last executing test programs: 1.135137641s ago: executing program 3 (id=4): ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f0000000000)={0x10, 0x6, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffff80000000}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xd}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x93e}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x10001}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xc32}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x8000}], './file0\x00', 0xe, 0x7, 0x6, 0x1646, [0x3, 0x0, 0x3, 0x5, 0x3, 0x6, 0xd, 0x2, 0x9, 0x8, 0x0, 0x180000, 0x0, 0x100000, 0x3, 0x4, 0x8, 0x60000000, 0x509e, 0x9, 0x4, 0x8001, 0x0, 0x4, 0x6aa, 0x49, 0x200, 0x6, 0xf7, 0x0, 0x400, 0xff, 0x80, 0x5, 0x6, 0x8, 0x7, 0x5, 0x9, 0x6, 0x7ff, 0x100, 0x7, 0x3, 0x7, 0x401, 0x6, 0x7, 0x9, 0xfffffffd, 0x6, 0x7, 0x5, 0xffffffff, 0x8, 0x28, 0x39, 0xe0000, 0x32, 0x4, 0x5, 0x5, 0xc621, 0x1, 0x1b, 0xfff, 0x7, 0xea, 0x6, 0xfffffff8, 0x4, 0x4, 0x2, 0xc, 0xbae, 0x4, 0x4, 0xaae8, 0x3, 0x4c600, 0x7, 0x200e, 0x0, 0x7, 0x8, 0x28743703, 0x2, 0x2, 0x401, 0x7f, 0x8, 0x5, 0x9, 0x200, 0x2, 0x307, 0x4, 0x6, 0x1c08, 0x2, 0x2, 0xb, 0xc0e3, 0x8, 0x9, 0x0, 0x1000, 0xb04, 0x7fff, 0x1, 0x2, 0x7ffffffd, 0x2, 0xe98, 0x8, 0x5, 0x7f, 0x1, 0x5d68, 0x1, 0x95c, 0x80000000, 0x5, 0x2, 0x2, 0x58, 0x6, 0x1, 0x4, 0xe3c5, 0x4, 0x75, 0x5, 0xffff3c4a, 0xfff, 0xa18, 0x6, 0x10000, 0x6, 0xfff, 0x9, 0x0, 0x7, 0x10000, 0x2, 0x6, 0x2, 0x0, 0x0, 0x7, 0x1ff, 0xf, 0xe9, 0x6, 0x10000, 0xa04, 0x4b97, 0x0, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0xe, 0x1000, 0x6, 0xb69, 0x5, 0x7b0c, 0xfffffff7, 0x4, 0x5, 0xc1bc, 0x1, 0x9, 0x2, 0x9, 0x7, 0x1a, 0x7fff, 0xfffffff7, 0xf6, 0x6000, 0x1, 0x2, 0x6, 0x4, 0x9, 0xf, 0x3, 0x2, 0x1ff, 0x9, 0xcf, 0x0, 0x21af6d0f, 0x2, 0xe0, 0x80000001, 0xf07, 0x8, 0x6, 0x8, 0xfffffff9, 0x9, 0x4, 0x6, 0xc6, 0x6, 0x9, 0x400, 0x15c, 0x4, 0x3, 0x0, 0x6, 0x6, 0xfffffffd, 0xa, 0x5, 0x6, 0x1ff, 0x9, 0x7, 0x8, 0xc865, 0x6d78cf1d, 0x0, 0xee0, 0xfffffff7, 0x6, 0x5, 0x8, 0x2, 0x8, 0xf, 0x0, 0x1, 0x71, 0x4, 0xcf47, 0x2, 0x80c, 0x3ff, 0x7, 0x5, 0x0, 0x1, 0x2f0, 0x9, 0x4, 0x6, 0x7, 0x4, 0x8, 0x7, 0x6, 0x8000, 0xffffff80, 0x3ff, 0x8, 0x7, 0xf, 0x4, 0x9, 0x1ff, 0x92c, 0x6, 0x86cd, 0x7, 0x80000001, 0x91, 0x4, 0x5ab, 0x9, 0x10, 0x7, 0x3, 0x0, 0xffffffe7, 0x40, 0x4, 0x1, 0x2, 0xc, 0x7f, 0x3ff, 0x6, 0x3, 0xffff, 0x3, 0x662, 0x1000, 0xbd, 0x4, 0x5, 0x1ff, 0x1, 0x3, 0x2, 0x401, 0x1, 0xfffffff8, 0x8, 0x2, 0x2, 0xe8, 0x4, 0x6, 0x6, 0xfffffffb, 0x4, 0x200, 0x1, 0x4573, 0x2, 0xbd06, 0x5, 0xa8c, 0x80000000, 0xffffffff, 0x198f, 0x6, 0x8, 0x2ee, 0x7, 0x8, 0x7, 0x101, 0x80000000, 0x3, 0x3, 0x8, 0x5, 0x4, 0x2, 0x9, 0x801, 0x0, 0x2, 0x8, 0xc, 0x6, 0xf5, 0x5, 0x1000, 0x5, 0x39d00000, 0x8, 0x5, 0x3, 0x4a2, 0x9, 0x2daeb3f1, 0x0, 0x8, 0x100, 0x9649, 0x0, 0x6, 0x1, 0x7, 0x3ff, 0x97, 0x6a, 0x5, 0xff, 0xd, 0x19a2, 0x8, 0x3, 0x69b, 0x8, 0x7, 0x6, 0x458, 0x4, 0x3, 0x10000, 0x9, 0x101, 0x7, 0xfffffff8, 0x5, 0x0, 0x7, 0xf, 0x621e, 0x7, 0x3ff, 0x788, 0x8, 0x5, 0x1007, 0x8a, 0x8, 0x80, 0xfff, 0x2, 0x8450, 0xcaa0, 0xca54, 0x7, 0x1000, 0x80000000, 0x2, 0x8001, 0x6, 0x1, 0x1, 0x8, 0x7fffffff, 0xb56, 0x6, 0xff, 0x3, 0xfff, 0x9e7, 0x8000, 0x2, 0x7fff, 0x2, 0x0, 0x1, 0x4, 0x800, 0x1d71, 0xffffffff, 0xf13, 0x3, 0x2, 0x8, 0x8, 0x6, 0x5, 0x8, 0x70a0, 0x5, 0xfffffff8, 0x8, 0x3, 0x9, 0x3, 0xd10a, 0xff, 0x3, 0x3ff, 0x9, 0xffffc000, 0x81, 0x8, 0x9, 0x4, 0x3, 0x8, 0x4, 0x80000001, 0x2, 0x1, 0x2, 0x400, 0x10000, 0x80000001, 0x5, 0x958, 0x0, 0x3, 0x3, 0x7, 0x9, 0xfffffff8, 0x8, 0x6, 0x5, 0xea38, 0x1000, 0x0, 0x5, 0x75, 0x7947, 0x7fff, 0xf6, 0x0, 0x7, 0x8, 0xd886, 0x8000, 0x7, 0x40, 0x8, 0x4, 0x81, 0x7, 0x7, 0xf2e, 0x4, 0x1, 0x401, 0x9, 0x200, 0xf, 0x2, 0xac2, 0x385, 0x2, 0x16, 0x8, 0xdf, 0x2, 0x78, 0xfffffff9, 0x401]}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xffffffff) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x20000, 0x0) r1 = socket(0x2, 0x2, 0x2c) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@in={0x10, 0x2, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0}, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) pselect(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x9a2b, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0xb, 0x0, 0x7, 0x4000000003, 0x9}, 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000004a40)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0xfffffffffffffe64) r2 = kqueue1(0x0) kevent(r2, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff6, 0x25, 0x40000000, 0x4, 0x56b}], 0xf00, 0x0, 0xffff6b54, 0x0) r3 = kqueue() r4 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) mkfifo(&(0x7f0000001380)='./file0\x00', 0x191) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000080)={0x3, 0x2005, 0xd48, 0x494, "2f4d00e0dd26358b62ed13eac1b1549b00", 0x0, 0x6}) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000240)="89143646442d8da97e6c6deb95d52e9c7eeeb628", 0x14) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000640), 0x0) kevent(r0, &(0x7f0000000b80)=[{{r1}, 0x8000000000000007, 0xb0, 0x20000000, 0x10001, 0x1}], 0x6, &(0x7f0000000bc0)=[{{r3}, 0xfffffffffffffffb, 0x22, 0x40, 0x5, 0x9}, {{r4}, 0xfffffffffffffffb, 0x3, 0x59135e9413d7d76, 0x6, 0x6}, {{r5}, 0xfffffffffffffffb, 0x43, 0xc00000d0, 0x5}], 0x100, &(0x7f0000000c40)={0x6, 0x483f}) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0x38, 0x1040, 0x0) r6 = msgget(0x2, 0x203) seteuid(0xffffffffffffffff) msgctl$IPC_RMID(r6, 0x0) 1.134321798s ago: executing program 1 (id=10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x210}}, 0x38, 0x406) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getppid() fcntl$setown(r2, 0x6, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0x80047308, &(0x7f0000001840)={0x0, 0x1a, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r10) poll(&(0x7f0000000140)=[{r10, 0x100}, {r4, 0x4}, {r4, 0x8}, {r5, 0x4}, {r7, 0x4}, {r1, 0x4}, {r7, 0x4}, {r5, 0x4}, {r4, 0x40}], 0x9, 0x10001) closefrom(r4) sendmmsg(r5, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x406) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff3104ff1a614393aeb6080045e800340068000f01029078ac1400aaac1c00bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8180007f9078000f0002050a000000070000000a"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x20) r13 = socket$inet6(0x18, 0x1, 0x0) shutdown(r13, 0x1) setsockopt$sock_int(r13, 0xffff, 0x1002, &(0x7f0000000000)=0x3, 0x4) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f00000004c0)={0x9, 0x0, 0xc1d, 0x6, "2582a0120de91bc1f64bb0bc54340283e3aa36fc", 0x1, 0x7}) flock(r13, 0x1) chown(&(0x7f0000000180)='./file0\x00', r12, 0x0) setreuid(r12, r12) fstatat(r6, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) fchown(r5, r12, r14) 1.133628023s ago: executing program 5 (id=6): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040)=0xdd4e, 0x4) connect$inet(r0, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xffff0002}, 0x10) setitimer(0x2, 0x0, 0xfffffffffffffffe) getgid() setitimer(0x0, &(0x7f0000000100)={{0x7, 0x2}, {0x0, 0x6}}, 0x0) sysctl$hw(&(0x7f0000000100)={0x6, 0x1b}, 0x3, &(0x7f0000000240)="940e8190c2f7d9411e6476c2c8542cbf8d81b9f6d8272d06c00393a65f68434468ebcdc74e7e340831c904218d511cf342e14c1224b1ac85f3cc5f441df1949b81484298a7dc001916765c22b800445a6ac02cf93a3f9fb3686946ba9ef9bafa6e248e79111180ca8fa298237b24acd9964cac", 0x0, 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x7, 0x4}, {0x8, 0x80000000}}) sysctl$hw(&(0x7f0000000080)={0x6, 0x3}, 0x2, &(0x7f0000000140)="9c4b124c7a02968d1f333d480a5d20f429764f0e9774c5b22fbfafbada515b8ac7943855035ccf7918a4d964a8820d940d2a41f13ac7802d2d5edfa6515d567aa07077114b4882dc5bd3dd6d5c06b7d65b65b84d3e2e249ab09d01719c851993c9d702c98349cd145036", &(0x7f00000001c0)=0x6a, &(0x7f00000002c0)="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", 0x1000) 1.132680573s ago: executing program 3 (id=11): nanosleep(&(0x7f0000000000)={0x40008000000, 0x5}, 0x0) (async) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x14) (async) seteuid(0xffffffffffffffff) setsid() (async) r2 = syz_open_pts() r3 = dup2(r2, r2) ioctl$TIOCSCTTY(r3, 0x20007461) syz_open_pts() (async) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x1c, 0x0) syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f00000000c0)=0xd47c) (async) ioctl$FIOASYNC(r1, 0x80206979, &(0x7f0000000580)=0x7) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x35869cb10a7f2501, 0x7}, {0x47, 0x400}, {0x6, 0x5}, {0x40, 0xffffffff}, {0x83, 0x2}, {0x42, 0x6}, {0x25, 0x800}, {0x81, 0x1c000}, {0x26, 0x8}, {0x101, 0x9}], 0xa}) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCRCLRTABLES(r5, 0xc450443c, 0x0) ioctl$DIOCSTOP(r5, 0x20004402) r6 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000030f00", 0x1000004}, 0x1c) (async) ioctl$DIOCSTART(r5, 0x20004401) sysctl$hw(&(0x7f00000002c0)={0x6, 0x12}, 0x2, &(0x7f0000000680)="3991e300080000000000000e2e6a9e9df23eef8d3ed56948b7b6e4b77c1dcd77c7458745d8", &(0x7f0000000380)=0x25, &(0x7f0000000940), 0x0) 967.771316ms ago: executing program 3 (id=12): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)="dea61a4d1cedf5f1055f9fe020375689e520e46b18e3acbc0d5f164611cc94cf1d1cf24a5c3d9e7972630139702a686e3b073201f9a26df11c948ee6c414ded2", 0x40}], 0x1, 0x8) getgroups(0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) semop(0xffffffffffffffff, &(0x7f0000000140)=[{0x3, 0x20}], 0x1) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) r2 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) mmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) setresgid(r1, r0, 0x0) msgget(0x3, 0x121) getentropy(&(0x7f00000003c0)=""/25, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(r4, r4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r5) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000040)={0x6, 0x4, 0x100, {[0x8, 0x4, 0x6f6, 0x7, 0x1, 0xfffffffffffffffa, 0x6, 0x6, 0x1e, 0x10001, 0x3, 0xdde0, 0x9, 0x1, 0x8, 0x2, 0x1, 0x6], [0x5, 0x7, 0xfffffffffffffffa, 0xd, 0xffff, 0x9, 0x3, 0x100000000, 0x6, 0x81], [0x6, 0x7, 0x4, 0x3ff, 0x8, 0x7, 0x1], [0x7ff, 0x8, 0x1, 0x7cee, 0x0, 0x7], [{0x0, 0x5, 0xffffff01, 0x80}, {0x2, 0x4, 0x6, 0x67}, {0x5, 0x4, 0x6, 0x2c2}, {0x9, 0x6, 0x30, 0x5}, {0x4, 0x3, 0x7, 0x4}, {0x9557, 0x9, 0x5, 0x33f}, {0x47, 0x8000, 0x9, 0x8}, {0x4, 0x3, 0x1e, 0x8}], {0x40, 0x8, 0x3, 0x5}, {0x0, 0x9, 0x7}}}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x55, 0x1) 966.631052ms ago: executing program 1 (id=13): sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x659e3f3aeaa25116}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) r0 = kqueue1(0x10000) kevent(r0, &(0x7f0000000080)=[{{}, 0xfffffffffffffff9, 0x9, 0x1, 0x345, 0x100000001}, {{}, 0xfffffffffffffff9, 0x78, 0x4, 0x9, 0x7}], 0x9, 0x0, 0x9, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x40) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x12) mkfifoat(r1, &(0x7f00000000c0)='./file1\x00', 0x180) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x204) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') ioctl$BIOCLOCK(0xffffffffffffffff, 0x20004276) ioctl$BIOCGSTATS(0xffffffffffffffff, 0x4008426f, &(0x7f0000003600)) r2 = syz_open_pts() ioctl$TIOCSTOP(r2, 0x2000746f) r3 = dup(r2) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x44, 0x40, 0x60, 0x101}, {0x216, 0xff, 0x9, 0x2}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "e481e2", 0x0, 0x0, 0x0, @empty, @remote={0xfe, 0x80, '\x00', 0x0}}}}}) ioctl$BIOCLOCK(0xffffffffffffffff, 0x20004276) ioctl$TIOCSTART(r3, 0x2000746e) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, &(0x7f0000003a00), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000000c0), &(0x7f0000003a00), 0x0, 0x0) connect(r3, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x2, 0x3, "54c5009dd50adf3655e58f832db93b18", 0x1}, 0x1c) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x7, 0x0, 0x0, 0x0, 0x0) 966.378178ms ago: executing program 0 (id=1): setuid(0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x1, 0x6) sendto(r0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x0) listen(r0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x6, "40d5f338d7e434578e0c85b60f3f34c2", 0x35}, 0x1c) accept$inet6(r0, 0x0, 0x0) closefrom(r0) unveil(0x0, &(0x7f00000000c0)='c\x00') 941.420285ms ago: executing program 7 (id=8): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000440)=[{0x5, 0x5}], 0x1}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$inet6(0x18, 0x4, 0xfa) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1104, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) recvmmsg(r2, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0x38, 0x1040, 0x0) ioctl$DIOCSETSYNCOOKIES(r1, 0xc0014462, &(0x7f0000000600)=0x3) 910.372932ms ago: executing program 2 (id=3): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCGETSTATUS(r0, 0xc2084415, &(0x7f0000000040)) r1 = socket$inet6(0x18, 0x0, 0x3) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x55cb) mknod(&(0x7f0000000340)='./file0\x00', 0xc000, 0x7ff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f00000003c0)={'./file0/file0\x00', 0x4, 0x9, 0x6, 0x0, 0x2, 0xf124, 0x2, 0x0, 0x1, 0x0, 0xca43}) ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f0000000440)={0x7, './file0/file0\x00', './file0\x00'}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000008c0), 0x8, 0x0) ioctl$DIOCRGETASTATS(r4, 0xc4504447, &(0x7f00000009c0)={{'./file0\x00', './file0\x00', 0x47}, &(0x7f0000000900)=[{@multicast2, '\x00', './file0/file0\x00', 0x2, 0x2, 0x1a, 0x2, 0xc, 0xff}, {@empty, '\x00', './file0/file0\x00', 0x3, 0x1, 0x18, 0x4, 0x7, 0x7f, 0x5}, {@local={0xac, 0x14, 0x0}, '\x00', './file0/file0/fi', 0x4, 0x6000, 0x2, 0xe, 0x7, 0xd9, 0x50}], 0x75, 0x3, 0x6, 0x4, 0x3, 0x6, 0x10, 0xb}) r5 = getuid() fstatat(r3, &(0x7f0000000e40)='./file0/file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0xc) setresuid(r5, r6, r7) r9 = dup2(r3, r0) ioctl$WSDISPLAYIO_GVIDEO(r9, 0x40045744, &(0x7f0000000f40)) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) setgid(r10) setsockopt$sock_int(r1, 0xffff, 0x3334, &(0x7f0000001000)=0x7, 0x4) chown(&(0x7f0000001040)='./file0/file0\x00', 0x0, r8) setrlimit(0x1, &(0x7f0000001080)={0x1ff, 0x8}) symlinkat(&(0x7f00000010c0)='./file0/file0\x00', r2, &(0x7f0000001100)='./file0/file0/fi\x00') r11 = fcntl$dupfd(r0, 0x6, r1) ioctl$DIOCCLRSRCNODES(r4, 0x20004455) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000001140)={0x0, 0x6, 0x7, 0x65677e0b, 0x2, [0x0], [0x1, 0x7f, 0x5], [0x3, 0x9, 0x7, 0xf50], [0x4, 0x1d27, 0x2, 0x4c8]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000011c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000001200)={0x0, 0x1, 0xfffffff8, 0x39555659, 0x1, [0x0, r12, 0x0, r13], [0xaee, 0x4, 0x2, 0x800], [0xa14, 0xf, 0x7, 0x9], [0x7, 0x3, 0x401, 0xfffffffffffffff8]}) symlink(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='./file0\x00') ioctl$DIOCRTSTADDRS(r11, 0xc4504449, &(0x7f0000001400)={{'./file0\x00', './file0/file0\x00', 0x46, 0x2}, &(0x7f0000001300)=[{@multicast2, '\x00', './file0/file0\x00', 0x5, 0x100, 0x6, 0xe, 0x4, 0x7, 0xf}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x3, 0x800, 0x1a, 0x7, 0x7, 0xd, 0xa}, {@multicast2, '\x00', './file0/file0\x00', 0x8, 0x0, 0x1a, 0xff, 0x9, 0xb, 0x6c}, {@rand_addr=0x3, '\x00', './file0\x00', 0x8, 0x0, 0x0, 0x6, 0xfa, 0x7f, 0x40}], 0x3, 0x4, 0x100, 0x5, 0x8001, 0x0, 0x78, 0xfff}) 885.722023ms ago: executing program 4 (id=5): r0 = kqueue1(0x10000) pselect(0x40, &(0x7f0000000180)={0x8, 0x4, 0xfffffffffffffff7, 0x9, 0xbec, 0x7fff, 0x5, 0x5}, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x10000) kevent(r0, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe, 0xd, 0x4, 0xfffffffffffffff7, 0x1}], 0xffffffff, &(0x7f0000000100), 0x4, 0x0) kevent(r0, &(0x7f0000000000), 0x2f8, 0x0, 0x200, 0x0) 841.954444ms ago: executing program 1 (id=14): munmap(&(0x7f0000515000/0x3000)=nil, 0x3000) getpgid(0xffffffffffffffff) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) r1 = semget(0x1, 0x7, 0x200) semget(0x0, 0x4, 0x24) semop(r1, &(0x7f0000000200)=[{0x1, 0xff, 0x1800}], 0x1) semop(r1, &(0x7f0000000040)=[{0x1, 0x4, 0xde4ad885b8f1f3f7}], 0x1) semctl$SETVAL(r1, 0x4, 0x8, 0x0) semctl$SETVAL(r1, 0x4, 0x8, 0x0) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x8000672) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCNXCL(r2, 0x2000740e) r3 = semget(0x1, 0x7, 0x200) semctl$SETVAL(r3, 0x4, 0x8, 0x0) semop(r3, &(0x7f0000000080), 0x0) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000000)=[0xfff]) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt(r4, 0x0, 0x15, &(0x7f0000000140)="9a350700", 0x4) r5 = socket$inet6(0x18, 0x1003, 0x7) connect$inet6(r5, &(0x7f0000000380)={0x1c, 0x18, 0x2, 0x0, "9ecceb6e3b371a66334607f5822a1fc9", 0xc}, 0x1c) 840.713367ms ago: executing program 3 (id=15): munmap(&(0x7f0000515000/0x3000)=nil, 0x3000) getpgid(0xffffffffffffffff) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) r1 = semget(0x1, 0x7, 0x200) semget(0x0, 0x4, 0x24) semop(r1, &(0x7f0000000200)=[{0x1, 0xff, 0x1800}], 0x1) semop(r1, &(0x7f0000000040)=[{0x1, 0x4, 0xde4ad885b8f1f3f7}], 0x1) semctl$SETVAL(r1, 0x4, 0x8, 0x0) semctl$SETVAL(r1, 0x4, 0x8, 0x0) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x8000672) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCNXCL(r2, 0x2000740e) r3 = semget(0x1, 0x7, 0x200) semctl$SETVAL(r3, 0x4, 0x8, 0x0) semop(r3, &(0x7f0000000080), 0x0) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000000)=[0xfff]) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt(r4, 0x0, 0x15, &(0x7f0000000140)="9a350700", 0x4) r5 = socket$inet6(0x18, 0x1003, 0x7) connect$inet6(r5, &(0x7f0000000380)={0x1c, 0x18, 0x2, 0x0, "9ecceb6e3b371a66334607f5822a1fc9", 0xc}, 0x1c) 812.182054ms ago: executing program 6 (id=7): r0 = kqueue1(0x10000) kevent(r0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000280)={0xed2, 0xa33}) r1 = socket$inet(0x2, 0x2, 0x0) kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffe, 0x61, 0x8, 0x7, 0xff}, {{r1}, 0xfffffffffffffffe, 0x46, 0x20000000, 0x100, 0x5}], 0x9, 0x0, 0x5, 0x0) kevent(r0, &(0x7f0000000080), 0x86, 0x0, 0x200, 0x0) 702.126855ms ago: executing program 2 (id=16): open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x104) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2011, r0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000280)="ffdb9f10984e2f8961967223f4996de5a537e34107c1a402be3523e39bce454ce4eee6b86dc96ab382f89e", 0x2b}], 0x1) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) open(&(0x7f0000000180)='./file0\x00', 0x8, 0x2) 701.432875ms ago: executing program 0 (id=17): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10020000ffff000001000000aef2b70c5f1baf53423385441a151d84e8160fb56783fb263ceddb776ea8775e6b9776c18d9b48a7cc289adf7a079907049d19441eb4ae5bad183bd3b54c280451fbdaf59516fafe8c28d84c5661c886a0c7f69b256483bfe22c221ff563400ab82cdb0fc7678cd09380b36eccbcacd357216c3e144c352472f5abdf98ec76cab5654df87bcd9a7a74fe7d59b8f87454868ac1a300b2a129f5b6238f49598162ca29bec5fcdf36cdc26c4e69ab53f785104e1425609062ec30cd0b1d04b016ce7f14fb626fc25ca66700b767bcc6918fa9a7e7a70e4622dabacfd93e85616bd70000000000000006c78932f292e9d6989c5b36e32c1fde389a58b73af17831449d32ac45a065ff6a007c1928b9c84ab2e28de2fa0ffbd4b6b437a251527e5e57661162cd4d4cd9446ba8468cbc851aef47b04449ad7810b01ab9f277049b63ed8e36b0a7a4ae0bfa96ac2dea96ca23e2134acd9996942cc2d07b65b0217a13af9dadf0f378a5bcb6c24265f443dabcc0749c982612ff8ef8bad613e96fbfef63b27dc4f31a23d09dc8bfcc98dadb631f16905cc7992875a445db9b1bec9cd273c90afbb5f08c3c1e4dfe28ffd797691936ae6bd3fbb0d1a2b14287610983925cbf96f0a8849f10676553613ec3f69b7a17359ae5d0c39953af3a52765a8286a726d8cd43facd8bab29900eb4f83b20e84fcf338a3aa0560127ebb03f939f22df593009df000000"], 0x210}}, 0x38, 0x406) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getppid() fcntl$setown(r2, 0x6, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4}) closefrom(0xffffffffffffffff) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x100}, {r4, 0x4}, {r4, 0x8}, {r5, 0x4}, {r7, 0x4}, {r1, 0x4}, {r7, 0x4}, {r5, 0x4}, {r4, 0x40}], 0x9, 0x10001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4}) closefrom(r4) sendmmsg(r5, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x406) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff3104ff1a614393aeb6080045e800340068000f01029078ac1400aaac1c00bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8180007f9078000f0002050a000000070000000a"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x20) r11 = socket$inet6(0x18, 0x1, 0x0) shutdown(r11, 0x1) setsockopt$sock_int(r11, 0xffff, 0x1002, &(0x7f0000000000)=0x3, 0x4) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f00000004c0)={0x9, 0x0, 0xc1d, 0x6, "2582a0120de91bc1f64bb0bc54340283e3aa36fc", 0x1, 0x7}) flock(r11, 0x1) chown(&(0x7f0000000180)='./file0\x00', r10, 0x0) setreuid(r10, r10) fstatat(r6, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) fchown(r5, r10, r12) 701.064257ms ago: executing program 7 (id=18): r0 = kqueue1(0x4) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffff6, 0x8b, 0x80, 0x8}, {{r0}, 0xfffffffffffffff6, 0x30, 0x80000000, 0x4, 0x27ffffffd}], 0x86, 0x0, 0xffff4b4d, 0x0) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x100, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='c\x00') 641.527069ms ago: executing program 2 (id=19): syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT]) 606.306345ms ago: executing program 2 (id=20): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x210}}, 0x38, 0x406) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getppid() fcntl$setown(r2, 0x6, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0x80047308, &(0x7f0000001840)={0x0, 0x1a, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r9) poll(&(0x7f0000000140)=[{r9, 0x100}, {r4, 0x4}, {r4, 0x8}, {r5, 0x4}, {r7, 0x4}, {r1, 0x4}, {r7, 0x4}, {r5, 0x4}, {r4, 0x40}], 0x9, 0x10001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4}) closefrom(r4) sendmmsg(r5, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x406) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff3104ff1a614393aeb6080045e800340068000f01029078ac1400aaac1c00bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8180007f9078000f0002050a000000070000000a"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x20) r12 = socket$inet6(0x18, 0x1, 0x0) shutdown(r12, 0x1) setsockopt$sock_int(r12, 0xffff, 0x1002, &(0x7f0000000000)=0x3, 0x4) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f00000004c0)={0x9, 0x0, 0xc1d, 0x6, "2582a0120de91bc1f64bb0bc54340283e3aa36fc", 0x1, 0x7}) flock(r12, 0x1) chown(&(0x7f0000000180)='./file0\x00', r11, 0x0) setreuid(r11, r11) fstatat(r6, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) fchown(r5, r11, r13) 604.165716ms ago: executing program 1 (id=21): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCGETSTATUS(r0, 0xc2084415, &(0x7f0000000040)) r1 = socket$inet6(0x18, 0x0, 0x3) recvfrom$inet6(r1, &(0x7f0000000280)=""/86, 0x56, 0x2005, &(0x7f0000000300)={0x1c, 0x18, 0x1, 0xffffffff, "d7df8fe7f393b5dc60f3056e1f690636", 0x7}, 0x1c) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x55cb) mknod(&(0x7f0000000340)='./file0\x00', 0xc000, 0x7ff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f00000003c0)={'./file0/file0\x00', 0x4, 0x9, 0x6, 0x0, 0x2, 0xf124, 0x2, 0x0, 0x1, 0x0, 0xca43}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000008c0), 0x8, 0x0) ioctl$DIOCRGETASTATS(r4, 0xc4504447, &(0x7f00000009c0)={{'./file0\x00', './file0\x00', 0x47}, &(0x7f0000000900)=[{@multicast2, '\x00', './file0/file0\x00', 0x2, 0x2, 0x1a, 0x2, 0xc, 0xff}, {@empty, '\x00', './file0/file0\x00', 0x3, 0x1, 0x18, 0x4, 0x7, 0x7f, 0x5}, {@local={0xac, 0x14, 0x0}, '\x00', './file0/file0/fi', 0x4, 0x6000, 0x2, 0xe, 0x7, 0xd9, 0x50}], 0x75, 0x3, 0x6, 0x4, 0x3, 0x6, 0x10, 0xb}) r5 = getuid() fstatat(r3, &(0x7f0000000e40)='./file0/file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0xc) setresuid(r5, r6, r7) r9 = dup2(r3, r0) ioctl$WSDISPLAYIO_GVIDEO(r9, 0x40045744, &(0x7f0000000f40)) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) setgid(r10) setsockopt$sock_int(r1, 0xffff, 0x3334, &(0x7f0000001000)=0x7, 0x4) chown(&(0x7f0000001040)='./file0/file0\x00', 0x0, r8) setrlimit(0x1, &(0x7f0000001080)={0x1ff, 0x8}) symlinkat(&(0x7f00000010c0)='./file0/file0\x00', r2, &(0x7f0000001100)='./file0/file0/fi\x00') r11 = fcntl$dupfd(r0, 0x6, r1) ioctl$DIOCCLRSRCNODES(r4, 0x20004455) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000001140)={0x0, 0x6, 0x7, 0x65677e0b, 0x2, [0x0], [0x1, 0x7f, 0x5], [0x3, 0x9, 0x7, 0xf50], [0x4, 0x1d27, 0x2, 0x4c8]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000011c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000001200)={0x0, 0x1, 0xfffffff8, 0x39555659, 0x1, [0x0, r12, 0x0, r13], [0xaee, 0x4, 0x2, 0x800], [0xa14, 0xf, 0x7, 0x9], [0x7, 0x3, 0x401, 0xfffffffffffffff8]}) symlink(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='./file0\x00') ioctl$DIOCRTSTADDRS(r11, 0xc4504449, &(0x7f0000001400)={{'./file0\x00', './file0/file0\x00', 0x46, 0x2}, &(0x7f0000001300)=[{@multicast2, '\x00', './file0/file0\x00', 0x5, 0x100, 0x6, 0xe, 0x4, 0x7, 0xf}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x3, 0x800, 0x1a, 0x7, 0x7, 0xd, 0xa}, {@multicast2, '\x00', './file0/file0\x00', 0x8, 0x0, 0x1a, 0xff, 0x9, 0xb, 0x6c}, {@rand_addr=0x3, '\x00', './file0\x00', 0x8, 0x0, 0x0, 0x6, 0xfa, 0x7f, 0x40}], 0x3, 0x4, 0x100, 0x5, 0x8001, 0x0, 0x78, 0xfff}) 534.963331ms ago: executing program 1 (id=22): msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="efb6"], 0x0, 0x1fd6bdfc950253bb) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) r1 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xac1400a6}, 0x10) setsid() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) execve(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) closefrom(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x3, 0x1, 0xe0000000000000}) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/38}, 0x2e, 0x0, 0x3800) closefrom(r0) 414.479849ms ago: executing program 3 (id=23): r0 = syz_open_pts() r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f0000000300)={0x2, 0xd92, 0x200007, './file0\x00', './file0\x00', 0x0, "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"}) mlock(&(0x7f0000ff6000/0x8000)=nil, 0x8000) r2 = syz_open_pts() r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt(r4, 0x0, 0xc, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) closefrom(r3) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000040)=0x7ff) r5 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r6) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000000)={0x6, 0xfffffffd, 0xffffffc0, 0x9, "9012b30900", 0x401, 0x80956e}) r7 = dup2(r0, r0) sysctl$net_inet_ah(0x0, 0x0, &(0x7f0000000a00)="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", 0x0, 0x0, 0x0) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCRCLRTABLES(r8, 0xc450443c, &(0x7f0000000d00)={{'./file0\x00', './file0\x00', 0x0, 0xe}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6, 0x3, 0x40, 0x9}) sysctl$net_inet_tcp(&(0x7f0000004c00)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x59c2) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x1400, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) fchmod(r0, 0x4) fcntl$lock(r7, 0x7, 0x0) seteuid(0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x2a}, 0x2, &(0x7f0000000180)="94342aa0e332988207c51019b76aa6b5830f9ee698cc2d377041d1f2aaffece03fe417313fbc8255fbef95036e13e1ee", &(0x7f0000000240)=0x30, &(0x7f0000000280), 0x0) 414.099379ms ago: executing program 7 (id=24): mquery(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0xffffffffffffffff, 0x2000000000) r0 = syz_open_pts() (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) closefrom(r1) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x150) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) (async) unveil(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)='c\x00') (async) unveil(&(0x7f0000000100)='.\x00', &(0x7f0000000340)='w\x00') (async) unveil(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='r\x00') (async) ftruncate(0xffffffffffffffff, 0x100000000) (async) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) (async) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfb85e0665ac52ed3) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000019c0)={0x8000003, 0x6, 0x611d, 0xfffd, "fe83017a550000fe02bfabb685ffffffffffea00", 0x3, 0x8}) write(r0, &(0x7f0000000440)="77d5b655ea62eae9fde7030010676cd8db1ec996edd7d7ed03270ef0f2b2f8297c9c837e826358306748c03ff3a4f60b27612626ed9f65562b0cd05d53855b4f2721389eec7f78a46506a93a1dbbcba0ad5ecea394ce2444dcb26e3aa69c90f6f3bafd6d404e9294a5dd2004e1874bf6abc0c3497219a891e864705443b712cc97f923861bcd2fe60f7357e4273bd0397c7c91086e440d233041e747bc143afd51749cdc", 0xa4) (async) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) (async, rerun: 64) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="6b1c0df4a55ffffffff74dffffff88000001e0000001"]) (async) sysctl$net_inet_tcp(&(0x7f0000004a40)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f0000000000)="5fe5a7bb", 0x4) 413.895531ms ago: executing program 7 (id=25): r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000469000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/209) shmctl$IPC_RMID(r0, 0x0) r1 = socket$inet6(0x18, 0x3, 0x7) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)=0x7) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) pselect(0x40, &(0x7f0000000080)={0xe3, 0x1d, 0xff, 0x6, 0xc8, 0xfffffffe, 0x2, 0x40000000005}, 0x0, 0x0, 0x0, 0x0) r3 = kqueue1(0x10000) kevent(r3, 0x0, 0x0, &(0x7f0000000000), 0x40, 0x0) kevent(r3, &(0x7f0000000080), 0x86, 0x0, 0xffff4b4d, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x5, 0x81}, {0x8f, 0x3}, {0x87, 0x1}, {0x23, 0xa4e}, {0x40, 0x200}, {0x22, 0x7}], 0x6}) setsockopt(r1, 0x29, 0x28, 0x0, 0x0) sync() shmat(r0, &(0x7f0000107000/0x2000)=nil, 0x4000) 413.330281ms ago: executing program 0 (id=26): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x4, 0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xfc, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc08) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x672) r1 = open(&(0x7f0000001980)='./file0\x00', 0x1800a, 0x0) writev(r1, &(0x7f00000015c0)=[{0x0}], 0x1) unveil(0x0, &(0x7f0000000040)='r\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x148) msgget(0x2, 0x603) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r4, r3, 0x0) r5 = getgid() setresgid(r2, 0x0, r5) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt(r6, 0xffff, 0x1002, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x40) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/file0/file0\x00') 394.507625ms ago: executing program 6 (id=27): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$inet6(0x18, 0x1, 0x6) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) shutdown(r1, 0x2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x65, 0x5, 0x5}, {0x80, 0x7, 0x4, 0x6}, {0xfffe, 0x0, 0x1c, 0x3}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "d6c7c3", 0x14, 0x33, 0xc5, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x5, 0x0, 0x1}}}}}}}) 358.46401ms ago: executing program 0 (id=28): r0 = kqueue1(0x10000) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0xc3, 0x2, 0x1, 0xfffffffffffffffd}], 0x6, 0x0, 0x4, 0x0) kevent(r0, &(0x7f0000000040), 0xf00, 0x0, 0xffff4b51, 0x0) r1 = syz_open_pts() getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0x38, 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) r2 = socket$inet6(0x18, 0x3, 0x7) sendmmsg(r2, &(0x7f0000000340)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x400, "bb400a4b0c954b521b9b8032d61992af", 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000ffff0000fcfffffff000000014e60000ffff000001000000dd81185944000000"], 0x24}}, 0x38, 0x400) socketpair(0x1, 0x1, 0x10, &(0x7f0000000340)) socket$unix(0x1, 0x2, 0x0) getrlimit(0x0, &(0x7f0000000000)) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000019c0)={0xfffff801, 0x4, 0x611d, 0xc, "9244fe7a9542a741bb1a2e257e769ccf78fa6773", 0x2, 0x85}) syz_emit_ethernet(0x18, &(0x7f0000000080)={@broadcast, @random="c20e0d343aa0", [], {@ipv4={0x88e7, {{0x5, 0x4, 0x2, 0x4, 0x1c, 0x67, 0x8, 0x9, 0x62, 0x0, @multicast1, @rand_addr=0x7}, @udp={{0x2, 0x1, 0x8}}}}}}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6039bbe600143c2d0000000000000000000000000000000100000000000000000000ffffffffffff4e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000000000000040f24c1dfcd69d3cf1e0cb47d8e217"]) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000100)={0x0, 0x9, 0x0, 0xfffffffe, "fc801f8240fe4f13dee3f68b8e5064011d77d113", 0x100, 0x1}) r3 = openat$dri(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0, 0xb8, 0x8, 0x120, 0x7, {0x6, 0x1, 0x7fff, 0x5, 0x4, 0xfffb, 0x7, 0x1ff, 0xa, 0x0, 0x3, 0x9, 0x8000, 0x10, "54c74dc841205bf55ede2244f6dd4d94f7fd6ae343723e4fd2ca26b6a1d4e55c"}}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000300)={r4, 0x4, &(0x7f0000000240)=[0xd, 0x4, 0xb1e9, 0x4], &(0x7f0000000280)=[0x2, 0xde8, 0x0, 0x9], &(0x7f00000002c0)=[0x5]}) 358.022053ms ago: executing program 2 (id=29): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0xa, 0x0, 0x0, 0x2}, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) acct(&(0x7f0000000040)='./file0\x00') r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000040)={0x8, 0x2, 0xbd9, 0x2}) sysctl$net_inet_udp(&(0x7f0000002380)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f00000023c0)="3624c0de569c2a137ff2c2f9bdd1bf34a21b30239ff1d621c6faa381aacef15e503c852985f3c382ecad2b9581751e827ef56fc825363fcb1a444ac2d2190e48f85fab1e398ab9a7a594c896adcadae80cec5b580ca7", &(0x7f0000002440)=0x56, 0x0, 0x0) 107.910538ms ago: executing program 5 (id=30): sysctl$net_inet_udp(&(0x7f0000002380)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f00000023c0)="3624c0de569c2a137ff2c2f9bdd1bf34a21b30239ff1d621c6faa381aacef15e503c852985f3c382ecad4c9581751e827ef56fc825363fcb1a444ac2d2190e48f85fab1e398ab9a7a594c896adcadae80cec5b580ca7", &(0x7f0000002440)=0x2000, 0x0, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x1}, 0x4, &(0x7f0000000040)="85ce128cda0ca5f210e299241422b74be74ce736c1c9f7d0ea39ebb88525792def9bab8acf5ef2a37713053b65040f32b95857a68b93830e151bae95c6331d28bbeebac2f30b884dfdfead2ca3cf8297f4c823f136031d8f224557cace680e61", &(0x7f00000000c0)=0x60, &(0x7f0000000100)="20b46590781ba8cf953f7abbf017df85d58f92e51e9ec65d2ef85e066c3974a81d98e354fa5c0b64413c247419758664066d5dc4255459f39863a4ba24aa1a26246ec763971f87fadcc357b95ea8eca4ad70f0206c10b6c878f18b4363880e3748636bd41e54066af17ae9625cff9fd5a2f2b18efc049f8f14320bdd0d30b6450b6b61a314d43a9eabe7589d72e34e1db909fb6a162441ba405854ec2410f4e3fe4652c908f34c42482a12a308afe01c2345e730615ea1364f3f301d0b804244b0dbfd1cfe", 0xc5) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$DIOCADDRULE(r0, 0xcd604404, &(0x7f00000004c0)={0x9, 0x7, 0x9, './file0\x00', './file0\x00', 0x0, "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"}) sysctl$net_inet_udp(&(0x7f0000000200)={0x4, 0x2, 0x11, 0x6}, 0x4, &(0x7f0000000240)="428ef57ff39e025d615c9b04110a24599c053575d3d39f8427a2915ad392c8368d5d526db76abaf04d2d7d12ed15547df0c91d343305fcd548c84f5e01a458c7347a6fc15f257610ea5f97861dc84bb18bd54f76cc62eca75b2293fc1d448b993c517b976a9f70a7d090fa666af312581768afe9ed5424c6b79387c80a194c5aed69fd5aeac3d2c0b1fe7807672cd8733c080b3daf675ee26400bcde5b8e14b8dc7d6e06ed267ff0b538120753d4bf4855b2bed59496795922e68de817d4fdd503bd7eda3dbed18bdfaa49c16082a2fafc5f3aaee5ef87d3", &(0x7f0000000340)=0xd8, &(0x7f0000000380)="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", 0xfb) 107.357538ms ago: executing program 5 (id=31): r0 = kqueue() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000240)=""/2}, {&(0x7f0000000480)=""/230}, {&(0x7f0000000b00)=""/4096}, {&(0x7f0000001b00)=""/195}, {&(0x7f0000001c00)=""/44}], 0x1000000000000278, 0x0, 0x5c}, 0x800000}, 0x38, 0x7000, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r3 = shmget$private(0x0, 0x3000, 0x36e, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x800000)=nil, 0x0) r4 = shmget$private(0x0, 0x3000, 0x2aa, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/206) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x400) pipe(&(0x7f0000000a80)) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0) ioctl$FIOGETOWN(r5, 0x40047477, 0x0) pselect(0x40, &(0x7f0000000080)={0xe0, 0xfffffffffffffffd, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x2000000000000000}, &(0x7f00000000c0)={0xaa, 0xffffffffffffff00, 0x800, 0x6, 0x0, 0xf, 0x20000400, 0x10001}, 0x0, 0x0, 0x0) closefrom(r0) 106.823754ms ago: executing program 3 (id=32): r0 = socket$inet(0x2, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x9, &(0x7f0000000080)='./file0\x00', 0x8}) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, 0x80000000}, 0x10) sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x400) 3.500883ms ago: executing program 1 (id=33): seteuid(0xffffffffffffffff) r0 = syz_open_pts() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$audio(r1, &(0x7f0000000080)=""/138, 0x8a) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x1f, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000086c0)=0x401) 2.4116ms ago: executing program 7 (id=34): r0 = socket$inet(0x2, 0x2, 0x0) sysctl$hw(&(0x7f0000002680)={0x6, 0x13}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x7}, 0x10) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0x8020697a, &(0x7f0000000080)=0x3005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x40}}, 0x66, 0x400) seteuid(0xffffffffffffffff) r3 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$inet6(0x18, 0x3, 0x3a) dup(r4) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x11, 0x5, 0x0, 0x0, 0x9}, 0x40db, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x6, 0xffffffffffffffff, 0xf5df, 0x6d9, 0x8, 0x2}) shmctl$IPC_RMID(r3, 0x0) kqueue1(0x10000) r5 = semget$private(0x0, 0x3, 0x5d0) semctl$GETZCNT(r5, 0x1abe3218dc063b26, 0x7, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r6 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x800000)=nil, 0x1000) clock_settime(0x3, &(0x7f0000000580)={0x4, 0x8}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x6}, 0x400000000000026a, &(0x7f00000000c0)="c68b984ef946f51700009dda31d398bf205fcc15c1d360de258d3dc6", &(0x7f0000000140)=0x17, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) r8 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r8, 0xffff, 0x8, &(0x7f00000004c0)=0xb06, 0x4) r9 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, r9, 0x0, 0x110, 0x50, 0x0, 0x0, 0x200000000002}, 0x0, 0x0, 0x3ff, 0xfffffffffffffffd, 0x8002, 0xffffffffffffffff, 0x0, 0xfffffffffffff871, 0x0, 0x2, 0x0, 0x9}) 1.45291ms ago: executing program 4 (id=35): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DIOCKILLSTATES(r0, 0x0, &(0x7f0000000040)={{0x9, 0x3}, 0x1a, '\x00', 0xcd9, {@any={'\x00', 0x0, 0x1}, [0x2], 0x2, 0x5, 0x2}, {@table={'./file0\x00', 0x0, 0x3, 0x9}, [0x7, 0x8], 0x26, 0x1, 0x8}, './file0\x00', './file0\x00', 0x3c3, 0x401}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000140)={0x8001, 0x10000, r0}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f0000000180)={{0x1c, 0x18, 0x3, 0x9, "f8ae5fff0e349b647c013b9c156e3891", 0x100}, {0x1c, 0x18, 0x0, 0xa, "9a385b7f51d4cee69a4ae1a1fc3c9735"}, 0x6, [0x3, 0x8, 0x6, 0x13, 0x6, 0xffffffff, 0x1, 0xd8]}, 0x5c) sendmmsg(r1, &(0x7f0000000380)={{&(0x7f0000000200)=@in6={0x1c, 0x18, 0x3, 0x7, "cec0ba3467822d85f572b4781d3f560f", 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="00bb87654ea30f8a5abcadcc3037b21dce2baa068a8452172992f1f747a653b22c21a97bf8cefe064672ff0a6f311d135a2adcad39c3c71864a518140535a94b13df0128bb553c39b0dd166716bcb6f7e2d115cbdb4c4b", 0x57}], 0x1, &(0x7f0000000300)=[{0x4c, 0xffff, 0x8, "0ee5ccbd45a72c634d29fb0662c71d2f32e18158902eb42f38f87df16aff3d99fb6212ecfbec7c033b9b324f7b8e2a00588d8730f331751d483e54e11630"}], 0x4c}}, 0x38, 0x8) ioctl$DIOCSETHOSTID(r1, 0xc0044456, &(0x7f00000003c0)) ioctl$WSKBDIO_GETBELL(r1, 0x40105704, &(0x7f0000000400)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) recvfrom$unix(r1, &(0x7f0000000440)=""/70, 0x46, 0x3040, 0x0, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[0x0, 0x0]}) ioctl$DIOCRCLRASTATS(r1, 0xc4504448, &(0x7f0000000780)={{'./file0\x00', './file0\x00', 0x0, 0x40}, &(0x7f0000000540)=[{@broadcast, '\x00', './file0\x00', 0x1, 0x4bf2, 0x1a, 0x6, 0x2, 0x7, 0x5d}, {@multicast1, '\x00', './file0\x00', 0x1, 0x0, 0x2, 0x5, 0x9, 0x1, 0xe}, {@broadcast, '\x00', './file0\x00', 0x9, 0x5, 0x0, 0x1, 0x8, 0x80, 0x4}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xe, 0x8, 0x1a, 0x8, 0x40, 0xd4, 0x5}, {@multicast2, '\x00', './file0\x00', 0x2, 0x2, 0x0, 0xb, 0x8, 0x9, 0x9}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8, 0x2, 0x18, 0x2, 0x7, 0x9, 0x80}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8b, 0x8, 0x1512f338ecc3ee09, 0x4, 0x7, 0x4, 0x57}, {@multicast2, '\x00', './file0/file0\x00', 0x7f, 0x7ff, 0x1a, 0x54, 0x8, 0x4, 0x40}, {@multicast1, '\x00', './file0\x00', 0x82, 0x5, 0x2, 0x2, 0x1, 0x80, 0x3}, {@loopback, '\x00', './file0\x00', 0x1, 0x3, 0x1a, 0x8, 0xb9, 0x6b, 0x3}], 0x2, 0xa, 0xfff, 0x401, 0x0, 0xfffffff2, 0x0, 0xfffffff7}) access(&(0x7f0000000c00)='./file1\x00', 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r2, 0x400c570a, &(0x7f0000000c80)) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000cc0)={0x7, 0x800, 0x7a9, 0x9, "2aad202a07ede1aa0e3b2eaa0a2f6979c3f2388b", 0x6}) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f0000001140)={{'./file1\x00', './file0\x00', 0x48, 0x8}, &(0x7f0000000d00)=[{'./file1\x00', './file0/file0\x00', 0x0, 0x1}], 0x945b, 0x1, 0xcb5d, 0x3469, 0x7, 0xae65, 0x10, 0x1}) unveil(&(0x7f00000015c0)='./file0/file0\x00', &(0x7f0000001600)='r\x00') chdir(&(0x7f0000001680)='./file1\x00') r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002500), 0x8000, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000002540)={0x8, 0x40, 0xffffffff}) 0s ago: executing program 6 (id=36): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5cc2) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4828a, 0x80) pledge(0x0, &(0x7f0000000180)='\x00\xc9\x9f\x80\xad2\xb0],`\xf8\xe9\x81W?\x1fD\x00') pledge(&(0x7f0000000040)='\x00\xc9\x9f\x80\xad2\xb0],`\xf8\xe9\x81W?\x1fD\x00', &(0x7f0000000080)='\x00') pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x100000000000013f, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Thu Jul 16 15:50:26 PDT 2026 OpenBSD/amd64 (ci-openbsd-kasan-6.us-central1-f.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. login: panic: sleep: syz-executor[21391] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 449442 2322 0 0 0 0 syz-executor *136412 21391 0 0 0x4000010 1K syz-executor db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd0110,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd0110,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e6c0,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e6c0,65560,4000,ffff80003bb7b5c0) at bread+0x47 ffs_update(ffff800001d122a8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d122a8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bb7b9a0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001b99988,ffff800045ff5250) at VOP_INACTIVE+0x1bb vrele(ffff800001b99988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000300,ffff800001d3f490,ffff800000119820) at ktrsettrace+0x16c ktrops(ffff800045ff5250,ffff8000299179d0,0,80000300,ffff800001d3f490,ffff800000119820) at ktrops+0x338 doktrace(ffff800001d3f490,4,300,0,ffff800045ff5250) at doktrace+0xa72 end trace frame: 0xffff80003bb7be90, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: sleep: syz-executor[21391] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd0110,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd0110,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e6c0,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e6c0,65560,4000,ffff80003bb7b5c0) at bread+0x47 ffs_update(ffff800001d122a8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d122a8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bb7b9a0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001b99988,ffff800045ff5250) at VOP_INACTIVE+0x1bb vrele(ffff800001b99988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000300,ffff800001d3f490,ffff800000119820) at ktrsettrace+0x16c ktrops(ffff800045ff5250,ffff8000299179d0,0,80000300,ffff800001d3f490,ffff800000119820) at ktrops+0x338 doktrace(ffff800001d3f490,4,300,0,ffff800045ff5250) at doktrace+0xa72 sys_ktrace(ffff800045ff5250,ffff80003bb7c010,ffff80003bb7bf80) at sys_ktrace+0x1f6 syscall(ffff80003bb7c010) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3ec4a911b20, count: -17 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bb7b070 rbx 0xffff80003bb7b0e0 rdx 0 rcx 0xffff800028fe3ff0 rax 0xffff80000015b980 r8 0x101010101010101 r9 0x8080808080808080 r10 0 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bb7b070 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=136412 pid=21391 tcnt=2 stat=onproc flags process=0 proc=4000010 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ff4028,0xffff800045ff4800 process=0xffff800045ff21d0 user=0xffff80003bb71000, vmspace=0xffff800001c3a7b8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 2322 449442 69681 0 7 0 0 syz-executor 45445 202530 16656 0 2 0 0 syz-executor 45445 94311 16656 0 2 0 0x4000000 syz-executor 21391 280319 1350 0 2 0 0 syz-executor *21391 136412 1350 0 7 0 0x4000010 syz-executor 98561 405224 82924 0 2 0 0 syz-executor 98561 348388 82924 0 3 0 0x4000080 sbwait syz-executor 98561 143189 82924 0 3 0 0x4000080 fsleep syz-executor 85787 122889 18065 0 2 0 0 syz-executor 85787 215271 18065 0 3 0 0x4000080 fsleep syz-executor 2064 132445 8666 0 2 0 0 syz-executor 2064 309302 8666 0 3 0 0x4000080 fsleep syz-executor 47774 471600 19654 0 3 0x2 0 biowait syz-executor 21307 106556 19654 0 3 0x2 0 biowait syz-executor 82924 414455 19654 0 3 0x2 0x80 nanoslp syz-executor 69681 393340 19654 0 3 0x2 0x80 nanoslp syz-executor 1350 327616 19654 0 3 0x2 0x80 nanoslp syz-executor 8666 411963 19654 0 3 0x2 0x80 nanoslp syz-executor 16656 435635 19654 0 3 0x2 0x80 nanoslp syz-executor 18065 293988 19654 0 3 0x2 0x80 nanoslp syz-executor 19654 136361 78748 0 3 0x2 0x80 kqread syz-executor 78748 206894 74325 0 3 0x100002 0x88 sigsusp ksh 74325 65265 89590 0 3 0x10 0x88 kqread sshd-session 89590 67696 90502 0 3 0x12 0x80 kqread sshd-session 55236 411467 1 0 3 0x100003 0x80 ttyin getty 90502 35397 1 0 3 0 0x88 kqread sshd 37708 63037 29612 74 3 0x1100012 0x80 bpf pflogd 29612 58405 1 0 3 0 0x80 sbwait pflogd 88578 299307 53227 73 3 0x1100010 0x80 kqread syslogd 53227 60129 1 0 3 0x100002 0x80 sbwait syslogd 20681 84618 1 0 3 0x100000 0x80 kqread resolvd 79551 260697 64850 77 3 0x100012 0x80 kqread dhcpleased 92554 341598 64850 77 3 0x100012 0x80 kqread dhcpleased 64850 378297 1 0 3 0 0x80 kqread dhcpleased 1524 485912 0 0 3 0x14000 0x200 bored smr 58582 80162 0 0 2 0x14000 0x200 zerothread 61651 484161 0 0 3 0x14000 0x200 aiodoned aiodoned 32317 513186 0 0 3 0x14000 0x200 syncer update 69047 176736 0 0 3 0x14000 0x200 cleaner cleaner 91249 124070 0 0 3 0x14000 0x200 reaper reaper 71313 19640 0 0 3 0x14000 0x200 pgdaemon pagedaemon 17245 243049 0 0 3 0x14000 0x200 bored viomb 27438 25238 0 0 3 0x14000 0x40000200 acpi0 acpi0 65739 351963 0 0 3 0x14000 0x40000200 idle1 67380 197093 0 0 3 0x14000 0x200 bored softnet1 90593 41754 0 0 3 0x14000 0x200 bored softnet0 16725 427890 0 0 3 0x14000 0x200 bored systqmp 81849 121802 0 0 3 0x14000 0x200 bored systq 24201 42550 0 0 3 0x14000 0x200 tmoslp softclockmp 6169 40276 0 0 3 0x14000 0x40000200 tmoslp softclock 48196 426005 0 0 3 0x14000 0x40000200 idle0 1 361492 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 2322 (syz-executor) thread 0xffff800029933770 (449442) shared rwlock uobjlk r = 0 (0xffff800001ac9b30) #0 witness_lock+0x632 #1 rw_do_enter_read+0x55d #2 uvm_fault_lower_lookup+0xe6 #3 uvm_fault_lower+0xb6 #4 uvm_fault+0x3ef #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xffff800001c3a4e8) #0 witness_lock+0x632 #1 rw_do_enter_read+0x55d #2 uvmfault_lookup+0x1a2 #3 uvm_fault_check+0x43 #4 uvm_fault+0x1e7 #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 Process 21391 (syz-executor) thread 0xffff800045ff5250 (136412) exclusive rrwlock inode r = 0 (0xffff800001d12348) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vrele+0x113 #6 ktrsettrace+0x16c #7 ktrops+0x338 #8 doktrace+0xa72 #9 sys_ktrace+0x1f6 #10 syscall+0x1089 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85d52380) #0 witness_lock+0x632 #1 syscall+0x1048 #2 Xsyscall+0x128 Process 47774 (syz-executor) thread 0xffff8000299322b0 (471600) exclusive rrwlock inode r = 0 (0xffff800001d12598) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 ufs_ihashins+0xda #5 ffs_vget+0x2e9 #6 ffs_inode_alloc+0x576 #7 ufs_mkdir+0x25d #8 VOP_MKDIR+0x1a8 #9 domkdirat+0x1f9 #10 syscall+0x1089 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001c20da8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vfs_lookup+0x1f7 #6 namei+0xe19 #7 domkdirat+0xe1 #8 syscall+0x1089 #9 Xsyscall+0x128 Process 21307 (syz-executor) thread 0xffff800029932548 (106556) exclusive rrwlock inode r = 0 (0xffff800001d12c88) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vget+0x321 #6 ufs_ihashget+0x233 #7 ffs_vget+0x10b #8 ufs_lookup+0x1529 #9 VOP_LOOKUP+0xda #10 vfs_lookup+0xfbd #11 namei+0xe19 #12 dounlinkat+0x102 #13 syscall+0x1089 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001be7a28) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vfs_lookup+0x1f7 #6 namei+0xe19 #7 dounlinkat+0x102 #8 syscall+0x1089 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11058 12323K 12331K 166960K 12157 0 pcb 18 24K 24K 166960K 23 0 rtable 239 12K 13K 166960K 353 0 pf 34 22K 24K 166960K 47 0 ifaddr 43 12K 12K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 13K 166960K 6 0 counters 70 42K 42K 166960K 70 0 ioctlops 0 0K 4K 166960K 1494 0 iov 1 12K 12K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1295 84K 84K 166960K 1382 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 10K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 16 57K 89K 166960K 164 0 sigio 0 0K 0K 166960K 5 0 proc 71 128K 177K 166960K 560 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 37 263K 263K 166960K 37 0 exec 0 0K 2K 166960K 384 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 215 220K 240K 166960K 3314 0 UVM aobj 5 4K 4K 166960K 5 0 pinsyscall 1065 1724K 1730K 166960K 1323 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 13 0K 2K 166960K 28 0 temp 36 9162K 9172K 166960K 3954 0 kqueue 14 41K 53K 166960K 33 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 30 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 82 0 62 2 0 2 2 0 8 1 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 15 0 11 1 0 1 1 0 8 0 arp 136 19 0 0 1 0 1 1 0 8 0 inpcb 328 83 0 73 2 0 2 2 0 8 1 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 21 0 0 1 0 1 1 0 8 0 pfstkey 128 21 0 0 1 0 1 1 0 8 0 pfstate 448 21 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 72 4 0 2 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1620 0 148 93 0 93 93 0 8 0 ffsino 296 1620 0 148 114 0 114 114 0 8 0 nchpl 144 1853 0 154 64 0 64 64 0 8 0 vnodes 216 1720 0 0 96 0 96 96 0 8 0 namei 1024 5675 0 5674 2 0 2 2 0 8 1 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 7186 0 7184 11 3 8 8 1 8 7 plimitpl 152 30 0 13 1 0 1 1 0 8 0 sigapl 424 482 0 436 7 0 7 7 0 8 1 knotepl 120 98 0 0 3 0 3 3 0 8 0 kqueuepl 224 37 0 26 1 0 1 1 0 8 0 pipepl 344 137 0 110 3 0 3 3 0 8 0 fdescpl 528 466 0 436 3 0 3 3 0 8 0 filepl 160 1730 0 1510 10 0 10 10 0 8 0 lockfpl 104 13 0 11 1 0 1 1 0 8 0 lockfspl 48 6 0 4 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 101 0 88 1 0 1 1 0 8 0 zombiepl 144 436 0 436 1 0 1 1 0 8 1 processpl 1232 482 0 436 5 0 5 5 0 8 0 procpl 664 530 0 478 6 0 6 6 0 8 1 sockpl 752 198 0 165 5 0 5 5 0 8 1 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 0 15 15 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mextrefs 64 20 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 223 0 0 14 0 14 14 0 8 0 bufpl 272 2354 0 105 150 0 150 150 0 8 0 anonpl 32 3877 0 0 32 0 32 32 0 222 0 amapchunkpl 152 9307 0 8877 20 0 20 20 0 158 0 amappl16 200 1999 0 1978 5 0 5 5 0 8 3 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 435 0 434 1 0 1 1 0 8 0 amappl13 176 142 0 130 1 0 1 1 0 8 0 amappl12 168 715 0 686 2 0 2 2 0 8 0 amappl11 160 14 0 14 2 1 1 1 0 8 1 amappl10 152 68 0 54 1 0 1 1 0 8 0 amappl9 144 280 0 280 1 0 1 1 0 8 1 amappl8 136 97 0 95 1 0 1 1 0 8 0 amappl7 128 168 0 153 1 0 1 1 0 8 0 amappl6 120 157 0 155 1 0 1 1 0 8 0 amappl5 112 107 0 97 1 0 1 1 0 8 0 amappl4 104 298 0 280 1 0 1 1 0 8 0 amappl3 96 1649 0 1547 3 0 3 3 0 8 0 amappl2 88 535 0 474 2 0 2 2 0 8 0 amappl1 80 10528 0 9929 15 0 15 15 0 8 2 amappl 88 2578 0 2433 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 466 0 436 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 466 0 436 1 0 1 1 0 8 0 vmmpekpl 168 5886 0 5851 2 0 2 2 0 8 0 vmmpepl 168 39508 0 37673 88 0 88 88 0 357 2 vmsppl 488 465 0 436 5 0 5 5 0 8 1 rwobjpl 80 15030 0 14023 25 0 25 25 0 8 2 pdppl 4096 940 0 872 98 16 82 86 0 8 14 pvpl 32 11768 0 0 95 0 95 95 0 265 0 pmappl 256 465 0 436 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 423 0 20 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 intr_handler(ffff8000372f7fe0,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f uvm_objtree_RBT_COMPARE(ffff8000372f8140,fffffd800bf65290) at uvm_objtree_RBT_COMPARE+0x19 _rb_find(ffffffff846e7940,ffff8000018ce478,ffff8000372f8140) at _rb_find+0x8b uvm_pagelookup(ffff8000018ce468,127000) at uvm_pagelookup+0xa0 uvn_get(ffff8000018ce468,127000,ffff8000372f8760,ffff8000372f8460,3,4,127000,4) at uvn_get+0x5de uvm_fault_lower_lookup(ffff8000372f8660,ffff8000372f8608,ffff8000372f8760) at uvm_fault_lower_lookup+0x2ff uvm_fault_lower(ffff8000372f8660,ffff8000372f8608,ffff8000372f8760) at uvm_fault_lower+0xb6 uvm_fault(ffff800001c3a3e8,d6280e25000,0,4) at uvm_fault+0x3ef upageflttrap(ffff8000372f8950,d6280e25cf0) at upageflttrap+0xe0 end trace frame: 0xffff8000372f8940, count: 0 ddb{0}> trace x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 intr_handler(ffff8000372f7fe0,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f uvm_objtree_RBT_COMPARE(ffff8000372f8140,fffffd800bf65290) at uvm_objtree_RBT_COMPARE+0x19 _rb_find(ffffffff846e7940,ffff8000018ce478,ffff8000372f8140) at _rb_find+0x8b uvm_pagelookup(ffff8000018ce468,127000) at uvm_pagelookup+0xa0 uvn_get(ffff8000018ce468,127000,ffff8000372f8760,ffff8000372f8460,3,4,127000,4) at uvn_get+0x5de uvm_fault_lower_lookup(ffff8000372f8660,ffff8000372f8608,ffff8000372f8760) at uvm_fault_lower_lookup+0x2ff uvm_fault_lower(ffff8000372f8660,ffff8000372f8608,ffff8000372f8760) at uvm_fault_lower+0xb6 uvm_fault(ffff800001c3a3e8,d6280e25000,0,4) at uvm_fault+0x3ef upageflttrap(ffff8000372f8950,d6280e25cf0) at upageflttrap+0xe0 usertrap(ffff8000372f8950) at usertrap+0x4f9 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7cd2065b7ad0, count: -16 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd0110,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd0110,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e6c0,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e6c0,65560,4000,ffff80003bb7b5c0) at bread+0x47 ffs_update(ffff800001d122a8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d122a8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bb7b9a0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001b99988,ffff800045ff5250) at VOP_INACTIVE+0x1bb vrele(ffff800001b99988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000300,ffff800001d3f490,ffff800000119820) at ktrsettrace+0x16c ktrops(ffff800045ff5250,ffff8000299179d0,0,80000300,ffff800001d3f490,ffff800000119820) at ktrops+0x338 doktrace(ffff800001d3f490,4,300,0,ffff800045ff5250) at doktrace+0xa72 end trace frame: 0xffff80003bb7be90, count: 0 ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd0110,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd0110,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e6c0,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e6c0,65560,4000,ffff80003bb7b5c0) at bread+0x47 ffs_update(ffff800001d122a8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d122a8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bb7b9a0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001b99988,ffff800045ff5250) at VOP_INACTIVE+0x1bb vrele(ffff800001b99988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000300,ffff800001d3f490,ffff800000119820) at ktrsettrace+0x16c ktrops(ffff800045ff5250,ffff8000299179d0,0,80000300,ffff800001d3f490,ffff800000119820) at ktrops+0x338 doktrace(ffff800001d3f490,4,300,0,ffff800045ff5250) at doktrace+0xa72 sys_ktrace(ffff800045ff5250,ffff80003bb7c010,ffff80003bb7bf80) at sys_ktrace+0x1f6 syscall(ffff80003bb7c010) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3ec4a911b20, count: -17