last executing test programs:

4.176226794s ago: executing program 5 (id=640):
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000300)="b100050300000400000000b107000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443842102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c230000a37f50b60900000008e371a3f83400"/177, 0xb1, 0x0, 0x0, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x1, 0x7}, 0x10)

4.176006561s ago: executing program 5 (id=641):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2)
r3 = socket(0x2, 0x4001, 0x0)
connect$unix(r3, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r3, 0xffff, 0x8, &(0x7f0000000040), 0x4)
r4 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r4)

4.016428665s ago: executing program 7 (id=652):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = kqueue()
kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}, {{}, 0xfffffffffffffff9, 0x8, 0x1, 0x6, 0x4}], 0x0, 0x0, 0x7, 0x0)
kevent(r1, &(0x7f0000000040), 0x20, 0x0, 0xffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0xf832, r0, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x52)
chmod(&(0x7f0000000000)='./file0\x00', 0x44)
r3 = syz_open_pts()
ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000040)=0x5d3a)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0)

2.942097192s ago: executing program 7 (id=653):
sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)

2.930399333s ago: executing program 7 (id=654):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
r1 = syz_open_pts()
readv(r1, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x82, 0x3, 0xf, 0x200, "d76c1f52000000ef000e00001d000000000400", 0x7ff})
execve(0x0, 0x0, 0x0)
syz_open_pts()
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0xd1)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r3 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
poll(&(0x7f0000000000)=[{r2, 0x4}], 0x1, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x802, &(0x7f0000000680)={0x8, 0x800})
r4 = socket(0x18, 0x2, 0x0)
r5 = socket(0x11, 0x8003, 0x0)
getsockopt(r5, 0x11, 0x100000, 0x0, 0x0)
setsockopt(r4, 0xfb, 0x9, &(0x7f0000000100)="f6ff00ca5b2617e700", 0x9)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023})
openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

2.852737674s ago: executing program 2 (id=655):
mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x203)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x40)
pledge(&(0x7f0000000000)='\x00', &(0x7f0000000040)='\x00')
sysctl$ddb(0x0, 0x0, &(0x7f0000000040)="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", 0x0, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$TIOCSETA(r0, 0xc450444a, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
r1 = socket(0x2, 0x3, 0xff)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r1, &(0x7f0000000000), 0x10)
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, 0x40c)
open(&(0x7f0000000f00)='./file0\x00', 0x0, 0x92)
write(r1, 0x0, 0x0)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x11}, 0x2, &(0x7f00000004c0)="00b5d1a66121593d95a608a66e000255cb608035a5d0d2d8e862d11f83c3cd61d41d6da49f295484b498fd2abc", &(0x7f0000000180)=0x2d, 0x0, 0x0)

2.852486772s ago: executing program 2 (id=656):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
setresgid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', r0, 0x2}) (async)
open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x4)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async)
execve(0x0, 0x0, 0x0)

2.852015823s ago: executing program 5 (id=658):
syz_open_pts()
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0)
r1 = socket(0x18, 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, 0x0)
openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xffffffff}, {0x4bf, 0x81, 0x0, 0x1}, {0x16, 0x35, 0x0, 0x800ee68}]})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="840cbf3e887bd3081fd87ac81ba9a6bf2c4e00", 0x13}], 0x1)
getpeername$inet(r1, &(0x7f0000000080), &(0x7f0000000180)=0x10)
pipe2(&(0x7f0000000000), 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x8)
unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='x\x00')
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00')
unlink(&(0x7f0000000300)='.\x00')
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
munmap(&(0x7f0000000000/0xf000)=nil, 0xf000)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800471e0030006403ff042f9078ac1400bbac1400aa94040002010000004e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000005282c20bfa353f1d69c79299c7fd20dac78d89a7c"])
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1012, 0xffffffffffffffff, 0x0)

2.796197738s ago: executing program 5 (id=660):
r0 = syz_open_pts()
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000000)=0x3ff) (async)
ioctl$TIOCSTSTAMP(r0, 0x8008745a, 0x0)
ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f00000000c0)) (async)
ioctl$TIOCSETA(r0, 0x802c7414, 0x0) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80020081, 0x5, 0x10, [{0x0, 0x101, 0x4, 0x71000}, {0x807, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f6, 0x3, 0x99}, {0xce1, 0x4, 0x4fa, 0x6d}, {0xc, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0xe, 0xc, 0x6}, {0x7fe, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x6}, {0x29a7171a, 0x3, 0x1, 0x5}, {0xc, 0x7, 0x4, 0x2}, {0x0, 0x1, 0x1002, 0x30003}]})
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mquery(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x4) (async)
syz_open_pts() (async)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)='+KV', 0x3}], 0x1, 0x0) (async)
sysctl$kern(&(0x7f0000000080)={0x1, 0x2c}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0)
r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$WSKBDIO_GETDEFAULTBELL(r1, 0x40105706, &(0x7f0000000080)) (async)
sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0)

2.795681667s ago: executing program 0 (id=662):
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x200, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
setitimer(0x2, &(0x7f00000005c0)={{0x7, 0x5}, {0x1, 0x8000000004}}, &(0x7f0000000600))
poll(&(0x7f00000000c0)=[{r0, 0x6e}], 0x1, 0x0)

2.795426801s ago: executing program 7 (id=663):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 32)
readv(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1) (async)
ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000000)=0x28) (async)
write(r3, &(0x7f0000000140)="e67e843146dfb33d7809c19da343e772a2933512", 0xfffffffb) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
setuid(0xee01) (async)
r4 = socket(0x18, 0x1, 0x0)
kevent(r3, &(0x7f0000000240)=[{{r2}, 0xfffffffffffffff7, 0x6, 0x4, 0x6, 0x8000000000000000}, {{r4}, 0xfffffffffffffff9, 0xda, 0x2, 0x686}], 0x4, &(0x7f00000003c0)=[{{r1}, 0xfffffffffffffffe, 0x34, 0x4, 0x7}, {{r3}, 0xfffffffffffffff8, 0x2, 0x1, 0x496a, 0x5}, {{r3}, 0xfffffffffffffffb, 0x26, 0x80, 0x9, 0x8}, {{r2}, 0xfffffffffffffffb, 0x1, 0x20000000, 0x2, 0x2}, {{r3}, 0xfffffffffffffff6, 0x4c, 0x1, 0x4, 0xce}, {{r0}, 0xfffffffffffffffc, 0x2, 0xfffff, 0x1, 0x1200000000000000}, {{r4}, 0xfffffffffffffff6, 0xb, 0xf0000004, 0x9, 0xd}, {{r3}, 0xfffffffffffffffd, 0x40, 0x2, 0x204, 0x1}, {{r4}, 0x0, 0x1, 0x0, 0xdb0, 0x8001}], 0x7, &(0x7f0000000280)={0x580e, 0x200}) (async)
setsockopt(r1, 0x1000000029, 0x35, &(0x7f0000000100)="03000000", 0x3) (async, rerun: 64)
write(r0, &(0x7f0000000300)="bb4df584c708014b04e1fe63040000000c9501b9bad3fd00ff5059e0028c0f12581436a0ee1165d519390ff612ae41df8c49e517fe8443169dd2575fa30033186be684c4b8806535232b4c07f5c429e3bdb4a60bc7c0cec899af574fc144904d13f6c986c04d0048f1a8bdc4119dd63bafcf803eaa022a651a27058ad2421b9ff4ffc5ce8954dea80f4e6bbdf222275e0bbcf1557eca4add0a2df2be5f84e64449ae4fa50f1bc84824ff21fe880e0a8ba075ea6973", 0xb5) (rerun: 64)
write(r0, &(0x7f0000000180)="8705e4e7000097aeaa5aa8607605ab88a0bf21ad1d06f5d3c1fdbfaac88b59b29c054898dba0aa987c36fd601f9a7812117a9d62fa918c720bd87b3267db71056b5ba3d8c56fd4924dcb9bc092ab59483dd950be850956e268b31774f7a2fe6d1a5cd99f94a5ec45b6ab3d2d815bfd43dd5b186012847658c3ff3f5409995a2ac5adce9b878ebb4e427649177c44", 0xffffff6b)

677.580357ms ago: executing program 0 (id=665):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="b4f7ecf476cead6d7fa889d42987bf94e5bf47b4853067f003", 0x19}], 0x1)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0})
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0x42, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x5, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]})
syz_emit_ethernet(0xe, &(0x7f0000000000)={@empty, @broadcast, [], {@generic={0x8100}}})
sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919531ea87c5676231dd7aacdfaffffffffffffff46c0fbde03", &(0x7f0000000000)=0x30, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_ethernet(0x56, &(0x7f0000000380)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x20, 0x3c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@dstopts={0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1]}]}}}}})
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000380)=[{0xb1, 0x3, 0x89, 0xb}, {0x40, 0x3, 0x82, 0x8}, {0x6, 0x2, 0x8, 0x100cfa}]})
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86"])
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x9, &(0x7f00000001c0)='.\x00', 0x2})
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_extract_tcp_res(&(0x7f0000000280)={<r3=>0x41424344}, 0x10, 0xd12)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r4=>0x41424344}, 0x3, 0x2)
syz_emit_ethernet(0x93, &(0x7f00000004c0)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x5d, 0x70, 0x3, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x18, 0x3, '\x00', [@ra={0x5, 0x2, 0xfffd}, @pad1, @enc_lim={0x4, 0x1, 0xe}, @generic={0x4}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}], @tcp={{0x0, 0x2, r4, r3, 0x1, 0x0, 0x7, 0x40, 0x5, 0x0, 0x7fff, {[@generic={0x4, 0x7, "2d60477a8c"}]}}, {"c94559ed79f207d663fd179e25541819ccf2b89bf25ab80414"}}}}}}})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0)

657.225455ms ago: executing program 0 (id=669):
mknod(&(0x7f0000000280)='./bus\x00', 0xd008, 0x5901)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x64d1)
open$dir(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040))
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000300)="841cbf3e882a06b800c86f78de042c480000000000", 0x15}], 0x43)
sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a7a6d61de4a10909921b249a3ffff8ad3498feba46236243003b47915d8156c41f08600919531ea87e5676231dd7aacdfaffffffffffffff46c0fbde03", &(0x7f0000000000)=0x3d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f0000000240)=0x1f)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f00000001c0)={0xfcea, 0x4}, 0x10)
r3 = socket(0x2, 0x4001, 0x0)
r4 = fcntl$dupfd(r3, 0x2, r3)
r5 = syz_open_pts()
ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f00000002c0)=0x5bb)
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000180)={0xb, 0x5, 0x1, 0x40000002, "8a0188d2c194f0b756a51fe05f9bfbd21738dea9", 0x3})
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
chflagsat(r4, &(0x7f0000000200)='./file0\x00', 0x10001, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37)
getdents(r4, 0x0, 0x0)
bind(r3, &(0x7f0000000040)=@un=@abs={0x9, 0x0, 0x0, 0x0}, 0x8)

630.575311ms ago: executing program 5 (id=672):
r0 = socket(0x18, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
kill(0x0, 0x13)
close(r1)
fcntl$dupfd(r0, 0xa, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0)

629.381113ms ago: executing program 5 (id=675):
setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) (async)
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) (async)
ioctl$TIOCSTOP(r1, 0x2000746f)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x2000008c, 0x8, 0x403, 0xffffffdf, "87000000a159ef1089f2e103000106000800", 0x1000004, 0x2000000}) (async, rerun: 64)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1) (async, rerun: 64)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x0, 0xffefffff}, {0x16, 0x7e, 0x0, 0x101}]}) (async, rerun: 32)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="3b2aa7b99ace86de5a3d37beab0800000000000000beff0ac8ef4f900913a051d31e4b67ebd36b36", 0x28}], 0x1) (rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076520300080003bbfe8000aa4e214e220008907800"/50])
unveil(0x0, &(0x7f0000000140)='c\x00') (async)
openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async, rerun: 64)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (rerun: 64)
ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x40000002, 0x1, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000001, 0xa8, 0x2, 0xce7], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1], [0x100000001, 0x2, 0x40000000, 0x4, 0xffffffffffffffff, 0x11003, 0xfffffffffffffffe], [0x28e, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x7d06}, {0x7, 0x7, 0x5, 0x2}, {0x10, 0x1, 0x5bea, 0x814}, {0x3, 0x5, 0x7, 0x80000001}, {0x10, 0x2, 0x0, 0x808}, {0x400b, 0x2003, 0x40000, 0x4}, {0xa, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x3, 0x4}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x6}}}) (async)
r4 = kqueue()
kevent(r4, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0)
close(0x3)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x30da, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]})
sysctl$kern(0x0, 0x4000012b, &(0x7f0000000340)="a7a6d61de4a10909926243003b47915dd356c41f1b4f081928657412f28c79d85c04cfddf416531ea87c5676231dd7aacdfaffffffffffde0346426b79a2df012e786031d4b86f0000000000", &(0x7f0000000000)=0x48, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64)
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a847008100a992f5dcff86dd607668430008c603fe800000e42f000000000000000000bb00000000000000000000ffff7f0000014e214e2200"])

536.246874ms ago: executing program 2 (id=678):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x481f)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffff7, 0x0})
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x4, 0x1, 0x6, 0x20000000, "54ae84cc4594ef421c41f265d46cab73bac0ca24", 0x9, 0x4})
open(&(0x7f0000000100)='./bus\x00', 0x2, 0x48)

533.174952ms ago: executing program 2 (id=681):
openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
socket(0x18, 0x1, 0x0)
setegid(0xffffffffffffffff)
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x1600)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x205b9a)
r2 = open(&(0x7f0000000100)='./file0/file0\x00', 0x20, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
dup3(r1, r0, 0x4)
r4 = kqueue()
kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$BIOCSRTIMEOUT(r2, 0xc0307004, &(0x7f0000000080)={0x1, 0x2000000f})
r5 = syz_open_pts()
ioctl$TIOCSWINSZ(r5, 0x80087467, &(0x7f00000000c0)={0x6, 0xe0, 0x1, 0xf26})

464.800664ms ago: executing program 4 (id=683):
r0 = getegid()
r1 = getgid()
setresgid(r1, r1, 0x0)
setregid(0x0, r1)
setregid(r0, r1)
ftruncate(0xffffffffffffffff, 0x8531)
setuid(0xee01)
ktrace(0x0, 0x0, 0x40000928, 0x0)
r2 = socket$inet(0x2, 0x8003, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x800, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
setrlimit(0x8, 0x0)
r3 = syz_open_pts()
close(r3)
r4 = syz_open_pts()
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe, 0x2}, {0x0, 0x0, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x85}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0x9e, 0x2000007, 0x5, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0x101, 0xffffffff, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x42, 0x8, 0x80002800, 0x800007}, {0x2, 0x6, 0x3, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0xd, 0x16, 0xb}, {0xffffffff, 0x84, 0x3, 0x6}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e2, 0xffff, 0x40, 0x7}, {0x9, 0x25, 0x9, 0x2d0b}, {0x1000000, 0x401, 0x80000003, 0x408}, {0x29a71717, 0xfffffffa, 0x0, 0x579}, {0xc, 0xf8f, 0x4000006}, {0xfffffffd, 0x800bd3d, 0x6, 0x30005}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005016000009f05000e0407000000001813fecea10516d09a32693df6231039102d1fdc3f316e357ae302b37b673031", 0x31, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
r6 = socket(0x1, 0x2, 0x0)
ioctl$TIOCGWINSZ(r4, 0x40087468, &(0x7f0000000240))
ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r5, 0x8040691a, &(0x7f0000000100))
r7 = msgget$private(0x0, 0x0)
msgctl$IPC_STAT(r7, 0x2, &(0x7f0000000080)=""/167)

462.84716ms ago: executing program 0 (id=685):
r0 = socket(0x11, 0x3, 0x0)
close(r0)
sendto$unix(r0, &(0x7f0000000100)="b1000501000000ae05000701070000000000000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce94e2f0ad3ebbc23de4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11ffffffffffffffffffffffffff800000ed007f62b60be8b90000000000000000", 0xb1, 0x8, 0x0, 0xffffffb8)
r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0xf08, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000040)={0x0, 0x1, r0})

433.732433ms ago: executing program 0 (id=688):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = socket(0x1, 0x2, 0x0)
fcntl$setown(r1, 0x6, 0xffffffffffffffff)
ioctl$TIOCSETA(r0, 0xc4504449, &(0x7f0000000740)={0x0, 0x4, 0x2f00, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x7, 0x10})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x8a, 0x80, 0x0, 0x1000}]})
r2 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a)
setgroups(0x0, 0x0)
fchmod(r2, 0xf3)
setuid(0xffffffffffffffff)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8981, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mkdir(&(0x7f0000000080)='./file0\x00', 0x183)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000180), 0x0)

425.905507ms ago: executing program 0 (id=691):
select(0x40, &(0x7f0000000180)={0x1, 0x44809e9d, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x210, 0x8, 0x3}, 0x0, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x205b96) (async)
kevent(0xffffffffffffffff, &(0x7f00000004c0)=[{{}, 0xffffffffffffffff, 0x8, 0x20, 0xd, 0x8}, {{}, 0xfffffffffffffffc, 0x8, 0x20, 0x8000000000000001, 0x3}, {{}, 0xfffffffffffffffd, 0x0, 0x2, 0x7fffffff, 0x10000}, {{}, 0xfffffffffffffff7, 0xc4, 0x1, 0x300, 0xffffffffffff7fff}, {{}, 0xffffffffffffffff, 0x77, 0x1, 0x2, 0x5}, {{}, 0xfffffffffffffffc, 0x2d, 0x20, 0x80, 0x40}], 0x8, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffd, 0x30, 0x4, 0x58, 0x38}, {{}, 0xfffffffffffffff7, 0x55, 0x40, 0x9, 0xa462}], 0x19, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x4)
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) (async)
socket(0x1, 0x3, 0x0) (async)
getsid(0xffffffffffffffff) (async)
openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0xc0284414, &(0x7f0000000340)={0x1, 0x3, 0x46ae, 0x80, "561a8ebd00", 0x7, 0x8}) (async)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000440), 0xc) (async)
getgroups(0x6, &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff])
r1 = syz_open_pts()
setsid() (async)
ioctl$TIOCSCTTY(r1, 0x20007461)
socket$inet(0x2, 0x1, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x9, 0x5, 0x10, [{0x0, 0x101, 0x7d, 0x1071000}, {0x7, 0xc8, 0x20008, 0x7}, {0x6, 0x9, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0xb}, {0x3, 0x27f6, 0x4, 0x99}, {0x10005, 0x4, 0x7, 0xffffffff}, {0xc, 0x4, 0x6, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7ff, 0x100, 0x5, 0x7}, {0x1e6, 0x10005, 0xc, 0x6}, {0x7fe, 0x9, 0x8}, {0xb8e, 0x4, 0x8, 0xfffffffe}, {0x29a7171c, 0x3, 0x9, 0x1}, {0xfffffe00, 0x3, 0x4, 0xffffffff}, {0x0, 0x1, 0x1002, 0x1}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x4, 0x80, 0x6}], 0x1000000, 0x0, 0x0, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000000780)="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", 0x197)

411.692726ms ago: executing program 6 (id=695):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8008, 0x7}, {0x101, 0x8, 0x1, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x4}, {0xce3, 0x4, 0x9, 0x2}, {0x6, 0x7ff, 0xc, 0x1}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x80000, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)) (async)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240))
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3ff}, 0x400, 0x9, 0x0, 0x0, 0x4, 0x1, 0x8000000000035, 0x7ff})
sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37)

407.249545ms ago: executing program 2 (id=696):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x1000], 0x1, 0x10000, 0x0, <r0=>0xffffffffffffffff}) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)}], 0x1, 0x0, 0x0, 0x406}, 0x10)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 32)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (rerun: 32)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01864c2, &(0x7f0000000180)={0x0, 0x5, r1, 0x0, 0x5}) (async)
r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) (async)
write(r3, &(0x7f00000003c0)="09202000000069db0000ff4278ad535c2a4146308c2f39e4e6987f31dbf15624b77b6a0a", 0x24)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x3, &(0x7f0000000180)="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", 0xfffffffffffffe37) (async)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

387.993199ms ago: executing program 2 (id=697):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r0 = syz_open_pts()
close(r0) (async)
r1 = syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1) (async)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="d4bd", 0x2}], 0x1) (async)
ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x10000004) (async)
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f00000004c0)={0x1, 0x503, 0x30000, 0x17f, "69f785d33cb696343f192974121a727233a129d3", 0xffffffff, 0x2}) (async)
execve(0x0, 0x0, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e) (async)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000180)="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", 0xb1, 0x80e, 0x0, 0x5a) (async)
mkdir(&(0x7f0000000000)='./file1\x00', 0x6) (async)
ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x100) (async)
r3 = socket(0x18, 0x2, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r5 = fcntl$dupfd(r4, 0x2, r4)
close(r5)
r6 = socket(0x2, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000000), 0x10) (async)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080)=0x82, 0x4) (async)
setsockopt$sock_int(r6, 0xffff, 0x1023, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)
r7 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r7, 0xc0a86b07, &(0x7f0000000200)={0x0, 0x10000, 0x0})
ioctl$WSMOUSEIO_SCALIBCOORDS(r7, 0x81205724, &(0x7f0000000440)={0x5, 0x3, 0xb7c3, 0x2, 0x401, 0x41f1, 0x3ff, 0x10, [{0x5, 0x6, 0x30000000, 0x6}, {0x9, 0xfffff9ba, 0x2, 0x1}, {0xffffffff, 0x6e7, 0x8001, 0x9}, {0x7f, 0x2, 0x4, 0x1b}, {0x103, 0xfffffbff, 0x1, 0x7}, {0xfffffffe, 0x8b, 0x7ff, 0x9}, {0x3, 0x0, 0x5, 0x8}, {0x8, 0x63c, 0x8, 0x7}, {0x7, 0x4, 0x7, 0x8}, {0x80, 0x2, 0x1, 0x2}, {0x3cd4, 0x9, 0x8000, 0xb6800000}, {0x80000001, 0x4, 0x9}, {0x9, 0x9, 0x6, 0x5}, {0x7, 0x4, 0x9, 0xed}, {0xf44d, 0x7fffffff, 0x6ef}, {0x3, 0x10, 0x7fff, 0x7}]})
socket$inet(0x2, 0x2, 0x0)

376.294141ms ago: executing program 3 (id=698):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x615, 0x81)
ftruncate(r0, 0x1) (async)
r1 = syz_open_pts()
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x2011, r1, 0x0) (async, rerun: 64)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d02565dfbdd60de5f231e000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8", 0x85, 0x0, 0x0, 0x0) (async, rerun: 64)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x65}) (async, rerun: 64)
r3 = syz_open_pts()
open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async)
open(&(0x7f0000000040)='./file0\x00', 0x615, 0x80) (async)
msgctl$IPC_SET(0x0, 0x1, 0x0) (async, rerun: 64)
setsockopt(0xffffffffffffffff, 0x1000000000029, 0xa, 0x0, 0x0) (async, rerun: 64)
setuid(0xffffffffffffffff)
socket(0x2, 0x2, 0x0) (async)
sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
r4 = semget(0x0, 0x1, 0x281)
semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) (async)
close(r3) (async)
r5 = syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000000)=0x2) (async)
ioctl$VT_SETMODE(r0, 0x80087602, &(0x7f0000000100)={0x0, 0x16, 0x9, 0x9, 0x6})
readv(r3, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/1, 0x1}], 0x1) (async)
writev(r5, &(0x7f0000000600)=[{&(0x7f0000000240)="f8badfa43e04226ede59f6", 0xb}, {&(0x7f0000000280)="7a3b6cb4548cd19b85ce2c8e50e2e2ca837a1da63643943bfba416947161e9daa9df1b88110bc5b9", 0x28}, {&(0x7f0000000400)="d79ef8ea55252f42ef150c652eb8d1b4a3b4f7c88093a75b896b693846dc2e37f93d13b17be8da1657bab8ba3c826f29d8b18ecc2829a37a1b4ae839d1c65c8574a9e6b99759507be7e49135f2ed41a48dd12941b13eebd5a2e26120d239af2a12f2f4f0da18b8a87e0bb7f41c126df11f04282e6f3fce4364683d8b87f2c7e51ba5f3845d21af99defe889fe42250f93a840f75e2b925b915222a50ba77906202f99606206ffaa4f2be3bbe7b741d11a5298a585d32466fa745f7523c8e7f58ce65113668a150113992d82808f2", 0xce}], 0x3) (async, rerun: 32)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x8, 0x6, 0x3, 0x1000, "30b69b2fe178d095676e153e608badd410b3f37b", 0x4, 0x5}) (rerun: 32)
getpid() (async)
fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffd, 0x20001fffffffd}) (async, rerun: 64)
sysctl$net_inet_udp(&(0x7f0000000900)={0x4, 0x2, 0x11, 0x3}, 0x4, &(0x7f0000000940), 0x0, 0x0, 0x0) (rerun: 64)

375.735479ms ago: executing program 4 (id=699):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005016000009f05000e0407000000001813fecea10516d09a32693df6231039102d1fdc3f316e357ae302b37b673031", 0x31, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
fcntl$setown(r2, 0x6, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x8040691a, &(0x7f0000000100))

368.225455ms ago: executing program 7 (id=700):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
chroot(&(0x7f0000000000)='./file0\x00')
munmap(&(0x7f0000363000/0x2000)=nil, 0x20001)

329.296354ms ago: executing program 3 (id=702):
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x80146951, &(0x7f00000001c0))
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x8)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x200, [{&(0x7f0000360000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xe9c}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000123000/0x13000)=nil}, {&(0x7f000072f000/0x2000)=nil, &(0x7f000011c000/0x3000)=nil, 0x8}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x82}, {&(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000328000/0x4000)=nil, &(0x7f00002d4000/0x4000)=nil, 0x5}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}, {&(0x7f00002bf000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000c0000/0x1000)=nil, 0x2}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000142000/0x1000)=nil, 0xa}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f00001fe000/0x2000)=nil, 0x1}, {&(0x7f0000801000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f00005e6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x86}, {&(0x7f0000622000/0x1000)=nil, &(0x7f0000025000/0x2000)=nil, 0xfffffffffffffffb}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000000000003}], './file0\x00'})
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"])
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00')
syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}})

301.169908ms ago: executing program 4 (id=703):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089})
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
r1 = socket$inet(0x2, 0x3, 0xfd)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000040)="e000002700000000", 0x8) (async)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ktrace(0x0, 0x0, 0x510, 0x0) (async)
fcntl$getown(r1, 0x5) (async)
close(r1)

297.636373ms ago: executing program 7 (id=704):
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x2e)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3a)
unveil(0x0, &(0x7f0000000300)='r\x00')
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1842, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x21, &(0x7f0000000280), 0x0, 0x0}, 0x1840)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
select(0x40, &(0x7f0000002200)={0xc, 0x2, 0x9, 0x100000001, 0x6, 0x8, 0x9, 0x4}, &(0x7f0000002240)={0x9, 0x2fe8, 0x8, 0x3, 0x1000, 0x0, 0x3cb14046, 0x46}, 0x0, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = getgid()
setresgid(r1, r1, 0x0)
setresgid(r1, 0x0, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
setresgid(0xffffffffffffffff, 0x0, 0x0)
fstatat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000300)=0xc)
r5 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r5, 0xffff, 0x20, &(0x7f0000000000), &(0x7f0000000440)=0xfffffffffffffffa)
setregid(r4, 0x0)
setregid(r4, 0xffffffffffffffff)
getgroups(0x5, &(0x7f0000000080)=[r1, 0xffffffffffffffff, 0x0, r2, r4])
ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0x7ffbffff, 0xfffffffa, 0xfeffffff, 0xfffffff7, "080000000000000000010000000000000f1e0400", 0x0, 0x10000})

296.821076ms ago: executing program 3 (id=706):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x11)
ioctl$TIOCCLRVERAUTH(r0, 0x2000741d)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$DIOCRCLRTABLES(r1, 0xc450443c, &(0x7f0000000080)={{'./file0\x00', './file0\x00', 0x21, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x0, 0xa, 0x42, 0x6})
ioctl$TIOCDRAIN(r0, 0x2000745e)
ioctl$DIOCGETRULE(r0, 0xcd604407, &(0x7f0000000500)={0x1, 0xd, 0x7, './file0\x00', './file0\x00', 0x0, "9b63f15467865535751c80eb1aab892d589d90e6c6f6ea49cc3fcb98a49f89e98287e941af15e0748a5f13e299f3756642bfe1c5b28d705d4d5565bf4c58f90ff681d5049141a47801d95d89bd17ec5a06c652d4b437a3216f895ec07765c62f2e6c7350dc4dffbe176c00cb818230b4f4f4ba873966d164b31e01428c6d367e1514ee8ddf6e0ad3dcd5bd182a364fbabe0c70eef8f4b26b1c9cd0fcc49163559871a6271971fb13e76de317caadabe78cbaf12a6a25c0ea7a5976f8d048e521e91ff8b073faa4041653e5153cd625fab23a1347b1c245f3ae5c60397c086a2e8c7e195b8c37b001ab4a062a850d88050f354c28293553c405940f86a5af47cb5048a0ba446754dd297869ef15f83dd487498a560daf13a02d971f1e163df59700a1d09879cc17d11d2fa9b6b263b7f101d68360c4068c61984e4fb8812f8942bf46cd9fa776d60f50ba32344f05532dc0a67ac55eb87572cb03054d05a58662b8dc0a6f857791c778f4e9d5f300227c197ae77fc03e8e1531e126ddc22992f756d0768b843e6d431f16068228ed78da7841b8e12a24b201c44de1a717f58072c7b7bcc06f37cb29425bfeb0caa9bf81c37e24d2b056d33532296c41bea1d3bd4921a91b6739d6c4ff9106aa224a8328009121fc454cf059fd353e7af9e49443a58b489a070bac91dc742a4d03eab2bae3dfe4cb5dfbf9191fafe6300b63b0e7c57ed865f5eac66066210a811fbd842f17793bf6edba99e6c7afe4dfeca0784cea64ab26f347b3354cef8a7cac5c6219e082b390793703b53676da3ed707f2760adad7cc5d139d11e8752e7bded799ef19149ebdea3ed498cbc439d8f0a4c8ef91b1fbe14bb3edea8f4bee1ff88ed2deff48c2d0656fc15e07438c8d747ce9a50302bc9795a1b2187445c4c0d13890d4b638952818f49cba9984d552da22fd6f5b4d464923cf9cb3db22d79fbf044f8639198c71f712593bb2a01c751591d9eded36ce011faf15eaa232f5eec4ef55c8b203a9e381399d8ae300d3921859c9983def1e006a501fcd2fba4e68b1489f52501679418fba77c92eac70eede67404a2c8a07fd3c580fe18703c6b0ddb74a3da1b6a9438ab6d541badc19dbc905de6e4e0f29aef192beaf3aacc421b6129b2a86feac5ce8383b6292ad290784168bee97f9dd40c72a38af003ca15f4c600c01ab57030001b1d8a2a5f8fcd32a25a2ea37b9cee3253f1cfe1034b44ed02d794f391b0808915e541b82ae6a055dee25d37fd0e13c9d7c41df8db0f93ff12c6eea7b8762819d21024b67c3fd46ef5a7b501a83d73d9eee03ec74cbb825572e50bd16d512a401984167b7e06fdd4445660863448911e989dad12f9c760f75380df268d5b68f40aec546ccc910b71856e6ac98288e2d21ef7cbda0e983fc80903341daf5d148251c51e41b1162655d31bb660a0cd6e9795ae3ba252c5c3b989ee803c8515cb7540f8e410af3448551b075935f4bd2117c607ad5d2c0873c254c2edfff700b6ffae1ecbbe57827be054a5541b5cf98b36895c917d6bcfa2cf236d06fce7cc53a3cc143585ee66cacc3fd47d28084bcf8ebc7123fc4af791b90af54ba6372b0bb9dbf25e3adf514a0ef497a63b4e442fb504494a10b0d2b1662bf07065533605b73a132775568eed146e3a279c55353c0943b32ebc0953fdb1e894a9464b941c27c7287cfb1ada4a9c91f1de16e11b75d58ef83d0b3a5ff686b172366502615ee81abe7e115bc2aeb8c5fde11f4256c4c30f3c6398b9189e2f0a92a9de42e50a722bda91641763b5e1e7dff8f8f213ef418c1d02d07f2b02169adb8f580967ecefcd395965b42a172cc718cd63a97537c6769fa3074ffe20974a6782797082e534a1aeb5dd6a5539f96efe56bce1e7176c01aae1c7634e1d806a49da5"})
r2 = syz_open_pts()
execve(&(0x7f0000001280)='./file1\x00', &(0x7f0000001400)=[&(0x7f00000012c0)='+^!J(^\x00', &(0x7f0000001300)='$&-\x00', &(0x7f0000001340)='.\x00', &(0x7f0000001380)='/dev/pf\x00', &(0x7f00000013c0)='/dev/pf\x00'], &(0x7f0000001440))
ioctl$TIOCNXCL(r0, 0x2000740e)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000001480))
recvmsg(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/49, 0x31}], 0x2, &(0x7f0000002540)=""/78, 0x4e}, 0x3042)
ioctl$DIOCOSFPFLUSH(r1, 0x2000444e)
ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000002600))
ioctl$TIOCSTAT(0xffffffffffffffff, 0x20007465)
r3 = syz_open_pts()
ioctl$TIOCMBIS(r3, 0x8004746c, &(0x7f0000002640)=0x6)
ioctl$DIOCSETSYNCOOKIES(r1, 0xc0014462, &(0x7f0000002680)=0x1)
r4 = openat$tty(0xffffffffffffff9c, &(0x7f00000026c0), 0x10, 0x0)
ioctl$TIOCSCTTY(r4, 0x20007461)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000002700)={0xa, 0x6, <r5=>r4})
ioctl$TIOCMBIC(r5, 0x8004746b, &(0x7f0000002740)=0xb)
select(0x40, &(0x7f0000002780)={0x9, 0xc0f, 0x10000, 0x4, 0x7, 0x3, 0x0, 0x7}, &(0x7f00000027c0)={0x9c, 0x0, 0x7fff, 0x3ff, 0x3, 0x10, 0xd, 0x7ff}, &(0x7f0000002800)={0x9, 0x61c, 0xe112, 0x6, 0xc9, 0x80000000, 0x800, 0x5}, &(0x7f0000002840)={0x80000000, 0x1e})
ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000002880))
r6 = syz_open_pts()
ioctl$TIOCGETA(r6, 0x402c7413, &(0x7f00000028c0))
semget$private(0x0, 0x1, 0x120)
connect(r0, &(0x7f0000002900)=@in6={0x1c, 0x18, 0x2, 0xbac, "978dd6549d3adfde80e142feba740fad", 0x2}, 0x1c)
r7 = accept$unix(r0, &(0x7f0000002980)=@file={0x0, 0x0, ""/4088}, &(0x7f0000003980)=0xffa)
ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f00000039c0)={&(0x7f0000002940)='./file2\x00', r7, 0x1})
kevent(r0, &(0x7f0000003ac0)=[{{}, 0xfffffffffffffffc, 0x2, 0x40, 0x4, 0xcb}, {{}, 0xfffffffffffffffb, 0x20, 0x4, 0x864, 0x3b}, {{r3}, 0xfffffffffffffffa, 0x3a, 0x1, 0xff, 0x3}, {{r3}, 0xfffffffffffffffe, 0x11, 0x20000000, 0x8, 0x89}, {{r5}, 0xffffffffffffffff, 0x0, 0x20000000, 0x10, 0x100}], 0x2, &(0x7f0000003c80)=[{{r2}, 0xfffffffffffffffc, 0x2, 0x80000000, 0x4, 0x7fffffffffffffff}, {{r6}, 0xfffffffffffffff6, 0x4, 0x1, 0x1, 0x2}, {{r2}, 0xfffffffffffffffa, 0x80, 0x40, 0x8000, 0x91}, {{r7}, 0xfffffffffffffff9, 0x0, 0xfffff, 0xd000000000000, 0x100}, {{}, 0xfffffffffffffff7, 0x80, 0x20, 0xb, 0x2}, {{}, 0xfffffffffffffff9, 0x10, 0x4, 0x181dd938, 0x3c}, {{r0}, 0xfffffffffffffffe, 0x0, 0x4, 0x401, 0x9}, {{}, 0xfffffffffffffff7, 0x9, 0x2, 0x40, 0x101}, {{}, 0xfffffffffffffffc, 0x80, 0x1, 0x2, 0x7ff}, {{r7}, 0xfffffffffffffff8, 0x2, 0x1, 0x7, 0x6}], 0xfffffff8, &(0x7f0000003dc0)={0x8, 0x2})

284.268029ms ago: executing program 4 (id=707):
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000009f0500060003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002", 0x8a, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x40a)
writev(r0, &(0x7f0000000040)=[{0x0}], 0x1)
r1 = socket(0x2, 0x8002, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
closefrom(r2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
setuid(0xffffffffffffffff)
clock_settime(0x100000000000000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e)
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00')
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xe}, {0x4bf, 0x81, 0x0, 0x1}, {0x16, 0x35, 0x0, 0x800ee68}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0})
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="840cbf3e88c006b800000037308e7bd3081fd87ac81ba9a6bf2c4e00000000007f3bb55e0c77452fae5268226179cca322ac7db107672cffa68b51cb714ba2f09840d7659687f4ac0e275fb3b2478b2ac83416b552a970763d327aa682143f887298d269", 0x64}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @empty, [], {@arp={0x8035, @generic={0xf, 0x6559, 0x6, 0x0, 0x9, @local, "", @local, "63a00d32ab9093d0ea091d39e443e0ef"}}}})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f0500000020", 0xd, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x1)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000a30001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x3, 0x5)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0))
setuid(0xffffffffffffffff)
ioctl$FIONREAD(r4, 0x80286987, &(0x7f0000000100))
bind(0xffffffffffffffff, &(0x7f00000000c0)=@un=@abs={0x3, 0x0, 0x0, 0x3}, 0x8)

284.015294ms ago: executing program 6 (id=708):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1cc)
r1 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r2 = socket(0x1, 0x2, 0x0)
r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_GETKEYREPEAT(r3, 0x400c5708, &(0x7f0000000280))
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0x8020699f, &(0x7f0000000100))
ioctl$BIOCSETIF(r0, 0x40384900, 0x0)

283.678399ms ago: executing program 1 (id=709):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
ioctl$DIOCGETQUEUE(r0, 0xc148445f, &(0x7f0000000800)={0x1000008, 0x5, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x2}, {0xffffffff, 0x2}, 0x100}, {{0x5, 0xff}, {0xd2, 0x3}}, {{0x0, 0x2}, {0x49, 0x1ff}, 0x1ff}, {0x3, 0xea, 0x9, 0x30}, 0x0, 0xffffff53, 0x8, 0x355, 0x6}})
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$VNDIOCGET(r1, 0x44946465, &(0x7f00000003c0)={'./file0\x00', 0xffffffff, 0xc, 0xc})
r2 = socket(0x18, 0x3, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r3 = socket$inet(0x2, 0x4, 0x62)
setrlimit(0x0, &(0x7f0000000200)={0x10000, 0x100000000})
getsockname$inet(r3, &(0x7f0000000080), &(0x7f0000000000)=0x10)
r4 = socket(0x800000018, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
setuid(0xee01)
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000140)="33e7680d662eb33d3c22045180f24ead9239a9df0ec0f61a7f722573592558f8df1a89b7b07e5102c255c61b0e7febca25efc364cabf1709083baa71ff0a06f00ace40f671666699d3cf702bd6acf57c6e38563a5f71595f7b2b2f6fb82e219d930cf02abddbbcd7e8ca37668fe7091fc0f9d4f4f8142376c87af4d9214b4f6100a4b3bd68a08be2ab299d1b7a233938d5cf710ab16d5153d1fd52aeda1e49f89e", 0xa1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fchdir(r5)
mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa)
syz_emit_ethernet(0x15, &(0x7f0000000140)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast2, @empty, @broadcast}}}})
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

188.239737ms ago: executing program 3 (id=710):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x36, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async)
r2 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r2, 0xc1206925, &(0x7f0000000100)) (async)
fcntl$setflags(r1, 0x2, 0x5) (async)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, &(0x7f0000000180)=0x27, 0x0, 0x0)

184.228357ms ago: executing program 4 (id=711):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000280)={{'./file1\x00', './file0\x00', 0x10, 0x7f}, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x9, 0x2, 0x8000})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1012, r0, 0x0)
setuid(0xffffffffffffffff)
unveil(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f00000000c0)='r\x00')

61.436772ms ago: executing program 6 (id=712):
r0 = open(&(0x7f0000000040)='./file1\x00', 0x200, 0x104)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = socket(0x18, 0x3, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000240)={0x3, 0x0, 0xf8, 0x5, 0x40003}, 0xc)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x67, &(0x7f00000000c0)={0x3}, 0xc)
acct(&(0x7f0000000280)='./file1\x00')
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x3, 0x0, 0x120000000000, 0x100000001})
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x20}, {r0, 0x26}, {r0, 0x4}, {r0, 0x10}, {r0, 0x100}], 0x5, 0x5)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0)
minherit(&(0x7f00001cf000/0x4000)=nil, 0x4000, 0x2)
setpgid(0xffffffffffffffff, 0x0)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0))
clock_gettime(0x3, &(0x7f0000000180))

57.947507ms ago: executing program 1 (id=713):
mknod(&(0x7f0000000200)='./file0\x00', 0x2008, 0x412dff)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket(0x18, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000002a00)={&(0x7f0000000180), 0xa, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x0, 0x3, 0x48}, {0xa3e, 0x0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]})
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
sysctl$kern(0x0, 0x0, &(0x7f0000000080)="c2a6746f1008000000746caaceb00000002b15868f", &(0x7f0000000000)=0x15, 0x0, 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x12}, 0x4, 0xfffffffffffffffe, &(0x7f0000002c80)=0x4c, &(0x7f00000000c0)="5b0000000000000000e8fde048a9", 0x4)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r3, 0x80487008, &(0x7f0000000140)=0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000005c0)={0x0, 0x0})
write(r2, &(0x7f0000000200)="e21ad30000000000000004a41386", 0xe)
fchdir(r0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x11, 0x3, 0xfffffff5}, {0x50, 0xf0, 0x9}, {0x6, 0x80, 0x12, 0xfffff802}]})
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x2}, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
sysctl$net_inet_gre(&(0x7f0000000140)={0x4, 0x2, 0x2f, 0x2}, 0x4, &(0x7f00000001c0)="9e020316b4bf751e34a6354cd64a5f08186ac3e1d0aa6c3ddb4110c6300a080fbc74afba11338717a712b987ae38604daafd8daf80d0d97f", &(0x7f0000000240)=0x38, &(0x7f0000000380)="95a6fbb4a40fd071bd7013d6de76e332671e590ffb7f539ccb55c09338a984bdd95abd742722ffb3cf8ae15d060b4b7f018b6ad756bfa481641fd15aa3e53c0ef10222a57c983f88e39c15cbf57a024133646e59defd0606e10b46d93e29601676fb42164a1fc3381f1e665de401f6dd30b15af4057a7512b9a7e2171309da7b550f0892c3a0aaf52bf59b60256cb089a83e6217687c409868da5318b58a635ba0578011b0aa78e02849bf45677b04af4fcbf562cb7ded9c154cf2c988d616d040db6c69b4f825f1e8490900bdfaeede26acc61556145a42638ce71a420aa450ebe11ebf57f53114d6c33f2270c33633e174bf99e756df", 0xf7)
mprotect(&(0x7f000008c000/0x3000)=nil, 0x3000, 0x2)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c2a6d6000000005ae39d73988d800f00ecfe746fc6d602ff1a1ea6612b158f09acc9ae4e6a9981d79a05f77bffaeb47b1435ea280e5a6f787f6607280658f5ca", &(0x7f0000000000)=0x40, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000200)="e21ad30000000000000004a41386", 0xe)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff], 0x1, 0x20000, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f00000000c0)={0x1c, 0x9f90, 0x200})
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0)
sysctl$net_inet_gre(&(0x7f0000000280)={0x4, 0x2, 0x2f, 0x1}, 0x4, &(0x7f00000002c0)="b5eddfb0af1378f492bbf61412292f6515abb3ad41e9263edda66969b3c02d9d10c21d628fb1181394de99708b1d7085", &(0x7f0000000480)=0x30, &(0x7f00000004c0)="318938b470115f54755cc422f2843b66a32726a8f710f2d97b1dba7b8c06ea26414972d445637445ad7008078c12163ad9e9dfad1b6188ec0979ffd971e94d38dbd27b0b2b5d9df3719e6e61708d7cc231c40b746cb5955db5e99a03a3fc4d9b130c29bb379ce2739990f4be2569ea39b9992a9a014cb886ea6c1877d725f9c3994b22dafa4e19ac13501e2e63e8c010f2b24f64535b82757e363d5835a7b83eaa8dfa3963ea3ac686aba28d103e0e8eafab04676c", 0xb5)
writev(r5, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)

56.668648ms ago: executing program 3 (id=714):
syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x100000005, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0xffaa}}}}}}})
setrlimit(0x1, 0x0)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4)
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xfffffc00)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x40, 0x11, 0x0, @empty, @rand_addr=0xec14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x2}}}}}})
r1 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0x3, 0x39, 0x8}, {0x24, 0x5, 0x5, 0x63b0b}, {0x406, 0x5, 0x1e, 0xfffffff3}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[])
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)

56.201234ms ago: executing program 1 (id=715):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x715, 0xc3)
recvmmsg(0xffffffffffffffff, 0x0, 0x16e5c2e73bbfc430, 0x1, &(0x7f0000000300)={0x7, 0x3b9ac9fe})
poll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x5)
link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

51.446599ms ago: executing program 3 (id=716):
r0 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x518, r0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
close(0xffffffffffffffff)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x210, 0x8, 0x3}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6381)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x17a)
ioctl$BIOCSRTIMEOUT(r4, 0xc0307004, &(0x7f0000000080)={0x80000000001, 0x100000000000000})
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f00000002c0)={&(0x7f0000000600)=[{0x47, 0x101}, {0x4, 0x80}, {0x8, 0x1ff}, {0x83, 0x81}, {0xde, 0x5}, {0x45, 0xf}, {0x2, 0x2}], 0x7})
sysctl$kern(&(0x7f0000000040)={0x1, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x28)
mprotect(&(0x7f0000383000/0x3000)=nil, 0x3000, 0x4)
sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x12, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x6, 0x7e, 0x0, 0x9}]})
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000300)="3b2aa7b97e647cc059c43c7fff63a1fa5e55255ea971d63c5520d9e704798ec8943309158eb303000000c25261e0fa073ae45dfa30", 0x12}, {&(0x7f0000000340)="6ed0e5f3fb13e90d5b812736"}, {&(0x7f0000000380)="42b93835b81f9226fb8d35dcc5110e849ccc2f0b5d01f74dff057952399023308d899c20e886b1abd33524"}, {&(0x7f0000000480)="499efda1ec2786379a7417f6d9a054f49b138057cdea9a6539e92c5422472fb5dbef418af48ac346f7ebd4373b32d39d718830a4594de34294243b3d07363055fec13d85eb9e7345d82a55745d3bbba61763321d9f6043a36593066fea68291a7ee91b454fb1e07388cdf545598c97f06d95bbc07ec6aa299065a91261c87d2db68afbd1ef3f440408be985327f09adc62f3457b281fbf9a25df7ce67e42c8ce1a185a85d3912d9f963f19e2ddcd05ede431d23f1470965ff37e92b469"}, {&(0x7f0000000540)="4ee3ed5ff5a6e794b48a23d7647eee8da6c1347a6c9dd2fb86a9047873034153c1863f1b92089623ce47150086c572ea17029d1a173b1c36f7235f1a1953752fa30c56247bb7480532817720b59c0229da6c29137f7f75fc01fcffffd9f6917ae7579934f7c5005758b788a38d15f462cf25624a759b816f4670a6c7b86b6c4dc332a20dfd9ebd93a7"}], 0x1)
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102", 0x62, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket(0x11, 0x5, 0x0)
sendto$unix(r6, &(0x7f00000001c0)="b100050400000404000000000100c0c72fd3f502c8b79695989791aec2357ae3000000003003000000acf20b7804be38324991f7c8cf5f882b297be1aa0500000055e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba2200000008e371a3f8343712051eea040000000000000000000000000000000000000000000000000000004f043ef1892d9912bb1bd226e47dfc125ad9f3f492544ab7bffab48435ad4c6c57f1a90ae5b2680435", 0xe5, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045d4001c0065fffd0050907800000004ac1400aa4e214e21fc089078"])
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x1c, 0x0, 0x0)

50.00016ms ago: executing program 1 (id=717):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e})
r0 = syz_open_pts()
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r2 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r2)
select(0x40, &(0x7f0000000180)={0xffffffffffffffbd, 0x44809ea0, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x214, 0xb, 0x8}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0xb}, {0x2, 0x1}}, 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0)
setreuid(0x0, 0xee01)
r4 = getpid()
ktrace(0x0, 0x39500f9a1a026d7d, 0x200, r4)
writev(r0, &(0x7f0000000140)=[{0x0}], 0x1)

42.55893ms ago: executing program 1 (id=718):
mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x2, 0x54, 0xe}, {0x7c, 0x60, 0x8f, 0x9}, {0x80de, 0xaa, 0x2, 0x4000008}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000040)=ANY=[]) (async)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x4, 0x100000000, 0x6, 0x0, 0xdf5d, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0x20000000003, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x10000009, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x2}}}) (async)
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f00000003c0))

40.759658ms ago: executing program 4 (id=719):
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x17a)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
r2 = kqueue()
kevent(r2, &(0x7f0000000280), 0x8, &(0x7f00000001c0), 0x15, 0x0)
setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000100)={0x3, './file0\x00', './file1\x00'})
open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0)
ioctl$WSDISPLAYIO_WSMOUSED(r0, 0x80185758, &(0x7f0000000040)={0x0, 0x6, {0x1, 0x3}})
r3 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setitimer(0x0, &(0x7f00000000c0)={{0xffffffff, 0x1}, {0xffffffff}}, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$BIOCSRTIMEOUT(r0, 0xc0307004, &(0x7f0000000080)={0x1, 0x2000000f})

38.306665ms ago: executing program 6 (id=720):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310)
open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETA(r0, 0x40204103, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x50ecd2da, 0x6, 0xa, 0x7, "b9bc31f1d819e32d6e3e86f1a89294b6d0915ff9", 0x8000, 0x2f})
execve(0x0, 0x0, 0x0)

38.016525ms ago: executing program 6 (id=721):
sysctl$vfs_nfs(&(0x7f0000000640)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000680)="45c6c9b013", &(0x7f0000000780)=0x5, &(0x7f00000007c0), 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x3, &(0x7f0000000140)="71f91e3471ac0066bc5a91090094a34b8e5f84cf71b59c7afec3708204ca0123e0561a3a2c4b25374c41bc0df13114b400cfb527d3bb7d7f090e73c3ff6768b28fc4020ac185660c8f43076c12e36ccdb0fc47e3d1a181b069cbdda675ef145fa2e01a25941be95bcfa452aab9e32382df7b22336d4c52f2483aecf8ea097cb3c67b28702cd006ddce0fcef35bc7ea6318652e18a8737035e09f23e9869bd3503a8158e14cd7b5467da9e6ec0bf2e18b83fc0dfb5e186bf5f1165d226585a8b53c46cece377f6aa2e735989c80aaab0281beef8c41be2ca9e2695c42c6528119fb4b5392d173a097148be27a823c52d1471de6bd36ba44703c5ac11078612dd2b6b413910e09c8a4532b07fcdf3d441acf344bbb0b404b8cf6627a11f3bf5fafb5f2e1c284715ea233b5e87f9f0e453a79f8ff9e0a243f3d217fecb3a4700e1062d9930220e486db8bf8dc36cd18a0bde4a74294fbbc59d5ac", &(0x7f0000000080)=0x3414, 0x0, 0x20)

35.336948ms ago: executing program 6 (id=722):
r0 = socket$inet(0x2, 0x3, 0x5)
close(r0) (async)
r1 = socket$inet(0x2, 0x8005, 0x0)
recvfrom$inet(r1, &(0x7f0000000000)=""/38, 0x26, 0x2842, &(0x7f0000000040)={0x10, 0x2, 0x0, 0x7fff}, 0x10) (async)
setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f00000001c0)="fbf3d4cf289f697e3dd8", 0xa)
r2 = semget$private(0x0, 0x3, 0x4)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/126) (async, rerun: 32)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) (async, rerun: 32)
open(&(0x7f0000000300)='./file0\x00', 0x10, 0x1d0) (async)
r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000140)=0x8)
sendto$unix(r3, &(0x7f0000000000)="b10005046000", 0x6, 0x406, 0x0, 0x0) (async, rerun: 64)
r4 = socket(0x2, 0x4001, 0x0) (rerun: 64)
shutdown(r4, 0x0) (async)
r5 = socket$inet(0x2, 0x3, 0x5)
close(r5)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x200000000000b, &(0x7f0000003780)='\x00', 0x1) (async)
setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) (async)
r7 = dup(r4)
r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff)
sysctl$net_inet_esp(&(0x7f0000000080)={0x4, 0x2, 0x32, 0x4}, 0x4, &(0x7f00000002c0)="82338798528edbeb1f763a385e4af84acd908edaeb6399298d558930524c67bc70e1cd677d4c9e67c4ca2bd38261a65d5911953de60b5eabb04b096f296403350f515ba67e6b38cbf80e3deba881e5b53c1309c40c41062c9db7eedc8adba9e3c39527ae9664efb115e0b20e9608c0db3b05e12ca155fe09adbec85e2802c176f66649071cee06455479ff2aefe30e1fb87bf1f05cd70859f9a103c009ea2621bf294c2fea96022960a69bbce9f328a800c317efaf93e895657738989cdd6171", &(0x7f0000000100)=0xc0, 0x0, 0x0) (async)
close(r8) (async)
r9 = socket(0x2, 0x2, 0x0)
dup2(r1, r3) (async)
recvmmsg(r9, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/29, 0x1d}], 0x1}, 0x200}, 0x38, 0x2000, 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 32)
r10 = socket(0x24, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000000)=@file={0x2400}, 0x40) (async)
connect$unix(r9, &(0x7f0000000000), 0x10)

0s ago: executing program 1 (id=723):
r0 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff})
writev(r0, &(0x7f0000000300)=[{&(0x7f00000007c0)='y', 0x1}], 0x1)
syz_open_pts()
ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7)
r1 = socket$unix(0x1, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@in={0x10, 0x2, 0x3, 0x1000}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts.
pckbd_enable: command error
*ûÅ@*’
OpenBSD/amd64 (ci-openbsd-main-8.us-central1-b.c.syzkaller.internal) (tty00)

login: 
OpenBSD/amd64 (ci-openbsd-main-8.us-central1-b.c.syzkaller.internal) (tty00)

login: pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pckbd_enable: command error
pppx: unable to set addresses for pppx1, error=17
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 955
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
db_enter() at db_enter+0x25
panic(ffffffff834178b1) at panic+0x1cf
__assert(ffffffff8345131b,ffffffff834b1f46,3bb,ffffffff8348bce0) at __assert+0x29
refcnt_finalize(ffff80003c927758,ffffffff83408d40) at refcnt_finalize+0x1c8
pppx_if_destroy(0,ffff80003c927750) at pppx_if_destroy+0x3d
pppxclose(285b9a,41,2000,ffff800033cce2c0) at pppxclose+0xa0
spec_close(ffff80002a856ef0) at spec_close+0x417
VOP_CLOSE(fffffd80698dbdc0,41,fffffd8007ffd618,ffff800033cce2c0) at VOP_CLOSE+0x129
vn_closefile(fffffd806cce5ca8,ffff800033cce2c0) at vn_closefile+0x11d
fdrop(fffffd806cce5ca8,ffff800033cce2c0) at fdrop+0x121
closef(fffffd806cce5ca8,ffff800033cce2c0) at closef+0x190
fdfree(ffff800033cce2c0) at fdfree+0x115
exit1(ffff800033cce2c0,0,0,1) at exit1+0x576
sys_exit(ffff800033cce2c0,ffff80002a857250,ffff80002a8571a0) at sys_exit+0x1a
end trace frame: 0xffff80002a857240, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 955
ddb> trace
db_enter() at db_enter+0x25
panic(ffffffff834178b1) at panic+0x1cf
__assert(ffffffff8345131b,ffffffff834b1f46,3bb,ffffffff8348bce0) at __assert+0x29
refcnt_finalize(ffff80003c927758,ffffffff83408d40) at refcnt_finalize+0x1c8
pppx_if_destroy(0,ffff80003c927750) at pppx_if_destroy+0x3d
pppxclose(285b9a,41,2000,ffff800033cce2c0) at pppxclose+0xa0
spec_close(ffff80002a856ef0) at spec_close+0x417
VOP_CLOSE(fffffd80698dbdc0,41,fffffd8007ffd618,ffff800033cce2c0) at VOP_CLOSE+0x129
vn_closefile(fffffd806cce5ca8,ffff800033cce2c0) at vn_closefile+0x11d
fdrop(fffffd806cce5ca8,ffff800033cce2c0) at fdrop+0x121
closef(fffffd806cce5ca8,ffff800033cce2c0) at closef+0x190
fdfree(ffff800033cce2c0) at fdfree+0x115
exit1(ffff800033cce2c0,0,0,1) at exit1+0x576
sys_exit(ffff800033cce2c0,ffff80002a857250,ffff80002a8571a0) at sys_exit+0x1a
syscall(ffff80002a857250) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7864592959a0, count: -16
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a856cd0
rbx                                0
rdx                                0
rcx                                0
rax               0xffff800033cce2c0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xa8e184a4b671623e
r11               0x6ae1ac433fa32d77
r12                                0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff812e40e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a856cc0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor) tid=205386 pid=3560 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff800033cce2c0 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff800033ccea88,0xffff80002a78d4e8
    process=0xffff80002a7af190 user=0xffff80002a852000, vmspace=0xfffffd806ccd92f0
    estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 34841  278980  58728      0  2           0                syz-executor
 34841  161051  58728      0  3   0x4000080  ttyout        syz-executor
 34841  301464  58728      0  2   0x4000000                syz-executor
  5323  441084  88249      0  2       0xc80                syz-executor
  5323  375587  88249      0  3   0x4000080  fsleep        syz-executor
  5323  160384  88249      0  3   0x4000080  sbwait        syz-executor
  5323  329272  88249      0  3   0x4000080  fsleep        syz-executor
 75425  437330  12563      0  2       0xc80                syz-executor
 75425  189527  12563      0  2   0x4000000                syz-executor
 17650  114754      0      0  3     0x14200  acct          acct
 29934  468819  83500      0  2           0                syz-executor
 29934  377577  83500      0  3   0x4000080  fsleep        syz-executor
 29934   13964  83500      0  3   0x4000080  fsleep        syz-executor
 29934  341070  83500      0  3   0x4000080  fsleep        syz-executor
 41023  134318  63815      0  2           0                syz-executor
 41023  114408  63815      0  3   0x4000080  fsleep        syz-executor
 41023  241380  63815      0  3   0x4000080  fsleep        syz-executor
 41023  312908  63815      0  3   0x4000080  fsleep        syz-executor
 12468  438385  55241      0  3        0x81  nanoslp       syz-executor
 12468  381522  55241      0  3   0x4000081  kqread        syz-executor
 12468  315895  55241      0  3   0x4000081  fsleep        syz-executor
 12468    6332  55241      0  3   0x4000081  fsleep        syz-executor
 57599  394299  79660      0  3        0x80  nanoslp       syz-executor
 57599   13605  79660      0  3   0x4000080  ttyin         syz-executor
 57599  278247  79660      0  3   0x4000080  fsleep        syz-executor
 57599  520427  79660      0  3   0x4000080  fsleep        syz-executor
 55241  113245  51503      0  3        0x82  nanoslp       syz-executor
 12563  457486  51503      0  3        0x82  nanoslp       syz-executor
 79660  294531  51503      0  3        0x82  nanoslp       syz-executor
 93411  135722      1      0  3    0x100083  ttyin         getty
 47065  232476      0      0  3     0x14280  nfsidl        nfsio
 65613  512837      0      0  3     0x14280  nfsidl        nfsio
 83997   92123      0      0  3     0x14280  nfsidl        nfsio
  8775  405965      0      0  3     0x14280  nfsidl        nfsio
  5729   90856      0      0  3     0x14280  nfsidl        nfsio
  1757  516842      0      0  3     0x14280  nfsidl        nfsio
 61030  145402      0      0  3     0x14280  nfsidl        nfsio
 49546  468529      0      0  3     0x14280  nfsidl        nfsio
 33148  366188      0      0  3     0x14280  nfsidl        nfsio
 98566  367112      0      0  3     0x14280  nfsidl        nfsio
  6493   31691      0      0  3     0x14280  nfsidl        nfsio
 46234  489024      0      0  3     0x14280  nfsidl        nfsio
 27563   14099      0      0  3     0x14280  nfsidl        nfsio
 14280  421350      0      0  3     0x14280  nfsidl        nfsio
 80753  467432      0      0  3     0x14280  nfsidl        nfsio
 65029  493198      0      0  3     0x14280  nfsidl        nfsio
 64696  110849      0      0  3     0x14280  nfsidl        nfsio
 65755  196494      0      0  3     0x14280  nfsidl        nfsio
 99238  302722      0      0  3     0x14280  nfsidl        nfsio
 48711   18609      0      0  3     0x14280  nfsidl        nfsio
 63815  438481  51503      0  3        0x82  nanoslp       syz-executor
 88249  508985  51503      0  2       0xc82                syz-executor
 57099   86937  51503      0  3        0x82  nanoslp       syz-executor
 83500  197632  51503      0  3        0x82  nanoslp       syz-executor
 58728  185336  51503      0  2       0xc82                syz-executor
 51503  431418  63271      0  3        0x82  kqread        syz-executor
 63271  154643  86473      0  3    0x10008a  sigsusp       ksh
 86473  337404  74312      0  3        0x98  kqread        sshd-session
 74312  162423  74490      0  3        0x92  kqread        sshd-session
 74490  493797      1      0  3        0x88  kqread        sshd
 64190   64855  87308     73  3   0x1100090  kqread        syslogd
 87308  182827      1      0  3    0x100082  sbwait        syslogd
 55595  369155      1      0  3    0x100080  kqread        resolvd
 98139  404516  27170     77  2    0x100012                dhcpleased
 33975   41341  27170     77  3    0x100092  kqread        dhcpleased
 27170  492868      1      0  3        0x80  kqread        dhcpleased
 28233   13778      0      0  3     0x14200  bored         smr
 56349  231121      0      0  2     0x14200                zerothread
 42915  402049      0      0  3     0x14200  aiodoned      aiodoned
 47346  487563      0      0  3     0x14200  syncer        update
  7752  195414      0      0  3     0x14200  cleaner       cleaner
 39963  400784      0      0  3     0x14200  reaper        reaper
 57349  462965      0      0  3     0x14200  pgdaemon      pagedaemon
 10181  401382      0      0  3     0x14200  bored         viomb
 60838  132815      0      0  3  0x40014200  acpi0         acpi0
 56526  239138      0      0  2     0x14200                softnet0
 60686   41574      0      0  3     0x14200  smrbar        systqmp
 40160   52296      0      0  3     0x14200  bored         systq
 92353   87823      0      0  3  0x40014200  tmoslp        softclock
 43852   82905      0      0  3  0x40014200                idle0
     1  350689      0      0  3     0x80082  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11064  12131K   12785K 166960K     13847        0
            pcb    18     16K      19K 166960K       332        0
         rtable   179     14K      15K 166960K       569        0
             pf    35     14K      17K 166960K       131        0
         ifaddr    32      5K       7K 166960K       101        0
        ifgroup    52      2K       2K 166960K       164        0
         sysctl     4      1K       9K 166960K        14        0
       counters    35     18K      18K 166960K       146        0
       ioctlops     0      0K       4K 166960K       288        0
            iov     0      0K      16K 166960K        31        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1387     87K      88K 166960K      2300        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        12        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       127        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     240K 166960K       930        0
          sigio     0      0K       0K 166960K         3        0
           proc    60     59K      91K 166960K       710        0
        subproc    72      4K       4K 166960K       108        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     2      0K       0K 166960K        91        0
       in_multi    57      4K       7K 166960K       169        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     1      0K       0K 166960K        21        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   151    678K     678K 166960K       151        0
           exec     0      0K       1K 166960K       490        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         3        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   239    147K     161K 166960K      9806        0
       UVM aobj    12      2K       2K 166960K        12        0
     pinsyscall    39     78K      93K 166960K      2150        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K        74        0
            NDP    12      0K       2K 166960K        72        0
           temp    63   9072K    9137K 166960K     29692        0
         kqueue    16     26K      32K 166960K       205        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120      104    0      100     1     0     1     1     0     8    0
rtentry    136      170    0      102     4     0     4     4     0     8    0
unpcb      144      483    0      463     4     0     4     4     0     8    3
syncache   336        7    0        7     1     0     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      736      359    0      287     7     0     7     7     0     8    0
arp         96       27    0       14     1     0     1     1     0     8    0
ipq         40        1    0        0     1     0     1     1     0     8    0
ipqe        40        1    0        0     1     0     1     1     0     8    0
inpcb      328     1028    0      949    18     9     9    18     0     8    2
ip6q        72        3    0        0     1     0     1     1     0     8    0
ip6af       40        3    0        0     1     0     1     1     0     8    0
nd6        112       42    0       25     1     0     1     1     0     8    0
pkpcb       40        7    0        7     1     0     1     1     0     8    1
kcovpl      48       12    0        4     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     0     1     1     0     8    1
ppxss      1072      98    0       96     1     0     1     1     0     8    0
pppxif     1416       5    0        4     1     0     1     1     0     8    0
pfstscr     40        3    0        2     1     0     1     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pfstitem    24        3    0        0     1     0     1     1     0     8    0
pfstkey    128        6    0        4     1     0     1     1     0     8    0
pfstate    384        4    0        2     1     0     1     1     0     8    0
pfrule     1360       9    0        7     1     0     1     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      700    0      415    29     0    29    29     0     8    8
art_table   40      702    0      415     5     0     5     5     0     8    0
art_node    32      169    0      108     1     0     1     1     0     8    0
sysvmsgpl   40       11    0        5     1     0     1     1     0     8    0
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112      124    0      114     1     0     1     1     0     8    0
shmpl      112        9    0        0     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     2992    0     1532    92     0    92    92     0     8    0
ffsino     256     2992    0     1532    92     0    92    92     0     8    0
nchpl      144     4195    0     2480    64     0    64    64     0     8    0
rtmask      32        6    0        6     1     0     1     1     0     8    1
vnodes     216     3682    0        0   205     0   205   205     0     8    0
namei      1024   14436    0    14436     2     0     2     2     0     8    2
kstatmem   264       94    0       70     2     0     2     2     0     8    0
acpiwqpl    32        2    0        2     1     0     1     1     1     8    1
scsiplug    72        4    0        4     1     0     1     1     0     8    1
scxspl     216    17411    0    17411     8     0     8     8     1     8    8
plimitpl   152      310    0      292     1     0     1     1     0     8    0
sigapl     424     1231    0     1167     8     0     8     8     0     8    0
knotepl    120    31999    0    31945    37    27    10    18     0     8    8
kqueuepl   184      356    0      341     4     0     4     4     0     8    3
pipepl     304      276    0      248     8     0     8     8     0     8    5
fdescpl    448     1196    0     1166     5     0     5     5     0     8    1
filepl     120     7208    0     6903    14     0    14    14     0     8    4
lockfpl    104      332    0      329     1     0     1     1     0     8    0
lockfspl    48      147    0      144     1     0     1     1     0     8    0
sessionpl  144       43    0       34     1     0     1     1     0     8    0
pgrppl      48       67    0       50     1     0     1     1     0     8    0
ucredpl    104     1164    0     1153     1     0     1     1     0     8    0
zombiepl   144     1168    0     1167     1     0     1     1     0     8    0
processpl  1152    1231    0     1167     5     0     5     5     0     8    0
procpl     664     2324    0     2242     7     0     7     7     0     8    0
sosppl     176        9    0        6     1     0     1     1     0     8    0
sockpl     552     1648    0     1544    17     7    10    17     0     8    2
mcl64k     65536     31    0       31     1     0     1     1     0     8    1
mcl16k     16384      1    0        1     1     0     1     1     0     8    1
mcl9k      9216       2    0        2     1     0     1     1     0     8    1
mcl8k      8192      14    0       14     1     0     1     1     0     8    1
mcl4k      4096    3535    0     3483    15     0    15    15     0     8    7
mcl2k      2048     941    0      939     3     0     3     3     0     8    2
mtagpl      96       97    0       81     2     0     2     2     0     8    0
mbufpl     256    12192    0    12038    20     0    20    20     0     8    4
bufpl      280     7225    0     1011   444     0   444   444     0     8    0
anonpl      24   205074    0   201750    57     0    57    57     0   187   18
amapchunkpl 152   40825    0    40299    43     0    43    43     0   158   22
amappl16   200     4063    0     4034    17     2    15    15     0     8    9
amappl15   192       78    0       78     1     0     1     1     0     8    1
amappl14   184      455    0      454     1     0     1     1     0     8    0
amappl13   176      131    0      121     1     0     1     1     0     8    0
amappl12   168     1504    0     1474     2     0     2     2     0     8    0
amappl11   160        4    0        4     1     0     1     1     0     8    1
amappl10   152       59    0       49     1     0     1     1     0     8    0
amappl9    144      256    0      256     1     0     1     1     0     8    1
amappl8    136      120    0      118     1     0     1     1     0     8    0
amappl7    128      160    0      149     1     0     1     1     0     8    0
amappl6    120      193    0      191     1     0     1     1     0     8    0
amappl5    112      114    0      106     1     0     1     1     0     8    0
amappl4    104      294    0      276     1     0     1     1     0     8    0
amappl3     96     6412    0     6292     4     0     4     4     0     8    0
amappl2     88      606    0      551     2     0     2     2     0     8    0
amappl1     80    14371    0    13816    16     0    16    16     0     8    3
amappl      88     8877    0     8699     5     0     5     5     0    92    0
uvmvnodes   80      125    0        0     3     0     3     3     0     8    0
dma8192    8192       1    0        1     1     0     1     1     0     8    1
dma4096    4096       1    0        1     1     0     1     1     0     8    1
dma2048    2048       1    0        1     1     0     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     0     1     1     0     8    1
dma128     128      255    0      255     1     0     1     1     0     8    1
dma64       64        7    0        7     1     0     1     1     0     8    1
dma32       32        7    0        7     1     0     1     1     0     8    1
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       11    0        0     1     0     1     1     0     8    0
uaddrrnd    24     1196    0     1166     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1196    0     1166     1     0     1     1     0     8    0
vmmpekpl   168    11373    0    11329     3     0     3     3     0     8    0
vmmpepl    168    84282    0    82421    96     0    96    96     0   357    6
vmsppl     368     1195    0     1166     4     0     4     4     0     8    1
rwobjpl     40    25486    0    24478    13     0    13    13     0     8    0
pdppl      4096    2398    0     2332   104    38    66    78     0     8    0
pvpl        32   557388    0   548409   145     0   145   145     0   265   38
pmappl     216     1195    0     1166     2     0     2     2     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      389    0       38    11     0    11    11     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x25
panic(ffffffff834178b1) at panic+0x1cf
__assert(ffffffff8345131b,ffffffff834b1f46,3bb,ffffffff8348bce0) at __assert+0x29
refcnt_finalize(ffff80003c927758,ffffffff83408d40) at refcnt_finalize+0x1c8
pppx_if_destroy(0,ffff80003c927750) at pppx_if_destroy+0x3d
pppxclose(285b9a,41,2000,ffff800033cce2c0) at pppxclose+0xa0
spec_close(ffff80002a856ef0) at spec_close+0x417
VOP_CLOSE(fffffd80698dbdc0,41,fffffd8007ffd618,ffff800033cce2c0) at VOP_CLOSE+0x129
vn_closefile(fffffd806cce5ca8,ffff800033cce2c0) at vn_closefile+0x11d
fdrop(fffffd806cce5ca8,ffff800033cce2c0) at fdrop+0x121
closef(fffffd806cce5ca8,ffff800033cce2c0) at closef+0x190
fdfree(ffff800033cce2c0) at fdfree+0x115
exit1(ffff800033cce2c0,0,0,1) at exit1+0x576
sys_exit(ffff800033cce2c0,ffff80002a857250,ffff80002a8571a0) at sys_exit+0x1a
syscall(ffff80002a857250) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7864592959a0, count: -16
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x25
panic(ffffffff834178b1) at panic+0x1cf
__assert(ffffffff8345131b,ffffffff834b1f46,3bb,ffffffff8348bce0) at __assert+0x29
refcnt_finalize(ffff80003c927758,ffffffff83408d40) at refcnt_finalize+0x1c8
pppx_if_destroy(0,ffff80003c927750) at pppx_if_destroy+0x3d
pppxclose(285b9a,41,2000,ffff800033cce2c0) at pppxclose+0xa0
spec_close(ffff80002a856ef0) at spec_close+0x417
VOP_CLOSE(fffffd80698dbdc0,41,fffffd8007ffd618,ffff800033cce2c0) at VOP_CLOSE+0x129
vn_closefile(fffffd806cce5ca8,ffff800033cce2c0) at vn_closefile+0x11d
fdrop(fffffd806cce5ca8,ffff800033cce2c0) at fdrop+0x121
closef(fffffd806cce5ca8,ffff800033cce2c0) at closef+0x190
fdfree(ffff800033cce2c0) at fdfree+0x115
exit1(ffff800033cce2c0,0,0,1) at exit1+0x576
sys_exit(ffff800033cce2c0,ffff80002a857250,ffff80002a8571a0) at sys_exit+0x1a
syscall(ffff80002a857250) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7864592959a0, count: -16