last executing test programs:

2.033900831s ago: executing program 0 (id=1):
mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x3)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SPKRTONE(r0, 0x80085301, &(0x7f00000000c0)={0x0, 0x88f})
execve(0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x2, 0x136)

2.030158196s ago: executing program 1 (id=2):
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
clock_getres(0x4, &(0x7f0000000100)) (async)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x8000, 0x174)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async)
syz_emit_ethernet(0x132, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESHEX=r0, @ANYRES64=r0])

2.027453644s ago: executing program 2 (id=3):
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000040)={0x2})
socket$inet(0x2, 0x3, 0xf)
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async)
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61})
r1 = socket$inet(0x2, 0x8003, 0x0)
setsockopt(r1, 0x0, 0xd, &(0x7f0000000000)="1533", 0x2)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @icmp=@echo}}}})
socket(0x1, 0x3, 0x5) (async)
socket(0x1, 0x3, 0x5)

1.829930245s ago: executing program 5 (id=6):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r1 = msgget$private(0x0, 0x0)
r2 = syz_open_pts()
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1)
ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000002c0)={0x3, 0x4, 0x1000, 0x0, "e0cb19b2ede965516f297af744a9f60dd871dc3a", 0xf, 0x4})
syz_open_pts()
msgctl$IPC_RMID(r1, 0x1000000)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0)
ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000100))
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240), 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000000)="ea", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x200)
r4 = socket(0x2, 0x3, 0x2f)
r5 = dup(r4)
setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000200)="fd0cc0858367a8df1b0bf5acc4a15326defa84b9b828db23e2ab20df95c9d1b08000000000000000dc08e6df918b56bb03d9985f434ae6bf064fbf0fdd8a8f82edd617fb686bda5aa667edf96621cb2ac2bc6a88b34168268d90f987b7040afe0652135fccb2f034c8763487f74a0a1322c8893c3ec07fb190c33025c6fed85d64ed817f89b999b07c81ac1c6d1d8f5e47e85ff991ab5119667c17e08dac387fe46b30ac7755ed68bde72a8de7d7edb336523166211f7672db31e583f407e9827b21150bff912e0c6ee0160c25ad9ad670e83a1313e6890b1a674c8946f3ce8d7310982e6b61168a9cdf9728c1caa396486a8cf04269bbb7e11d51f96cc1108c84fb4bc63901000000ba05b1afa123b47ed50c824fd2318548adec7bfbbc8289f7d5d8b2481bba45323caf46cd5b595df58de3ad987ff890480e0f1f578a", 0x13e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket(0x2, 0x3, 0x0)
r7 = dup(r5)
dup2(r7, r6)
connect$unix(r6, &(0x7f0000000000), 0x10)
sendto(r5, &(0x7f0000000180)="e7c94c3c526a7f2a", 0x8, 0x0, 0x0, 0x0)
openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)

1.693177572s ago: executing program 7 (id=11):
r0 = socket$inet(0x2, 0x3, 0xf) (async)
setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async)
r1 = syz_open_pts()
close(r1) (async)
r2 = syz_open_pts() (async)
seteuid(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000300)=0xc)
setregid(r4, 0x0) (async)
setregid(r4, 0xffffffffffffffff) (async)
r5 = getpid() (async)
wait4(0x0, 0x0, 0x1, 0x0) (async)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000300)={0x0, <r6=>0x0}, &(0x7f0000000340)=0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000240)=0xc)
setregid(r8, 0x0)
r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000003c0)={<r10=>0x0}, 0xc)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r11=>0x0}, &(0x7f0000000440)=0xc)
r12 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x80, 0x1a)
r13 = getpgrp() (async)
r14 = geteuid() (async)
getgroups(0x5, &(0x7f00000004c0)=[0x0, <r15=>0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000240)=[{&(0x7f00000001c0)="2c0cfbe24bbbe8b376f6580211585e12fea4d3ed3fe94b4c901ac0d16b0fabaf503cf253c8b0b3236f018df550c85b4a95bd0166f4ebc6bbb14d4914823f495f131a75235dd7a3180b74d1d01116cef58e460508bf1f925aad5c403f6a07124c58fb3c037448f6bafed54c5a4e7999ab25", 0x71}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000ffff000001000000", @ANYRES32=r1, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="000000003000000000000000ffff000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32, @ANYBLOB="000000002800000000000000ffff000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000002800dcf3000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001800000000000000ffff000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1800000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r2], 0x148, 0x4}, 0x404)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x401, 0x405, 0xfffffff9, "102e261f75a50800", 0xc, 0xa}) (async)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x510}], 0x1) (async)
open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async)
r16 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r16)
ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x1f14, r16)

1.595304462s ago: executing program 2 (id=12):
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xffffffffffffffff, 0x79, 0x8, 0x200000000000001}], 0x4203, 0x0, 0x0, 0x0)
execve(0x0, &(0x7f0000000140)=[&(0x7f0000000100)='tap', &(0x7f0000000080)='%-\x0f:\x06%$,\x00'], 0x0)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100))
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10000)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f)
execve(0x0, 0x0, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="b38cb5a1725a", 0x6}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000040)="8858cd20", 0x4)
socket$inet(0x2, 0x3, 0x0)

1.592464193s ago: executing program 0 (id=14):
symlink(&(0x7f0000000280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001280)='./file0\x00')
mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x20, 0x0)
r1 = getpid()
r2 = open(&(0x7f0000000700)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x11)
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40001738, r1)
setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f})
setgid(0xffffffffffffffff)
r3 = kqueue()
sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@file={0x0, './file2\x00'}, 0xa, &(0x7f0000000200)=[{&(0x7f0000000480)="77594c08fdfd18e8acec5ef1bc1a836ab9e6c36c206ab5c1889dcbc1b44d8beec5cbc9a3d214e02912149b45ae274889db150e6924f22ad25c4d4a35f4fe6b23ecf5500d0546b7d8a7c56aa241b422d4e8c94b8d035d7ae1e9dad4bd00b1e338a4dd81e0ee60fb36a7a4646b763a4f48843706a055ead86daa325577116921e31b8d7d42dfecb8451b1a551c09bbc169011ea949a6f3d0139900739b648249f55098497773b3cd4635291b37a99f4775182f92b7ddf4537ffbcf51f4ed9a413501de4e091f8b11a98fa28dcce27d216cff720ceb538009cdf8092c2d4cb4045aade25d618bf524af52326843d3815c35849077a7c02dd1712961c09438d3c2", 0xff}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="3800000000000000ffff00000100000058fe0143b0d43db870961ca76596257d61504339718dd849b60be83cf8d43ae1df84ce011bd4872a9962c97f093ce1e58d8e0f0b2b63310008f30c26c56793c194d433513b428b905477b6dc7cab3b0010d5c7f0b342f7045ae0fd3aa1cf645a3e2534b310484c4db3c9642c5f12494299d987e5a98a2f8d46105f0a1c8e848f4c5ffbae062b0f063ff467e4dbda3a1b0afd01fcef0ec9f97a3528aa3c6b1dec15fa1af64e79780ff151edf4", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES64=r2, @ANYRES32=r2], 0x38, 0x8}, 0x400)
setrlimit(0xe, &(0x7f0000000980)={0x42, 0x5})
symlink(&(0x7f0000002680)='./file1\x00', &(0x7f00000026c0)='./bus\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
poll(&(0x7f0000000080)=[{r4, 0x27}], 0x1, 0x0)
poll(0x0, 0x0, 0x8e69)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x21, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0)
close(r4)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000003000))
mkdir(&(0x7f0000000040)='./file2\x00', 0xc0)
fchown(r3, 0x0, 0x0)
fcntl$getown(r0, 0x5)
mknod(&(0x7f0000000900)='./file0\x00', 0x2000, 0x2e00)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$VNDIOCSET(r6, 0x8004630b, &(0x7f0000000100)={0x0, 0x0, 0x0})
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f00000000c0)=0x400)
select(0x40, &(0x7f00000000c0)={0x4, 0x739, 0x4005, 0x81, 0x9, 0x0, 0x200000000006e1, 0x9}, &(0x7f0000000140)={0x1, 0x2, 0x8ff, 0x3, 0x105, 0x5, 0x401, 0x2}, &(0x7f0000000300)={0x409, 0x8000000000000001, 0x2, 0x100, 0x8, 0xda0, 0x2, 0x5}, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.519519599s ago: executing program 3 (id=16):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x1, 0x3}, {}, {}, {0x3}, {0x0, 0x20000000}, {0x1, 0xffffffff}, {}, {}, {0x0, 0xa000}, {}, {0x0, 0x1080}, {0x3, 0x400001}, {}, {0x2, 0x3}, {0x3077d7844143423c, 0x800}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3, 0xfffffffe}, {0x0, 0x2}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]})
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff})
r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
r4 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r4, r3)
setreuid(0xee00, r0)
chown(&(0x7f0000000140)='./file0\x00', r0, 0x0)

1.519064821s ago: executing program 3 (id=17):
syz_emit_ethernet(0xeb, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xdd, 0x169, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8003, 0x0, 0xfff8, {[@nop, @nop, @timestamp={0x8, 0xa, 0x3, 0x8}]}}, {"c6ab3a37717ae16f7e1477f6c37a2a5ec055e87de8a87241cc5d091d5f67ecbfd33a94dd390a058dbf938606963f6873e088f3a1376990baa5e57608a411265b7ef13d369a89c5d8401d03c0b684b17884d1efdc59cbc79fd016a7a77da854ad655bc2c94f8988daccd71ec900bb54fef9e728f7272fbad744e187e3e277e2fa49aae9cc626e163b87f16764662c2063230fbcc9a18fc37a1387c8d86f45e9930ed0eb3bc38123def0"}}}}}})
syz_extract_tcp_res(&(0x7f0000000100), 0x9, 0x3) (async)
lstat(0x0, 0x0)

1.51389372s ago: executing program 3 (id=18):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0)
close(r0)
fchmod(r0, 0x28)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000140)="e94daa3106d9132e1a5875a4f795c26caa635d2c86c8ea2269d58bf097c47eaf525076b1d23ca425f5e44ab5a1cc3074edaf801007", &(0x7f0000000180)=0x35, &(0x7f0000000200)="fbc61fb5022d65684cec7e22f7b54b4ed1990486310a5ba6a3998beda3cba5d078a012fe504680769b279b6e71fa8e3ef09af429efe51b20709979e6638fc4acd352be6d4392629acf5267bd3d8034f842cdcb1ad0a69dc5e98e847ed91f0d3f323a26d8adffaed13d831d5a1763c4148170f1d00c8b146e2e45e96bca34cc0b7227ccca8b0549d06b84b8790ba2532adc245c7490f7a074480d2b4d160e4960ba77b6187334090bc02b59599801b6105bc126b11f93c0e0ec3ad80d04bf01b49c31992fd702c4ee33c22da3f3ce0b9830f15a0b0e398d1f7fe1e0083817b8f517c20d3fd0e4c680d673ee", 0xeb)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f260865a", 0x4)
ioctl$WSKBDIO_GETMAP(r1, 0x80047476, 0x0)
r2 = fcntl$getown(r1, 0x5)
r3 = semget(0x0, 0x1, 0x281)
setuid(0xffffffffffffffff)
semctl$SETVAL(r3, 0x0, 0x8, 0x0)
ktrace(0x0, 0x1, 0xd27d43220c7df9b, r2)
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000040))
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r4, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0xfffffffe, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x0, 0x610})
chflagsat(r4, 0x0, 0x0, 0x0)

1.510917917s ago: executing program 6 (id=7):
r0 = socket(0x18, 0x3, 0x0)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000040)="ebffcbff", 0x4)
mknod(0x0, 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffe, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xd, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7, 0x4}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x8, 0x82, 0x50, 0x9}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x80, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0xfffffff7}, {0xfffffffd, 0x2000009, 0x40004, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x1000000}) (async)
close(r2)

1.509685748s ago: executing program 2 (id=19):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x512, 0xffffffffffffffff) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0xfe) (async)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[0xb, 0xcec3, 0x6, 0xfffffff6, 0xfffffffc, 0x3]})

1.50595075s ago: executing program 7 (id=20):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = socket(0x2, 0x1, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
flock(r0, 0x1)
connect$unix(r1, &(0x7f0000000000), 0x10)
connect(r1, &(0x7f0000000400)=@un=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`\x00'}, 0x13)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9}, 0x0)

1.505488545s ago: executing program 6 (id=21):
socket(0x18, 0x3, 0x0) (async, rerun: 64)
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') (rerun: 64)

1.50501922s ago: executing program 3 (id=22):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000080)=0x280)

1.418309609s ago: executing program 2 (id=23):
sysctl$kern(&(0x7f0000000000), 0x2, &(0x7f0000000080)="71f91e3471ac0058bc5a91501d94a34b8e5f84cc42c3fbe6edf28f03055a7b8379c80000ff7f000000000000000000", &(0x7f0000000040)=0x2f, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x2) (async)
open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x2)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x2, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000040), &(0x7f0000000140)=0x4)
open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x7fffffff, 0x200, 0x100000000, 0x6, 0x4, 0x8001}, &(0x7f0000000080)={0xfff, 0x100, 0x100000000000, 0x8000000000000000, 0x400, 0x1003, 0xd3, 0x100000001}, 0x0, 0x0)
openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00')
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

1.411209229s ago: executing program 3 (id=24):
openat$wsmouse(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000900)="4c193e867882710258923fcfd31898878b0e631a32245c4587800e87e5bb73f54c901e00000000000034a4b45a54cae33fda73a1765418be18855aacb42b3e", 0x3f}, {&(0x7f00000000c0)="0c3f1b90d945c6c94cf359ea5466197059c971fcc0bd557d704ab3357b8cb365bd9255394d73f39a372824ea09dcd89644686e9e394313468f5ce288", 0x3c}, {&(0x7f00000007c0)="9875bb8ce629aeafa4591dc018e6bc89648d4d36aeca065c82f21194511a4889b261e787913a1f841b9ab292fa288c4905356c2b9074fb74d41237dbe48ab93e48852dc931226c5633bda470eb3651fbe4441827da2f52b59c4303d195a1ee5104e773bf08064f0491baadf85c3278e15da752c71487", 0x76}, {&(0x7f0000000a40)="1b901e32644c35109d5f8867bf721d1d9cb1dab068bc1d8cc0dfe585265ebe1123a159cfbac6122d3109a89c54281f5369373db9ee55755d502007180516fe3b75dda3aebf2250db682d09ef354ae20f5e26cc08eb6d60c93ec4dac43c03415334e7aaad6c5429d0921717690fe14c25a251806a08198ac348ed2882f29fb185a512ad1ba97a62dd93101d40a805a627b32cb7bdea2af4a20284a482913aa37bf17bfb7c576b8d29645fda315d53a5454117ae13eb945efc978c8dbdde5fcafebea1fd27900d7f0803c84337fb1288c7dc485e4ec2a8295d870d8c96c720a5d374cfb0075cd785efd46f256a1e3317883615645d2573d3d87b6e88a59dc295fe259ffadb7c18121c7f3e24ee", 0x10c}], 0x4)
execve(0x0, 0x0, 0x0)

1.409059399s ago: executing program 6 (id=25):
r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
bind(r0, &(0x7f0000000040)=@in={0x2, 0x3}, 0xc)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10004)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
kevent(r1, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0x7}, {{r0}, 0xfffffffffffffffd, 0xa0, 0x2, 0x3, 0x7ff}, {{r0}, 0x4, 0x0, 0x1, 0x5, 0x1}, {{r0}, 0xffffffffffffffff, 0x5, 0x10, 0xfffffffffffffffd, 0xffffffff}, {{r0}, 0x6, 0x42, 0x4, 0x9, 0x7}, {{r3}, 0xfffffffffffffff9, 0x42, 0x1, 0x8000000000000000, 0xf}, {{r0}, 0xfffffffffffffffb, 0x5, 0x2, 0x80, 0x8}], 0x0, &(0x7f0000000200)=[{{0xffffffffffffff9c}, 0xfffffffffffffffc, 0x5, 0x1, 0x4a0, 0x8}, {{r0}, 0xfffffffffffffffa, 0xc, 0x48, 0x5, 0x4}, {{r0}, 0xfffffffffffffffd, 0x40, 0x1, 0x8, 0x4}, {{r0}, 0x1, 0x90, 0x80, 0x7ff, 0x685}, {{r0}, 0xffffffffffffffff, 0x12, 0x40, 0x8, 0x6}, {{r0}, 0xfffffffffffffffe, 0x0, 0x1, 0x5, 0x67e}], 0x8, &(0x7f00000002c0)={0x5, 0x5})
syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344, <r4=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000340)={0x41424344, <r5=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x16b, &(0x7f0000000380)={@local, @remote, [{[], {0x8100, 0x5, 0x0, 0x3}}], {@ipv4={0x800, {{0xe, 0x4, 0x3, 0x3a, 0x159, 0x67, 0x6, 0x6, 0x33, 0x0, @rand_addr=0x2, @rand_addr=0x1, {[@generic={0x7, 0x7, "253bf6f347"}, @ra={0x94, 0x6}, @rr={0x7, 0x3, 0x6}, @timestamp={0x44, 0x10, 0x1, 0x1, 0x7, [{[@remote={0xac, 0x14, 0x0}], 0x1}, {[], 0x7f}]}, @ssrr={0x89, 0x3, 0x8}]}}, @tcp={{0x3, 0x1, r4, r5, 0x1, 0x0, 0x14, 0x80, 0xce, 0x0, 0x4a, {[@mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "6e6fd2ea8d59d4801e72276dbe527099"}, @sack={0x5, 0x1e, [0x6, 0x8, 0x868a, 0x1, 0x6, 0x6, 0x4]}, @mss={0x2, 0x4, 0x6}, @eol, @eol, @sack_perm={0x4, 0x2}]}}, {"f232f62d25e195d8ebbe6433a60cc9a8e639d85e59d44b761ea0ae072d4fcb0a991e385e3d1447741ccfcfe8bcd73fc98f2f3ae7e05f9912997b2cc879ac89e0f67349f24b9ef098ddd10ea87c9a47c0d0e3b30e9450da63d6cb7dc7a6201f2a9e4172c0cdde36cf85d8f357816cc236222e5ae3095357586faed607ec6cd638bdfd28d88d56a0d593c9e4d1ea2411145c1ba2f79b51551808656250e54079f2e4ffc668acbe8838cef27b6b2336edd8c8e81b6f699ab67051813b2cda7ec6ec219ac07b6468592af4001108f85317a11f"}}}}}})
ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000540)={0x6, &(0x7f0000000500)=[{0xd118, 0x81, 0x2, 0x8}, {0x8001, 0x3, 0x4, 0x8000}, {0x4, 0x3, 0x5, 0x2}, {0x2, 0x5, 0x2, 0x9}, {0xfff4, 0x0, 0x4, 0xc294}, {0x2, 0x81, 0x9, 0x7}]})
r6 = socket$inet(0x2, 0x5, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000580)={0x2, 0x1, 0x19, 0x9, 0xffffffffffffffff})
ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f00000005c0)=0x8)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000007c0)={<r7=>0x0}, &(0x7f0000000800)=0xc)
r8 = getegid()
r9 = getpgid(0xffffffffffffffff)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000840)={0x0, <r10=>0x0}, &(0x7f0000000880)=0xc)
r11 = getegid()
r12 = dup2(r2, r1)
r13 = getpgid(0x0)
r14 = geteuid()
getgroups(0x1, &(0x7f00000008c0)=[<r15=>0xffffffffffffffff])
r16 = getpid()
r17 = getuid()
r18 = getpgid(0x0)
getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000900)={0x0, <r19=>0x0}, &(0x7f0000000940)=0xc)
getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000980)={0x0, 0x0, <r20=>0x0}, 0xc)
r21 = getpgrp()
getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000009c0)={0x0, <r22=>0x0}, 0xc)
r23 = getpgrp()
sendmsg$unix(r1, &(0x7f0000000bc0)={&(0x7f0000000600)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000780)=[{&(0x7f0000000640)="74d6e20a9366b4e9d84735f8ee8926de9711c7851f555aa687f706a80abbde87749a76d3b4a082ced6d0d8f3748fe7dd21718a0e0d8b9d38bb0c35ac642f25e81f800779f95dd45a5b0a4171f7341524fceedfeee0758e6b13cb4ee7e661ed9f58156bea4c97cc38ddbe55e2d24d9aaba787b9711c63cf60875701b90579c809af419434a2a484e6bbb11fd13d8ae32c4a638fe1c58b9c68079f717e28ab76dbe200f6d6c2804f851b51d1c205e2370ba4850b42568292662254a93614", 0xbd}, {&(0x7f0000000700)="e4771c80a741b316dd715a8949aefc5f6545349d663d0a8f0fbbaf59462d6d0ad2706427abafb03e6b9bd4f9d064bab62d865c3f2e3ce1892db300115b0e5db2ae63577ea5d1867f96a7c1f72af3606f3a3c7d0329be05f65c9814", 0x5b}], 0x2, &(0x7f0000000a80)=[@cred={0x20, 0xffff, 0x0, r7, 0x0, r8}, @rights={0x10}, @cred={0x20, 0xffff, 0x0, r9, r10, r11}, @rights={0x18, 0xffff, 0x1, [r12, r1]}, @cred={0x20, 0xffff, 0x0, r13, r14, r15}, @cred={0x20, 0xffff, 0x0, r16, r17}, @rights={0x20, 0xffff, 0x1, [r0, r3, r1, r2]}, @cred={0x20, 0xffff, 0x0, r18, r19, r20}, @cred={0x20, 0xffff, 0x0, r21, r22}, @cred={0x20, 0xffff, 0x0, r23}], 0x128, 0x8}, 0x8)

1.408731899s ago: executing program 6 (id=26):
setuid(0xee01)
mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x11bc62ce)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ktrace(0x0, 0xe53a055dd4cd665d, 0xa24, 0x0)
sysctl$vm(&(0x7f0000000040)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0)

1.404973943s ago: executing program 6 (id=27):
r0 = kqueue()
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x0, 0x4, 0x1, {[0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x5f2aba80, 0x3, 0x800a, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffc, 0x8], [0x0, 0x6, 0x0, 0xffff, 0x3, 0x0, 0x1], [0x1, 0x0, 0x401, 0x0, 0x1, 0x80000], [{0x0, 0x1}, {0xfffd, 0xffffffff, 0x3ac6}, {0xfffe, 0x0, 0x5, 0xffffffffffdffffd}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xc8, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x10000, 0x0, 0xf}, {0x0, 0x20000, 0x1000}], {}, {0x0, 0x40000, 0x5}}})
kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x100}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0xc8}, {0x3}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}]})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0})
clock_getres(0x4, &(0x7f0000000380))
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000))

1.339207991s ago: executing program 2 (id=28):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x1d}]}) (async)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x1d}]})
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
ftruncate(r0, 0x48001000007)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES64])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"]) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x2, 0x4001, 0x0)
connect$unix(r1, &(0x7f0000000080), 0x2)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
munmap(&(0x7f0000001000/0x400000)=nil, 0x400000)

1.335879423s ago: executing program 3 (id=29):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1f)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
close(r0)
mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x1000, 0xfffffffe)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r1, 0x3})
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="3901639b6174aaaaaaaaaabb86dd60062e0b"])
sysctl$vm(&(0x7f0000000000)={0x2, 0xc}, 0x2, &(0x7f0000000040)="bc02f7392de1aa2060f57da11f638d938a8ea0a81c49ef42f3667f6783c91f8cfb19daaeb53046c958fb665704c521f36e2821db1c70645e7d7896f396e472565b2152b1f38948f3bf5b2f755cd928b9198f9786077e4e689142655dae18972a685c35b2edef6f708d8b8d46858884ded34e90b76e8d67c6a86e91f784735f6a253a9195bc57a2840f54dfdded7107fac61e239252ea6f09aae6c2d5917203853c6df3e58dfa0996e05dd700f7ba0959e191cf3fd96ae10b6b", &(0x7f00000001c0)=0xb9, &(0x7f0000000280)="02f0d1fb7f66f6fb26627b80a9a954dd10ab598adb26f60f383ac9918a31b9ebba236caf1fbce3c4d0c50317626fd39961dab5efdd200734cf794a8140a763894bf1727ff04b67f5bf6082582093e95c", 0x50)
r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f0000001200)={0x2, 0xc0})
execve(0x0, 0x0, 0x0)

285.6385ms ago: executing program 1 (id=31):
rename(&(0x7f0000000280)='./file0\x00', 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setuid(0xffffffffffffffff)
ioctl$BIOCLOCK(r0, 0x20004276)
ioctl$BIOCLOCK(r0, 0x20004276)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$TIOCSETA(r2, 0xc1584460, &(0x7f0000000280)={0x1, 0x7, 0xffffffff, 0x4, "00000000faff2c7100", 0x1, 0x3})
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

284.120888ms ago: executing program 7 (id=32):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async, rerun: 64)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async, rerun: 64)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
r0 = socket(0x18, 0x1, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) (async)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000f40)={0x0, [{0x2}, {0x0, 0x10000}, {0x3, 0x2}, {}, {0x0, 0xfffffff9}, {0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x3678}, {0x2, 0x1}, {}, {0x1, 0xfffffffe}, {0x0, 0x6cb}, {0x3, 0x4}, {}, {0x2}, {0x0, 0x34a}, {0x0, 0x200000}, {0x0, 0xffffdcf3}, {0x2}, {0x0, 0xfffffff9}, {0x3}, {0x2}, {}, {0x3}, {}, {0x0, 0x3}, {0x1}, {0x3, 0x4}]}) (async)
r1 = kqueue() (async)
r2 = socket(0x10, 0x1, 0x12)
setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000440)={0x81, 0x3}, 0x8)
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{}, 0xfffffffffffffff9, 0x6b, 0x10, 0x9}, {{r0}, 0xfffffffffffffffd, 0x29, 0x80000000, 0x388f}], 0x203, 0x0, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
r3 = socket(0x18, 0x1, 0x0)
setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
setsockopt(r3, 0x1000000029, 0xa, &(0x7f0000000000), 0x0)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

283.443157ms ago: executing program 0 (id=33):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0})
ioctl$BIOCSETIF(r0, 0x40384900, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
close(r1)
listen(r1, 0x5)
ioctl$VMM_IOC_READREGS(r0, 0xc2485607, &(0x7f00000003c0))
writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000000)="9cf7a08294", 0x5}], 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0)
ioctl$PCIOCWRITE(r2, 0xc00c7006, &(0x7f0000000080)={{0x0, 0x1, 0xf}})
r3 = socket(0x2, 0x2, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aef, 0x2000005, 0xfe, 0x7ffffffd, 0xc, 0x8, 0x10, [{0x0, 0x9, 0x4, 0x10071000}, {0x3, 0x88, 0x8, 0xbea2}, {0x8, 0x6, 0x0, 0x3}, {0x9, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x9, 0x2, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0xc, 0x7}, {0x2, 0x82, 0x5, 0x1000003}, {0x7, 0x100, 0xd1a, 0x1088}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0xe, 0x8, 0x3}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1}, {0xc, 0x7, 0x0, 0x6}, {0x0, 0x0, 0x1002, 0x30004}]})
r4 = open(&(0x7f0000000500)='./file0\x00', 0x800, 0x1f)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r5 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r6 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r6, 0x802069db, &(0x7f00000001c0))
ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
getsockname(r5, 0x0, &(0x7f0000000540)=0xf39baa3315325b73)
socket(0x18, 0x2, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4)
sendmsg$unix(r3, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x0, 0x8}, 0x2)
close(r0)

255.30349ms ago: executing program 1 (id=34):
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"])
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
setsockopt(0xffffffffffffffff, 0x1000000029, 0x1a, &(0x7f0000000000)='\"\x00\x00', 0x3)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000000029, 0x6b, 0x0, 0x0)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040), 0xc)
sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x3, 0x0)
bind(r1, &(0x7f0000000000), 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async)
setsockopt(0xffffffffffffffff, 0x1000000029, 0x1a, &(0x7f0000000000)='\"\x00\x00', 0x3) (async)
socket(0x18, 0x1, 0x0) (async)
setsockopt(r0, 0x1000000000029, 0x6b, 0x0, 0x0) (async)
getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040), 0xc) (async)
sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x2, 0x3, 0x0) (async)
bind(r1, &(0x7f0000000000), 0x10) (async)

250.06458ms ago: executing program 0 (id=36):
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="6f9553791acb", @broadcast, [{[], {0x8100, 0x0, 0x0, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x3, 0x28, 0x66, 0x2, 0x1, 0x3, 0x0, @broadcast, @loopback}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x1000, 0x0, 0x3}}}}}})
sysctl$kern(&(0x7f0000000640)={0x1, 0x53}, 0x2, 0x0, 0x0, &(0x7f00000008c0), 0x0)
syz_emit_ethernet(0x270, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

247.018648ms ago: executing program 7 (id=37):
mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2000, 0x3ffe)
r0 = socket(0x2, 0x3, 0x0)
r1 = socket(0x18, 0x1, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240)={<r2=>0x0}, &(0x7f0000000280)=0x2)
ktrace(0x0, 0x1, 0xe00, r2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r3 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0))
ioctl$FIONREAD(r0, 0x80206913, &(0x7f0000000100))
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{}, 0x101})
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x262, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
pwritev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="be4b2887ecf693d05f9086af5700760924219bfd2a", 0x15}, {&(0x7f0000000280)="0133b60aa28e770f988fc973de04c8944d47bb6f1f184df006db3e61675130c22e56ae84c440cd3eda8d420293d631f05ed2fd3fa174af8acc360b4ded54c5f8448f8e8e14c864127461009ba63e5cd77c7b1c398322984ef4c9c73bba1c8199fac0a6ad9ca4ead37bde9bd0722faa59c4c1bf923ed8171d19f057f1fa229c057bf33b6a462ca5b421751caf167d2a3d6a45e9ff0e6669b6373a505e83086d3e882bbf09d67555af855f88daadc7e928d1e9781b108cead0a3f381233474d984b0335516fabcbb8680935a2cb48511da042fd684bc", 0xd5}, {&(0x7f0000000100)="67216a92e7f81ae5cea528a3f976086143e04171d70f7d16f9279d", 0x1b}, {&(0x7f0000000f00)="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", 0x1000}], 0x4, 0x9c5)
ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r5, &(0x7f0000000080), 0x0)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00')
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

246.809368ms ago: executing program 0 (id=38):
sysctl$kern(&(0x7f00000001c0)={0x1, 0x49}, 0x9, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$unix(r0, 0x0, &(0x7f0000000040))
msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2)

202.528947ms ago: executing program 1 (id=39):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r0 = syz_open_pts()
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="04aeee8d"}], 0x1000000000000207)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xa, 0xc0)
r2 = socket$inet(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10070000000000", 0x8)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000280)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
close(r0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r7, r6, r7, 0x1, 0xfffc}, 0x4, 0x8000, 0x7})
setuid(r6)
rmdir(&(0x7f0000000000)='./file0\x00')
fchdir(r1)
mlock(&(0x7f0000d97000/0x4000)=nil, 0x4000)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
r8 = socket(0x2, 0x3, 0x0)
ioctl$FIONREAD(r8, 0x80206913, &(0x7f0000000100))
poll(&(0x7f0000000180)=[{r0, 0xe8fa166e35533996}, {r1, 0x20}, {r5, 0x2}, {0xffffffffffffffff, 0x40}, {r2, 0x80}, {r5, 0x4}, {}, {r1, 0x4}, {0xffffffffffffff9c, 0x40}, {r8, 0x4}], 0xa, 0x13)
sysctl$hw(&(0x7f0000000300)={0x6, 0x14}, 0x2, &(0x7f0000000600), 0x0, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x3, 0x0, 0x0, 0x44}]})
sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000002c0)={0x1, 0x50}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000200)=0x1c, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)

192.764595ms ago: executing program 0 (id=40):
socket(0x2, 0x4001, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54})
r0 = syz_open_pts()
r1 = kqueue()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x4ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0x1ff, 0x1, 0x4, 0x4, 0xfffffffffffffff8, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0x100000000, 0x0, 0x0, 0x4, 0xfffffffffffffffa], [0xfffffffffffff0c7, 0x2, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x5}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffd, 0xd}, {0x7ffe, 0xd, 0x40007, 0x1}, {0xfffe, 0x0, 0x5}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}})
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000100)="b10005010000009f0500070007000000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b126eeac6839e1f29ecfbfe0c2300008abfba0900000008e37193f8343712051eeab71dc000266c05080000fca65361ba84913f0100"/177, 0xb1, 0x0, 0x0, 0x0)
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
close(r0)

191.814737ms ago: executing program 4 (id=42):
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004", 0x7, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000000), 0x10)
sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
kqueue()
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r1 = socket(0x18, 0x3, 0x3a)
setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x103}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x400, 0x5d)
mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x1, 0x8011, r2, 0x100000000000000)
sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e17fffff", 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x50, 0x3, 0x9e}, 0xc)
r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$DIOCMAP(r3, 0xc0106477, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
r4 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r4, 0xc028756b, &(0x7f0000000100))
r5 = syz_open_pts()
close(r5)
r6 = syz_open_pts()
ioctl$TIOCSETAW(r6, 0x802c7415, &(0x7f0000000040)={0x2930c6bd, 0x804, 0x97, 0xd6f, "8b03007d693ecfcef82e19c3a326d3c900", 0x17, 0x1})
writev(r5, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0x98b}], 0x1)

191.129931ms ago: executing program 7 (id=43):
sysctl$kern(&(0x7f0000000000)={0x1, 0x4f}, 0x2, 0x0, 0x0, &(0x7f0000000040)="1314d1032442b1597db239cdb964117ee6f6d73edb64e282fedb011c5ba2a0041e6ec08cc48a893632ccef363e3c6967c6b7cf9b4f5bf1eecae218c382cd918d9f9ce45ef727053d6daa9490306560c422bb7de99339b42de27764e1ae41908c869b0fe469a60f0a91a36ad820ab36ad2aa3ccc5069caddf27c684f734aa9b5309cff36427bcaaa970231fa93ae50763c1f8d212fe4a8f5cdf0eeb8cd695997f5140c83db22bf2aac600cb47995739ab7eea3436af158d2fc18f3fb87103e87ab5760dc67f5d15ebc6284b", 0xcb)

186.4632ms ago: executing program 1 (id=44):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="e0fe00", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
open(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_pts()
close(r0) (async)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xf66c, 0xba64, 0x101, 0x5ffffd58, "9d1cff7f00050019000000000700", 0x203fb, 0xe32a})
kqueue()
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) (async)
mknod(&(0x7f0000000180)='./file0\x00', 0x100, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff})
pwrite(r3, &(0x7f0000000100)="483fc19b424162e6b1be6d5400157753329c4c7522eab561cb9ef3cef84847d4cfee6f4b79f5", 0x26, 0x6) (async)
write(r2, &(0x7f0000000040)="ed7c1f9fe5a77837bd5c710cb3b4b4b14f1b66d2ea34ef457453559937551c2672e57ac540c8129e", 0xfffffdcb) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
unveil(0x0, &(0x7f0000000000)='x\x00') (async, rerun: 64)
r4 = dup(r0) (rerun: 64)
writev(r4, 0x0, 0x0)
select(0x0, 0x0, &(0x7f0000000140)={0x2, 0x480000, 0x2, 0x8, 0x2, 0x7, 0x8, 0x8e}, &(0x7f00000002c0)={0x8, 0xe33, 0x7, 0x4, 0x6, 0x9, 0x5, 0x500000000}, 0x0)

185.720875ms ago: executing program 7 (id=45):
openat$wsmouse(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000900)="4c193e867882710258923fcfd31898878b0e631a32245c4587800e87e5bb73f54c901e00000000000034a4b45a54cae33fda73a1765418be18855aacb42b3e", 0x3f}, {&(0x7f00000000c0)="0c3f1b90d945c6c94cf359ea5466197059c971fcc0bd557d704ab3357b8cb365bd9255394d73f39a372824ea09dcd89644686e9e394313468f5ce288", 0x3c}, {&(0x7f00000007c0)="9875bb8ce629aeafa4591dc018e6bc89648d4d36aeca065c82f21194511a4889b261e787913a1f841b9ab292fa288c4905356c2b9074fb74d41237dbe48ab93e48852dc931226c5633bda470eb3651fbe4441827da2f52b59c4303d195a1ee5104e773bf08064f0491baadf85c3278e15da752c71487", 0x76}, {&(0x7f0000000a40)="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", 0x10c}], 0x4)
execve(0x0, 0x0, 0x0)

183.251089ms ago: executing program 4 (id=46):
r0 = kqueue()
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0})
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, 0x0)
openat$vmm(0xffffffffffffff9c, 0x0, 0x8, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
r3 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r3, &(0x7f0000000000), 0x10)
write(r3, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e)
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x5, 0x1e}, {0x64, 0xff, 0x0, 0x1}, {0x8306, 0x0, 0x5}]})
syz_emit_ethernet(0x26, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2])
kevent(r0, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffe, 0x8b, 0x4}, {{r2}, 0xfffffffffffffffa, 0xa9, 0x20000009, 0x8000, 0xfffffffffffffffb}], 0x1, 0x0, 0xbe4, 0x0)
sysctl$hw(&(0x7f0000000300)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
fcntl$dupfd(r4, 0x3, 0xffffffffffffffff)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETA(r5, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"})
close(r5)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x4, &(0x7f0000000280)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000300)=0x2, 0x0, 0x4c)
dup2(r1, r1)

53.585992ms ago: executing program 4 (id=47):
r0 = semget$private(0x0, 0x4, 0x10)
semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f0000000000)=""/171)
semctl$GETPID(r0, 0x1, 0x4, &(0x7f00000000c0)=""/80)
r1 = semget(0x2, 0x4, 0x4)
semctl$GETPID(r1, 0x1, 0x4, &(0x7f0000000140)=""/38)
semctl$SETVAL(r0, 0x2, 0x8, &(0x7f0000000180)=0x10001)
semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f00000001c0)=""/199)
r2 = socket$inet6(0x18, 0x4, 0xe)
getsockopt(r2, 0x1, 0x492, &(0x7f00000002c0)=""/138, &(0x7f0000000380)=0x8a)
close(r2)
setsockopt(r2, 0x4, 0x3, &(0x7f00000003c0)="a297de7927879c2619d95320368716f33909ac98b9ce7aa587b52b0a4d334b134675ed9c45a19a644e713e860891c0d3fa363fc9d3233313d51a8bd9c4624003dcdffbc293", 0x45)
semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000440)=""/52)
r3 = semget$private(0x0, 0x3, 0x291)
semctl$GETVAL(r3, 0x3, 0x5, &(0x7f0000000480)=""/4096)
r4 = getpgrp()
fcntl$lock(r2, 0x8, &(0x7f0000001480)={0x0, 0x1, 0x7, 0x51, r4})
r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000014c0), 0x200, 0x0)
sysctl$vm(&(0x7f0000001500)={0x2, 0x4}, 0x2, &(0x7f0000001540)="bcba490cdaf760a4c9834894d2570decfd8334268700ae1aa0351781a82d837787ff4edc63928c9f4e32a231f3f6543aa445e2cba46817a1997e91f859ca719eaf9e7d8e668593d6c5cda857c664dc744c0f4fff", &(0x7f00000015c0)=0x54, &(0x7f0000001600)="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", 0x1000)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000002600), 0x400, 0x0)
semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000002640)=[0x7, 0x4, 0x2, 0xc, 0x100])
r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000002680), 0x10, 0x0)
ioctl$TIOCFLUSH(r6, 0x80047410, &(0x7f00000026c0)=0x5)
ioctl$FIONBIO(r5, 0x8004667e, &(0x7f0000002700)=0x5)
setsockopt(r5, 0x1, 0x6, &(0x7f0000002740)="001f2448becb15c1faa5e466ae79d6a0b533c21535942d79856ca731cd", 0x1d)
ioctl$TIOCMBIC(r5, 0x8004746b, &(0x7f0000002780)=0x9)
fcntl$setflags(r6, 0x2, 0x1)
accept$unix(r5, &(0x7f00000027c0)=@abs, &(0x7f0000002800)=0x8)
ioctl$LIOCSFD(r5, 0x80046c7f, &(0x7f0000002840))
sysctl$kern(&(0x7f0000002880), 0x2, &(0x7f00000028c0)="9dd67ce3f513812bb0fe226094010b16506297a04e0b15696d592e3958a08a93f1aea4802b5fa9de4da9279376ee323cb8595d42b026ba73c91fa10fdb976d70fe53490b2b95aaf0d14c3aca90dc35bd3f2836ea394193e5ff6174e76b536d21c0c51c1781c09b5a6e223f8730b73eec3342c0d8aa57bdb4b27aed39d4771ef452e4eb09e731512fa13f099fd0ff804c3d7528ae0f0e2d2d26d49a3bc27c6a6629c2", &(0x7f0000002980)=0xa2, &(0x7f00000029c0)="d9a0c2a9f42bc4b18c41a8eb239992cde120f0085ba6a095a705941dcf06c2e2724c72bf40da304cf4c40f5fe1cfc56e68bc5462209d35a0c7c4eead2c1680d54254429f2d0df507225443dc1d373ef3f732cb4e37b00bb45c427aa980315a87b5e5987a9cebba3b6b527584aa942bb7e1b2bb2ad50258", 0x77)

46.103063ms ago: executing program 4 (id=48):
r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
sendto$unix(r0, &(0x7f0000000280)="ddd2c9ebe3925390fbcb7b85ad95a07039fe1fd7d7fd981b4245853f34c4d532cd608d4a4123c3fb64d3b6d2a1831917e59505e489143a0124cc81cf306c8edb20eedf0b12dd23651e2ea41499b609fccdde5e82ac5a369213064586cf7001cb2df02c35059cdcc5525e52d163b494785361977973f27699fe09feb62f8f072225004adf98302b8fe8a7068add842a258ee9c7104b52090428ddf8eb8aa4f82726660ab9f5739a3de6bee90342bca19993645bb0545f545141d9ac7852c5133d6a5f0538ab0a441ca4a6c0c4e8736c1fb0628bad07dbb276ef5e3de7330527bed19989d17e65705d639be06c68c6fad9c2cb63dd", 0xf4, 0x8, &(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8)
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="5fde40680db29c729a49cbf3f6caee7d0330", 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1)
r1 = socket(0x18, 0x2, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='/-\x00', &(0x7f0000000200)=':\x00', &(0x7f0000000380)='-]},+\x00', &(0x7f00000003c0)='%]#/\'-{:.,*}.()\x01#B/+}\'\x00', &(0x7f0000000400)='$\\\xf5(\\\x00', &(0x7f0000000440)='{.\x00', &(0x7f0000000480)='\x00'], &(0x7f0000000580)=[&(0x7f0000000500)='+&\x00', &(0x7f0000000540)='-*\x00'])
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0)

37.814975ms ago: executing program 4 (id=49):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000000000/0x2000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x2000) (async)
ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x23}, 0x7ff, 0x8003, 0x2}) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7, 0x8017, 0x7fffffff, 0xb31, 0x1, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x4, 0x71002}, {0x6, 0xc, 0x8, 0x7f}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x8008}, {0x404, 0x1, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x3}, {0x2, 0x401, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x8f, 0x7ffc, 0xc, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0x9, 0x88b0}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async)
mknod(0x0, 0x2000, 0x205318) (async)
ioctl$VNDIOCCLR(0xffffffffffffffff, 0x80384601, 0x0) (async)
r4 = socket(0x11, 0x3, 0x0)
recvfrom$unix(r4, &(0x7f00000001c0)=""/198, 0xff2c, 0x840, 0x0, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
setuid(0xffffffffffffffff) (rerun: 64)
r5 = msgget$private(0x0, 0x527)
ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, 0x0) (async)
msgctl$IPC_SET(r5, 0x1, 0x0) (async)
msgctl$IPC_RMID(r5, 0x0)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 64)
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 64)
ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0xf, 0x0})
ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) (async, rerun: 64)
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x42876) (async, rerun: 64)
kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xffffffffffffffff, 0x80, 0xfffff, 0x80, 0x6c}], 0x101, 0x0, 0x6, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async, rerun: 32)
r6 = socket(0x800000018, 0x2, 0x0) (rerun: 32)
bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)

34.094766ms ago: executing program 5 (id=50):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809edd, 0x7e, 0xfffffffeffffffff, 0x8000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x13, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa"])
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
r2 = socket(0x2, 0x3, 0x2f)
r3 = dup(r2)
setsockopt$inet_opts(r3, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
syz_extract_tcp_res(&(0x7f0000000080), 0x9, 0x3)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x3, 0x0)
r5 = dup(r3)
dup2(r5, r4)
connect$unix(r4, &(0x7f0000000000), 0x10)
sendto$inet(r3, &(0x7f00000001c0)='\v\x00\x00\x00\x00', 0x5, 0x0, 0x0, 0x0)

18.624306ms ago: executing program 6 (id=51):
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async)
kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2)
ioctl$FIONBIO(r0, 0xc0307004, &(0x7f0000000080)=0x2) (async)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffffff) (async, rerun: 32)
r2 = socket(0x2, 0x1, 0x0) (rerun: 32)
r3 = dup(r2) (async)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async, rerun: 64)
r4 = syz_open_pts() (rerun: 64)
close(r4) (async, rerun: 64)
getrlimit(0x5, &(0x7f0000000180)) (rerun: 64)
r5 = syz_open_pts()
ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0x7) (async)
writev(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)="cbc0653add731546f3a25fb862e03d2e46b5ccd20f42f025f4da0cab8b788e5cad97a89a9f23b2aa28dd50a8a8ff0aa252ce1cce4c6d5b3a5e2647ff694d529caf6017ba5e94f4c16d242c5b53db90c2a614c0d745f48ae8da918b1118fc63ed943106e3a35eac5c9cdf995fba2b3ef177e89a8ea92aa5b11047eb5c6729da14d2f30d", 0x83}], 0x1) (async)
listen(r3, 0xb)
ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f0000000c80)={0x2, 0x100, 0x8000, {[0x7d8d, 0x1, 0x9, 0x5, 0x2, 0x51, 0xfffffffffffffff7, 0x2000000000000006, 0x0, 0x80000001, 0x8000000000000000, 0xfffffffffffffff9, 0x68a8, 0x6, 0xe35c, 0x0, 0x7, 0x1], [0x8000000000000000, 0x9, 0x4, 0x80000001, 0x6, 0x100000001, 0x4, 0xffffffffffffffff, 0x7, 0x1], [0x8, 0x8000000000000001, 0x0, 0x6, 0x4, 0x5, 0xfffffffffffffff2], [0x2a3, 0xe0, 0x4, 0x3, 0xfffffffffffffff9, 0x3], [{0x204, 0xfffffff9, 0x0, 0x6}, {0xe434, 0x0, 0x2, 0x7}, {0x81, 0x7, 0x3, 0x9}, {0x3, 0x2, 0x2}, {0x31d, 0x5, 0x40, 0x100}, {0x0, 0x200, 0x1, 0x4}, {0x7, 0x3, 0x2, 0x7fff}, {0x0, 0xa, 0x4, 0x9}], {0xb, 0x617febe4, 0x4, 0x384}, {0x0, 0xff, 0x81, 0x54}}})
r6 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
setreuid(0xee00, 0x0) (async)
r8 = getuid()
setreuid(0xee00, r8) (async)
ioctl$FIONREAD(r7, 0x80206979, &(0x7f0000000100))
ioctl$VNDIOCSET(r6, 0x80044403, 0x0)
linkat(r1, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

0s ago: executing program 4 (id=52):
r0 = socket(0x11, 0x3, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
sendto$unix(r0, &(0x7f0000000000)="b10005040000", 0x6, 0x0, 0x0, 0x0) (async)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TIOCSETA(r1, 0xc0284457, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "9786224ff1c102d1000100001000", 0xfffffffd, 0xfffffffd}) (async)
connect$unix(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts.
pckbd_enable: command error
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 953
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
db_enter() at db_enter+0x25
panic(ffffffff83341bfb) at panic+0x1cf
__assert(ffffffff8337bb4f,ffffffff833d92e4,3b9,ffffffff833b2f5c) at __assert+0x29
refcnt_finalize(ffff80003c9bab48,ffffffff833375d3) at refcnt_finalize+0x1c8
pppx_if_destroy(205b9a,ffff80003c9bab40) at pppx_if_destroy+0x3d
pppxclose(205b9a,2,2000,ffff80002a7f42b8) at pppxclose+0xa0
spec_close(ffff800038152fa0) at spec_close+0x417
VOP_CLOSE(fffffd8075b7e968,2,fffffd8007bfb3a8,ffff80002a7f42b8) at VOP_CLOSE+0x129
vn_closefile(fffffd80739f12d0,ffff80002a7f42b8) at vn_closefile+0x11d
fdrop(fffffd80739f12d0,ffff80002a7f42b8) at fdrop+0x121
closef(fffffd80739f12d0,ffff80002a7f42b8) at closef+0x190
fdfree(ffff80002a7f42b8) at fdfree+0x115
exit1(ffff80002a7f42b8,0,0,1) at exit1+0x576
sys_exit(ffff80002a7f42b8,ffff800038153300,ffff800038153250) at sys_exit+0x1a
end trace frame: 0xffff8000381532f0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 953
ddb> trace
db_enter() at db_enter+0x25
panic(ffffffff83341bfb) at panic+0x1cf
__assert(ffffffff8337bb4f,ffffffff833d92e4,3b9,ffffffff833b2f5c) at __assert+0x29
refcnt_finalize(ffff80003c9bab48,ffffffff833375d3) at refcnt_finalize+0x1c8
pppx_if_destroy(205b9a,ffff80003c9bab40) at pppx_if_destroy+0x3d
pppxclose(205b9a,2,2000,ffff80002a7f42b8) at pppxclose+0xa0
spec_close(ffff800038152fa0) at spec_close+0x417
VOP_CLOSE(fffffd8075b7e968,2,fffffd8007bfb3a8,ffff80002a7f42b8) at VOP_CLOSE+0x129
vn_closefile(fffffd80739f12d0,ffff80002a7f42b8) at vn_closefile+0x11d
fdrop(fffffd80739f12d0,ffff80002a7f42b8) at fdrop+0x121
closef(fffffd80739f12d0,ffff80002a7f42b8) at closef+0x190
fdfree(ffff80002a7f42b8) at fdfree+0x115
exit1(ffff80002a7f42b8,0,0,1) at exit1+0x576
sys_exit(ffff80002a7f42b8,ffff800038153300,ffff800038153250) at sys_exit+0x1a
syscall(ffff800038153300) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71949cb0fd40, count: -16
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800038152d80
rbx                                0
rdx                                0
rcx                                0
rax               0xffff80002a7f42b8
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xe0878fe4476f7d0b
r11               0xdf1027c1162d18f9
r12                                0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff82122155    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800038152d70
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor) tid=163194 pid=35586 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80002a7f42b8 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff80002a81e7e0,0xffff80002a7f4a90
    process=0xffff80002cd2c018 user=0xffff80003814e000, vmspace=0xfffffd807e1775d0
    estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=1, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 35056  472271  13550      0  2           0                syz-executor
 13686  146214  55833      0  2           0                syz-executor
 13686  220496  55833      0  3   0x4000000  smrbar        syz-executor
 13686  323726  55833      0  3   0x4000080  fsleep        syz-executor
 13686   48162  55833      0  3   0x4000080  fsleep        syz-executor
 80055  133420  50760      0  2           0                syz-executor
 80055  237080  50760      0  3   0x4000080  bell          syz-executor
 60465  241729  11375      0  3        0x80  nanoslp       syz-executor
 60465   10534  11375      0  3   0x4000080  kqsel         syz-executor
 60465  287965  11375      0  3   0x4000080  fsleep        syz-executor
 17595  235931  78440      0  2           0                syz-executor
 17595  164706  78440      0  3   0x4000080  fsleep        syz-executor
 52061  172010  92445      0  4     0x82000                syz-executor
 52061  277631  92445      0  2   0x4082000                syz-executor
 52061  119834  92445      0  3   0x4002000  suspend       syz-executor
 73161   10761  11529      0  2           0                syz-executor
 73161  356091  11529      0  2   0x4000000                syz-executor
 73161  420851  11529      0  3   0x4000000  inode         syz-executor
 50760   18451  25706      0  2       0xc82                syz-executor
 55833  122730  25706      0  2       0xc82                syz-executor
 28666  362375  25706      0  2       0xc82                syz-executor
 13550  448880  25706      0  3        0x82  nanoslp       syz-executor
 92445  287246  25706      0  3        0x82  nanoslp       syz-executor
 11529  229195  25706      0  3        0x82  nanoslp       syz-executor
 11375  333630  25706      0  2       0xc82                syz-executor
 78440  480624  25706      0  3        0x82  nanoslp       syz-executor
 25706  496736  81907      0  3        0x82  kqread        syz-executor
 81907   92535  73239      0  3    0x10008a  sigsusp       ksh
 73239  252648  47137      0  3        0x98  kqread        sshd-session
 47137  307100   5009      0  3        0x92  kqread        sshd-session
 87361  201999      1      0  3    0x100083  ttyin         getty
  5009  125369      1      0  3        0x88  kqread        sshd
 88523   25229  11407     73  3   0x1100090  kqread        syslogd
 11407  500247      1      0  3    0x100082  sbwait        syslogd
 96697   52076      1      0  3    0x100080  kqread        resolvd
 70993   13439  92342     77  3    0x100092  kqread        dhcpleased
 98586  117251  92342     77  3    0x100092  kqread        dhcpleased
 92342  105160      1      0  3        0x80  kqread        dhcpleased
 21756  197581      0      0  3     0x14200  bored         smr
 66110  160206      0      0  2     0x14200                zerothread
 12540  510031      0      0  3     0x14200  aiodoned      aiodoned
 88900  371166      0      0  3     0x14200  syncer        update
 37048  301235      0      0  3     0x14200  cleaner       cleaner
 42894  280698      0      0  3     0x14200  reaper        reaper
 82752  487997      0      0  3     0x14200  pgdaemon      pagedaemon
 30759  187311      0      0  3     0x14200  bored         viomb
 59301  233720      0      0  3  0x40014200  acpi0         acpi0
 53242    5887      0      0  3     0x14200  bored         softnet7
 19057  460084      0      0  3     0x14200  bored         softnet6
 88920  466655      0      0  3     0x14200  bored         softnet5
 43250  373759      0      0  3     0x14200  bored         softnet4
 47155   38815      0      0  3     0x14200  bored         softnet3
 52982  362344      0      0  3     0x14200  bored         softnet2
 72084  175204      0      0  3     0x14200  bored         softnet1
 59853  307350      0      0  3     0x14200  bored         softnet0
 11726   43955      0      0  3     0x14200  bored         systqmp
  3928  157014      0      0  3     0x14200  bored         systq
 51071   13774      0      0  3  0x40014200  tmoslp        softclock
 64530  418387      0      0  3  0x40014200                idle0
     1  106630      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10179  11050K   11114K 166960K     11291        0
            pcb    17     14K      16K 166960K       106        0
         rtable   197      6K       6K 166960K       276        0
             pf    31     13K      16K 166960K        44        0
         ifaddr    40      7K       7K 166960K        46        0
        ifgroup    51      2K       2K 166960K        55        0
         sysctl     1      1K       9K 166960K         5        0
       counters    33     17K      17K 166960K        34        0
       ioctlops     0      0K       4K 166960K        38        0
            iov     0      0K      12K 166960K         5        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1337     84K      84K 166960K      1388        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         3        0
         VM map     2      1K       1K 166960K         2        0
            sem     5      0K       0K 166960K         5        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      73K 166960K       182        0
           proc    60     59K      83K 166960K       481        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         5        0
       in_multi    89      6K       7K 166960K       101        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    61    281K     281K 166960K        61        0
           exec     0      0K       1K 166960K       351        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   232    143K     146K 166960K      3174        0
       UVM aobj     4      2K       2K 166960K         4        0
     pinsyscall    39     78K      84K 166960K      1204        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         1        0
            NDP    11      0K       2K 166960K        28        0
           temp    35   8630K    8694K 166960K      3815        0
         kqueue    14     22K      30K 166960K        32        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120       39    0       36     1     0     1     1     0     8    0
rtentry    136       96    0       10     4     0     4     4     0     8    0
unpcb      144       64    0       49     1     0     1     1     0     8    0
syncache   336        3    0        3     1     0     1     1     0     8    1
tcpcb      736       53    0       14     4     0     4     4     0     8    0
arp         88       10    0        1     1     0     1     1     0     8    0
inpcb      328      230    0      187     7     0     7     7     0     8    3
ip6q        72        1    0        0     1     0     1     1     0     8    0
ip6af       40        1    0        0     1     0     1     1     0     8    0
nd6        104       16    0        2     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1072       1    0        0     1     0     1     1     0     8    0
pppxif     1384       1    0        0     1     0     1     1     0     8    0
pfanchor   1288       4    0        4     1     0     1     1     0     8    1
pfrule     1344       2    0        2     1     0     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      442    0       42    28     0    28    28     0     8    2
art_table   40      443    0       42     5     0     5     5     0     8    0
art_node    32       96    0       19     1     0     1     1     0     8    0
semapl     112        3    0        0     1     0     1     1     0     8    0
shmpl      112        1    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1633    0      132    95     0    95    95     0     8    0
ffsino     256     1633    0      132    95     0    95    95     0     8    0
nchpl      144     1883    0      201    63     0    63    63     0     8    0
uvmvnodes   80     1730    0        0    36     0    36    36     0     8    0
vnodes     216     1730    0        0    97     0    97    97     0     8    0
namei      1024    5719    0     5719     1     0     1     1     0     8    1
kstatmem   264       24    0        2     2     0     2     2     0     8    0
scsiplug    72        1    0        1     1     0     1     1     0     8    1
scxspl     216     6612    0     6612     8     0     8     8     1     8    8
plimitpl   152       35    0       18     1     0     1     1     0     8    0
sigapl     424      463    0      413     6     0     6     6     0     8    0
knotepl    120     4496    0     4447    16     0    16    16     0     8   13
kqueuepl   184       36    0       24     1     0     1     1     0     8    0
pipepl     304      102    0       75     3     0     3     3     0     8    0
fdescpl    448      443    0      413     4     0     4     4     0     8    0
filepl     120     1647    0     1397     9     0     9     9     0     8    1
lockfpl    104       15    0       12     1     0     1     1     0     8    0
lockfspl    48        9    0        6     1     0     1     1     0     8    0
sessionpl  144       21    0       13     1     0     1     1     0     8    0
pgrppl      48       29    0       13     1     0     1     1     0     8    0
ucredpl    104      109    0       98     1     0     1     1     0     8    0
zombiepl   144      414    0      413     1     0     1     1     0     8    0
processpl  1152     463    0      413     4     0     4     4     0     8    0
procpl     664      541    0      480     6     0     6     6     0     8    0
sockpl     552      333    0      272     7     0     7     7     0     8    2
mcl64k     65536      4    0        4     1     0     1     1     0     8    1
mcl8k      8192       4    0        4     1     0     1     1     0     8    1
mcl4k      4096    2482    0     2431    14     0    14    14     0     8    7
mcl2k      2048     232    0      231     1     0     1     1     0     8    0
mtagpl      96        4    0        4     1     0     1     1     0     8    1
mbufpl     256     4259    0     4127    14     0    14    14     0     8    4
bufpl      280     2921    0      117   201     0   201   201     0     8    0
anonpl      24   101109    0    97801    23     0    23    23     0   187    2
amapchunkpl 152    9353    0     8851    22     0    22    22     0   158    1
amappl16   200     1915    0     1881     5     0     5     5     0     8    3
amappl15   192        5    0        5     1     0     1     1     0     8    1
amappl14   184      107    0       97     1     0     1     1     0     8    0
amappl13   176        2    0        2     1     0     1     1     0     8    1
amappl12   168     1050    0     1020     2     0     2     2     0     8    0
amappl11   160       59    0       49     1     0     1     1     0     8    0
amappl10   152        5    0        5     1     0     1     1     0     8    1
amappl9    144      248    0      248     1     0     1     1     0     8    1
amappl8    136       23    0       22     1     0     1     1     0     8    0
amappl7    128      102    0       92     1     0     1     1     0     8    0
amappl6    120      173    0      170     1     0     1     1     0     8    0
amappl5    112      115    0      109     1     0     1     1     0     8    0
amappl4    104      265    0      251     1     0     1     1     0     8    0
amappl3     96     1474    0     1362     4     0     4     4     0     8    1
amappl2     88      609    0      555     2     0     2     2     0     8    0
amappl1     80     7974    0     7420    12     0    12    12     0     8    0
amappl      88     2541    0     2371     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     0     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512        1    0        1     1     0     1     1     0     8    1
dma256     256        6    0        6     1     0     1     1     0     8    1
dma128     128      254    0      254     1     0     1     1     0     8    1
dma64       64        6    0        6     1     0     1     1     0     8    1
dma32       32        7    0        7     1     0     1     1     0     8    1
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        3    0        0     1     0     1     1     0     8    0
uaddrrnd    24      443    0      413     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      443    0      413     1     0     1     1     0     8    0
vmmpekpl   168     5054    0     5026     2     0     2     2     0     8    0
vmmpepl    168    34640    0    32770    83     0    83    83     0   357    0
vmsppl     368      442    0      413     3     0     3     3     0     8    0
rwobjpl     40    14096    0    11510    27     0    27    27     0     8    0
pdppl      4096     892    0      826    84    18    66    70     0     8    0
pvpl        32   220873    0   212317    74     0    74    74     0   265    1
pmappl     216      442    0      413     2     0     2     2     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      354    0       18    10     0    10    10     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x25
panic(ffffffff83341bfb) at panic+0x1cf
__assert(ffffffff8337bb4f,ffffffff833d92e4,3b9,ffffffff833b2f5c) at __assert+0x29
refcnt_finalize(ffff80003c9bab48,ffffffff833375d3) at refcnt_finalize+0x1c8
pppx_if_destroy(205b9a,ffff80003c9bab40) at pppx_if_destroy+0x3d
pppxclose(205b9a,2,2000,ffff80002a7f42b8) at pppxclose+0xa0
spec_close(ffff800038152fa0) at spec_close+0x417
VOP_CLOSE(fffffd8075b7e968,2,fffffd8007bfb3a8,ffff80002a7f42b8) at VOP_CLOSE+0x129
vn_closefile(fffffd80739f12d0,ffff80002a7f42b8) at vn_closefile+0x11d
fdrop(fffffd80739f12d0,ffff80002a7f42b8) at fdrop+0x121
closef(fffffd80739f12d0,ffff80002a7f42b8) at closef+0x190
fdfree(ffff80002a7f42b8) at fdfree+0x115
exit1(ffff80002a7f42b8,0,0,1) at exit1+0x576
sys_exit(ffff80002a7f42b8,ffff800038153300,ffff800038153250) at sys_exit+0x1a
syscall(ffff800038153300) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71949cb0fd40, count: -16
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x25
panic(ffffffff83341bfb) at panic+0x1cf
__assert(ffffffff8337bb4f,ffffffff833d92e4,3b9,ffffffff833b2f5c) at __assert+0x29
refcnt_finalize(ffff80003c9bab48,ffffffff833375d3) at refcnt_finalize+0x1c8
pppx_if_destroy(205b9a,ffff80003c9bab40) at pppx_if_destroy+0x3d
pppxclose(205b9a,2,2000,ffff80002a7f42b8) at pppxclose+0xa0
spec_close(ffff800038152fa0) at spec_close+0x417
VOP_CLOSE(fffffd8075b7e968,2,fffffd8007bfb3a8,ffff80002a7f42b8) at VOP_CLOSE+0x129
vn_closefile(fffffd80739f12d0,ffff80002a7f42b8) at vn_closefile+0x11d
fdrop(fffffd80739f12d0,ffff80002a7f42b8) at fdrop+0x121
closef(fffffd80739f12d0,ffff80002a7f42b8) at closef+0x190
fdfree(ffff80002a7f42b8) at fdfree+0x115
exit1(ffff80002a7f42b8,0,0,1) at exit1+0x576
sys_exit(ffff80002a7f42b8,ffff800038153300,ffff800038153250) at sys_exit+0x1a
syscall(ffff800038153300) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71949cb0fd40, count: -16