last executing test programs:

1.722025372s ago: executing program 5 (id=6):
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000002c0)={<r0=>0x0}, &(0x7f0000000300)=0xc)
ktrace(&(0x7f0000000240)='./file0\x00', 0x2, 0x102, r0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1043, 0x9, 0x1, 0x8}, {0x7, 0xd, 0xd6, 0x2}, {0x7, 0xe, 0xe6, 0x40fe}]})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
shmget$private(0x0, 0x4000, 0x2, &(0x7f000037b000/0x4000)=nil)
openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
r1 = msgget$private(0x0, 0x460)
msgsnd(r1, &(0x7f00000006c0)={0x2, "25053098965bdbedd9977c0fb5931834a33970cbe201ba498dc178c48f914edb25aae724ff23aaae9720146f7dd9b69779b27325b5e9966529f7f6bf836813293a59a9e27bc6e9fcfbbba6743e964838ba2256d2e65cc51dbff4411e99b975d50dd43fb8f4da19473d7ab857fc48e100891aa39d34c3a01689cbaa9c6bc2794a67e15c83432d9ac1a078e7d1ffee5ac709b4e800fe041b02f5c617190314d6eeea7cd48790c360c787a8b532e2673ccc93cafe24dc65cc68525f07d51dba746023e12c15af2bf9f66a799f879babfdce5100f5ee87a364336de9"}, 0xe2, 0x800)
msgrcv(r1, &(0x7f0000000e40)={0x0, ""/254}, 0x106, 0x0, 0x1800)
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3157ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbbd57699a5f139b672f4d335d223e7d029d6ba8af6300372821", 0x62, 0x406, 0x0, 0x0)
r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x3, 0x6, 0x10001, 0x4, 0x401, 0x8, 0x3, 0x10, [{0x7, 0x2, 0x8, 0x1000}, {0x7, 0x4, 0x3, 0x8}, {0x33cb, 0x5, 0x5, 0x6}, {0xfff, 0x1, 0x7ff, 0xb0}, {0x4, 0x0, 0xf26, 0xd}, {0xa09b, 0x29, 0x3d55, 0x101}, {0x7a55, 0x7fff, 0x1, 0x9}, {0x4, 0x4d, 0x3d, 0xc}, {0x11, 0x7, 0x0, 0x7}, {0xba, 0x1, 0x7fffffff, 0xa7}, {0x6, 0x4, 0x5, 0x9}, {0x5, 0x2, 0x6, 0x1}, {0x7fffffff, 0x4, 0x6, 0x687897}, {0x0, 0x6, 0x300000, 0x1}, {0x6, 0x8000, 0x7f, 0x7ff}, {0x200, 0xfffffffd, 0x80000001, 0x6}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r3 = syz_open_pts()
close(r3)
r4 = syz_open_pts()
close(r4)
syz_open_pts()
read(r3, &(0x7f0000000400)=""/213, 0xd5)
r5 = socket(0x11, 0x3, 0x0)
sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea1ba870500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0add009c257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18afbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002821fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea04000000", 0xb1, 0xc, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)

1.719187123s ago: executing program 1 (id=2):
syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @udp={{0x0, 0x2, 0x8}}}}}})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

1.657718087s ago: executing program 4 (id=5):
setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f})
r0 = syz_open_pts()
close(r0)
setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62})
r1 = syz_open_pts()
close(r1)
socket$inet(0x2, 0x2, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r3 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x2, 0x4}}, 0x0)
r4 = syz_open_pts()
syz_extract_tcp_res(0x0, 0x1000, 0x4)
ioctl$TIOCSETAF(r4, 0x802c7416, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0)
poll(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
syz_open_pts()
syz_open_pts()
sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0)
setrlimit(0x8, 0x0)
ftruncate(r4, 0x6)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0)
writev(r0, &(0x7f0000000140)=[{0x0}], 0x1)

1.516451339s ago: executing program 1 (id=11):
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003})
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)
open(0x0, 0x615, 0x4)
r1 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
socket(0x2, 0x3, 0x6)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0xffffffffffffffff, 0x7b, 0x7, 0x4})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffff5a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)
sysctl$kern(&(0x7f0000000200)={0x1, 0x50}, 0x2, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="e50b5be68daa40e87d2d03c322b7152af16fd73568466c520d9b2efdf45ed7916e37ef0a419d88c51c26d65f05b6179b2edf0992902812566f49707744f847b12b231a3a01d2935884304ae09a5cb2617af308d9baab7f0250e7511a9b0043593075519ab3720900b9f7a766282e0ded2c1bcab948bf21856b32984d", 0x7c)
r2 = openat$vnd(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$VNDIOCSET(r2, 0x20006473, 0x0)
mknod(0x0, 0x1ffa, 0x10000000)
close(0xffffffffffffffff)
r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0})
ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x1, 0xbe, 0x2, 0x2000001}, {0x64, 0x2, 0x2, 0xd}, {0x6, 0x5, 0xbf, 0xfffffffc}]})
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}, {&(0x7f0000000480)}], 0x2)
write(0xffffffffffffffff, &(0x7f0000000000)="ed", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
r5 = socket(0x2, 0x3, 0x0)
r6 = socket(0x10, 0x2, 0x8)
sendto(r6, &(0x7f0000000080)="cc9b002c7cd8458d594458921a32afa04bb0", 0x12, 0x4, &(0x7f00000000c0)=@in={0x2, 0x1}, 0xc)
setuid(0xffffffffffffffff)
setsockopt(r5, 0x1000000000029, 0x3c, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)

1.51551675s ago: executing program 7 (id=12):
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802)
sysctl$net_inet_ip(&(0x7f0000000380)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f00000003c0)="f1273c756a6e5c54e46e149197968d831aa72021ab1174374153f892799a45e641e6d7c511c9a3acab052f973d49484a5a", &(0x7f0000000440)=0x31, &(0x7f0000000480)="0797d72b", 0x4)
r0 = socket(0x1, 0x1, 0x1)
ioctl$FIONREAD(r0, 0xc028698d, &(0x7f00000001c0))
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1)
r2 = syz_open_pts()
ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000006c0)=0x9)
ioctl$TIOCSCTTY(r2, 0x20007461)
setrlimit(0x1, &(0x7f0000000100)={0xa, 0x56})
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000000000)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x9)
close(r1)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/80, 0x50}], 0x2)

1.515239521s ago: executing program 2 (id=3):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000000)="ed", 0x1)
recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0)
readv(r1, &(0x7f0000000040)=[{0x0}], 0x1000000000000205)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
recvmmsg(r1, &(0x7f00000009c0)={0x0, 0x800}, 0x10, 0x40, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa)
ioctl$WSMOUSEIO_SETMODE(r2, 0x80045726, &(0x7f00000000c0)={0x1})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0x3, 0x1}, {0x3fe, 0x7ff, 0x1002802, 0x4d8a}, {0x3, 0x2, 0x3, 0xb4}, {0x8000008, 0xd16e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x4, 0x8, 0x2}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0xc}]})
recvmmsg(r1, &(0x7f00000008c0)={0x0, 0xb}, 0x10, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
close(r0)

1.514277567s ago: executing program 7 (id=13):
r0 = shmget$private(0x0, 0x4000, 0xa0, &(0x7f0000321000/0x4000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x52, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x16c, 0x9dcd}, 0xcc3, 0x6a07, 0x0, 0xffffffffffffffff, 0x2, 0xad4, 0x1})
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00')
shmget$private(0x0, 0x4000, 0xa0, &(0x7f0000321000/0x4000)=nil) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x52, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x16c, 0x9dcd}, 0xcc3, 0x6a07, 0x0, 0xffffffffffffffff, 0x2, 0xad4, 0x1}) (async)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') (async)

1.478025996s ago: executing program 1 (id=14):
r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) (async)
r1 = getuid()
setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, r1}, 0xc) (async)
r2 = accept$unix(r0, &(0x7f00000000c0)=@file={0x0, ""/4097}, &(0x7f0000001100)=0x1003)
r3 = getpid() (async)
r4 = getegid() (async)
r5 = getpgid(0xffffffffffffffff)
getgroups(0x1, &(0x7f0000002680)=[<r6=>0x0]) (async)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000026c0)={<r7=>0x0}, 0xc)
getgroups(0x7, &(0x7f0000002700)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff])
sendmsg$unix(r2, &(0x7f0000002800)={&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000002600)=[{&(0x7f0000001180)="4d8854fc94c3ad27660f23bcaf2b9e0bfad8a3effe0e2e5f8c492307e1aa85bb28e244b8c8b39c99ed51e6343c4d4560ffe9e7d2ece1caabf66a5a59763533e0baa2e1178f36c4c147aab1f8dcf4976d4e503ae7693321ee469e4a06dc1f5d7f8c3844529d805a814fd4f54db6f000642d1cc6c0db7a1a4b13fc41174a665c2e7646c30aaf2f0839bc9d599a8c342f1998607c1817176ead4af0b2634dffe084bfcc19e419a57a0e294118a290d86ad3ecc91ed44e127e0cb82c91ef3fdf652c32f432d9abc99678651f3f5241ed947dc54532a9e60409f98c7eca1cb8ca1750", 0xe0}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="bd3eb0e666f37379b739cfbd87ebb0bbce1899106e8a827a40aedf558429cff35f28079ac20a80e023f41aa1a56c3aad4b6404b8a9826897ce48f7b497842e28230ac194dded3a153a5b21e3f31e73e05e2c5cae7119a35ad6b992c23ad0b60fa0a0c08013fef5734de0618d51f3b37503c8e7686364e933e7818cf051d4e307d1c3db659e214caace3b96887a94904bcef44d68c02bfeb947f57a8d597ff412d92bf5ab54e0c95b9a985e46bb2fa724201fea708839d64041e6c45ee6e4c20e30a81e874d25d0be4f90a38829cb5203f4bab4fab3eed955720055966ddd6120795c0315", 0xe4}, {&(0x7f0000002380)="7d4e156dc82cbc4f09c6bb", 0xb}, {&(0x7f00000023c0)="e00dccb72d19f0f663425444845bda05ebe76b7ba5b19dd7b947e7f5dc01eeacc432c368e932de69a826256429bb2365e6dd31639161dd63e6b9", 0x3a}, {&(0x7f0000002400)="ba7530e9f896ca63923fa6f26d10b5a7e238d12be91eeeab4dfde70b977b92677cdfb765202b62af41ac34cbedc5ef740892e96742445681e8a1c5b110372aa8b3b08dc2b1ed8f05e9e95e648e35fe1de98e66f1f82f4062e4574e222c2c141b1cdef8765551b659c813562090cb537cca527fa44d2e3809bfa9705cb5c43fa736979d984561548f45d36ea2ec92a64d5a2fb6f040313df9975817b780b32818d305de9f53821bd35d455ecb60573a74aa8eb71d999b7197960dddb847db82e07553ffba40df0ccc386bff9ebf2444a2f750f88d8b617b2202fb5a1dbc3928cbd293ac775578f4", 0xe7}, {&(0x7f0000002500)="2571385dc905e31c41eac6647f6891225ad2eb8c66d30c847fb7cccb0b4afd72f636a9b9e2f9a51a912ba6e6aad6e18192946d4cb4c276c09c82fcd7a21f1e68091ef055b9424ee3d22adfd764326dc997e487bcdd8884771d6ce182f235d66cca95a46f5f324276bb0ea2d5e1a9a68e559911d99903d69211cf88c77738177bdb7c4a5037d5affacb338b90acd83dbb31c900eef8af2a3b6b22fe24e8cacbf97a266c5564ff284a96930c9342b61c", 0xaf}, {&(0x7f00000025c0)="18f05a8eb5bd94a02327b3caeae92cfbbe5177047d72262b4922beb15cd7d9ef16", 0x21}], 0x8, &(0x7f0000002740)=[@cred={0x20, 0xffff, 0x0, r3, r1, r4}, @cred={0x20, 0xffff, 0x0, r5}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r1, r6}, @rights={0x38, 0xffff, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0xffff, 0x0, r7, r1, r8}], 0xb8, 0x1}, 0x40c) (async)
r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000002840), 0x80, 0x0)
ioctl$WSDISPLAYIO_SETSCREEN(r9, 0x80045756, &(0x7f0000002880)=0x4) (async, rerun: 32)
mknod(&(0x7f00000028c0)='./file1\x00', 0x6000, 0x985) (async, rerun: 32)
sysctl$net_inet_carp(&(0x7f0000002900)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000002940)="21380b5928d26d94e276e87c7cff7c86c5b2f86abb6aab16d95c0f07e40fe95195954c429509c83d0f2962792a6a6abd3e81978739682c9d5ec96fca010bc5e09898a060d15405b54c31be0bff517966ddbd2bdbcfafa1c20db7b4a4b6b1d0fbe1dcb7489676445dbde7d4b36940e718e412c8ed6b84126c29b86d8501747f17be22f4a10e117da3a349f401fbe24fb503e2675aaed0ea", &(0x7f0000002a00)=0x97, &(0x7f0000002a40)="6d696db052ba6aa95c4a70bff21d2ba12ac5a98f11c60a71fc3e65e7fc35399e069a4f4419f47be1ee0e5e89f73bd729bad28f96902d3f1d77c8b020069787913fc3c320acb81c560fdc6c78e778607f8530598a7c3e362750fabdc9408e6cc4af1d61443fbbf5140b2ff019e4d62eeb3754479ca113fdb456aa5fa81d8eaeaa740c29d8b942f77cf858b31ad552457f0e2bcdd9b54a0fbbb997f909f087a5bc6e0d6d21865305a3af7793f7e25bf26993f1b4d5b0cac5935eb248588328725c072ebe03d53eb7ad420a1b377f2dc76d8b85489df6eb6ead81699cedd027f1b1ea8ee1ab", 0xe4) (async)
r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002b40), 0x800, 0x0)
ioctl$BIOCSETWF(r10, 0x80104277, &(0x7f0000002bc0)={0x4, &(0x7f0000002b80)=[{0x2, 0x4, 0x0, 0x4c}, {0x9, 0x5, 0x8, 0x659}, {0xd, 0x2, 0xe}, {0xff, 0x8, 0xff, 0x5}]}) (async)
socketpair$unix(0x1, 0x8817fdfbcb89d176, 0x0, &(0x7f0000002c00)={<r11=>0xffffffffffffffff}) (async)
r12 = dup(r2)
r13 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000031c0), 0x80, 0x0) (async)
r14 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000003200), 0x8000, 0x0) (async)
r15 = openat$vnd(0xffffffffffffff9c, &(0x7f0000003240), 0x8, 0x0) (async)
r16 = getuid()
sendmsg$unix(r11, &(0x7f0000003380)={&(0x7f0000002c40)=@file={0x0, './file1\x00'}, 0xa, &(0x7f0000003140)=[{&(0x7f0000002c80)="d770b2ee20691d55d52d8c3cb7bed3b06c558b9429d8aec70bd29f9a71ac3362145e84ee9a08624c175d2bc9160be8bbb45ce9f5f2e663d19e4447f59a19509612baa693ed3c0aa699c1014e5afac685d714", 0x52}, {&(0x7f0000002d00)="39f77b4cf7e8d51fbb311fdc3bfa11efd907aa45c888362168acb63110dc3ccf519b6f99338b38b0438b31dafdfa896bdb55f99ee97ca307f3f3fa4c11ee5b7e8947182a4d97a0ff107593a5a4028168c67b216b576c42592a8c28895ba2618744d677ca238b0902bd120690988fe2441f172cbe07b503e3bb367f2068604a", 0x7f}, {&(0x7f0000002d80)="e2c6d12de57b5fdb1d8312", 0xb}, {&(0x7f0000002dc0)="56f98105e736eea93ff4480f42c5e5adf5ed37d8149b2c8725d0bbb42450740020c65a5574a8288df810254f0ca951f5bab8616fcaa86e2bc61d5ca8a72db44ffc6845573912bd123a5c5368abe6152e5ecb82f8d07a82d9f37861a32dbc687a2340ed4ddc7b6e4695d619d6a0266b430a9e4ee554b6165a8aebdf6aad42e941d481941d5ff59d2cc91bda3d6be9a486fb02e06487c0052f7a1cc68c83555b4afb1e7424e44347f2483d952261a3b7f87849767ff2ef1f537e86ebdca80458ee6f3e1dc8f4132bffb159ce17ce175e8996847ff7a90e19846346c3a8b6230fec0c8c746db692398b6c5a", 0xea}, {&(0x7f0000002ec0)="8a40ccd301c226cb866e8eb06aeaa40c1ce8850723bfe2c6706d06094f34ee466e3692915b73301b6590ca30064232bc24530a53c32fe629cfc2c94857ac63c2b5064a45c6e9fd916af8dafaac4fcd2c3c81e7586aca6c60a4f938cca68c831c9088cb814c4c99de88a2e16f34c8a569eb7295b5e326b37cfa55e2d5b57f86760317864468ed8c056d351984e8ad8a898f46d46060747c72916ed52d3b5735f5426cc2f09b8d67bdf96649602b2f38c15a84ace8481a3e", 0xb7}, {&(0x7f0000002f80)="111836d12375794841adccbdb96cdadd6043de4f4fc9f591f4021ee23881404a1a19045effdab18492e6eb8a14b0ca32e730d1360912df07379040c9487fdf3082311a78d484f3f261887c26a7f9ef427d169e34fed141f51c21cc9faca36f8d6182aab7fb93679b72cd204d0d7a67707d7b9df5d9f0c7d6fc0eb2c7ca9c5ebebb57598f9ed51dac97e1cb8e527233d27fdb4ee844f2a4f925617185f0b2944db41179ccb82e76f25bf33b309b9a461f5814e92a9ef3847adfc5035233cfcc31e1d5b7440a6b4f986782ecbb3b4fa8817ab3906aa3d6", 0xd6}, {&(0x7f0000003080)="4c9fbe62342dfb2e2aaa37ba33da84018cc1cf3f25e0bd35f389e3ff62aa91692a35f3c6797a0ba0a6b494db1ed788e2786b41eab8122a", 0x37}, {&(0x7f00000030c0)="dafedfdef36c819b1a9934da2073365db4ef7534389b92510337ef989ad405f96e0c42c3f358137a08e9094df6fb030b0fa1f2b665023a71a45108850faa9ef8a6fc2adf3ded80fca10aea41e18bbaacc095a188396d66984c929bc3c20ce86d8660ffec560ab0eae84220a56721d749b5c3f04f506d818da9", 0x79}], 0x8, &(0x7f0000003280)=[@rights={0x20, 0xffff, 0x1, [r9, r9, r0, r2]}, @cred={0x20, 0xffff, 0x0, r5, r1, r8}, @rights={0x18, 0xffff, 0x1, [r12, r10]}, @rights={0x30, 0xffff, 0x1, [r13, r9, r9, r0, r10, r2, r14]}, @rights={0x30, 0xffff, 0x1, [r9, r9, r9, r9, r2, r15, r2]}, @cred={0x20, 0xffff, 0x0, r3, r16, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r3, r1, r6}], 0xf8, 0x5}, 0x0) (async)
chmod(&(0x7f00000033c0)='./file0\x00', 0x48) (async)
getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000003400), &(0x7f0000003440)=0xc)
mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x0, r11, 0x8) (async)
chroot(&(0x7f0000003480)='./file0/file0\x00') (async)
sendto$inet(r12, &(0x7f00000034c0)="0ddbf7e1c5509299c6d13bc00582a4a8d7f7b2407089c91accc0985f7c85c7c69d21c838e42525bf0203cfcc571befbc77b6c01ddb553bb6b9054518dd904d18baa3e6d0520296ba83264ee319e11a6fa732a5d9ea10b5199cf2c97503772d73061e008509cb3b1608ab9e9e80fe30331978c54d5ef9f02981da6e656688a790eaacd73a052eb0d793d25b4d02981e4e929f1b1804bd955acb46f25687936151f35b910ee017b018e7675a40ee103c0aba0e63a78459dcb98b3f6847cda91fa1bb6ffbf968e0a386d4d7eae8043bd8821ef971bec3ce0f8c9080c0666e", 0xdd, 0xa, 0x0, 0x0) (async, rerun: 64)
semctl$SETALL(0x0, 0x0, 0x9, &(0x7f00000035c0)=[0x700, 0x8, 0x7, 0xe0ed, 0x4]) (rerun: 64)

1.460457726s ago: executing program 7 (id=15):
r0 = getpid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r1=>0x0, <r2=>0x0}, 0xc)
r3 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000440)=[{&(0x7f0000000040)="276446490b5c6c74a43141082f0dab74229f60943e39353b6d74288b86004520ddc884327ec9615d385281d23cf157cee9a11087771d43e59278cfe5b9c61dda579f83fc973c3efedad67eb17516", 0x4e}, {&(0x7f00000000c0)="d9c37d89fdf622afd97dcd0bbe37d35e3591e2c08bbd5f73d1e52b7a2c2fc9f46637a693187bd2a420769c62e1d66f63", 0x30}, {&(0x7f0000000100)}, {&(0x7f0000000140)="63a6089f275912ccdafdaed10c56003bb8d82412", 0x14}, {&(0x7f0000000180)="de155be361fa43a4241e5c82e95ab97f1faa6632b362933afe583c25206db175499d1ab8a34d59f5d13af785749825b997a128fc3fe085783b4428588e94966b58b271a775d3ccb74be658ba6644c20b4624e03309e5671dd3c214a49a73739381054ee4b80902dc9fbbad5ff32c37d90fa1bf2dfb0fdf1e1fc80bbc71680e365bdaa335d2686f844699b281e0998cac64eb63387d8e5e51f8dea970beb43d971b2181a91210f0b8a6ece681a0a69c14", 0xb0}, {&(0x7f0000000240)="65b1d6ff7860b68170a9586b10469232f67e91ce0136e574ad3441a731a4e68426641e7c8f19c367310e021db93731db6814d15f4cdcd437e96f8e278870fee71feb817987a27bead0c283b6a06aae2204425d2dba6a695433a3a2257389be4712636f7a3757e23eb9f3f7fbce3a39e76136f411e1f0e9d2978f5d682255c02874409d98dd0e6662cd852b41814817c1d83aa2ce0384c8c495d93fb4cdff5f5a490dc7ae3d66b173f5a95a8cda91dd5e522395cd39e7d2984b17d7f603381d3715db3b7a", 0xc4}, {&(0x7f0000000340)="511729c410e14d73abac04a5e4df1845d6493253a62fe864d991298f1432972d620e05e822cfca4cd2d01f5ba11a89f71614815773065810f34d09d76813523bba1448748eac62587f0aaebd326ced05e8c278d96616856932928abccb043da45a9c39bb42ec5281af0858e3e7dded5215e8034af4748821d2ecef8befa2316e4c07ce28554463c79d6a1c83bdb7857d5269823899ca449b88e581cb5b24dd1942d201ae605d46e8f3d9f423fa3796cbb324e46d232b972ea01e08ca0d8db4940a4933f23f3f92b8afcba937a2ad41b5", 0xd0}], 0x7, &(0x7f0000000500)=[@cred={0x20, 0xffff, 0x0, r0, r1, r3}], 0x20, 0x5}, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x30, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$SPKRTONE(r4, 0x80085301, &(0x7f00000005c0)={0x6, 0x7})
sysctl$net_inet_ip(&(0x7f0000000600)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="b088f4ebf50ca6f5ab560bb408ce009aad417f4d9e4e22867b198ddc5235f8c25a2b8710c2f0289e04faf940129eef263b36c668a6d8b6b92d96b734dfbb96c2d39d40e20f950acae5fde044968f17f0edae6a3c855f272c4e401bfc1e6e07edfcc2ed48df5c7691067750cd910a51c67713a8e00443cb0f58f870b314fafefdc22601275b5d7397b4f06716e961ec7d79d85a7baf3d79d89b4c22", 0x9b)
fsync(r4)
r5 = accept$unix(r4, &(0x7f0000000780)=@file={0x0, ""/9}, &(0x7f00000007c0)=0xb)
r6 = accept(r5, 0x0, &(0x7f0000000800))
ioctl$TIOCSCTTY(r4, 0x20007461)
connect$unix(r6, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0xa)
r7 = geteuid()
fchown(r6, r7, r2)
r8 = openat$tty(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0)
ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f00000008c0)={0x0, 0x1, 0x2, 0x6, "4674e9b2877ef8231344bcd0e7d1b97fd92018c4", 0x1, 0x7})
close(r4)
listen(r5, 0x0)
getpeername(r4, &(0x7f0000000900)=@un=@abs, &(0x7f0000000940)=0x8)
getsockopt$sock_timeval(r5, 0xffff, 0x1006, &(0x7f0000000980), &(0x7f00000009c0)=0x10)
flock(r8, 0x4)
execve(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a80)=[&(0x7f0000000a40)='/dev/tty\x00'], &(0x7f0000000bc0)=[&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='/dev/tty\x00', &(0x7f0000000b80)='}\x00'])
unlink(&(0x7f0000000c00)='./file0\x00')
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000c40), 0x8, 0x0)
sysctl$hw(&(0x7f0000000c80)={0x6, 0x16}, 0x2, &(0x7f0000000cc0)="9fde77dae4f41f0ada44c27b95086a1d75c3434464ccd44b372925b6e2913fda717262440361ca25f51e8f67bd", &(0x7f0000000d00)=0x2d, &(0x7f0000000d40)="c943868a621114534d55bfaeee7955607d5ab095714e1ba954f4214c85ba2fff2c0b86d7343b30654900d4c0c73094257819a2f7e76a81e68e6f44e834f4fd8c267d5765b25a414f53843e2da17bd4be9a77e91f1f05181da2432fe6c813eff9e41181e65d153e1d9236367220bd6cd19753321920be", 0x76)
dup2(r6, r6)
socket(0x1, 0x4000, 0x6c)
shutdown(r6, 0x1)
open(&(0x7f0000000dc0)='./file0\x00', 0x80, 0x150)

1.456253054s ago: executing program 1 (id=17):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x2002, [{0x3}, {0x2}, {0x2, 0x2}, {0x3}, {0x0, 0xfffffffe}, {}, {0x0, 0xaa59}, {}, {0x0, 0x8}, {0x3, 0x20}, {0x2, 0x10001}, {0x0, 0x2}, {}, {}, {0x2, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0xfffffffc}, {0x0, 0x7ff}, {0x3}, {}, {0x2}, {}, {}, {0x2, 0x7}, {0x2, 0x10003}, {0x0, 0x200}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x7fb}]})
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0x80a1a4, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff})
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
ioctl$FIONREAD(r1, 0x8028698c, &(0x7f0000000100))
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@remote, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0x1)

337.826304ms ago: executing program 5 (id=19):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7fff}) (async)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7fff})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
kqueue() (async)
r2 = kqueue()
kevent(r2, &(0x7f00000000c0), 0xd10, &(0x7f00000001c0), 0x15, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0)
ioctl$BIOCSRTIMEOUT(r3, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) (async)
ioctl$BIOCSRTIMEOUT(r3, 0xc0307006, &(0x7f0000000080)={0x1, 0x10})
r4 = socket(0x18, 0x3, 0x3a)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
writev(r4, &(0x7f0000001600)=[{&(0x7f0000000140)="1bc41ca5a8a800614e6cabd65bb44218d1db8ebec00691022489cea6f062d21f430ab3a68021c271b6fdfd8a6c2a69b811267049360d697db3949a249597baed2749344d02027a4d6749f82328ee212f98a8e7c0f951858c5ab0b96bf7a491e143c2f253afc7b9ecbcd7cdf2a9d9c32682fdb13ed9c0afd04bd17450824fcbfbe5d42e9d492615a649dc40d74877a2de18c1905f5b09df0f5dd15f473087c491c48b063d64519d25e157311d1a4d3631d9eff73a74ff636c27e1699af511d51eef4847dcf2ffe764e0dc867d0c98275660", 0xd1}, {&(0x7f0000000040)="1aba3a5e7b9e92e5cf610ef81c03f76948f42fe7e9cdccc6aa62335b02d325efb66fbae3653f05b4d682f090472b50621ddbec7e5ead48b29a8e32ec6c58d11e5887389a82a40507198538ca60c77c4eca86ee39f5983f5fb80c5f6e89a3835f20a547c8d7af9ea9f9437eeb17ab0a6ff6d10d0b344c38a2c5", 0x79}, {&(0x7f0000000240)="530dcd08348eae9ed09228cca73c2d0a8a41ad518f7d3434b7e9b59cf094053fd9b4d409897c47748c759a240ac0993cea", 0x31}, {&(0x7f0000000280)="df63b393026272f7eb9889c189dcecb77a738ff230432e0d3417bee48049b062fd5f3719cfccbd1cdbb06a056cf5c9b9cac5df85584d3f911a3ce15da540d568447584a3cb3ac0c447355d2563745e8aa2085be1573a785dc1bc1ec686638e9a4e06465906d601d84f3308eece380b721922e7cc97839bdd45cbf20cb6650c5046b3570d520ac15841b0d6e67afeaff98aedfdb1d759cf56315b57c845d62804a4bbeec8581e00bb0cd4e50760da437605b99655a18d344a4dacbe707aa25aef1ce25ad2b1862d121df7d458e16e66bfb3a8bc8d2df010dcd50b65c1f56fb375b134effd", 0xe4}, {&(0x7f0000000380)="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", 0x27a}], 0x5)

335.844902ms ago: executing program 6 (id=20):
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @loopback, @mcast2}}}}}}})
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000050"]) (async)
syz_emit_ethernet(0x47e, &(0x7f0000000140)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x448, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, [@fragment={0x2f, 0x0, 0x8, 0x0, 0x0, 0x2, 0x67}, @dstopts={0x8, 0x4, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf8}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfd}, @enc_lim={0x4, 0x1, 0x78}, @jumbo={0xc2, 0x4, 0xffffffba}]}, @dstopts={0x11, 0x1f, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x7fffffff}, @pad1, @pad1, @generic={0x81, 0x34, "cada112d8a630b7396e146f87e42125bfd159e7cff71a5bbaa253af700604d72df479cbef4bc47055181092f188d9b2670f1af18"}, @enc_lim, @generic={0x3, 0xab, "316350ae649b56906281d926ec1aad5e28df513f8e76e6dafc286d20575fe215502d042f062500153a3d9b4382a81a4ea9c31b1d95a6847e107c0634481e22afca196adfb80b90d43a3db701d07f8ef47677a41e77f33864591aa787dd50d74f603feedea55b62f8a198b8dd7fc76ac99bf9cd23d1332311888b50d6ea54b8e8c6364d1036824f88c7e5b31a93663903e66345bb27304576d050ccb5bf47ec49bb80fb5772670b093d0bec"}]}, @dstopts={0x1d, 0x3, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x38}, @jumbo, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x7d}]}, @dstopts={0x29, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x33}]}, @dstopts={0x70, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0xb7}, @generic={0x0, 0x93, "549309b99d7126767f027e3321f838afaf140178b778ec26eaab8b6f9e8aafb2d52af6a4338ccc130f8427ef6d212bf6e68d58e88ab2a8cc1089bdd7c8388783da66bad15279b18c85e269c3afd8b7b95b0055691ada211558b4478914912cff60449c6e2d2864fa504e1326c2a5dd2ff0592a71580d63ea74dee33e84ba5209486c172194cc56e58ff2c31c35776bebdf5074"}, @jumbo={0xc2, 0x4, 0x8}]}, @routing={0xf0, 0x6, 0x0, 0x4d, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @remote={0xfe, 0x80, '\x00', 0x0}, @empty]}, @hopopts={0x1d, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0xffff}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @ra={0x5, 0x2, 0xa1e}]}, @fragment={0x2c, 0x0, 0x1, 0x0, 0x0, 0x2, 0x66}, @hopopts={0x6, 0x2d, '\x00', [@generic={0x3, 0xe4, "c65ee77971311b06316e65c0941ca8e5bd57c5fafc75345336c54e9000e95d33964c24a38bcfecfd8ffa72e8ea617b911d9418b4407d08479be795a6d7bac2b98ff15f1de9b414e3b8e62a141f6ca809130e5e0956dd5d37e098ac40e3e001b41e3ec6d49ee9f7a67d2d6574a2942e3e9f37eb9196cfddf387f20b77c018dd8b73667b132c5da66a1c23b34bd02d24a1912346f3949cc36ce163846eeb04b891b063688a7d78967cd1cf858f0f0fd1ce66828f7131e94ce4a8423da8a376d21229a186522e0bfe0e5c301a71fb38e917295213a2e88179fa24768c97ed9d09d6f7fc234a"}, @enc_lim={0x4, 0x1, 0x3f}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xa6c6}, @generic={0x2, 0x6f, "b084e6270a698fdefe6d8e69d60aa0ae4b24d7bf09fa9be77a5cc32b42c02811350aef6a819a68de08b78dca19e51ae50ff30f6ececdce9ed18f48e321ba701e57d8259154a05819f93ef9c66cb90c3cf3ba1ca8384bf0e3b190931f88168c922a4e160de6f49a25f75bcc279ec9c9"}]}], "e6af576280da5408"}}}}}}})

334.444184ms ago: executing program 6 (id=21):
syz_emit_ethernet(0x2a, &(0x7f00000019c0)={@random="99f0fdd8fcf2", @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x3, 0x2a, 0x1c, 0x64, 0x6dcd, 0x29, 0x2, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x3, 0x80}]}}, @icmp=@generic={0x31, 0x9}}}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
chdir(&(0x7f00000006c0)='./file0\x00')
recvmmsg(r1, &(0x7f0000000640)={&(0x7f0000000600)={&(0x7f0000000140)=@in6, 0xc, &(0x7f0000000540)=[{&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000400)=""/7, 0x7}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x6, &(0x7f00000005c0)=""/43, 0x2b}, 0x5}, 0x10, 0x2, &(0x7f0000000680)={0x0, 0xff})
writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb", 0x2}], 0x1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$WSDISPLAYIO_DELFONT(r2, 0x8058574f, &(0x7f00000000c0)={'./file0\x00', 0xffff, 0x10000, 0x7, 0x1, 0x2, 0x7, 0x8000, 0x1, 0x1, 0x513, 0x8})
msgget$private(0x0, 0x4) (async)
msgget$private(0x0, 0x4)
syz_emit_ethernet(0x44, &(0x7f0000002740)=ANY=[@ANYBLOB="06000000000000000000eae1810026000806000f88a8060e0009000000000000ca26bc4a09561b41557b6e23f34faaaaaa0200000000000000e198f55fe17a8a8eb4b400"]) (async)
syz_emit_ethernet(0x44, &(0x7f0000002740)=ANY=[@ANYBLOB="06000000000000000000eae1810026000806000f88a8060e0009000000000000ca26bc4a09561b41557b6e23f34faaaaaa0200000000000000e198f55fe17a8a8eb4b400"])
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f00000002c0)='./file0/file0\x00')
rename(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f00000003c0)='./file0/file0/..\x00')
r4 = shmget$private(0x0, 0x1000, 0x3e3, &(0x7f0000ffc000/0x1000)=nil)
semop(0x0, &(0x7f00000000c0)=[{0x2}, {0x0, 0x2ff, 0x800}], 0x2)
r5 = socket(0x18, 0x2, 0x0)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="774a9071752648453e44337c031b179047adbe98173b1c7a5165870da473e8347ada3113a4440e6a4cf0d05315fc22e74326ee56e82a13cd0a71e9e2acccb61d3c3e5ccc8933c5778a0cd060e00c2be3cd26088e8a52efa873d6b17433c05dc2c3a60852cf1fddc678425beac1fd8eb06cf30c1fef6fe647d1eca63c254c8259d983bd2cedcc0d3a716f4ae701cb607d1313ea1f7b408221efdfa7", 0x9b}, {&(0x7f0000000000)="075040afef1408f629dbe778fc0973b18094a2f351e63c58cd7febf4", 0x1c}, {&(0x7f0000000280)="7846026aba35b3222c10beb1ad5c0966e99eb922022a2fb9bdcdb43e552037abf5caac5dd547795192bff3a5cc3aaeea506b11b3a6842da441a5d484dbffd7cece8262ca931f47224bb9df8c85259169219763345c9ed99cca015ba0fd780a8530c611e22fce4d6737a9613371f402145384f1d859946aaf7d8f3492385a07e5905499344e6b8b425f7b11cfb0d5a79111c79574fc0f25e709e0e827e7a3ceb6acf6a4aa523b2340a083fc7cb2ca7d85fd4ff7acc19a4347d0a7121d50b36bd698bc0442fe7232cb66d3e3b4da5e0847c4fb6c6fd9c3af4060407e8224d44741461fa61cd7d12de4141a3f22c7961c225f181143a79832b71b058f508698a6859898759d8b9d6da207559353b94ffc31d6ff68d200b7ed422b2a08e9aa765d2903ddd7409d6d96ffbd86500cdc4c183879f5d6814f11e793c89db7fa5a55b9b5392472dc504c42cf721ec227786885a86b6f1d7c5408971dcbd2d30d05fe777c562891c0e88260aef743c8c2d6b62704e75d9db54237297bdda56ad10737a94b63e7e50e5d99b3139c33f4b0a4b19aca8a7cb535d5fcd0396354751d1218ff0166ad3fe0046d854b304e1e2c5a63a7e9ce3d3e5169ea525f5c1bd46204bf6ef16e31c9d1ded43e88553bf402eda3c968f980ff2b31555a5dde34de549dbd0bd4fee138abcba64de206d7ca8a5285b5536c29edcd25665b7fd3bc8e15d33ccadd8021dcb84bf9685295e17dd2ab715aa313490569a9ab8cdd894e2780f9f67449b42fd9eb902ca4ba4f659c77349178298980f0eb2bbde9d782df762fb3be33353fca3685706419debda3842ff663c86b35cdc7662e37899a9df20ab6452fd0feef6dd9d7b2082bc42e898380690e64611a0f4a93eb173c1d7cab821ee30e611dcf94ba72fcbb89bc3bd04a370cb522fab6759b8c928a3ef5b871b7cfb07c7f694dec4648551c1e1cf243e1fb42a3822198cae19b7ede0a504c8bef1ba565e9d8b0e0206e1fb7528a08be4e465707d4c2755f0a22664983bc178acd2d5cf58859bc92b44d97bc98bad8f0038e2a454f1c9c945635bbf08d56c3eeffb12e203c614a10d33f0948a6fc03d03940df51c2c72c77ce9d528e4138faa7ffcd851648f360188c04dbdb77f3b06d0301de023d3845209fb3af3f6d05facee7c04c7bd2be49309dc8bc58a1fdf1c2013ec6d0e1924d510ddd1da31c34e44df40bc79ce86104ab6a53049bd990f03146c4054260a6fd5740d98fa04a56ee36722df7c738683ef250e8018217faa4ccb75e6bfb46db13a5150a83e44f5259f2caa58cc66b5b1e2951ebd9d55ab1147b", 0x3aa}], 0x3)
shmctl$IPC_RMID(r4, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106)
pwritev(r6, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff)
syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db834439c11600fe000000020000ff80d14400000000000000000000000000aa"]) (async)
syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db834439c11600fe000000020000ff80d14400000000000000000000000000aa"])
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0)
pwrite(0xffffffffffffffff, &(0x7f0000000080)="4af1", 0x2, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSDISPLAYIO_DELFONT(r3, 0x8058574f, &(0x7f00000001c0)={'./file0/file0/..\x00', 0xc, 0x6, 0x4, 0x0, 0x6, 0x7, 0x5, 0x2, 0x2, 0x8}) (async)
ioctl$WSDISPLAYIO_DELFONT(r3, 0x8058574f, &(0x7f00000001c0)={'./file0/file0/..\x00', 0xc, 0x6, 0x4, 0x0, 0x6, 0x7, 0x5, 0x2, 0x2, 0x8})
msgget$private(0x0, 0x8) (async)
msgget$private(0x0, 0x8)
sendmmsg(r0, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc) (async)
sendmmsg(r0, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc)

333.63391ms ago: executing program 0 (id=1):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r0, 0x0)
r1 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x0, 0x7b98, 0x9, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0xde51, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x8}], {0x2000, 0x6, 0x5}, {0x29, 0x6, 0xb0, 0x2}}})
kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0)

331.643776ms ago: executing program 7 (id=22):
mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf) (async)
r0 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x2, 0x4ebfac6bbaf7949)
dup(r1)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o4', 0x2}], 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) (async)
ioctl$VNDIOCCLR(r1, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async)
open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)

324.447841ms ago: executing program 4 (id=23):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PCIOCWRITE(r0, 0xc0107003, &(0x7f0000000080)={{0x2, 0x1, 0x7}, 0x1c08, 0x3282, 0x7f})
ioctl$PCIOCWRITE(r0, 0xc0107003, &(0x7f00000000c0)={{0x8, 0xc, 0x1}, 0x68, 0xd8, 0x5})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

312.710969ms ago: executing program 4 (id=24):
ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f0000000480)=[{0x83, 0xa8}, {0x3, 0x7d}], 0x2}) (async)
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {0x2}, {}, {}, {0x3}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x3}]}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e) (async)
ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000080)={&(0x7f0000000040)=[{0x24, 0xf0b1}, {0x20, 0x4}], 0x2})

119.011854ms ago: executing program 0 (id=25):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
chown(&(0x7f0000000180)='./file0\x00', r0, r2)
r3 = getuid()
setreuid(0x0, r3)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea)
fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff)

118.302912ms ago: executing program 0 (id=26):
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e)
syz_emit_ethernet(0xf, &(0x7f0000000000)={@broadcast, @random="57586f4fcf87", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @loopback, @broadcast, @loopback}}}})
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
execve(0x0, 0x0, 0x0)

113.759739ms ago: executing program 6 (id=27):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
ioctl$KDGKBMODE(r0, 0x40044b06)
r2 = accept$inet(r1, 0x0, &(0x7f0000000040))
getsockopt$sock_int(r2, 0xffff, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$WSDISPLAYIO_GMODE(r3, 0x4004574b, &(0x7f0000000140))
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0, <r6=>0x0}, 0xc)
r7 = getegid()
chown(&(0x7f0000000180)='.\x00', r5, r7)
r8 = msgget$private(0x0, 0x300)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000200)={0x0, <r9=>0x0}, &(0x7f0000000240)=0xc)
msgctl$IPC_SET(r8, 0x1, &(0x7f0000000280)={{0x2, r5, r7, r9, r6, 0x94, 0x4}, 0x5, 0x7, r4, r4, 0x5, 0x401, 0xfffffffffffffffd, 0x838})
shutdown(r1, 0x0)
r10 = socket(0x18, 0x0, 0x6)
mknod(&(0x7f0000000300)='./file0\x00', 0x10, 0x8)
readv(r10, &(0x7f00000017c0)=[{&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/18, 0x12}, {&(0x7f0000001640)=""/128, 0x80}, {&(0x7f00000016c0)=""/253, 0xfd}], 0x7)
ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000001840))
symlinkat(&(0x7f0000001880)='./file0\x00', r1, &(0x7f00000018c0)='./file0\x00')
ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000001900)={'./file0\x00', 0x6, 0x8, 0x6, 0x1, 0x0, 0x6, 0x101, 0x1, 0x2, 0x7ff, 0x5})
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000001980)={0x3, 0x9, 0x7, 0x8, "27f829b68b727fe4037ec53734251f7657b3589a", 0xd, 0x5})
msgctl$IPC_RMID(r8, 0x0)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000001a00)={0x1, &(0x7f00000019c0)=[{0xf, 0x1, 0x20, 0x81}]})
ioctl$KDDISABIO(r2, 0x20004b3d)
getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000001a40), &(0x7f0000001a80)=0x8)
r11 = getpgid(r4)
getpgid(r11)
ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000001ac0)={0x2, './file0\x00', './file0\x00'})
close(r2)
open(&(0x7f0000001b00)='./file0\x00', 0x10, 0x159)

109.678976ms ago: executing program 5 (id=28):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
r1 = dup(r0)
ioctl$WSMOUSEIO_SETMODE(r1, 0x80045726, &(0x7f0000000000))
ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100))
pread(r1, 0x0, 0x0, 0x7f)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
pread(r2, &(0x7f0000000080)="aa", 0x1, 0x8)
unlink(&(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000738000/0x4000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000269000/0x2000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2c}, {&(0x7f00005c7000/0x2000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x5}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000196000/0x4000)=nil, &(0x7f0000066000/0x3000)=nil, 0x3ffffffffffff}, {&(0x7f0000491000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x240000001}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x5}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'})
ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, &(0x7f0000000140))
socket(0x18, 0x1, 0x0)
sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r3 = syz_open_pts()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
close(r3)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, &(0x7f00000000c0), &(0x7f0000000100)='c', 0x1)
syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5)
r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')
sendmsg(r4, &(0x7f0000000d00)={&(0x7f0000000200)=@in={0x2, 0x3}, 0xc, &(0x7f0000001100)=[{&(0x7f00000008c0)="f563bd9371bf196d6a477449cb3f00518d037aabd8d98943a854909433ba749d3e71ba797b9bf1782bb11668e9eb600bcf65baf5a61950438ba9e2dc9c826a33d1e466922744e4002b3b9b2b5657d437cbf01f04eaac090160e9f49fb4a50fac9d491dc8444a768d45ff3265e6", 0x6d}, {&(0x7f0000000e40)="3da65a8e09d4ff8db702d17cb70136b74c1237ed6045258db7f7f0d3cbb90a311a93a8aaa8d75f24d516885b5b252ef59feea5cff4a958dd75f4f2cc2f2edfd16bdd36470d6c619a9984763def7dcd770d009cad21cc1fcc6f7dd027a35a617fa43dbea529d2532c098572974fa6c71c1e5abcc9e231e240f84f8ffe17798fda3d8b355d76ece2a96ecca9dadbaa360f13d72627f889d12c4ca6499e69380977ba8b8578835a2cfedd2bdfaae73327a55c9bf3bec1dc74428042bf72f8de468c976c19fa50abd993f46622c4b98ab6a4d4ee2cce10c82f60b43e3e6f08fa98bb0c00b0949c7876576ac44654ff192dae7767309bd2212d8197", 0xf9}, {&(0x7f0000001180)="e25584b5209b84d059b43ce3a3b338954a95d149435fe13a6156ab67ffeebdfb982b03191d06349a97abf0342b6eedb37deba28ed6621ed7612645076c1bcfa394043075606e", 0x24}, {&(0x7f0000000440)="bc4270c74b285fd41d4a42c25b9c805617f74e3fa36c646b2b15", 0x1a}, {&(0x7f0000000fc0)="5a5d635f663b95464a39a9e03287a8e10478af2ac20bcddeaa98423cb750d8e510e99d11325e0d42b10b04cd50b4fc873959da6cb6dff33c8ecf8ed316fdf41f4361baab0eac761023cdcf4533cc4cf11c070b318ba217a46385e57657e77a27b2679aa289", 0x65}, {&(0x7f0000000680)="2ebcf61f87ad", 0x6}, {&(0x7f0000001040)="9ea3f3aa064a30f3c832b6651b7a130b88441b4cb9100db9ec29ff678e1fc9942153b5e5e09ede0e1193006abbb1f21209745b65d5d5280d190157f2c227da15ff6b4b2d6794b91c2181aaa0a0affd548753b19a3611e2cb5a7e025fd4fd83985cde7bac1b70c799430a52226d7ef66609836b28a6f160ba8349a4b0cdbf7d36797f904a8770f9b00e5b341788e91ceaa55455a5ae5011202365a2e36191ea52bba389ed1d32861916f2b4114c1a518cad4f0e4f9722553905", 0xb9}, {&(0x7f0000000b80)="563e7db40493f5efa853000fe039e39fbb9232ce46c63c064f64697a7e4c5c4a23fd91cd642eda777e294738c72831c4d7", 0x31}], 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x428}, 0xd)

100.303201ms ago: executing program 7 (id=29):
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00)
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x45, 0x7}, {0x8d, 0xc}, {0x8c, 0x3}, {0xb79621bc39eb9579, 0xe7c7}, {0x101, 0x1}, {0x6, 0x1}], 0x6})
r1 = getpgid(0x0)
fcntl$setown(r0, 0x6, r1)
fcntl$setown(r0, 0x6, r1)
r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f00000000c0)={0x96c1, 0x7, 0x3, {[0x8000000000000000, 0x8, 0x6, 0x0, 0x200000, 0x5, 0x98, 0x9, 0x3, 0xe9f, 0x10001, 0x2, 0x0, 0x7fffffff, 0x5, 0xe, 0x5], [0x7, 0x9, 0x7fe, 0x7, 0xffff, 0xffff, 0x4, 0x1, 0x0, 0x8], [0x4, 0xfffffffffffffffe, 0x80000001, 0x6, 0x7fffffff, 0x9, 0x5], [0x80000000, 0x3, 0x9f7, 0x372, 0x6, 0x3], [{0x401, 0x3, 0x6, 0x1c}, {0x415d, 0x2, 0xff, 0x2}, {0x5, 0x8, 0x607d, 0x8000}, {0x1000, 0x9, 0x400, 0xfffffffffffffff9}, {0x9, 0x8001, 0x8, 0x6}, {0x5, 0x0, 0x9, 0x4}, {0x6, 0x2d, 0x1, 0x70f}, {0x3, 0x3, 0x6, 0x1}], {0x7b4, 0x2, 0x7ff, 0xa7b4}, {0x2000, 0x80000000, 0x6, 0x6}}})
ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x45, 0x7}, {0x8d, 0xc}, {0x8c, 0x3}, {0xb79621bc39eb9579, 0xe7c7}, {0x101, 0x1}, {0x6, 0x1}], 0x6}) (async)
getpgid(0x0) (async)
fcntl$setown(r0, 0x6, r1) (async)
fcntl$setown(r0, 0x6, r1) (async)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f00000000c0)={0x96c1, 0x7, 0x3, {[0x8000000000000000, 0x8, 0x6, 0x0, 0x200000, 0x5, 0x98, 0x9, 0x3, 0xe9f, 0x10001, 0x2, 0x0, 0x7fffffff, 0x5, 0xe, 0x5], [0x7, 0x9, 0x7fe, 0x7, 0xffff, 0xffff, 0x4, 0x1, 0x0, 0x8], [0x4, 0xfffffffffffffffe, 0x80000001, 0x6, 0x7fffffff, 0x9, 0x5], [0x80000000, 0x3, 0x9f7, 0x372, 0x6, 0x3], [{0x401, 0x3, 0x6, 0x1c}, {0x415d, 0x2, 0xff, 0x2}, {0x5, 0x8, 0x607d, 0x8000}, {0x1000, 0x9, 0x400, 0xfffffffffffffff9}, {0x9, 0x8001, 0x8, 0x6}, {0x5, 0x0, 0x9, 0x4}, {0x6, 0x2d, 0x1, 0x70f}, {0x3, 0x3, 0x6, 0x1}], {0x7b4, 0x2, 0x7ff, 0xa7b4}, {0x2000, 0x80000000, 0x6, 0x6}}}) (async)
ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) (async)

66.350723ms ago: executing program 1 (id=30):
execve(0x0, &(0x7f0000000340), 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0x1fd, 0x44809e9d, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181c, 0x100000000000008, 0x9}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x9)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x5)
mlock(&(0x7f00004f6000/0x1000)=nil, 0x1000)
execve(0x0, &(0x7f0000000340), 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000180)={0x1fd, 0x44809e9d, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181c, 0x100000000000008, 0x9}, 0x0, 0x0, 0x0) (async)
kqueue() (async)
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async)
open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async)
open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x9) (async)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x5) (async)
mlock(&(0x7f00004f6000/0x1000)=nil, 0x1000) (async)

64.928797ms ago: executing program 7 (id=31):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000141000/0x4000)=nil, 0x1f}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e0e000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x80000000004}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f0000eb0000/0x14000)=nil}, {&(0x7f000002e000/0x1000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x20000002}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x2}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f00001d0000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'})
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0) (async)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
socket(0x18, 0x3, 0x50) (async)
r1 = socket(0x18, 0x3, 0x50)
sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f00000002c0)="22c8e8b186afc4b67b7f52b3ef5486d9561b45eca761ddf4cbc94caca6c96bc66f21ba9597f470f650708205ac9d955270bb35363ebd7c1205389c48bfe730d4a1b49dbcb812e6c947439294486c192d5b39a1e049bc0fb9637ee884cd6364b36c55c5f4b0c8ccf1b9b275b1421e76e25141b2cf10b7457532a94a21b83b87a16e7dd804b62422054c000de6b77b9857c38b9eff781d0c08d7beaa", &(0x7f0000000380)=0x9b, &(0x7f00000003c0)="33dc44815bff5133173d8523fda7f4df4deab98121d91211caccdd1ab42a3a636fde31638fdd5d7d38bf8ab0721fc2d1cebd95effd990ebae4c25ce9f51de8076c8376445637aebc5ca12e3899e457bf422de4419653f9e5ed7e8251411c5d69d71c47d18276dff88a8e6061a8cca7af3f749d", 0x73)
ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0))
sysctl$hw(&(0x7f0000000000)={0x7, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$hw(&(0x7f0000000000)={0x7, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x2)
sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, &(0x7f0000001540), &(0x7f0000000080), 0x0, 0x0)
sysctl$kern(&(0x7f0000000440)={0x1, 0x16}, 0x2, &(0x7f0000000480)="35fbe6c2c700a69b77939ea6d152da24d7a302a56da0e95725", &(0x7f00000004c0)=0x19, &(0x7f0000000500)="ad65d023d60b7916ef410f85ab84b5dd1d1782dcb6d07fb2baf75af348f91ab5e7409f995ee4c202e17d219f37f42e3d46e61d69bf11971864b91f1bb2504ce32cf84d60eccfb856d99354ca5e3299eb0232bc7be45ee58f6671f788c05782b20648e931f40ca8d0ae32960c7f568e0af07682607f96782f00d7e7dfeaa64a367732533bf44d66fdb4f2f6890b4ffa04941f1483b351fb570e50", 0x9a)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
pread(r2, &(0x7f0000000080)="aa", 0x1, 0x8) (async)
pread(r2, &(0x7f0000000080)="aa", 0x1, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
lchown(&(0x7f0000000080)='./file0\x00', 0x0, r4)
setgid(r4) (async)
setgid(r4)

60.277371ms ago: executing program 5 (id=32):
r0 = socket$unix(0x1, 0x2, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x200, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x10) (async)
mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf) (async)
r3 = kqueue()
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) (async)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000300)=[{{r4}, 0xfffffffffffffffe, 0x11}], 0x7, 0x0, 0x0, 0x0) (async)
kevent(r5, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0)
kevent(r3, &(0x7f0000000140), 0xe4a, 0x0, 0xa9fa, 0x0)
sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, &(0x7f0000000540)='\x00\x00 \x00', 0x4) (async)
open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) (async)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x1000300010008})
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='[B'])
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
sysctl$kern(&(0x7f0000000140)={0x1, 0x3d}, 0x6, 0x0, 0x0, 0x0, 0x9c8bce8ce70f2362) (async)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSETA(r6, 0xc450444d, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x0, 0x10})
ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f00000001c0)={0x2, 0xff, 0x0, 0x1, 0x3, 0x924, 0x1, 0x10, [{0x9, 0x1, 0x0, 0x99}, {0x6, 0x2, 0x6, 0x1}, {0x6dcf, 0x78ce2ce, 0xce, 0x101}, {0x41, 0xd, 0x5, 0x4}, {0xc000, 0x7, 0x100, 0x9}, {0x800, 0x3, 0x1, 0x1}, {0x4, 0x7, 0x4, 0xe0e7}, {0xffff57c7, 0x2, 0x4, 0x8000}, {0x40, 0x252, 0xd, 0xe27}, {0x4, 0x2, 0x8, 0x6}, {0x80000000, 0xd, 0x81, 0x8000}, {0x3, 0xf, 0x8000, 0x4}, {0x1, 0x40, 0x1, 0x7}, {0x6, 0x401, 0x32c2, 0x7fffffff}, {0x800, 0x2, 0xfffffffa, 0x4}, {0x0, 0x2, 0x80, 0x9}]}) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mquery(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f00000000c0)=0x1ff)

59.684723ms ago: executing program 6 (id=33):
r0 = socket(0x2, 0x1, 0x0)
setsockopt(r0, 0x0, 0x4, &(0x7f0000000000)='\v\x00\x00\x00', 0x4)
pipe2(&(0x7f0000000980)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = getpgid(0xffffffffffffffff)
r4 = socket$inet(0x2, 0x1, 0x1)
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc)
fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x3, 0x1, 0x9, 0xd, r3})
write(r1, &(0x7f00000000c0)="c3", 0xffffffed)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x2e}, 0x2, 0x0, 0x0, 0x0, 0x0)
close(r5)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet_opts(r5, 0x0, 0x200000000000a, &(0x7f0000000000)="ea", 0x1)
ioctl$WSDISPLAYIO_GVIDEO(r1, 0x40045744, &(0x7f0000000000))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaf6925baaaabb08004500001c0000000000019078ffffffffdfffffff210090784c1f8ba3b20b224e420b773a21cd8ea994f798e901b830cc4f4c9c3b7805e434a8fe102e4667df4d64a7023144cf15ebfeac9ca26102"])
sendto$unix(0xffffffffffffffff, &(0x7f0000000200)="b100050300000400000000b307000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f52ec5890400000000008000361b1257aea8c500002022fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d1889e000040700000000130000000000000000", 0xb1, 0x40c, 0x0, 0x40)
ioctl$PCIOCREAD(r5, 0xc0107002, &(0x7f0000000040))

3.960853ms ago: executing program 6 (id=34):
mkdir(&(0x7f0000000240)='./file1\x00', 0x84)
unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00')
unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='c\x00')
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
lseek(r0, 0xad1, 0x570b83590cafc95)
ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x39)
openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')

3.506715ms ago: executing program 6 (id=35):
r0 = socket$inet(0x2, 0x3, 0x5)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x20531b) (async)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2207f981aa6a78ef1d35e6abbbdabb26a52ad7f46003d52c000f06c166b28e8db79f701681", 0x32}], 0x1) (async)
mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200)
open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) (async)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
chroot(&(0x7f0000000040)='./file0\x00') (async)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
kevent(r2, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{r2}, 0xfffffffffffffff9, 0x2, 0x40, 0x0, 0x40000000000005}, {{r2}, 0xfffffffffffffffc, 0xc0, 0x20000000, 0x4000000000005, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0x8, 0x1, 0x400000000000008}, {{r2}, 0xfffffffffffffffe, 0x6e, 0x4, 0xffffffff, 0xc3b}, {{}, 0xfffffffffffffffb, 0x6b28b7731859c8bc, 0x40000000, 0x9, 0x3}, {{r2}, 0xffffffffffffffff, 0x1d5, 0x80, 0xe, 0x10000}, {{r2}, 0xffffffffffffffff, 0x14, 0x10, 0x5, 0x100000001}, {{r2}, 0xfffffffffffffffd, 0x38, 0x20000000, 0x103, 0xfffdfffffffffffb}], 0x282, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x3) (async)
ktrace(&(0x7f0000000080)='./bus\x00', 0x1, 0x0, 0x0) (async)
getsockopt(r0, 0x0, 0x66, 0x0, 0x0)

2.751037ms ago: executing program 0 (id=36):
r0 = socket(0x18, 0x2, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3, 0x9e}, 0xc)
mprotect(&(0x7f0000046000/0x4000)=nil, 0x4000, 0x5)
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x8)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
r1 = kqueue()
r2 = syz_open_pts()
close(r2)
setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62})
r3 = syz_open_pts()
sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, &(0x7f00000000c0)="bc3b148655ff67e79180f161e9a9ebcd30e2b13bed0c1d02c456879cded72043976fd1dac8b893987467c0c693ffe0878d93ceb489684584580a9a6de65c345f71ca721dad3087ee22dcd3e499dc5ce93ca82f11b4c0a0637599754197b9e728d6f0d6", &(0x7f00000002c0)=0x63, &(0x7f0000000300)="e42c6570676a8900982704b4", 0xc)
close(r3)
syz_open_pts()
ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000140)=0x2)
ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5)
kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="9ae03c4d34370838b0bb15901e52900917dfc167aa1c80ff96f4cdf581f1f515a81c69fda8b0a11cbc0609215166dbda4b6e32372e9f0115e9752596ddab3b7e650707158e49a42b2f3c77ff881c32281d8a26ae74ecc9e711e4884c546a1c141dd64ccc6ccc06d92a27975732f0e88e48349b18377faa9e6e78ff0e1805457e06634d5fcacd50111e40e24fb04bb4ad6fa1877d4e124b13bf970b05869b7b928c5d0d67964b224f09ee2732253287f29e76a383bb843f9a30fe2f4db122cb6bdf5a964592b3086035b62b9d673b833e2eab9f65e310295f403d943ac28e6994d640c9f8", 0x0, &(0x7f00000002c0), 0x0)
ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1)
r5 = socket(0x1e, 0x3, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
ftruncate(r6, 0x0)
write(r5, 0x0, 0x0)

0s ago: executing program 2 (id=37):
setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56})
r0 = socket(0x18, 0x2, 0x0)
r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000003c0)="f3fa1ae069bd2a14f773a7ae07121ee56c937315ce396eb385d10aa1c25af7bd0e7f955b424215881711550c729559a1bbd20d21159d6932bcf2a88e4ab8b08e6ea43374556ddf9ff5ef8f465ba38af78f365d97ccee7333b0c4d0be31cd4aa5aa01560f57123c6acb6ffec28329ce10ddc02b4e56dd25415eb7a341743c91592cd66700a1c7ac09e84a3d12ac8f7fe5cca0282e7e603a35135ff054c9404aec2f882c6413b6c75e9523376f9ee270a1", 0xb0}, {&(0x7f0000000680)="622d81d3cf83703e6ad0c736f250f9f0586ff9ec54ae5eeb0aeac321fcaec1d35ca64aa16eac079d2b40c08437788f2c5f7e8f1f65e21750339a8e218358ab9629700ef759116ac5de5f1589504d7b4ef0a8f0b8468084d352cdd7efb80fbdb9352c9ae479f1475d1145", 0x6a}], 0x3)
execve(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt(r0, 0x1000000000029, 0x3b, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
writev(0xffffffffffffff9c, &(0x7f0000000140)=[{&(0x7f00000002c0)="f6d65e6cf83e4038cb8d902207dbff3f271d3af686386f81ae264224946b5901f871d8079a7d88b1e089c9286b6e389fd6ee8317f808137d7d04c7b6a3c31607727c", 0x42}, {&(0x7f0000000500)="8830e96d650f265c6b4073b10e6c42f1d1da418b3c83e5a4f69b407fc383b2af7661849c83451b49d4d03fd3dbbf5412da6052a8143cf2a7df471338ddb5e16d14ebf2db8b2216c17d3a8bb6e69237bc226535bbc6fd882a1ebf47334329a51189e040313e02e116fe32388d85b6a1965f91c9c4eea927c6ada8afbb063536c15d7c9be30d37c34ac10de6483ddd2483ab3fe7fab23cf74e8562c94110ac265058f652817448bdd8505c341fd9579e32f1052cc24cde03c2ee2165cd54d1269d47339e276d4f42de51582a127908c67d726816a003567620bde636585e2ac4", 0xdf}], 0x2)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
syz_open_pts()
setreuid(0xee00, 0x0)
chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x10)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x1000300010008})
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x807, 0x3, 0xffff, 0x200495, "084880fa870000bd090088d11554e90d6602ff07", 0xc, 0x2a6d})
writev(r2, &(0x7f00000029c0)=[{&(0x7f0000002a40)="793d4acf593accd5284d97b182ffa2c4dc236b5c27db05fe46d9a1fe6e442829bd478ea62ea8df42767f4fb6e013a64f31d48884f5b440d8ec138a22c7f4abe9ad2990de976eb4db3eb06d0e146feff17166df0ccf82cd18dc8858594a08d4634152d486b0a80999314144593c0266d319bffa61ce051f0115de9fd1fe24bff844111e1f8b9148c3ef86c3e67a9d904cd3c55daa021867a953a7c4ffc715783cc09729751c18bff830418236397fc44dee62747a4c041c5cd9b75426a28431832757c770a68c4de235b6e93f7d5e13677dff35709bde80666a060641a082eae0ffc93023a7732574ac77c73d5ffb8179be0b85e62017b6271cc45fa5a820e534e05e6bfd7293c5aa9235713bd920097a975462f0faf1777fde75f33c049cba0dbbd7cb0b026e75b200214ed99bc0e21e0f72b6e6ab1533ae5bac9f7e772aa992b763b81e870e3d7a77a23e197144b85c1e760bed34ea9610e94e79bf4e4ca49edf7ecea9131b7d5fd4c1590ec7f479b241634908f0f2b8ee6adde837328ba1bcaf3d8b4dd6f722de9f2479c95f8b2e52a1171b23a6dee5a6f1a1866d34513996d57eee23405432923fbef097e8f3a3a19d9b7e0e242156f6b24d350d3a7abcb5857830220e5d5db123a3f0fdfe193bffaf4ec962d8f2ab3d7dd3441b985e54622e5998defe32f0f356b9db2264c4ccae0e334221b0e53774178123ca342a489fc5963364fba5fefcc9d5007caa82db2f1a3833eec513764a8f3a53921ce6a5c06bb1338c5e5c98d32310d9e5bd95bd1c095b10d41f9cb92c0d80556b218316ea913f300dc41e3a2b17985a92935caceeea3169be2f5154882d", 0x259}], 0x1)
clock_getres(0x4, &(0x7f0000000000))
r5 = getuid()
setuid(r5)
read(r3, &(0x7f00000009c0)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts.
pckbd_enable: command error
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 953
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
  45930   7044      0        0x40          0    1  syz-executor
db_enter() at db_enter+0x25
panic(ffffffff833730c8) at panic+0x1e5
__assert(ffffffff833b0ea0,ffffffff833be472,3b9,ffffffff833e817d) at __assert+0x29
refcnt_finalize(ffff80003c04af08,ffffffff83367449) at refcnt_finalize+0x1db
pppx_if_destroy(205b92,ffff80003c04af00) at pppx_if_destroy+0x3d
pppxclose(205b92,1,2000,ffff800032008fb0) at pppxclose+0xa0
spec_close(ffff80003c045350) at spec_close+0x417
VOP_CLOSE(fffffd806c215a38,1,fffffd80097fb478,ffff800032008fb0) at VOP_CLOSE+0x132
vn_closefile(fffffd806b7a2048,ffff800032008fb0) at vn_closefile+0x12b
fdrop(fffffd806b7a2048,ffff800032008fb0) at fdrop+0x121
closef(fffffd806b7a2048,ffff800032008fb0) at closef+0x192
fdfree(ffff800032008fb0) at fdfree+0x116
exit1(ffff800032008fb0,0,0,1) at exit1+0x576
sys_exit(ffff800032008fb0,ffff80003c0456c0,ffff80003c045610) at sys_exit+0x1a
end trace frame: 0xffff80003c0456b0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 953
ddb{0}> trace
db_enter() at db_enter+0x25
panic(ffffffff833730c8) at panic+0x1e5
__assert(ffffffff833b0ea0,ffffffff833be472,3b9,ffffffff833e817d) at __assert+0x29
refcnt_finalize(ffff80003c04af08,ffffffff83367449) at refcnt_finalize+0x1db
pppx_if_destroy(205b92,ffff80003c04af00) at pppx_if_destroy+0x3d
pppxclose(205b92,1,2000,ffff800032008fb0) at pppxclose+0xa0
spec_close(ffff80003c045350) at spec_close+0x417
VOP_CLOSE(fffffd806c215a38,1,fffffd80097fb478,ffff800032008fb0) at VOP_CLOSE+0x132
vn_closefile(fffffd806b7a2048,ffff800032008fb0) at vn_closefile+0x12b
fdrop(fffffd806b7a2048,ffff800032008fb0) at fdrop+0x121
closef(fffffd806b7a2048,ffff800032008fb0) at closef+0x192
fdfree(ffff800032008fb0) at fdfree+0x116
exit1(ffff800032008fb0,0,0,1) at exit1+0x576
sys_exit(ffff800032008fb0,ffff80003c0456c0,ffff80003c045610) at sys_exit+0x1a
syscall(ffff80003c0456c0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7b5c34202570, count: -16
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c045120
rbx               0xffffffff83829ddf    cpu_info_full_primary+0x2ddf
rdx                                0
rcx               0xffff800032008fb0
rax               0xffffffff83828ff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x97fe8f37c112374d
r11               0xb3d2db5738d44749
r12               0xffffffff83829be0    cpu_info_full_primary+0x2be0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff820856e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c045110
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=185653 pid=66232 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff800032008fb0 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff800032009778,0xffff80003c4582d0
    process=0xffff80003a025360 user=0xffff80003c040000, vmspace=0xfffffd806b9bab88
    estcpu=36, cpticks=4, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
  7044   45930  82491      0  7        0x40                syz-executor
  4786  161598  52488      0  2           0                syz-executor
 29687  388434  52225      0  2           0                syz-executor
 29687  273211  52225      0  3   0x4000080  fsleep        syz-executor
 29687  402699  52225      0  3   0x4000080  fsleep        syz-executor
  9237  240057  42395      0  2           0                syz-executor
  9237  389802  42395      0  3   0x4000080  fsleep        syz-executor
  9237  453330  42395      0  2   0x4000000                syz-executor
  9237  459067  42395      0  2   0x4000000                syz-executor
 64284   20132  35660      0  2           0                syz-executor
 64284  311223  35660      0  3   0x4000080  fsleep        syz-executor
 64284  317009  35660      0  3   0x4000080  fsleep        syz-executor
 64284  433157  35660      0  3   0x4000080  fsleep        syz-executor
 64226  206047  46526      0  4     0x82000                syz-executor
 64226  254282  46526      0  3   0x4082000  smrbar        syz-executor
 64226  385033  46526      0  3   0x4002000  suspend       syz-executor
 81691  513431  54193      0  2           0                syz-executor
 81691  360602  54193      0  3   0x4000080  fsleep        syz-executor
 81691  174286  54193      0  3   0x4000080  fsleep        syz-executor
 35660   38600  12941      0  3        0x82  nanoslp       syz-executor
 52488  296462  12941      0  3        0x82  nanoslp       syz-executor
 42395   25770  12941      0  3        0x82  nanoslp       syz-executor
 54193  133439  12941      0  2         0x2                syz-executor
 82491  193215  12941      0  3        0x82  ppwait        syz-executor
 52225  293755  12941      0  2       0xc82                syz-executor
 46526  481534  12941      0  3        0x82  nanoslp       syz-executor
 45031  284081  12941      0  3        0x82  nanoslp       syz-executor
 12941  419557  35500      0  3        0x82  kqread        syz-executor
 35500  476881  55763      0  3    0x10008a  sigsusp       ksh
 55763   56598  33355      0  3        0x98  kqread        sshd-session
 33355   33666  14441      0  3        0x92  kqread        sshd-session
 52458  218976      1      0  3    0x100083  ttyin         getty
 14441  237527      1      0  3        0x88  kqread        sshd
 77589  217396  35410     74  3   0x1100092  bpf           pflogd
 35410  460931      1      0  3        0x80  sbwait        pflogd
 52338  417268  62578     73  3   0x1100090  kqread        syslogd
 62578   78567      1      0  3    0x100082  sbwait        syslogd
 51105  357586      1      0  3    0x100080  kqread        resolvd
 57403  142654  57553     77  3    0x100092  kqread        dhcpleased
 79575  490010  57553     77  3    0x100092  kqread        dhcpleased
 57553  505318      1      0  3        0x80  kqread        dhcpleased
 25372  241224      0      0  3     0x14200  bored         smr
 68116  472267      0      0  2     0x14200                zerothread
 36019  188564      0      0  3     0x14200  aiodoned      aiodoned
  7361  178719      0      0  3     0x14200  syncer        update
 56287  215075      0      0  3     0x14200  cleaner       cleaner
 95849  221653      0      0  3     0x14200  reaper        reaper
  7087  100450      0      0  3     0x14200  pgdaemon      pagedaemon
 76097  190429      0      0  3     0x14200  bored         viomb
 82804   73959      0      0  3  0x40014200  acpi0         acpi0
 45729  306619      0      0  3  0x40014200                idle1
 33763   93713      0      0  3     0x14200  bored         softnet7
 58603  209926      0      0  3     0x14200  bored         softnet6
 78031  382256      0      0  3     0x14200  bored         softnet5
 80046   62860      0      0  3     0x14200  bored         softnet4
 56616  185418      0      0  3     0x14200  bored         softnet3
 51468  114907      0      0  3     0x14200  bored         softnet2
 96284  141274      0      0  3     0x14200  bored         softnet1
 56553  432254      0      0  3     0x14200  bored         softnet0
  9717  441778      0      0  3     0x14200  smrbar        systqmp
 70741  116682      0      0  3     0x14200  bored         systq
 29800  161331      0      0  2     0x14200                softclockmp
 17308   75945      0      0  3  0x40014200  tmoslp        softclock
 98623  504927      0      0  3  0x40014200                idle0
     1  204570      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 7044 (syz-executor) thread 0xffff80003c458d20 (45930)
exclusive rwlock uobjlk r = 0 (0xfffffd806d813868)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  uvm_fault_lower_lookup+0x53
#3  uvm_fault_lower+0x89
#4  uvm_fault+0x274
#5  upageflttrap+0xa9
#6  usertrap+0x3c6
#7  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffd806b9ba8b8)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4a
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x3c6
#7  recall_trap+0x8
Process 9237 (syz-executor) thread 0xffff8000320094e0 (453330)
exclusive rrwlock inode r = 0 (0xfffffd806b764a20)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  ufs_ihashins+0x4f
#5  ffs_vget+0x187
#6  ffs_inode_alloc+0x279
#7  ufs_makeinode+0xcd
#8  ufs_mknod+0x5b
#9  VOP_MKNOD+0x101
#10 domknodat+0x469
#11 syscall+0xb17
#12 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806b7640e0)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa3
#4  vn_lock+0xa4
#5  vfs_lookup+0x11c
#6  namei+0x7ca
#7  domknodat+0xb4
#8  syscall+0xb17
#9  Xsyscall+0x128
Process 9717 (systqmp) thread 0xffff8000ffffe298 (441778)
shared rwlock systqmp r = 0 (0xffffffff83831aa8)
#0  witness_lock+0x5f1
#1  taskq_thread+0x12a
#2  proc_trampoline+0x10
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10205  11025K   11052K 166960K     11298        0
            pcb    19     12K      12K 166960K        27        0
         rtable   209      6K       6K 166960K       259        0
             pf    37     18K      18K 166960K        48        0
         ifaddr    45      7K       7K 166960K        47        0
        ifgroup    60      2K       2K 166960K        60        0
         sysctl     1      1K       9K 166960K         5        0
       counters    72     37K      37K 166960K        74        0
       ioctlops     0      0K       4K 166960K      1488        0
            iov     0      0K      16K 166960K         2        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1342     84K      85K 166960K      1381        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      85K 166960K       169        0
          sigio     0      0K       0K 166960K         4        0
           proc    72    115K     180K 166960K       542        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         6        0
       in_multi   100      7K       7K 166960K       102        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    67    307K     307K 166960K        67        0
           exec     0      0K       1K 166960K       363        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   239    151K     160K 166960K      3222        0
       UVM aobj     7      2K       2K 166960K         8        0
     pinsyscall    43     86K     100K 166960K      1242        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP    15      0K       1K 166960K        29        0
           temp    39   8639K    8705K 166960K      4040        0
         kqueue    14     22K      26K 166960K        28        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       33    0       30     1     0     1     1     0     8    0
rtentry    176       96    0        1     5     0     5     5     0     8    0
unpcb      144       51    0       33     1     0     1     1     0     8    0
syncache   336        3    0        3     1     0     1     1     0     8    1
tcpcb      736       11    0        7     1     0     1     1     0     8    0
arp        128       10    0        0     1     0     1     1     0     8    0
inpcb      328       81    0       71     2     0     2     2     0     8    1
nd6        144       16    0        0     1     0     1     1     0     8    0
pkpcb       40        1    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192       2    0        1     1     0     1     1     0     8    0
pppxif     1504       2    0        1     1     0     1     1     0     8    0
pffrag     232        2    0        0     1     0     1     1     0   482    0
pffrnode    88        2    0        0     1     0     1     1     0     8    0
pffrent     40        2    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       17    0        0     1     0     1     1     0     8    0
pfstkey    128       17    0        0     1     0     1     1     0     8    0
pfstate    384       17    0        0     2     0     2     2     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      443    0        0    28     0    28    28     0     8    0
art_table   40      444    0        0     5     0     5     5     0     8    0
art_node    32       96    0       10     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        0     1     0     1     1     0     8    0
shmpl      112        5    0        1     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     1621    0      108    95     0    95    95     0     8    0
ffsino     296     1621    0      108   117     0   117   117     0     8    0
nchpl      144     1857    0      169    63     0    63    63     0     8    0
uvmvnodes   80     1718    0        0    36     0    36    36     0     8    0
vnodes     216     1718    0        0    96     0    96    96     0     8    0
namei      1024    5661    0     5660     1     0     1     1     0     8    0
percpumem   16       52    0        1     1     0     1     1     0     8    0
kstatmem   264       28    0        0     2     0     2     2     0     8    0
scxspl     216     6635    0     6635     3     1     2     2     1     8    2
plimitpl   152       36    0       17     1     0     1     1     0     8    0
sigapl     424      471    0      417     7     0     7     7     0     8    0
knotepl    120      272    0        0     9     0     9     9     0     8    0
kqueuepl   224       30    0       19     1     0     1     1     0     8    0
pipepl     344      109    0       82     3     0     3     3     0     8    0
fdescpl    528      449    0      417     3     0     3     3     0     8    0
filepl     160     1598    0     1375    10     0    10    10     0     8    0
lockfpl    104       14    0       12     1     0     1     1     0     8    0
lockfspl    48        8    0        6     1     0     1     1     0     8    0
sessionpl  144       22    0       13     1     0     1     1     0     8    0
pgrppl      48       33    0       16     1     0     1     1     0     8    0
ucredpl    104      123    0      110     1     0     1     1     0     8    0
zombiepl   144      418    0      417     1     0     1     1     0     8    0
processpl  1232     471    0      417     5     0     5     5     0     8    0
procpl     664      542    0      476     6     0     6     6     0     8    0
sockpl     752      167    0      135     4     0     4     4     0     8    0
mcl64k     65536      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     113    0        0    15     0    15    15     0     8    0
mcl2k      2048      28    0        0     4     0     4     4     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256     1133    0        0    71     0    71    71     0     8    0
bufpl      280     2913    0      122   200     0   200   200     0     8    0
anonpl      32     3977    0        0    33     0    33    33     0   246    0
amapchunkpl 152    9273    0     8780    23     2    21    21     0   158    2
amappl16   200     1961    0     1939     5     1     4     5     0     8    2
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184      113    0      101     1     0     1     1     0     8    0
amappl13   176       46    0       46     1     1     0     1     0     8    0
amappl12   168     1083    0     1053     3     1     2     2     0     8    0
amappl11   160       48    0       34     1     0     1     1     0     8    0
amappl10   152       12    0       11     1     0     1     1     0     8    0
amappl9    144      251    0      251     1     1     0     1     0     8    0
amappl8    136       25    0       23     1     0     1     1     0     8    0
amappl7    128      105    0       93     1     0     1     1     0     8    0
amappl6    120      181    0      177     1     0     1     1     0     8    0
amappl5    112      120    0      111     1     0     1     1     0     8    0
amappl4    104      299    0      278     1     0     1     1     0     8    0
amappl3     96     1465    0     1354     4     1     3     3     0     8    0
amappl2     88      627    0      565     2     0     2     2     0     8    0
amappl1     80     8169    0     7561    14     0    14    14     0     8    0
amappl      88     2557    0     2391     4     0     4     4     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        7    0        1     1     0     1     1     0     8    0
uaddrrnd    24      449    0      417     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      449    0      417     1     0     1     1     0     8    0
vmmpekpl   168     5301    0     5267     2     0     2     2     0     8    0
vmmpepl    168    35130    0    33121    89     0    89    89     0   357    1
vmsppl     488      448    0      417     5     0     5     5     0     8    0
rwobjpl     80    14351    0    11694    56     1    55    56     0     8    0
pdppl      4096     906    0      834    94    20    74    82     0     8    2
pvpl        32    10413    0        0    84     0    84    84     0   265    0
pmappl     256      448    0      417     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      322    0       22     9     0     9     9     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25
panic(ffffffff833730c8) at panic+0x1e5
__assert(ffffffff833b0ea0,ffffffff833be472,3b9,ffffffff833e817d) at __assert+0x29
refcnt_finalize(ffff80003c04af08,ffffffff83367449) at refcnt_finalize+0x1db
pppx_if_destroy(205b92,ffff80003c04af00) at pppx_if_destroy+0x3d
pppxclose(205b92,1,2000,ffff800032008fb0) at pppxclose+0xa0
spec_close(ffff80003c045350) at spec_close+0x417
VOP_CLOSE(fffffd806c215a38,1,fffffd80097fb478,ffff800032008fb0) at VOP_CLOSE+0x132
vn_closefile(fffffd806b7a2048,ffff800032008fb0) at vn_closefile+0x12b
fdrop(fffffd806b7a2048,ffff800032008fb0) at fdrop+0x121
closef(fffffd806b7a2048,ffff800032008fb0) at closef+0x192
fdfree(ffff800032008fb0) at fdfree+0x116
exit1(ffff800032008fb0,0,0,1) at exit1+0x576
sys_exit(ffff800032008fb0,ffff80003c0456c0,ffff80003c045610) at sys_exit+0x1a
syscall(ffff80003c0456c0) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7b5c34202570, count: -16
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8399e0e8) at __mp_lock+0x192
syscall(ffff80003c02d460) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78750211a5d0, count: 9
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8399e0e8) at __mp_lock+0x192
syscall(ffff80003c02d460) at syscall+0xaf4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78750211a5d0, count: -6