last executing test programs: 2.11441015s ago: executing program 1 (id=2): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file1\x00', 0x0) unveil(&(0x7f0000000180)='./file0/file1\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f00000002c0)='c\x00') unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='x\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = socket(0x18, 0x3, 0x3a) r2 = socket(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x81, 0x201, 0xffffffffffffffff, 0x400007, 0x2000000000007, 0x10006, 0x7ffb, 0x205}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) bind(r2, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x2}, 0xc) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x2, 0x1e, 0x1}, {0x24, 0x0, 0x0, 0xfffffffe}, {0x8306}]}) syz_emit_ethernet(0x26, &(0x7f0000001200)=ANY=[]) 2.108237305s ago: executing program 0 (id=1): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x3, 0x0, 0x0, 0xfffffffd}]}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil}, {&(0x7f000040f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000027e000/0x4000)=nil, 0x18}, {&(0x7f0000437000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x3}, {&(0x7f000024d000/0x1000)=nil, &(0x7f000018a000/0x2000)=nil, 0x2000000401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00002a1000/0x2000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f0000054000/0x3000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil}, {&(0x7f000029e000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f00001bf000/0x2000)=nil, &(0x7f0000688000/0x4000)=nil, 0x1000000000000}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x7fffffff}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f00002e6000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0xffffffff}], './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x1, 0x0) socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f00000002c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000280)=0x3414, 0x0, 0x918d37d780ba24ba) 2.099884874s ago: executing program 5 (id=6): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000300)='./bus\x00', 0x2, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80045102, &(0x7f0000000040)={0x0, 0x81, 0x0, 0x33}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xffffffffffffff2c, [{&(0x7f000062c000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100d3b5}, {&(0x7f0000419000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7f}, {&(0x7f0000419000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f00006b8000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000076e000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f000041f000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000000000005}, {&(0x7f0000197000/0x3000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f000042f000/0x1000)=nil, &(0x7f0000689000/0x3000)=nil, 0x3}, {&(0x7f0000418000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00000a6000/0x3000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000419000/0x3000)=nil, &(0x7f0000fed000/0x10000)=nil, 0x1000039fa}, {&(0x7f000042d000/0x3000)=nil, &(0x7f0000239000/0x2000)=nil, 0x7}], './file0\x00', 0xfffffffe}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xc1084413, &(0x7f0000000040)={0x2, 0xfd, 0x65, 0x6, '\x00', 0x0, 0xffffff00}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x1c, 0x8, 0x0, 0x10002}, {0x16, 0x3, 0x4, 0x200}]}) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCGFLAGS(r3, 0x4004745d, &(0x7f0000000040)) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCMGET(r4, 0x4004746a, &(0x7f0000000100)) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x8000, 0x9) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0xb4, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @random="c8f4d1d9f1c5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f, 0x30, 0x0, 0x4d35, 0x6, 0x62, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x2, r6, 0x41424344, 0x1, 0x0, 0x7, 0x1, 0xe, 0x0, 0x9, {[@mss={0x2, 0x4, 0xa2e9}, @sack={0x5, 0x2}, @eol]}}}}}}}) syz_emit_ethernet(0x13b, &(0x7f0000000280)={@remote, @broadcast, [{[], {0x8100, 0x7, 0x1, 0x3}}], {@ipv4={0x800, {{0x19, 0x4, 0x2, 0x4, 0x129, 0x65, 0xb, 0x7f, 0x89, 0x0, @empty, @empty, {[@end, @rr={0x7, 0x13, 0x4, [@remote={0xac, 0x14, 0x0}, @multicast1, @remote={0xac, 0x14, 0x0}, @empty]}, @ssrr={0x89, 0x13, 0x10, [@multicast1, @rand_addr=0x10001, @remote={0xac, 0x14, 0x0}, @multicast2]}, @noop, @ssrr={0x89, 0xb, 0x6, [@remote={0xac, 0x14, 0x0}, @empty]}, @ssrr={0x89, 0x1b, 0x0, [@rand_addr=0x8, @rand_addr=0x5, @rand_addr=0x8001, @multicast1, @broadcast, @empty]}]}}, @tcp={{0x1, 0x0, r5, r6, 0x0, 0x0, 0xa, 0x1, 0xb, 0x0, 0x0, {[@eol, @generic={0x14, 0x12, "28483c54b80b49fdfdd070a024ac42c0"}]}}, {"5a2338da96f8f311fcf26e0bb872ae314b049b0a560a5ceaf5f8a8a7833ceb42782551f0ae1aa9ef3c1a453181817f2266541e2ab22c6e53c25f387b32ba54d8e90edebb4f8cb1fddbf63864e9043d6bba0c6b30b5dcfdd94279e39d03e287a7261202e50407ab02e0b46ac572c0526d36623bd0f537d9ee853a3788d0d7dfbb378b502ac5b93ccb7e7517495156c817a4ba2dc936aa779a3d6ff630bf"}}}}}}) 2.032730947s ago: executing program 6 (id=7): pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="dfe8f9579860524609e06812b03b87bed38b35ae828323c14b0251a7b011c3b847d3e0d908bb38c03a7ffcafd0f561aa226f6e47d068636e0d5c5541a2382319fb8c8eacc0404af8c49575d0787bf15d5a631c85200ccfb5f4d2047ab1e142358aa7e060b7baa16d4d9f5cb8d09a805ea7f781ba5fb864bbe742647f0d9625ea", 0x80}], 0x1, 0x0) (async) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc}) (async) ioctl$BIOCIMMEDIATE(0xffffffffffffff9c, 0x80044270, &(0x7f0000000180)=0xfffffffa) flock(r0, 0x1) flock(r0, 0x2) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) syz_open_pts() (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc0284459, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x401}) (async) chdir(&(0x7f0000000140)='./file0\x00') ioctl$TIOCCBRK(r1, 0x2000747a) (async) syz_open_pts() 1.967894565s ago: executing program 0 (id=9): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9d89) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5e) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5e) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9018, 0x2000007, 0x101, 0x8, 0x40b, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0x7fff}, {0x104, 0xf88, 0x0, 0x8}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x9}, {0xfffffffd, 0x5903, 0x3, 0x9d}, {0xce1, 0xffffffff, 0x8, 0x6d}, {0x2a20, 0x8, 0x200014, 0x8}, {0x2, 0x2082, 0xd, 0x5}, {0x6a79, 0x8004, 0x1000, 0x2}, {0x3, 0x10001, 0xc, 0x3}, {0x8, 0x4000009, 0xb, 0x2}, {0x3, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000f, 0x7, 0x5, 0x200}, {0x0, 0x1, 0xfff, 0x9b2e}]}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x1, 0x2, 0x1, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4a4, 0x2, 0xce5], [0xfffffffffffffffc, 0x80000001, 0xfffffffffffffffb, 0xffffffff, 0x100, 0x7b99, 0x200, 0x3, 0x1], [0x100000001, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffa], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffeffffe, 0x5], [{0x0, 0x7, 0x0, 0x2}, {0xfffc, 0x2, 0xc9, 0x2}, {0x0, 0x0, 0xfffffffe, 0xfffffffffffffffd}, {0x2, 0x5, 0x6, 0x3e}, {0x10, 0x2, 0x0, 0x80b}, {0xb, 0x2003, 0x40000, 0x2000000000000000}, {0xfffc, 0x0, 0x0, 0x7}, {0x0, 0x965, 0x8, 0x8}], {0x2000, 0x1000001, 0x2}, {0x0, 0x0, 0x73e8, 0x1}}}) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kqueue() (async) r4 = kqueue() dup(r4) (async) r5 = dup(r4) kevent(r5, &(0x7f0000000080)=[{{r5}, 0xfffffffffffffffa, 0xc1, 0x1}], 0x2000007, 0x0, 0x2, 0x0) close(r2) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000180)={0x101, 0x963}) getpid() (async) r6 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r6) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r6) select(0x40, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0xfffffffffffffffe, 0x4, 0x8000000000000000, 0xb}, &(0x7f0000000140)={0x1, 0xffffffffffffcca3, 0x101, 0x40000000003, 0x5, 0x7, 0x0, 0x6}, &(0x7f0000000300)={0x4, 0x8000000000000000, 0x3d, 0x100, 0x9, 0x1000da0, 0x5, 0xe}, 0x0) writev(r3, &(0x7f0000000200)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xe, 0x0, 0x0) (async) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xe, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000340)="eafaa4ff0ffb000180000000", 0xc) (async) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000340)="eafaa4ff0ffb000180000000", 0xc) 1.967117944s ago: executing program 3 (id=10): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() r1 = open$dir(0x0, 0x400, 0x100) fcntl$dupfd(0xffffffffffffffff, 0xa, r1) r2 = socket$unix(0x1, 0x0, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000000)={&(0x7f0000000080)=[{0x23, 0x9}, {0x20, 0x8}], 0x2}) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="8a5d0337cf8796080cbeb9db9264bb", 0xf}], 0x1, 0x0}, 0x404) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r4, 0xc0105715, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0xfffffffffffffce7, 0x0, 0xfffffffffffffe18}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getuid() close(0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @random="e788f452f0ee", [], {@arp={0x806, @generic={0x6, 0x86de, 0x6, 0x0, 0x0, @random="899f87e909cf", "", @remote, "5228ba3ecdd892a8f07a3ee287258414"}}}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x7fffffff, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0x0, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x77, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x26, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1) write(r6, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000005c0)="ea00aaae647e899572af0981a1e7993975ac3ddcc64b6450273d08a84c3045e3d4d8f8b99acc76082c0b9f49c2fc2cc3f3012e58ca4257073bef391d3553389f4331ce8edd44d8eaa68ee1abb501336495ba61693588fd7c797d4568ab992fb76f379e1db01c3154e138f8c48cd2457f090d305ad867a16a05e4b760701c5373431c6c9d27ed3e5cc1396f0954ef96b6d14340dc73e4b3dd7992ff0de95b30d9e79d80a5146b965c5eb3109fc5c7117e0b1dc4471825afe99b7a998ebe4de790cf3614780257ad6de086f931c8cccf5d60d3354bd1ed74be1961496bfa42de13043069a7888163d6b126ff91b8dea33608310f41c1f8f042aae0af3c1543fb0a48d10b4b7c", 0x105) close(r0) syz_open_pts() writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="4c612d6be5e6590c1941ab3f65a10c01177f3f8709a3ee1ec2a3567d19b5bb4e12ff2ca9a03fc37206835e1d40f2349a609b00f7700a", 0x36}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000380)=""/198, 0xc6}], 0x2) 1.962778495s ago: executing program 5 (id=11): setreuid(0xee00, 0x0) r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) r1 = getuid() fchown(r0, r1, 0xffffffffffffffff) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={{0x0, 0x7f}, {0xfffffffffffffffc, 0xffffffffffffffff}}, 0x2) setreuid(0xee00, 0x0) (async) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) (async) getuid() (async) fchown(r0, r1, 0xffffffffffffffff) (async) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={{0x0, 0x7f}, {0xfffffffffffffffc, 0xffffffffffffffff}}, 0x2) (async) 1.962536973s ago: executing program 6 (id=12): r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x18, 0x3, 0x3a) getsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) r2 = socket(0x20, 0x1, 0x80) bind(r2, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0xa) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000100)=0x7ffc, 0x4) ioctl$WSKBDIO_SETENCODING(r3, 0x80045710, &(0x7f0000000040)=0xfffff04a) sendto$unix(r0, &(0x7f0000000140)="b1000501b100009f0500000007010000331c13fece910b00fef96ecfc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b2b7be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a42118210000720fd38bfb0000fd54c125191b1257aea8c500002002fbfe0c2300008abfba0902000000e371a3f8343712051eeab70800000000000000ffffffff001000"/177, 0xb1, 0x0, 0x0, 0xfffffffffffffe2a) 921.481849ms ago: executing program 4 (id=13): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xd79b41c173cbb07f) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 921.12778ms ago: executing program 1 (id=14): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) syz_emit_ethernet(0x6a, &(0x7f0000000380)={@broadcast, @remote, [{[], {0x8100, 0x0, 0x0, 0x4}}], {@ipv6={0x86dd, {0x8, 0x6, "800580", 0x30, 0x3b, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr="fe4d1aafbaf5c2c66da2acf4faeb1e58", {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x38, '\x00', {0x0, 0x6, 'j@\r', 0x6, 0x32, 0x4, @rand_addr="202de03bf203cc442ae33206a327509f", @rand_addr="cc3ccd44957fb2011da86b445babbb82"}}}}}}}) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa"]) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 775.795345ms ago: executing program 3 (id=15): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000040)) r1 = socket(0x18, 0x1, 0x0) ioctl$WSDISPLAYIO_WSMOUSED(r0, 0x80185758, &(0x7f0000000080)={0x400, 0x3ad3, {0x2, 0x7fffffff}}) setsockopt(r1, 0x1000000029, 0xc, 0x0, 0x0) 774.960193ms ago: executing program 0 (id=16): setgroups(0x0, 0x0) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x28) r1 = socket(0x800000018, 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000340)=0x6, 0x4) fchdir(r0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000040)={0x2ec8, 0xb, 0x1, 0x8, "d0c661995bf2fdb41ee9eae6471312059daca17d", 0x941, 0x1000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xc) r4 = msgget$private(0x0, 0x7fc) msgrcv(r4, 0x0, 0x0, 0x3, 0x1000) mknod(&(0x7f00000000c0)='./file0\x00', 0x118a, 0x0) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$FIONREAD(r5, 0xc0106978, &(0x7f0000000040)) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00acc044c0a3fd5421"], 0x0, 0x800) shutdown(r3, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') 773.953423ms ago: executing program 4 (id=17): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1b}, 0x4, &(0x7f00000014c0)="41c07cff", &(0x7f0000000040)=0x4, 0x0, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1b}, 0x4, &(0x7f00000014c0)="41c07cff", &(0x7f0000000040)=0x4, 0x0, 0x0) (async) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0) (async) 773.556292ms ago: executing program 2 (id=3): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf8ffffffffffffff, 0x1}) r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = kqueue() syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x2, 0x2, 0x0) bind(r4, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000), 0x2) kevent(r3, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffffc, 0x21, 0x2}], 0x9, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x8, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x100000401}) flock(r5, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) kevent(r3, 0x0, 0xfffffffb, &(0x7f0000000080), 0x200, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) 769.227538ms ago: executing program 6 (id=18): symlink(&(0x7f0000000100)='./bus/\x00', &(0x7f0000000140)='./bus\x00') (async) readlink(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) (async) r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x400, 0x60) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) (async, rerun: 64) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 64) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 390.313076ms ago: executing program 5 (id=19): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x1, 0x0) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r4, 0x80045710, &(0x7f00000000c0)=0x100) (async) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r5, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$hw(&(0x7f0000000240)={0x6, 0x9}, 0x2, &(0x7f0000000280)="0281a68a96b83a988fdab470dbb60c87bd9c753327ff883f15eb907efee1ac0bdd7189390ecc180b5e758277c9f26f9b7400d50390fc73a88438232cef4009037226763ffe2dea9208e22203f9777a427f7ea16c6ba37caf1b266f0c6ed755bc09a04b22a2baede3b4fe2defb3f3ef09", &(0x7f0000000380)=0x70, &(0x7f00000003c0), 0x0) 389.445972ms ago: executing program 7 (id=20): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x53, 0x4}, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x200020}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x22, 0x0, 0xfffffdfd) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x15a) read(r0, &(0x7f00000001c0)=""/24, 0x18) setuid(0xffffffffffffffff) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_timeval(r3, 0xffff, 0x1006, 0xffffffffffffffff, &(0x7f0000000000)=0x63) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000500)="9111cc70e5ac34ec4720890ca7825bcfe344c9ecbc080e5ecc209b553b3b815e5a0f9e9545550aedf4b2ee08ffd53903a501257a47a9ee1076c13e3e", 0x3c}], 0x1) unveil(0x0, &(0x7f0000000140)='c\x00') pwritev(r4, &(0x7f0000003780)=[{&(0x7f0000000180)='>', 0x1}], 0x1, 0xffffffffffffffff) syz_open_pts() 382.574737ms ago: executing program 3 (id=21): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) (async) r1 = getpid() setgroups(0x0, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x800, 0xffffffff}) setuid(0xffffffffffffffff) utimensat(r0, 0x0, &(0x7f0000000200)={{0x1, 0x1}, {0x0, 0xfffffffffffffffb}}, 0x0) clock_gettime(0x2, &(0x7f0000000040)) setitimer(0x0, 0x0, &(0x7f0000002880)) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x40000, 0x0}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x3f, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffef94ea09066dbd86dd60db834400041100fed78d5ba80b9e614d0c535a98000000ff020000000000000000000000000001"]) 376.784975ms ago: executing program 6 (id=22): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x0) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x1, 0x8000, 0x7d}, {0x18, 0x3, 0x2, 0x8}, 0x401, [0xffffff81, 0x3, 0x0, 0x6, 0x4, 0xfffff2a8, 0x8, 0x101]}, 0x3c) (rerun: 64) 376.540903ms ago: executing program 4 (id=23): r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x9) r1 = semget(0x0, 0x2, 0x281) semop(r1, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x64) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x3, 0x9, 0x3, 0x1}, {0x6, 0x10, 0x0, 0x2}, {0x8c5, 0x8, 0xa8, 0x80}, {0xff, 0x40, 0x0, 0x2}, {0x7, 0x25, 0x7, 0x4}, {0x7, 0x8, 0x8, 0xfffff800}, {0x4, 0x9, 0x28}]}) semop(r1, &(0x7f0000000000), 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) (async) mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x9) (async) semget(0x0, 0x2, 0x281) (async) semop(r1, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x64) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x3, 0x9, 0x3, 0x1}, {0x6, 0x10, 0x0, 0x2}, {0x8c5, 0x8, 0xa8, 0x80}, {0xff, 0x40, 0x0, 0x2}, {0x7, 0x25, 0x7, 0x4}, {0x7, 0x8, 0x8, 0xfffff800}, {0x4, 0x9, 0x28}]}) (async) semop(r1, &(0x7f0000000000), 0x0) (async) 376.271964ms ago: executing program 6 (id=24): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r0 = getpid() ktrace(&(0x7f00000002c0)='./file0\x00', 0x0, 0x510, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x64, 0x0}, 0x1003f8d}, 0x10, 0x1801, 0x0) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000080)={0x6, 0x10001, 0x1, 0x38604ec7}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r1) unveil(0x0, &(0x7f00000000c0)='r\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) getpid() (async) ktrace(&(0x7f00000002c0)='./file0\x00', 0x0, 0x510, r0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x64, 0x0}, 0x1003f8d}, 0x10, 0x1801, 0x0) (async) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000080)={0x6, 0x10001, 0x1, 0x38604ec7}) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async) close(r1) (async) unveil(0x0, &(0x7f00000000c0)='r\x00') (async) 375.537072ms ago: executing program 3 (id=25): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000000)='./file1\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000240)={0x67, './file2\x00', './file0aaaaaaaaa'}) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = socket(0x18, 0x1, 0x6) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendto(r1, &(0x7f0000000080)="8424ee7d1527be0f3ebd942715455235c9ccfc2db7125541e23acb37065e730b5ea6bb8e8e0f2f7f67842c0de3581285d7f4c3b1241e38b20abcf78fe37446b94331e90850824755ca85830746dcc93d73b60744674edcb75741e149f96903e4456e379275eb1502c9215b9718d9e856d72b5cd73b00e9f335a1a1fa88e918c9fe166addd3e51e78debd8e4980f9cc981f0da003fb668ca5fe57e0b102a303f855b9d928f57409db61abd5b36894d20ab4be996d9ec6b8e04ba6e7b36c76b7f21cd3c2f29f60b2a115bd40fbac120c74ab53277598082beb514665b2fc54574fa5b82870023c9c9a94ce768edcab", 0xee, 0x5, &(0x7f0000000000)=@in={0x2, 0x0}, 0xc) munmap(&(0x7f00001f4000/0x1000)=nil, 0x1000) 281.779143ms ago: executing program 7 (id=26): ioctl$BIOCGFILDROP(0xffffffffffffffff, 0x40044278, &(0x7f0000000040)) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="7f37ce070000003d965a1564287bafc1d6d531c28c4a7eaa13e5232a74bba3779ca27b8e0d00000004fe8a4cc330bb35350cb60a9a374aa8a836289681106692", 0x40}], 0x1) r1 = socket$inet(0x2, 0x3, 0xf) setsockopt(r1, 0x0, 0x4, &(0x7f0000000000)="1ef4d8d5", 0x4) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 280.497603ms ago: executing program 3 (id=27): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open$dir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x43) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0xff, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0xfffffff9, 0x6, 0xffffffff, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0xb, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) fcntl$setstatus(r0, 0x4, 0x80) openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f00000002c0)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0xb0f, 0x10001, 0xe, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x7, 0x7ff}) r2 = msgget(0x3, 0x2ec) msgsnd(r2, 0x0, 0x0, 0x800) getitimer(0x3, 0x0) 280.027335ms ago: executing program 7 (id=28): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f000019d000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f000051c000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) ftruncate(r2, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)='\x00', 0xfffffeb0}], 0x1) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) socket(0x1f, 0x3, 0x1) 279.772362ms ago: executing program 4 (id=29): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) r0 = semget(0x0, 0x1, 0x281) (async) r1 = socket(0x18, 0x3, 0x0) socket(0x800000018, 0x3, 0x3) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x2}) (async) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async, rerun: 32) setsockopt(r1, 0x1000000000029, 0xc, 0x0, 0x0) (async, rerun: 32) r3 = semget$private(0x0, 0x4, 0x3c0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r4 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="bf30e56f25000046fa9dc486a7817494c44281ea65f2f48172e91da15b249657e5cdc8bc443657d0b1de8e56de47a7a757", 0x31}], 0x1) (async) kevent(0xffffffffffffffff, 0x0, 0x7fff, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffb, 0x44, 0x0, 0x0, 0x8000005}, {{}, 0xfffffffffffffffa, 0xc1, 0xf0000000, 0xe6ac, 0x46ad}, {{r4}, 0xfffffffffffffffc, 0x1, 0xf0000000, 0x1, 0x4}, {{}, 0xfffffffffffffffd, 0x20, 0x10, 0x7, 0x400}, {{}, 0xfffffffffffffffb, 0x40, 0x20000000, 0x9, 0x3}, {{}, 0xfffffffffffffffc, 0x6, 0x2, 0xe, 0x10000}, {{}, 0xfffffffffffffffa, 0x1c, 0x1, 0x1, 0x100000401}, {{}, 0xfffffffffffffffd, 0x28, 0x4, 0x4000100, 0xfffffffffffffffb}], 0xb19, 0x0) (async, rerun: 32) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x3) (async, rerun: 32) semop(r3, &(0x7f0000000000)=[{0x1, 0x6, 0x1800}], 0x1) (async) semop(r0, &(0x7f00000000c0)=[{0x0, 0xf, 0x1800}], 0x1) semget(0x0, 0x1, 0x281) (async) semctl$SETVAL(r3, 0x1, 0x8, 0x0) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x45}, 0x2, &(0x7f0000000240)="60daef0e", &(0x7f0000000000)=0x4, 0x0, 0x0) 279.046403ms ago: executing program 4 (id=30): r0 = socket(0x800000018, 0x1, 0x0) (async) r1 = getpid() (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) (async) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) (async) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000500)=0x2) ioctl$FIOASYNC(r3, 0x80047470, &(0x7f00000000c0)=0x400) (async) poll(&(0x7f0000000040)=[{r3, 0xe8}], 0x1, 0x0) (async) poll(&(0x7f00000001c0)=[{r3, 0x10}], 0x1, 0xf6) (async) setgid(0xffffffffffffffff) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x109) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) (async) fcntl$lock(r2, 0x8, &(0x7f00000000c0)={0x2, 0x0, 0x8, 0x3, r1}) shutdown(r0, 0x1) (async) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) (async) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x38, &(0x7f00000000c0)=ANY=[@ANYBLOB="6800000000000000ffff000007000000b2b453d999c0f107f12f1fb78bfecd00c9eca0b5bbb041b423c117fbaed9766e85e0d126f62bc45d55eafb9a71e188f1b4201d5e0ab56904cfe694c745bf4d15ad6bc064994338ac84e50c3098082620f6cc8eb8872be55d"], 0x68}, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x9}, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) poll(&(0x7f0000001940)=[{r5, 0x1}], 0x1, 0x9) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) fchmod(r0, 0x1) 178.365603ms ago: executing program 4 (id=31): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0xc, 0x7}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x2, 0xd1a, 0x1088}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x2400, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x2, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x8) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x8, 0x4, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8004}, {0x401, 0x200726, 0x2800, 0x7}, {0x4, 0x6, 0x10003, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x7, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x2e1, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$TIOCSETA(r1, 0xc0104419, &(0x7f00000000c0)={0x2, 0xffffffff, 0xff, 0x2000, "01d04b0a0000000000050001000000ffff00", 0x8, 0x6}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r3, &(0x7f0000000000), 0x10) execve(0x0, 0x0, 0x0) 178.055156ms ago: executing program 5 (id=32): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @random="c7a2e46f05fa", [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @empty, @remote={0xac, 0x14, 0x0}, {[@rr={0x7, 0x3, 0x9}, @generic={0x7, 0x2}]}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2e, 0x0, @multicast1}}}}}}) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x6, {0xfc, 0x447}}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000040)="000000008b48a6cdcaeb7af5db0fc871e646abccebc3a59c02943a", 0x1b) (async) ioctl$TIOCNXCL(r1, 0x2000740e) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) (async) r2 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64) ioctl$VNDIOCSET(r2, 0xc0285108, &(0x7f0000000040)={0x0, 0x29, 0x0}) (async, rerun: 64) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x14f) (async) mmap(&(0x7f00002d7000/0x13000)=nil, 0x13000, 0x1, 0x10, r0, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0) (rerun: 32) 175.84934ms ago: executing program 5 (id=33): semop(0x0, &(0x7f00000000c0)=[{0x0, 0x3}, {0x4, 0x1ff}], 0x27fd) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f00003fe000/0x1000)=nil, 0x1000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x80000000, 0xa, &(0x7f0000000180)="0000e2fff181203efe999a2e6be205630520a60b1a3e027ae901633328dd6bdcf7284896b02a3b", 0x27) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$unix(r0, 0x0, 0x0, 0x404, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x17, 0xe) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000000), 0x0) r3 = msgget$private(0x0, 0x20) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000040)=""/229) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x262, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0x9, 0x100}, {0x6, 0xe, 0x83, 0x400f}, {0xc000, 0xc, 0x1, 0x4}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="ec68258bb3ad477307e429000000fb7a8c653dd0496612451637425a14c314028e4965e3a142988e6eb4129210a293a21b27d2307ce72daa819b247c", 0x3c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="e15a79c7de1e2c6bf7635a54862902af05fa112d7df2cf2f55ee00000000454c098507911cdce2e8", &(0x7f0000000080)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r4, &(0x7f0000000080)='\b\x00'/14, 0xe) setreuid(0xee00, 0x0) setreuid(0xee00, 0x0) close(r1) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) setuid(r5) 175.62509ms ago: executing program 3 (id=34): setgid(0xffffffffffffffff) mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r2 = getuid() chown(&(0x7f0000000200)='./file0\x00', r2, r1) r3 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r5 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r5) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, r1, r3, r4, 0x10, 0x3}, 0x100000000, 0x81, r5, r6, 0x8, 0x7, 0x3ff, 0x81}) 175.429276ms ago: executing program 7 (id=35): setitimer(0x1, &(0x7f0000000080)={{0x0, 0x5}, {0x0, 0x80006}}, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000340)={0xc9, 0x1ecf1d5, 0xe14d, 0x4, "000f000000008471050200000000000000f70080"}) mknod(&(0x7f0000000200)='./file0\x00', 0x2008, 0x412dff) sysctl$kern(&(0x7f0000000040)={0x1, 0x2a}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) socketpair(0x6, 0x3, 0xa2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f00000000c0)=""/25, 0x19, 0x60, &(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8) close(r0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000180)=0xc) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x5}, {0x0, 0x80006}}, 0x0) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000340)={0xc9, 0x1ecf1d5, 0xe14d, 0x4, "000f000000008471050200000000000000f70080"}) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x2008, 0x412dff) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x2a}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) socket(0x18, 0x1, 0x0) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) (async) socketpair(0x6, 0x3, 0xa2, &(0x7f0000000000)) (async) recvfrom$unix(r2, &(0x7f00000000c0)=""/25, 0x19, 0x60, &(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8) (async) close(r0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) (async) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) 6.166493ms ago: executing program 7 (id=36): socket(0x18, 0x1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, 0x0) kqueue() mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0xd) poll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) setuid(0xee01) r2 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x400000002, 0x3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r4 = fcntl$getown(r3, 0x5) ktrace(0x0, 0x5, 0x128, r4) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0x5, 0x4f8, 0x6d}, {0x6, 0xf, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x8001, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x0, 0xf5, 0x2, 0x8}, {0x7, 0x1, 0x3a, 0x20000}, {0x3, 0x0, 0xfd, 0x400004}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) getpgid(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x80}], 0x2, 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCFLUSH(r5, 0x80047476, &(0x7f0000000000)=0xfffffffe) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "010208", 0x14, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xbd, 0x0, 0x1}}}}}}}) 5.653507ms ago: executing program 7 (id=37): syz_open_pts() setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x3, 0x181c, 0x5, 0x9}, 0x0, 0x0, 0x0) mkdir(0x0, 0x51) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) close(r1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) sysctl$net_inet_udp(&(0x7f00000004c0)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) pread(0xffffffffffffffff, &(0x7f0000000340)='i', 0x1, 0x9) sysctl$hw(&(0x7f0000000380)={0x6, 0x6}, 0x2, &(0x7f00000003c0)="1b4c0ac6", &(0x7f0000000400)=0x4, &(0x7f0000000300), 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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", 0x111) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1e, 0x3, 0x0) ioctl$FIONREAD(r2, 0x801169ac, &(0x7f00000001c0)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000af7000/0x4000)=nil, &(0x7f0000604000/0x2000)=nil}, {&(0x7f00004f8000/0x1000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil}, {&(0x7f0000987000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f00004f3000/0xa000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000690000/0x4000)=nil, &(0x7f0000ebf000/0x4000)=nil}, {&(0x7f0000b76000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000673000/0x2000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f000071b000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x5}, {&(0x7f0000dd0000/0x2000)=nil, &(0x7f00002e1000/0xc00000)=nil, 0x14b}, {&(0x7f00008c9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f00004f6000/0x2000)=nil, &(0x7f00009a6000/0x1000)=nil}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ead000/0x1000)=nil}], './file0\x00'}) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) pipe2(&(0x7f00000002c0), 0x10006) mknod(&(0x7f0000000080)='./file0\x00', 0xe0a0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0xa) 0s ago: executing program 5 (id=38): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000040)) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000080)=0x2) (async) syz_emit_ethernet(0x8e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6089958900582b00fe80000000000000000000c7000000aafe52dcabeedd74b79ed11d06332e8d803a0a"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 951 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *346439 19426 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff83338a99) at panic+0x1cf __assert(ffffffff8337a1de,ffffffff833d50c4,3b7,ffffffff833aed65) at __assert+0x29 refcnt_finalize(ffff8000ffffab48,ffffffff8332fd8b) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff80003814e000,ffff8000ffffab40) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80003a968028) at pppxclose+0xa0 spec_close(ffff80003c983c30) at spec_close+0x417 VOP_CLOSE(fffffd80693267b0,41,fffffd8007bfb888,ffff80003a968028) at VOP_CLOSE+0x129 vn_closefile(fffffd8074172f08,ffff80003a968028) at vn_closefile+0x11d fdrop(fffffd8074172f08,ffff80003a968028) at fdrop+0x121 closef(fffffd8074172f08,ffff80003a968028) at closef+0x190 syscall(ffff80003c983e80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbddee456670, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 951 ddb> trace db_enter() at db_enter+0x25 panic(ffffffff83338a99) at panic+0x1cf __assert(ffffffff8337a1de,ffffffff833d50c4,3b7,ffffffff833aed65) at __assert+0x29 refcnt_finalize(ffff8000ffffab48,ffffffff8332fd8b) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff80003814e000,ffff8000ffffab40) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80003a968028) at pppxclose+0xa0 spec_close(ffff80003c983c30) at spec_close+0x417 VOP_CLOSE(fffffd80693267b0,41,fffffd8007bfb888,ffff80003a968028) at VOP_CLOSE+0x129 vn_closefile(fffffd8074172f08,ffff80003a968028) at vn_closefile+0x11d fdrop(fffffd8074172f08,ffff80003a968028) at fdrop+0x121 closef(fffffd8074172f08,ffff80003a968028) at closef+0x190 syscall(ffff80003c983e80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbddee456670, count: -13 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c983a10 rbx 0 rdx 0xffff80000146a6c0 rcx 0 rax 0xffff80003a968028 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd6d291f8ea990ab4 r11 0xf37d3c1a37ad1408 r12 0 r13 0 r14 0 r15 0x1 rip 0xffffffff831335a5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c983a00 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=346439 pid=19426 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003a9687f0,0xffff80003a969cc0 process=0xffff80002cd2f6d8 user=0xffff80003c97e000, vmspace=0xfffffd806ba3d8b0 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 45958 269181 59053 0 2 0 syz-executor 12502 161256 47651 0 3 0x80 nanoslp syz-executor 12502 41865 47651 0 2 0x4000000 syz-executor 12502 418963 47651 0 3 0x4000080 fsleep syz-executor 19426 227991 23385 0 2 0 syz-executor *19426 346439 23385 0 7 0x4000000 syz-executor 76232 308340 10366 0 2 0xc90 syz-executor 76232 301299 10366 0 3 0x4000090 fifow syz-executor 76232 324971 10366 0 3 0x4000090 fsleep syz-executor 90468 373714 56064 -1 2 0xc90 syz-executor 90468 188796 56064 -1 3 0x4000090 msgwait syz-executor 90468 329547 56064 -1 3 0x4000090 fsleep syz-executor 57351 81213 19102 0 3 0x80 nanoslp syz-executor 57351 22409 19102 0 3 0x4000080 kqread syz-executor 57351 423193 19102 0 3 0x4000080 fsleep syz-executor 53186 434550 15363 0 3 0x80 nanoslp syz-executor 53186 355011 15363 0 3 0x4000080 kqsel syz-executor 53186 284967 15363 0 3 0x4000080 kqsel syz-executor 53186 43804 15363 0 3 0x4000080 fsleep syz-executor 23385 466370 46600 0 2 0xc82 syz-executor 59053 473812 46600 0 2 0xc82 syz-executor 47651 209625 46600 0 2 0xc82 syz-executor 52325 96858 46600 0 2 0x2 syz-executor 10366 321481 46600 0 2 0xc82 syz-executor 19102 222219 46600 0 2 0xc82 syz-executor 15363 299624 46600 0 2 0xc82 syz-executor 56064 513262 46600 0 3 0x82 nanoslp syz-executor 46600 186340 71563 0 3 0x82 kqread syz-executor 71563 238745 15895 0 3 0x10008a sigsusp ksh 15895 329115 4148 0 3 0x98 kqread sshd-session 4148 28718 43676 0 3 0x92 kqread sshd-session 904 296169 1 0 3 0x100083 ttyin getty 43676 118867 1 0 3 0x88 kqread sshd 91278 390084 70474 73 3 0x1100090 kqread syslogd 70474 162271 1 0 3 0x100082 sbwait syslogd 29625 499419 1 0 3 0x100080 kqread resolvd 14222 183106 49522 77 2 0x100012 dhcpleased 53384 149914 49522 77 3 0x100092 kqread dhcpleased 49522 410819 1 0 3 0x80 kqread dhcpleased 49975 491013 0 0 3 0x14200 bored smr 44404 26355 0 0 2 0x14200 zerothread 61686 125596 0 0 3 0x14200 aiodoned aiodoned 61378 259651 0 0 3 0x14200 syncer update 74740 211027 0 0 3 0x14200 cleaner cleaner 27109 273117 0 0 3 0x14200 reaper reaper 55655 125877 0 0 3 0x14200 pgdaemon pagedaemon 91114 504753 0 0 3 0x14200 bored viomb 11984 508944 0 0 3 0x40014200 acpi0 acpi0 81866 242523 0 0 3 0x14200 bored softnet7 828 502929 0 0 3 0x14200 bored softnet6 19219 39789 0 0 3 0x14200 bored softnet5 28963 320986 0 0 3 0x14200 bored softnet4 65463 302029 0 0 3 0x14200 bored softnet3 31092 228377 0 0 3 0x14200 bored softnet2 28660 58857 0 0 3 0x14200 bored softnet1 83391 5654 0 0 2 0x14200 softnet0 11134 354546 0 0 3 0x14200 smrbar systqmp 88910 123247 0 0 3 0x14200 bored systq 90492 322897 0 0 3 0x40014200 tmoslp softclock 37021 382381 0 0 3 0x40014200 idle0 1 252015 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10174 11041K 11154K 166960K 11285 0 pcb 17 12K 12K 166960K 21 0 rtable 213 6K 6K 166960K 291 0 pf 30 12K 13K 166960K 35 0 ifaddr 42 7K 8K 166960K 48 0 ifgroup 50 2K 2K 166960K 59 0 sysctl 3 1K 9K 166960K 7 0 counters 33 17K 18K 166960K 37 0 ioctlops 0 0K 2K 166960K 35 0 iov 0 0K 12K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1344 85K 85K 166960K 1375 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 2K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 169 0 sigio 0 0K 0K 166960K 1 0 proc 60 59K 124K 166960K 478 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 6 0 in_multi 99 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 346 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 226 159K 167K 166960K 3094 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 38 76K 96K 166960K 1191 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 5 0 NDP 11 0K 2K 166960K 29 0 temp 40 8631K 8706K 166960K 3818 0 kqueue 15 24K 25K 166960K 29 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 38 0 34 1 0 1 1 0 8 0 rtentry 136 103 0 9 4 0 4 4 0 8 0 unpcb 144 40 0 20 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 22 0 16 1 0 1 1 0 8 0 arp 88 12 0 2 1 0 1 1 0 8 0 inpcb 328 82 0 71 2 0 2 2 0 8 1 nd6 104 16 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 3 0 2 1 0 1 1 0 8 0 pppxif 1384 3 0 2 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 450 0 3 28 0 28 28 0 8 0 art_table 40 451 0 3 5 0 5 5 0 8 0 art_node 32 103 0 17 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1607 0 102 95 0 95 95 0 8 0 ffsino 256 1607 0 102 95 0 95 95 0 8 0 nchpl 144 1841 0 156 63 0 63 63 0 8 0 uvmvnodes 80 1699 0 0 35 0 35 35 0 8 0 vnodes 216 1699 0 0 95 0 95 95 0 8 0 namei 1024 5480 0 5480 2 0 2 2 0 8 2 kstatmem 264 26 0 4 2 0 2 2 0 8 0 scxspl 216 7547 0 7547 8 0 8 8 1 8 8 plimitpl 152 33 0 16 1 0 1 1 0 8 0 sigapl 424 450 0 401 7 0 7 7 0 8 1 knotepl 120 4362 0 4311 2 0 2 2 0 8 0 kqueuepl 184 36 0 19 1 0 1 1 0 8 0 pipepl 304 101 0 74 3 0 3 3 0 8 0 fdescpl 448 430 0 401 5 0 5 5 0 8 1 filepl 120 1450 0 1227 7 0 7 7 0 8 0 lockfpl 104 19 0 17 1 0 1 1 0 8 0 lockfspl 48 10 0 8 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 176 0 163 1 0 1 1 0 8 0 zombiepl 144 401 0 401 1 0 1 1 0 8 1 processpl 1168 450 0 401 5 0 5 5 0 8 1 procpl 664 519 0 458 6 0 6 6 0 8 0 sockpl 552 160 0 125 3 0 3 3 0 8 0 mcl64k 65536 4 0 4 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2478 0 2425 15 0 15 15 0 8 7 mcl2k 2048 215 0 200 3 0 3 3 0 8 1 mtagpl 96 6 0 4 1 0 1 1 0 8 0 mbufpl 256 4154 0 3958 13 0 13 13 0 8 0 bufpl 280 3955 0 117 275 0 275 275 0 8 0 anonpl 24 105551 0 102476 41 0 41 41 0 187 18 amapchunkpl 152 9054 0 8576 24 0 24 24 0 158 3 amappl16 200 2109 0 2088 14 0 14 14 0 8 12 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 103 0 93 1 0 1 1 0 8 0 amappl13 176 4 0 3 1 0 1 1 0 8 0 amappl12 168 1062 0 1034 3 0 3 3 0 8 1 amappl11 160 51 0 41 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 0 1 1 0 8 1 amappl9 144 256 0 256 1 0 1 1 0 8 1 amappl8 136 44 0 43 1 0 1 1 0 8 0 amappl7 128 96 0 86 1 0 1 1 0 8 0 amappl6 120 163 0 160 1 0 1 1 0 8 0 amappl5 112 112 0 106 1 0 1 1 0 8 0 amappl4 104 270 0 253 1 0 1 1 0 8 0 amappl3 96 1393 0 1286 3 0 3 3 0 8 0 amappl2 88 600 0 548 2 0 2 2 0 8 0 amappl1 80 7886 0 7342 13 0 13 13 0 8 1 amappl 88 2465 0 2303 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 430 0 401 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 430 0 401 1 0 1 1 0 8 0 vmmpekpl 168 4935 0 4903 2 0 2 2 0 8 0 vmmpepl 168 34235 0 32419 83 0 83 83 0 357 0 vmsppl 368 429 0 401 4 0 4 4 0 8 1 rwobjpl 40 14090 0 11553 27 0 27 27 0 8 0 pdppl 4096 866 0 802 96 30 66 82 0 8 2 pvpl 32 223778 0 215548 98 0 98 98 0 265 23 pmappl 216 429 0 401 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 372 0 30 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff83338a99) at panic+0x1cf __assert(ffffffff8337a1de,ffffffff833d50c4,3b7,ffffffff833aed65) at __assert+0x29 refcnt_finalize(ffff8000ffffab48,ffffffff8332fd8b) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff80003814e000,ffff8000ffffab40) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80003a968028) at pppxclose+0xa0 spec_close(ffff80003c983c30) at spec_close+0x417 VOP_CLOSE(fffffd80693267b0,41,fffffd8007bfb888,ffff80003a968028) at VOP_CLOSE+0x129 vn_closefile(fffffd8074172f08,ffff80003a968028) at vn_closefile+0x11d fdrop(fffffd8074172f08,ffff80003a968028) at fdrop+0x121 closef(fffffd8074172f08,ffff80003a968028) at closef+0x190 syscall(ffff80003c983e80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbddee456670, count: -13 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff83338a99) at panic+0x1cf __assert(ffffffff8337a1de,ffffffff833d50c4,3b7,ffffffff833aed65) at __assert+0x29 refcnt_finalize(ffff8000ffffab48,ffffffff8332fd8b) at refcnt_finalize+0x1c8 pppx_if_destroy(ffff80003814e000,ffff8000ffffab40) at pppx_if_destroy+0x3d pppxclose(205b92,41,2000,ffff80003a968028) at pppxclose+0xa0 spec_close(ffff80003c983c30) at spec_close+0x417 VOP_CLOSE(fffffd80693267b0,41,fffffd8007bfb888,ffff80003a968028) at VOP_CLOSE+0x129 vn_closefile(fffffd8074172f08,ffff80003a968028) at vn_closefile+0x11d fdrop(fffffd8074172f08,ffff80003a968028) at fdrop+0x121 closef(fffffd8074172f08,ffff80003a968028) at closef+0x190 syscall(ffff80003c983e80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbddee456670, count: -13