last executing test programs:

4.773137689s ago: executing program 4 (id=169):
r0 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x2, 0x0)
close(r1)
ioctl$PCIOCREAD(0xffffffffffffffff, 0xc0107002, &(0x7f0000000080))
r2 = socket(0x2, 0x3, 0xfe)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4)
sysctl$net_inet_tcp(&(0x7f00000018c0)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, &(0x7f00000019c0)="d62937bb", 0x4)
bind(r2, &(0x7f0000000000), 0x10)
r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
write(r1, 0x0, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
ioctl$WSKBDIO_GETBELL(r4, 0x40105704, &(0x7f0000000180))
r5 = kqueue()
r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
sendto$inet(r6, &(0x7f0000000080)="9a97160facff43a08e6c1c667fe0e2fdb39a56d2cc8960d6160e7b2f1795f6c089aeb39bde94d447ec8ca763f16863a0b6242656e0478bf5a6a9cb323808d3814b5a7bc5d422386fd69d175e54c071bb855c2b95c182aa547517b08117d64dddcb3c5a9abad9d3daafb1481f675f20c5b2222dc83f3b3f0848ce235337fa528026956219770fb66a2c68f57b546bb03a8f317bd8628a14", 0x97, 0x0, 0x0, 0x0)
ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, &(0x7f0000000400)={&(0x7f00000003c0)})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0)
kevent(r5, &(0x7f0000000040)=[{{r0}, 0xffffffffffffffff, 0x3, 0xf0000000, 0x0, 0x9}, {{r0}, 0xfffffffffffffffb, 0x2, 0x80000000, 0x3}], 0x13b, 0x0, 0xffffffff, 0x0)
dup(r3)

4.750689071s ago: executing program 0 (id=170):
ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x9)
write(r0, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf5c4b75c4c160f4acfe629a5717f5f5b7cad5c4e10a76103ea7945a70ea5a8999b18da379b691138c7d8a1529b81a7fb4540022f1324c3dda210f6f132101dfe0acc149685fdaca2fe92b8d4327e9872642c818370d60e800e0f8b2a66ead8ef0ddc9f0258f2275a9a0aefa8edd053e80a46946b0c0df080bb0d9c214c6a2393db966f0c0ace000", 0xc0)

4.745233753s ago: executing program 0 (id=173):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1})
r1 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = socket(0x11, 0x3, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000080), 0x4)
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))
readv(r2, &(0x7f0000000300)=[{0x0}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x7, 0x8, 0x56}]})
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000280c1820000400907810000000000000004e214e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5043000790780002c0559aa77eb4432239cbc1f47bf7b6295aaf38e9"])
getdents(r0, &(0x7f0000000e80)=""/4091, 0xffaa)
getdents(r0, &(0x7f0000001e80)=""/4096, 0x1000)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1}) (async)
socket(0x2, 0x2, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
socket(0x11, 0x3, 0x0) (async)
setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000080), 0x4) (async)
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async)
readv(r2, &(0x7f0000000300)=[{0x0}], 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x7, 0x8, 0x56}]}) (async)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000280c1820000400907810000000000000004e214e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5043000790780002c0559aa77eb4432239cbc1f47bf7b6295aaf38e9"]) (async)
getdents(r0, &(0x7f0000000e80)=""/4091, 0xffaa) (async)
getdents(r0, &(0x7f0000001e80)=""/4096, 0x1000) (async)

4.693795872s ago: executing program 0 (id=177):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) (async)
sysctl$ddb(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = geteuid()
setreuid(r1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc) (async)
r4 = getgid()
r5 = getpgrp() (async)
r6 = fcntl$getown(0xffffffffffffff9c, 0x5)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x6, r1, r2, r3, r4, 0x140, 0xbb}, 0x2, 0x9, r5, r6, 0x7, 0xe, 0x10001})

4.594355226s ago: executing program 0 (id=185):
mknod(0x0, 0x2000, 0x1e5f)
open(0x0, 0x8000, 0xa)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
fchown(r0, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000400)=[{0xb0, 0x9, 0x4, 0x80}, {0xa, 0x0, 0x2a, 0x80000001}, {0xfff, 0xf, 0x52, 0xff}]})
r2 = socket(0x2, 0x1, 0x2c)
setsockopt(r2, 0x6, 0x8, &(0x7f00000003c0), 0x0)
sysctl$hw(&(0x7f0000000440)={0x6, 0x11}, 0x2, 0x0, 0x0, 0x0, 0xcd)
r3 = socket(0x10, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0))
r5 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r5, 0x80206919, &(0x7f00000001c0))
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000480)={0x10, 0x5, [{&(0x7f000024b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xd3b7}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b936}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x82}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f0000030000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x4}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000005d000/0x4000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00007e8000/0x4000)=nil, 0x7}], './file0\x00', 0xfffffffe})
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
getsockopt(r6, 0x2, 0x10000015, 0xffffffffffffffff, &(0x7f0000000040))
getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000001580), 0xc)
sendmsg$unix(r6, &(0x7f0000001740)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESOCT=r5, @ANYRESDEC=r1, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000003800000000000000ffff000001000000", @ANYRES32=r6, @ANYRES64=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000001800000000000000ffff0000010000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\x00'], 0x108, 0x4}, 0xc)
ioctl$TIOCSETA(r6, 0xc1084425, &(0x7f0000000040)={0x0, 0xff, 0x8, 0x0, "97a2c1ae4e00", 0x0, 0x8c9})
bind$unix(r6, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x2}, 0x8)
socket(0x2, 0x2, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x200})
r7 = syz_open_pts()
close(r7)
r8 = syz_open_pts()
readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000380)=""/1, 0x1}], 0x1)

4.592917068s ago: executing program 4 (id=187):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000080)) (async)
select(0x40, &(0x7f00000000c0)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0xfffffffffffffffa, 0x2}, 0x0, 0x0, 0x0) (async)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000002300), 0x800, 0x0)
r3 = getuid()
r4 = socket(0x11, 0x3, 0x0)
setsockopt(r4, 0x11, 0x2, &(0x7f00000001c0), 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000004c0)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, &(0x7f0000000200)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, r8, 0x0, 0x0, 0x41}, 0x0, 0x2}) (async)
fchown(0xffffffffffffff9c, r3, r8) (async)
nanosleep(&(0x7f0000000280)={0x0, 0x1e49824d}, 0x0) (async)
close(r2)
getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r9=>0x0}, 0xc)
getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000040)={<r10=>0x0}, 0xc)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x35, r7, r8, r9, r8, 0x0, 0x8}, 0x200, 0x1, r10, r6, 0x4, 0x2, 0x3812ef15, 0x4})
close(r2) (async)
getsockname$inet(r2, 0x0, 0x0) (async)
fcntl$setstatus(r0, 0x4, 0xc0) (async)
write(r1, &(0x7f00000002c0)="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", 0xfffffdaf)
execve(0x0, 0x0, 0x0)

3.394302046s ago: executing program 4 (id=194):
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000140)="1503ae5b000d1d79a34b8e5f90000000000000000000000000000000de423d03ebfa0db7a5b62edc012432208adcc4daffbc81da405f15ef65f94a5d8f8a3093594f3ed708b6ef885f307d53f61319a7db79b5cabf3a68a9717e2b0881f31cc13970cb94154feca4e6992f819da6109b5be2f5e019d92f896d5422f77b3dd892d3dc49b83015c22c13c05fd7d9305b66ac50c870783bcb9dbeb9939f4512dd38e294c5cb3409a0d10828c98eedd11e1f", &(0x7f0000000000)=0x4e, 0x0, 0x37) (async)
setuid(0xffffffffffffffff)

2.22384554s ago: executing program 4 (id=199):
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=""/196, 0xc4}, 0x4}, 0x10, 0x400, &(0x7f00000003c0)={0x5, 0x40})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0)
select(0x40, &(0x7f0000001300)={0x1, 0x8, 0x8000000000000001, 0x6, 0x5, 0x7, 0x2, 0x41}, &(0x7f0000001340)={0x9, 0x100000001, 0x3, 0x2, 0x56f1f392, 0x4dcf5026, 0x401, 0x4}, 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x25, 0x0, 0x0, 0x5}, {0x86, 0x4, 0x7, 0x800}]})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x9, 0x9, 0x4, 0x1, 0x5, 0xffffffe8, 0xe4c, 0x1, 0x2, 0x6, 0x1})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x10001, 0x6, 0xf, 0x3, "6c82b3502478102007a5b997c0466674dcca9ce6", 0x9, 0x6})
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
close(r2)
write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe)
sysctl$kern(&(0x7f0000000100)={0x1, 0x5}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=""/196, 0xc4}, 0x4}, 0x10, 0x400, &(0x7f00000003c0)={0x5, 0x40}) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async)
open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) (async)
ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) (async)
select(0x40, &(0x7f0000001300)={0x1, 0x8, 0x8000000000000001, 0x6, 0x5, 0x7, 0x2, 0x41}, &(0x7f0000001340)={0x9, 0x100000001, 0x3, 0x2, 0x56f1f392, 0x4dcf5026, 0x401, 0x4}, 0x0, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x25, 0x0, 0x0, 0x5}, {0x86, 0x4, 0x7, 0x800}]}) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async)
kqueue() (async)
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x9, 0x9, 0x4, 0x1, 0x5, 0xffffffe8, 0xe4c, 0x1, 0x2, 0x6, 0x1}) (async)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x10001, 0x6, 0xf, 0x3, "6c82b3502478102007a5b997c0466674dcca9ce6", 0x9, 0x6}) (async)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async)
close(r2) (async)
write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async)
sysctl$kern(&(0x7f0000000100)={0x1, 0x5}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async)

2.125594097s ago: executing program 3 (id=200):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x7f, 0x0, 0x8}, {0x7, 0x0, 0x0, 0x4}]})
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
flock(r0, 0x1)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VNDIOCSET(r1, 0x81946467, &(0x7f0000000180)={0x0, 0x0, 0x0})
sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)

2.123927939s ago: executing program 4 (id=202):
clock_getres(0x6, 0x0)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x20530d)
open(&(0x7f0000000000)='./bus\x00', 0x80, 0x11)
clock_getres(0x6, 0x0) (async)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x20530d) (async)
open(&(0x7f0000000000)='./bus\x00', 0x80, 0x11) (async)

2.122499121s ago: executing program 0 (id=203):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000100)={0x1ffe, 0x2, 0x9, 0x2f, "cd002200002181baab4c8c6d09b975390a000004", 0x2, 0x7})
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f0000000000)=[{{r0}, 0xffffffffffffffff, 0x40, 0x20, 0x0, 0x200000000000000}], 0x0, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffff9, 0x9, 0x40, 0x6, 0x100000000}, {{r2}, 0xfffffffffffffffd, 0x40, 0x80, 0x3f88, 0xaf}, {{r0}, 0xfffffffffffffffa, 0x3, 0x2, 0x7fffffffffffffff, 0x2}, {{r1}, 0xffffffffffffffff, 0x2, 0x40000081, 0x33fe, 0xbc53}], 0x5f, 0x0)
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0)
ioctl$SPKRTONE(r3, 0x80085301, &(0x7f0000000180)={0x7})
open(0x0, 0x4000, 0x60)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, &(0x7f00000000c0), &(0x7f0000000100)='c', 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000004c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000100)={0x1ffe, 0x2, 0x9, 0x2f, "cd002200002181baab4c8c6d09b975390a000004", 0x2, 0x7}) (async)
kqueue() (async)
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
kqueue() (async)
kevent(r2, &(0x7f0000000000)=[{{r0}, 0xffffffffffffffff, 0x40, 0x20, 0x0, 0x200000000000000}], 0x0, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffff9, 0x9, 0x40, 0x6, 0x100000000}, {{r2}, 0xfffffffffffffffd, 0x40, 0x80, 0x3f88, 0xaf}, {{r0}, 0xfffffffffffffffa, 0x3, 0x2, 0x7fffffffffffffff, 0x2}, {{r1}, 0xffffffffffffffff, 0x2, 0x40000081, 0x33fe, 0xbc53}], 0x5f, 0x0) (async)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) (async)
ioctl$SPKRTONE(r3, 0x80085301, &(0x7f0000000180)={0x7}) (async)
open(0x0, 0x4000, 0x60) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, &(0x7f00000000c0), &(0x7f0000000100)='c', 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000004c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) (async)

2.044638582s ago: executing program 4 (id=205):
syz_open_pts() (async)
r0 = syz_open_pts()
ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000000)=0x6772) (async)
ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000000)=0x6772)
poll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x4)
ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000080)=0x4) (async)
ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000080)=0x4)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
poll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0xe7}, {r0, 0x1}, {r0, 0x50}, {r1, 0x1}, {r0, 0x80}], 0x6, 0x1)
write(r0, &(0x7f0000000180)="fa154498309b0e0a45ad1aef0550a41bc46f301b59a14b09e715b6ef6a3eb43907c950882823e9fd7cb90bd6a1751085a12e3064114a3b74ec6136878b6762d5e758d6f6a6d376d365d2e6257f287105552558601425c5a7ed8a876afad5d21bb7fde704e85cd09d5de5342846e4f4143a9c815d4921a9891a17cd3532a41232ea82464b441d0778cc9682974e9d563722aca80792a9b833c401b7d49b8eebf6463d876c289693a3bc1418e12b127649c0d06055804b43ee13c6bd4772789ce6ff3a40eb0452c2ea843776", 0xcb)
getpeername$inet6(r1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async)
getpeername$inet6(r1, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000300))
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x10, 0x0)
ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x5, 0xffff, 0xd, 0x3, 0x4}, {0x1ff, 0x2, 0x7fff, 0x400, 0xa}, {0x4, 0x5, 0x4, 0xc000, 0x5}, {0x100, 0x9, 0x6, 0x80, 0x7}]}) (async)
ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x5, 0xffff, 0xd, 0x3, 0x4}, {0x1ff, 0x2, 0x7fff, 0x400, 0xa}, {0x4, 0x5, 0x4, 0xc000, 0x5}, {0x100, 0x9, 0x6, 0x80, 0x7}]})
semget(0x3, 0x2, 0x408) (async)
semget(0x3, 0x2, 0x408)
getpeername$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async)
getpeername$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0xc)
r3 = dup(r0)
ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000480)=0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ftruncate(r5, 0x8000)
getpeername(0xffffffffffffff9c, &(0x7f0000000500)=@un=@file={0x0, ""/68}, &(0x7f0000000580)=0x46)
r6 = fcntl$dupfd(r1, 0x0, r2)
pread(r6, &(0x7f00000005c0)="faf8b825405cb85e2720514c8fea198a309263858e2e649d16c1778b6433d9b9d2f14b166b6e94a29096c3621d231db2c408e358ce476afa83373d88e8850af1ac562606e2fd429ab2cc85f25395c38f334ff54ad0051e0ba23eb0ff0d31cbef4ba00039fd16aadaec77556bf280fa419494381adf28b7dae870dd0198c1925281de961ca68fae2f906401b7a496352a18b5fc5ea6ec7db4020cf5e6e8e7ddd433cb2f", 0xa3, 0xfffffffffffffffe)
pipe2(&(0x7f0000000680)={<r7=>0xffffffffffffffff}, 0x10000)
r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0)
r9 = fcntl$dupfd(r0, 0x0, r3)
r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x80, 0x0)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) (async)
r11 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0)
kevent(r7, &(0x7f0000000700)=[{{r2}, 0xfffffffffffffffc, 0x33, 0xfffff, 0x2, 0x8}, {{r5}, 0xfffffffffffffffa, 0x0, 0x4, 0x4, 0x9}, {{r0}, 0xfffffffffffffffd, 0x40, 0x2, 0xf, 0x5}, {{r5}, 0xfffffffffffffffd, 0x2e, 0x8, 0xffffffffffff7fff, 0x2}, {{r1}, 0xfffffffffffffff9, 0x8, 0x40000000, 0x9, 0x3}, {{r5}, 0xfffffffffffffff8, 0x1, 0x4, 0x4, 0x100}, {{r3}, 0x8000000000000000, 0x88, 0x1, 0xfffffffffffffffb, 0x4}, {{r6}, 0xfffffffffffffffd, 0xc, 0x4, 0x40, 0x7f}, {{r3}, 0xfffffffffffffffd, 0x81, 0xc0000001, 0x4, 0x6}, {{r8}, 0xfffffffffffffff9, 0x81, 0xf0000000, 0x9, 0x4}], 0xfff, &(0x7f00000008c0)=[{{r3}, 0xfffffffffffffff8, 0xdc3c758329b77df5, 0xbe8e4a9a6730fa21, 0x7fffffffffffffff, 0x7}, {{r9}, 0x7ffffffffffffffe, 0xac, 0x1, 0x7ff, 0x8}, {{r10}, 0xffffffffffffffff, 0x80, 0x2, 0x4, 0x1000000000000000}, {{r2}, 0xfffffffffffffffe, 0x3c, 0x1, 0x8, 0xfffffffffffffff1}, {{r1}, 0xffffffffffffffff, 0x40, 0x4, 0x0, 0xf4b}, {{r4}, 0xfffffffffffffffe, 0x80, 0x2, 0x2, 0x90c4}, {{r11}, 0xfffffffffffffffd, 0x100, 0x20000000, 0x8, 0x5}, {{r3}, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x4}], 0x9, &(0x7f00000009c0)={0x3, 0x1ff})
sendto$unix(r6, &(0x7f0000000a00), 0x0, 0x404, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x0}, 0x8)
r12 = socket$inet(0x2, 0x3, 0x6)
recvfrom(r12, &(0x7f0000000a80)=""/171, 0xab, 0x42, 0x0, 0x0)
connect$unix(r3, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0xa) (async)
connect$unix(r3, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0xa)

2.041096534s ago: executing program 6 (id=208):
setsockopt(0xffffffffffffffff, 0x29, 0x6c, 0x0, 0x0)
r0 = open(0x0, 0x10, 0x0)
ioctl$VNDIOCSET(r0, 0x80086476, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
r1 = socket(0x800000018, 0x3, 0x0)
r2 = openat$tty(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$TIOCFLUSH(r2, 0x80047410, 0x0)
syz_emit_ethernet(0x4ce, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a3f42970f1fb4dd61487901de9d5efcb92d63466e92bbe485aaf63988e255cbb607ac7ff9ee30732dd2482be6280b8946e32cf0ec48fc7c89e53c4aecb4af7af69e0dc04dd17405ce02898adf547f851e885964f836ec6b04d77f14d85025e415a01553d6b7e5dd946be3ea735515a624f74e2c09b863881e4412135ecbdd1f1ec73762d2b1bcb0f04f0bd1369f9c374d73fb9cc7465bbdb5e77078870423340ea32c9f49980888427f49eb9d4daf99a87d6d6e44aecd7dfeba2c6f1844b2b537d6de1ba1c8bd90f7ec014b4c84a9bfba26bb92b0d740de1e20c97ec18417a1f3d68fea076ad9aeb884efa6cedf35845dd4bc6eae82e37a2304c76ab6e7467f2d868e76df28b7dbba656b0998da5d54a00e706e8dc0699e961bfe8b6cef550c66eb7e5a40ef12896fb571be1d73d817d17e177f06c0679c784feb85129836c8724bf0c3e6026a3eb831c5335475950287c988059987f9198a074e7d92cdcf6c196d91f9368490b5d5f7033374c27b2aed8732fb84933a8fbe2bcaa68b68eea3400b5b022a2fae01ef3df9bf1ba0739b54faaa56ebe38c40fc6d1d99522c07af18", 0x34d}], 0x1)
ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x0, 0xff, 0xfffffffe, 0x10, "000000000000522ebc03c72000eb27e8f500", 0x2, 0x10004})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
dup2(r1, 0xffffffffffffffff)
execve(0x0, 0x0, 0x0)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r4, 0xcd50441a, &(0x7f0000000180)={0x2, 0x2, 0x200, 0x2f, "1800e62304ee29a09cb9987a4562000000004fb3", 0x3, 0x7})
setsockopt(0xffffffffffffffff, 0x1000000029, 0x32, 0x0, 0x0)

2.039939299s ago: executing program 2 (id=209):
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async)
r0 = syz_open_pts()
close(r0) (async)
r1 = syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
writev(r2, &(0x7f0000000680)=[{&(0x7f0000000180)="adc1", 0x2}], 0x1) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2a}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) (async, rerun: 32)
readv(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2)

915.576187ms ago: executing program 2 (id=210):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000040))
ioctl$VT_ACTIVATE(r0, 0x20007605, &(0x7f0000000080)=0x3)
ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f00000000c0)={0x7, [{0x1, 0x400}, {0x3, 0x7fff}, {0x3, 0xfffffffe}, {0x2, 0x2}, {0x1, 0x8001}, {0x3, 0x1}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x2, 0x8a}, {0x1, 0x600000}, {0x2, 0x9}, {0x2, 0xfffffffb}, {0x2, 0x59d}, {0x1}, {0x3, 0x6}, {0x2, 0x2}, {0x3, 0x401}, {0x3, 0x2}, {0x1}, {0x1, 0xff000000}, {0x2}, {0x3, 0xffffffff}, {0x2, 0x4}, {0x2, 0xffff}, {0x1, 0x7}, {0x3}, {0x1, 0x3e76f725}, {0x2, 0x4}, {0x2, 0x10000}, {0x1, 0x5}, {0x3, 0xfffff067}]})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000200)=0x5)
poll(&(0x7f0000000240)=[{r0, 0x1}], 0x1, 0x8)
sysctl$kern(&(0x7f0000000280)={0x1, 0x2e}, 0x2, &(0x7f00000002c0)="0ee982c6f8b448525d49550f5123a56a618a6a85d7836a392515f78bc702bcee7b547202c10fbb8b69f00b930e56fff4b4a9", &(0x7f0000000300)=0x32, &(0x7f0000000340)="60bcb20d85d540b88b100c8e9aaa69bffc563a583222348b38b75a974873b9a51a0aa9c0a43d55ef9f82945fe6c5edec4f0f6109ed6552b3a0cdbafbaf714c26d441349f3aedc1dba74dfab4810f95cd05159e9fa12e18e2f6ce92a6c527f870586cb75987fbe3733fc5f748644fdb9b9569e07f3529d58300162711093feca6cdabace96482a41b05910e57f3fb7f5f3d863d1f29302912c36b94c615d1901f5752df78c76897079a7dd57ed66fd4b8bc5abce20a0afcbc6f743e5f3314a966f9850c54e44728541f9ce5871176ee8b73e9", 0xd2)
r2 = socket(0x1, 0x2, 0x5)
sysctl$net_pipex(&(0x7f0000000440)={0x4, 0x23, 0x2}, 0x3, &(0x7f0000000480)="9970f545534e5b4f117bc4bf64086231cb3cc3dad1f15aeed45bbcb99ba095e8fc83cd3f744b2af87ec2110f9e007cbc5ee630c9c6b71c24f3dddd56d59993103823e778159f70197b6f745b0e6be61475385d469044b6070ab6b886861a93ad8ba03dfc71d8b6d97e4fbc20121d7900821a8310639e877704b51e6dccf50237e84c72b16501593b3fe17825966a5d04aca88292d98e6457263d3f340a8e346e417bc77a1e703aec2f1c19dd451f2736c49e0cbc239051ca5d2d8839720ba50dbe018451d95e66711de40ef968b7eafdc8a8c4033aac9f1c5eeb448f716dc9979e032b28f5addace6e0e36", &(0x7f0000000580)=0xeb, &(0x7f00000005c0)="bc691cf364b893e2e4ab1320e1d542a218c2f9d7fdae001e39adc88e6a67ec92e57446493d3324dc844d1702d8441d05374bdb31ec1d1a29076150701d6ba240ec9848207d065a2eb034da91e942ace9fe82579a791c24007233440183c13624fd9610a651b23ab568a44372304a89c05817374818d1fa34c29a180c", 0x7c)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x8004746c, &(0x7f0000000640)=0x2d35fccc)
r3 = getpid()
r4 = accept(r2, &(0x7f0000000980)=@in, &(0x7f00000009c0)=0xc)
r5 = dup(r2)
sendmsg$unix(r1, &(0x7f0000000a80)={&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000900)=[{&(0x7f00000006c0)="aaa1f18cbc0ec2fe7994d117a82aca44ca9a94d2a13a9851bc78f1e001c589e4e08ea29cbb521074d9f0f7c02b40d4a9465a6c12d2c12ff2f975107f0805b26a34b771ddbe91b7ee6c0057", 0x4b}, {&(0x7f0000000740)="ff4f4da3445a6c1a2cd445336f44a6987fd2d68ba9f9d4a2963e50132a3b02631070b7e97c30eaf6b30b14d525e44d6a08b8ea53192e508d79e6a145d028e83d6b695449fe0597f007e78f4ad3714d837d394bf4412a712a6e0d4f8aa48fba51", 0x60}, {&(0x7f00000007c0)="87d4946649869ebcb02497aa2c76622e888bab86844f89354e0d3f162a22bd6e8b56faa00e8ac7e36902d739acba8b95db1219092be8091d57d2a8591022c0bf36c2e7e9e31c63fec0cfa648adda0bf9dcb6a03784c1e997768f17f1b837c66e921a", 0x62}, {&(0x7f0000000840)="283e6eedf0df828e3f407c27e025165841a30875ff77fa957315841e8a1375712b8ec495110adea44156c4ca6b", 0x2d}, {&(0x7f0000000880)="3834a818e3dc750a3d9bb6a669d7df18ccf7cfe426edb91c64abf8cf361de9d072521285677ad2db07c04d9e05c7690e8ec65a6af1705b2a99d40fc4a6a0c03cc110399d0e98f0f377c7ba6fa5f28cb7fe96cab03e38dfd33a33", 0x5a}], 0x5, &(0x7f0000000a00)=[@cred={0x20, 0xffff, 0x0, r3, 0x0, 0xffffffffffffffff}, @rights={0x38, 0xffff, 0x1, [r0, r0, r2, r2, r1, r4, r5, r0, r2]}], 0x58, 0xa}, 0x2)
r6 = accept$inet(r4, 0x0, &(0x7f0000000ac0))
shutdown(r6, 0x3)
getpgrp()
r7 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000b00), 0x400, 0x0)
writev(r7, &(0x7f0000000b80)=[{&(0x7f0000000b40)="e3cc42e195cc81e11e3a6943e75777c440b21f4a1b", 0x15}], 0x1)
sysctl$kern(&(0x7f0000000bc0)={0x1, 0x1a}, 0x2, &(0x7f0000000c00)="bc44365aacda4eccdd43298bb7ec439e4ad26da714d26de96f08030356e73ca83225e6a116468ca1fcce1883602f458ca1d85782222fcb0465683f5cbfe74eef3ac119798268b7522a1cb12fd4e02f7bd77962f02eba86491c169da25dac7f2c4c648444a56b9722fefc98de2287d75574b954de0b5299421880dd5ee8f1a7e66ff1da6e8a49f046c0fd5c57a7c57cec86d683db554207d6c1df65e3052e8d7535d6c6258c5f4221eba1b2971263df02bd607b26632222b2578fca72772efaa8f13959a14082d4fe1d2f8f73ec5e43dd741b12c8b651006327533dc994dbe6ee40dc5714c12c433bd8107a70d324582e0f84dbcca87835", &(0x7f0000000d00)=0xf7, &(0x7f0000000d40)="23ce7c3289dd49dd085438338ebd878bd47f90135adfa52752beaa9b1d7325f00496b1c8f93f82572f91ac48fc0061c03acac57a57af5f520ee084337c807e5c58c3dd5625b2b73098252aa5ca7b60fdb3724405d902af32450847fec85d09c1f28698aa9b4b88d49a24d6d269269121da3d1352e8032b7c513b7550bd10b818fd891a570d725e8ac6301ed700bceb5be41f3690adadd9ff6835e5b3e1b71b28f62cb68a238c471345eb8edf156fb1d3ddaabf9e3368c28ec5bb570f8059cb74edcb237d2c3c6f97888b36f6fcf736a5e58fb4a418e0c985517e5d08cff864669d075bb42f6a", 0xe6)
setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000e40)=0x5, 0x4)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x8200, 0x0)
r9 = semget$private(0x0, 0x4, 0x8)
semop(r9, &(0x7f0000000ec0)=[{0x2, 0x8, 0x1800}, {0x1, 0x0, 0x1800}], 0x2)
sendto$unix(r1, &(0x7f0000000f00)="ce8f0a3bc11d390adf205713dc0c869478dfc937f56eb930e86d91c04271", 0x1e, 0x400, &(0x7f0000000f40)=@file={0x1, './file0\x00'}, 0xa)
ioctl$WSMUXIO_REMOVE_DEVICE(r5, 0x80085762, &(0x7f0000000f80)={0x2, 0x6})
writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="fe684bfcd65c32619dee37410072d8fc2c0c54308929ebea97ec06333153790e7df1a99674a379f2e5904ea3da24780e7dd4958ed7369a1409ba380f9a6ea4c9cd54bc0d6384473b06ee77b983013ef072c3e4a6b190671743ee110d745434dc9d629dcbede7da988134546590c739b50695200df824de353312b2be9427ace3d75d7b0ee6d365e4e335e9740da36061986c90ec7847e786fa24197c7a68fb1d53c7bf4a9a60d0eae2ffbee96010e51ea89d0e90c0e1c37fe0b5da5684a870fd5bd0029d5ea3641a67458cc98abb748602fd8b2a2aa8c37677c5e9c295b5", 0xde}, {&(0x7f00000010c0)="31645f3d3cd26be460f8ad17ca4497cbe881fe5782f559b0166306d79cc69f9d67afb95ed147287ba10d5bc9d0b595e7bf5ad19581f77eea71895c18d3dbff8e4ee79144db12ef16143d42a882118ac696ef33b1cbb1eb506f577fc2b22535f9d8b9b4c467e448ed08236ef44e505be5f54be9c4eda7d483193363486316ada245a08f664fc3cfd9d1b3cd6583d58da7115069ef6b14160819bce09c86c430ecac7bb0", 0xa3}, {&(0x7f0000001180)="befeb863301b9cf6a4483dfa836a9b02cf814775e3db3b36be633aef94dd5ab40f737b3a2b8f6b65ab230c51c72175818918e46d6371be88b0cc3e6837", 0x3d}], 0x3)
ioctl$WSKBDIO_GETMAP(r8, 0xc010570d, &(0x7f0000001240)={0x5, &(0x7f0000001200)=[{0x8001, 0x7, 0xf843, 0x80, 0xf3c4}, {0x8, 0x1, 0x4, 0x4, 0xc}, {0x4, 0x9, 0xfff9, 0x7, 0x7}, {0x0, 0x3, 0x2, 0x4, 0x4}, {0x3, 0x7, 0x4, 0x3, 0x1983}]})
ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000001280)={0x9, 0x1, 0x6, 0x0, "f67629b952395bbcdf05e520de92537f51a8c40c", 0x4, 0x3})

879.443311ms ago: executing program 3 (id=211):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x20, 0x0)
r1 = socket(0x18, 0x2, 0x0)
close(r1)
r2 = socket(0x800000018, 0x1, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0x9, 0x100000000e63})
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x42, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x3fffffffe, 0x5})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket(0x800000018, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000002880), 0x1, 0x0)
r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000040)=0x7ff)
fchmod(r4, 0x80)
unveil(&(0x7f0000000700)='./file0\x00', &(0x7f00000001c0)='W\x00')

806.333252ms ago: executing program 6 (id=216):
r0 = socket$inet(0x2, 0x2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000e", 0x24}], 0x1, 0x0)
r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100), 0x8)
fcntl$setown(0xffffffffffffffff, 0x6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000, 0x400100000001})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
lseek(r3, 0x8, 0x0)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0)

805.700172ms ago: executing program 0 (id=218):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x0, 0x2, 0xfffffffc}, {0x7, 0x2, 0x2, 0xc}, {0x6, 0x10, 0xfb, 0x400f}]})
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="00e0ad50b58a8002bc5a91000000004b8e5f84cf879e39bda5dba7e6d6f4ac23ca3fe6db3575ec597ae9b2023577de9adb9b2c8d04befb22b2c337fa5f88aad02dbc8fdc4e", &(0x7f0000000080)=0x45, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
minherit(&(0x7f00000c2000/0x1000)=nil, 0x1000, 0x1)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61b91d3a00002c03ff020000000000000000000000000001ff02000000000000f400000000000001"])
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x7fffffff, 0xffffffffffffffff, 0x4, 0x2000000000000004, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x8, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x80000000}, @icmp=@generic={0xc, 0x6, 0x0, "6d9864a1"}}}}})
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="1897fc386ff02dce30f6a46fb09b57f3ff349a894c9340339f9f9adeb5d83d74b6b571fe9085398500b23a6dce06c8f8fb01ac23395946a46d45401ac2f4c962bc614a7bfda365330a7b886c9908d50acf298ea5c9c27975d0cfd6b95c46adac89d3bb473a0ff19b9b6c779784fc6c60e2d4dee9932d659ae10e96d0f0cb7e46803f18d5aea5035ef5a6c6beefe0cab28a14f3c50b412bd5325c5503e4491e85c8b50fe849ea0921c5d2c7079a3abdb0d6ac2519a978d68f53b85443fc12315296b62fe6f2f4578226840c29010e535ca2075e6abf52b6f6aad499f7ad1c5c705dcb1562b1bb439bd8", 0xe9)
ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x1)

631.590415ms ago: executing program 2 (id=219):
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x800000000000000f, 0x0, 0x0, 0x1, 0x2, 0x7, 0x2000000004})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000140)={0x0, ""/128}, 0x88, 0x3, 0x800)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x823, 0xd, 0x1, 0x20049e, "084880fa870000bdda0988d11554e9090002ff07", 0xb52, 0x4})
sysctl$vm(&(0x7f0000000200)={0x2, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="ca21dffabd7ac9c526bbb173460480e9033d95328669edeadf5e89", 0x1b}], 0x1)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r4 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800)
ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000000140)={0x7f000000, 0xfffffffe, 0xfeffffff, 0x9, "080014000000000000010000000000000f1eeaed", 0x10000000, 0x1})
ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f0000000000)={0x2, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1)

629.151404ms ago: executing program 6 (id=220):
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0x29789, 0x0, 0xfffffff8, 0x6, "bb081aa900fffff3ff0409ffff0000e15a13b704", 0x71}) (async)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0x29789, 0x0, 0xfffffff8, 0x6, "bb081aa900fffff3ff0409ffff0000e15a13b704", 0x71})
r0 = socket(0x18, 0x1, 0x0)
close(r0) (async)
close(r0)
socket(0x24, 0x2, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x2, 0xffffffff, 0xfeffffff, 0x9, "080014e8eaed00", 0x6, 0x9})
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000180)=0xc) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
r2 = getuid()
setreuid(r1, r2) (async)
setreuid(r1, r2)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async)
r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
writev(r3, &(0x7f00000008c0)=[{0x0}], 0x1)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xd0)
fcntl$lock(r4, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x108000001})
socket(0x10, 0x4, 0x0) (async)
r5 = socket(0x10, 0x4, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x1003, &(0x7f0000000140)=0x7, 0x4) (async)
setsockopt$sock_int(r5, 0xffff, 0x1003, &(0x7f0000000140)=0x7, 0x4)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)}], 0x2)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000080)="a2fec73c7a59d570d80a010d579235974588feebe882d9a0488a72a35ea70b", 0x1f)
socket(0x18, 0x1, 0x0) (async)
r6 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r6, 0x80206982, &(0x7f00000001c0))
setsockopt(r0, 0x6, 0x41, &(0x7f0000000280), 0x1c)
setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x62})
r7 = syz_open_pts()
close(r7)
syz_open_pts()
ioctl$FIOASYNC(r7, 0x80047470, &(0x7f0000000000)=0x2)
mprotect(&(0x7f00003c2000/0x4000)=nil, 0x4000, 0x5)
getrlimit(0x7, 0x0) (async)
getrlimit(0x7, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffffe, 0x0, 0x10, 0xffffffffffffffff, 0x2)
msgctl$IPC_SET(0x0, 0x1, 0x0) (async)
msgctl$IPC_SET(0x0, 0x1, 0x0)
socket(0x20, 0x3, 0x0)

628.459396ms ago: executing program 2 (id=221):
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = shmget(0x2, 0x4000, 0x20, &(0x7f000041c000/0x4000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
shmdt(r2)
sysctl$hw(&(0x7f0000000140)={0x6, 0x14}, 0x2, &(0x7f00000000c0)="1e79bc277081100bcc2c492e781ecc5912e3439450551e1fc1c1106817fbe62cf079e8fac32d8502b763a0540ad9af103d3979e4eef565d53000000000000000000000000013688d6d7c5ea84cd5d8f0d6818b2f23952dabf6d12bf14c015065e8294b47268975", 0x0, 0x0, 0x0)
r3 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="90e73a75f92d614a2c04afcef245b15118", 0x0, 0x0, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r4 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r4, 0x80206916, &(0x7f00000001c0))
shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendto$unix(r4, &(0x7f0000000040)="eb43ee81d29f8b7c9dc7d89491f558bb26b7f630b483dfc86e361ac6bf5b43fc777c159332cc21e933bfc80aacf04f4dafb4b4a6c28fce", 0x37, 0x401, 0x0, 0x0)
minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3)
sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$BIOCGETIF(r5, 0x4020426b, &(0x7f0000000200)={""/16, @ifru_broadaddr=@in6})
sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4)
ioctl$VNDIOCSET(r0, 0x41946465, 0x0)

627.18444ms ago: executing program 2 (id=222):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000040)={""/16, @ifru_dstaddr=@in})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000))
syz_emit_ethernet(0x1000e, &(0x7f00000003c0)=ANY=[])

624.088077ms ago: executing program 6 (id=223):
r0 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x4a)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
fchmod(r0, 0xf3)
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x17)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xf9)
ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f00000001c0))
setuid(0xffffffffffffffff)
mkdir(&(0x7f0000000480)='./file0\x00', 0xb4)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00')

559.127631ms ago: executing program 2 (id=224):
r0 = syz_open_pts()
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160)
r3 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r3)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0)
fcntl$lock(r4, 0xb, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x8e)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r5, 0x0)
r6 = open(&(0x7f0000000280)='./file0\x00', 0x20000, 0x0)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socket(0x2, 0x8000, 0x2)
readv(r2, &(0x7f0000001640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8)
ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0xfffffffffefffffe, 0x0})
ioctl$TIOCCBRK(r0, 0x2000747a)
mknod$loop(&(0x7f0000000140)='./file0/../file0/../file0\x00', 0x4, 0x1)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1)
r7 = socket(0x2, 0x3, 0x0)
r8 = dup(r7)
setsockopt$inet_opts(r8, 0x0, 0x14, 0x0, 0x0)
r9 = geteuid()
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000240)=0xc)
fchownat(r8, &(0x7f00000001c0)='./file0/../file0\x00', r9, r10, 0x6)
r11 = openat(r5, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0)
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, <r12=>0x0}, 0xc)
fchown(r11, r12, 0xffffffffffffffff)

558.114827ms ago: executing program 6 (id=225):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56})
acct(&(0x7f0000000000)='./file0\x00')
r1 = socket(0x2, 0x4001, 0x0)
r2 = socket(0x2, 0x4001, 0x0)
r3 = dup(r2)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
dup2(r3, r4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
socket(0x18, 0x1, 0x0)
r5 = fcntl$dupfd(r2, 0x2, r0)
close(r5)
open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0)
chroot(&(0x7f0000000740)='.\x00')
sendmsg(r6, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4)
r8 = syz_open_pts()
close(r8)
syz_open_pts()
ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x5, 0xffff, 0x200499, "084880fa87f4ffbcda0988d11554e90d6602ff07", 0xe6, 0x3})
writev(r8, &(0x7f00000001c0)=[{&(0x7f00000009c0)="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", 0x43b}], 0x1)

530.086647ms ago: executing program 6 (id=230):
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8})
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
msgctl$IPC_STAT(r0, 0x2, &(0x7f00000002c0)=""/245)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
r2 = getuid()
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={<r4=>0x0}, &(0x7f0000000140)=0xc)
r5 = getpid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0x3, r5})
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x8, r1, 0xffffffffffffffff, r2, r3, 0x140, 0x6}, 0x3a, 0x80000001, r4, r5, 0x6, 0xfffffffffffffffc, 0xe, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sysctl$net_inet_ipip(&(0x7f0000001c00)={0x4, 0x2, 0x11, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000001cc0)='\x00\x00\x00\x00', 0x4)

437.01635ms ago: executing program 5 (id=231):
syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="172140030f70", @empty, [], {@ipv6={0x86dd, {0x6, 0x6, "0cf5b8", 0x10, 0x0, 0x1, @rand_addr="5796bdca6f177b098b2b5ae22967efd7", @mcast2, {[@dstopts={0x3c, 0x0, '\x00', [@padn]}]}}}}}) (async)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x1) (async)
syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x0, 0x0, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async)
symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00')
unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='r\x00') (async)
execve(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket(0x2, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10) (async)
sendto(r1, &(0x7f0000000300)="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", 0x121, 0x401, 0x0, 0x0) (async)
close(r1) (async)
recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000680)=[{&(0x7f0000000100)=""/155, 0x9b}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/219, 0xdb}], 0x8, &(0x7f0000000700)=""/104, 0x68}, 0x1)

431.264891ms ago: executing program 5 (id=232):
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x2, 0x0)
bind(r0, &(0x7f0000000000), 0x10)
connect$unix(r0, &(0x7f0000000000), 0x10)
r1 = socket(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000000), 0x10)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
socket(0x2, 0x8000, 0x2c)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d395200086b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d", 0x7d, 0x808, 0x0, 0x0)
ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x100000, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffc, 0x8})
connect(r2, &(0x7f0000000080)=@in={0x2, 0x1}, 0xc)

430.489351ms ago: executing program 5 (id=234):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x2, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000026c0)=[{0x1, 0x9, 0x2, 0x7}, {0x14, 0x10, 0x1, 0x7}, {0x6, 0x5, 0x83, 0x4010}]})
syz_emit_ethernet(0x22, &(0x7f0000001640)={@random="3929c6f14e16", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0xb, 0x14, 0x66, 0xfb99, 0x3, 0x50, 0x0, @multicast1, @broadcast}}}}})
sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x402)

349.151561ms ago: executing program 5 (id=235):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x2)
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x15}, 0x22, &(0x7f0000000280)="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", 0x0, 0x0, 0x0)
getsockopt(r1, 0x29, 0x31, 0x0, 0x0)
r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
getdents(r2, 0x0, 0x0)
ioctl$FIONBIO(r0, 0x20004109, 0x0)

339.109145ms ago: executing program 5 (id=237):
mknod(0x0, 0x8, 0x7)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x105)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x11, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000080", 0x4)
r0 = socket(0x800000018, 0x2, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000002c0)={0x3, &(0x7f0000000040)=[{0x40, 0x3a, 0xa, 0x30}, {0x5c, 0x0, 0x15, 0x8000004a}, {0x1ae, 0x8, 0x5, 0x14002}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[])
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4)
setuid(0xffffffffffffffff)
ktrace(0x0, 0x5, 0x128, 0x0)
dup2(r2, r0)
listen(r0, 0x0)

235.367366ms ago: executing program 5 (id=240):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{0x9}, 0x1000, 0x1, 0x3128ee68})
seteuid(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000180)={0x1bd1, &(0x7f0000000040)})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket(0x18, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0))
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xb1, 0x10, 0x0, 0x2}, {0x8006, 0xa, 0x5, 0xff80000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIONBIO(r4, 0x20004109, 0x0)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
sysctl$kern(&(0x7f0000000100)={0x1, 0x2f}, 0x2, &(0x7f0000000140)="420018c2210c228c9521793e8a8e28b763edf7dd6ac44e77d5", &(0x7f0000000180)=0x19, &(0x7f0000000200)="c95c58a72c493a4ccfaedae00ea5ec03ed33e09948bbbd031cdecbf05dafc7ebdf9b5dc9949d51862d0bec4016b9c227e99344b2518b4827263a09bf4f174131e288111eb81518ef19b6219d0ea6426dcd0b", 0x52)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
poll(&(0x7f0000000300)=[{r6, 0x18}, {r0, 0x8}, {r3, 0x1}, {r0, 0x4}, {r2, 0x4}, {r0}], 0x6, 0xfff)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[])
sysctl$vm(&(0x7f0000001380)={0x2, 0x1}, 0x2, &(0x7f0000001240), 0x0, 0x0, 0x0)
sysctl$vm(&(0x7f0000000000)={0x2, 0x4}, 0x2, &(0x7f0000000040)="1e7d9f45c8740309113cca662a2f", &(0x7f0000000080)=0xe, &(0x7f00000000c0)="05c720149c59555d2f55bbdb0fab5437", 0x10)

234.062129ms ago: executing program 1 (id=242):
pledge(&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00')
sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f0000000080)="3e66e61d74af7c0757c44650cb80f45ec2f3a1e705ce3d1c4bc01b9a1d9f4c96bd0d2e89fbc948cc4cdfc768176a865ac5c2548ddab174c2e912097bd1e55e6b3daae58e8ec791a8cf1bdb593fb73d77bd377409656ecb023a862ea80e6456ed02fc8d6061aa620fe8c9177955ad288b486eeadd6f107ea870454d7a2ddfaef7b54e1dfb969fe0d272c0f0883c0792feb888caa93397e8c1730fc0e1477e119f85f92af90293e6f4b7e34a1992dfdf345b8d65ff347ab2a37e60da68", &(0x7f0000000140)=0xbc, &(0x7f0000000180)="a2b543764ee36ac0d4ec3f3f4f24b35942f5bf100a9f8cb88a787e9741594402118697a4e5fdf189657b370f37820e16e454b031", 0x34)
r0 = accept(0xffffffffffffff9c, &(0x7f00000002c0)=@in, &(0x7f0000000300)=0xc)
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5e8c3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5492f4a0491b1ea3359aa5c5164ad97ac7c3aadca05fd9e9a8c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x4104, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x80146945, &(0x7f00000001c0))
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x40, 0x4, 0xa00440}, {0x7, 0x85, 0xf0, 0xe}, {0x16, 0x4d, 0x8d, 0x48a6}]})
sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000340)="71f91e3471ac0058bc8e5f84cf71b59c7afebae093fa21386716c370", &(0x7f0000000080)=0x1c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0xf1, &(0x7f00000002c0)=ANY=[])
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff2c)

187.362937ms ago: executing program 1 (id=243):
mknod(&(0x7f0000000140)='./file0\x00', 0x100, 0x5)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0xf}, 0x4, &(0x7f0000000080)="a5ae24892ebd9a6943b76f96eea2cff896683d7eecfb783b7997dea586c69114007081c6a89f3a88ec8e44c64dc26783150b6b5cdf05f6bb953eaa3b72b4991fcc6ffd2702868f9003caa0f2871da47306fe83d0ce5871a8985d3eff421b244e2e6ed0fe8377f32a24ff66633642aa270dc0f864c9ca02c57b84525d297b4d19331b7b23a4fe36863f726e18ebf24f54c4f41fabddd847769f209db1a5cd1a38", &(0x7f00000001c0)=0xa0, &(0x7f0000000200)="73a0bb9cb951d3f1638af4c2b984b421aba829b20d60e5c050d72f5994aaa57bed7f69db34e5da722cf4b6a9dbce9e2b90a69d1160dc8488f874c6cae326c2f12badf9d8fd64f287e3c21d3f62170c04b77ed688a46e711363a816f33395cf0d25fe6a738826e79ad3fe55ced95cb20c2ea0fcf0b84b62b424d1f6d3f91ce8ed7d86a6e550668d5f3930408ddc5d0fbb213134111f343fe64900936a7dcc", 0x9e)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x147)
ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f00000002c0)=0x13ff)

185.671813ms ago: executing program 1 (id=244):
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x102)
kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff})
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0)
close(r1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x200000000000a, 0x0, 0x0)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000180)=0x7)
r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0xd1)
chflagsat(r3, &(0x7f0000000200)='./file0\x00', 0x0, 0x2)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="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"])
semget$private(0x0, 0x2, 0x2)

185.069069ms ago: executing program 1 (id=246):
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000001540)="9b0209c3", &(0x7f00000002c0)=0x4, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf0, 0x0, @broadcast, @rand_addr=0xdfffffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa, 0x7, 0x0, 0x80}}}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='%\x00', &(0x7f00000000c0)='#\'\x00', &(0x7f0000000100)=':\x00', &(0x7f0000000140)='@/\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='#\\\x00', &(0x7f0000000200)='\xe5%\x00', &(0x7f0000000240)='-^[\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='\x00'])
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0)

107.849119ms ago: executing program 1 (id=248):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
sysctl$net_inet_ip(&(0x7f0000002740)={0x4, 0x2, 0x0, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000028c0), 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x9, 0x40009, 0x4, 0x1, 0x5, 0xffffffe8, 0xe4c, 0x1, 0x2, 0x6, 0x1})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0xc050756a, &(0x7f0000000100))
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x210000, 0x8, 0xe, 0x0, "6c82b3502478102007a5b997c0466674dcca9ce6", 0x9, 0xffffffff})
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
close(r1)

107.408209ms ago: executing program 7 (id=249):
setrlimit(0x3, &(0x7f0000000980)={0x3, 0x100000}) (async)
setrlimit(0x3, &(0x7f0000000980)={0x3, 0x100000})
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x5, 0x28, 0x5}, {0x84, 0x1, 0x0, 0x2}, {0x206, 0x6, 0x9, 0x40000001}]}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x5, 0x28, 0x5}, {0x84, 0x1, 0x0, 0x2}, {0x206, 0x6, 0x9, 0x40000001}]})
sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4) (async)
sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
syz_emit_ethernet(0x1000e, &(0x7f00000003c0)=ANY=[])
r1 = syz_open_pts()
close(r1)
pipe2(&(0x7f0000000040), 0x10004) (async)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x10004)
getpeername(r2, 0x0, 0x0)
r3 = syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000140)=0x7)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0xfffffffd, 0xeffff09a, 0x313, 0xffffffff, "140ef12158e0ce122f00000300", 0xc96, 0x5})
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000740)="c046203cdce5a721a71b246bd94b7168d294a7", 0x13}], 0x1)

106.786699ms ago: executing program 1 (id=250):
select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
r2 = socket(0x2, 0x4, 0x0)
kqueue()
open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51})
open(&(0x7f0000000180)='./file0\x00', 0xa608c9af653c9f6d, 0x0)
accept$inet6(r2, 0x0, 0x0)
sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0)
socket(0x18, 0x2, 0x0)
ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x80045745, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1)
r3 = socket(0x11, 0x3, 0x3)
sendto$unix(r3, &(0x7f0000000280)="b1000501600000001700000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0)
r4 = socket(0x18, 0x3, 0x20)
getsockopt(r4, 0x29, 0x1, 0x0, 0x0)

106.569809ms ago: executing program 7 (id=251):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x12, 0xfffffcb5}, {0xe6, 0x10, 0xff, 0x102}, {0x6, 0x5, 0x83, 0x104010}]})
sendmsg$unix(0xffffffffffffff9c, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x3}, 0x80f)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r2 = socket(0x18, 0x3, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
ioctl$BIOCLOCK(r3, 0x20004276)
setuid(0xffffffffffffffff)
ioctl$BIOCGDIRFILT(r3, 0x4004426a, 0x0)
getsockopt(r2, 0x29, 0x3d, 0x0, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
dup2(r1, r0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])

43.691964ms ago: executing program 7 (id=252):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
r0 = getgid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
setregid(r2, 0x0)
r3 = getegid()
setgroups(0x4, &(0x7f0000000000)=[r0, r2, r3, 0x0])
syz_open_pts()

42.807367ms ago: executing program 7 (id=253):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) (async)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, 0x0) (async)
ioctl$BIOCSETIF(r1, 0x8020426c, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x62, &(0x7f0000000080)=[{0xfff8, 0x9, 0x42}]})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x30, 0xff, 0xfa, 0x8}, {0x87, 0x5, 0x7, 0xfffffff9}, {0x6, 0x0, 0x7, 0x800}]}) (async)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x30, 0xff, 0xfa, 0x8}, {0x87, 0x5, 0x7, 0xfffffff9}, {0x6, 0x0, 0x7, 0x800}]})
write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9bc0ffbf1a30", 0xe)
sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x12, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0)
msgget(0x1, 0x80)

42.363628ms ago: executing program 3 (id=254):
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x3)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x147)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32)
r1 = semget(0x0, 0x2, 0x4) (async, rerun: 32)
r2 = getuid() (async)
r3 = getgid()
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, <r4=>0x0}, &(0x7f00000001c0)=0xc) (async)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) (async)
r6 = socket(0x18, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) (async)
acct(0x0) (async)
r8 = kqueue()
kevent(r5, 0x0, 0x8, &(0x7f0000000140)=[{{r7}, 0xfffffffffffffffb, 0x6f, 0x1, 0x3, 0x9}], 0x10, 0x0) (async)
kevent(r8, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
kevent(r8, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (async)
acct(&(0x7f0000000080)='./file0\x00') (async)
r9 = getgid()
open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x9}) (async, rerun: 32)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000200)={{0x7, r2, r3, r4, r9, 0x100, 0x2}, 0x1})
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async, rerun: 32)
kqueue() (rerun: 32)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x8, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x47], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0xa}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}})
r10 = socket(0x2, 0x3, 0x0)
close(r10)
r11 = socket(0x18, 0x3, 0x0)
close(r11) (async)
socket(0x18, 0xc003, 0x3a)

41.946603ms ago: executing program 3 (id=255):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x4, 0x200000, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0]) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
r1 = semget$private(0x0, 0x1, 0xb0)
semctl$IPC_STAT(r1, 0x0, 0x2, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0xb0, 0x5, 0x2}, {0xc0, 0x85, 0xf, 0xa}, {0x16, 0x3, 0x8, 0x48a6}]}) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x2, 0x0)
close(r2)
socket(0x2, 0x3, 0xfe) (async)
shutdown(r2, 0x0) (async)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
write(r2, 0x0, 0x0) (async)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
r3 = syz_open_pts()
close(r3) (async)
r4 = syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047469, &(0x7f00000000c0)=0x5) (async)
writev(r4, &(0x7f0000001880)=[{&(0x7f0000000100)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb2cda7a2357f162165a18ec7a8361", 0x4d}, {0x0}, {&(0x7f0000000040)="0076f965e5faff61", 0x8}], 0x3) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) (async)
r5 = open(&(0x7f0000000180)='./file0\x00', 0x8, 0x9)
sysctl$net_inet_ip(&(0x7f00000002c0)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1000003fd})

7.32352ms ago: executing program 7 (id=256):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r0 = syz_open_pts()
close(0xffffffffffffffff)
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x4, 0x3, 0x9, 0x7, "a14ec4a2e2fc4b5dec9b7c5478871b685f74760d", 0x3, 0x7})
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x400000000, 0x0})
r3 = getpgrp()
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000880)={0x0, <r4=>0x0}, &(0x7f00000008c0)=0xc)
r5 = getegid()
r6 = getpid()
r7 = getuid()
r8 = getegid()
r9 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r9)
r10 = geteuid()
r11 = getegid()
sendmsg$unix(r2, &(0x7f00000009c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000007c0)=[{&(0x7f0000000100)="de537b7f9fb57fb48c00f71163ab6e133e4539beddf3223f9b120afe0e05e733124562c7ef7a7074ae36b2ab56287eb5f9edfb1362d29e8233c1b161d85f3c450b005b65387c07de910309ff7bd208ffd9a0018e4f9914d949d91df45f33d2abddcea097a67c90f52265b366041a4ab472baf37de87272a33ffade1eedec28397f5e8a71fe7b3f289fe1a160c6c32a12a4ada456b4b22e9d352fe13b19ffe29b58dcba248fd223be4462ba62756decc8649be6d02226d444e6e04907a0ed48aa18c34e5c0f3428a4612bd9b5141462117a6ad6dd6d", 0xd5}, {&(0x7f0000000200)="a025d84a4d5cc4c7c61d1a148d64987e215ca97ac2c78994bee69d783d742425d5edc699f4b570c7def1a947f4d784b1d0cec32fb32e12c2f21d6daa7586f1d563aee15f27b69e2c7d9f5e02db5deae6f4cfdfddf8ebc35bdd283bda1c937c58458b13f3607a5e78d29a1ab482e2eace183f01f08dc7df8b87a617fa48bb319997ba066a93452a378a92902e46acbca28535b1db5789b4b9", 0x98}, {&(0x7f0000000380)="f02bc9e531821c905698db8c9a0b848be198ebd6a73cb758850fc5e8e6c262b7285ae553dd0d6461171505f5c8a9f2dcba6c8c4e5b5d8eeb1831d9a8ca59e58a310ce517d0da2303542ce0da9f71ecaee73d9590b3aff492d89448520e773c462d8c112210bff3f574a3fb736cc3b864e1241789c175d6cd0a0911c6606edc89973a209ac2c8b2562364b0e90318bdc8d18a11eab3ee65925350369fef3f66bee17c717a2b28c0f2bf29584a9ef2d94c01b0dca64255f7b03876f1fc458152f12cb7019fe7bfcf345424b8e10ebd906579b2cccd6006b99250513b9c4f1cf2ab4c59ce3a8d186d9931d863", 0xeb}, {&(0x7f0000000480)="0226b7b0c870bd998fcc69160258687cc3506d2168eb58b59034c0e13fbdc7ff2b3fda6b9b3e946734c7e77e169086870698edb4376d0969ee1830e44c0af4e71dc7efa461c4e5e01663dde91d04cf69aa812b53806698357a834b4c03848698fa7c31ae9cdb3a368e8a086f77944c5a646a965aaf39cfad8e127fc4bd82d16c01ad44a9cc39c2f26153bc38cd0e1819670f189353b4bef15611e70aebad1f3c290018695ddfde248315cb9150794e9eff8debf85f56d193386c324199e1b8b28dc3cd16a515dc57027506d38b69c408c8b6ba2b787446672e41fe943bb8c2", 0xdf}, {&(0x7f00000002c0)="7e914f80c1446949f61bae4ca0f55b08a3edd6f2a34dcc538705c1037a41c53a9f23dd800b5cdc9c4c5feb258fdb4dad9b3ea29dd46c7aeff320b42fd608dbc62ccb0c4fdf27956e2caba49b9bef3a065b6de8f4841f7a282861dd8f6220a2ba1acf9e058649", 0x66}, {&(0x7f0000000580)="f8c3d8919afe1810abd5fa5c9fe781f62314548f61f9d9c7d81023eccee756dad400bc4efe83eaa8fa94cd5e57c7e423e3fb11a0d1e54602823157758706132244aca3443324290829fca94726547869c22d96b70af6217ba5e2af124ddd6e42c0b2b50704c65a0cfe812dba0228d742ac6bf0ea3b4de6cb81881306c62610017a93a858f4f8bb4fdf39b6d5cf4c76180247f82c7d6da9dbd1b439e91c35384b0f5b9b269fec", 0xa6}, {&(0x7f0000000640)="2c1249749a8caea705b1655ebe2d93b4d88ae108e020a4bea4b042e1ffa7b7109e09a9cb4e9bc5a4a9891768274e5e78e4e4f3cb1db266e41cf9b028fa087d2d6bf40faf5ce993e48db3582b55b3b9273b48fb3db2ca7964fd2dab55ccee14e90a2c1ef3e29bb6099581b894c0b6c8d81c9394eb6c5097f97c7dd153b266fa30c368d97d02a7381992c7bc793d5e5644382834921fae623a748299a669d3fb", 0x9f}, {&(0x7f0000000700)="c0649f37f76f4fa08a62fb14ce6aeee18a5e89326287c7fcff628b2275fc0c7be58cd028bb4544394d0181f709a8dabc64488d3046b941b84a4fa5", 0x3b}, {&(0x7f0000000740)="ba58c094d9a5d5befc65145aa23c641b18fba9362309aee6105f12948c863d2f85732b402d1c4236bc7ad7509f059dfe7f0b37cc8a661eff20535064eba926f30aa91e197512623e9f5c62cfa4ccbe5d267a60ab41556f510e6e92df1fe27ad7ed2a4c210d1b47a19ddf5c4d8f7999cdad2c3878f8520541312d", 0x7a}], 0x9, &(0x7f0000000900)=[@rights={0x20, 0xffff, 0x1, [r0, r0, r0]}, @cred={0x20, 0xffff, 0x0, r3, r4, r5}, @cred={0x20, 0xffff, 0x0, r6, r7, r8}, @cred={0x20, 0xffff, 0x0, r9, r10, r11}], 0x80}, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1)

3.201982ms ago: executing program 3 (id=257):
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
socket(0x1, 0x1, 0x4)
r2 = socket(0x18, 0x3, 0x0)
close(r2)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x20, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x87, 0x6, 0x40, 0x7}, {0x24, 0x6, 0x11, 0x80000001}, {0x1ae, 0x7, 0x8, 0x4}]})
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
setsockopt$inet_opts(r4, 0x0, 0x200000000000b, 0x0, 0x0)
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000040)=0xf6)
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[])
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)

3.019077ms ago: executing program 7 (id=258):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x2)
ioctl$FIONREAD(r0, 0xc020699c, &(0x7f00000001c0))
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x81, 0x0, 0xf0, 0x401}, {0x2c, 0x1, 0x13, 0x4a}, {0x1ae, 0x8, 0x8, 0xa}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[])
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x8, 0x0)
ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000500)={0x0, 0x0, 0x0})

0s ago: executing program 3 (id=259):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x1, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x1, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x102) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x102)
openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x102)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
recvfrom$inet6(r2, &(0x7f0000000080)=""/158, 0x9e, 0x41, &(0x7f00000001c0)={0x18, 0x2, 0x7, 0x9}, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$FIONBIO(r2, 0xc0307004, &(0x7f0000000140)=0x4) (async)
ioctl$FIONBIO(r2, 0xc0307004, &(0x7f0000000140)=0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 325545  14209      0     0x14000      0x200    0  smr
db_enter() at db_enter+0x25
panic(ffffffff83467021) at panic+0x1e5
__assert(ffffffff83417304,ffffffff8341f78f,3b7,ffffffff8341f812) at __assert+0x29
refcnt_finalize(ffff80003c4434e8,ffffffff8335fa09) at refcnt_finalize+0x1db
pppx_if_destroy(0,ffff80003c4434e0) at pppx_if_destroy+0x3d
pppxclose(205b9a,1,2000,ffff8000fffe2d00) at pppxclose+0xa0
spec_close(ffff80003c40dfd0) at spec_close+0x412
VOP_CLOSE(fffffd805ed2d968,1,fffffd80097fb548,ffff8000fffe2d00) at VOP_CLOSE+0x133
vn_closefile(fffffd8061d6b308,ffff8000fffe2d00) at vn_closefile+0x12b
fdrop(fffffd8061d6b308,ffff8000fffe2d00) at fdrop+0x126
closef(fffffd8061d6b308,ffff8000fffe2d00) at closef+0x192
fdfree(ffff8000fffe2d00) at fdfree+0x116
exit1(ffff8000fffe2d00,0,0,1) at exit1+0x59c
sys_exit(ffff8000fffe2d00,ffff80003c40e340,ffff80003c40e290) at sys_exit+0x1a
end trace frame: 0xffff80003c40e330, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83467021) at panic+0x1e5
__assert(ffffffff83417304,ffffffff8341f78f,3b7,ffffffff8341f812) at __assert+0x29
refcnt_finalize(ffff80003c4434e8,ffffffff8335fa09) at refcnt_finalize+0x1db
pppx_if_destroy(0,ffff80003c4434e0) at pppx_if_destroy+0x3d
pppxclose(205b9a,1,2000,ffff8000fffe2d00) at pppxclose+0xa0
spec_close(ffff80003c40dfd0) at spec_close+0x412
VOP_CLOSE(fffffd805ed2d968,1,fffffd80097fb548,ffff8000fffe2d00) at VOP_CLOSE+0x133
vn_closefile(fffffd8061d6b308,ffff8000fffe2d00) at vn_closefile+0x12b
fdrop(fffffd8061d6b308,ffff8000fffe2d00) at fdrop+0x126
closef(fffffd8061d6b308,ffff8000fffe2d00) at closef+0x192
fdfree(ffff8000fffe2d00) at fdfree+0x116
exit1(ffff8000fffe2d00,0,0,1) at exit1+0x59c
sys_exit(ffff8000fffe2d00,ffff80003c40e340,ffff80003c40e290) at sys_exit+0x1a
syscall(ffff80003c40e340) at syscall+0xb08
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70dcfa90f7b0, count: -16
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c40dda0
rbx               0xffff8000299dedd7
rdx                                0
rcx               0xffff8000fffe2d00
rax               0xffff8000299ddff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xdf0472afa17ecc2b
r11               0xb38922c24dddaf88
r12               0xffff8000299debd8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81d3fc45    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c40dd90
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=70884 pid=1073 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff8000fffe2d00 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff8000fffea7d8,0xffff8000fffe3230
    process=0xffff8000fffe66e0 user=0xffff80003c409000, vmspace=0xfffffd806cf405c8
    estcpu=36, cpticks=4, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 96641  167445  45060      0  2           0                syz-executor
 87640  433806  63167      0  3        0x80  nanoslp       syz-executor
 87640   24856  63167      0  2   0x4000000                syz-executor
 87640  270234  63167      0  3   0x4000080  fsleep        syz-executor
 52008  328020  80202      0  3        0x90  nanoslp       syz-executor
 52008  159772  80202      0  3   0x4000090  kqread        syz-executor
 52008    6479  80202      0  3   0x4000090  fsleep        syz-executor
 77180   37875  91091      0  3        0x80  nanoslp       syz-executor
 77180  184736  91091      0  3   0x4000080  msgwait       syz-executor
 77180  120864  91091      0  3   0x4000080  fsleep        syz-executor
 57404  249745  66059     -1  3        0x90  nanoslp       syz-executor
 57404  236281  66059     -1  3   0x4000090  ttyin         syz-executor
 57404  218287  66059     -1  3   0x4000090  fsleep        syz-executor
 84623  391822  97545      0  3        0x80  nanoslp       syz-executor
 84623  130976  97545      0  3   0x4000080  kqsel         syz-executor
 84623  330297  97545      0  3   0x4000080  fsleep        syz-executor
 43883  120640      0      0  3     0x14200  bored         sosplice
 45060  324288  81805      0  2         0x2                syz-executor
 91091  443445  81805      0  3        0x82  nanoslp       syz-executor
 80202  346796  81805      0  3        0x82  nanoslp       syz-executor
 93406  291291  81805      0  3        0x82  nanoslp       syz-executor
 63167   84533  81805      0  3        0x82  nanoslp       syz-executor
 66059   70794  81805      0  3        0x82  nanoslp       syz-executor
 24803  477623  81805      0  3        0x82  nanoslp       syz-executor
 97545  518276  81805      0  3        0x82  nanoslp       syz-executor
 81805  381895  34635      0  3        0x82  kqread        syz-executor
 34635  117777  48458      0  3    0x10008a  sigsusp       ksh
 48458   51451  42346      0  3        0x98  kqread        sshd-session
 42346  241175  92633      0  3        0x92  kqread        sshd-session
 85887  433197      1      0  3    0x100083  ttyin         getty
 92633   43653      1      0  3        0x88  kqread        sshd
 78844  413546  81350     74  3   0x1100092  bpf           pflogd
 81350  141864      1      0  3        0x80  sbwait        pflogd
 60553   47168  71483     73  3   0x1100090  kqread        syslogd
 71483  358303      1      0  3    0x100082  sbwait        syslogd
 88986  277691      1      0  3    0x100080  kqread        resolvd
 50792   31969  20774     77  2    0x100012                dhcpleased
 18349  170229  20774     77  3    0x100092  kqread        dhcpleased
 20774  129456      1      0  3        0x80  kqread        dhcpleased
 14209  325545      0      0  7     0x14200                smr
 89509  196378      0      0  2     0x14200                zerothread
 95205  397598      0      0  3     0x14200  aiodoned      aiodoned
 87711  157235      0      0  3     0x14200  syncer        update
 50771  490926      0      0  3     0x14200  cleaner       cleaner
 10667  211251      0      0  3     0x14200  reaper        reaper
  7158  430014      0      0  3     0x14200  pgdaemon      pagedaemon
 69412  164887      0      0  3     0x14200  bored         viomb
 33327  327775      0      0  3  0x40014200  acpi0         acpi0
 39781  432867      0      0  3  0x40014200                idle1
 23613  398661      0      0  3     0x14200  bored         softnet3
 19320  298343      0      0  3     0x14200  bored         softnet2
 97300  311048      0      0  3     0x14200  bored         softnet1
 88053  374647      0      0  2     0x14200                softnet0
 26001  410714      0      0  3     0x14200  bored         systqmp
 47903  481791      0      0  3     0x14200  bored         systq
  6157  355416      0      0  3     0x14200  tmoslp        softclockmp
 50195  362190      0      0  3  0x40014200  tmoslp        softclock
 58518  182362      0      0  3  0x40014200                idle0
     1  326947      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &sched_lock r = 0 (0xffffffff83960cf8)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  wakeup_n+0x54
#4  uvm_pmr_freepages+0x459
#5  uvm_km_pgremove_intrsafe+0xd9
#6  uvm_unmap_kill_entry_withlock+0x1f2
#7  uvm_unmap_remove+0x6a2
#8  uvm_unmap+0xab
#9  free+0x28b
#10 bpf_d_smr+0x7c
#11 smr_thread+0x457
#12 proc_trampoline+0x10
exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff83a09670)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  uvm_pmr_freepages+0x1a8
#4  uvm_km_pgremove_intrsafe+0xd9
#5  uvm_unmap_kill_entry_withlock+0x1f2
#6  uvm_unmap_remove+0x6a2
#7  uvm_unmap+0xab
#8  free+0x28b
#9  bpf_d_smr+0x7c
#10 smr_thread+0x457
#11 proc_trampoline+0x10
exclusive mutex &map->mtx r = 0 (0xffffffff8399d140)
#0  witness_lock+0x5bb
#1  mtx_enter_try+0x1ad
#2  mtx_enter+0x62
#3  vm_map_lock_ln+0x1a1
#4  uvm_unmap+0x81
#5  free+0x28b
#6  bpf_d_smr+0x7c
#7  smr_thread+0x457
#8  proc_trampoline+0x10
Process 14209 (smr) thread 0xffff8000ffffd1f8 (325545)
shared rwlock smr r = 0 (0xffffffff83886238)
#0  witness_lock+0x5bb
#1  smr_thread+0x3cd
#2  proc_trampoline+0x10
Process 88053 (softnet0) thread 0xffff8000ffffe520 (374647)
shared rwlock softnet0 r = 0 (0xffff80000002c078)
#0  witness_lock+0x5bb
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10214  11225K   11552K 166960K     11621        0
            pcb    17     12K      12K 166960K        81        0
         rtable   227      7K       7K 166960K       383        0
             pf    39     18K   67485K 166960K        81        0
         ifaddr    46      8K       8K 166960K        61        0
        ifgroup    62      2K       2K 166960K        87        0
         sysctl     1      1K       9K 166960K         6        0
       counters    74     37K      37K 166960K       102        0
       ioctlops     0      0K       4K 166960K      1555        0
            iov     0      0K      12K 166960K        16        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1373     86K      86K 166960K      1570        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        16        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      85K 166960K       390        0
          sigio     0      0K       0K 166960K         4        0
           proc    72     91K     140K 166960K       567        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        47        0
       in_multi   101      7K       7K 166960K       114        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     0      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       386        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   239    160K     169K 166960K      5150        0
       UVM aobj    11      4K       4K 166960K        11        0
     pinsyscall    43     86K     100K 166960K      1473        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        20        0
            NDP    14      0K       2K 166960K        39        0
           temp    44   8675K    8747K 166960K     15153        0
         kqueue    16     26K      26K 166960K        83        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       84    0       81     2     1     1     2     0     8    0
rtentry    176      120    0       17     6     0     6     6     0     8    0
unpcb      144      160    0      143     1     0     1     1     0     8    0
syncache   336        4    0        4     2     1     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      736      154    0      149     8     6     2     7     0     8    1
arp        128       21    0        1     1     0     1     1     0     8    0
inpcb      328      443    0      432     8     6     2     7     0     8    0
nd6        144       25    0        0     1     0     1     1     0     8    0
pkpcb       40        7    0        7     2     1     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192      13    0       11     2     1     1     1     0     8    0
pppxif     1504       2    0        1     1     0     1     1     0     8    0
pffrag     232        2    0        0     1     0     1     1     0   482    0
pffrnode    88        2    0        0     1     0     1     1     0     8    0
pffrent     40        2    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       2    0        0     1     0     1     1     0     8    0
pfstitem    24       30    0        1     1     0     1     1     0     8    0
pfstkey    128       30    0        1     1     0     1     1     0     8    0
pfstate    384       30    0        1     3     0     3     3     0     8    0
pfrule     1344      23    0       18     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     0     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      461    0       43    29     0    29    29     0     8    1
art_table   32      462    0       43     4     0     4     4     0     8    0
art_node    16      118    0       27     1     0     1     1     0     8    0
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112       13    0        3     1     0     1     1     0     8    0
shmpl      112        8    0        0     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     1997    0      486    95     0    95    95     0     8    0
ffsino     288     1997    0      486   109     0   109   109     0     8    0
nchpl      144     2568    0      875    63     0    63    63     0     8    0
rtmask      32        1    0        1     1     0     1     1     0     8    1
uvmvnodes   80     2222    0        0    46     0    46    46     0     8    0
vnodes     216     2222    0        0   124     0   124   124     0     8    0
namei      1024    8127    0     8127     3     2     1     2     0     8    1
percpumem   16       66    0       14     1     0     1     1     0     8    0
kstatmem   264       48    0       18     4     1     3     3     0     8    0
scsiplug    72        1    0        1     1     1     0     1     0     8    0
scxspl     216     8080    0     8080     3     2     1     2     1     8    1
plimitpl   152       88    0       70     1     0     1     1     0     8    0
sigapl     424      690    0      639     8     2     6     7     0     8    0
knotepl    120      314    0        0    10     0    10    10     0     8    0
kqueuepl   224      178    0      162     5     4     1     5     0     8    0
pipepl     336      128    0      101     3     0     3     3     0     8    0
fdescpl    520      671    0      639     3     0     3     3     0     8    0
filepl     160     3309    0     3080    18     7    11    17     0     8    0
lockfpl    104      117    0      113     1     0     1     1     0     8    0
lockfspl    48       57    0       53     1     0     1     1     0     8    0
sessionpl  144       23    0       14     1     0     1     1     0     8    0
pgrppl      48       32    0       15     1     0     1     1     0     8    0
ucredpl    104      371    0      356     1     0     1     1     0     8    0
zombiepl   144      641    0      639     2     1     1     1     0     8    0
processpl  1240     690    0      639     5     0     5     5     0     8    0
procpl     656     1122    0     1061     7     1     6     6     0     8    0
sosppl     168        3    0        3     1     1     0     1     0     8    0
sockpl     728      701    0      670    13     9     4    13     0     8    0
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     120    0        0    15     0    15    15     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      26    0        0     4     0     4     4     0     8    0
mtagpl      96        6    0        0     1     0     1     1     0     8    0
mbufpl     256      440    0        0    28     0    28    28     0     8    0
bufpl      280     2806    0      124   192     0   192   192     0     8    0
anonpl      32     7439    0        0    60     0    60    60     0   246    0
amapchunkpl 152   16135    0    15518    36     7    29    29     0   158    3
amappl16   200     1969    0     1940     9     7     2     6     0     8    0
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184      110    0       98     1     0     1     1     0     8    0
amappl13   176        5    0        4     1     0     1     1     0     8    0
amappl12   168     1314    0     1283     4     1     3     3     0     8    0
amappl11   160       52    0       38     1     0     1     1     0     8    0
amappl10   152        6    0        5     1     0     1     1     0     8    0
amappl9    144      250    0      250     1     1     0     1     0     8    0
amappl8    136       25    0       22     1     0     1     1     0     8    0
amappl7    128      131    0      119     1     0     1     1     0     8    0
amappl6    120      176    0      173     1     0     1     1     0     8    0
amappl5    112      126    0      116     1     0     1     1     0     8    0
amappl4    104      317    0      297     1     0     1     1     0     8    0
amappl3     96     2933    0     2819     5     1     4     4     0     8    0
amappl2     88      634    0      572     2     0     2     2     0     8    0
amappl1     80     9408    0     8794    16     1    15    15     0     8    1
amappl      88     4431    0     4264     6     1     5     5     0    92    1
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       10    0        0     1     0     1     1     0     8    0
uaddrrnd    24      672    0      640     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      672    0      640     1     0     1     1     0     8    0
vmmpekpl   168     7098    0     7059     2     0     2     2     0     8    0
vmmpepl    168    48152    0    46127    99     4    95    95     0   357    4
vmsppl     480      671    0      640     6     1     5     5     0     8    0
rwobjpl     72    17396    0    14224    59     0    59    59     0     8    1
pdppl      4096    1351    0     1280    99    26    73    81     0     8    2
pvpl        32    14269    0        0   117     1   116   116     0   265    0
pmappl     256      671    0      640     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      407    0       37    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8382cff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83991c98) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x12a
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
msleep_nsec(ffffffff83a0cb18,ffffffff83886200,4,ffffffff834625aa,ffffffffffffffff) at msleep_nsec+0x2f1
smr_thread(ffff8000ffffd1f8) at smr_thread+0x17b
end trace frame: 0x0, count: 5
ddb{0}> trace
x86_ipi_db(ffffffff8382cff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83991c98) at __mp_lock+0x192
softintr_dispatch(0) at softintr_dispatch+0x12a
dosoftint(0) at dosoftint+0x54
Xsoftclock() at Xsoftclock+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
msleep_nsec(ffffffff83a0cb18,ffffffff83886200,4,ffffffff834625aa,ffffffffffffffff) at msleep_nsec+0x2f1
smr_thread(ffff8000ffffd1f8) at smr_thread+0x17b
end trace frame: 0x0, count: -10
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff83467021) at panic+0x1e5
__assert(ffffffff83417304,ffffffff8341f78f,3b7,ffffffff8341f812) at __assert+0x29
refcnt_finalize(ffff80003c4434e8,ffffffff8335fa09) at refcnt_finalize+0x1db
pppx_if_destroy(0,ffff80003c4434e0) at pppx_if_destroy+0x3d
pppxclose(205b9a,1,2000,ffff8000fffe2d00) at pppxclose+0xa0
spec_close(ffff80003c40dfd0) at spec_close+0x412
VOP_CLOSE(fffffd805ed2d968,1,fffffd80097fb548,ffff8000fffe2d00) at VOP_CLOSE+0x133
vn_closefile(fffffd8061d6b308,ffff8000fffe2d00) at vn_closefile+0x12b
fdrop(fffffd8061d6b308,ffff8000fffe2d00) at fdrop+0x126
closef(fffffd8061d6b308,ffff8000fffe2d00) at closef+0x192
fdfree(ffff8000fffe2d00) at fdfree+0x116
exit1(ffff8000fffe2d00,0,0,1) at exit1+0x59c
sys_exit(ffff8000fffe2d00,ffff80003c40e340,ffff80003c40e290) at sys_exit+0x1a
end trace frame: 0xffff80003c40e330, count: 0
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83467021) at panic+0x1e5
__assert(ffffffff83417304,ffffffff8341f78f,3b7,ffffffff8341f812) at __assert+0x29
refcnt_finalize(ffff80003c4434e8,ffffffff8335fa09) at refcnt_finalize+0x1db
pppx_if_destroy(0,ffff80003c4434e0) at pppx_if_destroy+0x3d
pppxclose(205b9a,1,2000,ffff8000fffe2d00) at pppxclose+0xa0
spec_close(ffff80003c40dfd0) at spec_close+0x412
VOP_CLOSE(fffffd805ed2d968,1,fffffd80097fb548,ffff8000fffe2d00) at VOP_CLOSE+0x133
vn_closefile(fffffd8061d6b308,ffff8000fffe2d00) at vn_closefile+0x12b
fdrop(fffffd8061d6b308,ffff8000fffe2d00) at fdrop+0x126
closef(fffffd8061d6b308,ffff8000fffe2d00) at closef+0x192
fdfree(ffff8000fffe2d00) at fdfree+0x116
exit1(ffff8000fffe2d00,0,0,1) at exit1+0x59c
sys_exit(ffff8000fffe2d00,ffff80003c40e340,ffff80003c40e290) at sys_exit+0x1a
syscall(ffff80003c40e340) at syscall+0xb08
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70dcfa90f7b0, count: -16