last executing test programs: 1.627959987s ago: executing program 3 (id=4): msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0x2, 0x8}}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71dc0", 0x95, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x11, 0x3, 0x0) poll(&(0x7f0000000100)=[{r0, 0x6dc5af257148d532}, {r1, 0x4}, {r1, 0x2}, {r1, 0x4}, {0xffffffffffffff9c, 0x20}, {r1, 0x40}], 0x6, 0x9b6c0000) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x3, 0xfe) setsockopt(r2, 0x8, 0x8000c, &(0x7f0000000180)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 1.626549176s ago: executing program 4 (id=5): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001200)={{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0}}, 0x38, 0x408) 1.588111717s ago: executing program 1 (id=2): ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) sysctl$vm_swapencrypt(&(0x7f0000000280)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000740)="b9f8dc5da5ebe4cae7f4aaf06337f4fdc9a44562a3c6d8beeeb73a6874de7a4c3ec213fdca411ebd2f373bc842cadaadf59e18572ac8a138b481944d931bdc917c76dedb03acf7bde6b353425eecd375f0b1b5f97ea91ad1569f207dc72a11e9ae2e00add634daf2ae82d618d6c806438a411f862afd6000baa36188dd8e76e88cea748a7ffd07fefe7a6b93a51b0e94cadeb8937425bd32a51448cb897210126198896ffd6209e6c97ffa6cbdfd33a5b05351182e69312f745216e1e5ab671cd0a77e184e2c4b353f04ffe74d94ce", 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x20, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r0, 0x2}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) ioctl$FIONREAD(r2, 0x4004667f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r3, 0xffffffffffffffff, 0x0) 1.563593759s ago: executing program 2 (id=3): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf795b) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000040)='#!', 0x2}, {&(0x7f00000003c0)="aca785eb2b98dcdba65b5c20cbe60d0443e523c030b4da82523306719253e5ad41e1e60a13", 0x25}], 0x2) r1 = getppid() fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xffffffffffffffff, r1}) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/135, 0x87}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000000880)=""/181, 0xb5}, {&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000780)=""/58, 0x3a}], 0x8) setsid() fcntl$setown(r2, 0x6, 0x0) 1.540743607s ago: executing program 3 (id=9): connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r0 = open(&(0x7f0000000480)='./file0\x00', 0x700, 0xd5) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) 1.53033832s ago: executing program 4 (id=10): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt(r0, 0x1, 0x5, &(0x7f0000000000)="706184006dfbb9a24431a465e0446ede8003c704cf04300b025df680ca9a88235c9edc4ccbd51c2d0b1a2ae97d23a650c4aff97ab32a7bcf8e3ad0cc18029f82b930a39ddf826dea65327df777bd6afd4de27250221b1b704b9a202ea5e7ed49dcfa33565c7493cc51310368d531a8bbd4f066d3593309c84b856d179bb8e19e3d20ae44e63ac30ba76aa3de614bc29a7a1b2a6579", 0x95) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0x18, 0x6ba2929cc3e5e291, 0x52) r2 = accept4(r1, &(0x7f0000000140)=@in, &(0x7f0000000180)=0x10, 0x4000) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0xffff, 0x100, &(0x7f0000000240)=0x3, 0x4) accept$inet6(r2, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$DIOCRCLRTABLES(r4, 0xc450443c, &(0x7f0000000340)={{'./file0\x00', './file0\x00', 0x4, 0x80}, 0x0, 0x0, 0x0, 0x6, 0x2, 0x7, 0x6, 0x0, 0x3}) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000007c0), 0x8, 0x0) socketpair(0x10, 0x3, 0x18, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000840)=[{r5, 0x40}, {r4, 0x2}, {r6, 0x1}, {r0, 0x100}, {r1, 0x80}, {0xffffffffffffff9c, 0x40}, {r0, 0x1}, {r0, 0x100}, {r0, 0x8}], 0x9, &(0x7f00000008c0)={0x7, 0x10001}, 0x0) ioctl$DIOCCLRSTATUS(r2, 0xc0284416, &(0x7f0000000940)={'./file0\x00', &(0x7f0000000900)=""/26, 0x7fff, 0xffff, 0x601, 0xc18}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000980), 0x200, 0x0) read(r6, &(0x7f00000009c0)=""/250, 0xfa) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x20000, 0x0) ioctl$BIOCSETWF(r8, 0x80104277, &(0x7f0000000b40)={0x0, &(0x7f0000000b00)}) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000bc0)={0x4, &(0x7f0000000b80)=[{0x5, 0x7, 0xf, 0x8}, {0x4, 0x2, 0x0, 0x1}, {0xe, 0x6, 0x8, 0x9}, {0x9, 0xa, 0x5, 0x5}]}) r9 = openat$klog(0xffffffffffffff9c, &(0x7f0000000c00), 0x100, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$LIOCSFD(r9, 0x80046c7f, &(0x7f0000000c40)=r10) getsockname$unix(r10, &(0x7f0000000c80)=@file={0x0, 0x0, ""/504}, &(0x7f0000000e80)=0x1fa) r11 = syz_open_pts() ioctl$TIOCSCTTY(r11, 0x20007461) sendto$unix(r7, &(0x7f0000000ec0)="0f14cbdeda06bf338b5b9c71613b13dcc76a55a9d6226937710a4b0b25ac74030996f11f6015fc5f9fef41764e6b5bc8ac71fd29ba4f4c7303d7fbda328bb2c7de3b8cba5dc4c0e6250fe0a5835141be04fd79af7b28c7421a59ecae9078f545d3b8d23e75b5eff2ca312d1022ec37475ea98108e3a38a28912d254b09cbb6ff7a7c2de3529c4ab7ba01ec9b4f71e5c429c7c7e8037d91540e2129a0a059879e748138610abb23f654236c7576980f16b7b2723cb0b5ad1347ba8f7413f9a7935ec9b28d4d7b12b1a59034a0c440153126f358e4", 0xd4, 0x2, &(0x7f0000000fc0)=@abs={0x7, 0x1, 0x0, 0x3}, 0x8) ioctl$LIOCSFD(r9, 0x80046c7f, &(0x7f0000001000)=r7) fcntl$getflags(r10, 0x1) setuid(r3) 1.505926105s ago: executing program 6 (id=7): ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setegid(r0) sysctl$vm_swapencrypt(&(0x7f0000000280)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000740)="b9f8dc5da5ebe4cae7f4aaf06337f4fdc9a44562a3c6d8beeeb73a6874de7a4c3ec213fdca411ebd2f373bc842cadaadf59e18572ac8a138b481944d931bdc917c76dedb03acf7bde6b353425eecd375f0b1b5f97ea91ad1569f207dc72a11e9ae2e00add634daf2ae82d618d6c806438a411f862afd6000baa36188dd8e76e88cea748a7ffd07fefe7a6b93a51b0e94cadeb8937425bd32a51448cb897210126198896ffd6209e6c97ffa6cbdfd33a5b05351182e69312f745216e1e5ab671cd0a77e184e2c4b353f04ffe74d94ce", 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4012, 0xffffffffffffffff, 0x53) (async) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x20, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) (async) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) (async) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async) ioctl$FIOASYNC(r1, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r1, 0x2000747b) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) read(r1, &(0x7f0000000240)=""/243, 0xf3) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) ioctl$FIONREAD(r2, 0x4004667f, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7dfbf, 0x0) (async) kill(0x0, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r3, 0xffffffffffffffff, 0x0) 408.526515ms ago: executing program 6 (id=11): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x24, 0x2, 0x0) shutdown(r0, 0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xde3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fd, 0x800002, 0x7}, {0x1, 0x0, 0x0, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x4, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x5, 0x6d}, {0x2000a, 0x4, 0xfdf1, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x10000}, {0xa44f, 0xfff6, 0xa38c000, 0xe1}, {0x80000cb, 0x40, 0x8, 0x4}, {0x2000df, 0x5, 0x15, 0x400}, {0x10048, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x4}, {0x4, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xf, 0x0, 0x1040807, 0x50001, 0x0, 0x1, 0x0, 0x8, 0xf5fffffffffffff9}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0x9f20, "3075e8a88b5e4007851daccbd12c9a00", 0xe8d1}, {0x1c, 0x18, 0x3, 0xd, "52e37863a1645141756369d800", 0x7}, 0xbfb, [0x9, 0x3, 0x7, 0x2, 0x4, 0x6, 0x401, 0x8000]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) sysctl$ddb(&(0x7f0000000340)={0x9, 0x6}, 0x2, &(0x7f0000000400)="4d7146f3", &(0x7f0000001400)=0x4, &(0x7f0000001440), 0x0) 359.07676ms ago: executing program 5 (id=6): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r1 = getpid() ktrace(0x0, 0x0, 0x40000928, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000001200)={{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0}}, 0x38, 0x408) 332.390093ms ago: executing program 6 (id=12): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYRES64]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x0, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x6, 0x7}, 0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x800009}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {0x0, 0x4}, {0x0, 0x7fffffff}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x3}, {0x2, 0x3}, {0x3}, {0x1, 0x9}, {}, {}, {0x1, 0x57fd}]}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="bf30e56f81ea65f2f48172e98e56de47", 0x10}], 0x1) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f0000000400)=""/4096, 0x1000) r3 = socket$inet(0x18, 0x3, 0x102) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x2, 0x1, '@\x00', 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000140)="67880200ff003a9affc6692902f0f5215ddd612d008e59ad0400"/40, 0x28}], 0x1, 0x0}, 0x2) 331.096542ms ago: executing program 5 (id=13): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x104, 0x4, 0xffffff35, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x4}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x10005, 0xbffffff5, 0x7, 0x6d}, {0x0, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000c8, 0x0, 0xc, 0x8}, {0x2000df, 0x9, 0x15, 0x400}, {0x10008, 0xcf3881, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x80000001}, {0x4, 0xd655, 0x3, 0x6}]}) sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, 0x0) open$dir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) setitimer(0x0, &(0x7f0000000140)={{0x4, 0x100800000000009}, {0x1ff, 0x3}}, 0x0) sysctl$kern(&(0x7f0000000340)={0x1, 0x37}, 0x2, 0x0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) open(0x0, 0x18289, 0xa8) symlink(0x0, 0x0) open(0x0, 0x2, 0x0) socket(0x18, 0x2, 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0xd, 0x0, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r3 = socket(0x2, 0x2, 0x0) getsockopt$sock_int(r3, 0xffff, 0x1004, 0x0, 0x0) 316.02183ms ago: executing program 7 (id=8): sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f0000000000)="df00edff", 0x4) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100)) sysctl$net_inet_carp(&(0x7f0000000080)={0x4, 0x2, 0x70, 0x3}, 0x4, &(0x7f0000000140)="778fe2d699f6394a7745efb918c25a40f705e4582595fbdd4eeaafbd73731101592043ecb8f846adccb8b00136f01920157e567c6d313833d171c11c865f4d2b6e1b5d3b23662592cf3cc0ff2b9a44b04edad12d49ab4c94c83d37d08e5813f17653c85478a84a91d2f889fd566efe984334b60046f5e2b21c2b4f46c1fa74eaa94efb2f90156b8c4b0029e8e52673c099143decbf2c8dea09c480e5f1bdd88ac704c40016a97207b5b51ec3af06c0186f790bc58b6b861a8186a2600eb039a1010182c6113b0a3f3652e493035facb985dcaf6236ed201dbedfbe7a05e74016abab07786758200371", &(0x7f0000000240)=0xe9, &(0x7f0000000280)="bf3f450060621fa6b52edd1220f2ac004d0b8e2d3d33667709cd3e1f333af104ef95e1d1a45cde2abff98fdd999cbb7b45faac8841f8d04c0ad07ba8bcf33c78bb8babf2233f2bd3ccbc78768bf5679725d3e74769ca5464b559bd33f4d01605012cab09ef1469427a36591fdcd8def4acb97ade597893deb94eb8bdccb9fdce7382bf4c863767aaa854b70d1a08c056ef3415c6df41690988d60e902e2f8e20448a90bbd31d0b102bd8e0d36f6fa7", 0xaf) 246.797015ms ago: executing program 7 (id=14): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc0406938, &(0x7f00000001c0)) r1 = socket(0x2, 0x2, 0x2) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000000)={0x7, 0xaeb2}, 0xd) syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60db83440031110000000000000000000000ffffe0000001ffe3"]) 245.627724ms ago: executing program 0 (id=1): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1f0) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000001200)={{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0}}, 0x38, 0x408) 242.443299ms ago: executing program 7 (id=15): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0xf9, 0x1, 0x7}, {0x2, 0x7, 0x3e, 0xfffffffc}, {0x4d, 0x0, 0x7e, 0x1}, {0x3246, 0x80, 0xe}, {0x0, 0x0, 0x6, 0x50a}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x1, 0x6, 0x81, 0x7}, {0x3c, 0x4, 0x8, 0x264}, {0x6, 0x9, 0x2, 0x801}]}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 239.699866ms ago: executing program 3 (id=16): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) socket(0x6, 0x1, 0x5) (async) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@in, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000140)=""/128, 0x80}], 0x2, &(0x7f0000000200)=""/150, 0x96}, 0x2040) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='.\x00') mkdir(&(0x7f0000000380)='./file0\x00', 0x1a0) (async) ioctl$DIOCADDQUEUE(r1, 0xc148445d, &(0x7f00000003c0)={0x6, 0x2, {'\x00', './file0/file0\x00', './file0\x00', './file0\x00', {{0x9, 0x200}, {0x0, 0x8}, 0x3ff}, {{0xf9e, 0xca}, {0x9}, 0x4}, {{0x6}, {0x9, 0x2}, 0x6}, {0x7, 0x3ff, 0x2, 0x3}, 0x0, 0x4, 0x0, 0x5, 0x6800}}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000540)={'tap', 0x0}) (async) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000580)=0x9) (async) sysctl$kern(&(0x7f00000005c0)={0x1, 0x11}, 0x2, &(0x7f0000000600)="8a96e0e350fdae9925707f56a8e36d7008a70387e483089702baa21d11", &(0x7f0000000640)=0x1d, &(0x7f0000000680)="5b4994b941fcefe3d05c615c596c17ea4d7181b6bd", 0x15) (async) ioctl$DIOCGETQUEUES(r1, 0xc148445e, &(0x7f00000006c0)={0x2, 0xce31, {'\x00', './file0\x00', './file0/file0\x00', './file0/file1\x00', {{0x8, 0x80000001}, {0x0, 0x2}, 0x8}, {{0x6, 0x6}, {0x5, 0x2}, 0x7f}, {{0xffffffff80000000, 0x4}, {0x7, 0x9}, 0xffffffff}, {0x9, 0x8, 0x2, 0x7ff}, 0x0, 0x1, 0x2, 0x6, 0x7}}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000840), 0x20, 0x0) (async) ktrace(&(0x7f0000000880)='./file0/file1\x00', 0x1, 0x2102, 0x0) r2 = open(&(0x7f00000008c0)='./file0/file0\x00', 0x1, 0x2) (async) pledge(&(0x7f0000000900)='/dev/tty\x00', &(0x7f0000000940)='\x00') (async) syz_extract_tcp_res(&(0x7f0000000980)={0x41424344}, 0x5, 0x0) (async) syz_extract_tcp_res(&(0x7f00000009c0)={0x41424344}, 0x0, 0x2) syz_emit_ethernet(0xda, &(0x7f0000000a00)={@random="12c8033e38e2", @broadcast, [{[{0x88a8, 0x5, 0x0, 0x1}], {0x8100, 0x7, 0x1, 0x4}}], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0xc4, 0x66, 0x9, 0xd, 0x67, 0x0, @rand_addr=0x6, @multicast2, {[@ssrr={0x89, 0xf, 0x5, [@remote={0xac, 0x14, 0x0}, @empty, @multicast1]}]}}, @tcp={{0x0, 0x3, r3, r4, 0x1, 0x0, 0x6, 0x1, 0x4, 0x0, 0xd0, {[@eol, @nop]}}, {"c42019583ed75728ce4116a0a848cfbb1c2f90514615a7da77b18c9cb7cabaef7de61f197e0e7ee05139cef09e4abc0b2a0370564ed81eaeaa2e12f64d83c2d72a7e4ac42e5ab8712216b169754b110981fb7a92227c71acac1e89864a5210cae07031bb36207dabdf6ad190c27fb0e85f0bc2b540f8492c4ab39937ceacd720698ad9348849107f"}}}}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000000b00), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000b40), 0x1, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000b80)={@broadcast, @empty, [{[], {0x8100, 0x7, 0x1, 0x1}}], {@ipv4={0x800, {{0xd, 0x4, 0x3, 0x4, 0x34, 0x68, 0xd409, 0x5, 0x4, 0x0, @local={0xac, 0x14, 0x0}, @multicast2, {[@end, @ra={0x94, 0x4, 0xfff}, @end, @lsrr={0x83, 0x7, 0x8, [@multicast1]}, @ra={0x94, 0x4, 0x2}, @rr={0x7, 0xf, 0x8, [@empty, @rand_addr=0xfffffff7, @multicast2]}]}}}}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000000c00), 0x1, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000c40)=@file={0x5, 0x0, './file0/file1\x00'}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="a2810fe1d36b7d270e2d13850c273ec7fa7b03203e", 0x15}], 0x1}, 0x409) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000e40)={0x1, &(0x7f0000000e00)=[{0xb5, 0x4, 0xc, 0x2}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000e80)={'tap', 0x0}) (async) connect$inet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x10, 0x2, 0x3, 0x5}, 0x10) (async) r5 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x3000) shmdt(r5) (async) ioctl$DIOCGETLIMIT(r1, 0xc0084427, &(0x7f0000000f00)={0x3, 0xffffffff}) 231.246214ms ago: executing program 0 (id=17): sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) 229.600796ms ago: executing program 7 (id=18): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000007c0)="7f454c35c5c41a49b70cb7a21de87373791810aaa95d576a0ac7fca22716a22987b881794ffa08bb11bafcdc202a294097ae6826050800eb0683d43b24ff4c5d", 0x40}], 0x1) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async, rerun: 64) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x637d}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f0000209000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdf7fffffffff7fa}, {&(0x7f00004c0000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000056a000/0x2000)=nil, &(0x7f0000688000/0x2000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000242000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000181000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000331000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x5}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000108000/0x3000)=nil, 0x234}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff7}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x4}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8954, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000010c0)='\x00\x00\x00\x00', 0x4) pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0xba7) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000000)="d50190c19bd104cb440f517b0c31e627635df928c84d8137c83b3f3e84b5", 0x1e}], 0x1) (async, rerun: 64) ioctl$FIONREAD(r2, 0xc028698d, &(0x7f0000000000)) (rerun: 64) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0x18, 0x2, 0x0) (async, rerun: 64) r4 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (rerun: 64) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) close(0x3) dup2(r6, r5) write(r4, &(0x7f0000000500)="09203d690900db0000ff4278ad535c2a4156420000000056cb70a57a0a", 0x1d) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) (async, rerun: 32) semget$private(0x0, 0x0, 0x46) (rerun: 32) bind$inet6(r3, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0x7, "e506020031bb207f0000097c596000", 0x7}, 0x1c) (async, rerun: 64) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x1c, 0x18, 0x1, 0xcce, "1004006f050000595edc9ac6805400", 0x4}, 0x1c) (rerun: 64) 223.907481ms ago: executing program 0 (id=19): sysctl$hw(&(0x7f0000000080)={0x6, 0x1c}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000200)="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", 0x1b1, 0x0, 0x0, 0xfffffffffffffd99) 185.681526ms ago: executing program 7 (id=20): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x210, 0x8, 0x3}, 0x0, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000100), &(0x7f0000000140)=0x4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) r3 = socket(0x2, 0x4, 0xfd) r4 = socket(0x11, 0x3, 0x0) recvmsg(r4, &(0x7f0000001600)={&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x0, &(0x7f0000001500)=""/194, 0xc2}, 0x1002) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r5) 185.330542ms ago: executing program 5 (id=21): sysctl$hw(&(0x7f0000000000)={0x7, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = kqueue1(0x10004) kevent(r0, &(0x7f0000000000), 0x9, &(0x7f00000000c0), 0xb, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2d}, 0x2, 0x0, 0x0, &(0x7f0000000240), 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r1, 0x9, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x300000023}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) 184.853121ms ago: executing program 0 (id=22): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd20000", 0x88) r1 = accept$unix(r0, 0x0, &(0x7f0000000040)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x3b, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) sendmsg$unix(r1, &(0x7f00000019c0)={&(0x7f0000000140)=@abs={0x0, 0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='\x00'/12], 0x10, 0x800}, 0x4) socket(0x18, 0x2, 0x0) (async) setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd20000", 0x88) (async) accept$unix(r0, 0x0, &(0x7f0000000040)) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r2, 0x1000000029, 0x3b, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) (async) sendmsg$unix(r1, &(0x7f00000019c0)={&(0x7f0000000140)=@abs={0x0, 0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='\x00'/12], 0x10, 0x800}, 0x4) (async) 182.36305ms ago: executing program 6 (id=23): r0 = socket(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000080)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x20000000000000f1, &(0x7f0000000340)=[{0x64, 0x14, 0x1, 0x6}, {0xe, 0x9e, 0x4}, {0x8, 0x0, 0x49, 0xb1}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x1}) syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @empty, [], {@generic={0x8848}}}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) write(r3, &(0x7f0000000500)="d5d32207", 0x4) mkdir(0x0, 0x119) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, &(0x7f0000002480)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r4 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x1, 0xff, &(0x7f0000002480)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$DIOCXBEGIN(r5, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0}) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r6, 0xc0104451, &(0x7f0000000300)={0x5, 0x408, &(0x7f00000028c0)=[{0x0, './file3\x00', 0xe67}, {0x1, './file2\x00', 0x80200000}, {0x1, './file3\x00', 0xff}, {0x0, './bus\x00', 0x4}, {0x4da1829961415a5, './file3\x00'}]}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000100)={&(0x7f00000001c0), 0x200000000000007f}) 159.718945ms ago: executing program 5 (id=24): syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b5003e3af9fe8000000000000000000000000000bbfe8000000000020000000000000000aa01029078000002000000000000002cfe00"/80]) 159.3738ms ago: executing program 0 (id=25): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="673bb5b8cc0c16ed08db75817fc8add3cec4ec48a2e92e98e17c03ce4801ef1d47e6abbbdabb26a5a12af0f460032b34b7", 0x31}], 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x800004) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000000)=0xa1fe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) kevent(0xffffffffffffffff, &(0x7f00000002c0)=[{{}, 0xffffffffffffffff, 0x8, 0x80, 0x1, 0x5}, {{r1}, 0xfffffffffffffffa, 0x30, 0x2, 0x5, 0x1f5420000000}], 0x100, 0x0, 0x6, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) sendmmsg(r1, &(0x7f0000000200)={{&(0x7f0000000140)=@un=@file={0x6d, 0x1, './file1\x00'}, 0x1c, 0x0, 0x0, 0x0, 0x59}}, 0x38, 0x8) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x84, 0xf1, 0x24, 0x9}, {0x24, 0x6d, 0xfb, 0x4}, {0x6, 0x2c, 0xc}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x84, 0xf1, 0x24, 0x9}, {0x24, 0x6d, 0xfb, 0x4}, {0x6, 0x2c, 0xc}]}) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x0, 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000003c0)="a1504313e268ce681991f7cd1861a6fa8ffbda0a6632ed477ecc6af54fbbe1ab454b97c6d878986f99325218a1105e0127e00871efee8412433b31be0b5ea333a93803f7d5324221a13a9cc4f7bdd5a2cb4b6089d4823ebcacae92c5f106691aa78dab44355254a9ea49d0098c149f92e5200d742f9b30b60fd9f5d7cd1e954233e094c3659cab4a312caedb64499ea275784795aea5a0d05f9e67f61f45325b2d6b282fb5018cd5ac41c36cd30128f18d3474e9114825f1cfed33125b2b20c0309ff2d5d485ea572c5e14795cfc90983927a2329cc820c5e2fc9c4f", 0xdc}, {&(0x7f00000004c0)="52bbf01ae11ea9a41bb1b22e63c5f0430c82bab4717ba0fed35961bc2b8ab5016de4527029de47e6509c3eea8d4fd50c718d716d50626c112b41cdc9c99249952acb5917fb0eaa16e0c1e934a608951e5971e0d985ea4274d931112894b2e5ad3b638511f4bca6af63911740a2d3c510f0", 0x71}], 0x2, 0xd) (async) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000003c0)="a1504313e268ce681991f7cd1861a6fa8ffbda0a6632ed477ecc6af54fbbe1ab454b97c6d878986f99325218a1105e0127e00871efee8412433b31be0b5ea333a93803f7d5324221a13a9cc4f7bdd5a2cb4b6089d4823ebcacae92c5f106691aa78dab44355254a9ea49d0098c149f92e5200d742f9b30b60fd9f5d7cd1e954233e094c3659cab4a312caedb64499ea275784795aea5a0d05f9e67f61f45325b2d6b282fb5018cd5ac41c36cd30128f18d3474e9114825f1cfed33125b2b20c0309ff2d5d485ea572c5e14795cfc90983927a2329cc820c5e2fc9c4f", 0xdc}, {&(0x7f00000004c0)="52bbf01ae11ea9a41bb1b22e63c5f0430c82bab4717ba0fed35961bc2b8ab5016de4527029de47e6509c3eea8d4fd50c718d716d50626c112b41cdc9c99249952acb5917fb0eaa16e0c1e934a608951e5971e0d985ea4274d931112894b2e5ad3b638511f4bca6af63911740a2d3c510f0", 0x71}], 0x2, 0xd) socket(0x18, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x66, 0x8, &(0x7f0000000040)="03080081", 0x4) (async) setsockopt(0xffffffffffffffff, 0x66, 0x8, &(0x7f0000000040)="03080081", 0x4) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) (async) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r3, 0x82907003, 0x0) select(0x40, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x8}, &(0x7f0000000180)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x100, 0x0) (async) openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x100, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000200000003e0004", 0xd, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chmod(&(0x7f0000000040)='.\x00', 0x35e) 158.224717ms ago: executing program 2 (id=26): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x100, &(0x7f0000000080)=[{{}, 0xffffffffffffffff, 0x13, 0x2, 0x0, 0x6}, {{}, 0xffffffffffffffff, 0x62}, {{r0}, 0xfffffffffffffffa, 0x8a, 0x80000000, 0x8000000000000001, 0x4}, {{r0}, 0xfffffffffffffffc, 0x4, 0x1, 0x4, 0x6}], 0x6, 0x0) 119.534237ms ago: executing program 3 (id=27): select(0x40, &(0x7f0000000180)={0x0, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x3, 0x210, 0x200000008, 0x400007}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9e) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt(r2, 0x0, 0x7, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000040)=0x1) msgsnd(0xffffffffffffffff, &(0x7f0000000700)={0x1, "7a918a6860aeb3672269449dda3ba6f581fc931105c3aa7bf2261b075c7ab5df65c288c76dae0bafa4a9fb5ee3e9fec0424f12322449096b369925f84d6c7231843a4122a1d39e37ea83b517b659138e4e19c07b30ca9e122ffa866bfada40a7f989408ae66bbe31301a9fd212a7dd960463741a63a49ae986a948ed8a081feca4cf433583827773eead098ab2647fd5f9516c7b42d1370103ca3bdc32c9c3c81143784614de053a3a9e3e4dc39c1957de1e2188c21fe641171548f30bf4b0af458c2737f63e0000000000003c00000000007fe7682e8560160d2939a89ba61a5b51abbdadf2fa8bd777ee1086b95df3da0e5e80bf31b28ba4bb4a808d4652d5dcfa936d26131a464b7ee8bb859f4114ebdf35dbee3ab95a82e8e73278fd1057d89cb2ed0f957f7c4ac35ec6554a9ae8598a9a6805027e8cab9db08c6efb7045f3caea486bcbd02567e0fe6a2acbfdadab57dcb93f36ebd907b56983f6ec04044547d2a0e72ac9bc02bbde56b19c4e63c9d35e1a816b71e71e467ac8e9ce2ae9ff6f399ec8550b07bcfee389e536208a8af2707cccd52011afea1384a23b9c8e1d88256f4334b1a4df27ce9ca7d6ac2b9703effaa12213bc48725a7d6609a623c89aab90543e1546c4f2309b3c8fbcc405555db340c40e3523ba78d7a5b0cc004f0a13d431df23d852a482dced16cb836ab774fd9a647cc379801b77fae53ece8ae86205129cc2fda2e68e613801fc3f1be4eb"}, 0x21b, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x4}, 0x62, 0x0, 0x0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) sysctl$ddb(&(0x7f0000000240)={0x9, 0x5}, 0x2, &(0x7f0000000940)="be893c866974738562b340b7d294b0c42a9c7d8a4fb1e5207ea0e1a4b275a3297524733ffa200986873b225bd1f631c2cd25eeff0cd42166bea6bbf8d89ef84c66d141f8eaf1db5acc1c1f2b2184500947db0ec7951cb301d149939043b2ef4936c72415f955ca5b5966a699d9a4897db4a3667c3064086036777246e63ac848f0dc47487b22d819516fe09164c703c586b1d4b7ab8c53683d0c32bd3d23268988f7da06a5f309348c073bd933d1b4b22144a80e7b5e42176520c7f6365c66c8eadcda86aa5520968b592adc941fb305964ed519d59fe8f25ff01a29436b5cd1df3b022dfe47b26400"/260, &(0x7f0000000380)=0x104, &(0x7f00000003c0)="9be9b86c10bec6f3b71ec580953d771f3299783bbda3080a5a6026b300c0f526ef74790af302ac779f7d28df4aac832718f354b363ad293e91302170136f69ef5e8765ebdaacee1c20c5fcc22f70787ccbb84c0a0c40c65c247cce8afd4fab191498d11ca417cfd7fd81d2219e6d11af6ce2178825e8ef900d592c801a3336375eb3c1aad56315658a23bedaa9083e95d7f9fd392872e562863612b4ed7f5e13d4a400f5a3cc004e87d0b3d1643b276f86ae76e32ba3d226aeefb4ef321b543cf48ae4a5fc37325b2cb0b7fad034ee46", 0xd0) r3 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d7710200"/16, 0x10}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2002, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) sysctl$ddb(&(0x7f00000004c0)={0x9, 0x9}, 0x2, &(0x7f0000000500)="adf7eed77f7984324f3504105ec6b953", &(0x7f0000000540)=0x10, &(0x7f0000000580)="5ec84c5a4006b4112fa4b7654578dc83306a0702f57b04a3f7ff64a804cba5ccc9dc44636248cfa435900400f4ec1dccfef4ff36242482554565828ba9582b02103c0895e93bd8d87f251f65916ec3b81f0511d560f0e39f37454be977e581b67ddd664f7a515c0119244e6f6c3707ccbc95912eb3f30adb6c38a8878b3283880c577e585786aa9231974c3aea9cfe1dc73706c6ca944283fd56f63ea675317ebc473111857137815581a8cef63da2ab1a63f7cf2dde3a252f5f1bbfc056fdc67f5ac2c0ec2b6f0c20bd184049ef05a36178b47536636960defe26f9406936495540ff63decc34d0", 0xe8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x52}, 0x2, &(0x7f0000000100)="cf1453784424d2473f1e2fc03a0861fce25899c81635c549e6086a71da6ecb1661c609233e4fa2ae1e0c020282d5f025afc4d1fb5004b9f2b0dde0c2012217394972dc2888c0e05ae52a1680d115db03c52986de16f7", &(0x7f0000000180)=0x56, &(0x7f00000001c0)="2a26d3b83524735379e8cca72e33cfd67dbdd599a35c41f8f2842d8203d597fe08ff4e3816f0b6ef05f7563f19a604b5cd31e61e897935256a70223baa8ec212446f3ccffd87217f503fa8806753c96658234d7f350ba86282a4e2444f03702fd31b5a303fa9fd3437da9e71fcc4385d36", 0x71) ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000080)={0x1, 0x1000006, 0x8, 0x7ff, "9de6c8bb15705031b24d0d80b0a3e4a61778abed", 0x5, 0x6}) 119.340735ms ago: executing program 5 (id=28): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r1 = getpid() ktrace(0x0, 0x0, 0x40000928, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000001200)={{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0}}, 0x38, 0x408) 119.15157ms ago: executing program 2 (id=29): mknod(&(0x7f0000000240)='./bus\x00', 0x6000, 0x1000402) (async) mknod(&(0x7f0000000240)='./bus\x00', 0x6000, 0x1000402) r0 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r0, 0x0, 0x23, &(0x7f0000000340)="15337ac0", 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x7, 0x1, 0xffffffffffffff9c}) ioctl$TIOCSTART(r1, 0x2000746e) (async) ioctl$TIOCSTART(r1, 0x2000746e) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socket$inet6(0x18, 0x3, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000010c0)='\x00\x00\x00\x00', 0x4) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in={0x10, 0x2, 0x1, 0x80}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x58}}, 0x38, 0x400) (async) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in={0x10, 0x2, 0x1, 0x80}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x58}}, 0x38, 0x400) 116.452403ms ago: executing program 5 (id=30): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1, 0x9, 0xf7, 0x2}, {0x3, 0x5, 0x1, 0xa}, {0x9a1e, 0x2, 0xf4, 0x40017fe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x10ac0, 0x99) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r3, 0x0) flock(r3, 0x4) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) flock(0xffffffffffffff9c, 0x4) link(&(0x7f00000005c0)='./bus\x00', 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) minherit(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) unlink(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r2, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 114.496337ms ago: executing program 6 (id=31): setuid(0xee01) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000300)={&(0x7f0000000040)=[{0x101, 0x3}], 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x5266, 0x100000003}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x26, 0xe, &(0x7f0000000000)="02000000", 0x4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r2 = getpid() ktrace(&(0x7f0000000380)='./file0\x00', 0x4, 0x100, r2) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ecbd, r2) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f00000002c0)=0x7, 0x0) read$audio(0xffffffffffffff9c, &(0x7f0000000080)=""/193, 0xc1) sysctl$net_inet_esp(&(0x7f0000000180)={0x4, 0x2, 0x32, 0x4}, 0x4, &(0x7f00000001c0)="ea061ce053b8bafa38367ab6eedefa3722027c5bcb93ca2ca5ae88a61a80ee0b21d37908b0b11440317a19043f7551bedcb5510452ebedeedb08d9a95f2db1327f39628ec41ecc9f27823059c99d03a42e7af876565a4d81f5265f76129241800a4899988d1b04f6061cf945f57d56d44c17ece5832077351bd3170d5da0c56727f5def85a30af5f9e49a7db81ef9a67827b12e185016145c562448e589b13fc260a34775f7a0cff4d397bf027d3f50e7347242ef8fc3b792d85712123dfd4dbef5706345b5242047c2e6a723d3a81e5b3a4d0f25e793f4c73fd814c0b502ba5ec6e8ca19011e0b9c30ebe1154e6aafaae", &(0x7f00000002c0)=0xf1, &(0x7f0000000300)="1802783305a2707571aac0f4d0fc3ef9a5e2f5c49ebee2232e15b94a74e5d539e8bc25cb066ccffce6d9481419532f1318e1e0c662bed25ccc9e6792cb20c407e6fc7a727386709cc116458832bfd5eefdced59eae9e97740dac460beb8a6b88a63deb8675b75726914c52618e3340f57c8ecd10ca605f91ad1eaff2661b06373a52e0271308216492e1db28d1273fd8750f012cd8e9cfe401a18d93cd48b1a20a8c51a036457b138013799927bae5e32d335125746277b379ffcd5352bd2a57e3330e4aee3f5f00c2fe4f18e1531243a6d27f8f52e6bb9d5eb8c6aeb1078d09119417d1", 0xe4) 15.318399ms ago: executing program 2 (id=32): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f0000000000)={0x0, 0xbf2, 0x9}) r1 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206931, &(0x7f00000001c0)) 13.639704ms ago: executing program 1 (id=33): r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/49) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x34, 0xbf, 0x1, 0x40d}, {0x40, 0x9, 0xf7, 0x10001}, {0x9b1e, 0xff, 0xf4, 0x4000800}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[]) 9.453411ms ago: executing program 4 (id=34): sysctl$net_inet_tcp(&(0x7f00000031c0)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, &(0x7f0000003280)="e246eb78", 0x4) (async) sysctl$net_inet_tcp(&(0x7f00000031c0)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, &(0x7f0000003280)="e246eb78", 0x4) socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="6720b5b8cc68", 0x6}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="6720b5b8cc68", 0x6}], 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '_j@', 0x18, 0x2c, 0xa9, @rand_addr="0200", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x6, 0x0, 0x0, 0x5}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x7, 0x1, 0x9, 0x3, 0x1}}}}}}) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) socket(0x18, 0x2, 0x0) (async) socket(0x18, 0x2, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setuid(0xee01) (async) setuid(0xee01) socket(0x24, 0x2, 0x0) (async) r1 = socket(0x24, 0x2, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r2, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000002480)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0xc003, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x14, 0x1}, 0xc) socket(0x18, 0x3, 0x0) (async) socket(0x18, 0x3, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSDIRFILT(r4, 0x8004427d, &(0x7f00000000c0)=0xf0f) ioctl$BIOCGDLTLIST(r4, 0xc010427b, &(0x7f0000000240)={0x4, &(0x7f0000000040)=[0x3, 0x8000, 0x4, 0x5]}) (async) ioctl$BIOCGDLTLIST(r4, 0xc010427b, &(0x7f0000000240)={0x4, &(0x7f0000000040)=[0x3, 0x8000, 0x4, 0x5]}) ioctl$FIONREAD(r1, 0xc028756b, &(0x7f0000000100)) ioctl$DIOCXCOMMIT(r0, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) seteuid(r5) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000001900)={0x5, 0x2, &(0x7f00000004c0)=[{0x0, './bus/../file0/file0/../file0/file0/file0\x00', 0x7}, {0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x80000001}, {0x0, './bus/../file0/file0/../file0/file0/file0\x00', 0x7}, {0x1, './bus/../file0/file0/../file0/file0/file0/file0\x00', 0x49}, {0x0, './bus/../file0/file0/../file0/file0/file0\x00', 0xe}]}) 0s ago: executing program 2 (id=35): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x10000, 0x4) getdents(r0, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x406) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Fri Jun 12 04:57:33 PDT 2026 OpenBSD/amd64 (ci-openbsd-multicore-2.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. login: pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff834be2d0) at panic+0x1e5 __assert(ffffffff834f880d,ffffffff8350ae96,3bb,ffffffff83533c38) at __assert+0x29 refcnt_finalize(ffff8000fffe18a8,ffffffff834adab5) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000fffe18a0) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a2214d8) at pppxclose+0xa0 spec_close(ffff80003c3cde50) at spec_close+0x417 VOP_CLOSE(fffffc006c218298,1,fffffc00097fd410,ffff80002a2214d8) at VOP_CLOSE+0x132 vn_closefile(fffffc006c436188,ffff80002a2214d8) at vn_closefile+0x12b fdrop(fffffc006c436188,ffff80002a2214d8) at fdrop+0x121 closef(fffffc006c436188,ffff80002a2214d8) at closef+0x192 fdfree(ffff80002a2214d8) at fdfree+0x116 exit1(ffff80002a2214d8,0,0,1) at exit1+0x576 sys_exit(ffff80002a2214d8,ffff80003c3ce1c0,ffff80003c3ce110) at sys_exit+0x1a end trace frame: 0xffff80003c3ce1b0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834be2d0) at panic+0x1e5 __assert(ffffffff834f880d,ffffffff8350ae96,3bb,ffffffff83533c38) at __assert+0x29 refcnt_finalize(ffff8000fffe18a8,ffffffff834adab5) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000fffe18a0) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a2214d8) at pppxclose+0xa0 spec_close(ffff80003c3cde50) at spec_close+0x417 VOP_CLOSE(fffffc006c218298,1,fffffc00097fd410,ffff80002a2214d8) at VOP_CLOSE+0x132 vn_closefile(fffffc006c436188,ffff80002a2214d8) at vn_closefile+0x12b fdrop(fffffc006c436188,ffff80002a2214d8) at fdrop+0x121 closef(fffffc006c436188,ffff80002a2214d8) at closef+0x192 fdfree(ffff80002a2214d8) at fdfree+0x116 exit1(ffff80002a2214d8,0,0,1) at exit1+0x576 sys_exit(ffff80002a2214d8,ffff80003c3ce1c0,ffff80003c3ce110) at sys_exit+0x1a syscall(ffff80003c3ce1c0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d558bb94100, count: -16 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3cdc20 rbx 0xffffffff83998e07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff80002a2214d8 rax 0xffffffff83997ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xc63aa2c5e8467f20 r11 0xef95ba64bfe3f06e r12 0xffffffff83998c08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff81ce2065 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3cdc10 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=69748 pid=82137 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a2214d8 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a220fa8,0xffff80002a2202c0 process=0xffff8000fffef9d8 user=0xffff80003c3c9000, vmspace=0xfffffc006c6dd018 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 77941 365123 55476 0 2 0 syz-executor 77941 432600 55476 0 3 0x4000080 fsleep syz-executor 86487 373671 58102 60929 2 0x10 syz-executor 86487 277108 58102 60929 3 0x4000090 fsleep syz-executor 47292 442885 86383 0 2 0 syz-executor 47292 399832 86383 0 3 0x4000080 fsleep syz-executor 47292 475113 86383 0 3 0x4000080 fsleep syz-executor 90296 257738 2443 0 2 0xc80 syz-executor 90296 150276 2443 0 3 0x4000080 kqsel syz-executor 90296 43577 2443 0 3 0x4000000 smrbar syz-executor 90296 471913 2443 0 3 0x4000080 fsleep syz-executor 83010 465234 3177 0 2 0 syz-executor 83010 319958 3177 0 3 0x4000080 fsleep syz-executor 83010 215926 3177 0 3 0x4000080 fsleep syz-executor 53369 460406 67786 0 2 0xc82 syz-executor 58102 190046 67786 0 2 0xc82 syz-executor 86383 153153 67786 0 2 0xc82 syz-executor 64981 517004 67786 0 2 0xc82 syz-executor 2443 433526 67786 0 2 0xc82 syz-executor 25678 185332 67786 0 2 0x2 syz-executor 55476 238132 67786 0 2 0xc82 syz-executor 3177 2100 67786 0 2 0xc82 syz-executor 67786 215645 58645 0 3 0x82 kqread syz-executor 58645 79596 15724 0 3 0x10008a sigsusp ksh 15724 508225 91724 0 3 0x98 kqread sshd-session 91724 66484 93527 0 3 0x92 kqread sshd-session 13335 293921 1 0 3 0x100083 ttyin getty 93527 195362 1 0 3 0x88 kqread sshd 30581 338215 13107 74 3 0x1100092 bpf pflogd 13107 342672 1 0 3 0x80 sbwait pflogd 80552 302597 30838 73 3 0x1100090 kqread syslogd 30838 147579 1 0 3 0x100082 sbwait syslogd 87646 55722 1 0 3 0x100080 kqread resolvd 77178 229398 80366 77 3 0x100092 kqread dhcpleased 49783 316421 80366 77 3 0x100092 kqread dhcpleased 80366 383237 1 0 3 0x80 kqread dhcpleased 19518 159648 0 0 3 0x14200 pause smr 94272 189103 0 0 2 0x14200 zerothread 43880 228519 0 0 3 0x14200 aiodoned aiodoned 55998 78823 0 0 3 0x14200 syncer update 95093 283665 0 0 3 0x14200 cleaner cleaner 79183 255280 0 0 3 0x14200 reaper reaper 26180 49827 0 0 3 0x14200 pgdaemon pagedaemon 8025 69877 0 0 3 0x14200 bored viomb 88468 493862 0 0 3 0x40014200 acpi0 acpi0 5628 118566 0 0 3 0x40014200 idle1 63036 257621 0 0 3 0x14200 bored softnet1 72197 35054 0 0 3 0x14200 bored softnet0 34230 133164 0 0 3 0x14200 smrbar systqmp 36404 15886 0 0 3 0x14200 bored systq 19130 113105 0 0 2 0x14200 softclockmp 3953 452314 0 0 3 0x40014200 tmoslp softclock 63440 90467 0 0 3 0x40014200 idle0 1 449732 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 25678 (syz-executor) thread 0xffff80002a222a70 (185332) exclusive rrwlock inode r = 0 (0xfffffc006c422a08) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffc006d596e90) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 34230 (systqmp) thread 0xffff8000ffffecf8 (133164) shared rwlock systqmp r = 0 (0xffffffff839396d8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11068 12215K 12233K 166960K 12181 0 pcb 17 12K 12K 166960K 30 0 rtable 250 8K 8K 166960K 388 0 pf 39 18K 25K 166960K 74 0 ifaddr 47 8K 8K 166960K 55 0 ifgroup 64 2K 3K 166960K 74 0 sysctl 2 1K 9K 166960K 6 0 counters 78 37K 38K 166960K 86 0 ioctlops 0 0K 4K 166960K 1488 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1294 81K 82K 166960K 1372 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 93K 166960K 164 0 proc 70 115K 164K 166960K 552 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 104 7K 7K 166960K 106 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 395 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 229 161K 175K 166960K 3494 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 41 82K 102K 166960K 1360 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 16 0K 1K 166960K 32 0 temp 35 9114K 9120K 166960K 4079 0 kqueue 14 22K 24K 166960K 30 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 40 0 36 1 0 1 1 0 8 0 rtentry 176 115 0 3 6 0 6 6 0 8 0 unpcb 144 49 0 32 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 10 0 6 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 89 0 79 2 0 2 2 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1192 4 0 2 1 0 1 1 0 8 0 pppxif 1576 4 0 2 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 4 0 0 1 0 1 1 0 8 0 pfstitem 24 18 0 0 1 0 1 1 0 8 0 pfstkey 128 18 0 0 1 0 1 1 0 8 0 pfstate 448 18 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 464 0 6 29 0 29 29 0 8 0 art_table 40 466 0 6 5 0 5 5 0 8 0 art_node 32 115 0 11 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1614 0 143 93 0 93 93 0 8 0 ffsino 296 1614 0 143 114 0 114 114 0 8 0 nchpl 144 1848 0 145 64 0 64 64 0 8 0 vnodes 216 1708 0 0 95 0 95 95 0 8 0 namei 1024 5687 0 5686 1 0 1 1 0 8 0 percpumem 16 58 0 4 1 0 1 1 0 8 0 kstatmem 264 35 0 4 3 0 3 3 0 8 0 scxspl 216 6255 0 6255 4 3 1 3 1 8 1 plimitpl 152 30 0 13 1 0 1 1 0 8 0 sigapl 424 493 0 446 7 0 7 7 0 8 1 knotepl 120 275 0 0 9 0 9 9 0 8 0 kqueuepl 224 33 0 20 1 0 1 1 0 8 0 pipepl 344 130 0 103 3 0 3 3 0 8 0 fdescpl 528 477 0 447 3 0 3 3 0 8 0 filepl 160 1722 0 1501 10 0 10 10 0 8 0 lockfpl 104 12 0 10 1 0 1 1 0 8 0 lockfspl 48 7 0 5 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 93 0 78 1 0 1 1 0 8 0 zombiepl 144 448 0 446 1 0 1 1 0 8 0 processpl 1232 493 0 446 5 0 5 5 0 8 1 procpl 664 547 0 491 5 0 5 5 0 8 0 sockpl 752 185 0 153 4 0 4 4 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k 2048 12 0 0 2 0 2 2 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 131 0 0 9 0 9 9 0 8 0 bufpl 272 2332 0 105 149 0 149 149 0 8 0 anonpl 32 3504 0 0 29 0 29 29 0 246 0 amapchunkpl 152 9446 0 8798 34 0 34 34 0 158 5 amappl16 200 1115 0 1097 4 1 3 4 0 8 1 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 438 0 437 1 0 1 1 0 8 0 amappl13 176 129 0 117 1 0 1 1 0 8 0 amappl12 168 734 0 705 2 0 2 2 0 8 0 amappl11 160 2 0 1 1 0 1 1 0 8 0 amappl10 152 66 0 52 1 0 1 1 0 8 0 amappl9 144 291 0 290 1 0 1 1 0 8 0 amappl8 136 101 0 99 1 0 1 1 0 8 0 amappl7 128 188 0 175 1 0 1 1 0 8 0 amappl6 120 157 0 155 1 0 1 1 0 8 0 amappl5 112 109 0 99 1 0 1 1 0 8 0 amappl4 104 294 0 276 1 0 1 1 0 8 0 amappl3 96 1690 0 1585 3 0 3 3 0 8 0 amappl2 88 568 0 507 2 0 2 2 0 8 0 amappl1 80 10623 0 10022 14 0 14 14 0 8 0 amappl 88 2727 0 2569 4 0 4 4 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 477 0 447 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 477 0 447 1 0 1 1 0 8 0 vmmpekpl 168 5977 0 5945 2 0 2 2 0 8 0 vmmpepl 168 39431 0 37587 86 0 86 86 0 357 1 vmsppl 488 476 0 446 5 0 5 5 0 8 1 rwobjpl 80 14287 0 13275 23 0 23 23 0 8 1 pdppl 4096 961 0 892 101 26 75 85 0 8 6 pvpl 32 10116 0 0 82 0 82 82 0 265 0 pmappl 256 476 0 446 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 421 0 29 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834be2d0) at panic+0x1e5 __assert(ffffffff834f880d,ffffffff8350ae96,3bb,ffffffff83533c38) at __assert+0x29 refcnt_finalize(ffff8000fffe18a8,ffffffff834adab5) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000fffe18a0) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a2214d8) at pppxclose+0xa0 spec_close(ffff80003c3cde50) at spec_close+0x417 VOP_CLOSE(fffffc006c218298,1,fffffc00097fd410,ffff80002a2214d8) at VOP_CLOSE+0x132 vn_closefile(fffffc006c436188,ffff80002a2214d8) at vn_closefile+0x12b fdrop(fffffc006c436188,ffff80002a2214d8) at fdrop+0x121 closef(fffffc006c436188,ffff80002a2214d8) at closef+0x192 fdfree(ffff80002a2214d8) at fdfree+0x116 exit1(ffff80002a2214d8,0,0,1) at exit1+0x576 sys_exit(ffff80002a2214d8,ffff80003c3ce1c0,ffff80003c3ce110) at sys_exit+0x1a syscall(ffff80003c3ce1c0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d558bb94100, count: -16 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ab0d00) at __mp_lock+0x192 exit1(ffff8000fffe82b8,0,0,1) at exit1+0x701 sys_exit(ffff8000fffe82b8,ffff80003c3da1a0,ffff80003c3da0f0) at sys_exit+0x1a syscall(ffff80003c3da1a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7eb3f4e77500, count: 7 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ab0d00) at __mp_lock+0x192 exit1(ffff8000fffe82b8,0,0,1) at exit1+0x701 sys_exit(ffff8000fffe82b8,ffff80003c3da1a0,ffff80003c3da0f0) at sys_exit+0x1a syscall(ffff80003c3da1a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7eb3f4e77500, count: -8