, 0x6f}, {0xa, 0x3, 0x14, 0x8}, {0x70000, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x4}, {0xf88, 0x10001, 0x6, 0xaeb}, {0x7ff, 0x9, 0x8, 0x6}, {0xb8c, 0x6, 0x0, 0x6}, {0x1009, 0x7, 0x1, 0x6}, {0x7fff, 0x7, 0x2006, 0x3ff}, {0x200, 0x1, 0x4, 0x2fffd}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0xdcc, 0x24, 0x0, 0x0) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x100) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0xdb9973902cca6137, 0x0) poll(&(0x7f00000000c0)=[{r3, 0x100}, {r4}, {r5, 0x10}], 0x3, 0x3ba19d12) sysctl$kern(&(0x7f0000000000)={0x1, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket(0x800000018, 0x3, 0x2) bind$unix(r7, &(0x7f0000000480)=@abs={0x1f95d27d48731892, 0x7}, 0x8) writev(r7, &(0x7f0000000640)=[{&(0x7f0000000280)="bee7118b652dd60c253c031c47ded49dd5e12760ec0c4253516a852a1d171a2973f7aeaec40e84395b440d8985a2f27bd06890b6eb843f5befde942ad93186b9a5e817091462bc1a6fcb6bfa260c85c628ff41ab9e3d8ae2c4dc5a5c7909fefaefae455d6e7529835380bae53948c8f4af7a141b57e9006a2aaaa110fa600c9982b6cd3013eaf67efcf14a18868a78d16c8ab47e75914340b7bc8a1f4bd2bc18f239a2f77601b5ede01b8b94a533a080eb32c3af72c20b18506440da6fbd91a8376f0a48b27ac3", 0xc7}, {&(0x7f0000000380)="4059a6bf1030adacd3dfed7acdf3ec5f315f55ba30875ed6b766eccd291c6897c9d1ba7b264aad8cc840fb98475e0d39382742d6e2feec23d9cebd65943ac7c58a9f8c5dbdf2a186a84f2c2a5d75676693ac5e513cba6d5337c08b5d20a49aa182717ba220b3c7c352b5c6c23103d89b3ee4f153d8d45ac5a29d62e8dde81e94646e3660783e3090bf96b235fc43441aa7aab564f2e61b869a6b6a0135d9f2a4322e10e6e45dfdea5e710ffef5277f51945e3f62b4040ba6f430a3efae90affea66de90c76776c5ba0429cf734175084706d170f093d157291e9320b9646901295edb2717f3b29d06ae5a6addc2cfa6df0441a75fc89", 0xf6}, {&(0x7f0000000480)="bfb46c0e87c89f967790b1e404d8ee7c8d5977759add154647641c17fa58d700606fe9eaabef5a4df3d1f7ba722ba663bdb4d619fe7ef23d4bc463792adc246bd039c8057ba0613155b18ff0d5f2c5f9487ca14713f6e5d0fba760491d959271a784134a3f5310a6ffa7e5ba16b7983c3ed01af5562b206d92", 0x79}, {&(0x7f0000000500)="8fe966e39a472769f8d3a724511ce6c37a41f86bdd4c59a650eb736ccdf9ea273626421c25c4894122804837ee898a02c7c742e68677ad5586", 0x39}, {&(0x7f0000000540)="50462b105855ac99237f9438506b8ddb1a0132de846c9c5ddfb4e24b9d6e4329809f70c51c608465b4a45912a3e2bb7e977a9dd5313c561d3027bcee5a22eb6e0ff6b16c6ee96e2dd85acf312fadb452298ce36aab03c434d0a8b4d7383169b090d79d4b66baa51f90784ff5728c282ecdd1dded84840c5675f1b22aa167797999c68e10acacce9ddabe69c3fa1a0987e37e65e3655ca0d3dd9344e155e0e13ba11242382744fd0eabc24072b70a373e76bbb891f6c968725e215207369f8570fbbad86c18ec6ffe290bfa365dedf4", 0xcf}], 0x5) setuid(0xffffffffffffffff) r8 = getuid() setreuid(r8, 0x0) setsockopt$inet_opts(r6, 0x0, 0x13, &(0x7f0000000000), 0x4) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x8, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0x8080008, 0x8, 0x4, 0xf1000}, {0x7, 0x4, 0x8, 0x40000003}, {0x6, 0xf86, 0x0, 0xaf9}, {0x4, 0x800, 0x7}, {0x1, 0x80000003, 0xe, 0x7}, {0x2, 0x1, 0xffffffff, 0x9c}, {0x2, 0xfffffffa, 0x3, 0x1}, {0xa, 0x0, 0x12, 0x8}, {0x2, 0x81, 0x81, 0x9}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x200004, 0x5, 0x3ff}, {0x29a71717, 0xfffffffb, 0x6, 0x100006}, {0x4, 0x2, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) connect$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) 318.159313ms ago: executing program 2 (id=110): sysctl$kern(&(0x7f00000000c0)={0x1, 0x2}, 0x2, &(0x7f0000000080)="716b1e3471", &(0x7f0000000040)=0x5, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') 316.844673ms ago: executing program 2 (id=112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x404) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffff9, 0x0, 0x4, 0x0, "e600000f0000ae000000000000000007abc0788a", 0x8, 0x800000}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x109) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x2) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x2, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaa8aaaadca7fd715ed229efb4648a8307aaaff3b8807200342c00f375f661851fd00ea22fe350be125713fe8000000000000000000000000000bb06020000000000000000000000000000bff363281542b09235e886fb2f782a33de", @ANYRES64=r0, @ANYRES32=r1]) 316.658159ms ago: executing program 3 (id=113): sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000000)="9b1809ffffffffffffff", 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setuid(0xee01) r0 = getpgrp() ktrace(0x0, 0x5, 0xe00, r0) r1 = open(0x0, 0x2, 0x39) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$VNDIOCSET(r1, 0xc0104407, 0x0) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) 314.699231ms ago: executing program 3 (id=114): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc0104451, &(0x7f0000000740)={0x5, 0x408, 0x3fc, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2}) (async) sysctl$net_inet6_icmp6(&(0x7f0000001540)={0x4, 0x18, 0x3a, 0x9}, 0x4, &(0x7f0000001580)="2b50297b8b", &(0x7f0000001680)=0x5, 0x0, 0x0) 314.106111ms ago: executing program 7 (id=115): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x38) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/118, 0x76}], 0x31d) dup2(r1, r0) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) 227.303489ms ago: executing program 3 (id=116): openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x0) ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100), 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) close(r1) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0xfc}}}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x1043, 0x9, 0x1, 0x8}, {0x4800, 0xd, 0x2, 0x7}]}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3157ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbbd57699a5f139b672f4d335d223e7d029d6ba8af63003728", 0x61, 0x406, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002821fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) setsockopt(0xffffffffffffff9c, 0x9, 0x1, &(0x7f0000000140)="21aa2d102587d066924ff9286bb589f3bad4b82361d89646a2ac667614eb4dc414631e70fb6719bd9131cb09d4a71dd3499e8ba54789e132c966783d85fc363d85a0f9a5b76cc48687dba38145c3d7071608940ea195cf65247438af3f1ebce658cde92be7068e224146dc30cec53a8e7e07376ef33caf4332431fdb2e15b0e77e78d239699696a771b4ba7ccffa67d359d97c1a74e06823609a4af551b25f3624725285cae4a1a60c7d9302b98d22ee6b", 0xb1) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x8000, 0x0, 0x1, 0x0, @empty, @empty=0x23, {[@lsrr={0x83, 0x3}]}}, @icmp=@info_request={0xf, 0x0, 0x0, 0x7f2f, 0x7fff}}}}}) 203.302958ms ago: executing program 0 (id=117): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) (async) r0 = syz_open_pts() close(r0) (async) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x5a}) r1 = syz_open_pts() close(r1) (async) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x21, 0x6}, 0x80000000, 0xfffffffffffffff7, 0x0, 0x0, 0x4, 0xc0000000000000, 0x7}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f0000000000)={0x0, 0x0}) (async) syz_open_pts() (async) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x7fff, 0x1f, 0xfffffff6, "8b02000300090a7848b13e13355f4fa7c2f4e300", 0xfffffffd}) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x2, 0x5, 0x6, 0x2, "39005b95512f4e664d709ed2d3f0fefe7cba553b", 0x9, 0xffffffff}) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) syz_open_pts() (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0xbd, 0x7fffffff, 0xffd7fdff, 0xfffffffd, "09032e4faceb089b351c0a164dc016b0763047c9", 0x29, 0x4}) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)="4da507c39e81ebe3d2e7f6d6efb54fe910f83845387b59bd04c2d207e5b74c9f9b77ab15eb4d8652fcd5c197a8f98674cdd02efc496f024023ff0e3d60045ae5847a7a99d4c5a5e2d86bf381605211056cf485f36c34c403a60a259c7c4092471b7851144288e8ed3d345f9d9b35963b7f39ab42cfb794dbf23618c02accb0b4c1c60794e2ae042be0c2bce487f86e1a7e2b64f71c89e6867137d10c63a8d52a8534c27bab28382b3d084881e25c25028063697a84aa31106a4406000081bc332e7b833257df8e55f9ae717226e5edd611ffdf58f5777f", 0xd7}, {&(0x7f0000002300)="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", 0x4e4}], 0x2) 202.824545ms ago: executing program 4 (id=118): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) socket$inet(0x2, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r4 = socket(0x18, 0x1, 0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r5 = socket(0x18, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x2, r5) close(r6) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r8 = syz_open_pts() close(r8) syz_open_pts() ioctl$TIOCSETAW(r8, 0x802c7415, &(0x7f0000000080)={0xbd, 0x7fffffff, 0x1, 0xfffffffd, "04000000aceb089b351c0a164dc0f1d4762047c9", 0x29, 0x4}) writev(r8, &(0x7f00000011c0)=[{&(0x7f0000000180)="4da507c39e81ebe3d2e7f6d6efb54fe910f83845387b59bd04c2d207e5b74c9f9b77ab15eb4d8652fcd5c197a8f98674cdd02efc496f024023ff0e3d60045ae5847a7a99d4c5a5e2d86bf381605211056cf485f36c34c403a60a259c7c4092471b7851144288e8ed3d345f9d9b35963b7f39ab42cfb794dbf23618c02accb0b4c1c60794e2ae042be0c2bce487f86e1a7e2b64f71c89e6867137d10c63a8d52a8534c27bab28382b3d084881e25c25028063697a84aa31106a4406000081bc332e7b833257df8e55f9ae717226e5", 0xce}, {&(0x7f0000002300)="6785ac0b8f778f0f9849c8a9be25a44e0431537ac76501370005fad63d2e2cea1ce88174efbb8d04802947cac4b219a8bf4d12a9cf22c98772f3f395a8172c1abbe4cbeed6046a3457b0348903e21b17a0bd75f084b3872e3bd99bd8dde751120e7e816d56005e6c22d83c6f206a7439c7c40c079f1752a57b86793166f124e5123446a17e5088dc8f9f3c3681051217cddced097a9de6c5f7612d448cd8dc4c23480c22b546abe08ee1fb82bcda8c9d3e7fa671056e7b9934d7117e6b40e56ae8ed153d6c00c82ab01c1b245559ecd12670e28d81fcb0ad29df8991df378c2173a40f415180c02ae7df31b2fe86a0f49d2d47c94a3e6979238836d366b98efbcada61d57a228a80fef70e406bfec93c98def0f13c0192a0e7dca4a1bfab5106143635dc44240300832edf4e5a574bd4cc1f12a22f70d0c98b47fe2b719fe500a1b56960efc751c66824bec98f3a17684309eff8c340d8504e150e011dda0b30f881815252a4f1b69e36f791b85d95e7c5d80c124484432d953a9e6dbb6702fb66367c60d2e68e571f5808003ac68d159e106e63e35050a3f8395a045d5e4df33aaea4d622e71fa3987610a5c4d4e61e0bff78ed957502126f1e03643b4637ee444d4dca4b9865f340ad1a2e9794b26c71bb87f79f9951e8f7922ce3431723627a0759a7c29852584da0d20170d8bc23b8b26456f71097fc0850574675ac754f8cf12f70039e8b0e81858d18f13aeb2198c7d4143d6f4b5b8f7b2ec3263fc4a6cf7e23cd750a61bdfdf1583fbe908e2bcea6b9b8ce6a41fb9d41cab654dac1f61f4b6e140dbdb2eba423aff592bf8abc120f5676868b121319d283f623bc787fedf0147f6f534f719a16bfcc26c22910614cfc48b854dbf2bc980d35bfe548b1d0474cfbcdd189c356dd05631fd40fc24978e04b839c6e014a13eeb11866e149fa69fe45684e84a7532cc25de67876edb1af9e2989a9155b7c334eed8d15e6f59d8c6dceeef4e224eaac8e24ceb07ffeb25154ede19d3ee079b9de811fbc79c4a0b85c05472876e08733c8ade8562ef13f6811d445a95e4aba7ae45fd94d24df6cc5d4199ca2f026dd03d31320024ab3ce326334de7e37bfe59204f959d7a5d40fae05ad7e352f7336365f841d1310ea17b20ca5c926b88a9d878238764ab201cfdde70b388e9428dacef3c83df4cf5e236614b8527636d573daf715af20bb559674e5d099110b100a2813eff4edf8105edde1518001f3374e3fb87e7878c93d469728416cbb545f209be7688c0bb914d1e2ea7c6c9e9b150b5508760305d4b078b2d9d013d462d62509dd7eec30cf2453e962c286419fd3bd612de038f2a96f6e3202f0cd7b5fb39174c5074b22fdaccda99eb2533121785f8919498bd1abe6352eb126d470f45d3982ba1948add118d50f1b405698cb6e1ae238260c3649699fe43f33bb654cf6c0ca20a933c06b2fdfe5b2698f9fb56045e1670e5958f08f001cfcaecd4372786d00c19b8d0b43178f96a5a4da66ee918ea38fe39b40768bf17059ce3d1c7e052b6f89f210336e6ab33334de1bd08b9c7832156975b2435b5053d61856dd84b75b01f2e94f9a41531c6b89223fe46c9b8c39ec392eb994c78f81ab575ce2bff128a77e760e07a397e3ff4ff7abaeb6f1a0eb513b424d01d8603ff6f7391e893f39ba4a9a358dc1e7c0ce295f5b25e77ba8a9ff013a64afbc146868d115d6b239e97c2e54a262020abb6b7bba45a96e1c4c9fa984ec", 0x4dd}], 0x2) chroot(&(0x7f0000000080)='./file0\x00') 202.652051ms ago: executing program 3 (id=119): select(0x40, &(0x7f0000000040)={0x6, 0x2000000044809e9d, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181d, 0x100001000000008, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) getitimer(0x3, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x5) 201.734105ms ago: executing program 7 (id=120): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="825a4fc3b1f0b0c7c8bd020000107c60f76c090804000000007bd16e8fb2bcccf69affebfdbb31c0c7313e675feadedbb13dc9a05fca2d1c500fcee64eca81a98dfddc6d76c692b7807f8b4791c2f7d917f05dbf", 0x54}], 0x1}, 0x0) sysctl$kern(0x0, 0x60, &(0x7f0000000280)="e15a79c7de1e2c6bf7635a54862902af1244b815450010a1f515df5a00006ebb8000000000", &(0x7f0000000080)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') r2 = semget(0x1, 0x3, 0xc3) semctl$GETALL(r2, 0x0, 0x6, &(0x7f0000000140)=""/230) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0x2, 0x83, 0x400f}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0x2, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001900)="258bbd4ed141349dc2fb0b2ac35b53f7e749787f8e18259cd52eea6790d91fad72ecfa61e077951f3ca08b09589f1a0d4ce72b45bb8d3c15abd627bedc3bf58da22bbce95ddeaef2bf7759002ad87094ace9a910", 0x54}], 0x1, 0x0, 0x0, 0xc2d839217c176b2e}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="f58ac4d51a61494f6efc2c36688b841dd6510fd5e53215b1b35aa3a44dc1311e32414069d5031b04cec07087748a4cbdaa1cbc934c51a54426dbb1593c8acb8cacb6999a90ed160336d12e29a9", &(0x7f0000000080)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x1f, 0x0, 0x0) (async) getsockopt(r3, 0x0, 0x1f, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[]) 95.234809ms ago: executing program 0 (id=121): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$VT_WAITACTIVE(r1, 0x20007606, &(0x7f0000000040)=0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="ee68338bb3ad477307e429000000fb7a8c653dd0496612451637425a14c314028e4965e3a142988e8b871b299b8b81d2a339c5bcd39ff33cb72c7cf32dc64f3f519b130000000000", 0x48}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f95f84cf71b5", &(0x7f0000000080)=0x7, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) 94.770575ms ago: executing program 7 (id=122): open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x6a) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x6a) r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x8) r1 = syz_open_pts() ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000000)) (async) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000000)) syz_open_pts() munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 94.502227ms ago: executing program 0 (id=123): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x6011, r0, 0x0) ftruncate(r0, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504447, &(0x7f0000000000)={0x4, 0x8, 0x7fff, 0xfffffffe, "cd002200000400", 0x8000, 0x1003}) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000317000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005c5000/0xe000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2b}, {&(0x7f000048e000/0x2000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x5}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x200000000000006}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x83ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'}) r4 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r4) ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0x120, r4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r2, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000000)) mknod(&(0x7f0000000280)='./file0\x00', 0x4, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 91.025041ms ago: executing program 7 (id=124): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2fca959eed023285e476168209af2d40f671fb34fc898c80f489ec4ce7dc6dac0538a5dd685e561d8a0fc51c46bd80c085d4d87101", 0x35}], 0x1}, 0x400) semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000080)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x8, 0x1, 0x0, @broadcast, @rand_addr=0x80000000}, @icmp=@generic={0xc, 0x6, 0x0, "6d9864a1"}}}}}) 7.628999ms ago: executing program 4 (id=125): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) getpid() r1 = getppid() ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r1) setrlimit(0x1, &(0x7f0000000100)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x48001000007) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) 7.314703ms ago: executing program 7 (id=126): select(0x40, &(0x7f0000000180)={0x4e, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) socketpair(0x18, 0x3, 0x2b, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f00000003c0)="b10005136000009f050000000010000000000000dea180a0c94c6acfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc210200b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd12008abfba0900000008e37f71a3f834371205b66400"/177, 0xb1, 0xc, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x67d03f22) open(&(0x7f0000000b80)='./file0\x00', 0x0, 0x0) 5.34277ms ago: executing program 4 (id=127): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0xa, r0) (async) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000080)=[{r2, 0x40}], 0x1, 0x1ff) (async) r3 = socket$inet(0x2, 0x2, 0x0) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0x8, 0x3) (async) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000080)="ea00000100000000", 0x8) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) (async, rerun: 64) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async, rerun: 64) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r6, 0x800c5712, &(0x7f0000000180)={0x0, 0x1, 0x2}) (async, rerun: 32) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$FIOSETOWN(r5, 0x8004667c, &(0x7f0000000080)=0xdb) (async, rerun: 64) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) fcntl$lock(r7, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) fcntl$lock(r7, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x3f, 0x200000001}) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async, rerun: 32) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async, rerun: 64) sysctl$net_inet6_ip6(0xfffffffffffffffe, 0x4, &(0x7f0000000040)="062591366d04000000e8f786a50230d9442a7ca4fb9ef826f1ca5e6ac9aea49b189f4e0a17e8addc9292ad6fcfa23746a25535a9ff79a761b864523e9360e6cd8a7063b64ff2af02e19c6c676833b1b2d3ffbea227f3", &(0x7f0000000900)=0x11, 0x0, 0x0) (async, rerun: 64) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, &(0x7f00000002c0)="6a76b3a3a69c251a701a5c49a1e32873cd8d2b770ebf6e2a68f1cee08ac4168258b60d9e306c4ed57992c0c187e907b2b64d0e032ff9732c08e08f7f9bcb3c381a05a16348e546a5748fff55d5dcf8247d570b2dc000"/95, 0x5f) 4.819224ms ago: executing program 7 (id=128): r0 = socket(0x18, 0x1, 0x9) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$WSKBDIO_GETMAP(r1, 0xc0105715, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) setsockopt(r0, 0x3a, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=129): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xe02) chflags(&(0x7f0000000000)='./file0\x00', 0x10001) socket(0x2, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x1, 0x0, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x9}, {0x2, 0x82, 0x5, 0x9}, {0x3, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xa, 0x6}, {0x800, 0x9, 0x8, 0xb}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffd}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020690c, &(0x7f00000001c0)) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x7, &(0x7f0000000100)='./file0\x00', 0x8}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 76108 26931 0 0 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8336edd9) at panic+0x1e5 __assert(ffffffff833afff6,ffffffff833c2f1e,3b7,ffffffff833ed01e) at __assert+0x29 refcnt_finalize(ffff80003c49af08,ffffffff8336a3ec) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c49af00) at pppx_if_destroy+0x3d pppxclose(205b9a,83,2000,ffff80003c43e2c8) at pppxclose+0xa0 spec_close(ffff80003901b3f0) at spec_close+0x417 VOP_CLOSE(fffffd80663e77e0,83,fffffd80097fb340,ffff80003c43e2c8) at VOP_CLOSE+0x132 vn_closefile(fffffd806663a9b0,ffff80003c43e2c8) at vn_closefile+0x12b fdrop(fffffd806663a9b0,ffff80003c43e2c8) at fdrop+0x121 closef(fffffd806663a9b0,ffff80003c43e2c8) at closef+0x192 fdfree(ffff80003c43e2c8) at fdfree+0x116 exit1(ffff80003c43e2c8,0,0,1) at exit1+0x576 sys_exit(ffff80003c43e2c8,ffff80003901b760,ffff80003901b6b0) at sys_exit+0x1a end trace frame: 0xffff80003901b750, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336edd9) at panic+0x1e5 __assert(ffffffff833afff6,ffffffff833c2f1e,3b7,ffffffff833ed01e) at __assert+0x29 refcnt_finalize(ffff80003c49af08,ffffffff8336a3ec) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c49af00) at pppx_if_destroy+0x3d pppxclose(205b9a,83,2000,ffff80003c43e2c8) at pppxclose+0xa0 spec_close(ffff80003901b3f0) at spec_close+0x417 VOP_CLOSE(fffffd80663e77e0,83,fffffd80097fb340,ffff80003c43e2c8) at VOP_CLOSE+0x132 vn_closefile(fffffd806663a9b0,ffff80003c43e2c8) at vn_closefile+0x12b fdrop(fffffd806663a9b0,ffff80003c43e2c8) at fdrop+0x121 closef(fffffd806663a9b0,ffff80003c43e2c8) at closef+0x192 fdfree(ffff80003c43e2c8) at fdfree+0x116 exit1(ffff80003c43e2c8,0,0,1) at exit1+0x576 sys_exit(ffff80003c43e2c8,ffff80003901b760,ffff80003901b6b0) at sys_exit+0x1a syscall(ffff80003901b760) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73a061cc61e0, count: -16 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003901b1c0 rbx 0xffff8000299eeddf rdx 0 rcx 0xffff80003c43e2c8 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x50627cb1da9e5fac r11 0xbf0dc8a35e373599 r12 0xffff8000299eebe0 r13 0 r14 0 r15 0x1 rip 0xffffffff83152035 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003901b1b0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=29924 pid=71007 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=77, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c43e2c8 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800033409248,0xffff800033408560 process=0xffff80003b026720 user=0xffff800039016000, vmspace=0xfffffd80663423f8 estcpu=27, cpticks=4, pctcpu=0.3, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 26931 76108 90429 0 7 0 syz-executor 36497 487342 73129 0 3 0x80 nanoslp syz-executor 36497 53431 73129 0 3 0x4000080 kqread syz-executor 36497 269699 73129 0 2 0x4000000 syz-executor 42219 295758 30608 -1 3 0x90 nanoslp syz-executor 42219 244044 30608 -1 3 0x4000090 kqread syz-executor 42219 189091 30608 -1 3 0x4000090 fsleep syz-executor 40793 514801 57214 0 3 0x80 nanoslp syz-executor 40793 477277 57214 0 3 0x4000080 kqsel syz-executor 40793 443577 57214 0 3 0x4000080 fsleep syz-executor 29004 489557 7646 0 3 0x80 nanoslp syz-executor 29004 81458 7646 0 3 0x4000000 biowait syz-executor 29004 434783 7646 0 3 0x4000000 fltagain2 syz-executor 29004 132495 7646 0 3 0x4000000 pipecl syz-executor 29004 358057 7646 0 3 0x4000080 fsleep syz-executor 66144 67821 0 0 3 0x14200 acct acct 71464 256475 0 0 3 0x14200 bored sosplice 90429 361041 65393 0 3 0x82 nanoslp syz-executor 7646 202853 65393 0 3 0x82 nanoslp syz-executor 71611 248903 65393 0 3 0x82 nanoslp syz-executor 4767 493126 65393 0 2 0x10000002 syz-executor 73129 266039 65393 0 3 0x82 nanoslp syz-executor 57214 137569 65393 0 3 0x82 nanoslp syz-executor 30608 239695 65393 0 3 0x82 nanoslp syz-executor 10740 333604 65393 0 2 0x2 syz-executor 65393 33133 32142 0 3 0x82 kqread syz-executor 32142 351779 95264 0 3 0x10008a sigsusp ksh 95264 419374 9806 0 3 0x98 kqread sshd-session 9806 381183 87171 0 3 0x92 kqread sshd-session 71728 11082 1 0 3 0x100083 ttyin getty 87171 225222 1 0 3 0x88 kqread sshd 28752 265270 27092 74 3 0x1100092 bpf pflogd 27092 51993 1 0 3 0x80 sbwait pflogd 66916 81292 68839 73 3 0x1100090 kqread syslogd 68839 510678 1 0 3 0x100082 sbwait syslogd 68647 158339 1 0 3 0x100080 kqread resolvd 24100 450095 46069 77 3 0x100092 kqread dhcpleased 1344 62004 46069 77 3 0x100092 kqread dhcpleased 46069 33932 1 0 3 0x80 kqread dhcpleased 87712 8308 0 0 3 0x14200 bored smr 32309 471146 0 0 2 0x14200 zerothread 28848 510775 0 0 3 0x14200 aiodoned aiodoned 11799 198915 0 0 3 0x14200 syncer update 93399 142888 0 0 3 0x14200 cleaner cleaner 27278 393771 0 0 3 0x14200 reaper reaper 81456 13036 0 0 3 0x14200 pgdaemon pagedaemon 3008 180643 0 0 3 0x14200 bored viomb 51132 148837 0 0 3 0x40014200 acpi0 acpi0 76650 350897 0 0 3 0x40014200 idle1 42267 447422 0 0 3 0x14200 bored softnet7 3391 285269 0 0 3 0x14200 bored softnet6 10238 221465 0 0 3 0x14200 bored softnet5 85457 146642 0 0 3 0x14200 bored softnet4 90282 207083 0 0 3 0x14200 bored softnet3 76210 276654 0 0 3 0x14200 bored softnet2 1497 501411 0 0 3 0x14200 bored softnet1 48776 74399 0 0 3 0x14200 tqbarend softnet0 17852 504014 0 0 3 0x14200 smrbar systqmp 68612 496988 0 0 3 0x14200 bored systq 16336 154766 0 0 3 0x14200 tmoslp softclockmp 20620 21730 0 0 3 0x40014200 tmoslp softclock 8022 447491 0 0 3 0x40014200 idle0 1 389540 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 29004 (syz-executor) thread 0xffff800033408fb0 (81458) exclusive rrwlock inode r = 0 (0xfffffd806b80f330) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 48776 (softnet0) thread 0xffff8000ffffe530 (74399) shared rwlock softnet0 r = 0 (0xffff80000002c078) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 Process 17852 (systqmp) thread 0xffff8000ffffe000 (504014) shared rwlock systqmp r = 0 (0xffffffff83848ff8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10205 11022K 11225K 166960K 11392 0 pcb 18 12K 28K 166960K 111 0 rtable 214 7K 7K 166960K 275 0 pf 36 17K 22K 166960K 69 0 ifaddr 44 7K 8K 166960K 57 0 ifgroup 57 2K 2K 166960K 82 0 sysctl 3 1K 9K 166960K 7 0 counters 72 37K 38K 166960K 96 0 ioctlops 0 0K 4K 166960K 1504 0 iov 0 0K 16K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1342 84K 85K 166960K 1432 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 89K 166960K 259 0 sigio 0 0K 0K 166960K 1 0 proc 72 115K 147K 166960K 548 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 22 0 in_multi 99 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 369 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 235 167K 176K 166960K 3955 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 41 82K 102K 166960K 1342 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 13 0K 2K 166960K 37 0 temp 43 8643K 8707K 166960K 4545 0 kqueue 16 26K 30K 166960K 39 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 47 0 44 1 0 1 1 0 8 0 rtentry 176 99 0 3 5 0 5 5 0 8 0 unpcb 144 227 0 208 6 0 6 6 0 8 5 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 44 0 37 1 0 1 1 0 8 0 arp 128 10 0 0 1 0 1 1 0 8 0 inpcb 328 162 0 151 3 1 2 2 0 8 0 nd6 144 18 0 0 1 0 1 1 0 8 0 pkpcb 40 12 0 12 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 11 0 9 1 0 1 1 0 8 0 pppxif 1504 1 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 29 0 0 1 0 1 1 0 8 0 pfstkey 128 29 0 0 1 0 1 1 0 8 0 pfstate 384 29 0 0 3 0 3 3 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 446 0 0 28 0 28 28 0 8 0 art_table 40 447 0 0 5 0 5 5 0 8 0 art_node 32 99 0 12 1 0 1 1 0 8 0 semapl 112 3 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1777 0 259 96 0 96 96 0 8 0 ffsino 296 1777 0 259 118 0 118 118 0 8 0 nchpl 144 2139 0 438 64 0 64 64 0 8 0 rtmask 32 4 0 4 1 0 1 1 0 8 1 uvmvnodes 80 1901 0 0 39 0 39 39 0 8 0 vnodes 216 1901 0 0 106 0 106 106 0 8 0 namei 1024 6541 0 6541 2 1 1 1 0 8 1 percpumem 16 63 0 12 1 0 1 1 0 8 0 kstatmem 264 44 0 15 3 0 3 3 0 8 0 scxspl 216 9187 0 9186 10 9 1 8 1 8 0 plimitpl 152 50 0 32 1 0 1 1 0 8 0 sigapl 424 564 0 509 7 0 7 7 0 8 0 knotepl 120 536 0 0 17 0 17 17 0 8 0 kqueuepl 224 55 0 39 2 0 2 2 0 8 0 pipepl 344 111 0 83 3 0 3 3 0 8 0 fdescpl 528 540 0 510 3 0 3 3 0 8 0 filepl 160 2302 0 2077 16 0 16 16 0 8 4 lockfpl 104 117 0 115 1 0 1 1 0 8 0 lockfspl 48 26 0 24 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 31 0 14 1 0 1 1 0 8 0 ucredpl 104 190 0 176 1 0 1 1 0 8 0 zombiepl 144 511 0 509 1 0 1 1 0 8 0 processpl 1248 564 0 509 5 0 5 5 0 8 0 procpl 664 801 0 736 7 0 7 7 0 8 1 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 752 549 0 516 17 0 17 17 0 8 13 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 17 0 17 17 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 1144 0 0 72 0 72 72 0 8 0 bufpl 280 3751 0 127 259 0 259 259 0 8 0 anonpl 32 7120 0 0 58 0 58 58 0 246 0 amapchunkpl 152 12241 0 11758 34 7 27 27 0 158 4 amappl16 200 2275 0 2150 13 3 10 10 0 8 2 amappl15 192 17 0 17 1 1 0 1 0 8 0 amappl14 184 114 0 102 1 0 1 1 0 8 0 amappl13 176 9 0 8 1 0 1 1 0 8 0 amappl12 168 1186 0 1157 3 1 2 2 0 8 0 amappl11 160 50 0 36 1 0 1 1 0 8 0 amappl10 152 3 0 3 1 1 0 1 0 8 0 amappl9 144 287 0 287 1 1 0 1 0 8 0 amappl8 136 22 0 20 1 0 1 1 0 8 0 amappl7 128 107 0 95 1 0 1 1 0 8 0 amappl6 120 178 0 175 1 0 1 1 0 8 0 amappl5 112 129 0 119 1 0 1 1 0 8 0 amappl4 104 303 0 284 1 0 1 1 0 8 0 amappl3 96 2099 0 1990 4 0 4 4 0 8 0 amappl2 88 646 0 584 2 0 2 2 0 8 0 amappl1 80 8849 0 8254 16 1 15 15 0 8 0 amappl 88 3261 0 3100 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 540 0 510 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 540 0 510 1 0 1 1 0 8 0 vmmpekpl 168 6088 0 6046 2 0 2 2 0 8 0 vmmpepl 168 41534 0 39518 95 0 95 95 0 357 1 vmsppl 488 539 0 510 6 1 5 5 0 8 1 rwobjpl 80 16066 0 13131 62 1 61 61 0 8 0 pdppl 4096 1088 0 1020 100 26 74 84 0 8 6 pvpl 32 14825 0 0 121 0 121 121 0 265 1 pmappl 256 539 0 510 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 334 0 30 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83837ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8398dd88) at __mp_lock+0x1a3 intr_handler(ffff800037815790,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8398dd88) at __mp_lock+0x1a3 sys_mmap(ffff80003c43e560,ffff800037815ac0,ffff800037815a10) at sys_mmap+0x64b syscall(ffff800037815ac0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x782f320ba4d0, count: 3 ddb{0}> trace x86_ipi_db(ffffffff83837ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8398dd88) at __mp_lock+0x1a3 intr_handler(ffff800037815790,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8398dd88) at __mp_lock+0x1a3 sys_mmap(ffff80003c43e560,ffff800037815ac0,ffff800037815a10) at sys_mmap+0x64b syscall(ffff800037815ac0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x782f320ba4d0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8336edd9) at panic+0x1e5 __assert(ffffffff833afff6,ffffffff833c2f1e,3b7,ffffffff833ed01e) at __assert+0x29 refcnt_finalize(ffff80003c49af08,ffffffff8336a3ec) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c49af00) at pppx_if_destroy+0x3d pppxclose(205b9a,83,2000,ffff80003c43e2c8) at pppxclose+0xa0 spec_close(ffff80003901b3f0) at spec_close+0x417 VOP_CLOSE(fffffd80663e77e0,83,fffffd80097fb340,ffff80003c43e2c8) at VOP_CLOSE+0x132 vn_closefile(fffffd806663a9b0,ffff80003c43e2c8) at vn_closefile+0x12b fdrop(fffffd806663a9b0,ffff80003c43e2c8) at fdrop+0x121 closef(fffffd806663a9b0,ffff80003c43e2c8) at closef+0x192 fdfree(ffff80003c43e2c8) at fdfree+0x116 exit1(ffff80003c43e2c8,0,0,1) at exit1+0x576 sys_exit(ffff80003c43e2c8,ffff80003901b760,ffff80003901b6b0) at sys_exit+0x1a end trace frame: 0xffff80003901b750, count: 0 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336edd9) at panic+0x1e5 __assert(ffffffff833afff6,ffffffff833c2f1e,3b7,ffffffff833ed01e) at __assert+0x29 refcnt_finalize(ffff80003c49af08,ffffffff8336a3ec) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c49af00) at pppx_if_destroy+0x3d pppxclose(205b9a,83,2000,ffff80003c43e2c8) at pppxclose+0xa0 spec_close(ffff80003901b3f0) at spec_close+0x417 VOP_CLOSE(fffffd80663e77e0,83,fffffd80097fb340,ffff80003c43e2c8) at VOP_CLOSE+0x132 vn_closefile(fffffd806663a9b0,ffff80003c43e2c8) at vn_closefile+0x12b fdrop(fffffd806663a9b0,ffff80003c43e2c8) at fdrop+0x121 closef(fffffd806663a9b0,ffff80003c43e2c8) at closef+0x192 fdfree(ffff80003c43e2c8) at fdfree+0x116 exit1(ffff80003c43e2c8,0,0,1) at exit1+0x576 sys_exit(ffff80003c43e2c8,ffff80003901b760,ffff80003901b6b0) at sys_exit+0x1a syscall(ffff80003901b760) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73a061cc61e0, count: -16