last executing test programs: 14.286029888s ago: executing program 6 (id=71): socket$inet(0x2, 0x3, 0x87) (async) r0 = socket$inet(0x2, 0x3, 0x87) setsockopt(r0, 0x0, 0xc, &(0x7f0000000080)="9a355644fd9c8446", 0x8) setsockopt(r0, 0x0, 0xc, &(0x7f00000000c0)="9a355644fda58446", 0xc) socket(0x1e, 0x3, 0x2) (async) r1 = socket(0x1e, 0x3, 0x2) bind$inet6(r1, &(0x7f00000005c0)={0x1c, 0x18, 0x1, 0x80000d, "0ac8020000005a9b82e80ad9f3a300", 0x20004}, 0x1c) (async) bind$inet6(r1, &(0x7f00000005c0)={0x1c, 0x18, 0x1, 0x80000d, "0ac8020000005a9b82e80ad9f3a300", 0x20004}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40580, 0x4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40580, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x50091, 0x0) ioctl$TIOCSCTTY(r2, 0x20007461) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = shmget$private(0x0, 0x2000, 0x180, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000180)=0x1c) socket$inet6(0x18, 0x2, 0x1) (async) r5 = socket$inet6(0x18, 0x2, 0x1) ioctl$FIOASYNC(r5, 0x81206919, &(0x7f0000000240)=0x7) (async) ioctl$FIOASYNC(r5, 0x81206919, &(0x7f0000000240)=0x7) r6 = socket$inet6(0x18, 0x3, 0x29) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0x31, &(0x7f0000000280), 0x8) dup(r6) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x9], 0x1, 0x10008, 0x0, 0xffffffffffffffff}) r9 = getuid() r10 = getgid() r11 = getsid(0x0) getsockopt(r4, 0xfffff827, 0x0, &(0x7f00000006c0)=""/149, &(0x7f0000000780)=0x95) (async) getsockopt(r4, 0xfffff827, 0x0, &(0x7f00000006c0)=""/149, &(0x7f0000000780)=0x95) setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000680)={r9, r10, r11}, 0xc) (async) setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000680)={r9, r10, r11}, 0xc) openat$audioctl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) (async) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x10, 0x8) kevent(r13, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff7, 0x10, 0x40000000, 0x5, 0x8}, {{}, 0xfffffffffffffffe, 0x20, 0x1, 0x80000000074, 0x3ff}, {{r4}, 0xfffffffffffffffd, 0x54, 0x40000000, 0x8, 0x3}], 0x3ff, &(0x7f0000000440)=[{{r5}, 0xfffffffffffffff7, 0x90, 0x80, 0x8, 0xfffffffffffff353}, {{r6}, 0xfffffffffffffff9, 0x0, 0x10, 0x7fff, 0x7fffffff}, {{r7}, 0xfffffffffffffffd, 0xc0, 0x20000000, 0x2, 0x8000000000000000}, {{}, 0xfffffffffffffffa, 0x4c, 0x4, 0xa, 0x7f0c}, {{}, 0xfffffffffffffff8, 0x4, 0x10, 0x3, 0x1}, {{r8}, 0xfffffffffffffffa, 0xa, 0x80000000, 0x83, 0x3}, {{0xffffffffffffff9c}, 0x7cb4e9db0ef6f04c, 0x0, 0xfffff, 0x400, 0x6}, {{}, 0x5, 0x28, 0x1, 0x4, 0x8}, {{r12}, 0xfffffffffffffffd, 0x4, 0x40000045, 0xffff, 0xffff}, {{r13}, 0xfffffffffffffff6, 0xe3, 0x1, 0x6, 0x2}], 0x0, &(0x7f0000000580)={0x10001, 0xb3c}) (async) kevent(r13, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff7, 0x10, 0x40000000, 0x5, 0x8}, {{}, 0xfffffffffffffffe, 0x20, 0x1, 0x80000000074, 0x3ff}, {{r4}, 0xfffffffffffffffd, 0x54, 0x40000000, 0x8, 0x3}], 0x3ff, &(0x7f0000000440)=[{{r5}, 0xfffffffffffffff7, 0x90, 0x80, 0x8, 0xfffffffffffff353}, {{r6}, 0xfffffffffffffff9, 0x0, 0x10, 0x7fff, 0x7fffffff}, {{r7}, 0xfffffffffffffffd, 0xc0, 0x20000000, 0x2, 0x8000000000000000}, {{}, 0xfffffffffffffffa, 0x4c, 0x4, 0xa, 0x7f0c}, {{}, 0xfffffffffffffff8, 0x4, 0x10, 0x3, 0x1}, {{r8}, 0xfffffffffffffffa, 0xa, 0x80000000, 0x83, 0x3}, {{0xffffffffffffff9c}, 0x7cb4e9db0ef6f04c, 0x0, 0xfffff, 0x400, 0x6}, {{}, 0x5, 0x28, 0x1, 0x4, 0x8}, {{r12}, 0xfffffffffffffffd, 0x4, 0x40000045, 0xffff, 0xffff}, {{r13}, 0xfffffffffffffff6, 0xe3, 0x1, 0x6, 0x2}], 0x0, &(0x7f0000000580)={0x10001, 0xb3c}) pselect(0x40, &(0x7f0000000000)={0x49f, 0x7, 0x8000000000000001, 0x1, 0x9, 0x6, 0x1000, 0x8}, 0x0, 0x0, 0x0, 0x0) 13.724384976s ago: executing program 4 (id=72): seteuid(0xffffffffffffffff) r0 = semget$private(0x0, 0x2, 0x3b1) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x8}, 0x0, 0x47, 0x0, 0x0, 0x3, 0x0, 0x40}) stat(0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="be96c206fb44c5db18eefa09f71a5d5461c2c082c7b02b0932418a509232b6dbc6769c105c31907bdf2251d9a15729d50300f34b849f355fbd90ca9833aa2dd269c4d80650c8b2aecc5858dc742aa8022fca9e903eef795422b94265ffc03639d99bf4f9a9f5cc9c37e52584c4cef4123a6a562fd39681346e195b9edfcd85ba50", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1024, &(0x7f00000000c0), &(0x7f0000000100)=0x4) semctl$GETZCNT(r0, 0x13a5dff49838b6a0, 0x7, 0x0) 13.704599192s ago: executing program 4 (id=76): mkfifo(&(0x7f0000000240)='./file0\x00', 0x8) (async, rerun: 32) r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) (rerun: 32) connect$unix(r0, &(0x7f0000000100)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) (async) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r1 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000290000002a000000801b000001"], 0x20}, 0x402) (async, rerun: 32) setresuid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setresuid(0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x1, 0x6) (async) r3 = kqueue() kevent(r3, &(0x7f0000001680)=[{{}, 0xfffffffffffffff9, 0x9, 0x13, 0x0, 0xffffffffffffffff}], 0x1, 0x0, 0x5215, 0x0) (async) closefrom(r2) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001640)="04000000", 0x4) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0x1cc) ppoll(&(0x7f0000000340)=[{r4, 0x4}], 0x1, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet(0x2, 0x3, 0xfe) (async) r7 = socket$inet(0x2, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0x1000}, 0x1}, 0x38, 0x2802, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0xb, &(0x7f0000001380)={0x10, 0x2, 0x2, 0x4}, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async, rerun: 64) setsockopt$sock_int(r7, 0xffff, 0x800, &(0x7f00000013c0)=0x4, 0x4) setsockopt(r7, 0x0, 0x7, &(0x7f0000001400)="0784fc81", 0x4) (async) sendmsg(r6, &(0x7f0000001440)={&(0x7f0000001480)=@in={0x10, 0x2, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0xa0}, 0x400) (async) sysctl$kern(&(0x7f00000014c0)={0x1, 0x37}, 0x2, &(0x7f0000001500)="624e27f6ecc28cf85e9960b325d5c24b0b6796a9b3af7f564015992ca8fc233ed4a7d2637c12a874feb3773130c9c6fce482474af3ad6b37286ecd681b798c8806c5653162b0000069cf22a7439e9d4d7c5a9e7c4c534af6f6461be335fb1fca7a10b7bdb26939687f1c5b9ea3008799ab22d1def7312a9fc163061561db3ea057d9c963f83590827c25adf2ea4145dd0f8aec95fa4c0e37435102f4b978cb1355d4886dbb4841c4b16eb14fd26aa864cfdd125a7af53e02bf6fdd8fdcde8731625c8a654cb34c30078a843c767440c085bef207d8e32df7e22c97dbf28d553d80aa96f3", &(0x7f0000001600)=0xe4, 0x0, 0x0) (async) read(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0x80047308, &(0x7f0000000040)={0x0, 0x0, 0x4}) 13.407332768s ago: executing program 2 (id=3): mknod(&(0x7f0000000100)='./file0\x00', 0x2050, 0x674) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x8) pselect(0xf, 0x0, 0x0, &(0x7f00000001c0)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) ioctl$TIOCSDTR(r0, 0x20007479) mknod(&(0x7f0000000000)='./file0\x00', 0xa08c, 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCOSFPFLUSH(r1, 0x2000444e) r2 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r3, 0x20007461, 0x0) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async, rerun: 32) r4 = socket$inet6(0x18, 0x3, 0x7) (async, rerun: 32) r5 = socket$inet6(0x18, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000280)="402b94981df9b994e7e72f0ef8f72b9399e93a12a79c1da87774fb610583798f70192a9148ba25e492de73d767428d146283cd664eefaa0501115c3ad5cb7d4615862ad30ce3287851dde24623b7df4891399ad31246df06fb62ab09f638efa3d78b5b072d6b37f72012a464cd63953c6836a8b97067fa1a768f7ae3da014cda699cbc89808bbc200b3bdf797f44db9d28e1e949273e0f32c118806259cad5dcb52caf661bc8a90b722ae297397e7870", 0xb0, 0x6, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0xfffffffd, "d791f719cf60bd0b94507f5c224f85f7", 0xb}, 0x1c) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$DIOCXEND(r6, 0xc0044464, &(0x7f00000000c0)=0x33) ioctl$AUDIO_GETDEV(r2, 0x4030411b, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x3, 0x57) setsockopt(r7, 0x0, 0x24, &(0x7f00000004c0), 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000400)='./file0\x00', 0x4, 0x208, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0x4000101a, 0x0) (async) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000240)={&(0x7f0000000380)=[{0x100, 0x1}, {0x25, 0x6}], 0x2}) (async) recvmmsg(r4, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0xffffffffffffff03, 0x2000, &(0x7f00000027c0)={0x16f5, 0x5f}) 12.537859077s ago: executing program 5 (id=88): execve(0x0, &(0x7f0000000040)=[&(0x7f0000000080)='//\x00'], 0x0) (async) semget(0x1, 0x0, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x246) (async) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x25, &(0x7f0000000000), 0x4) 11.134232282s ago: executing program 6 (id=71): socket$inet(0x2, 0x3, 0x87) (async) r0 = socket$inet(0x2, 0x3, 0x87) setsockopt(r0, 0x0, 0xc, &(0x7f0000000080)="9a355644fd9c8446", 0x8) setsockopt(r0, 0x0, 0xc, &(0x7f00000000c0)="9a355644fda58446", 0xc) socket(0x1e, 0x3, 0x2) (async) r1 = socket(0x1e, 0x3, 0x2) bind$inet6(r1, &(0x7f00000005c0)={0x1c, 0x18, 0x1, 0x80000d, "0ac8020000005a9b82e80ad9f3a300", 0x20004}, 0x1c) (async) bind$inet6(r1, &(0x7f00000005c0)={0x1c, 0x18, 0x1, 0x80000d, "0ac8020000005a9b82e80ad9f3a300", 0x20004}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40580, 0x4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40580, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x50091, 0x0) ioctl$TIOCSCTTY(r2, 0x20007461) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = shmget$private(0x0, 0x2000, 0x180, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000180)=0x1c) socket$inet6(0x18, 0x2, 0x1) (async) r5 = socket$inet6(0x18, 0x2, 0x1) ioctl$FIOASYNC(r5, 0x81206919, &(0x7f0000000240)=0x7) (async) ioctl$FIOASYNC(r5, 0x81206919, &(0x7f0000000240)=0x7) r6 = socket$inet6(0x18, 0x3, 0x29) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0x31, &(0x7f0000000280), 0x8) dup(r6) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x9], 0x1, 0x10008, 0x0, 0xffffffffffffffff}) r9 = getuid() r10 = getgid() r11 = getsid(0x0) getsockopt(r4, 0xfffff827, 0x0, &(0x7f00000006c0)=""/149, &(0x7f0000000780)=0x95) (async) getsockopt(r4, 0xfffff827, 0x0, &(0x7f00000006c0)=""/149, &(0x7f0000000780)=0x95) setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000680)={r9, r10, r11}, 0xc) (async) setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000680)={r9, r10, r11}, 0xc) openat$audioctl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) (async) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x10, 0x8) kevent(r13, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff7, 0x10, 0x40000000, 0x5, 0x8}, {{}, 0xfffffffffffffffe, 0x20, 0x1, 0x80000000074, 0x3ff}, {{r4}, 0xfffffffffffffffd, 0x54, 0x40000000, 0x8, 0x3}], 0x3ff, &(0x7f0000000440)=[{{r5}, 0xfffffffffffffff7, 0x90, 0x80, 0x8, 0xfffffffffffff353}, {{r6}, 0xfffffffffffffff9, 0x0, 0x10, 0x7fff, 0x7fffffff}, {{r7}, 0xfffffffffffffffd, 0xc0, 0x20000000, 0x2, 0x8000000000000000}, {{}, 0xfffffffffffffffa, 0x4c, 0x4, 0xa, 0x7f0c}, {{}, 0xfffffffffffffff8, 0x4, 0x10, 0x3, 0x1}, {{r8}, 0xfffffffffffffffa, 0xa, 0x80000000, 0x83, 0x3}, {{0xffffffffffffff9c}, 0x7cb4e9db0ef6f04c, 0x0, 0xfffff, 0x400, 0x6}, {{}, 0x5, 0x28, 0x1, 0x4, 0x8}, {{r12}, 0xfffffffffffffffd, 0x4, 0x40000045, 0xffff, 0xffff}, {{r13}, 0xfffffffffffffff6, 0xe3, 0x1, 0x6, 0x2}], 0x0, &(0x7f0000000580)={0x10001, 0xb3c}) (async) kevent(r13, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff7, 0x10, 0x40000000, 0x5, 0x8}, {{}, 0xfffffffffffffffe, 0x20, 0x1, 0x80000000074, 0x3ff}, {{r4}, 0xfffffffffffffffd, 0x54, 0x40000000, 0x8, 0x3}], 0x3ff, &(0x7f0000000440)=[{{r5}, 0xfffffffffffffff7, 0x90, 0x80, 0x8, 0xfffffffffffff353}, {{r6}, 0xfffffffffffffff9, 0x0, 0x10, 0x7fff, 0x7fffffff}, {{r7}, 0xfffffffffffffffd, 0xc0, 0x20000000, 0x2, 0x8000000000000000}, {{}, 0xfffffffffffffffa, 0x4c, 0x4, 0xa, 0x7f0c}, {{}, 0xfffffffffffffff8, 0x4, 0x10, 0x3, 0x1}, {{r8}, 0xfffffffffffffffa, 0xa, 0x80000000, 0x83, 0x3}, {{0xffffffffffffff9c}, 0x7cb4e9db0ef6f04c, 0x0, 0xfffff, 0x400, 0x6}, {{}, 0x5, 0x28, 0x1, 0x4, 0x8}, {{r12}, 0xfffffffffffffffd, 0x4, 0x40000045, 0xffff, 0xffff}, {{r13}, 0xfffffffffffffff6, 0xe3, 0x1, 0x6, 0x2}], 0x0, &(0x7f0000000580)={0x10001, 0xb3c}) pselect(0x40, &(0x7f0000000000)={0x49f, 0x7, 0x8000000000000001, 0x1, 0x9, 0x6, 0x1000, 0x8}, 0x0, 0x0, 0x0, 0x0) 10.332290157s ago: executing program 6 (id=97): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = getppid() r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_open_pts() sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) (async) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) (async) getppid() (async) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) (async) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) (async) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async) syz_open_pts() (async) sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) (async) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) (async) 9.944548082s ago: executing program 2 (id=3): mknod(&(0x7f0000000100)='./file0\x00', 0x2050, 0x674) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x8) pselect(0xf, 0x0, 0x0, &(0x7f00000001c0)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) ioctl$TIOCSDTR(r0, 0x20007479) mknod(&(0x7f0000000000)='./file0\x00', 0xa08c, 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCOSFPFLUSH(r1, 0x2000444e) r2 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r3, 0x20007461, 0x0) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async, rerun: 32) r4 = socket$inet6(0x18, 0x3, 0x7) (async, rerun: 32) r5 = socket$inet6(0x18, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000280)="402b94981df9b994e7e72f0ef8f72b9399e93a12a79c1da87774fb610583798f70192a9148ba25e492de73d767428d146283cd664eefaa0501115c3ad5cb7d4615862ad30ce3287851dde24623b7df4891399ad31246df06fb62ab09f638efa3d78b5b072d6b37f72012a464cd63953c6836a8b97067fa1a768f7ae3da014cda699cbc89808bbc200b3bdf797f44db9d28e1e949273e0f32c118806259cad5dcb52caf661bc8a90b722ae297397e7870", 0xb0, 0x6, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0xfffffffd, "d791f719cf60bd0b94507f5c224f85f7", 0xb}, 0x1c) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$DIOCXEND(r6, 0xc0044464, &(0x7f00000000c0)=0x33) ioctl$AUDIO_GETDEV(r2, 0x4030411b, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x3, 0x57) setsockopt(r7, 0x0, 0x24, &(0x7f00000004c0), 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000400)='./file0\x00', 0x4, 0x208, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0x4000101a, 0x0) (async) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000240)={&(0x7f0000000380)=[{0x100, 0x1}, {0x25, 0x6}], 0x2}) (async) recvmmsg(r4, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0xffffffffffffff03, 0x2000, &(0x7f00000027c0)={0x16f5, 0x5f}) 9.684830118s ago: executing program 4 (id=76): mkfifo(&(0x7f0000000240)='./file0\x00', 0x8) (async, rerun: 32) r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) (rerun: 32) connect$unix(r0, &(0x7f0000000100)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) (async) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r1 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000290000002a000000801b000001"], 0x20}, 0x402) (async, rerun: 32) setresuid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setresuid(0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x1, 0x6) (async) r3 = kqueue() kevent(r3, &(0x7f0000001680)=[{{}, 0xfffffffffffffff9, 0x9, 0x13, 0x0, 0xffffffffffffffff}], 0x1, 0x0, 0x5215, 0x0) (async) closefrom(r2) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001640)="04000000", 0x4) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0x1cc) ppoll(&(0x7f0000000340)=[{r4, 0x4}], 0x1, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet(0x2, 0x3, 0xfe) (async) r7 = socket$inet(0x2, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0x1000}, 0x1}, 0x38, 0x2802, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0xb, &(0x7f0000001380)={0x10, 0x2, 0x2, 0x4}, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async, rerun: 64) setsockopt$sock_int(r7, 0xffff, 0x800, &(0x7f00000013c0)=0x4, 0x4) setsockopt(r7, 0x0, 0x7, &(0x7f0000001400)="0784fc81", 0x4) (async) sendmsg(r6, &(0x7f0000001440)={&(0x7f0000001480)=@in={0x10, 0x2, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0xa0}, 0x400) (async) sysctl$kern(&(0x7f00000014c0)={0x1, 0x37}, 0x2, &(0x7f0000001500)="624e27f6ecc28cf85e9960b325d5c24b0b6796a9b3af7f564015992ca8fc233ed4a7d2637c12a874feb3773130c9c6fce482474af3ad6b37286ecd681b798c8806c5653162b0000069cf22a7439e9d4d7c5a9e7c4c534af6f6461be335fb1fca7a10b7bdb26939687f1c5b9ea3008799ab22d1def7312a9fc163061561db3ea057d9c963f83590827c25adf2ea4145dd0f8aec95fa4c0e37435102f4b978cb1355d4886dbb4841c4b16eb14fd26aa864cfdd125a7af53e02bf6fdd8fdcde8731625c8a654cb34c30078a843c767440c085bef207d8e32df7e22c97dbf28d553d80aa96f3", &(0x7f0000001600)=0xe4, 0x0, 0x0) (async) read(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0x80047308, &(0x7f0000000040)={0x0, 0x0, 0x4}) 9.684793814s ago: executing program 5 (id=88): execve(0x0, &(0x7f0000000040)=[&(0x7f0000000080)='//\x00'], 0x0) (async) semget(0x1, 0x0, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x246) (async) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x25, &(0x7f0000000000), 0x4) 8.134285793s ago: executing program 6 (id=97): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = getppid() r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_open_pts() sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) (async) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) (async) getppid() (async) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) (async) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) (async) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async) syz_open_pts() (async) sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) (async) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) (async) 7.536122685s ago: executing program 5 (id=88): execve(0x0, &(0x7f0000000040)=[&(0x7f0000000080)='//\x00'], 0x0) (async) semget(0x1, 0x0, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x246) (async) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x25, &(0x7f0000000000), 0x4) 7.197748697s ago: executing program 4 (id=76): mkfifo(&(0x7f0000000240)='./file0\x00', 0x8) (async, rerun: 32) r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) (rerun: 32) connect$unix(r0, &(0x7f0000000100)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) (async) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r1 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000290000002a000000801b000001"], 0x20}, 0x402) (async, rerun: 32) setresuid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setresuid(0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x1, 0x6) (async) r3 = kqueue() kevent(r3, &(0x7f0000001680)=[{{}, 0xfffffffffffffff9, 0x9, 0x13, 0x0, 0xffffffffffffffff}], 0x1, 0x0, 0x5215, 0x0) (async) closefrom(r2) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001640)="04000000", 0x4) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0x1cc) ppoll(&(0x7f0000000340)=[{r4, 0x4}], 0x1, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet(0x2, 0x3, 0xfe) (async) r7 = socket$inet(0x2, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0x1000}, 0x1}, 0x38, 0x2802, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0xb, &(0x7f0000001380)={0x10, 0x2, 0x2, 0x4}, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async, rerun: 64) setsockopt$sock_int(r7, 0xffff, 0x800, &(0x7f00000013c0)=0x4, 0x4) setsockopt(r7, 0x0, 0x7, &(0x7f0000001400)="0784fc81", 0x4) (async) sendmsg(r6, &(0x7f0000001440)={&(0x7f0000001480)=@in={0x10, 0x2, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0xa0}, 0x400) (async) sysctl$kern(&(0x7f00000014c0)={0x1, 0x37}, 0x2, &(0x7f0000001500)="624e27f6ecc28cf85e9960b325d5c24b0b6796a9b3af7f564015992ca8fc233ed4a7d2637c12a874feb3773130c9c6fce482474af3ad6b37286ecd681b798c8806c5653162b0000069cf22a7439e9d4d7c5a9e7c4c534af6f6461be335fb1fca7a10b7bdb26939687f1c5b9ea3008799ab22d1def7312a9fc163061561db3ea057d9c963f83590827c25adf2ea4145dd0f8aec95fa4c0e37435102f4b978cb1355d4886dbb4841c4b16eb14fd26aa864cfdd125a7af53e02bf6fdd8fdcde8731625c8a654cb34c30078a843c767440c085bef207d8e32df7e22c97dbf28d553d80aa96f3", &(0x7f0000001600)=0xe4, 0x0, 0x0) (async) read(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0x80047308, &(0x7f0000000040)={0x0, 0x0, 0x4}) 7.197590591s ago: executing program 2 (id=3): mknod(&(0x7f0000000100)='./file0\x00', 0x2050, 0x674) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x8) pselect(0xf, 0x0, 0x0, &(0x7f00000001c0)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) ioctl$TIOCSDTR(r0, 0x20007479) mknod(&(0x7f0000000000)='./file0\x00', 0xa08c, 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCOSFPFLUSH(r1, 0x2000444e) r2 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r3, 0x20007461, 0x0) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async, rerun: 32) r4 = socket$inet6(0x18, 0x3, 0x7) (async, rerun: 32) r5 = socket$inet6(0x18, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000280)="402b94981df9b994e7e72f0ef8f72b9399e93a12a79c1da87774fb610583798f70192a9148ba25e492de73d767428d146283cd664eefaa0501115c3ad5cb7d4615862ad30ce3287851dde24623b7df4891399ad31246df06fb62ab09f638efa3d78b5b072d6b37f72012a464cd63953c6836a8b97067fa1a768f7ae3da014cda699cbc89808bbc200b3bdf797f44db9d28e1e949273e0f32c118806259cad5dcb52caf661bc8a90b722ae297397e7870", 0xb0, 0x6, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0xfffffffd, "d791f719cf60bd0b94507f5c224f85f7", 0xb}, 0x1c) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$DIOCXEND(r6, 0xc0044464, &(0x7f00000000c0)=0x33) ioctl$AUDIO_GETDEV(r2, 0x4030411b, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x3, 0x57) setsockopt(r7, 0x0, 0x24, &(0x7f00000004c0), 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000400)='./file0\x00', 0x4, 0x208, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0x4000101a, 0x0) (async) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000240)={&(0x7f0000000380)=[{0x100, 0x1}, {0x25, 0x6}], 0x2}) (async) recvmmsg(r4, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0xffffffffffffff03, 0x2000, &(0x7f00000027c0)={0x16f5, 0x5f}) 6.428669614s ago: executing program 0 (id=124): execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getppid() getpgid(r0) r1 = socket$inet6(0x18, 0x2, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x2e, &(0x7f0000000000)={0xffff, 0x1}, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x1c, 0x18, 0x3, 0x7fffffff, "ff02000000557000", 0x8}, 0x1c) pipe(&(0x7f00000000c0)) 6.330195773s ago: executing program 6 (id=97): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = getppid() r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_open_pts() sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) (async) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) (async) getppid() (async) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) (async) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) (async) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async) syz_open_pts() (async) sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) (async) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) (async) 6.126752614s ago: executing program 7 (id=126): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x148) (async) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045da001c0068000005339078ff17ffffac1400bb1d1b2de900080001"]) (async) chmod(&(0x7f0000000200)='./file0\x00', 0x39d) (async) seteuid(0xffffffffffffffff) (async, rerun: 32) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x10) (async, rerun: 32) sysctl$kern(&(0x7f0000000380)={0x1, 0x34}, 0x2, 0x0, 0x0, &(0x7f00000003c0), 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCSETHOSTID(r0, 0xc0044456, &(0x7f0000000580)=0x1) sysctl$net_inet6_ip6(&(0x7f00000016c0)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000001700), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x1b}, 0x2, &(0x7f0000000140)="677734a5a7215ee428d8874e54069d4fc19be7388dd0d11b904e452861a7eeec8d1928424a4cf81dc9fa8cef897e675da98747d4e6c98fba5c80dc7201639c0a3659dff636d65274ac1909cc", &(0x7f0000000480)=0x4c, &(0x7f00000004c0)="660993ea4556096128dbecbfff5d40f0cde7c7eb26239ab388db61af7feed1cf39b767738731ed743d034d6702b459e76aeb03868ba0400fa75c0a14c964eb37013d93", 0x43) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0xe1) (async) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000001240)={{'./file1\x00', './file0/file0\x00', 0x62}, &(0x7f00000005c0)=[{'./file0\x00', './file0/file1\x00', 0x34, 0x3}, {'./file0\x00', './file0/file1\x00', 0x28, 0x3}, {'./file0/file0\x00', './file0/file2\x00', 0xa, 0x4}], 0x1a7, 0x3, 0xb1f9, 0x5, 0x2424, 0x9, 0x38, 0x57a}) (async, rerun: 64) rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file1\x00') (async, rerun: 64) open(&(0x7f0000000080)='./file0\x00', 0x19083084ca9cf73d, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) minherit(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) (async) setgroups(0x0, 0xffffffffffffffff) (async, rerun: 64) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0xc}, 0x4, 0x0, 0x0, &(0x7f00000003c0)="62213bccb95428a86479fd1495f5945d5ca7c593a9ee123c5053857e09ec7583570478b80604aacdf345bdde9d70a354abfee825bef4d630a63f59b8c3cf4ed1f150309cfa29d36a0652a3f8b9447d2374e94920b13d8a7c88f666d8f2b64eab9f59f57c22eb586099cd36fe675ac9985b3267fa8eb5f2bf181e00"/133, 0x85) (rerun: 64) 6.117917092s ago: executing program 0 (id=128): mkfifo(0x0, 0x8) (async) r0 = semget$private(0x0, 0x3, 0x570) (async) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0xffffffffffffffff, r1, 0x0, r2, 0x146, 0xfffa}, 0x0, 0x4, 0x0, 0x0, 0x6a1fdb56, 0x0, 0x4000005c}) (async) setresgid(r3, r2, 0x0) setgroups(0x0, 0x0) (async) seteuid(0xffffffffffffffff) (async) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000200)) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x61, 0xdd, 0xe, 0x9}, {0x6, 0x25, 0x0, 0x5}]}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 64) syz_emit_ethernet(0xc8, &(0x7f0000000480)=ANY=[]) (rerun: 64) 5.533917653s ago: executing program 1 (id=129): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000001640)={0x5, 0x0, &(0x7f0000000200)=[{0x0, './file1\x00', 0xf}, {0x1, './file0\x00', 0x6}, {0x0, './file0\x00', 0x9}, {0x1, './file0\x00', 0x3}, {0x1, './file0\x00', 0xff}]}) recvmmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x38, 0x3001, &(0x7f0000001680)={0x0, 0xb70}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r1 = semget$private(0x0, 0x1, 0x42) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001840), 0x10, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000001880)={0x2, &(0x7f00000018c0)=[{0x30, 0x3e, 0x3, 0x85}, {0x6, 0x28, 0x3, 0x4}]}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000001900)={'tap', 0x0}) (async) syz_emit_ethernet(0x22, &(0x7f0000001940)=ANY=[]) (async) semctl$SETVAL(r1, 0x4, 0x8, 0x0) (async) pselect(0x40, &(0x7f00000016c0)={0x49f, 0x0, 0x8000000000000001, 0x1, 0x9, 0x6, 0x1000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x2e, &(0x7f0000001700), 0x14) connect$inet6(r3, &(0x7f0000001740)={0x1c, 0x18, 0x0, 0x0, "feff00", 0x5}, 0x1c) syz_emit_ethernet(0x243, &(0x7f00000017c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa03aaaaaaaa86dd6f75184a020d3a7c39bc48e57db8883fa6958273532df404fe8000000000000000000000000000aa02009078000000086a0e1d10ffff0281fe80000000020000ff010000000000aa"]) (async) writev(r3, &(0x7f0000001780)=[{0x0}], 0x1) (async) symlink(&(0x7f0000001940)='./file0\x00', 0x0) sysctl$hw(&(0x7f0000001980)={0x6, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f00000019c0)=0x4) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) sysctl$kern(&(0x7f0000001a00)={0x1, 0x35}, 0x6, &(0x7f0000001a40)="e98f40919815fe3b0d482cd811439e57ce1055267eae31dfdeb4695f32fe7b7ad86f86b9026db90fe845d9c0dfe6f336cdbed0b1e950bfb71d22c07e5c22db4f33c6f7a1a977bd427184cb97988cb67b8177f6e039bda806b77d27", &(0x7f0000001ac0)=0x60, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @random="1a614393aeb6", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3a, 0x2c, 0x6a, 0xc, 0x1, 0x2, 0x0, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@end]}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x7f, 0x0, 0xf}}}}}}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) seteuid(0xffffffffffffffff) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$audio(r4, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x4810, 0xffffffffffffffff, 0x2d) socket$inet(0x2, 0x2, 0x0) 5.533051851s ago: executing program 2 (id=3): mknod(&(0x7f0000000100)='./file0\x00', 0x2050, 0x674) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x8) pselect(0xf, 0x0, 0x0, &(0x7f00000001c0)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) ioctl$TIOCSDTR(r0, 0x20007479) mknod(&(0x7f0000000000)='./file0\x00', 0xa08c, 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCOSFPFLUSH(r1, 0x2000444e) r2 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r3, 0x20007461, 0x0) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async, rerun: 32) r4 = socket$inet6(0x18, 0x3, 0x7) (async, rerun: 32) r5 = socket$inet6(0x18, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000280)="402b94981df9b994e7e72f0ef8f72b9399e93a12a79c1da87774fb610583798f70192a9148ba25e492de73d767428d146283cd664eefaa0501115c3ad5cb7d4615862ad30ce3287851dde24623b7df4891399ad31246df06fb62ab09f638efa3d78b5b072d6b37f72012a464cd63953c6836a8b97067fa1a768f7ae3da014cda699cbc89808bbc200b3bdf797f44db9d28e1e949273e0f32c118806259cad5dcb52caf661bc8a90b722ae297397e7870", 0xb0, 0x6, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0xfffffffd, "d791f719cf60bd0b94507f5c224f85f7", 0xb}, 0x1c) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$DIOCXEND(r6, 0xc0044464, &(0x7f00000000c0)=0x33) ioctl$AUDIO_GETDEV(r2, 0x4030411b, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x3, 0x57) setsockopt(r7, 0x0, 0x24, &(0x7f00000004c0), 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000400)='./file0\x00', 0x4, 0x208, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0x4000101a, 0x0) (async) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000240)={&(0x7f0000000380)=[{0x100, 0x1}, {0x25, 0x6}], 0x2}) (async) recvmmsg(r4, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0xffffffffffffff03, 0x2000, &(0x7f00000027c0)={0x16f5, 0x5f}) 5.532055409s ago: executing program 5 (id=88): execve(0x0, &(0x7f0000000040)=[&(0x7f0000000080)='//\x00'], 0x0) (async) semget(0x1, 0x0, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x246) (async) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x25, &(0x7f0000000000), 0x4) 5.156535867s ago: executing program 1 (id=131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) (async) r1 = getpgid(0xffffffffffffffff) (async, rerun: 64) fstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r3 = getegid() sendmsg$unix(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c00), 0x0, &(0x7f0000000100)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}], 0x18, 0x409}, 0x2) 4.67933293s ago: executing program 3 (id=133): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) pselect(0x40, &(0x7f0000000240)={0xe, 0x4, 0x8, 0xb0c, 0x2, 0xb50, 0x7, 0x3bc0bd89}, 0x0, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000280)=0x7ff) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = getpid() fcntl$setown(r1, 0x6, r2) fcntl$setown(r1, 0x6, r2) r3 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r3, 0x2, 0x5, 0x0) r4 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r4, 0x80206979, &(0x7f0000000300)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x8, "ff01000000010000fb0f000800", 0x803}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x3, "ff37e132be7600", 0x7}, 0x1c) sysctl$hw(&(0x7f0000000180)={0x6, 0x6}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0) sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000180), 0xfffffffffffffe64) r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$inet6(0x18, 0x1, 0x1) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) 4.678909577s ago: executing program 4 (id=76): mkfifo(&(0x7f0000000240)='./file0\x00', 0x8) (async, rerun: 32) r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) (rerun: 32) connect$unix(r0, &(0x7f0000000100)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) (async) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r1 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000290000002a000000801b000001"], 0x20}, 0x402) (async, rerun: 32) setresuid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setresuid(0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x1, 0x6) (async) r3 = kqueue() kevent(r3, &(0x7f0000001680)=[{{}, 0xfffffffffffffff9, 0x9, 0x13, 0x0, 0xffffffffffffffff}], 0x1, 0x0, 0x5215, 0x0) (async) closefrom(r2) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001640)="04000000", 0x4) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0x1cc) ppoll(&(0x7f0000000340)=[{r4, 0x4}], 0x1, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet(0x2, 0x3, 0xfe) (async) r7 = socket$inet(0x2, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0x1000}, 0x1}, 0x38, 0x2802, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0xb, &(0x7f0000001380)={0x10, 0x2, 0x2, 0x4}, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async, rerun: 64) setsockopt$sock_int(r7, 0xffff, 0x800, &(0x7f00000013c0)=0x4, 0x4) setsockopt(r7, 0x0, 0x7, &(0x7f0000001400)="0784fc81", 0x4) (async) sendmsg(r6, &(0x7f0000001440)={&(0x7f0000001480)=@in={0x10, 0x2, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0xa0}, 0x400) (async) sysctl$kern(&(0x7f00000014c0)={0x1, 0x37}, 0x2, &(0x7f0000001500)="624e27f6ecc28cf85e9960b325d5c24b0b6796a9b3af7f564015992ca8fc233ed4a7d2637c12a874feb3773130c9c6fce482474af3ad6b37286ecd681b798c8806c5653162b0000069cf22a7439e9d4d7c5a9e7c4c534af6f6461be335fb1fca7a10b7bdb26939687f1c5b9ea3008799ab22d1def7312a9fc163061561db3ea057d9c963f83590827c25adf2ea4145dd0f8aec95fa4c0e37435102f4b978cb1355d4886dbb4841c4b16eb14fd26aa864cfdd125a7af53e02bf6fdd8fdcde8731625c8a654cb34c30078a843c767440c085bef207d8e32df7e22c97dbf28d553d80aa96f3", &(0x7f0000001600)=0xe4, 0x0, 0x0) (async) read(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0x80047308, &(0x7f0000000040)={0x0, 0x0, 0x4}) 3.41811155s ago: executing program 0 (id=128): mkfifo(0x0, 0x8) (async) r0 = semget$private(0x0, 0x3, 0x570) (async) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0xffffffffffffffff, r1, 0x0, r2, 0x146, 0xfffa}, 0x0, 0x4, 0x0, 0x0, 0x6a1fdb56, 0x0, 0x4000005c}) (async) setresgid(r3, r2, 0x0) setgroups(0x0, 0x0) (async) seteuid(0xffffffffffffffff) (async) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000200)) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x61, 0xdd, 0xe, 0x9}, {0x6, 0x25, 0x0, 0x5}]}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 64) syz_emit_ethernet(0xc8, &(0x7f0000000480)=ANY=[]) (rerun: 64) 3.357870813s ago: executing program 1 (id=131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) (async) r1 = getpgid(0xffffffffffffffff) (async, rerun: 64) fstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r3 = getegid() sendmsg$unix(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c00), 0x0, &(0x7f0000000100)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}], 0x18, 0x409}, 0x2) 3.357582841s ago: executing program 2 (id=3): mknod(&(0x7f0000000100)='./file0\x00', 0x2050, 0x674) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x8) pselect(0xf, 0x0, 0x0, &(0x7f00000001c0)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) ioctl$TIOCSDTR(r0, 0x20007479) mknod(&(0x7f0000000000)='./file0\x00', 0xa08c, 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCOSFPFLUSH(r1, 0x2000444e) r2 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r3, 0x20007461, 0x0) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async, rerun: 32) r4 = socket$inet6(0x18, 0x3, 0x7) (async, rerun: 32) r5 = socket$inet6(0x18, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000280)="402b94981df9b994e7e72f0ef8f72b9399e93a12a79c1da87774fb610583798f70192a9148ba25e492de73d767428d146283cd664eefaa0501115c3ad5cb7d4615862ad30ce3287851dde24623b7df4891399ad31246df06fb62ab09f638efa3d78b5b072d6b37f72012a464cd63953c6836a8b97067fa1a768f7ae3da014cda699cbc89808bbc200b3bdf797f44db9d28e1e949273e0f32c118806259cad5dcb52caf661bc8a90b722ae297397e7870", 0xb0, 0x6, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0xfffffffd, "d791f719cf60bd0b94507f5c224f85f7", 0xb}, 0x1c) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$DIOCXEND(r6, 0xc0044464, &(0x7f00000000c0)=0x33) ioctl$AUDIO_GETDEV(r2, 0x4030411b, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x3, 0x57) setsockopt(r7, 0x0, 0x24, &(0x7f00000004c0), 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000400)='./file0\x00', 0x4, 0x208, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0x4000101a, 0x0) (async) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000240)={&(0x7f0000000380)=[{0x100, 0x1}, {0x25, 0x6}], 0x2}) (async) recvmmsg(r4, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0xffffffffffffff03, 0x2000, &(0x7f00000027c0)={0x16f5, 0x5f}) 3.357114635s ago: executing program 3 (id=134): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x19083084ca9cf73d, 0x22) r2 = getppid() ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x40004604, r2) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$FIOSETOWN(0xffffffffffffffff, 0x80047476, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x25, 0x0, 0xffffff02) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000240)='./file0\x00', 0x9, 0x2, 0xe, 0xe4b1, 0x0}) closefrom(r3) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$VNDIOCSET(r5, 0x44946472, 0x0) ioctl$DIOCGETTIMEOUT(0xffffffffffffffff, 0xc008441e, 0x0) r6 = getppid() kill(r6, 0x13) sysctl$net_inet6_icmp6(&(0x7f0000000180)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0x215) r7 = setsid() seteuid(0xffffffffffffffff) fcntl$setown(r0, 0x6, r7) read(r0, 0x0, 0x0) r8 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0x3d, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x7fffffff, "fff10000006708b75f627e7f450055d9", 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r9 = msgget$private(0x0, 0x81) msgctl$IPC_SET(r9, 0x1, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x100, 0xe, 0x1}, 0x0, 0x0, 0x8, 0x13, 0x2, 0x0, 0x0, 0xcdec, 0x0, 0x8, 0x0, 0x2}) 3.356582808s ago: executing program 5 (id=88): execve(0x0, &(0x7f0000000040)=[&(0x7f0000000080)='//\x00'], 0x0) (async) semget(0x1, 0x0, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x246) (async) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x25, &(0x7f0000000000), 0x4) 3.356415892s ago: executing program 6 (id=97): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = getppid() r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_open_pts() sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) (async) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) (async) getppid() (async) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) (async) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x6, 0x62, r1, 0x1, 0x1}) (async) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async) syz_open_pts() (async) sendto$unix(r2, &(0x7f0000000100)="df16d89e79d84190d0d0b945ba89b35a6aeabb8bd669b591f9151d0e0d4c008fab665d2c2f03188702a30366b2143e08e1512a275d4a157f558030eb50de62dcec575d7993d2bc963a81d8f272a74b38b4b6760738173d20d1d9da932ceb889eefc95be4917e6bda8fdcc03c40e49061669fc04d85efe736497e1207be216cfea38620f309c47e7a1f8a3261f59fc95b564729557d7ae4ad2c19fe652fd078319ae245a1dcf2cefcd4c585dd82cd11d2fd57", 0xb2, 0x400, 0x0, 0x0) (async) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) (async) 3.356072304s ago: executing program 7 (id=126): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x148) (async) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045da001c0068000005339078ff17ffffac1400bb1d1b2de900080001"]) (async) chmod(&(0x7f0000000200)='./file0\x00', 0x39d) (async) seteuid(0xffffffffffffffff) (async, rerun: 32) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x10) (async, rerun: 32) sysctl$kern(&(0x7f0000000380)={0x1, 0x34}, 0x2, 0x0, 0x0, &(0x7f00000003c0), 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCSETHOSTID(r0, 0xc0044456, &(0x7f0000000580)=0x1) sysctl$net_inet6_ip6(&(0x7f00000016c0)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000001700), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x1b}, 0x2, &(0x7f0000000140)="677734a5a7215ee428d8874e54069d4fc19be7388dd0d11b904e452861a7eeec8d1928424a4cf81dc9fa8cef897e675da98747d4e6c98fba5c80dc7201639c0a3659dff636d65274ac1909cc", &(0x7f0000000480)=0x4c, &(0x7f00000004c0)="660993ea4556096128dbecbfff5d40f0cde7c7eb26239ab388db61af7feed1cf39b767738731ed743d034d6702b459e76aeb03868ba0400fa75c0a14c964eb37013d93", 0x43) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0xe1) (async) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000001240)={{'./file1\x00', './file0/file0\x00', 0x62}, &(0x7f00000005c0)=[{'./file0\x00', './file0/file1\x00', 0x34, 0x3}, {'./file0\x00', './file0/file1\x00', 0x28, 0x3}, {'./file0/file0\x00', './file0/file2\x00', 0xa, 0x4}], 0x1a7, 0x3, 0xb1f9, 0x5, 0x2424, 0x9, 0x38, 0x57a}) (async, rerun: 64) rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file1\x00') (async, rerun: 64) open(&(0x7f0000000080)='./file0\x00', 0x19083084ca9cf73d, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) minherit(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) (async) setgroups(0x0, 0xffffffffffffffff) (async, rerun: 64) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0xc}, 0x4, 0x0, 0x0, &(0x7f00000003c0)="62213bccb95428a86479fd1495f5945d5ca7c593a9ee123c5053857e09ec7583570478b80604aacdf345bdde9d70a354abfee825bef4d630a63f59b8c3cf4ed1f150309cfa29d36a0652a3f8b9447d2374e94920b13d8a7c88f666d8f2b64eab9f59f57c22eb586099cd36fe675ac9985b3267fa8eb5f2bf181e00"/133, 0x85) (rerun: 64) 3.347411527s ago: executing program 3 (id=135): r0 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0x4dbd, 0x5, 0x402, 0x5, "d590922741259bb176db88c05e3225c0b2650524", 0xb}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0xc, 0x1, '\x00'}, 0x3) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000100)=0x215) open(&(0x7f0000000140)='./file0\x00', 0x200, 0x1ca) socket$unix(0x1, 0x2, 0x0) pselect(0x40, &(0x7f0000000200)={0xe0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x9, 0x18}, &(0x7f0000000240)={0xff, 0xfffffffffffffefe, 0x10000, 0x5, 0x0, 0x8, 0x3, 0xd}, 0x0, 0x0, 0x0) closefrom(r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x4000101a, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x19b) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r4 = dup2(r3, r3) ioctl$WSKBDIO_SETMODE(r4, 0x80045713, &(0x7f0000000300)=0x1) setuid(0xffffffffffffffff) ktrace(&(0x7f00000001c0)='./file0\x00', 0x2, 0x40000120, 0x0) 3.088250478s ago: executing program 7 (id=136): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmmsg(r1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}, 0x38, 0x0) fcntl$lock(r0, 0x9, &(0x7f00000008c0)={0x2, 0x0, 0xffffffffffffffff, 0x2000100000001}) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x7f) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x3, 0x800) 3.087184937s ago: executing program 7 (id=137): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0x0) lseek(r1, 0x8000000000000000, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="5a658d8d3bc3f3bc2387aa3bea1a0d544ad38b2f3b610a7930afbb0aa3345c13e67025e13f28f4ebcf13142d1e6b14dd53277791238c253616a478ada25270300bc282452d1113a0b3d2296717f09bbd47c18e8c895f0728cdcfcd090ebfa1", 0x5f}], 0x1) 2.537202292s ago: executing program 3 (id=138): sysctl$kern(&(0x7f0000000200)={0x1, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000d9000/0x4000)=nil, 0x4000, 0x4) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$ddb(&(0x7f0000000240)={0x9, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000300)="c392c3e131819df132e1fc8a4153e33c899f9b782b146e2f698efcebd787658aea0c307a8385ff339a68af1bea4d801e6a49d3a5579b87a8bb200ab9f9f4dbb9d7000000e9ff080dcfe91b9ff64caa0bdfaaef26b69d01de58fac2b959f2af3da73594587bc7595214dec7ca9c9e8f83fb7e93caacd20d5b1e7ded781cc02db30fed03d1e7299a1c57eff3505c058703081df060fa95f763f76b18a1f865fe2325c2", 0xa2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x20e4328c) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x80000000, 0x0) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto(r0, &(0x7f0000000100)="4b6057930742fbb3066b0277d7295839e75f822f79ca6bd7256e778f0d8c532147dbb478476268cf728146c05872d110d67428ee7a1bd963125eb541c4b38bcd9bb99a492c8fd6f1cf041c4984609b5fb32ddb8efc031a514d35cb23888b7bf44f0d89f682630145c3261ec0c7bf201a4ae3586ab544b66e8afaafe14098b0b3ba50abc62692a99bff9f64c689cdf720b5e5dc0b64d6f50c80903074bdd603b0e4908fb045aa885d919c163faa1f828b173b70cfbdae44d3f870b2ff43fe74957be299b9e9bf127a19e3a886fe15f9ad2cfaa5affe94c8f28aedcc22c617adc9a891fafe62817b68892065c21dc454c6fbfbefb29c", 0xf5, 0x5, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5386) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) sysctl$ddb(&(0x7f0000000280)={0x9, 0x3}, 0x2, &(0x7f00000003c0)="c2c4738e7536379a9f8cbd2f40df7f52e443f1ba51fa853fe692b6a43d3270feb2ba827bf9d7440a182cad87d3e54ae0249b6ea4c8eabdf4a1690dbfb94403dcba392ec7928929a280e1091a693815c88c21acdf745e29c1847b803408877d1f77df88ea945fd2827db1ea41a03746fb15340f7dfb5d298cd44f0f9e19c64b89416f664b346427dac903fbbf324156438849d9dc73fde8327e468c8b75a3f19542d4163432cdc05ab7b7599095d79ab5", &(0x7f0000000480)=0xb0, &(0x7f00000004c0)="e7853ef35a76e73580ab41c187e18e46ebe1de8fd216d8269511e6fcc356f1cb93d41a3f97385c742ae3f7c55b8ecc970adab507a2aea008ccae95b2b9f0005f5b8030ee8bcd87d57063fa1acfa61a8500aaab967b8da8f1c055bd470e546189ce2055b926b7c82efefe8ec426ddb4a4ba94f8f9d56174505e26f18279cb9e2a02f7ec3eb745265237d17912d3ae883bc78e026bbe4afa08be1cc67f44435a9489af4d7e697bdcf9cc0563c7cac0742049e6d5e3704ad21645018f9d33108b0526a6a3ded660e40d993ef713d45a44c28885", 0xd2) 2.536510241s ago: executing program 7 (id=139): mkfifo(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) unveil(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000008c0)='r\x00') pipe(&(0x7f0000000580)) (async) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000005c0)) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000005c0)) open(&(0x7f0000000000)='./file0\x00', 0x19083084ca9cf73d, 0x1ff) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x19083084ca9cf73d, 0x1ff) sysctl$kern(&(0x7f0000000080)={0x1, 0x4b}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x4b}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$DIOCIGETIFACES(r2, 0xc0284457, &(0x7f0000000100)={'./file1aaaaaaaaa', 0x0, 0xfffffff9, 0xe, 0x2, 0x7}) umask(0x7) (async) umask(0x7) socket$inet(0x2, 0x3, 0x2) (async) r3 = socket$inet(0x2, 0x3, 0x2) write$audio(r1, &(0x7f0000000600)="f736665e44d6d838f2b5d1350f973f72597efbbeeb828f3edb058cc9c74721113614be75df74bf57ffbdc65be929e0b573d3144263a4f41efe4ea34473fc6a327d4036a1f5fd360b2ce810121a3417d3dd60c4eca7f2970ad8e5e358869e4ab2b06bbec890978d95ee1ec882e994f38ae976af3e4bb2d2380e5f0c9a21768ffa724dcb12a8abe549aec29c898fdfcaa4ca5564ffe8b604a0e1be751b095f8ad02b00ee1ab8d60377bcd9ac24c1d93ee89fecd55f5673b4047b56f141061c80911530ee51deae7f385d242908714cb76aaf1b387cf27141ce8acbb1b992fc2eb0ca196c8c28359c833ec49f", 0xeb) setsockopt(r3, 0x0, 0x13, &(0x7f0000000340)="9a350700", 0x4) getpeername(r3, &(0x7f0000000380)=@in, &(0x7f00000003c0)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000000400)={'./file1aaaaaaaaa\x00', 0xa, 0x2, 0x2, 0x1, 0x5c98, 0x0, 0x2, 0x2, 0x2, 0x17b, 0x2}) chown(&(0x7f0000000300)='./file0\x00', r5, r6) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x2, r6, 0x1008100000001, 0x1}) rename(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 880.589595ms ago: executing program 0 (id=128): mkfifo(0x0, 0x8) (async) r0 = semget$private(0x0, 0x3, 0x570) (async) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0xffffffffffffffff, r1, 0x0, r2, 0x146, 0xfffa}, 0x0, 0x4, 0x0, 0x0, 0x6a1fdb56, 0x0, 0x4000005c}) (async) setresgid(r3, r2, 0x0) setgroups(0x0, 0x0) (async) seteuid(0xffffffffffffffff) (async) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000200)) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x61, 0xdd, 0xe, 0x9}, {0x6, 0x25, 0x0, 0x5}]}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 64) syz_emit_ethernet(0xc8, &(0x7f0000000480)=ANY=[]) (rerun: 64) 704.766615ms ago: executing program 1 (id=131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) (async) r1 = getpgid(0xffffffffffffffff) (async, rerun: 64) fstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r3 = getegid() sendmsg$unix(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c00), 0x0, &(0x7f0000000100)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}], 0x18, 0x409}, 0x2) 704.288225ms ago: executing program 2 (id=3): mknod(&(0x7f0000000100)='./file0\x00', 0x2050, 0x674) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x8) pselect(0xf, 0x0, 0x0, &(0x7f00000001c0)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) ioctl$TIOCSDTR(r0, 0x20007479) mknod(&(0x7f0000000000)='./file0\x00', 0xa08c, 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCOSFPFLUSH(r1, 0x2000444e) r2 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r3, 0x20007461, 0x0) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async, rerun: 32) r4 = socket$inet6(0x18, 0x3, 0x7) (async, rerun: 32) r5 = socket$inet6(0x18, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000280)="402b94981df9b994e7e72f0ef8f72b9399e93a12a79c1da87774fb610583798f70192a9148ba25e492de73d767428d146283cd664eefaa0501115c3ad5cb7d4615862ad30ce3287851dde24623b7df4891399ad31246df06fb62ab09f638efa3d78b5b072d6b37f72012a464cd63953c6836a8b97067fa1a768f7ae3da014cda699cbc89808bbc200b3bdf797f44db9d28e1e949273e0f32c118806259cad5dcb52caf661bc8a90b722ae297397e7870", 0xb0, 0x6, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0xfffffffd, "d791f719cf60bd0b94507f5c224f85f7", 0xb}, 0x1c) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$DIOCXEND(r6, 0xc0044464, &(0x7f00000000c0)=0x33) ioctl$AUDIO_GETDEV(r2, 0x4030411b, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x3, 0x57) setsockopt(r7, 0x0, 0x24, &(0x7f00000004c0), 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000400)='./file0\x00', 0x4, 0x208, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0x4000101a, 0x0) (async) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000240)={&(0x7f0000000380)=[{0x100, 0x1}, {0x25, 0x6}], 0x2}) (async) recvmmsg(r4, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0xffffffffffffff03, 0x2000, &(0x7f00000027c0)={0x16f5, 0x5f}) 703.765522ms ago: executing program 3 (id=140): open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x2a1a, 0x0) recvmmsg(r1, &(0x7f0000001300)={{&(0x7f00000010c0)=@un=@abs, 0x8, &(0x7f0000000300)=[{&(0x7f0000000080)=""/12}, {&(0x7f0000000340)=""/195}, {&(0x7f00000001c0)=""/120}], 0x10000000000002b0, &(0x7f00000000c0)=""/51, 0x11}, 0x5}, 0x38, 0x1061, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0xfed) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x8, 0x2) (async) setsockopt(r0, 0x81, 0xf7, &(0x7f0000000000)="ec7d02b180", 0x5) 702.860129ms ago: executing program 4 (id=76): mkfifo(&(0x7f0000000240)='./file0\x00', 0x8) (async, rerun: 32) r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) (rerun: 32) connect$unix(r0, &(0x7f0000000100)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) (async) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r1 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000290000002a000000801b000001"], 0x20}, 0x402) (async, rerun: 32) setresuid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setresuid(0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x1, 0x6) (async) r3 = kqueue() kevent(r3, &(0x7f0000001680)=[{{}, 0xfffffffffffffff9, 0x9, 0x13, 0x0, 0xffffffffffffffff}], 0x1, 0x0, 0x5215, 0x0) (async) closefrom(r2) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001640)="04000000", 0x4) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0x1cc) ppoll(&(0x7f0000000340)=[{r4, 0x4}], 0x1, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet(0x2, 0x3, 0xfe) (async) r7 = socket$inet(0x2, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0x1000}, 0x1}, 0x38, 0x2802, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0xb, &(0x7f0000001380)={0x10, 0x2, 0x2, 0x4}, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async, rerun: 64) setsockopt$sock_int(r7, 0xffff, 0x800, &(0x7f00000013c0)=0x4, 0x4) setsockopt(r7, 0x0, 0x7, &(0x7f0000001400)="0784fc81", 0x4) (async) sendmsg(r6, &(0x7f0000001440)={&(0x7f0000001480)=@in={0x10, 0x2, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0xa0}, 0x400) (async) sysctl$kern(&(0x7f00000014c0)={0x1, 0x37}, 0x2, &(0x7f0000001500)="624e27f6ecc28cf85e9960b325d5c24b0b6796a9b3af7f564015992ca8fc233ed4a7d2637c12a874feb3773130c9c6fce482474af3ad6b37286ecd681b798c8806c5653162b0000069cf22a7439e9d4d7c5a9e7c4c534af6f6461be335fb1fca7a10b7bdb26939687f1c5b9ea3008799ab22d1def7312a9fc163061561db3ea057d9c963f83590827c25adf2ea4145dd0f8aec95fa4c0e37435102f4b978cb1355d4886dbb4841c4b16eb14fd26aa864cfdd125a7af53e02bf6fdd8fdcde8731625c8a654cb34c30078a843c767440c085bef207d8e32df7e22c97dbf28d553d80aa96f3", &(0x7f0000001600)=0xe4, 0x0, 0x0) (async) read(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0x80047308, &(0x7f0000000040)={0x0, 0x0, 0x4}) 702.824126ms ago: executing program 5 (id=88): execve(0x0, &(0x7f0000000040)=[&(0x7f0000000080)='//\x00'], 0x0) (async) semget(0x1, 0x0, 0x10) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x246) (async) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x25, &(0x7f0000000000), 0x4) 702.514123ms ago: executing program 7 (id=141): mlock(&(0x7f0000fec000/0x11000)=nil, 0x11000) (async) mlock(&(0x7f0000fec000/0x11000)=nil, 0x11000) r0 = socket$inet6(0x18, 0x1, 0x6) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x1) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x1}, {r0, 0x80}, {r0, 0x80}, {r0, 0x100}], 0x4, 0x3) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0xc012, r0, 0x4) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 488.559008ms ago: executing program 0 (id=142): mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x2e, &(0x7f0000000000), 0x14) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x8, "7d42f401513dfe7cf2a49ba3cb175673", 0x31ce}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x1004, '\x00', 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x7, '\x00', 0xffff}, 0x1c) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async) socket$inet6(0x18, 0x2, 0x0) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x2e, &(0x7f0000000000), 0x14) (async) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x8, "7d42f401513dfe7cf2a49ba3cb175673", 0x31ce}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x1004, '\x00', 0x2}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x7, '\x00', 0xffff}, 0x1c) (async) 474.922281ms ago: executing program 1 (id=143): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xffff6383) ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x82907003, &(0x7f00000000c0)=0x2) 15.868363ms ago: executing program 0 (id=144): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, &(0x7f0000000080)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2704000000e1ffffffffffffff0000000000", &(0x7f0000000100)=0x68, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x84, 0xf2, 0x4, 0x4}, {0x6, 0x8, 0x3, 0xc3c}]}) symlink(0x0, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCSETIFFLAG(r0, 0xc0284459, &(0x7f0000000440)={'./file0aaaaaaaaa', 0x0, 0x15, 0x3, 0xfff, 0xc}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) setrlimit(0x3, &(0x7f00000001c0)={0x100000, 0x100000}) syz_emit_ethernet(0x243, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa03aaaaaaaa86dd6f75184a020d3a7c39bc48e57db8883fa6958273532df404fe8000000000000000000000000000aa02009078000000086a0e1d10ffff0281fe80000000020000ff010000000000aa"]) 1.933912ms ago: executing program 1 (id=145): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x8003, 0x1) setrlimit(0x8, &(0x7f0000000000)={0x9, 0x37e1690f}) mknod(&(0x7f0000001100)='./file0\x00', 0x2008, 0x1ea8) open(&(0x7f0000001140)='./file0\x00', 0x8, 0x2) syz_open_pts() open(&(0x7f0000001180)='./file0\x00', 0x8, 0x50) pselect(0x40, &(0x7f00000011c0)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, &(0x7f0000001200)={0xff, 0xffffffffffffff00, 0x7ff, 0x5, 0x0, 0xf, 0x2, 0xa}, 0x0, 0x0, 0x0) pselect(0x40, &(0x7f0000001240)={0x8b, 0x1264b28f, 0xa5f, 0x4, 0xe6, 0x48e1e8fe, 0x1fffc0, 0x7}, &(0x7f0000001280)={0x77, 0x0, 0x80, 0x80000000, 0x4, 0x7f, 0x7, 0xfff}, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4100, 0x1004}], 0x1) 0s ago: executing program 3 (id=146): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x0, 0x5, 0xe1, 0x10}, {0x1, 0x3, 0x18, 0xb342}, {0x6, 0xbe, 0x8, 0x1}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) getgroups(0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r3, r1, 0x0) setresgid(0x0, r1, r2) syz_emit_ethernet(0x300, &(0x7f0000000140)=ANY=[]) sysctl$hw(&(0x7f0000000040)={0x6, 0x4}, 0x400001c4, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. pckbd_enable: command error vnd0: sloppy read from proc 81798 (syz-executor): blkno 0 bcount 4100 witness: lock order reversal: 1st 0xffff800001bf94f0 vmmaplk (&map->lock) 2nd 0xffff800001d1d120 inode (&ip->i_lock) lock order [1] vmmaplk (&map->lock) -> [2] inode (&ip->i_lock) #0 rw_do_enter_write+0xc4 #1 rrw_enter+0xf0 #2 VOP_LOCK+0x17e #3 vn_lock+0xca #4 vn_rdwr+0x138 #5 vndstrategy+0x8e4 #6 physio+0x581 #7 spec_read+0x29a #8 VOP_READ+0x1a8 #9 vn_read+0x1fc #10 dofilereadv+0x386 #11 sys_readv+0x168 #12 syscall+0x1089 #13 Xsyscall+0x128 lock order [2] inode (&ip->i_lock) -> [1] vmmaplk (&map->lock) #0 rw_do_enter_read+0x8b #1 uvmfault_lookup+0x1a2 #2 uvm_fault_check+0x43 #3 uvm_fault+0x1e7 #4 kpageflttrap+0x41e #5 kerntrap+0x1b6 #6 alltraps_kern_meltdown+0x7b #7 copyout+0x59 #8 ffs_read+0x701 #9 VOP_READ+0x1a8 #10 vn_rdwr+0x1bc #11 vmcmd_map_readvn+0x20a #12 exec_process_vmcmds+0x164 #13 sys_execve+0x1354 #14 start_init+0x5fb #15 proc_trampoline+0x10 Stopped at db_enter+0x17: popq %rbp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 witness_checkorder(ffff800001d1d120,9,0) at witness_checkorder+0x19db rw_do_enter_write(ffff800001d1d108,1) at rw_do_enter_write+0xc4 rrw_enter(ffff800001d1d108,1) at rrw_enter+0xf0 VOP_LOCK(ffff800001d1e110,2001) at VOP_LOCK+0x17e vn_lock(ffff800001d1e110,2001) at vn_lock+0xca vn_rdwr(0,ffff800001d1e110,ffff800011b060c0,1004,0,1,ffff800000d9b5b8,ffff800001d4f998,ffff800001d4fa08,ffff800028fd3ff0) at vn_rdwr+0x138 vndstrategy(ffff800001d4f998) at vndstrategy+0x8e4 physio(ffffffff83c7e780,2902,8000,ffffffff833ec6c0,ffff8000299d5760) at physio+0x581 spec_read(ffff8000299d54a0) at spec_read+0x29a VOP_READ(ffff800001972b00,ffff8000299d5760,0,ffff8000001193a8) at VOP_READ+0x1a8 vn_read(ffff800001c81048,ffff8000299d5760,0) at vn_read+0x1fc dofilereadv(ffff800045ff5778,3,ffff8000299d5760,0,ffff8000299d5920) at dofilereadv+0x386 sys_readv(ffff800045ff5778,ffff8000299d59b0,ffff8000299d5920) at sys_readv+0x168 syscall(ffff8000299d59b0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x37df7e504f0, count: -16 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff8000299d4ba0 rbx 0xffffffff84991460 .str.41 rdx 0xffff80000015a700 rcx 0x7ffff acpi_pdirpa+0x6be70 rax 0xffff8000332c3000 r8 0xffff8000299d4980 r9 0xffff8000299d4920 r10 0x1004 __ALIGN_SIZE+0x4 r11 0xffffffff821db0c0 x86_bus_space_io_read_1 r12 0xffffffff84a296e0 ffs_vget.__lock_type r13 0xffff800001bf94f0 r14 0x3 r15 0xffffffff84a29720 .str.13 rip 0xffffffff8107c237 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff8000299d4ba0 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=212401 pid=81798 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=81, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ff4fb0,0xffff800045ffcfb8 process=0xffff800045ff26e0 user=0xffff8000299ca000, vmspace=0xffff800001bf93f0 estcpu=31, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 65042 298384 86110 0 2 0x2 0 sh 82950 136445 28754 0 7 0x2 0 ifconfig 28754 68330 76413 0 3 0x100002 0x88 sigsusp sh 81798 486221 14849 0 2 0 0 syz-executor *81798 212401 14849 0 7 0 0x4000000 syz-executor 76413 286241 9006 0 3 0x2 0x80 wait syz-executor 86110 278275 9006 0 3 0x2 0x80 wait syz-executor 77973 44025 9006 0 3 0x2 0x80 piperd syz-executor 14849 467833 9006 0 3 0x2 0x80 nanoslp syz-executor 1599 297040 9006 0 3 0x2 0x80 piperd syz-executor 280 41768 9006 0 3 0x2 0x80 piperd syz-executor 9006 189785 4290 0 3 0x2 0x80 nanoslp syz-executor 4290 320982 91742 0 3 0x100002 0x88 sigsusp ksh 91742 391059 83419 0 3 0x10 0x88 kqread sshd-session 83419 149217 77617 0 3 0x12 0x80 kqread sshd-session 92225 53632 1 0 3 0x100003 0x80 ttyin getty 77617 461623 1 0 3 0 0x88 kqread sshd 45654 253962 64120 74 3 0x1100012 0x80 bpf pflogd 64120 441253 1 0 3 0 0x80 sbwait pflogd 73414 122179 69098 73 3 0x1100010 0x80 kqread syslogd 69098 69281 1 0 3 0x100002 0x80 sbwait syslogd 50679 435095 1 0 3 0x100000 0x80 kqread resolvd 74755 208455 31088 77 3 0x100012 0x80 kqread dhcpleased 55222 68147 31088 77 3 0x100012 0x80 kqread dhcpleased 31088 340660 1 0 3 0 0x80 kqread dhcpleased 82572 38386 0 0 3 0x14000 0x200 bored smr 70895 179693 0 0 2 0x14000 0x200 zerothread 93000 501679 0 0 3 0x14000 0x200 aiodoned aiodoned 54902 95484 0 0 3 0x14000 0x200 syncer update 75412 469282 0 0 3 0x14000 0x200 cleaner cleaner 11098 168498 0 0 3 0x14000 0x200 reaper reaper 7215 482039 0 0 3 0x14000 0x200 pgdaemon pagedaemon 25367 185730 0 0 3 0x14000 0x200 bored viomb 17332 364 0 0 3 0x14000 0x40000200 acpi0 acpi0 18181 194301 0 0 3 0x14000 0x40000200 idle1 71013 39359 0 0 3 0x14000 0x200 bored softnet1 90278 521214 0 0 2 0x14000 0x200 softnet0 92158 319216 0 0 3 0x14000 0x200 smrbar systqmp 83667 121919 0 0 3 0x14000 0x200 bored systq 26879 40378 0 0 3 0x14000 0x200 tmoslp softclockmp 22911 418145 0 0 3 0x14000 0x40000200 tmoslp softclock 90388 520924 0 0 3 0x14000 0x40000200 idle0 1 3343 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 81798 (syz-executor) thread 0xffff800045ff5778 (212401) shared rwlock vmmaplk r = 0 (0xffff800001bf94f0) #0 witness_lock+0x632 #1 rw_do_enter_read+0x55d #2 uvm_vslock_device+0x1bc #3 physio+0x4a7 #4 spec_read+0x29a #5 VOP_READ+0x1a8 #6 vn_read+0x1fc #7 dofilereadv+0x386 #8 sys_readv+0x168 #9 syscall+0x1089 #10 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85609240) #0 witness_lock+0x632 #1 vn_read+0x83 #2 dofilereadv+0x386 #3 sys_readv+0x168 #4 syscall+0x1089 #5 Xsyscall+0x128 Process 92158 (systqmp) thread 0xffff800045ffe530 (319216) shared rwlock systqmp r = 0 (0xffffffff84f4ea98) #0 witness_lock+0x632 #1 taskq_thread+0x1ba #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11062 12298K 12394K 166960K 12347 0 pcb 17 26K 30K 166960K 149 0 rtable 170 11K 29K 166960K 1406 0 pf 33 22K 39K 166960K 132 0 ifaddr 32 9K 15K 166960K 192 0 ifgroup 47 2K 2K 166960K 205 0 sysctl 1 1K 13K 166960K 6 0 counters 66 41K 44K 166960K 146 0 ioctlops 0 0K 194K 166960K 1542 0 iov 0 0K 12K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1312 85K 89K 166960K 1832 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 16 1K 1K 166960K 21 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 405K 166960K 12470 0 file desc 14 44K 121K 166960K 849 0 sigio 0 0K 0K 166960K 2 0 proc 88 145K 183K 166960K 1570 0 subproc 63 7K 13K 166960K 405 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 6 0 in_multi 66 4K 8K 166960K 484 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 15 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 61 425K 425K 166960K 61 0 exec 6 1K 17K 166960K 856 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 220 238K 371K 166960K 7726 0 UVM aobj 6 8K 8K 166960K 6 0 pinsyscall 56 106K 381K 166960K 2929 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 18 0 NDP 10 0K 2K 166960K 136 0 temp 896 9243K 9478K 166960K 30748 0 kqueue 14 44K 84K 166960K 74 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 105 0 102 1 0 1 1 0 8 0 rtentry 176 497 0 431 6 0 6 6 0 8 1 unpcb 144 156 0 139 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 32 0 28 1 0 1 1 0 8 0 arp 136 88 0 78 1 0 1 1 0 8 0 inpcb 328 505 0 497 4 3 1 4 0 8 0 nd6 152 130 0 118 1 0 1 1 0 8 0 pkpcb 40 5 0 5 1 1 0 1 0 8 0 kcovpl 48 45 0 39 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 1 0 1 0 8 0 pfosfp 40 1428 0 1428 5 5 0 5 0 8 0 pfosfpen 112 1428 0 1428 21 13 8 21 0 8 8 pfrktable 1344 6 0 2 1 0 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfstitem 24 45 0 11 1 0 1 1 0 8 0 pfstkey 128 45 0 11 2 0 2 2 0 8 0 pfstate 448 45 0 11 5 0 5 5 0 8 0 pfrule 1360 23 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2004 0 1677 29 2 27 29 0 8 3 art_table 40 2005 0 1677 5 0 5 5 0 8 0 art_node 32 497 0 428 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 72 19 0 5 1 0 1 1 0 8 0 shmpl 120 3 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1896 0 338 98 0 98 98 0 8 0 ffsino 296 1896 0 338 120 0 120 120 0 8 0 nchpl 144 2347 0 496 69 0 69 69 0 8 0 vnodes 216 2407 0 0 134 0 134 134 0 8 0 namei 1024 12754 0 12754 3 2 1 2 0 8 1 percpumem 16 89 0 41 1 0 1 1 0 8 0 pfiaddrpl 120 3 0 0 1 0 1 1 0 8 0 kstatmem 264 103 0 82 2 0 2 2 0 8 0 scxspl 216 8816 0 8816 10 8 2 8 1 8 2 plimitpl 152 77 0 60 1 0 1 1 0 8 0 sigapl 424 1092 0 1049 7 1 6 7 0 8 0 knotepl 120 66 0 0 2 0 2 2 0 8 0 kqueuepl 224 93 0 83 1 0 1 1 0 8 0 pipepl 344 269 0 242 4 0 4 4 0 8 0 fdescpl 528 1076 0 1050 3 0 3 3 0 8 0 filepl 160 4046 0 3859 11 1 10 11 0 8 1 lockfpl 104 95 0 93 1 0 1 1 0 8 0 lockfspl 48 40 0 38 1 0 1 1 0 8 0 sessionpl 144 71 0 62 1 0 1 1 0 8 0 pgrppl 48 117 0 101 1 0 1 1 0 8 0 ucredpl 104 294 0 280 1 0 1 1 0 8 0 zombiepl 144 1050 0 1049 1 0 1 1 0 8 0 processpl 1240 1092 0 1049 5 0 5 5 0 8 1 procpl 664 1476 0 1432 6 0 6 6 0 8 1 sosppl 176 3 0 3 1 1 0 1 0 8 0 sockpl 752 779 0 751 7 3 4 7 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mextrefs 64 21 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 229 0 0 15 0 15 15 0 8 0 bufpl 272 3013 0 106 194 0 194 194 0 8 0 anonpl 32 5663 0 0 46 0 46 46 0 222 0 amapchunkpl 152 21580 0 21288 24 0 24 24 0 158 8 amappl16 200 2039 0 2024 5 3 2 5 0 8 0 amappl15 192 16 0 16 1 1 0 1 0 8 0 amappl14 184 861 0 858 1 0 1 1 0 8 0 amappl13 176 215 0 203 1 0 1 1 0 8 0 amappl12 168 1480 0 1457 2 0 2 2 0 8 0 amappl11 160 23 0 21 1 0 1 1 0 8 0 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 272 0 272 1 1 0 1 0 8 0 amappl8 136 261 0 258 1 0 1 1 0 8 0 amappl7 128 230 0 216 1 0 1 1 0 8 0 amappl6 120 512 0 507 1 0 1 1 0 8 0 amappl5 112 108 0 98 1 0 1 1 0 8 0 amappl4 104 400 0 381 1 0 1 1 0 8 0 amappl3 96 3952 0 3887 3 0 3 3 0 8 0 amappl2 88 1107 0 1039 2 0 2 2 0 8 0 amappl1 80 15811 0 15225 16 2 14 15 0 8 0 amappl 88 6372 0 6270 4 0 4 4 0 92 0 uvmvnodes 80 110 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 1076 0 1050 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1076 0 1050 1 0 1 1 0 8 0 vmmpekpl 168 10676 0 10626 3 0 3 3 0 8 0 vmmpepl 168 77851 0 76287 91 6 85 91 0 357 5 vmsppl 488 1075 0 1050 5 0 5 5 0 8 0 rwobjpl 80 24483 0 23523 26 2 24 25 0 8 1 pdppl 4096 2161 0 2100 143 72 71 89 0 8 10 pvpl 32 14504 0 0 117 0 117 117 0 265 0 pmappl 256 1075 0 1050 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 522 0 80 14 0 14 14 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave ddb{0}> trace x86_ipi_db(ffffffff84f6eff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 statclock(ffffffff84f6fe10,ffff800029a05c60,0) at statclock+0x257 clockintr_dispatch(ffff800029a05c60) at clockintr_dispatch+0x728 lapic_clockintr(0,0) at lapic_clockintr+0xdc Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a __mp_lock(ffffffff85608a40) at __mp_lock+0x272 intr_handler(ffff800029a05f40,ffff800000143700) at intr_handler+0x113 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __asan_load4_noabort(ffffffff85608a40) at __asan_load4_noabort softintr_dispatch(0) at softintr_dispatch+0x215 dosoftint(0) at dosoftint+0x7b Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff85608a40) at __mp_lock+0x272 syscall(ffff800029a06380) at syscall+0x1048 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7606afd95330, count: -17 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp ddb{1}> trace db_enter() at db_enter+0x17 witness_checkorder(ffff800001d1d120,9,0) at witness_checkorder+0x19db rw_do_enter_write(ffff800001d1d108,1) at rw_do_enter_write+0xc4 rrw_enter(ffff800001d1d108,1) at rrw_enter+0xf0 VOP_LOCK(ffff800001d1e110,2001) at VOP_LOCK+0x17e vn_lock(ffff800001d1e110,2001) at vn_lock+0xca vn_rdwr(0,ffff800001d1e110,ffff800011b060c0,1004,0,1,ffff800000d9b5b8,ffff800001d4f998,ffff800001d4fa08,ffff800028fd3ff0) at vn_rdwr+0x138 vndstrategy(ffff800001d4f998) at vndstrategy+0x8e4 physio(ffffffff83c7e780,2902,8000,ffffffff833ec6c0,ffff8000299d5760) at physio+0x581 spec_read(ffff8000299d54a0) at spec_read+0x29a VOP_READ(ffff800001972b00,ffff8000299d5760,0,ffff8000001193a8) at VOP_READ+0x1a8 vn_read(ffff800001c81048,ffff8000299d5760,0) at vn_read+0x1fc dofilereadv(ffff800045ff5778,3,ffff8000299d5760,0,ffff8000299d5920) at dofilereadv+0x386 sys_readv(ffff800045ff5778,ffff8000299d59b0,ffff8000299d5920) at sys_readv+0x168 syscall(ffff8000299d59b0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x37df7e504f0, count: -16