last executing test programs: 971.971651ms ago: executing program 5 (id=6): pwritev(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000340)="4e2ee3", 0x3}], 0x1, 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, &(0x7f0000000400)={'./file0\x00', 0x3, 0x8001, 0x1}) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0xc5) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0xa00}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 935.567638ms ago: executing program 7 (id=8): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7f}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 804.244582ms ago: executing program 7 (id=12): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000002340)=[{&(0x7f0000000340)="4e2ee3", 0x3}], 0x1, 0x2) execve(0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r1, 0x0) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x408) chmod(&(0x7f00000000c0)='./file0\x00', 0x21e) (async) chdir(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) setuid(0xffffffffffffffff) (async) symlink(&(0x7f0000000200)='./file2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 792.399217ms ago: executing program 7 (id=14): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x2, 0x82, 0x5}, {0x5c, 0x7c, 0x3, 0x49}, {0x1ae, 0xa2, 0x1, 0x9}]}) syz_emit_ethernet(0x32, &(0x7f0000000a80)=ANY=[]) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000900)=[{0xb1, 0x10, 0xe4}, {0x20, 0xd, 0x2, 0x4}, {0x6, 0xa, 0x83, 0x880}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r2, &(0x7f0000002580)=[{&(0x7f0000000500)='O4', 0x2}], 0x1) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[]) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) sysctl$kern(&(0x7f0000001080)={0x1, 0x4d}, 0x2, &(0x7f00000010c0), 0x0, 0x0, 0x0) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x7, 0x6457}, {0x81, 0x1, 0x13, 0x800048}, {0x6, 0x11, 0x5a, 0x418f5e8b}]}) (async) syz_emit_ethernet(0x36, &(0x7f00000024c0)=ANY=[]) (async) socketpair(0x10, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000040)={0xffffffffffffffff, 0x80}, 0x10, 0xa) 731.235427ms ago: executing program 7 (id=19): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000040)={'./file0\x00', 0x8001, 0x8, 0xffffffff, 0x0, 0xc, 0xfffffff9, 0x9, 0x2, 0x1, 0x3, 0xe4b}) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, ""/65}, &(0x7f0000000140)=0x43) close(r1) getgroups(0xa, &(0x7f0000000180)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r4 = getgid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) getgroups(0x5, &(0x7f0000000200)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r6]) r9 = getpgrp() r10 = getgid() setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000240)={r9, r5, r10}, 0xc) setgroups(0x2, &(0x7f0000000280)=[r2, r7]) r11 = msgget$private(0x0, 0x788) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) msgctl$IPC_SET(r11, 0x1, &(0x7f00000003c0)={{0x1, r5, r13, r5, r8, 0x80, 0x7}, 0x9, 0x2, r9, r14, 0xada, 0x2a17b1c3, 0x80000001, 0xfc7}) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') ioctl$KDDISABIO(r0, 0x20004b3d) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r15 = dup(r0) ioctl$TIOCSETA(r15, 0x802c7414, &(0x7f0000000540)={0x3, 0x6, 0x4, 0x8, "4105eab45e490aaa4be7ecc0e721703cc83ba762", 0x2}) kqueue() semget$private(0x0, 0x2, 0x20) setpgid(r12, r9) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000580)={0x10, 0xd}, 0x10) recvfrom(r1, &(0x7f00000005c0)=""/116, 0x74, 0x1040, 0x0, 0x0) bind(r15, &(0x7f0000000640)=@in6={0x18, 0x1, 0x0, 0x100}, 0xc) unveil(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='r\x00') shutdown(r1, 0x2) ioctl$WSDISPLAYIO_GETEMULTYPE(r15, 0xc014575e, &(0x7f0000000700)={0x3, './file0\x00'}) 606.311434ms ago: executing program 7 (id=26): rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 596.814973ms ago: executing program 7 (id=27): sysctl$kern(&(0x7f0000000040)={0x1, 0x2a}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x8210560b, &(0x7f0000000280)={0x2, 0x0, {[0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78f370a1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x400], [{}, {0x40}, {}, {0x0, 0x3, 0x0, 0xa}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x10000}, {}, {0x0, 0x0, 0x6}]}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) ioctl$TIOCSETA(r1, 0xc008441d, &(0x7f0000000000)={0x2, 0x0, 0x3, 0x5, "1e08000300000000000004e506ff0702ff0900ff", 0x0, 0x6}) sysctl$kern(&(0x7f0000000000)={0x1, 0x24}, 0x2, &(0x7f0000000080)="46c981098df3daf4bc90fbcaad143221e30598428f93f2fcaab85bf798f5b0ba13986e6315f0d4cc70671ecc00fff609bf7f40bd3c1b9ef128bc8684a62bbbb78102874494e14a94258eb2474e585926fbfee84ba78bb71e1077b2b0102a865806082d8132ffef54e1a6269c89746ee8d01c9ac473a8ec68a7227ff8be28556ac266", &(0x7f0000000140)=0x82, &(0x7f0000000180)="1f61edeadf64597224ba6651d8ead315e8bab34c8975449c5710b03c0ede15a0d6796bd28c6439a8169cd778b6a54d0842e6e4eef7e8fea335acf58ac9e15ff85e29042bf4ef4e9abc7a42e20198a2cf402a1dd5ad66e1b9dd2f699d881352d6aa1c1f81a0fa1f6cfc701b27fe", 0x6d) 474.684254ms ago: executing program 1 (id=34): r0 = syz_open_pts() bind$unix(0xffffffffffffff9c, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xfffffe4d, "5fff097e0000000000017e35e1d055a8e5a800"}) poll(&(0x7f0000000240)=[{r0, 0x68}], 0x1, 0x0) 473.348382ms ago: executing program 1 (id=35): r0 = shmget$private(0x0, 0x4000, 0xa0, &(0x7f0000321000/0x4000)=nil) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setreuid(0x0, 0xee01) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000240)=0x34, 0x2) 445.317545ms ago: executing program 6 (id=39): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020691f, &(0x7f0000000180)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x6, 0x9, 0x2, 0xfffffff7}, {0x3, 0x10, 0x0, 0x2}, {0x6, 0xa, 0x80}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="258b300ad171156993ae0fbf03000000000000006e", 0x15}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="79ff00", &(0x7f0000000080)=0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) getsockopt(r4, 0x0, 0x1d, 0x0, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r3, &(0x7f0000000240)='\x00'/14, 0xe) ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f00000000c0)=0x100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) open(&(0x7f0000001700)='./file0\x00', 0x70e, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 444.05806ms ago: executing program 1 (id=41): getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x6, 0x0, 0x0, 0x0, r1, 0x80, 0x1}, 0x10000001268, 0x2000000000003, 0x0, 0x0, 0x5, 0x5caa, 0x8, 0x8000008000000e66}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0xc, 0x7}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x100, 0xd1a, 0x1088}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = socket$inet(0x1e, 0x3, 0x0) syz_emit_ethernet(0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffff6bfffdff0806"]) fcntl$lock(r3, 0x8, &(0x7f0000000240)={0x2, 0x1, 0xfffffffffffffe00, 0x8000000000000001, r0}) getpeername(r3, 0x0, &(0x7f0000000040)) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) 396.604923ms ago: executing program 4 (id=44): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) (async) r0 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r1 = syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x40000000, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0xfff, 0x0, 0x4, 0x2, 0x100], [0x3, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x40000001, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0x1ffffffffff, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x5fb, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffff7, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x0, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xffde, 0x80000000, 0x6d5, 0x2}}}) kqueue() (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) ioctl$TIOCCHKVERAUTH(r1, 0x2000741e) (async) ioctl$TIOCCHKVERAUTH(r1, 0x2000741e) readv(0xffffffffffffffff, &(0x7f00000038c0)=[{0x0}], 0x1) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000040)="6525849a75f0dfd87887dab0afd08c60fd5cdb44837ef37457cc53895bd9adfbb9ad80d516ef9f1e09a365a97c1df5f9806df1571e13e3aeeabbd202d3577bd7b49827c1fe9e2ddfe2db971ad96be604da164dadce1a0cc0baa78e1763c38af3738eeda09f8ad47f6da0cb664ee49544ab5dcae13ceeff4fcff74f", &(0x7f00000000c0)=0x7b, &(0x7f0000000340)="4a99a7d6efa8c676faef5999a0e39e8f634af5c97cd26a88b0b668d5867bb4488c8022", 0x23) 393.421825ms ago: executing program 1 (id=45): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) (async) ioctl$BIOCGBLEN(0xffffffffffffff9c, 0x40044266, &(0x7f00000000c0)) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="f96825d807ee62fb60cd9c6c40fe1efe1d7df44b", 0x14}], 0x1) (async, rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e1635a54862902af124413450000a1f515df5a9da4070000006ebb807e7b224fae8f4317bf2356000000e2b69e2400000000000000", &(0x7f0000000080)=0x35, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 384.506928ms ago: executing program 6 (id=46): sysctl$vm(&(0x7f0000000600)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0xa0) r0 = getpid() sysctl$net_inet_etherip(&(0x7f0000007c80)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000000)="00000004", 0x4) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000140)={0x5, 0xd1b}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) nanosleep(&(0x7f0000000100)={0xfffffffffffffffe, 0x3}, 0xfffffffffffffffe) sysctl$vm(&(0x7f0000000000)={0x2, 0xc}, 0x2, &(0x7f0000000040)="43920115233861ca920de969d1aba695979c9ccab54593f7902e5ee17860af2f44ba9868c441", &(0x7f0000000080)=0x26, &(0x7f00000000c0)="6fb3753e723b8e94103d95c2eb", 0xd) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x408, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000001c0)={0x8, &(0x7f0000000140)=[{0x3, 0x6, 0xd, 0x7}, {0x101, 0x8, 0x6, 0x9}, {0x8, 0x2, 0x6, 0x4}, {0x8, 0x55, 0x0, 0x1}, {0xe, 0x9, 0x3, 0x400}, {0x1ff, 0x0, 0x7, 0x4}, {0x7f, 0x6, 0x8}, {0x5800, 0x3, 0x8, 0x8001}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x81fe, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x557a, 0x7, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0x1ff, 0xfffffffffffffffc}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) syz_emit_ethernet(0x44, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x36, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @icmp=@dest_unreach={0x3, 0x7, 0x0, 0x0, 0xd3, 0xa5, {0x5, 0x4, 0x1, 0xa, 0xff, 0x64, 0x1, 0x1, 0x3b, 0x5, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, "cc544cf3348b"}}}}}) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm(&(0x7f0000000600)={0x2, 0x9}, 0x2, &(0x7f0000000640), 0x0, 0x0, 0x0) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000200)=0xc) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000240)="a46da682c6e9fcc95040d6c64e3388b514face3e3cfa0c7b338d79844f56cb408c2b939c2dce7cf58c43a966a0f900e788012185497f75c16d4e427bb73f3a382c4759624397d179a4585c4ba7e894c7cf7e39d3476fd704d0cf308391ac400498a8036d1f55bff7179f7d446c9ccb130cd779fe088d453f306070a8816391b5cebd93a3049e2dbe05faa4e6f0a4890595edb91af4aa6dd499d5b9255138e0bbd8b290de6f5a6ec9c05f149efc4d8aaae59f873070a5bc31d622d8a458c6b49a2ff9f401d84441f101265d8dd32ca35feb57dd989e8c293707f6976de9de076bf954a705f69e272fdaf7fa5d", 0xec) 384.05678ms ago: executing program 4 (id=47): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff000000000000000000000000ffff"]) (async) r0 = socket(0x800000018, 0x3, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 32) r1 = socket(0x2, 0x4001, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f000062c000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xd3b5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b936}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000076e000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f000041f000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x4}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000005d000/0x4000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00007e8000/0x4000)=nil, 0x7}], './file0\x00', 0xfffffffe}) (async) pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x5) sysctl$hw(&(0x7f0000000180)={0x6, 0x15}, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) (async, rerun: 32) write(r2, 0x0, 0x0) (async, rerun: 32) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x0, 0xff, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (async) seteuid(0xffffffffffffffff) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r5 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="bf30e56f25000046fa9dc486a7817494c44281ea65f2f48172e91da15b249657e5cdc8bc443657d0b1de8e56de47a7a757", 0x31}], 0x1) (async) kevent(0xffffffffffffffff, 0x0, 0x7fff, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffb, 0x44, 0x0, 0x0, 0x8000005}, {{}, 0xfffffffffffffffa, 0xc1, 0xf0000000, 0xe6ac, 0x46ad}, {{r5}, 0xfffffffffffffffc, 0x1, 0xf0000000, 0x1, 0x4}, {{}, 0xfffffffffffffffd, 0x20, 0x10, 0x7, 0x400}, {{}, 0xfffffffffffffffb, 0x40, 0x20000000, 0x9, 0x3}, {{}, 0xfffffffffffffffc, 0x6, 0x2, 0xe, 0x10000}, {{}, 0xfffffffffffffffa, 0x1c, 0x1, 0x1, 0x100000401}, {{}, 0xfffffffffffffffd, 0x28, 0x4, 0x4000100, 0xfffffffffffffffb}], 0xb19, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r1, &(0x7f0000000000), 0x10) 331.366626ms ago: executing program 1 (id=49): r0 = socket$inet(0x2, 0x4000, 0x5) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="e2af2438b0841749a898a41647787333939ac5d9478f7db1e9dd35ce251d3c435213bee1f268f9d585a6cc22c1b169f2d52181af20adb72b47084f071a9117d3971fa5f2e62756bd29892c8c83a9ba3faf9438e87dfc60d9baab17a1d1959c2b6131b342eeac616942f8c86613b91563e9d3d0238dbd8040200d46b26dcd000f6920853397cc65e42376e683e1f079885726aa9d90e43ead228e13694c5c13b16f6353edcfad50b1221780d812ebfea151b587e57df20e95cea56ddc1e00", 0xbe) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f0000000140)) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000180)=0xfffffffd) getpeername$inet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc) ktrace(&(0x7f0000000280)='./file0\x00', 0x2, 0x2, r4) r7 = socket$inet(0x2, 0x5, 0x3) r8 = accept$inet(r7, 0x0, &(0x7f0000000300)) setsockopt$inet_opts(r7, 0x0, 0x0, &(0x7f0000000340)="5f8ef2be6a170d24c402a63d5ef08cdd3e83fba4bec599ac15caf777205d953dbabf0d0773f338a9fe66d1bf27694027641162c0eef8656b660d14bc5b2cda5a2c3e294965adb8b968ff948242c3d0e657d0e4ffb13d575da38c154b99be042fa67bd8187861a766d2aaba83a3f8e316edea420cdca8fbbafa62baad2862e678ac6117704d31c9448b874ca8e987446a0c9e6022f0070d1ce5e44e51ef5d154a", 0xa0) socket(0x20, 0x5, 0x0) getuid() ioctl$TIOCSTOP(r3, 0x2000746f) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0}, 0xc) ioctl$TIOCMSET(r3, 0x8004746d, &(0x7f0000000440)=0x2) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000480)={'tap', 0x0}) socket$unix(0x1, 0x5, 0x0) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x40, 0x0) setsockopt$inet_opts(r7, 0x0, 0x1, &(0x7f0000000500)="a43250e54675b6b0a1193c45d5481af0e6f794a324b7f62f37588b72f4a447a960fe936362d8fc505a87b11a9c665fa744ce3563e9167b54951079158b14c43f04647be274bd56fde18452aba0905651accbf05c69018a23af467640dba0ecef0544d5a6013b18047aa914e9547e0c23c59bc14a29a700a6f6af781f48b7e3fbcd35a998e5796126da6db6fcdb58ed30cc5f6dc84bfd18e87916b1aaadca22fc737d707e970896109c5f2eee5b82db3626868deee61644c8d8f6ccfeb5140dd862614b", 0xc3) sysctl$vm_swapencrypt(&(0x7f0000000600), 0x3, &(0x7f0000000640)="8e777e5c3da856977c96e12284140a", &(0x7f0000000680)=0xf, &(0x7f00000006c0)="2e324c993b126342e0784e35c1ae59378923f894bdbdbcd22af6195606a806647b95059d87cc5b11281370760cdaeb91113bbf6ce310d5b3dd2025201a8d678c043adf7f25d697f6652149825eaa159c30cd73b3c6ac8174c1b7cd18e25336a7a074ad77f4ddd1efa1194e2a5ebc7c331704db70667cc014eea916ad47ceb44139a92edf", 0x84) ioctl$WSMOUSEIO_SRES(r3, 0x80045721, &(0x7f0000000780)=0xbd) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f00000007c0)={0x5, 0x2, 0x5, 0xffffad51, 0x60, 0x2, 0xfff, 0x10, [{0x3, 0x5, 0x8708, 0x10}, {0xb2, 0xc5, 0x589, 0x800}, {0x5, 0x6, 0x9, 0x9}, {0x5, 0x6, 0xcdc6, 0xffffffff}, {0x400, 0x3, 0x4, 0x9}, {0x9, 0x101, 0x7, 0x6}, {0x43d9, 0x6, 0x8, 0x8}, {0xffffffff, 0x1, 0x9}, {0x4, 0x37, 0xff, 0x9}, {0x100, 0x291e, 0x8d4, 0x4}, {0x1, 0x5, 0x8f, 0x9a0}, {0x8, 0xfffffffd, 0x80, 0x4}, {0x4, 0x24a, 0xdf, 0x6}, {0x2, 0x400, 0xfffffffb, 0x8}, {0x7, 0x6d7, 0x2, 0x5}, {0x9, 0xe, 0x5, 0x5}]}) connect$unix(0xffffffffffffff9c, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0xa) getsockopt$sock_timeval(r8, 0xffff, 0x1005, &(0x7f0000000940), &(0x7f0000000980)=0x10) sysctl$vm_swapencrypt(&(0x7f00000009c0)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000a00)="cde9192c2572fbc52f0b5c64f371f8a4d63e76118052db53e7669a014d2e109fc5c57188bce2635f4b59a4955f4611d6afe6a8292b8ceb1ba9c6c986c81ad8a35064d59720dbf0a08b494d6a9a84d9d07805e27c7abdb271ea43692e61fdcafcfa775499ed2fc4b9e7b45bf3bd6e8b42c3be3c45da6818a8d954b1ab14e5d35eca77e6d2cce57423776fe1a119a9d09e18679d04b06dd091a87ffa6b10ee2092f53ceb0e7f0702c0a413d8146c6d3df404271c230d32ffb6832085bd959e6c4f0c997d3fbed9c4d2dd16b05289c76e75ecc92056f2839337fcbab8ce344b90c44b2a5157b63bdb221d312443442ac606f9a5d0af4bd71023867612810a767c48336dccdbd4321ff53f6f146d87a4f6efa6934b89ed5bad449e262df3bcaac551af585c2dcaf7509f1a31ad51bbbaccfedf30becabf17d1fdd92b299dfd6d845542fcbf62ef49f33879f70585cac71bc306687c6e3084bf3a7d08d59dd4776380dc7af8bdd8706671b55314015dde3e7b639ec8a5771e48d1c441023ec2b4a623b62b3b6ff96beee6dea35f0fb28d3e1edd5befbb5ff1dab8d25b3d0969c20f650a87076f26111c538df3d022822fc972c6749cb34534b3d79c72f9afa9490fb3afeb576fa0863de0b56989e91c33b1151dfc122c0c41dc863c8953883286c686e892bd10f26c2738c1004ee6dad897b70113daa3183d36bf1bcdf84897f03a6218499bf56167d8a14335c925f6a62f02754ded71139f4c0f490591ed3da075e0e39f118ff57cc792255d96b2b0eeced0a69733681550cfbd2b2e790df1f03f1c98cb65d91f6af03015ea1490a702dbf18808cb7452daece774be5c880ae6bce8ad1f94a1e12c49ee45d96cc80ecc1b39bf538c7810b4c44ed85054622f6e7e0341d4278587da7e942b68d76284d48a56095e5467fce58797ada72a272a8a308e82b3f20f965092660220c6d88d4292886bed03812cd8830697f622311f4c2bc4e91b0d89e209ee9a8cf866b71e348cd271eb3131d8b92e173466159ecef0917c8c03cfdf11806454f61d2b6d320325deed85976e7ec3fdcfb8bc6c5fd4fb6b8cf3ed2259aa1bfedbd2f4e264b5d5e43f8a356da827611d5cc2c9f25ec362f53c9cf28cab4bd8722926fa571ab4ab1662a903f5041389b3c34cde2ccafe41b21afaf7eeeaa3f072ecef4f71bd37b7f638c1697ab0b02f8e76a6286b1e06234b0f5f54e4a0a772d02c56892ce32d00d5637cf8a981fd8e71e81473cc2973d41ecb921c8157706153df7f86a1101dfb6d5d34ff9ee69d58d757c05406d5d00929cd53c9c143b0ef1e018fb22df4ee464e37f7ff222394558b0f6ed7bd9a50f1c36f0363aadcf2934a385aabf880105dc88f62b2c084a82bdbb2dc8e37286bc45742fead5b2b9dc69f0dba9476c72c0d0f6fd77cbe2ed1ec3837af3426942f41682f66f5f4bd7f9a178bc388deee8e9e6d310190a0678e5df39b4dcca38baec588932ae1a50e2e6541d2c64bb20e9275781338af1f99ec285faeb379838aa17b31fff46714e8703bc175c49bc506a395f8b42dd49a0728dab08db9e79808ae721a0e815c5edc1789d1d2ab704d62c43526c05c4cc6f840f4821a32e7766a84a3e1b9028d889efec4219746ab267d1741a4c462c68496a73f1e7e0df99392005c17052899d8be518d88ed42d4e4add7abfbb2d51e3e141e9dd692c0ec3b38daab2efc578ba00350de44d0e8dba0cc676c2b83c28fdcba91b6e12288af0d27ee8e6109648937475f26bf061bb3f0bbfcf61b61a152155710245e4cb5e4bba0525c9c9222ca8b557f63523b57750cb4d7c2cad41c6a76219602a0ae82e5bafe3bba62564c0e1982717cf87f93b383c2bf3a97fa7f5c137dc75d7c7639dbea80ff23f10416088e3119507c55cbdfe6b58dc65a1f848cd592ab6e0a793230fa99010e22eca14f2e442226b583819b4c4ede93b1a443ef04863e35e6939b9dcf11c4ba71c2b3e9f712d0b21da8148a022b159b058abcf7929c28b2886d75727524beca5b9ebb51b02887192c0dce7eb7ca49f794d96ea34a89eee0032f16adf3ead122ba5a07b9bfe586eec92d1bedcf6839b00eabf4000d9d91c1c65844b50413a18537be9f44e64d1be59561a829bf2b235beb95080270d49f377e805a2188c0c526c36e2b6296c6472e26eeffe2d9aae6a194939144ee20ab0a73c11215105da59a31cd37c74669b4e03afb5a7a65ca5c0349c4090d93c1ae4d2ed40dcadcef87177d95a8db87b043676a370aafa3168d0e93c980d5365f1d52872c89f17316f7f6f5c0147949542cc2f9cd02111e88376e40237c42b7bca215c1034f2527fa136627dc86e8fd33eb8008acdf4dac61873cceaa71d382e33b2f60d1219715a3a6479afaf2d0e003d7e9274c093a7819bab77f88735658d90237a6e6f56787653c63051535cd806212bfb2af9f6410b820f7e317a6ceb1ffda0809fb149257540b1a6911397d9f0b62b3580d036a321c5445499a8424da8d8d3a63a35a3bbcc0873a60142fe1c1c2622825c0543fcf606cc0d8988d6976b5631ec1e6da3a1bb456159deb1f31473efeefdb5c9db2e277c9d01df45c1482d81f9602c3aa68a25359bd0dad4e4054f2e86d534a87fd86d9e5a2781ee8bd3398d5a1b41f1cc650f67329a0b6940c2bb6c3708ddfa296a64bd8c1ca122a8b9adf56cd717cb2bd0f59439ac58d3295c429389a9455b7d3e7e635ab61a7389965c49067f74288c9cdab857941e5b200049c34b7852bb0084da26900661f86c7638b71e1635a7d03d47a27dda321d8a19a7bffb8ba288242b665f8ee0848043a53be98f8524d4d6e75d47292ba97009de082b2f8b11d8617bd6cef11a52608cb19c8beea21ce7f798ef0e7b0e405eb354c61a7b9483221120605b71b13cfb8796aafa366583b6e472aa082271be0524c4ffca42c4bddd3a9a2546464c092ec2ccfd9ffc5481f11a2c683fd018ebd3843629ebdb5f7abed6a93c5ae455316b0be15f42a67edae6b10be4cffa810a3807f837ac6fb8fb302f571379807bd31fb822cd6c03632a0f5b2f34be5098f02da71f44fc091c8cbf618876b5d8c5ece9ac5577276676fa22093c26efeb2410982c04aa92cfb9f02f12ce05bb91843c2bae96022efbce40e1d241e44995fc17b98d01c8f4e6baf656b9b8c0ce968011f638f5e3d90c1bb0a4da93cc9cc1fca8e31026d3f3ea0a5319bf9cffd10413c2c6a83811cb212c9d2b59bba64b3890c97f6e9cef0b1e5362a09f89249a86639585b440e4f994d9f3d9aa9774369bd31499d38dc7c6e5515f89f7e004b98663ec1ae044c2905ad28606f2afdae6ece75f90f8c38318c58d24b8944be1ac9479b13e113d1efd8215952e7a92a1aff0f5982f77181781d4f2742ee3a702b0dd8419d0df635e69888e16aee1daac74c35f3dc6243c12bc59b93cf52d72abc1c03feec175c4914e5c3557233986ce1296b3aad0feeb83fe0cab1f7a0a66ca71076d02ac6b558204be01bbbc84223538559ced7cee59f23927d9c86a4c36ff6066372eb0733b0735dbfe762227bf5cfa6aff533b527b896d7251672dd348f71752dc6032897c7fea635e32efb68a554765226ef2c6f20b5d3373e7adb033d23641aa9925f5a7440d21440b32ddd72ba264b8711faf6bf0e075475217f500f703171063683f1f77475c1a36267155372dd52fe3f5f8f87fe21b6cbae772d97edc013f47ec52854f61bad2652c51835a5cbae4c87492d7578a820537b64edafe23613df11fc612124de758b968a19dbf35228b894e95cf3d913e466b51391710f2c0dc7df08311cc1f00ebba472185a27bdabc1362f79fa06cadd6e43ddc75d1a267c81ea6c25e3e2a6ce791c075ef36c50201a50a94a301f1bdb941eb13979bb5b428ac95afbbc605ac51d9139980f550095664c5dfb827005268bde7aaae7535c057e8ff90d9a2ffe47c736069fa38d23b63649c37240f3fa4638d45bdbc45e6db914e0d88c910f71b8465b9ef947d783269641637be9c3ac817aab4fb9ea5c22276beaa058334fcfc25ec3cbbc1adb90fbff3738f13036151bf23e5c371264b31a7f69c2e0ab3910ea89814931914a77ccabeb67941806dc52d82f4a5861dd0c0406a8cb587c0ec5485eee24dc30189f675c7d4ad8de8f7af36d2a158a64735991e967993685f9873c44d6df113fe0dda207d76c4063a919c35a44e93033246e59bfa24a0068d328233056ed08e25d2a7ffe795ced9d0032ce116757778a004492be2747df30c9a7fd45823b5b01c6f04e1eed0c1c2782fbed94706863542c59fe817da9a71068345a98bf77e68b10be97b28e7eb14d7bf9af3e68dd7347b404f4e0fdff1c928bd4150100177e2f49b83c91e3c677b0248c0d3eeb1f0ef04e3af5119d7413ee478393e39c274589910b185a201259ef0b75e6353cf75a2e8f0956ff27cefff0d76cf84aeea7018c89b6da09abd8e3957f704e6565848755f665205f0a45dcd5ea1b1c06050dbd1387289315019e8a6684623b6ade3e344c6289a59de06e414d54511e56d54068fd41c658d148f62034a7b053ebbb0376ff00f4d220cdffc0377e573f151f5c1ed6fed2bbe008d0bf7911f47c9e95439cea18710a91fadb7d117c75bd659c80336adc28fd26a7843bb944ad0eb25914ad6a2dd4b82e271f29dd1890b6920789c38a12d71a35b0f6a4aeda45a29e7686d501b18c40821eb36194f44a73cc45c7d0df97d41f458a472f3bae666833b33a90398a8b4306ecdf82d70ae9aa9e77832f63f0e3a0416f99f684f46d0e725e470e99e69689a8532eac88ed523d1d3cdb9be8524640a0c39a0ff2ea1da4cda5c96b60f943cbbae1386af20737b6aa045fcc5ed81cfb62c2852fa0816c95c855bff81a36af937db659d1da3647c1fe359a580fdd5e89ddd6d19f776270445db20c53cdb15b45c19329a25944923ad435ed95c176cc9fbe886118c713d12f6f6078befbe202d963ab614ccd3e59536ac37274b58a7fcd87dbd3b90d8c6fe3e77a26e5a7c46e1165bfdd09354081f2e4926a548e48cfdc909b6882d3f6dceafb7b37bce7f96b97bc7fb15e77d6fe75f88b7e68332c318bb9de0c5161c6c25bdb24bc51d0242993468d6a78f9e3acabeb6f0e3c572ad9aa3113080604d3f87e1a07dad85bbdef641eea16a95eb84f06cde945d21f577d491726057b28829d90a5faaf234fed46273d9fdf2c9ac7001fa5e423f8b51835d4ae8159e98e7f1476a2ca124f1a99cd2e99d6d6747723155032ef9b4889254e09b48f0f49dc4f1d7cfdf690c8e819335db1abd5c176e35bba3204b398dc838b65f19a76be21ca93f79f59bc428c26972ba904653703e22fd7357d1e8b46247618da0136c8d1307ac431a8f7bfd63e301dadf61d200e5eaac6b828e324266d1c3f5a5cdf12b0e5946caee8086a54821af0a98f5b9f012b36f109589a0ebbbab44c9f8c3e2a6f6c529c0b3c276880a436c386945c1dcdd78328f85c57272ef822503acac823bda7f15e04ff1d79692be208d1503ce51f958a8b85a3cb65ea33d72415148fc484a45bed7c54bf4784ab97ff68cb88996f72f669d66ccb8fbb240c8bb285cf1adb013034d3df755d83405c3cc18e0431f47729b3ed25f97640fd3a0f9e33cd5b68e43187af79fd342e20aff65de33c98372f8d3ab9d992791a2e59d4204bbbc8ac94872860fb7013911f4f46462a0469c559813efbfe251b1ba922f9ee2e3305b86f77f72df47538c1f5b8f3ce34d310fe18f279f9cb01079c35c80df37f", &(0x7f0000001a00)=0x1000, &(0x7f0000001a40)="a20778c47bb0d682b2ddd383fe3957421f68a19b7dc9e02021d9790ba723b2d25ba652821695f1be9317f701d90c69c9bfbc5f7db1dcf30071be9f594e69aa3dbb6ba31e41feeb9c0a871018d4fe643e99d5f06f53abc1390772a339d310dcfb7f8607bd5fb35f56ca94a3c772069a821a5478fabcf273b63750dd751de95f", 0x7f) chown(&(0x7f0000001ac0)='./file0\x00', r5, r6) ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f0000001b00)={'./file0\x00', 0x28e800, 0x1, 0x4}) 328.402211ms ago: executing program 4 (id=51): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x2f, 0x4) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x40) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)='#!', 0x2}], 0x1) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="20092000019c0a", 0x7}], 0x1) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 327.819608ms ago: executing program 6 (id=52): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x3) lseek(r0, 0x2, 0x1) open$dir(&(0x7f00000010c0)='./file0\x00', 0x1, 0x100) mprotect(&(0x7f00004cf000/0x2000)=nil, 0x2000, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000080)={0xff, 0xd21}) r2 = kqueue() kevent(r2, 0x0, 0x6, 0x0, 0x0, &(0x7f0000001600)={0x0, 0x8000000000d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0xc, 0x4000000a, &(0x7f0000001100)="0900de8d", 0x4) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000001080)) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f00000002c0)="03000000", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x20, 0x4000, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r5 = socket$unix(0x1, 0x1, 0x0) getpid() getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000001040), 0xc) getdents(r0, &(0x7f0000000040)=""/4074, 0xfea) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = open$dir(&(0x7f0000001140)='./file0/file0\x00', 0x100, 0x130) writev(r7, &(0x7f0000000340), 0x0) ioctl$TIOCFLUSH(r6, 0x80047410, &(0x7f0000000040)=0x4) 327.40783ms ago: executing program 1 (id=53): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}, {&(0x7f0000000180)="cb5684", 0x3}], 0x2) write(r0, &(0x7f0000000140)="0920203ce62b620309018010001f00000069db0000ff4278ad535c2a4156308c2f39e4e6987f31dbf15624b77b6a0a", 0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/150, 0x96) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 315.836095ms ago: executing program 3 (id=54): setgroups(0x0, 0x0) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair(0x18, 0x3, 0x30, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000001c0)={0x2, 0xacd}, 0x8) getgroups(0x5, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r5 = semget(0x3, 0x2, 0x0) r6 = getuid() setreuid(0x0, r6) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000000c0)={{0x6, 0x0, r2, r6}, 0x0, 0x0, 0x6}) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x2}, {0x6, 0xa, 0x80, 0x400f}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000080)={0x7, 0xffffffc0, {0x4, 0x6}}) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="08a0a78d0ca82026dec3e59b0e43bfcb4c969b00007295000000000001160000860000fee7fca3f3e8528c98e32fb3b9208f2a2baf1310ef0263bcec20eba81302b514cd597308d3eb303c48f3471c3ad1dc9b29bdb621e7fa489666d32c33aa", &(0x7f0000000080)=0x60, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr="00000000080001000000001b00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}) getuid() lseek(r7, 0x6, 0x2) write(r7, &(0x7f0000000480)='\x00\x00\x00', 0x3) getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, r1, r4]) 248.057185ms ago: executing program 4 (id=55): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000280)=0x38c9) shutdown(r6, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) ktrace(&(0x7f0000000000)='./bus\x00', 0x1, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="e446940a0816e9cb8136d3c5ebbf58d60d8e9dc5dec476fbf69a9f5cb117ca7228257ac97434d5bec1cb7f6c517d079962fb4d3b8c28fe8739edf894bb690dcaaddc42da3b69e9fe0cfa766d44c23797f860d6e5709c9bf9f06131d12a0de6a79ea63c2387bd55fa4d70d6b7024749ca5854fd939e220aedff3c8d2d0c095808169b80e9afa0bb7bdddf2bfb8d35f4ebf8cafe9488e18e0fcad0e2d2e4e31386fa6e3eefdb92436f91ba680a4cdf1d7aba61c060c0457f1a38ed818ab0374e00b70b92c5c55965c855304ed0f4a3d734fcb58272a9f2e33dac", @ANYRES8=r0, @ANYRES8=r5, @ANYRESDEC=r5, @ANYRESDEC, @ANYRES64=r2, @ANYRESOCT=r2]) r7 = getpgid(0xffffffffffffffff) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0xd98, 0xf7, 0x9, 0xfffff001}, {0x8, 0x3, 0x8, 0x1ff}]}) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x22, r7) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0]) 200.446056ms ago: executing program 0 (id=62): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto(r0, &(0x7f0000000080)="01", 0x1, 0xe1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000400)='r\x00') chdir(&(0x7f0000000040)='./file0/file0/../../file0\x00') 199.542452ms ago: executing program 2 (id=63): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0xfd}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="25e07bff764d01bafd7e4500000040a03e00c39db2", 0x15}], 0x1, 0x0, 0x0, 0x8}, 0xe) sysctl$kern(0x0, 0x4000000000000033, &(0x7f00000001c0)="0000000000000000a00400004098bdf4e420e6adda008000552e01000000d22b3f3f490b0804f9000000000000000035024ba8af4e5fd3ab9d2b1e00ccca8db36ae1bdc3478fed694dda6407d16e6e05231f7d4c43be937fca9c0532bad78f9b9ce86fc04318ea39e0549b3147c06f60c6", &(0x7f0000000080)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='c\x00') fchdir(r1) open(&(0x7f00000003c0)='./file0\x00', 0x2, 0x0) 199.263889ms ago: executing program 6 (id=64): syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6007a65d00080000fed7871358eb087d34e8a93239c1a0cb0000f8ffffffffffffff095cb70400002b"]) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0xff, 0xffff2aa8) (async) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0xff, 0xffff2aa8) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@random="9c1122c19a56", @random="a43b517dba91", [{[], {0x8100, 0x5, 0x1, 0x4}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x31, 0x6c, 0x64, 0xe738, 0x9, 0x88, 0x0, @broadcast, @rand_addr=0x81, {[@end]}}, @tcp={{0x3, 0x0, r0, r1, 0x0, 0x0, 0x12, 0x0, 0x8000, 0x0, 0x80, {[@timestamp={0x8, 0xa, 0xb, 0x8001}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x5}, @md5sig={0x13, 0x12, "28c5e3128a5cbb6d625cbb7ce4512f95"}, @sack_perm={0x4, 0x2}, @nop, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x6}, @timestamp={0x8, 0xa, 0x0, 0xcd6d}, @eol]}}, {"7a0e6ad9ea1906e53f1eb22e"}}}}}}) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[]) 134.59821ms ago: executing program 6 (id=65): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() setrlimit(0x0, &(0x7f0000000000)={0xfffffffffdfffffb, 0xfffffffffffefffe}) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x6, 0x81}, {0x1, 0x0, 0x40}, {0x6}]}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x202, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)='~', 0x1}], 0x1, 0x8000000000000002) unveil(0x0, &(0x7f0000000140)='r\x00') openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r4 = socket(0x18, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x2, r4) close(r5) kqueue() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) clock_gettime(0x4, &(0x7f0000000140)) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="548ce7000014060000000000080001000000001b00000000fe8000000000000000000000000000aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000190780000"]) close(r1) socket(0x10, 0x8000, 0x2) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x3, 0x207}) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r7, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/34}, {&(0x7f0000000440)=""/230}, {&(0x7f0000000580)=""/258}], 0x5a) 134.12057ms ago: executing program 2 (id=66): openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f0000000300)={&(0x7f0000001a00), 0x12}) 132.951256ms ago: executing program 0 (id=67): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x1, 0x2, 0x1, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xa4, 0x2, 0xce5], [0xfffffffffffffffc, 0x80000001, 0xfffffffffffffffb, 0xffffffff, 0x100, 0x7b99, 0x200, 0x3, 0x1], [0x100000001, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffa], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffeffffe, 0x5], [{0x0, 0x7, 0x0, 0x5}, {0xfffc, 0x2, 0xc9, 0x2}, {0x0, 0x0, 0xfffffffe, 0xfffffffffffffffd}, {0x2, 0x5, 0x6, 0x3e}, {0x10, 0x2, 0x0, 0x80b}, {0xb, 0x2003, 0x40000, 0x2000000000000000}, {0xfffc, 0x0, 0x0, 0x7}, {0x0, 0x965, 0x8, 0x8}], {0x2000, 0x1000001, 0x2}, {0x0, 0x0, 0x73e8, 0x1}}}) (async) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x400000000000181c, 0x2, 0x6}, 0x0, 0x0, 0x0) r2 = kqueue() dup2(r2, r0) 132.016446ms ago: executing program 3 (id=68): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x8, 0x2}, {0x1, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x3, 0x3) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) writev(r1, &(0x7f0000000a80)=[{0x0}], 0x1) syz_emit_ethernet(0x16, &(0x7f0000000140)={@local, @remote, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @broadcast, @remote={0xac, 0x14, 0x0}}}}}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b80)="b7e70a81d594278a12", 0x9}], 0x1, 0x0, 0x0, 0xc}, 0x4) ioctl$TIOCSETA(r2, 0xc4504442, &(0x7f0000000740)={0x4, 0x7f, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x2, 0x3}) 80.682462ms ago: executing program 4 (id=69): clock_gettime(0x2, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x0}, 0xffffffff}, 0x10, 0xc2, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, 0x0}, 0x800) close(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x9) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x9) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(&(0x7f0000000140)='./bus\x00', 0x200, 0x1a) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) (async) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) r2 = syz_open_pts() close(r2) syz_open_pts() (async) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x803, 0x3fd, 0xffff, 0x200499, "084880fa870000bdda0988d11554e90d6602ff07", 0xb52, 0x3}) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) writev(r2, &(0x7f0000000200)=[{&(0x7f00000009c0)="893479155173ae54ebfe0b07de74931c7a0fd751965ee0366c0231e317b293add6f3538f53f0cb4055cdd4c1ba99d20c30d97cbcb817cb7b400905c3c6c931e5c8e24c307ef81f70e11e73e1c6645f27445916eb7e685ae2aa64549204e72f2fbda1bf69dce1c30a4d214f87b7bb9e43875530681ab40a909dea1295747b54e8b0190bc5c30f2acc191d63f73ef2144eff68ddf1f403b00405d401e4f25ee995db99875b1145682057fa121d1ae74f3c4a9edb57fd62bfca149a05232393b2673488bd", 0xc3}], 0x1) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f00000009c0)="893479155173ae54ebfe0b07de74931c7a0fd751965ee0366c0231e317b293add6f3538f53f0cb4055cdd4c1ba99d20c30d97cbcb817cb7b400905c3c6c931e5c8e24c307ef81f70e11e73e1c6645f27445916eb7e685ae2aa64549204e72f2fbda1bf69dce1c30a4d214f87b7bb9e43875530681ab40a909dea1295747b54e8b0190bc5c30f2acc191d63f73ef2144eff68ddf1f403b00405d401e4f25ee995db99875b1145682057fa121d1ae74f3c4a9edb57fd62bfca149a05232393b2673488bd", 0xc3}], 0x1) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xf8d, 0x8b, 0x2, 0x7}, {0x2, 0x81, 0x0, 0x2}, {0x1006, 0xa, 0x6, 0x1}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ad8a7531b1c6af2ef6966b461e8d6fe72cfef4824fe750821662548746bf498c718c07c977c3255b40733448913c461279cf1f58a907b695889b88a4d2f571133538bf886623c80cc8d770dc", &(0x7f0000000080)=0x4c, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ad8a7531b1c6af2ef6966b461e8d6fe72cfef4824fe750821662548746bf498c718c07c977c3255b40733448913c461279cf1f58a907b695889b88a4d2f571133538bf886623c80cc8d770dc", &(0x7f0000000080)=0x4c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) r5 = open(&(0x7f00000002c0)='./bus/file0\x00', 0x400, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000500)={0x7ff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x5, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x200801, 0xc, 0x7}, {0x2, 0x82, 0x5, 0x1000}, {0x7, 0x100, 0xd1a, 0x1088}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) 78.847236ms ago: executing program 5 (id=70): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) openat$wskbd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0xf66a, 0xfffffffb, 0xcfd, 0x5fffff4b, "9cdc4500307e8be5444d6b08fc5f6ce6015fdd04", 0x40000007, 0x5}) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x192}], 0x1) chmod(&(0x7f0000000040)='.\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x4, &(0x7f00000002c0)=[{0x1d, 0x1, 0x0, 0x1000}, {0x8001, 0x4, 0xc}, {0x0, 0x3, 0x4, 0x4000005}, {0x6, 0xb, 0x69, 0x4}]}) write(r2, &(0x7f0000000080)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) (async) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 78.019228ms ago: executing program 0 (id=71): ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000280)={0x2, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x0, 0x3}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x53, 0xa2f}, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x400000000005, 0x2, 0x5, 0x8000000000000005}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f00000003c0)="0341d86c71a30018bc5a91505d9230cca32a2b4b71b59c7acd912c34eb8627", &(0x7f0000000080)=0x67, 0x0, 0x2e) rmdir(&(0x7f0000000040)='./file0\x00') 76.525358ms ago: executing program 2 (id=72): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) setregid(0x0, r1) (async) setregid(r1, 0xffffffffffffffff) (async, rerun: 64) seteuid(0xffffffffffffffff) (rerun: 64) setrlimit(0x8, &(0x7f0000000980)={0x7, 0xfffffffffffffffc}) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() (async) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0xc) recvfrom(r4, &(0x7f0000000240)=""/19, 0x13, 0x41, &(0x7f00000002c0)=@in6={0x18, 0x1, 0xfaa, 0x8}, 0xc) (async) ioctl$FIOASYNC(r2, 0x80047469, &(0x7f0000000040)=0xfffffffc) r5 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r5, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f00000000c0)=0x1) read(r3, &(0x7f0000000140)=""/208, 0xd0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r6 = open(0x0, 0x80, 0xea) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f0000000380)={0x0, 0x4, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 32) r7 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r7, 0x0) (async) fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8001, 0x1}) (async) r8 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000002f80)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) 73.952966ms ago: executing program 3 (id=73): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) sysctl$kern(&(0x7f0000000300)={0x1, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x87, &(0x7f0000000140)={@remote, @local, [{[{0x88a8, 0x0, 0x1, 0x2}], {0x8100, 0x2, 0x1, 0x1}}], {@generic={0x809b, "757df336018492fd3f179a13e45f022c34fbf04978400a746699cf12b6219d39bf69df3939f65474f1391d9f12dd49efdf31fb3749aeeccce7d3a30bbdcdf62e8acbe138adc82a9b120ba3e1602bbb55bab890860f17139106199eb1f50aca488c1200140c1065602e7207005817d13597"}}}) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) mprotect(&(0x7f0000591000/0x800000)=nil, 0x800000, 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) socket(0x2, 0x3, 0x0) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) execve(0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) syz_emit_ethernet(0x87, &(0x7f0000000140)={@remote, @local, [{[{0x88a8, 0x0, 0x1, 0x2}], {0x8100, 0x2, 0x1, 0x1}}], {@generic={0x809b, "757df336018492fd3f179a13e45f022c34fbf04978400a746699cf12b6219d39bf69df3939f65474f1391d9f12dd49efdf31fb3749aeeccce7d3a30bbdcdf62e8acbe138adc82a9b120ba3e1602bbb55bab890860f17139106199eb1f50aca488c1200140c1065602e7207005817d13597"}}}) (async) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) (async) mprotect(&(0x7f0000591000/0x800000)=nil, 0x800000, 0x4) (async) 72.647055ms ago: executing program 5 (id=74): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r1, 0x1c0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) syz_emit_ethernet(0x50, &(0x7f00000003c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1f, 0x42, 0xffdf, 0x2000, 0x0, 0x0, 0x0, @rand_addr=0x4}, @udp={{0x3, 0x2, 0x8}, {"bd794d0f6a9d0b02b57c0d75520653b6c57395e6da9e9ad78c9930f020f968510a412d343f6b"}}}}}}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867ea9ed92904831d11a558caba3b584cd83056bd29bc1b35a93750169c1283e16145ec", 0x3e}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="71cfc296315f065b10dc1b932d5a34000000cb8fb5818384af1975f24a9bd13293a9d5bde34b949531e3df602f5460bf17914ecd6b76000000c94c4948e0e3e3e8bbbf0a", &(0x7f0000000080)=0x44, 0x0, 0x0) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000380)={0x0, 0x9}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3d, &(0x7f0000000280)={@random="724bdb0acce3", @broadcast, [], {@arp={0x806, @generic={0x1, 0x5a68, 0x6, 0xb, 0x9, @random="0887f8f700", "5ddf0100000000f43700f7", @empty, "18cd91271fa5ec22cf2e970c14a6a5cb"}}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867ea9ed92904831d11a558caba3b584cd83056bd29bc1b35a93750169c1283e16145ec8bf08ea63a11", 0x44}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000002c0)={0x3, &(0x7f00000001c0)=[{0xffbf, 0x4, 0x25, 0x48}, {0xd959, 0x6, 0x6, 0x8}, {0x8, 0xcc, 0x6, 0x800}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="71cfc296315f065b10dc1b932d5a34000000cb8fb5818384af1975f24a9bd13293a9d5bd", &(0x7f0000000080)=0x24, 0x0, 0x0) getpid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000140)="0b82f7e8e27988cd08c74a34c0a542471368a09df37130b565fb809de6dbe12572765f1bb7", &(0x7f0000000180)=0x25, &(0x7f0000000400)="f400400e47f31656fe69b7c2ffd84360d753fc80462f61a0b01102008cf33f349be5e81078ba3ce17ea7f28ad89196d27c2a965845f8df7f96ed93d4ae377de17e3afb0d1a2736fb778e4d9402bbb967da343306fdac0431e49c7a28d6920c71763d34b769172606cd9a085b4e6177dafb8d1bf0ff04fa19b5dfc785bec29e30a8d1f7ee5e15935ddae082dcdc514d0f078474635580a6419b30a05609c9d30129105b3a58544bd086f98a022aa859e815d9668fe5e57fc785fe733cf4949cfbd915f43c36d89803dd016aee1ae531016ef85eeb2c8c7e4ef2ca1ed53fa624a9bcc2cc9afde3cbf6e554cfc8f2e80f10757dee0d", 0xf4) syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="724bdb0acce3", @broadcast, [], {@arp={0x806, @generic={0x1, 0x5a68, 0x6, 0x0, 0x9, @random="0887f8f700", "", @empty, "18cd91271fa5ec22cf2e970c14a6a5cb"}}}}) 20.628621ms ago: executing program 0 (id=75): mknod(&(0x7f0000000200)='./file1\x00', 0x4, 0x5f00) acct(&(0x7f0000000080)='./file0\x00') r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x10, 0x0) r1 = socket(0x2, 0x8000, 0x0) r2 = socket(0x6, 0x8000, 0x0) ioctl$TIOCSTSTAMP(0xffffffffffffff9c, 0x8008745a, &(0x7f0000000040)={0xe89, 0x3}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRESOCT=0x0, @ANYRESOCT=r2]) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file2\x00'}, 0xa) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='I', 0x1, 0x1, 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001380)=""/170, 0xaa}, {0x0}, {0x0}], 0x3) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x2000000000000043, &(0x7f0000000140)=[{0x7, 0x81, 0x87, 0x6}, {0xc, 0x9, 0x4, 0xef}, {0xe, 0x8, 0x68, 0x9}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000040)=0x10004) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f00000000c0)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x8, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x100000401}) open(&(0x7f0000000400)='./file0\x00', 0x10, 0x141) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) shutdown(r1, 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) 17.802131ms ago: executing program 2 (id=76): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0xfff, 0x2, 0x13, 0x80004b}]}) syz_open_pts() 16.417769ms ago: executing program 5 (id=77): setrlimit(0x8, &(0x7f0000000000)={0x1, 0xfffffffffffffffd}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x150) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) select(0x40, &(0x7f00000000c0)={0x9, 0x7, 0x3, 0x9, 0xbd8, 0x2, 0x1000, 0x4}, &(0x7f0000000100)={0x9, 0x10, 0x1, 0x9, 0xfffffffeffffffff, 0x3, 0x57}, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x6, 0xe4, 0x104}, {0x106, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="e92737e34f5feff75b4be7fd6d1bd9c5c6213b014cfe806a9617d4a836c8c2f9a501d25449ae5ccaf65d965eb908c815556e9d8599e098c6694f81be82850517000000000000a84cc4f55fc8b4507b724a695dce7dedb99a8474fcba5f430ea86ddc3bfe4a808b89d1c9f148f0f53dae257946d13137d9206136c5d079ff20a6c50f29347da52249f5313d161b", 0x30}], 0x1, 0x0, 0x0, 0x897315b511269974}, 0x2) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="71cbef194ac03894cad4a5000098bdd1e4624dfb660000000100ff07000000005c6691c45cfbcddd86236d31450e956955041a85e7df2d3b474d78cf9fa37fb1529af467bb56620bf464db35f9ba9e3a82c7f8d647b95458f68df2e3", &(0x7f0000000080)=0x5c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[]) r4 = fcntl$dupfd(r0, 0xa, r0) getrlimit(0x3, &(0x7f00000015c0)) r5 = getpid() ktrace(&(0x7f0000000240)='./file0\x00', 0x0, 0x40000e10, r5) ktrace(&(0x7f0000000080)='./file0\x00', 0x2, 0x40000022, r5) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r7 = openat(r0, &(0x7f0000000400)='./file0\x00', 0x20480, 0x113) r8 = fcntl$getown(r0, 0x5) r9 = getuid() getgroups(0xa, &(0x7f0000000440)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) sendmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000140)="8cd8d6c097f883b14a139ec54ae55a7e6fac82dfcf7495c6c7b9f6b0bf482b072e99b905043c60ee882bb5f9902ffe3489", 0x31}, {&(0x7f0000001600)="9cb08a7c3f251df9c10dd5cbd5086b2b9aa17b3f38f545b0ab0b393a3cf50c961d055d4d9e356eadbefc5fda45278ac2d6da14e2ffc02fec32a69becfe1429a9c06eac39ca4950c36903df901cfdf5a2789f8047947e5bf352326e6e85703e081f541346bc3a478f1ec77b15e4ad9168ea56be5fce434167cf8ec4927343fb0019f7c9a0f3f09fa036beadeeb24409d23221ea20b0531a0424690c44dc109537a9008dd62744d02d01cea4c50ba5ace40ad5f594c0997850d8a0bd892137739aa392985a26a754438088ff3daba4b47d", 0xd0}, {&(0x7f0000000300)="ebb6f7bfccd4fbc762d28bcc9fdc7e52f0d1cd53eff2a6e3d6f7542c1051e9a3323be4ae0d31867f9e18ce3f57c7ed2e8789fa40c8fe9d8c8eaf172d7c1a055d9085c3", 0x43}], 0x4, &(0x7f0000000180)=[@cred={0x20, 0xffff, 0x0, r5, r6, r11}, @rights={0x28, 0xffff, 0x1, [r4, r7, r1, r0, r7]}, @rights={0x28, 0xffff, 0x1, [r2, r1, 0xffffffffffffff9c, r0, r1]}, @cred={0x20, 0xffff, 0x0, r8, r9, r11}, @cred={0x20, 0xffff, 0x0, r5, r9, r10}], 0xb0, 0x403}, 0x40e) dup(r0) ftruncate(r1, 0x3fd) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1) close(r2) 10.898687ms ago: executing program 3 (id=78): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0xfd}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="25e07bff764d01", 0x7}], 0x1, 0x0, 0x0, 0x8}, 0xe) fcntl$getflags(r0, 0x3) (async) fcntl$getflags(r0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 10.68043ms ago: executing program 2 (id=79): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x1ffffffffff}) r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a) fcntl$setstatus(r0, 0x4, 0x4) (async) read(r0, &(0x7f00000002c0)=""/183, 0xb7) 2.744639ms ago: executing program 5 (id=80): r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) select(0x21, 0x0, &(0x7f0000000040)={0x600000000, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x33, 0xfffffffffffffffc}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x8, 0x5b0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x7ffe}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="7f37ce070000003d965a1564287bafc1d6d531c28c4a7eaa13e5232a74bba3779ca27b8e0d00000004fe8a4cc330bb35350cb60a9a374aa8a836289681106692", 0x40}], 0x1) select(0x40, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x5, 0x2, 0x1ff, 0x5, 0xffffffffffffffff}, &(0x7f0000000140)={0x200, 0x7f, 0x7, 0x5, 0xfffffffffffffffa, 0x2, 0x2, 0x4}, &(0x7f00000001c0)={0x81, 0xa88, 0x7, 0x3, 0x3, 0x3, 0x7}, &(0x7f0000000200)={0x200, 0xb}) r1 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgroups(0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x3a0914c44f7b202d, 0x2000504) open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) setgid(0xffffffffffffffff) setitimer(0x2, &(0x7f0000000140)={{0x17, 0x5}, {0xffffffffffffbfff, 0x100000000000ed}}, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r2, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg(r3, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x180}, 0xe) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.396061ms ago: executing program 3 (id=81): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x80206919, &(0x7f00000001c0)) r4 = socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000240)=0x34, 0x4) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) ioctl$FIONREAD(r4, 0x8020690c, &(0x7f00000001c0)) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0\x00') 1.034797ms ago: executing program 2 (id=82): r0 = kqueue() openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) select(0x40, &(0x7f0000000180)={0x4e, 0x20000044809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0x4e, 0x20000044809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x16, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000200)=0x7ff) nanosleep(&(0x7f0000000040)={0x820000000003, 0x4b7}, 0xfffffffffffffffe) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x401, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x401, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r4, 0x80085762, &(0x7f0000000040)={0x1}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) ioctl$KDSETMODE(r4, 0x20004b0a, &(0x7f0000000240)=0x1) ioctl$FIONBIO(r5, 0xc0307004, &(0x7f0000000080)=0x2) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(&(0x7f0000000040)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)}) r6 = syz_open_pts() fcntl$lock(r6, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) socket(0x18, 0x4, 0x8) (async) r7 = socket(0x18, 0x4, 0x8) close(r7) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f00000001c0)) r8 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x4000000000, 0x2, 0x40000000000, 0xe63}) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000"], 0x10}, 0x0) 0s ago: executing program 0 (id=83): syz_emit_ethernet(0x41, &(0x7f0000000180)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x1, 0x13, 0x33, 0x64, 0x5, 0x9, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @generic="54099e3f4b51e33942455819ac5ad0e927155baa29aedd888897862b89643d"}}}}) (async) setgid(0xffffffffffffffff) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1600) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000180)=0x97, &(0x7f00000001c0), 0x4) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async, rerun: 64) r0 = syz_open_pts() (async, rerun: 64) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x3e, &(0x7f0000000000)="5ab7776a", 0x4) (async, rerun: 32) close(r0) (async, rerun: 32) r2 = syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x102) fcntl$setstatus(r3, 0x4, 0x40) r4 = geteuid() r5 = shmget$private(0x0, 0x2000, 0x404, &(0x7f0000ffe000/0x2000)=nil) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async, rerun: 64) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x1c0) select(0x40, &(0x7f0000000080)={0xffffffffffffffff, 0x20000000, 0x0, 0xffffffffffffffff, 0x100, 0x0, 0x449, 0x6}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000040)={0x7fffffffffffffff}, 0x0, 0x0, 0x0) (async) shmat(r5, &(0x7f0000ffd000/0x3000)=nil, 0x3000) setuid(r4) ioctl$FIOASYNC(r2, 0x80047470, &(0x7f0000000040)=0x1) (async) readv(r0, &(0x7f0000000040), 0x10000000000002c6) (async) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000100)="7abf0fa7082c692e317340b95803459e8b29631cc6", 0x15}, {0x0}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. pmap_unwire: wiring for pmap 0xfffffd806bdde950 va 0x200000001000 didn't change! pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 951 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *291318 84584 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8343535e) at panic+0x1cf __assert(ffffffff833e3fce,ffffffff8332cee7,3b7,ffffffff833e5f4e) at __assert+0x29 refcnt_finalize(ffff80002cd1b0b0,ffffffff8332d973) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff800038152000,ffff80002cd1b0a8) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80002a7e94a0) at pppxclose+0xa0 spec_close(ffff80003c987030) at spec_close+0x412 VOP_CLOSE(fffffd8070fbca70,41,fffffd8007bfb7b8,ffff80002a7e94a0) at VOP_CLOSE+0x12a vn_closefile(fffffd807a428ca8,ffff80002a7e94a0) at vn_closefile+0x11d fdrop(fffffd807a428ca8,ffff80002a7e94a0) at fdrop+0x126 closef(fffffd807a428ca8,ffff80002a7e94a0) at closef+0x190 syscall(ffff80003c987290) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6e067ddb820, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 951 ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8343535e) at panic+0x1cf __assert(ffffffff833e3fce,ffffffff8332cee7,3b7,ffffffff833e5f4e) at __assert+0x29 refcnt_finalize(ffff80002cd1b0b0,ffffffff8332d973) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff800038152000,ffff80002cd1b0a8) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80002a7e94a0) at pppxclose+0xa0 spec_close(ffff80003c987030) at spec_close+0x412 VOP_CLOSE(fffffd8070fbca70,41,fffffd8007bfb7b8,ffff80002a7e94a0) at VOP_CLOSE+0x12a vn_closefile(fffffd807a428ca8,ffff80002a7e94a0) at vn_closefile+0x11d fdrop(fffffd807a428ca8,ffff80002a7e94a0) at fdrop+0x126 closef(fffffd807a428ca8,ffff80002a7e94a0) at closef+0x190 syscall(ffff80003c987290) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6e067ddb820, count: -13 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c986e10 rbx 0xffffffff81a5aa10 pppxclose rdx 0xffff800001471600 rcx 0 rax 0xffff80002a7e94a0 r8 0 r9 0x8080808080808080 r10 0xb8afc920689163fd r11 0x2c49fee6b3df2792 r12 0 r13 0 r14 0 r15 0x1 rip 0xffffffff81eba925 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c986e00 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=291318 pid=84584 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=53, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7e9c50,0xffff80002a7e99d0 process=0xffff80003814e010 user=0xffff80003c982000, vmspace=0xfffffd806b9a3a28 estcpu=3, cpticks=0, pctcpu=0.1, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 44740 167494 67918 0 2 0 syz-executor 44740 179226 67918 0 3 0x4000080 fsleep syz-executor 44740 40392 67918 0 3 0x4000080 fsleep syz-executor 29043 35455 90623 60929 2 0x10 syz-executor 29043 270441 90623 60929 3 0x4000090 ttyout syz-executor 46943 333575 18233 0 2 0x10 syz-executor 46943 69619 18233 0 3 0x4000090 fsleep syz-executor 46943 316234 18233 0 3 0x4000090 fsleep syz-executor 46943 89570 18233 0 3 0x4000090 fsleep syz-executor 16072 285518 48093 0 2 0 syz-executor 16072 1861 48093 0 3 0x4000080 nanoslp syz-executor 16072 337861 48093 0 2 0x4000000 syz-executor 16072 383060 48093 0 3 0x4000080 fsleep syz-executor 45399 450783 24284 0 2 0 syz-executor 45399 92649 24284 0 3 0x4000080 fsleep syz-executor 45399 392280 24284 0 3 0x4000080 fsleep syz-executor 45399 38910 24284 0 3 0x4000080 fsleep syz-executor 84584 168407 91733 0 2 0 syz-executor *84584 291318 91733 0 7 0x4000000 syz-executor 84584 515688 91733 0 3 0x4000080 fsleep syz-executor 77453 35610 89441 0 2 0xc80 syz-executor 77453 372155 89441 0 3 0x4000080 sbwait syz-executor 77453 11516 89441 0 3 0x4000080 fsleep syz-executor 9155 307524 49294 0 2 0xc80 syz-executor 9155 89255 49294 0 3 0x4000080 lockf syz-executor 9155 474311 49294 0 3 0x4000080 fsleep syz-executor 49294 44528 35118 0 3 0x82 nanoslp syz-executor 91733 348177 35118 0 2 0xc82 syz-executor 90623 482124 35118 0 2 0xc82 syz-executor 24284 266864 35118 0 2 0xc82 syz-executor 67918 443523 35118 0 2 0xc82 syz-executor 48093 125509 35118 0 3 0x82 nanoslp syz-executor 89441 74989 35118 0 2 0xc82 syz-executor 18233 33879 35118 0 3 0x82 nanoslp syz-executor 35118 34382 7624 0 3 0x82 kqread syz-executor 7624 63310 71679 0 3 0x10008a sigsusp ksh 71679 477517 25337 0 3 0x98 kqread sshd-session 25337 162226 85935 0 3 0x92 kqread sshd-session 23393 273012 1 0 3 0x100083 ttyin getty 85935 507842 1 0 3 0x88 kqread sshd 25240 145280 70052 73 3 0x1100090 kqread syslogd 70052 467768 1 0 3 0x100082 sbwait syslogd 1654 37736 1 0 3 0x100080 kqread resolvd 5496 376185 41683 77 2 0x100012 dhcpleased 59242 52465 41683 77 3 0x100092 kqread dhcpleased 41683 389992 1 0 3 0x80 kqread dhcpleased 53028 352008 0 0 3 0x14200 bored smr 9464 475280 0 0 2 0x14200 zerothread 36725 439856 0 0 3 0x14200 aiodoned aiodoned 47605 111055 0 0 3 0x14200 syncer update 52320 519075 0 0 3 0x14200 cleaner cleaner 81755 282805 0 0 3 0x14200 reaper reaper 84099 425881 0 0 3 0x14200 pgdaemon pagedaemon 5558 392808 0 0 3 0x14200 bored viomb 90366 433276 0 0 3 0x40014200 acpi0 acpi0 8054 165127 0 0 3 0x14200 bored softnet7 81151 365044 0 0 3 0x14200 bored softnet6 62431 473857 0 0 3 0x14200 bored softnet5 53384 458818 0 0 3 0x14200 bored softnet4 21258 361424 0 0 3 0x14200 bored softnet3 37147 294700 0 0 3 0x14200 bored softnet2 32444 437884 0 0 3 0x14200 bored softnet1 21926 121974 0 0 2 0x14200 softnet0 54781 457721 0 0 3 0x14200 smrbar systqmp 65079 268747 0 0 3 0x14200 bored systq 76553 119932 0 0 3 0x40014200 tmoslp softclock 1664 148666 0 0 3 0x40014200 idle0 1 138692 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10186 11042K 11298K 166960K 11392 0 pcb 17 12K 12K 166960K 34 0 rtable 207 6K 6K 166960K 271 0 pf 32 13K 14K 166960K 45 0 ifaddr 44 7K 8K 166960K 56 0 ifgroup 54 2K 2K 166960K 71 0 sysctl 2 1K 9K 166960K 6 0 counters 34 17K 18K 166960K 42 0 ioctlops 0 0K 2K 166960K 41 0 iov 0 0K 20K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1346 85K 85K 166960K 1480 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 216 0 proc 60 59K 83K 166960K 484 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 6 0 in_multi 99 7K 7K 166960K 102 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 361 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 235 143K 160K 166960K 3588 0 UVM aobj 7 2K 4K 166960K 8 0 pinsyscall 39 78K 92K 166960K 1243 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 6 0 NDP 14 0K 2K 166960K 34 0 temp 36 8662K 8727K 166960K 4002 0 kqueue 18 26K 26K 166960K 41 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 43 0 40 1 0 1 1 0 8 0 rtentry 136 100 0 6 4 0 4 4 0 8 0 unpcb 144 78 0 56 2 0 2 2 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 59 0 50 4 0 4 4 0 8 3 arp 88 11 0 0 1 0 1 1 0 8 0 inpcb 328 137 0 125 4 0 4 4 0 8 2 nd6 104 16 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 7 0 6 1 0 1 1 0 8 0 pppxif 1384 3 0 2 1 0 1 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 481 0 37 30 0 30 30 0 8 2 art_table 40 482 0 37 5 0 5 5 0 8 0 art_node 32 100 0 16 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 112 3 0 0 1 0 1 1 0 8 0 shmpl 112 5 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1758 0 251 95 0 95 95 0 8 0 ffsino 256 1758 0 251 95 0 95 95 0 8 0 nchpl 144 2064 0 372 63 0 63 63 0 8 0 uvmvnodes 80 1877 0 0 39 0 39 39 0 8 0 vnodes 216 1877 0 0 105 0 105 105 0 8 0 namei 1024 6240 0 6240 2 0 2 2 0 8 2 kstatmem 264 36 0 12 2 0 2 2 0 8 0 scxspl 216 6787 0 6787 8 0 8 8 1 8 8 plimitpl 152 173 0 153 1 0 1 1 0 8 0 sigapl 424 498 0 448 7 0 7 7 0 8 1 knotepl 120 5723 0 5668 9 0 9 9 0 8 7 kqueuepl 184 45 0 29 1 0 1 1 0 8 0 pipepl 304 109 0 82 3 0 3 3 0 8 0 fdescpl 448 478 0 448 5 0 5 5 0 8 1 filepl 120 2232 0 1982 9 0 9 9 0 8 1 lockfpl 104 45 0 38 1 0 1 1 0 8 0 lockfspl 48 24 0 19 1 0 1 1 0 8 0 sessionpl 144 22 0 14 1 0 1 1 0 8 0 pgrppl 48 32 0 16 1 0 1 1 0 8 0 ucredpl 104 370 0 357 1 0 1 1 0 8 0 zombiepl 144 448 0 448 1 0 1 1 0 8 1 processpl 1168 498 0 448 5 0 5 5 0 8 1 procpl 656 629 0 561 6 0 6 6 0 8 0 sockpl 552 265 0 228 5 0 5 5 0 8 1 mcl64k 65536 7 0 7 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2527 0 2478 14 0 14 14 0 8 7 mcl2k 2048 274 0 271 1 0 1 1 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4923 0 4779 14 0 14 14 0 8 4 bufpl 280 2919 0 117 201 0 201 201 0 8 0 anonpl 24 104504 0 101299 33 0 33 33 0 187 12 amapchunkpl 152 10514 0 10003 24 0 24 24 0 158 4 amappl16 200 1921 0 1896 5 0 5 5 0 8 3 amappl15 192 3 0 3 1 0 1 1 0 8 1 amappl14 184 103 0 93 1 0 1 1 0 8 0 amappl13 176 12 0 12 1 0 1 1 0 8 1 amappl12 168 1087 0 1057 3 0 3 3 0 8 1 amappl11 160 47 0 37 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 0 1 1 0 8 1 amappl9 144 252 0 252 1 0 1 1 0 8 1 amappl8 136 19 0 18 1 0 1 1 0 8 0 amappl7 128 101 0 91 1 0 1 1 0 8 0 amappl6 120 167 0 164 1 0 1 1 0 8 0 amappl5 112 124 0 117 1 0 1 1 0 8 0 amappl4 104 264 0 249 1 0 1 1 0 8 0 amappl3 96 1655 0 1542 3 0 3 3 0 8 0 amappl2 88 609 0 556 2 0 2 2 0 8 0 amappl1 80 8396 0 7848 14 0 14 14 0 8 1 amappl 88 2939 0 2768 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 1 1 0 1 1 0 8 0 uaddrrnd 24 478 0 448 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 478 0 448 1 0 1 1 0 8 0 vmmpekpl 168 5407 0 5384 2 0 2 2 0 8 0 vmmpepl 168 36854 0 34981 87 0 87 87 0 357 0 vmsppl 368 477 0 448 4 0 4 4 0 8 1 rwobjpl 40 14743 0 12018 28 0 28 28 0 8 0 pdppl 4096 962 0 896 92 20 72 78 0 8 6 pvpl 32 232944 0 224353 102 0 102 102 0 265 22 pmappl 216 477 0 448 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 371 0 20 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8343535e) at panic+0x1cf __assert(ffffffff833e3fce,ffffffff8332cee7,3b7,ffffffff833e5f4e) at __assert+0x29 refcnt_finalize(ffff80002cd1b0b0,ffffffff8332d973) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff800038152000,ffff80002cd1b0a8) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80002a7e94a0) at pppxclose+0xa0 spec_close(ffff80003c987030) at spec_close+0x412 VOP_CLOSE(fffffd8070fbca70,41,fffffd8007bfb7b8,ffff80002a7e94a0) at VOP_CLOSE+0x12a vn_closefile(fffffd807a428ca8,ffff80002a7e94a0) at vn_closefile+0x11d fdrop(fffffd807a428ca8,ffff80002a7e94a0) at fdrop+0x126 closef(fffffd807a428ca8,ffff80002a7e94a0) at closef+0x190 syscall(ffff80003c987290) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6e067ddb820, count: -13 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8343535e) at panic+0x1cf __assert(ffffffff833e3fce,ffffffff8332cee7,3b7,ffffffff833e5f4e) at __assert+0x29 refcnt_finalize(ffff80002cd1b0b0,ffffffff8332d973) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff800038152000,ffff80002cd1b0a8) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80002a7e94a0) at pppxclose+0xa0 spec_close(ffff80003c987030) at spec_close+0x412 VOP_CLOSE(fffffd8070fbca70,41,fffffd8007bfb7b8,ffff80002a7e94a0) at VOP_CLOSE+0x12a vn_closefile(fffffd807a428ca8,ffff80002a7e94a0) at vn_closefile+0x11d fdrop(fffffd807a428ca8,ffff80002a7e94a0) at fdrop+0x126 closef(fffffd807a428ca8,ffff80002a7e94a0) at closef+0x190 syscall(ffff80003c987290) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6e067ddb820, count: -13