last executing test programs:

38.506996244s ago: executing program 4 (id=5):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, 0x20ff)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0)
ioctl$TIOCSTART(r1, 0x2000746e)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYRES8])

38.504480299s ago: executing program 4 (id=20):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xca, "00000000000000000000000000000001", 0x65d}, 0x1c, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6(0x18, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x7}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x9, "000000000006000000000900f100", 0x3c6}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendto$inet6(r1, 0x0, 0x0, 0x404, &(0x7f0000000280)={0x1c, 0x18, 0x1, 0xcce, "1e78b8f9fc73436a16555cf59ac080d4", 0x404}, 0x1c)
ftruncate(r0, 0x40000000007)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="3f7743fe", 0x4}], 0x1, 0x8)
truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004)

38.47830852s ago: executing program 4 (id=24):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7)
unlink(0x0) (async)
unlink(0x0)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000400)="95c5", 0x1}], 0x1089)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000000)={'./file0\x00', 0x7, 0x5, 0xdee, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0x7}) (async)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000000)={'./file0\x00', 0x7, 0x5, 0xdee, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0x7})
setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x920e, 0x8, 0xffffdf82, 0x0, "ff9500008c17c09e93ffa33a00", 0x4000000, 0x5})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)="91", 0x787e4c43675feeaf}], 0x1) (async)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)="91", 0x787e4c43675feeaf}], 0x1)
read(r2, &(0x7f0000000000)=""/46, 0x2e)

23.27506036s ago: executing program 32 (id=24):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7)
unlink(0x0) (async)
unlink(0x0)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000400)="95c5", 0x1}], 0x1089)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000000)={'./file0\x00', 0x7, 0x5, 0xdee, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0x7}) (async)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000000)={'./file0\x00', 0x7, 0x5, 0xdee, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0x7})
setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x920e, 0x8, 0xffffdf82, 0x0, "ff9500008c17c09e93ffa33a00", 0x4000000, 0x5})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)="91", 0x787e4c43675feeaf}], 0x1) (async)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)="91", 0x787e4c43675feeaf}], 0x1)
read(r2, &(0x7f0000000000)=""/46, 0x2e)

22.36960846s ago: executing program 6 (id=83):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
sysctl$kern(&(0x7f0000000000)={0x1, 0x2d}, 0x2, &(0x7f0000000080)="7b0053fb424365999b758a2e3fa2b09ad0b00a5d41b79c5eb57a2532d94e12602154fab8e482bb65823cbb80cff6340ac0596c033c82", &(0x7f0000000140)=0x36, &(0x7f0000000180)="b4d8a458149bf241658b076ecefd8baa4106c9d53ed4fd76da6e225b9d380ab349d94ff01856e5837bf65c5b6363737bc8e1b4de858bc89fade47faa56a3228021c0dd92465b4cd795d1a0aa63cc794c6e481ca2ea66f76acd45f3cc45ff3547de27aada467024caf84ad5bd177fb6725abdaa64315a5958267bbcab18e9ee455d2e4c91905222309c794c58254b2de67633fa48256cbf721c436bdb7880ab1569fb5cf6133757faf96c46c9b35ae612baa61f0c9a61306359331d18dc04599b94f8824051b7451be76e00b237201fefea24c08ad84c5bf2730fdc9c6a86a4a87352fb29c5d0af17", 0xe8)
write(r0, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$DIOCADDRULE(r1, 0xcd604404, &(0x7f0000000140)={0x8c5, 0x0, 0x1, './file0\x00', './file0\x00', 0x0, "cd6b0a27f46046c224bef75fcecca0748afdd3cc68026d7e03f94ac979153c3bbceb1af0482e1900f971845239f6b63dcbcce7c35bb374f2fc15dadd1a3844daef46d27868bf6c04d2f91bec22ba9138f69bda9ed3e31a8c73616810da1e5fc05486fa5695dd92b3851c3e1ec709ddaf40c492f962ccd632cd1afa7a6a2497f4d96827168c6a33cb76e3aca2b84637c1c3d100ab8285d76d07676c79eb987947356cdb0fd6b90ee0167c7795815287975b069400a5ba5cb11a59391981ca685b8b4b1c983cf70026fbc36719f85cff1195bbb3fd69fe81c9b30b9aff31d37d802756b4dd2dd77903492d19d2daa6e70f596ef1e412e8dcd761254a54e8f9e46ae6f97cb62fec098a5a7ecf059d9ccb08b9b1569595c218cb04e5a00d32441ba6b191be52b5cac2edaa85b23f434beaa7bc602c7fa251ae49890baaf092bea56db7cd6d2946e7cefb4387053226433dfa4bc05a83876705ce6026830b3d40e83891c6fa7029700b9595c448690a8932cb086261ff02abefa7129cefa0f74915e5e0ddafe7fc7ae212cfc64b2c690e0c50214266b0eef5549e29b9da9305d2ef6e0db55a260253878937a336bdd24ddbb77c21968fa94e1cbb3260f047e0c88444921710d66a1c2848a17055ce0f9f0fb5f83c9d523ed4400a6293599488237ae36767ef69a4ac17013d898c96de5bac6fe690e905e2b4d7b8bc61563d7e434001f673d9d5a4a09fcefa9802a699bf66601e96e7cad39a716edf4fa585f3d3b76e38b9428e2a750a369f7de8f4f74a29db9e06d1b64c3d80f5a9fa7c72dbd65da9b28eef72bac940b36af6f1d84d507917eb710fb7a8c0048847de2c8b5ead5c0a6656e74fe4ce2a2a8c588552d7ddb473356492627396ee0f8edf8ec27f47c5efb62353a92d1babe91997ee2897ae87e0b2c8a10a9a706ddf27aaa36664aee8fb97f3bbce6f5afa279744a6fc4d970be509e7542e0a1de0faeba0b411db320d2f3d76782c6d3c01a2d7717eb751bd78c508241072a2404ff5639ceabff3a793e91d1f532abc729fb7ee0e3611dbbfe53eb4671271ee7c1a1f69a903772e58a3e2dbc1a0bfbef194ed3434f7d78f05da9b088a747e8f0152b92733b18371021bf2ac3a2f24c1d4c16d3147699de1f2e44c29ebb6ab8dab3fbd42397d1ac875cb503153e4ff8ec641ca22c2cc5719c3e6b718a373015a96a1a2d9b44adad231ba5f1068273ea3b14a5f0617e4ca282ab616bcbcec7d11fc992e102d66b897f2836505f4b7482d36849995401ed20d6aee814fe3a3f6fbdb6535f5c38781e73d1c3ead1ff1e7f2696cb0672ddcc9a9a1a934bcf177423675295b4d1b50e33c36cf9cab03587d9e16b276bf330abf9b0efd16929f757ad75ce4143ec712760166a259a3b80c0dec85531ebbaec854cefff8b42b83cf411f1110c970c8a13ce3ca2ef2f30e8e15c5760552c3a067d5c5090f1f0472514a0ddbacc74d257bd89f144a6db31861df9bb749f4297c02c12380b7132f4a8d6df802de23018adcf1c15cd54cb419545b58a5ad7c47cecf5b7675e4b1e11a58c7b3657ffe2c78004a9a59c5dc2af17818a2f9659b3adc5be39a3992d8f6f832fbd9152029aeab9cd79ddf98eed0ff4b17f31c3339acf9225e03c0ce226cd6aa0486ad2b2e9311b3faa86a13a1103f555dbf3c8fcf2be69cd5d1605508afbcd79aa8f7f2b48f93b93b7706ac108ba3405b10609fb6b3d36d28c0f0a905013e66cb148d2540554df5890660fdb43ae649a2968346fdab2defa9248847542144c2a77d59657ac95f152d03b6fb8fa8e6523f9c1a38a70e16c5efd3eeb037da473c9832a671f0f278b14208d2394c967d9ebe860f7e8438cbddcd9518d95392c48b031febadac91143cf568b669d433837449df98b9cc32379cb7b1a79b8a"})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)

18.17434098s ago: executing program 1 (id=88):
r0 = socket(0x18, 0x2, 0x0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x7ffffffd, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x44, 0x3effd})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff"])
setsockopt$inet_opts(r2, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4)
syz_open_pts()
ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000780)=0x7)
setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd20000", 0x88)
sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x10000007, "00000000000000000000000000000001", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x402)

12.957816096s ago: executing program 3 (id=93):
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100))
mkdir(&(0x7f0000000180)='./file0\x00', 0x14)
openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='r\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='c\x00')
chroot(&(0x7f0000000580)='./file0\x00')
setuid(0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00')

12.956116942s ago: executing program 6 (id=95):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x7, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0x20000a, 0x2}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
setregid(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffffffa3, 0x9, 0xd, 0x1, 0x4, 0xd86, 0x40, 0x2, 0x1, 0x100002000642})
mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d)
r2 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x9, 0xd4, 0xa, 0xffffffff, 0x9c, 0x10, [{0x2, 0x7, 0x0, 0x7ff}, {0x6, 0x3, 0xb9d4, 0x4}, {0x10000005, 0x7, 0x0, 0x6a}, {0x2000eff, 0x800, 0xe, 0xffffff}, {0x9, 0x9, 0x9, 0x8}, {0x6, 0x1, 0x80000000, 0x800009c}, {0x409, 0xffffffff, 0x20081003, 0xfffeffff}, {0x1f, 0x100007fe, 0x10001, 0x8}, {0xfffffffe, 0x81, 0x1, 0xf}, {0x6, 0x8001, 0xfffffffe, 0x800000b}, {0x4, 0x3, 0x3}, {0x1, 0x40, 0x3, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x8001, 0x100006}, {0x0, 0x6, 0x4, 0x1ffffffd}, {0xe, 0x2, 0x0, 0xc3}]})
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x2000007, 0xfffffffffffffffd, 0x27ffffffffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0)
r3 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000080)="04000000", 0x4)
mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x8, 0x180)
readv(r4, &(0x7f0000000100)=[{&(0x7f0000003180)=""/4103, 0x1007}, {&(0x7f0000001140)=""/4092, 0xffc}], 0x2)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
closefrom(r2)
r5 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
flock(r5, 0xc)

12.948894351s ago: executing program 1 (id=96):
pselect(0x12, &(0x7f0000000180)={0x5, 0xbbd, 0x1ff, 0x16b1, 0x7, 0x8, 0x0, 0x23c00000}, 0x0, &(0x7f0000000280)={0xf2e, 0x0, 0x8, 0x8, 0x71d, 0x9, 0x11df2f55, 0x7}, &(0x7f00000002c0)={0x10001, 0x7}, 0x0) (async)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0xffffffff, 0x3, 0xffffffc0, 0x8623, "0100012d29fb000700000000098002005e00"}) (async)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/15, 0xf}], 0x1)
ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000000)={{0x6, './file0\x00', [{[@v4=@multicast2, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x8, 0x8001]}, {[@v4=@loopback, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0x7f, 0x7], 0x2, 0x2}], {{0x4, 0x0, 0xf0, 0x4}, 0x1000, 0x0, 0xfffffff9, 0x3ff, 0x1, 0x8f, 0x7}, {{0x1f34, 0x9, 0xd, 0x9}, 0xe0b, 0xfffffffa, 0x9f, 0x7, 0x0, 0x1, 0x3}, @v6=@empty, 0x9, 0x6, 0x8000, 0x1, 0x7fffffff, [[0x7228, 0xf1ab], [0xe000, 0x7929]], [[0x3, 0x90e], [0x6, 0x9]], 0xc, [0x1, 0x2], 0x5, 0x18, 0x1, 0x2, 0x5, 0x3, 0x1, 0x9, 0x80, 0x9, 0xff, 0x90b, "5bc8"}})

12.948048882s ago: executing program 7 (id=97):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x3, 0x1, 0xa}, {0x30, 0xc9, 0xfe, 0x8}, {0x9b1e, 0x22, 0xf, 0x40207ff}]})
sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x6c, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xa4, 0x5, 0x0, 0x56}]})
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x2, 0x1, 0xa}, {0x20, 0xc9, 0xfe, 0x8}, {0x9b1e, 0x22, 0xf, 0x40203ff}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000180)="c2a6500034dd7fb55c3f1f17dd129377ba8200019324b9b7a0536259f563790a966083c8c73a28ce546a06907f80ffffffff51d886fc83b4e42b47bfc59fb59633dde58734689ea9e84b22eda8d6c9db110dc8d2bd6cedaf33019c09000000000000003144e199f05ff987594b39bbd483c84915ae4d20a8e4a7a8a759c69d2e1133dda2cff1743236c69ebc3489222ae9a5f0ab0f4a19ad2daf43b3e16d00"/172, &(0x7f0000000000)=0xac, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r2, &(0x7f00000000c0)="f81ad30100060000000100000000", 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_ethernet(0xbb, &(0x7f00000000c0)={@random="5e0f5d1664a4", @empty, [], {@ipv4={0x800, {{0x14, 0x4, 0x3, 0x33, 0xad, 0x66, 0x9, 0xf6, 0x1d, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x2c, 0x3, 0x3, 0x0, [{[@broadcast], 0xe}, {[@remote={0xac, 0x14, 0x0}], 0xd79f}, {[@multicast2], 0x9}, {[@empty], 0x917}, {[@broadcast], 0xc}]}, @ssrr={0x89, 0xf, 0x2, [@local={0xac, 0x14, 0x0}, @rand_addr=0x84, @rand_addr=0x3]}]}}, @generic="f8e084497784db2d42facd9e5119d45a8390065e6012a56e2e5e3e570029db61f3a93587fbca34bec41cdce6539366ba3e1854e64bc9330f7238d6702e2df05ff3ca8085ead65d05748985ea6b94cc4b0e51a65a9079da701c889415ec"}}}})

12.939530626s ago: executing program 7 (id=98):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000400)={0x4, &(0x7f0000000000)=[{0x40, 0x9, 0xf7, 0x6}, {0x2d, 0x0, 0x2, 0x4}, {0x87, 0x1, 0x9, 0x70000000}, {0x0, 0xfb, 0x1, 0x9}]})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834400081100000000ff0200"])
r1 = msgget$private(0x0, 0xb)
msgsnd(r1, &(0x7f0000000000)={0x2}, 0x8, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x1, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xc, 0x8000000000000000, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff, 0x0, 0x7})
setuid(0xffffffffffffffff)
msgrcv(r1, 0x0, 0x0, 0x0, 0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0x80804465, &(0x7f0000000000)={0x20008, 0x10001, 0x8, 0x1, "44f1ffffff000000000400", 0xd2, 0x2})

12.732619571s ago: executing program 5 (id=99):
openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {}, {0x1}, {0x1}, {0x1, 0x6}, {0x2}, {0x3}, {}, {0x2}, {0x1, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]})
clock_gettime(0x0, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="57f0e9195467ab99071eb3bdf9460bc534dfdda063013457f5bd4a57688d970263083524afb18ca48bddc7291dfecaf8f8b1a98845c08629652d2e", 0x3b}], 0x1, 0x4)
unveil(0x0, &(0x7f0000000140)='c\x00')
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x4001, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2) (async)
close(r2)
socket(0x2, 0x4001, 0x0) (async)
r3 = socket(0x2, 0x4001, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013)
select(0x40, &(0x7f0000000080)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) (async)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8)
read$audioctl(r5, &(0x7f0000000280)=""/20, 0x14) (async)
read$audioctl(r5, &(0x7f0000000280)=""/20, 0x14)
connect$unix(r3, &(0x7f0000000000), 0x10) (async)
connect$unix(r3, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
dup2(r1, r2)

12.731217595s ago: executing program 0 (id=100):
r0 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {r0, 0x80}], 0x2, 0x8)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x81, 0x1, 0x2}, {0x3c, 0x4, 0xf3, 0x86}, {0x84, 0xfd, 0x9, 0x29}, {0x9b1e, 0xff, 0x0, 0x40007fd}]})
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[])
socket(0x20, 0x1, 0x6)
sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x22}, 0x4, 0x0, 0x0, 0x0, 0x0)

8.177545035s ago: executing program 0 (id=101):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000140))
r1 = socket(0x18, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x10001, "fe800500000000000000675e000400", 0x8}, 0x1c)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0xb, "759f5a01005ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, "00000000000000000000000000000001", 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x9, 0x8, 0x7f, 0x800, 0x4]}, 0x5c)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffff9c)
r3 = open$dir(0x0, 0x200, 0xe)
r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffff9c)
write(r4, 0x0, 0x0)
write(r2, 0x0, 0x0)
syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x46, 0x6, 0x30, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @generic="3d259c06b15a443aa104000ce98378b65dde37b92d7200cff44a58083c8a09119fc163a34eb4a4de01040db565be4559cce243ac8387255f660d6c9d872a4cb56bf4c6693a11"}}}}})
r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TIOCSETA(r5, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d00000002000c0006000000000200", 0x7fffdffe})
dup3(r0, r1, 0x0)
unveil(0x0, &(0x7f0000000200)='r\x00')

7.377785751s ago: executing program 2 (id=102):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24)
ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000000c0))
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$WSDISPLAYIO_GETSCREENTYPE(r1, 0xc028575d, &(0x7f0000000080)={0x2, 0x8, './file0\x00', 0x8, 0x6, 0x1c50, 0x8})

7.354987504s ago: executing program 3 (id=103):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$DIOCCLRSTATUS(r1, 0xc0284416, &(0x7f0000000280)={'./file0\x00', &(0x7f0000000100)=""/94, 0x0, 0x5, 0x400, 0x2})
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x40, 0xb, 0x1, 0x9}, {0x35, 0x0, 0x2, 0x4}, {0x5, 0x9, 0xf7}, {0x87, 0x1, 0x9, 0xa}, {0x9b1e, 0x2, 0xf8, 0x4000800}]})
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb869d60db090000102b04fed38d5ba80b9e61cd0c535a98000000ff02000000000000001300ddbe0000018b009078000000080000000000000002"])

6.976946603s ago: executing program 5 (id=104):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
getsockname(r0, 0x0, 0x0)
listen(r0, 0x7fff)
setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000100)=0xffff, 0x4) (async)
setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000100)=0xffff, 0x4)
socket(0x6, 0x3, 0x81)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x3c, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8200, 0x0, 0xfffc, {[@md5sig={0x13, 0x12, "85da614c06935eccdf9b8db70dedeec5"}]}}}}}}}) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x3c, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8200, 0x0, 0xfffc, {[@md5sig={0x13, 0x12, "85da614c06935eccdf9b8db70dedeec5"}]}}}}}}})

6.96643398s ago: executing program 7 (id=105):
syz_emit_ethernet(0x12, &(0x7f0000000040)={@local, @random="adc9bcfb08ca", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @loopback, @random="4169a80c36a0", @multicast2}}}})
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01fe020000000000000000000000a403bbfe8000000000000000000000000000aa82"])
syz_emit_ethernet(0xa2, &(0x7f0000000080)={@local, @empty, [{[], {0x8100, 0x1, 0x1, 0x4}}], {@ipv4={0x800, {{0x17, 0x4, 0x1, 0x7, 0x90, 0x66, 0x101, 0xf4, 0x1d, 0x0, @multicast2, @broadcast, {[@generic={0x44, 0x2}, @lsrr={0x83, 0x1b, 0x9, [@broadcast, @broadcast, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @multicast1, @remote={0xac, 0x14, 0x0}]}, @rr={0x7, 0x13, 0xb1, [@local={0xac, 0x14, 0x0}, @broadcast, @empty, @local={0xac, 0x14, 0x0}]}, @rr={0x7, 0x17, 0x7, [@remote={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}, @multicast2, @broadcast]}, @noop]}}, @udp={{0x0, 0x3, 0x8}, {"d3f9a7541e0291d5d54d057537192e557067cd412657c01eeddcf7c75d6d12bd5a42f5907e52d2d42f79be9b"}}}}}})

6.965123159s ago: executing program 1 (id=106):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2}, {0x2}, {0x2, 0x7fff}, {0x1, 0xd}, {0x0, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x2, 0x6}, {0x3, 0x2}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x4}, {0x3, 0x1}, {}, {0x2}, {0x0, 0x400000}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x3, 0x3}, {0x3, 0x800}, {0x3}, {0x1, 0xad}, {0x2, 0xfffffffd}, {0x2, 0xfffffffd}, {0x2, 0x8001}, {0x1, 0x200060}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f0000000100)="71f91e34", 0x0, 0x0, 0x0) (async)
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
closefrom(r0) (async)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000001140), &(0x7f0000001180)=0xc) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 32)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e)
setresuid(0xee00, 0xee00, 0x0) (async)
setresuid(0x0, 0xee01, 0xee00)

6.964474011s ago: executing program 6 (id=107):
sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000000040)="35765cf371d8492604575630c682301a00a6bf20b92e952d88459750f3ba14a35ac56a59f375481c947cf7117f688c176edfd19b693f557c1e3902f0cc1837e75c480b6bfe6c798490f02b140702cbf29805ca29415b15ca80feb9d41b2e35d3eb8ddcdd8f8da6a16c2f2d31e0ba4b4d06d3624303", &(0x7f00000000c0)=0x75, &(0x7f0000000100)="f50898f11903038afeb583b556075a23bdea9bc6", 0x14)
sysctl$hw(&(0x7f0000000140)={0x6, 0x17}, 0x2, &(0x7f0000000180)="f1a0af2656dc2941df6dc82781552c6ebf7d761f49e0b2258dd358a04614ee5121c81febab731b1adfe720e23d4e9253059d90d17604a96e7357f80154a239b1e1a02a15c0bcc0324e0e4316f379d644d58272d6eca1abae3826afc04fcf1f44ad6801a2d865c1c07f286eb8f341473cebdb2b00e4a96d", &(0x7f0000000200)=0x77, &(0x7f0000000240)="c4c87f79", 0x4)
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x10000)
closefrom(r1)
read(r0, &(0x7f00000002c0)=""/98, 0x62)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000340)={0x0, 0xc16})
ioctl$VMM_IOC_RUN(r1, 0xc0285602, &(0x7f0000000600)={0x6, 0x8000, {0x80, 0x1, 0x2}, 0x1, &(0x7f0000000380)={{0x1, 0xd9, 0x5, 0x1, 0x87, 0x9, 0x0, 0x6}, {[0x7, 0x8, 0x8, 0x1, 0x5, 0x1, 0x0, 0x800000000, 0x8000, 0x101, 0x20, 0x7, 0x9, 0x2, 0x7, 0xff, 0x39e, 0x3], [0xff, 0x2, 0x4a, 0x4, 0x10, 0x7, 0x1d1, 0x3e, 0xffffffff, 0x1], [0xf, 0x7, 0x7, 0x217, 0x8b5, 0x6], [0xd8, 0xee1a, 0x101, 0xfd0a, 0x9, 0x1000], [{0x1, 0x3ff, 0xfffffaf4, 0x9}, {0x6, 0xf, 0x1, 0x6}, {0x2, 0x8, 0x2}, {0xc, 0x1, 0x6}, {0x9, 0x9, 0xca7c, 0x10}, {0xe, 0x216, 0x1, 0x200}, {0x4, 0xf, 0x2, 0x6}, {0x1, 0x5, 0x401, 0x3}], {0x8, 0x4, 0x100, 0xfffffffffffffffa}, {0x81, 0x40, 0x2, 0x800}}, 0xb38}, 0x8000, 0xcb})
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000640), 0x80, 0x0)
r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0)
execve(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000700)='/dev/vmm\x00'], &(0x7f0000000800)=[&(0x7f0000000780)='-)+&\x00', &(0x7f00000007c0)='/dev/pf\x00'])
ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000840)={0x6, 0x0, {[0xffffffffffffffff, 0x2, 0x7, 0xb, 0x3e46, 0x6, 0x9b90, 0xfff, 0x9, 0x1, 0x7, 0x2, 0x400, 0x405, 0x10, 0x0, 0x3ff, 0xfffffffffffffffc], [0x0, 0xc, 0x800, 0x40, 0xfffffffffffffffe, 0x0, 0x8, 0x10000, 0x84b8, 0x7], [0x12f, 0x7f, 0x8, 0x7, 0x8, 0xf920000000000000, 0xfff], [0x5, 0xffffffffffffffff, 0x7, 0x5, 0x3, 0x7], [{0x9, 0x5, 0x0, 0x81}, {0xd, 0x200, 0x8, 0x20}, {0x4, 0x3, 0x6b, 0x68c680ba}, {0xfff3, 0x8bf4, 0x5, 0x7}, {0xfff9, 0x0, 0x9, 0x9}, {0x4, 0x8, 0xb}, {0xa59f, 0x3, 0x8c, 0xd60}, {0x3, 0x40, 0xffffffff, 0x7fffffffffffffff}], {0x4, 0x1, 0x7ff, 0xffff}, {0x9, 0x100, 0x0, 0x1}}})
r4 = open$dir(&(0x7f0000000a80)='./file0\x00', 0x800, 0x8)
unlinkat(r4, &(0x7f0000000ac0)='./file0\x00', 0x0)
ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000000b00)={0x6b, 0x5a0, 0x8000000000000001, {[0x80000000, 0x5, 0xf, 0x9, 0x6330, 0x5, 0x7f, 0x3, 0x0, 0x800, 0x5, 0x4, 0x5, 0x8, 0xf28, 0x3, 0x466, 0x6], [0x1, 0x6, 0x800, 0x80000000, 0x1, 0x6, 0x0, 0x8, 0xfffffffffffffffe, 0x7], [0x2, 0x10, 0xc0ff, 0x100000001, 0x9, 0x2, 0xff], [0x7, 0x4, 0x671, 0x10, 0x4, 0xa66], [{0x7, 0x81, 0x1c, 0x401}, {0x2, 0x5, 0x6, 0x9}, {0x10, 0x5, 0xc, 0x3}, {0x2905, 0x5, 0x4, 0xf515}, {0x7fff, 0x6, 0x5, 0x9}, {0x28, 0x9, 0xa1, 0x3}, {0x40, 0x4, 0x3, 0x60b4eeea}, {0xbed, 0x2, 0x81, 0x7}], {0x860a, 0x1, 0x7, 0xb59}, {0xff00, 0x8153, 0x1, 0x1c0000000000}}})
r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0)
ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f0000000ec0)={{'./file0\x00', './file0\x00', 0x51, 0x6}, &(0x7f0000000dc0)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xfff, 0x3, 0x1a, 0x8, 0x6, 0x9, 0x1}, {@broadcast, '\x00', './file0\x00', 0x4, 0x7, 0x18, 0x7, 0x50, 0x7, 0x7}, {@empty, '\x00', './file0\x00', 0x6, 0x8b96, 0x18, 0xb, 0x8, 0x24, 0xbd}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2, 0x8001, 0x19, 0x9, 0x8d, 0x4}], 0x8, 0x4, 0x81, 0xa58b, 0x4, 0x1ff, 0x42, 0xfffffc00})
chmod(&(0x7f0000001340)='./file0\x00', 0x0)
connect$inet6(r1, &(0x7f0000001380)={0x1c, 0x18, 0x2, 0x1ff, "673e90a3e7fb907f46a955a21d72fb69", 0x4}, 0x1c)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000013c0)="db0c520362ff9c4dd70f7b71a3192c56fd1b744268ee8ee17cb9f55b85d3d0aac8360280f8938703235f15a857fab84ed1de98c959320dd3d39dd329e5032718842f11871de4b0d20aa7a85c1fafdad2950f08ca2c01a8bdb97302a8ccd91005d199b70e957d923f9e93a3f1b9ae49d27eec9f6cfcfec820dfcdb2f28561e1e5408509033d198472fff291616f31c44f21c81f96a4d0ed9308a03a9ffd7803ea0c04ca2305533a430be040fc93f201fb3f31887153d5ec684057c72ffc7afccec0b9e9d0debc67513875c73536ac959b56aeec30e37d70f5653b26437cc33d309651c401f3719b0b5a6912e5a760328d589106", 0xf3)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
poll(&(0x7f00000014c0)=[{r1, 0x100}, {r4, 0x2}, {r0, 0x2}, {r4, 0x40}], 0x4, 0x5)
shmget(0x1, 0x3000, 0x244, &(0x7f0000ffb000/0x3000)=nil)
mquery(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x4, 0x1ea5fa24cfe18015, r4, 0x5)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000001500)={'tap', 0x0})
syz_emit_ethernet(0x109, &(0x7f0000001540)={@random="797d2ff01481", @empty, [{[{0x88a8, 0x3, 0x0, 0x3}], {0x8100, 0x4, 0x1, 0x2}}], {@generic={0x80f7, "071cc162446b4c8ecf058cb5ae0481e9bc667e508d276f73fe7345ebeb5fea3932c0f11da4fed35a961a6adf706304b4694bb3e485db1d8ce7e81f829a2d62d0f31675e07fea9922f7fc87c93cb0b9743815d7b0bbd10c87b90208e168dba42f50a73f3dc4a2fa0b3b61f8d150e55eb6eea1883cff60f8ccad84d66b3b9150bac71b74fc745cafca1f276fd2e20eb0fe928f1869f6980d9c708e2e3a66720b03487d9decbb0b651b82224ba1321b016b91769a1fc0de3c2df231b4a64c6deba5fd5ee9f29ea75dd870c86509fffd0d74072c983f11e34847254b5ba6d42c0c89c45734f9ad6068fef441ee81350ba477f5afc9"}}})
stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(r5, r6, 0x0)
socketpair(0x18, 0x1, 0xfa, &(0x7f0000001740)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
poll(&(0x7f0000001780)=[{r1, 0x80}, {r7, 0x4}, {r2, 0x2}, {r2, 0x10}, {r5, 0x100}, {r3, 0x14}, {r2, 0x8}], 0x7, 0x4)

2.301308492s ago: executing program 0 (id=108):
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x89, 0x2, 0x100000000, 0xc8}, {{}, 0xfffffffffffffff6, 0x0, 0xe97adb715d25d342, 0x6, 0x4}], 0x8000001, 0x0, 0x7fffffff, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0})
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="6f8fdd33", 0x4}], 0x1)
pwritev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000080)='<yD', 0x3}], 0x1, 0x5)
execve(0x0, 0x0, 0x0)
r2 = getpid()
kill(r2, 0x13)
r3 = kqueue()
kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x89, 0x2, 0x100000000, 0xc8}, {{}, 0xfffffffffffffff6, 0x0, 0xe97adb715d25d342, 0x6, 0x4}], 0x8000001, 0x0, 0x7fffffff, 0x0) (async)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="6f8fdd33", 0x4}], 0x1) (async)
pwritev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000080)='<yD', 0x3}], 0x1, 0x5) (async)
execve(0x0, 0x0, 0x0) (async)
getpid() (async)
kill(r2, 0x13) (async)
kqueue() (async)
kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async)

2.300469721s ago: executing program 2 (id=109):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x20)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r2 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r2)
setresuid(0xee00, 0xee00, 0x0)
setuid(0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r3, 0x0)
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
ftruncate(r0, 0x8531)
r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x280, 0x1c6)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
r5 = kqueue()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r6, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa)
connect(r6, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
dup2(r8, r7)
kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x12, 0xffffffffffffffff}], 0xffffffff, 0x0, 0x7, 0x0)
kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)

2.300049188s ago: executing program 3 (id=110):
unveil(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='c\x00')
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0xc6)
r0 = socket(0x20, 0x1, 0x1)
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02)
mknod(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb6)
symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
shutdown(0xffffffffffffffff, 0x1)
sysctl$net_inet_icmp(&(0x7f0000000640)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000080)="bf016047", &(0x7f0000000000)=0x4, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
sysctl$net_inet6_icmp6(&(0x7f0000000a00)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000b40)="65eb6834", 0x4)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "1a1116f043000000000000fffffffffff700"})
sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f00000010c0), 0x0)
close(r1)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
semget(0x2, 0x4, 0x4c0)
sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSHDRCMPLT(r4, 0x80044275, &(0x7f00000000c0)=0x10001)
write(r4, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x7000)
getsockopt$sock_int(0xffffffffffffff9c, 0xffff, 0x100, &(0x7f0000000000), &(0x7f0000000040)=0x4)
munmap(&(0x7f0000187000/0x2000)=nil, 0x2000)

2.298963226s ago: executing program 5 (id=111):
r0 = socket(0x18, 0x2, 0x0)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}})
sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f00000001c0)="24fca14c6916c23d41e03d4cc8fac4dbff70dce3f303b4c5229416d31459cb351be5de5af42cfc933b884f5d92656d736aca61c8637ff3dcd59d6df2967d8150926a8b19e7141eddcbeb014b69d6a5d040512e3a00e1040e42dc1e84c73ed27bb9faaa4c86e6c0a562a8bcc4b6111d1edb5199cbca2a280679755b62cdfeb4b9ca85ea271a009d360d67d0d8c39745fc0a2f35c3c5f936e6f032741169b51bf1c6baba795d102923129ad14519092cbcd9e20584198ab02a7b007afa7ff83020cebae5d199db6d5bc8af6622443ef8c2346f40542370efd898590d3c000daaf2f55b9722858dc2d3775ac4aae474ca30a364c53ef679a3c0", &(0x7f0000000140)=0x121, &(0x7f0000000180)="4065966f", 0x4)
r1 = socket(0x10, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4)
setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000180), 0x0)
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x4, &(0x7f0000000080)="02331bb304d59efe1ee2e4de8412dbd382dcbab77078742454659c2f50767d9643a678b168326deb55f01649cc23b3b80a620ba322e34187c304352b4be7b2d0214c750d2a6b32bc59d8b03a0d69ed5f1749bc1fe47c3c37f3690cc667a1c7e5f60f7250ca0691735b7e3c74db07d36ee17b6c", &(0x7f0000000100)=0x73, &(0x7f00000002c0)="5e240fa91ba6839da0a752ca4357ffa05abd426e90eada08d49d198f7e474705c177b6", 0x23)

2.298124152s ago: executing program 6 (id=112):
r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x20007461)
r1 = open$dir(0x0, 0x80, 0x80)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x8000005, 0xffe, 0x8, 0x3, 0xf7, 0x10, [{0x8, 0xb, 0xfffff116, 0x80000001}, {0x3, 0xffffffff, 0x4, 0xfff}, {0x4, 0x4baa, 0x3, 0xd}, {0x17, 0xe2, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0xfffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0xffffffff, 0x27ffc, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x11, 0x0, 0x8bfd}, {0xfffffffd, 0x0, 0xc, 0x6}, {0x9, 0x4, 0x800000, 0x5}, {0x401, 0x4, 0x40000b, 0x2}, {0x3, 0x6e2, 0x1, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x3}, {0x8ff9, 0x1, 0x100000, 0x400}]})
ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0)
pledge(0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37)
ioctl$FIOSETOWN(r0, 0x8004667c, 0x0)
linkat(0xffffffffffffffff, 0x0, r1, &(0x7f0000000780)='./file0\x00', 0x0)
ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000200)={0x33, 0x408, &(0x7f0000000300)=[{0x1, '\x00', 0x1081}]})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x10, 0x0)
sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f0000000180)="853c1d", &(0x7f00000001c0)=0x3, &(0x7f00000007c0)="ca757b5a51962d22e1c4c4e48e778e67cabab9ba2d429e18087318c6c083dcdabfc7571bd7a70aff2c464476c1e8321c15675860e0cc5029b7017965976acfaa4d6622915a6662468f09749c744827f864ad6550259c82e669465076997ba87d1c1ea35fadf89817b9d8b4ad1aabedc728a7a64d55a06ab6d4cbe7fb3634516fe7df8bbd3ebba105992f085e2530f65bfb910ad15d3af1a6b338fdc0f7d74dc0bd82bca4e800b625907af10be804d53086d4ec2bf3ddd5386f1b5562b8f73bf5c6bc9230af87653accac1d802c894cacb4ceb980", 0xd4)

2.279507795s ago: executing program 7 (id=113):
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x8)
open(&(0x7f0000000200)='./file0\x00', 0x1, 0x8)
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x11, 0x3, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x8) (async)
open(&(0x7f0000000200)='./file0\x00', 0x1, 0x8) (async)
socket(0x11, 0x3, 0x0) (async)
setsockopt(r0, 0x11, 0x3, 0x0, 0x0) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)

2.2778467s ago: executing program 1 (id=114):
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x40000, 0x4ebfac6bbaf7929)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={<r0=>0x0}, &(0x7f00000001c0)=0xc)
ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x20c, r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0xc9)
fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x2, 0x1, 0xfeffffff00000000, 0x2fffffffc})
r2 = syz_open_pts()
close(r2)
r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x1, 0xc, 0x9}, {0x50, 0xd4, 0xfc, 0x7}, {0x6, 0x5, 0x33, 0xfffff802}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r4, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe)
ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000280)={0x2, 0x0, {0x0, 0xa90}})
syz_open_pts()
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000100)={0x920b, 0x6, 0xfffffff2, 0xffffff90, "08955c845d5a0a010042f47badbcd3ffe60c2000", 0x4100000, 0x3})
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

1.29314675s ago: executing program 0 (id=115):
r0 = socket(0x18, 0x10000000000003, 0x1)
getsockopt(r0, 0x6, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000040)=0x1000)
sendto$unix(r0, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x8, 0x1, './file0\x00'}, 0xa)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37)
socket(0x18, 0x10000000000003, 0x1) (async)
getsockopt(r0, 0x6, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000040)=0x1000) (async)
sendto$unix(r0, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0) (async)
connect$unix(r0, &(0x7f0000000000)=@file={0x8, 0x1, './file0\x00'}, 0xa) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async)

1.292215534s ago: executing program 1 (id=116):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x3f, &(0x7f0000000040)="03080081", 0x4) (async, rerun: 32)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (rerun: 32)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x0, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x6, 0x7}, 0x0, 0x0, 0x0) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x800009}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {0x0, 0x4}, {0x0, 0x7fffffff}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x3}, {0x2, 0x3}, {0x3}, {0x1, 0x9}, {}, {}, {0x1, 0x57fd}]}) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x1ff, 0xff, {0x100, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x18, 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000200)={<r3=>0x0, 0x3, r2, 0x0, 0x5})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01864c1, &(0x7f0000000240)={r3, 0x3, 0xffffffffffffffff, 0x0, 0x3}) (async)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x7, 0xc, &(0x7f0000000000)="ebffcbff13b9fdc12eaa4e713048e69931929648", 0x14)
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x806377, 0x80800007, 0x4, 0x101, "bb0065834805000000000000550edc9b493d9d50", 0x200081, 0x5}) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='r\x00') (async)
r4 = kqueue() (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r5 = socket$inet(0x2, 0x3, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async)
kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="bf30e56f81ea65f2f48172e98e56de47", 0x10}], 0x1) (async, rerun: 32)
socket(0x18, 0x1, 0x0) (async, rerun: 32)
unveil(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='r\x00') (async, rerun: 64)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (rerun: 64)

1.291169384s ago: executing program 2 (id=117):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000001480)={&(0x7f0000001440)='./file0\x00', r0, 0x3})
r1 = open(&(0x7f0000001540)='./file0\x00', 0x9cab835cfdc52675, 0x40)
mmap(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYRES32=r1])
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x107777, 0x82, 0x1, 0xb217, "bb080006020900d91050080000000f00", 0x2, 0x80006})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x107778, 0xd, 0x1, 0xb21a, "bb080006020900d91050080000000f00", 0x2, 0x80006})
connect$unix(0xffffffffffffffff, &(0x7f0000001240)=@file={0x2, 0x1, './file0\x00'}, 0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00')
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00')
mprotect(&(0x7f00004c0000/0x1000)=nil, 0x1000, 0x0)
execve(0x0, 0x0, 0x0)
sysctl$net_inet_ah(&(0x7f0000000080), 0x4, 0x0, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000200)="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", 0x1000, 0x401, &(0x7f0000001200)=@abs={0x2, 0x1, 0x0, 0x2}, 0x8)
sendto$unix(r1, &(0x7f0000001280)="b2c520e83a49652de53b2431970bf0580a4597d6a7765b44bf719e32ee1fcbf2d05bb0024719abeadb98f0b1df19d85b369f1e9612aa21c56a416d01a6bc0dad8d8603dcabc0e4a96451275d012218b799161c581b1224f71d8e4fff595a9250f8416f2f1ada35b6482222853c667c", 0x6f, 0x400, &(0x7f0000001300)=@abs={0xe, 0x0, 0x0, 0x3}, 0x8)
setrlimit(0x4, &(0x7f0000000040)={0x4, 0x9})
r2 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000310000/0x4000)=nil)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000001340)={0x0, <r3=>0x0}, &(0x7f0000001380)=0xc)
r4 = semget(0x0, 0x1, 0x281)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
setresgid(0x0, r7, 0x0)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000014c0)={{0x0, 0x0, r6, r7, 0x8f, 0x25, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8})
r8 = setsid()
r9 = setsid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000013c0)={{r3, r7, r6, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xce}, 0x4, r8, r9, 0x78, 0x0, 0xfffffffffffffe01, 0x5, 0x3, 0xbb, 0x6b, 0x7ff})

1.289903685s ago: executing program 3 (id=118):
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
pledge(0x0, &(0x7f00000000c0)='\x00')
pledge(&(0x7f0000000140)='\x00', &(0x7f0000000180)='\x8d\xea\b\xdf\x19\xae\xada\xb6\xa4\xd1\xe5=\x01rK\xa3\xb2X\x17\v\t\xfb\xba\xa4-\xb0S\x96@\x8ba\x916R\x95\x02\xeaVb\x8a\xb7\\\xaf\x01}\xa1\x01|\xfb\x9eT\xe0.\xd8\x84;\xdc1\xf0\x86P\x1e2jA\x0f\x9eh\xbb\xe0\xe6N_+\x05\x83\aD$\xed+\xaf\x91\xb3\xafv\xba\x17\xd1\x80\xfe#7%\x0f\xc2\x8d\x98\xb0\xe6v\xb3@>F\xf7\xcbm\xd2\x04\x1a\xd8\x9f')
pledge(&(0x7f0000000000)='\x00', &(0x7f0000000040)='\':\\!([\x00')
pledge(0x0, &(0x7f0000002840)='tty   \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=<l\x8c\x01\xe3\x05$\x1c\x04B\x00\xa4P\x04\xcf\x87\xaa\x96iP\x14{4\xe6\x87\x9d\x8f\bz9$\x10_\xd8E\x93\x92\xf5\x8au\xab\xf9)\xf5\xa6\xc7\xc8\xed\xb9\x1f:\x03K\xa2\xdbUshx\xbe\\\x19\xdax\xeb_\x10|r\x1e\x06p>\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659)

1.289296427s ago: executing program 5 (id=119):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000206, 0x0)
r1 = syz_open_pts() (async)
setreuid(0x0, 0xee01) (async)
ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x8000}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x3ff}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37)
setsid() (async)
ioctl$TIOCSCTTY(r1, 0x20007461) (async)
r2 = fcntl$getown(r1, 0x5) (async, rerun: 64)
r3 = socket(0x2, 0x1, 0x0) (rerun: 64)
fcntl$setown(r3, 0x6, r2) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r4 = syz_open_pts()
close(r4) (async)
syz_open_pts() (async, rerun: 32)
ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000040)=0x11002) (rerun: 32)
readv(r4, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/4109, 0x100d}], 0x1) (async)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="a70f", 0x2}], 0x1) (async)
syz_emit_ethernet(0x1000e, &(0x7f0000001480)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db8344ffaa1100fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000000000014e234e22ffaa9078f13f9dc18216d51b9b1350c0c27cac7f2a3559996d49f4c8c8a29258c8bead20071d585e542645b18584c59b8c033cc6ec60013f2e2244efbd5f28a6e4a0f5159675cd"]) (async)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
readv(r5, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1)
execve(0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r0, 0x0)
utimes(0x0, &(0x7f00000000c0)={{0x1, 0xffffffff}, {0x1, 0xfdb6}}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
socket(0x2, 0x2, 0x0) (async)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) (async)
openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x50080, 0x0) (async)
socket(0x18, 0x3, 0x0)

1.288586363s ago: executing program 6 (id=120):
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="232156ca", 0x4}], 0x1)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x40, 0x2, 0x0, 0x8}, {0xfff7, 0x0, 0x80, 0x2f1}]})
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x5a) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async)
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async)
r2 = socket(0x18, 0x3, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async)
ioctl$FIONREAD(r2, 0xc1206922, &(0x7f0000000100)) (async)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0xb0b3d5e107010036, 0x0)
ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000000180)={'./file0\x00', 0x3c, 0xfffffeff, 0x8, 0x1, 0x2, 0x3f, 0x0, 0x2, 0x1, 0x0, 0xf}) (async)
r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$WSKBDIO_SETMAP(r4, 0x8010570e, &(0x7f0000000000)={0x0, 0x0}) (async)
ioctl$WSKBDIO_GETBACKLIGHT(r4, 0x400c5711, &(0x7f0000000080)) (async)
open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)

1.288279295s ago: executing program 7 (id=121):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000400)={0x4, &(0x7f0000000000)=[{0x40, 0x9, 0xf7, 0x6}, {0x2d, 0x0, 0x2, 0x4}, {0x87, 0x1, 0x9, 0x70000000}, {0x0, 0xfb, 0x1, 0x9}]})
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834400081100000000ff0200"])
r1 = msgget$private(0x0, 0xb)
msgsnd(r1, &(0x7f0000000000)={0x2}, 0x8, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x1, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xc, 0x8000000000000000, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff, 0x0, 0x7})
setuid(0xffffffffffffffff)
msgrcv(r1, 0x0, 0x0, 0x0, 0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0x80804465, &(0x7f0000000000)={0x20008, 0x10001, 0x8, 0x1, "44f1ffffff000000000400", 0xd2, 0x2})

211.914816ms ago: executing program 6 (id=122):
select(0x40, &(0x7f0000000180)={0x0, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x3, 0x210, 0x200000008, 0x400007}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9e)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000000c0)=r1)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000040)=0x1)

211.072754ms ago: executing program 0 (id=123):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186)
r1 = socket$unix(0x1, 0x1, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffc, 0xfffffffffffffffc})
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x0)
rename(&(0x7f0000000a00)='./file1\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f00000002c0)='./file2\x00', 0x8, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
sysctl$net_inet_ah(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
connect$unix(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r0, 0x0)
r3 = open(0x0, 0x0, 0x0)
closefrom(0xffffffffffffffff)
recvmmsg(r3, &(0x7f0000002440)={{&(0x7f0000000f80)=@un=@file={0x0, 0x0, ""/4100}, 0x1006, &(0x7f00000022c0)=[{&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f00000006c0)=""/190, 0xbe}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000002200)=""/187, 0xbb}], 0x5, &(0x7f0000002340)=""/173, 0xad}, 0x4006e9}, 0x38, 0x840, &(0x7f0000002480)={0x1000, 0x9})
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r4 = socket(0x18, 0xc003, 0x3a)
setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4)
sendmsg$unix(r3, 0x0, 0x80f)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, 0x0, 0x0)
setrlimit(0x0, 0x0)
syz_open_pts()
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x7}, 0xc)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200))
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0xa011, 0xffffffffffffffff, 0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37)

210.859999ms ago: executing program 1 (id=124):
r0 = syz_open_pts()
fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x4})

210.150371ms ago: executing program 2 (id=125):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xffffffffffffffa0, 0x16, 0x0, @rand_addr="fe000000010000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}})
sysctl$vm(&(0x7f0000000000)={0x2, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0)

208.793545ms ago: executing program 3 (id=126):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10)
r0 = socket$inet(0x2, 0x4, 0xa9)
bind$inet(r0, &(0x7f0000000100)={0x10, 0x2, 0x0, 0x80000001}, 0x10)
r1 = socket(0x2, 0x1, 0x0)
syz_emit_ethernet(0x82, &(0x7f00000001c0)={@broadcast, @random="09cce9ad1b06", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x74, 0x66, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x1, @multicast1}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0xc, 0x0, {0x16, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x1, 0xf0, @multicast1, @multicast1, {[@end, @timestamp={0x44, 0x8, 0x3, 0x1, 0x1, [{[], 0xb}]}, @ssrr={0x89, 0x1b, 0xfd, [@local={0xac, 0x14, 0x0}, @broadcast, @loopback, @broadcast, @remote={0xac, 0x14, 0x0}, @rand_addr=0x81]}, @ra={0x94, 0x4, 0xa6}, @timestamp={0x44, 0x1c, 0x3, 0x3, 0x8, [{[@multicast2], 0x7}, {[@remote={0xac, 0x14, 0x0}], 0x2}, {[], 0x40}, {[], 0x9}]}]}}}}}}})
setsockopt$sock_int(r1, 0xffff, 0x1001, 0x0, 0x0)
sendto(r1, &(0x7f0000000140)="91e9f05a22fb49e9927f96a44ca15425cc80344673b1209eef227510cbe93b7f585366c0964d921e456678d26279cd6d4f9b9a86bcc06d19906f054fd003f9bf3ff98c41278ccf4cd5c52a2801e9c819d1b46374a8e1bb", 0x57, 0x402, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
connect$unix(r1, &(0x7f0000000000), 0x10)
semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000040)=""/147)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)

207.054725ms ago: executing program 5 (id=127):
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xce0c, 0x0, 0x37)
sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x3}, 0x3, &(0x7f0000000040)="290076ce963da7af11acd3c4323932cd", &(0x7f0000000140)=0x10, &(0x7f0000000180)="ffba95186024a4c10062cb808f52996ce91b9904c5ce277f5fabc25a1fcdf60c6afda9725acbb47d79b8f118f2f7f5be4a634e3dc85539d74b0472a446ca7a39d67d3d2c88a3dffcb39762fd71b7382a615d479eaf581550f2675aac3fa07c11db9af97266d6c242a4498f500eddb8df5ed9c44dbcc2f6c32bf055de861ab75e5a123ac55e3152af3e022a2c92b2a99df430a12738ecdd457e956cbb7b53057db5c208253095b3a8dcb4d22e77a08141c8eea8027d959a2fa77b3cc330b35954981b3db497ae34412d27add856d0d638c964ee0ee5c10ad49319fa52a562f9b05fc481e356d40d4b666e99ea8d3e97", 0xef)

204.979308ms ago: executing program 7 (id=128):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0xd02)
r0 = socket$inet(0x2, 0x3, 0xfe)
setsockopt$inet_opts(r0, 0x0, 0x64, 0x0, 0x0) (async)
r1 = getpgid(0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
fcntl$setown(r2, 0x6, r1) (async)
bind$unix(r2, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa)
listen(r2, 0x7) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async, rerun: 64)
r4 = socket(0x2, 0x8002, 0x0) (rerun: 64)
syz_emit_ethernet(0x62, &(0x7f0000000240)={@broadcast, @random="f27a8e046deb", [], {@ipv4={0x800, {{0x10, 0x4, 0x0, 0x3, 0x54, 0x68, 0x1cbd, 0x3, 0x61, 0x0, @multicast2, @remote={0xac, 0x14, 0x0}, {[@ra={0x94, 0x4, 0xc79}, @timestamp={0x44, 0x20, 0x8, 0x0, 0x5, [{[@empty], 0x8}, {[], 0x101}, {[@multicast1], 0x80000000}, {[@remote={0xac, 0x14, 0x0}], 0xad}]}, @ra={0x94, 0x4, 0xda}, @lsrr={0x83, 0x3, 0xc}]}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x9, 0x0, 0x157}}}}}}) (async, rerun: 64)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) (rerun: 64)
closefrom(r5) (async)
close(r0) (async, rerun: 64)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (rerun: 64)
close(r6) (async)
ioctl$TIOCCONS(r6, 0x80047462, 0x0)
ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0x40000020, 0x0) (async)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x35}, 0x2, &(0x7f0000000500)="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", &(0x7f0000000000)=0x199, 0x0, 0x0) (async)
chflagsat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x0)

51.604067ms ago: executing program 2 (id=129):
syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0xfffc, 0x0, 0x8, 0x11, 0xf0, @multicast1, @multicast1}, "af7954c6c36be905"}}}}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="87c27e33bb7a86bf70b1d91d8cc5937d", 0x10}, {&(0x7f0000000240)="0f8ede06d4e0679dc1074f1aa9e637013d896881b2050782dca39bb40e21ffc552d591267babdbdca0d62113e59e99150370061bfd1f5c9e52b0ae96ca84e3210a909ad5fde2e67bebfe4d6eb44760dbb4f7d44d1baceafa676fbffa5cc5129a46a9b9581ceef4c48e7b6eaefbc683e99b40c77f6d99617d7062c68ad4c0e5eb131cdebc68f955f17507f3cd3ec2d94af5f539f0d1df7f19f6a24ba38431abaf3dab372c0b94a446a1453fc0fcb7edd95906646dcd5f88f01ce3dea9da311237227b01f77e9aa2ec47ef62e66ea6ef49e91ca86c66ea14cc69", 0xd9}, {&(0x7f0000000040)="bbdd94dc1f38354e99d2710002000000000000fdae308a5792dfa81bd56b57797a6a4ec9bfe1687ed57c3f243927d9d9dfb3e37221e6246d6a8a30c4b8f02eabaf039d67cd60cfc56176299883dfb6948785da82905c3cc528ae9a7b3b4ce64d130f9179bc5c9f4ae8296b2d3c246d1628b1b7", 0x73}, {&(0x7f00000003c0)="51219ab7eb0182220f1323ad917cc590a2c6a7c81a45a7b4fd6fecf97a78718e", 0x20}], 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x40a)
mlock(&(0x7f0000000000/0x3000)=nil, 0x3000)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000000)=0x1c, 0x0, 0x0)

50.309606ms ago: executing program 3 (id=130):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x18, 0x1, 0x0)
getsockopt(r1, 0x29, 0x1b, 0x0, 0x0)
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x80206916, &(0x7f00000001c0))
r3 = socket$inet6(0x18, 0x1, 0x6)
r4 = socket$inet6(0x18, 0x1, 0x6)
bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c)
connect$inet6(r4, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0x8, "000000000000000000060000001e00", 0x3}, 0x1c)
kevent(0xffffffffffffffff, 0x0, 0xffefffee, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x13}, {{}, 0xfffffffffffffff7, 0xc0, 0x20000000, 0x6, 0x46ad}, {{}, 0xfffffffffffffffd, 0x83, 0x4, 0x3, 0x8}, {{}, 0xfffffffffffffffb, 0x20, 0x3, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffa, 0xa9, 0x20, 0x9, 0xffffffffffffffff}, {{}, 0xfffffffffffffffb, 0x2f, 0x40, 0x2, 0x10000}, {{}, 0xfffffffffffffffe, 0x4, 0x10, 0x2000000008, 0x100000005}, {{}, 0xfffffffffffffffb, 0x28, 0x2, 0x1f70, 0x57eb}], 0xb19, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0x8004667c, &(0x7f00000000c0)={0x5af, [{0x1, 0x90ed}, {0x1, 0x8}, {0x1, 0x101}, {0x3, 0x4}, {0x3, 0x100}, {0x2, 0x4}, {0x1, 0x2}, {0x3, 0xfffffffa}, {0x2, 0xef36}, {0x3, 0x6}, {0x3, 0xff}, {0x3, 0x10}, {0x1, 0x8}, {0x1, 0x14000000}, {0x1, 0x8002}, {0x2, 0x2}, {0x1, 0xffffff38}, {0x2}, {0x3, 0x1}, {0x2, 0x4670}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x38}, {0x2, 0x100}, {0x3, 0x1e0f}, {0x2, 0x27ce}, {0x3, 0x10000}, {0x1, 0x2}, {0x3, 0xfffffffb}, {0x3, 0x7}, {0x1, 0x1}]})
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
r5 = open(&(0x7f0000000280)='./file0\x00', 0x100, 0x20)
ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x3)
bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c50019377fa4300b046e521", 0x3d}, {&(0x7f0000000100)="1551e6", 0x3}], 0x2)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

49.577218ms ago: executing program 5 (id=131):
r0 = socket(0x18, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@in6={0x1c, 0x18, 0x2, 0xfff6fffe, "ff02000010000000000000002000f600"}, 0x1c)
getsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa)
listen(r1, 0x1)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa)
closefrom(r1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffdff86dd6036ea0700083afffe80000000000000ffffff00000000aaff", @ANYRES16])
msgctl$IPC_SET(0x0, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
msgctl$IPC_SET(0x0, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
setrlimit(0x8, 0x0)
r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000300)='g', 0x1}], 0x1)
accept4(r2, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x8, 0x0)
r5 = syz_open_pts()
ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x8, 0x3, 0xffff7e02, 0x4, "08ed9599000000094137f9534863ef7cf8ffffe6", 0x5, 0x10001})
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xdafb}], 0x1)
writev(r5, &(0x7f0000000600)=[{&(0x7f00000000c0)='I', 0x1}], 0x1)
r6 = socket(0x2, 0x8002, 0x0)
r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff)
closefrom(r7)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f00000000c0)="772acbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r3, 0x1000000029, 0xa, &(0x7f0000000100), 0x0)
getsockname$unix(r0, 0x0, &(0x7f0000000840))

48.971374ms ago: executing program 2 (id=132):
r0 = socket$inet(0x2, 0x3, 0x2)
getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000180), &(0x7f0000000200)=0x10)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x1c0)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)

0s ago: executing program 0 (id=133):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DIOCSETREASS(r0, 0xc004445c, &(0x7f0000000040)=0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801)
open(0x0, 0x80, 0x83)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00')
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
setuid(0xee01)
rename(&(0x7f0000000200)='.\x00', 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 310295  73421      0           0          0    0  syz-executor
db_enter() at db_enter+0x25
panic(ffffffff834bd73f) at panic+0x1e5
__assert(ffffffff834fbb43,ffffffff8350a6ae,3bb,ffffffff835332de) at __assert+0x29
refcnt_finalize(ffff8000387af770,ffffffff834b01cc) at refcnt_finalize+0x1db
pppx_if_destroy(205b9a,ffff8000387af768) at pppx_if_destroy+0x3d
pppxclose(205b9a,81,2000,ffff8000387b8a80) at pppxclose+0xa0
spec_close(ffff800030f9d020) at spec_close+0x417
VOP_CLOSE(fffffc806c4f83a8,81,fffffc80097fd478,ffff8000387b8a80) at VOP_CLOSE+0x132
vn_closefile(fffffc806aee3408,ffff8000387b8a80) at vn_closefile+0x12b
fdrop(fffffc806aee3408,ffff8000387b8a80) at fdrop+0x121
closef(fffffc806aee3408,ffff8000387b8a80) at closef+0x192
fdfree(ffff8000387b8a80) at fdfree+0x116
exit1(ffff8000387b8a80,0,0,1) at exit1+0x576
sys_exit(ffff8000387b8a80,ffff800030f9d390,ffff800030f9d2e0) at sys_exit+0x1a
end trace frame: 0xffff800030f9d380, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff834bd73f) at panic+0x1e5
__assert(ffffffff834fbb43,ffffffff8350a6ae,3bb,ffffffff835332de) at __assert+0x29
refcnt_finalize(ffff8000387af770,ffffffff834b01cc) at refcnt_finalize+0x1db
pppx_if_destroy(205b9a,ffff8000387af768) at pppx_if_destroy+0x3d
pppxclose(205b9a,81,2000,ffff8000387b8a80) at pppxclose+0xa0
spec_close(ffff800030f9d020) at spec_close+0x417
VOP_CLOSE(fffffc806c4f83a8,81,fffffc80097fd478,ffff8000387b8a80) at VOP_CLOSE+0x132
vn_closefile(fffffc806aee3408,ffff8000387b8a80) at vn_closefile+0x12b
fdrop(fffffc806aee3408,ffff8000387b8a80) at fdrop+0x121
closef(fffffc806aee3408,ffff8000387b8a80) at closef+0x192
fdfree(ffff8000387b8a80) at fdfree+0x116
exit1(ffff8000387b8a80,0,0,1) at exit1+0x576
sys_exit(ffff8000387b8a80,ffff800030f9d390,ffff800030f9d2e0) at sys_exit+0x1a
syscall(ffff800030f9d390) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70584d445480, count: -16
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800030f9cdf0
rbx               0xffff80002999ee07
rdx                                0
rcx               0xffff8000387b8a80
rax               0xffff80002999dff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xeabf5b5fa39ca5fb
r11               0xac82d7efce1d52de
r12               0xffff80002999ec08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff832c4845    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800030f9cde0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=215872 pid=69337 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff8000387b8a80 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff8000387b9778,0xffff8000387b9cb8
    process=0xffff80002a37e698 user=0xffff800030f98000, vmspace=0xfffffc806c6b07b8
    estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 73421  310295  48266      0  7           0                syz-executor
 54197   70979  47788      0  2           0                syz-executor
 43728  244801  54640      0  2           0                syz-executor
 43728  357527  54640      0  3   0x4000080  fsleep        syz-executor
   644  420457  44654      0  2           0                syz-executor
   644  187067  44654      0  3   0x4000080  kqsel         syz-executor
   644   68115  44654      0  3   0x4000000  smrbar        syz-executor
 54640  367258  46162      0  3        0x82  nanoslp       syz-executor
 44654  263626  46162      0  3        0x82  nanoslp       syz-executor
  9509  383580  46162      0  3        0x82  piperd        syz-executor
  8287    6026  46162      0  3         0x2  biowait       syz-executor
  2901  190612  46162      0  3        0x82  nanoslp       syz-executor
 48266  241787  46162      0  3        0x82  nanoslp       syz-executor
 47788    8496  46162      0  3        0x82  nanoslp       syz-executor
 46162   61867  42833      0  3        0x82  nanoslp       syz-executor
 42833  510308  15285      0  3    0x10008a  sigsusp       ksh
 15285   72088  18452      0  3        0x98  kqread        sshd-session
 18452  159010  79308      0  3        0x92  kqread        sshd-session
 12308   34696      1      0  3    0x100083  ttyin         getty
 79308   31319      1      0  3        0x88  kqread        sshd
 49552  145451  86267     74  3   0x1100092  bpf           pflogd
 86267  292724      1      0  3        0x80  sbwait        pflogd
 22486  124472   5440     73  3   0x1100090  kqread        syslogd
  5440  440295      1      0  3    0x100082  sbwait        syslogd
 51201  325999      1      0  3    0x100080  kqread        resolvd
 40802   90502   5489     77  3    0x100092  kqread        dhcpleased
 25342  472848   5489     77  3    0x100092  kqread        dhcpleased
  5489    5638      1      0  3        0x80  kqread        dhcpleased
 63993  111508      0      0  3     0x14200  bored         smr
 80156  431660      0      0  2     0x14200                zerothread
 81279  255645      0      0  3     0x14200  aiodoned      aiodoned
 88547   73914      0      0  3     0x14200  syncer        update
  8274  238093      0      0  3     0x14200  cleaner       cleaner
 52119  287032      0      0  2     0x14200                reaper
 63518  103989      0      0  3     0x14200  pgdaemon      pagedaemon
 79943  281364      0      0  3     0x14200  bored         viomb
 92839  328040      0      0  3  0x40014200  acpi0         acpi0
 88387  304428      0      0  3  0x40014200                idle1
 79782  150532      0      0  3     0x14200  bored         softnet1
 34181  371777      0      0  2     0x14200                softnet0
 86322   25319      0      0  3     0x14200  bored         systqmp
 71250  504934      0      0  3     0x14200  bored         systq
  7132   25596      0      0  3     0x14200  tmoslp        softclockmp
  7627   46581      0      0  3  0x40014200  tmoslp        softclock
 12274  392031      0      0  3  0x40014200                idle0
     1  519869      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 8287 (syz-executor) thread 0xffff80002a222540 (6026)
exclusive rrwlock inode r = 0 (0xfffffc806c87e1e8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vget+0x2a2
#6  ufs_ihashget+0x185
#7  ffs_vget+0x8c
#8  ufs_lookup+0x1a36
#9  VOP_LOOKUP+0x6e
#10 vfs_lookup+0x963
#11 namei+0x7c5
#12 dounlinkat+0xc1
#13 syscall+0xb17
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffc806d24a9f8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xbd
#4  vn_lock+0xa4
#5  vfs_lookup+0x12b
#6  namei+0x7c5
#7  dounlinkat+0xc1
#8  syscall+0xb17
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11058  12081K   12338K 166960K     12360        0
            pcb    17     12K      12K 166960K        34        0
         rtable   224      7K       7K 166960K       370        0
             pf    37     18K      18K 166960K        59        0
         ifaddr    43      7K       7K 166960K        52        0
        ifgroup    56      2K       2K 166960K        66        0
         sysctl     3      1K       9K 166960K         9        0
       counters    72     37K      37K 166960K        86        0
       ioctlops     0      0K       4K 166960K      1506        0
            iov     0      0K      12K 166960K         5        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1301     82K      82K 166960K      1547        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     4      0K       0K 166960K         6        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    14     49K      97K 166960K       296        0
          sigio     0      0K       0K 166960K         2        0
           proc    72    115K     180K 166960K       562        0
        subproc    63      3K       5K 166960K       171        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        18        0
       in_multi    89      6K       7K 166960K       104        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     0      0K       0K 166960K        18        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    67    307K     307K 166960K        67        0
           exec     0      0K       1K 166960K       408        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   193    150K     176K 166960K      4240        0
       UVM aobj     8      2K       2K 166960K         8        0
     pinsyscall    39     78K     111K 166960K      1492        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         2        0
            NDP    12      0K       2K 166960K        32        0
           temp    35   9111K    9174K 166960K      4498        0
         kqueue    13     20K      28K 166960K        51        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       43    0       40     1     0     1     1     0     8    0
rtentry    176      115    0       13     6     0     6     6     0     8    0
unpcb      144      101    0       84     2     1     1     2     0     8    0
syncache   336        5    0        5     2     1     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      736      105    0      100     7     0     7     7     0     8    6
arp        136       18    0        2     1     0     1     1     0     8    0
inpcb      328      223    0      214     9     2     7     7     0     8    6
nd6        152       26    0        4     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     1     0     1     0     8    0
kcovpl      48       19    0       12     1     0     1     1     0     8    0
ppxss      1192       7    0        6     3     2     1     1     0     8    0
pppxif     1576       2    0        1     1     0     1     1     0     8    0
pfstscr     40        4    0        4     1     1     0     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstlim    224        1    0        0     1     0     1     1     0     8    0
pftag       88        2    0        0     1     0     1     1     0     8    0
pfstitem    24       21    0       14     1     0     1     1     0     8    0
pfstkey    128       25    0       18     1     0     1     1     0     8    0
pfstate    448       23    0       16     3     1     2     3     0     8    1
pfrule     1360      22    0       16     2     0     2     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      476    0       55    30     0    30    30     0     8    3
art_table   40      477    0       55     5     0     5     5     0     8    0
art_node    32      115    0       22     1     0     1     1     0     8    0
sysvmsgpl   40        4    0        0     1     0     1     1     0     8    0
semapl      72        3    0        1     1     0     1     1     0     8    0
shmpl      112        5    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1804    0      327    93     0    93    93     0     8    0
ffsino     296     1804    0      327   114     0   114   114     0     8    0
nchpl      144     2167    0      455    64     0    64    64     0     8    0
rtmask      32        1    0        1     1     1     0     1     0     8    0
vnodes     216     2045    0        0   114     0   114   114     0     8    0
namei      1024    6834    0     6834     1     0     1     1     0     8    1
percpumem   16       58    0        7     1     0     1     1     0     8    0
kstatmem   264       35    0        8     3     1     2     3     0     8    0
scsiplug    72        2    0        2     1     1     0     1     0     8    0
scxspl     216     7633    0     7632    11    10     1     8     1     8    0
plimitpl   152       58    0       42     1     0     1     1     0     8    0
sigapl     424      602    0      558     7     1     6     7     0     8    0
knotepl    120      330    0        0    10     0    10    10     0     8    0
kqueuepl   224       74    0       62     1     0     1     1     0     8    0
pipepl     344      167    0      140     3     0     3     3     0     8    0
fdescpl    528      586    0      558     3     0     3     3     0     8    0
filepl     160     2485    0     2285    11     0    11    11     0     8    1
lockfpl    104       80    0       78     1     0     1     1     0     8    0
lockfspl    48       39    0       37     1     0     1     1     0     8    0
sessionpl  144       41    0       32     1     0     1     1     0     8    0
pgrppl      48       60    0       44     1     0     1     1     0     8    0
ucredpl    104      225    0      212     1     0     1     1     0     8    0
zombiepl   144      559    0      558     1     0     1     1     0     8    0
processpl  1232     602    0      558     5     0     5     5     0     8    1
procpl     664      814    0      766     6     1     5     6     0     8    0
sosppl     176        2    0        2     1     1     0     1     0     8    0
sockpl     752      372    0      343    11     1    10    10     0     8    7
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     117    0        0    15     0    15    15     0     8    0
mcl2k      2048      21    0        0     3     0     3     3     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      230    0        0    15     0    15    15     0     8    0
bufpl      280     2605    0      107   179     0   179   179     0     8    0
anonpl      32     7692    0        0    62     0    62    62     0   246    0
amapchunkpl 152   12298    0    11939    28     5    23    23     0   158    6
amappl16   200     1690    0     1667    16     3    13    15     0     8    8
amappl15   192       10    0        9     2     1     1     1     0     8    0
amappl14   184      442    0      441     1     0     1     1     0     8    0
amappl13   176      129    0      117     1     0     1     1     0     8    0
amappl12   168      887    0      861     2     0     2     2     0     8    0
amappl11   160       86    0       86     1     1     0     1     0     8    0
amappl10   152       65    0       51     1     0     1     1     0     8    0
amappl9    144      271    0      271     1     1     0     1     0     8    0
amappl8    136      120    0      118     1     0     1     1     0     8    0
amappl7    128      153    0      139     1     0     1     1     0     8    0
amappl6    120      199    0      198     1     0     1     1     0     8    0
amappl5    112      104    0       92     1     0     1     1     0     8    0
amappl4    104      379    0      361     1     0     1     1     0     8    0
amappl3     96     2325    0     2240     3     0     3     3     0     8    0
amappl2     88      573    0      512     2     0     2     2     0     8    0
amappl1     80    11746    0    11159    19     3    16    16     0     8    2
amappl      88     3449    0     3326     4     0     4     4     0    92    0
uvmvnodes   80      104    0        0     3     0     3     3     0     8    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        7    0        0     1     0     1     1     0     8    0
uaddrrnd    24      586    0      558     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      586    0      558     1     0     1     1     0     8    0
vmmpekpl   168     7172    0     7127     3     0     3     3     0     8    0
vmmpepl    168    47371    0    45642    99     3    96    96     0   357   11
vmsppl     488      585    0      558     6     1     5     5     0     8    1
rwobjpl     80    16536    0    15563    28     1    27    27     0     8    1
pdppl      4096    1179    0     1116   119    46    73    87     0     8   10
pvpl        32    13132    0        0   106     0   106   106     0   265    0
pmappl     256      585    0      558     3     0     3     3     0     8    1
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      304    0       51     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83953ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83a38600) at __mp_lock+0x192
intr_handler(ffff80002a308810,ffff8000002a3480) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff83a38600) at __mp_lock+0x192
end trace frame: 0x0, count: 8
ddb{0}> trace
x86_ipi_db(ffffffff83953ff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83a38600) at __mp_lock+0x192
intr_handler(ffff80002a308810,ffff8000002a3480) at intr_handler+0xe9
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff83a38600) at __mp_lock+0x192
end trace frame: 0x0, count: -7
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff834bd73f) at panic+0x1e5
__assert(ffffffff834fbb43,ffffffff8350a6ae,3bb,ffffffff835332de) at __assert+0x29
refcnt_finalize(ffff8000387af770,ffffffff834b01cc) at refcnt_finalize+0x1db
pppx_if_destroy(205b9a,ffff8000387af768) at pppx_if_destroy+0x3d
pppxclose(205b9a,81,2000,ffff8000387b8a80) at pppxclose+0xa0
spec_close(ffff800030f9d020) at spec_close+0x417
VOP_CLOSE(fffffc806c4f83a8,81,fffffc80097fd478,ffff8000387b8a80) at VOP_CLOSE+0x132
vn_closefile(fffffc806aee3408,ffff8000387b8a80) at vn_closefile+0x12b
fdrop(fffffc806aee3408,ffff8000387b8a80) at fdrop+0x121
closef(fffffc806aee3408,ffff8000387b8a80) at closef+0x192
fdfree(ffff8000387b8a80) at fdfree+0x116
exit1(ffff8000387b8a80,0,0,1) at exit1+0x576
sys_exit(ffff8000387b8a80,ffff800030f9d390,ffff800030f9d2e0) at sys_exit+0x1a
end trace frame: 0xffff800030f9d380, count: 0
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff834bd73f) at panic+0x1e5
__assert(ffffffff834fbb43,ffffffff8350a6ae,3bb,ffffffff835332de) at __assert+0x29
refcnt_finalize(ffff8000387af770,ffffffff834b01cc) at refcnt_finalize+0x1db
pppx_if_destroy(205b9a,ffff8000387af768) at pppx_if_destroy+0x3d
pppxclose(205b9a,81,2000,ffff8000387b8a80) at pppxclose+0xa0
spec_close(ffff800030f9d020) at spec_close+0x417
VOP_CLOSE(fffffc806c4f83a8,81,fffffc80097fd478,ffff8000387b8a80) at VOP_CLOSE+0x132
vn_closefile(fffffc806aee3408,ffff8000387b8a80) at vn_closefile+0x12b
fdrop(fffffc806aee3408,ffff8000387b8a80) at fdrop+0x121
closef(fffffc806aee3408,ffff8000387b8a80) at closef+0x192
fdfree(ffff8000387b8a80) at fdfree+0x116
exit1(ffff8000387b8a80,0,0,1) at exit1+0x576
sys_exit(ffff8000387b8a80,ffff800030f9d390,ffff800030f9d2e0) at sys_exit+0x1a
syscall(ffff800030f9d390) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70584d445480, count: -16