last executing test programs: 4.858407953s ago: executing program 1 (id=2): r0 = kqueue1(0x10000) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5388) mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) open$dir(&(0x7f0000000240)='./file0\x00', 0x8, 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="19a0", 0x2}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="19a0", 0x2}], 0x1) pselect(0x40, &(0x7f0000000180)={0x9, 0x5, 0xb, 0x1, 0x9, 0x6, 0x8, 0x80000000008}, 0x0, 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000180)={0x9, 0x5, 0xb, 0x1, 0x9, 0x6, 0x8, 0x80000000008}, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0xea) closefrom(r0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x0, &(0x7f0000000240)}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x0, &(0x7f0000000240)}) socket$inet(0x2, 0x3, 0x14) (async) r3 = socket$inet(0x2, 0x3, 0x14) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000300)=0x5c) ioctl$FIOASYNC(r3, 0xc0106924, &(0x7f0000000280)=0x3005) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r4 = socket$inet6(0x18, 0x2, 0x0) ioctl$FIOASYNC(r4, 0x80206910, &(0x7f00000002c0)=0x7) ioctl$AUDIO_GETDEV(r1, 0x4030411b, &(0x7f00000001c0)) (async) ioctl$AUDIO_GETDEV(r1, 0x4030411b, &(0x7f00000001c0)) 4.361920423s ago: executing program 7 (id=9): execve(0x0, &(0x7f0000000000)=[&(0x7f0000000040)='//\x00'], 0x0) socket$inet(0x2, 0x1, 0x6) socket$inet6(0x18, 0x1, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x8, "ff01000000010000fb0f000800", 0x803}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f0000000140)={0x1c, 0x18, 0x2, 0x3, "ff37e132be7600", 0x7}, 0x1c) sysctl$net_inet_tcp(&(0x7f0000000180)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffe64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x4, &(0x7f00000003c0)=0x6, 0x4) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000400), 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) setresuid(0x0, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) socket$inet(0x2, 0x2, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000480)={0x0, &(0x7f00000004c0)}) socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r0, 0xc0106924, &(0x7f0000000500)=0xfffffffd) r2 = kqueue1(0x4) kevent(r2, &(0x7f0000000540), 0x3ff, &(0x7f0000000580), 0xad, 0x0) ioctl$DIOCSETSTATUSIF(0xffffffffffffffff, 0xc0284414, &(0x7f00000005c0)={'./file0\x00', 0x0, 0x81, 0x4000007, 0x3396, 0x2}) mknod(&(0x7f0000000600)='./file0\x00', 0x2000, 0xffff6383) r3 = open(&(0x7f0000000640)='./file0\x00', 0x1, 0xb) ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000680)=0x1) closefrom(r1) 4.361536514s ago: executing program 5 (id=10): sysctl$kern(&(0x7f0000000180)={0x1, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, &(0x7f0000000040)='_\x00\x00\x00', 0x4) getsockname$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x48}}, 0x38, 0x5) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000140)=0x10001) 4.360788413s ago: executing program 0 (id=1): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f00000001c0)={{'./file0\x00', './file0\x00', 0x2, 0xb7}, 0x0, 0x7605, 0x0, 0x1ff, 0x2, 0x3ff, 0xa, 0x20, 0xfffffffe}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x400000) sysctl$hw(&(0x7f0000000080)={0x6, 0x7}, 0x261e4721e4f1fe12, 0x0, 0x0, &(0x7f0000000100)="9e15063a4efafec64f8f6d26d2d2b7f546edab684e1527353138d0eca10800382d0cf69b3573ff657825b8e641e13e34799c2c151de60b3b41c4962da5e13cd02ed47924acdfd618a9370b6c3f6b3c6926032356f6a66a775744223c20a8a33da681da36902e5fb6d8cacd54db12f3354ab90922e8a57f3022eb41801d16d52f09000000f880d5fed840b346d331dfad333ef01e1056fd243e0000a1164fab5f461e15384cd6751cdb74bd3bbbdc0a30c87d4440be8cc210aa3984", 0x0) unlink(&(0x7f0000000000)='./file0\x00') 4.120024685s ago: executing program 0 (id=11): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x4) (async) write(r0, &(0x7f0000000040)="1c4c97c81db49e11d4c13eb15a069f071ee0", 0xfffffe75) (async) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={0x10, 0xffff, 0x1, [0xffffffffffffffff]}], 0x10, 0x8}, 0x204) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x64f2) (async) open(&(0x7f0000000140)='./file0\x00', 0x7c6, 0x1b2) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1b1, 0x8}, 0x0, 0x0, 0x0, 0xda0, 0x0, 0x9, 0x72a2, 0x3d, 0x0, 0x3ff, 0xa}) 4.119775801s ago: executing program 2 (id=3): open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) (async, rerun: 64) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0xea) (rerun: 64) writev(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)="19a09f0a202db400721b86085f2ccb05793b8c2b5fa2ca44d6760feccbaa42ce584b73722125bc3a0080e544a9b04f43186c91c63608e995b3d891c8ad165b0e2c", 0x41}, {&(0x7f0000000080)="e33028486f207984d904e906003aeccb3023e6", 0xfffffe6b}], 0x2) truncate(&(0x7f0000000000)='./file0\x00', 0x88100) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xca) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) chmod(&(0x7f0000000140)='./file0\x00', 0xe0) (async) getresgid(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x2011, r1, 0x0) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = shmget$private(0x0, 0x2000, 0x180, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x0) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) mlock(&(0x7f0000ff6000/0x8000)=nil, 0x8000) 4.119615914s ago: executing program 3 (id=4): setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1690f}) r0 = kqueue1(0x10000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x7c6, 0xea) r2 = kqueue1(0x4) kevent(r1, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffe, 0x37, 0x80, 0x10000000000001, 0x401}], 0x9, 0x0, 0x9, 0x0) kevent(r0, &(0x7f00000000c0)=[{{r2}, 0xffffffffffffffff, 0xc9, 0x1, 0x8, 0x12}], 0x86, 0x0, 0xffff4b4d, 0x0) write(r2, 0x0, 0x0) kevent(r0, 0x0, 0x86, 0x0, 0xffff4b4d, 0x0) pselect(0x40, &(0x7f0000000100)={0x4, 0xffffffff, 0xffffffffffff0000, 0xf7, 0xc677, 0x8, 0x8, 0x400}, &(0x7f0000000140)={0x8, 0x6, 0xedb, 0x0, 0xfffffffffffffff1, 0x7, 0x0, 0x4e}, &(0x7f0000000180)={0x8, 0x2, 0x8, 0x4, 0x6, 0x1, 0x7, 0x5}, &(0x7f00000001c0)={0x2, 0xee}, &(0x7f0000000200)={0x8001}) closefrom(r0) syz_open_pts() 4.118731782s ago: executing program 5 (id=13): sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x80}], 0x1, 0x0, 0x0) unveil(0x0, &(0x7f00000003c0)='w\x00') mkdir(&(0x7f00000004c0)='./file0\x00', 0x148) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xa) setresuid(r2, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) setresuid(0x0, r6, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x80) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') open(&(0x7f0000000340)='./file0\x00', 0x200, 0x112) rmdir(&(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0xd01) mprotect(&(0x7f0000119000/0x1000)=nil, 0x1000, 0x4) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={{0x980, 0xf327}, {0x100000001}}) symlinkat(&(0x7f0000000100)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x2}, 0x40000000000000c2, &(0x7f0000000180)="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", 0x0, 0x0, 0x0) 4.118265142s ago: executing program 7 (id=14): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x5beb) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f0000000180)=0x3005) r2 = kqueue1(0x0) kevent(r2, &(0x7f00000001c0), 0x3ff, &(0x7f00000002c0), 0xb592, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x10000, 0xb) ioctl$WSDISPLAYIO_SVIDEO(r3, 0x82907003, &(0x7f0000000340)=0x1) ioctl$WSDISPLAYIO_SVIDEO(r3, 0x80487008, &(0x7f0000000380)=0x1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) munlock(&(0x7f000033c000/0x1000)=nil, 0x1000) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000040)={0x7fff, 0x2}) sysctl$net_inet6_ip6(&(0x7f0000004580)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f00000045c0)="52d87126a7", &(0x7f0000004640)=0x5, 0x0, 0x0) r4 = dup2(r0, 0xffffffffffffff9c) recvmsg(r4, &(0x7f0000000280)={&(0x7f0000000080)=@un=@abs, 0x8, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/110, 0x6e}, 0x2000) 3.673453526s ago: executing program 2 (id=15): setrlimit(0x3, &(0x7f0000000040)={0x7, 0x1ff}) syz_open_pts() setrlimit(0x3, &(0x7f0000000040)={0x7, 0x1ff}) (async) syz_open_pts() (async) 3.671753209s ago: executing program 5 (id=17): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffff9c, 0xc00464be, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={r1, 0xa4, &(0x7f0000000080)=""/164}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000180)=[0xfffffffa], &(0x7f00000001c0)=[0x9, 0x49c, 0x101, 0x9, 0x1], &(0x7f0000000200)=[0x33, 0x8, 0x8, 0x0], &(0x7f0000000240)=[0xb], 0x0, 0xe3}) ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffff9c, 0x80045745, &(0x7f00000002c0)=0x1) r2 = socket$inet6(0x18, 0x3, 0x7) pwrite(r0, &(0x7f0000000300)="1c824b6ceaccb8fe955a9a23c83afafb8942cfca43d7607fbbe30dc7b84fcf528cd3fc464c828c", 0x27, 0x3) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000340)={0x7, 0x0, 0x67bd}, 0x6) ftruncate(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000003c0)={0x2, 0x451, 0x3, 0x1, 0xffffff80, 0x8, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000400)={0x1, 0x3, 0x0, 0x7d7, 0x10001, 0x91, r4}) pwrite(r3, &(0x7f0000000440)="ca781dbac7e58aeb6b1936f9baf1a3d16c65d0da169136820e918970c2dddab35fa93741d836b59d14e56ea30bdea6c94292a53d707ef7667e83a37b0efacb8835c09f053f01aad17ab8a611a58780efd211193f792ea489d82fbd3b77c3d7220dfdafa6c99f21e24310beda408e16ec913e7813cd79662109bd61a3ca3f1fc7c037ec5eed5adf093bba6b5030c41ebe41b361245162d407877a9e3859e0324d5c9562b884012b1390a30b03d892bbf9fccf3b7e88e7c972bfc9ccb45e56", 0xbe, 0x1) ioctl$DIOCRCLRTABLES(0xffffffffffffff9c, 0xc450443c, &(0x7f0000000500)={{'./file0\x00', './file0\x00', 0x10, 0x5}, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0xb7fe, 0x5, 0x6, 0x80000000}) r6 = openat$dri(0xffffffffffffff9c, &(0x7f0000000980)='/dev/dri/card0\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000009c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x0, 0x7, 0x3, 0x3, 0xc, 0x4, 0x7, 0x5], 0x8, 0x10004, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r9, 0xc01864c2, &(0x7f0000000a80)={0x0, 0x2, r6, 0x0, 0xcb}) getpid() getpgrp() ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000b00)={&(0x7f0000000ac0)=[0x0], 0x1, 0x0, 0x0, 0x1, 0xe63f, 0x6, 0x100, {0x40, 0xd, 0xc, 0xfffd, 0x3, 0x7, 0x1ff, 0x9, 0x533, 0xe1, 0x6, 0xfffffffd, 0x100, 0x68, "83bf14ec36b7f6565b6e2bf0672345c981b148e65dd13790e2603bbef70885f5"}}) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000b80)={r10, 0x5, 0x9, 0x289a, 0x0, 0x8, r5}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) fcntl$getown(r0, 0x5) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000000c00)={r8}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000c40)={r12}) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000c80)={r11, 0xef4, 0xa48f, 0x40, 0xb, 0x0, r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x80086409, &(0x7f0000000cc0)={r13, 0x10001}) setresgid(0x0, 0x0, 0x0) 3.671525617s ago: executing program 6 (id=18): mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) gettimeofday(&(0x7f0000000080), 0x0) (async) r0 = syz_open_pts() ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040), &(0x7f00000000c0)=0x10) 3.671279074s ago: executing program 7 (id=19): sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x80000000, 0x5, 0x1, 0x494, "2feac1b1549b00", 0x0, 0x6}) r0 = kqueue1(0x10004) kevent(r0, &(0x7f0000000200), 0x100f00, 0x0, 0xffff4b51, 0x0) mquery(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xffffffffffffffff, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x2, 0x0, 0x0, 0x0, 0xb) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000100)={0x1, 0x59}, 0x3, &(0x7f0000000140)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400"/104, &(0x7f00000001c0)=0x5b, 0x0, 0xfffa) sysctl$kern(&(0x7f0000000000)={0x1, 0x1d}, 0x2, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0) 3.399551406s ago: executing program 6 (id=21): socket$inet(0x2, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind(r0, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) pselect(0x40, &(0x7f0000000080)={0xe3, 0x9, 0xff, 0x10000002, 0x6, 0xfffffffe, 0x2, 0xff}, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x472) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000040)={&(0x7f0000000100)=[{0x7, 0x2}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vfs_nfs(&(0x7f0000000140), 0x3, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) 3.399303123s ago: executing program 6 (id=22): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000340)={@v6=@mcast2, @v6=@loopback={0x1000000}, @v4, @v4=@local={0xac, 0x14, 0x0}, 0x7, 0x4, 0x1, 0x2, 0x80, 0x6, 0x18, 0x9, 0x1}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r3 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r3, 0xc1286944, &(0x7f00000002c0)=0x7) read$audioctl(r2, &(0x7f0000000140)=""/107, 0x6b) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="b82d72df1e5ffe22ab445035ff9c2a8c1b7285ccd5c84901953f272b9d3032e5645aac0201f05a3235065ad504f29c24445b925fd21ba50dbc13023c6b4bdeda4705fefc68b3231d1f9074ac55c28ee2a3c2feeb03093124ecc78b17ecf3aae123ac9cd20937651a4e2d20", 0x6b}], 0x1) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0xd0) 3.232599528s ago: executing program 4 (id=27): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000001040)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = socket$inet6(0x18, 0x2, 0x0) ioctl$FIOASYNC(r0, 0x80206999, &(0x7f0000001080)=0x7) (async) ioctl$FIOASYNC(r0, 0x80206999, &(0x7f0000001080)=0x7) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@un=@file={0x0, 0x0, ""/4087}, &(0x7f0000001000)=0xff9, 0xa000) dup(r1) (async) dup(r1) r2 = kqueue1(0x10000) kevent(r2, &(0x7f0000000280), 0xf00, 0x0, 0xffff4b51, 0x0) sysctl$net_inet_udp(&(0x7f0000002380)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f00000023c0)="3624c0de569c2a137ff2c2f9bdd1bf34a21b30239ff1d621c6faa381aacef15e503c852985f3c382ecad4c9581751e827ef56fc825363fcb1a444ac2d2190e48f85fab1e398ab9a7a594c896adcadae80cec5b580ca7", &(0x7f0000002440)=0x2000, 0x0, 0x0) (async) sysctl$net_inet_udp(&(0x7f0000002380)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f00000023c0)="3624c0de569c2a137ff2c2f9bdd1bf34a21b30239ff1d621c6faa381aacef15e503c852985f3c382ecad4c9581751e827ef56fc825363fcb1a444ac2d2190e48f85fab1e398ab9a7a594c896adcadae80cec5b580ca7", &(0x7f0000002440)=0x2000, 0x0, 0x0) 2.972263267s ago: executing program 4 (id=28): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd01) (async) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x43) ioctl$TIOCSETD(r0, 0x44946472, &(0x7f0000000080)=0x3) (async) r1 = open(&(0x7f0000001980)='./file0\x00', 0x1, 0x26) mkfifo(&(0x7f00000000c0)='./file1\x00', 0x21) (async) ioctl$TIOCSETD(r1, 0x84946467, &(0x7f0000000080)=0xffffffff) fstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$DIOCRGETTSTATS(r3, 0xc4504440, &(0x7f0000000200)={{'./file1\x00', './file0\x00', 0x0, 0x36}, 0x0, 0x4d0, 0x0, 0x10000000, 0x4, 0x20000008, 0x1ffe000, 0x0, 0x9}) (async) sysctl$kern(&(0x7f0000000840)={0x1, 0x15}, 0x2, &(0x7f0000000880)="8b83e99b1bf7b3a74fd444dae99a4719", &(0x7f00000008c0)=0x10, &(0x7f0000000900), 0x0) (async) fchownat(0xffffffffffffffff, 0x0, 0x0, r2, 0x4) (async) open(&(0x7f0000000680)='./file0\x00', 0x19083084ca9cf73d, 0x10) chmod(&(0x7f00000006c0)='./file0\x00', 0x19b) seteuid(0xffffffffffffffff) truncate(&(0x7f0000000700)='./file0\x00', 0xca) (async) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000740)={0x10, 0x2, 0x3, 0x5}, 0x10) getpeername$inet(r4, 0x0, &(0x7f0000000780)) (async) truncate(&(0x7f00000007c0)='./file0\x00', 0x100000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async) r6 = openat$wsmouse(0xffffffffffffff9c, 0x0, 0x191, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, 0x0) setreuid(0x0, 0x0) (async) r7 = getuid() setuid(r7) write(r5, &(0x7f0000000840), 0x0) pread(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff8550) sysctl$hw(&(0x7f0000000100)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) 2.969852582s ago: executing program 4 (id=29): socketpair(0x5, 0x2, 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffff9c, 0x80085761, &(0x7f0000000000)={0x1, 0x4}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x8000) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000040)={0x90f, 0x3}) 2.961604492s ago: executing program 4 (id=30): sysctl$ddb(&(0x7f0000000000)={0x9, 0x4}, 0xb, 0x0, 0x0, 0x0, 0x0) kill(0x0, 0x13) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x80045102, &(0x7f0000000080)=0x7863) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = syz_open_pts() ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000180)={0x9, 0x3, 0x7, 0xfffffffe, "9e9277bea6000000fa080000000200", 0x3, 0xcfe}) r1 = socket$unix(0x1, 0x5, 0x0) closefrom(r1) setrlimit(0x8, &(0x7f00000001c0)={0x9, 0x37e1790c}) kqueue() syz_open_pts() sysctl$hw(&(0x7f0000000200)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000240)={0x1007, 0x8003, 0xffffffc0, 0x3b6d67bb, "fe09fe7adfd40720f9ffffaa050349bfe36000", 0xff, 0x3}) write(r0, &(0x7f0000000280)="7ef5b69389", 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='w\x00') madvise(&(0x7f0000158000/0x1000)=nil, 0x1000, 0x0) bind$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0x1c, 0x18, 0x0, 0x0, "6aae8f8dda8877b0a9d89adb97a54a7a", 0x9}, 0x1c) sysctl$ddb(&(0x7f0000000000)={0x9, 0x4}, 0xb, 0x0, 0x0, 0x0, 0x0) (async) kill(0x0, 0x13) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x80045102, &(0x7f0000000080)=0x7863) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) syz_open_pts() (async) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000180)={0x9, 0x3, 0x7, 0xfffffffe, "9e9277bea6000000fa080000000200", 0x3, 0xcfe}) (async) socket$unix(0x1, 0x5, 0x0) (async) closefrom(r1) (async) setrlimit(0x8, &(0x7f00000001c0)={0x9, 0x37e1790c}) (async) kqueue() (async) syz_open_pts() (async) sysctl$hw(&(0x7f0000000200)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000240)={0x1007, 0x8003, 0xffffffc0, 0x3b6d67bb, "fe09fe7adfd40720f9ffffaa050349bfe36000", 0xff, 0x3}) (async) write(r0, &(0x7f0000000280)="7ef5b69389", 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='w\x00') (async) madvise(&(0x7f0000158000/0x1000)=nil, 0x1000, 0x0) (async) bind$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0x1c, 0x18, 0x0, 0x0, "6aae8f8dda8877b0a9d89adb97a54a7a", 0x9}, 0x1c) (async) 2.961031883s ago: executing program 4 (id=31): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) dup(r0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0xea) kill(0xffffffffffffffff, 0x1e) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0xc3) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000140)={0x8009, 0x737, 0xfffdffc0, 0x24d, "0100000000000600"}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCADDRULE(r3, 0xcd604404, &(0x7f0000000f80)={0x800, 0xffffc9ea, 0x5, './file0\x00', './file0\x00', 0x0, "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"}) openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) dup(r0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) (async) open(&(0x7f0000000040)='./file0\x00', 0x1, 0xea) (async) kill(0xffffffffffffffff, 0x1e) (async) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) (async) open(&(0x7f0000000100)='./file0\x00', 0x80, 0xc3) (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000140)={0x8009, 0x737, 0xfffdffc0, 0x24d, "0100000000000600"}) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) ioctl$DIOCADDRULE(r3, 0xcd604404, &(0x7f0000000f80)={0x800, 0xffffc9ea, 0x5, './file0\x00', './file0\x00', 0x0, "dda0fc545c4529959a9f0a237756f85776112447463b29b2007f5cdd16ce8260ef39bf6d604083278b9ebbcce2426651452db2f9f620430f318e59c103001e9d8f2337ac2825499b472471001e8156860dcea68e44d7f398b5bd53972bbd68e7d77bbee23f44bfbe5bdf70f2717e32178eff720fe5d6f4c6d8d01e05e4955d576548c08b5713f7106e5df9872fa1a857e75430ef8dd74b0e5f7a2070e65bde8026e93dce6be55f4f8bad416275e7a5f87f8f18397321a5059e60b0effd0045f38940409b89bdb74b6262b810f0e6bcc5a12bc3c3534691ba4a1cc1f5dcdc2c3ee56ea47ea1f3e314ebeb4c6515b72b9aa4af3dec7b01be958e5cf9630b1ceffaa0885590b642590d69cb5ee779fbe5f3a51c601d92e04f95d24f984689669273a773fcefe88e64cfa39aee8609e48a1d64c28f54d2ef37d50886e6ac6e973f2779656a480e2bcc731e9d72dbdbb3e82f398be321fd62af0a90ba2cb3fddbc98ca06b7d1828392909304455eb93d82081d8828685f72d56fa3da5a0d082d629f545cf50fdb30c80f0ea2b5d9cb6317d347bd5de81ca2786817412664c4974b5c1ccd7389abfca6cad902944cf9ae562479ad88f7dcd02f2a44846bc8f7b299c89a465fb5d9c638d677c0777dafe8091a5f5debecda90f16cf013aa002e104ae6af766967c65a7c21bd7a0515618bec57723be80ea4a89f88748fa83d6030cdd4acf1dcd335020ee2a389e31de2864ddddb7c5b906a020ca4b76e10aa32fd51a97f1832d7d9c263ec5d179c85965811b830fbdeecff5b817991cad782014b0e878d9014191a102435c8703841b6cbbf7ff823899ca2c018d10d0f848da393e11c5d036df406627f749a99addf809f6333f9dc5b3c35351ec2a898c216cb915390fba98efe6c57a55e199f8718312e9276f23f8c9471ef61bb27f43ed8e3bd4cf0c58b38107a613c2cea5e51385ce9ffac38f73657d71b363226be4c0708c02cd39c358bacfc18cc04d84b8382e0eae412a881774e134912965379a0d5b705cd8f6edb66a15e1a120842cfac1cfa48a5c96be27552354b1b52296f71037b1f63eec60608cebd0aad884358a5cf8bda9045cd9e8564055f6258c8be88e2fdf6d57671df86043c3576b2cae2ff1fa8aeb9bbbc2b44680c42ee188e1936fa43591bf01f1b33c8fc3d9cc038569128ed73f4a8d2816edbc925f97d2b8806690375cb59888d7c9500d860ef7dc2edfc1d51f31b6e230537120b6bcc99841e0670a9c6adab399b49c51b8218fc478132b5044339ed249edc2d6fd505d6880a5df1a5210a0d48d41d772ea6a3a50f11ec842230408973bd57f69551d5289d2991160972b9b2e0c8b8eb69bbd9366c0cf5449ad83a6bb4adeb1fd1887fef32588bb0437a387fad91428edb58113919537c48ced9154cccc37343d6722949793460a43594b286ef7c115eec15f464adac7aa1d143ed8c4f0de59eec24f20caf11ad8225a32a9c2d545f3a3e35da29402c38cb071134d45dcc50a53da266d664e32d3ff395692215831ac278649b82832e98763fb09e3c0729d8719bb6014fe093f159ab4891aaaf54a3edd808acf70e95f8ff415396d5d42de6a70d8d285d8e7d20e97f0b623390fadf0985f7c8e43619b45e826207997a169aa5469513d3c3d9827db39bd0d9f13da8ec41a59d761ec9b119b115293d96e586ed9fffb3a3298cb580653e9d43e767b3ca6619fc6ed6676a20894d7c960e2cfdfdfa2c5461f882c896a82bd3e3eab31a42c52fa20f664a89ba42ba7c67fc320331f096800567e2473985cf9e9074ed4de47ff36c87aab1814a93e1cdb9bd47533c952e3ca2a0c4b54adeb4d01317fbf9fe6af10d3d9031f28876384bac037b67a84cd49953ca25e34e989680003aff2a6ab735f5367271ed65d5cd015"}) (async) 2.3972634s ago: executing program 4 (id=32): r0 = syz_open_pts() (async) r1 = socket$unix(0x1, 0x5, 0x0) closefrom(r1) (async) setrlimit(0x8, &(0x7f0000000000)={0x9, 0x37e1790c}) (async) kqueue() (async) syz_open_pts() (async) ioctl$DIOCCHANGERULE(0xffffffffffffffff, 0xcd60441a, &(0x7f0000000300)={0x4, 0x2, 0xffff, './file0\x00', './file0\x00', 0x0, "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"}) (async) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x28, 0x0, 0x0) (async) write(r0, &(0x7f0000001080)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async) r2 = syz_open_pts() (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) closefrom(r3) (async) setrlimit(0x8, &(0x7f00000002c0)={0x9, 0x37e1790c}) syz_open_pts() (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000180)={0x8, 0x21, 0x7, 0xd, "fe83fe7a9542a14123a70000001efffee97fb686", 0x9, 0xcfb}) (async) writev(r2, &(0x7f0000001300)=[{&(0x7f0000001340)='T', 0x1}], 0x1) (async) pselect(0x40, &(0x7f0000000040)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000240)={0x1709, 0xffffffff, 0x17, 0xb734, "b37fcf9b01c2965271309dfee463a24d172e4a52", 0x0, 0x8}) 2.395717259s ago: executing program 6 (id=33): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$inet6(0x18, 0x2, 0x5) setsid() r0 = syz_open_pts() r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSCTTY(r0, 0x20007461) ioctl$TIOCSCTTY(r0, 0x20007461) 711.950584ms ago: executing program 3 (id=34): sysctl$hw(0x0, 0x0, &(0x7f0000000580)="5433be0b47cf96550c3e484377d9d5849018", 0x0, 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) r0 = socket$inet6(0x18, 0x3, 0x7) truncate(&(0x7f0000000000)='./file0\x00', 0x2) (async) ioctl$FIOASYNC(r0, 0xc1206949, &(0x7f0000000580)=0x10) 710.49153ms ago: executing program 5 (id=35): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x64f2) open(&(0x7f0000001980)='./file0\x00', 0x40000, 0x6c) 710.253231ms ago: executing program 1 (id=2): r0 = kqueue1(0x10000) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5388) mkfifo(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) open$dir(&(0x7f0000000240)='./file0\x00', 0x8, 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="19a0", 0x2}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="19a0", 0x2}], 0x1) pselect(0x40, &(0x7f0000000180)={0x9, 0x5, 0xb, 0x1, 0x9, 0x6, 0x8, 0x80000000008}, 0x0, 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000180)={0x9, 0x5, 0xb, 0x1, 0x9, 0x6, 0x8, 0x80000000008}, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0xea) closefrom(r0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x0, &(0x7f0000000240)}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x0, &(0x7f0000000240)}) socket$inet(0x2, 0x3, 0x14) (async) r3 = socket$inet(0x2, 0x3, 0x14) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000300)=0x5c) ioctl$FIOASYNC(r3, 0xc0106924, &(0x7f0000000280)=0x3005) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r4 = socket$inet6(0x18, 0x2, 0x0) ioctl$FIOASYNC(r4, 0x80206910, &(0x7f00000002c0)=0x7) ioctl$AUDIO_GETDEV(r1, 0x4030411b, &(0x7f00000001c0)) (async) ioctl$AUDIO_GETDEV(r1, 0x4030411b, &(0x7f00000001c0)) 710.128722ms ago: executing program 2 (id=36): unveil(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)='x\x00') (async) r0 = shmget$private(0x0, 0x1000, 0xe0, &(0x7f0000a23000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) (async, rerun: 64) openat$dri(0xffffffffffffff9c, &(0x7f0000005180)='/dev/dri/renderD128\x00', 0x200, 0x0) (rerun: 64) 473.630335ms ago: executing program 1 (id=37): seteuid(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0\x00', 0x148) getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r3, r4) setresuid(r3, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x200, 0x104) access(&(0x7f0000000240)='./file0\x00', 0x4) r5 = syz_open_pts() ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0x8) 470.128309ms ago: executing program 2 (id=38): r0 = open(&(0x7f0000000000)='./file0\x00', 0x7c6, 0xea) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f0000000080)=0x3005) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r2 = socket$inet6(0x18, 0x2, 0x0) ioctl$FIOASYNC(r2, 0x80206910, &(0x7f00000000c0)=0x7) 469.861121ms ago: executing program 5 (id=39): r0 = syz_open_pts() r1 = dup2(r0, r0) ioctl$TIOCSCTTY(r1, 0x20007461) r2 = semget(0x2, 0x7, 0x240) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x108, 0x2, 0x1}, 0x0, 0x6b3, 0x0, 0x0, 0xa9e, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x84f, 0x1], 0x2, 0x10000}) open(&(0x7f0000000400)='.\x00', 0x800, 0x12) pselect(0x40, &(0x7f0000000000)={0x49f, 0x2, 0x6000000000027, 0x400000000000005, 0x1, 0x0, 0x8, 0x8}, 0x0, 0x0, 0x0, 0x0) getpid() open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0\x00') 466.359328ms ago: executing program 6 (id=40): seteuid(0xffffffffffffffff) unveil(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='x\x00') writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="abd7453f9950b84fba95b1b61c60075cc39796a11012ada0e0c3c9396b6f8cbd63e10842750ec4f55b1fa662e657103d5890ab8dc4aed3a9f3299eb13292cc984adf77932110f25b7b468f0f33bf3be0d978a872ee2bf014773bfd80c5921ba7f32c7c3374b6e4c8cba3721f117a5b51b43393950b024f68e1a0d073088b14502e2e", 0x82}], 0x1) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) write(r0, &(0x7f0000000a00)="cb9faad841e581f4fe8de35f00c23e3c05e2a8d27f3d2432697c2208c3001a06596c14dc3cf1d8445b9941ea5b27c3564d7fe57fad80bd4a2053bcf4c5add469ad69ed03fc4d1bef2b3ce893e79a7250322e5786ef4824e0dba3478e29fc549520f1741bb903b84fc6cec41474cccef6c922a95c1231439d2275f1ab31221f5407200b7a03dc4f9a3ade6a2b835a35b1776a3f3e1ef4f8b44e3832", 0x9b) unveil(0x0, &(0x7f0000000ac0)='w\x00') execve(0x0, &(0x7f0000000180)=[&(0x7f00000001c0)='//\x80UQ\x96\b\x00\x00\x00C\v\x16\xd6K2\xe1e\x8d\xf7\x9fK,\xdd*\x9eB=\xde*\xff\xdf\r\xd9\xa5\xa0k)\x027k\xda\xdf\xb7DO\xbd\xe42\xb5,\x05\x96\x81a)\xdbT$\'\x10\x8d1\x8cU\x1b\xd7\"t8\xda\xbc\x19\xfc\xca\xf46d\xed\xaf\xf8\x8ah\xba*\xce\x98\x85\xc1\xbdk'], 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pwritev(r1, &(0x7f0000000940)=[{&(0x7f0000000340)="b9f7323dc571e6419fb497a149d72d61a864576caf5235936e198721483ec32bc8ae9f196185ddc360505197aac9b06452d41e0f4374df62d18eaf56b52bd23195f0a7b687eb740986e5c11b82e9d1f7e670ba60da6b9057028e4f09060d0c885ca40f2b849d7f7319a4b7c110d2f1cf04", 0x71}, {&(0x7f00000003c0)="59cd8f40dd72c1e255355083ddc772d53dfee3ead40c8d9d3903f2a9485a8b2db908b2d979a1269e6956e46d3dc68a1746dbecca82075b89168685eeb279fbf2f77201536771753446343a3d858590de01e4dbcc841d1b440f7a5ced49a11891b80204225a02cc2eb96a0a069adab4013ff66fdfca4fe96b8e2ee8edfb9d8b7b6e7f5004", 0x84}, {&(0x7f0000000480)="7cb69a0937faf5f07b042b21ddbbfb03184c2cf39948fa779c7242dcfa05b80310abcb354c9f9d31f79ed5e317fd6f80f07eeeb402483fe17193fb5dcbc4303a7d1f832fe18168dbbec54683138038ed1a746feba25e070962e60a5e984426973a51bf52e7dc973d7c04799ac77784e6f450f35f5b13de416db6f5e2e0391d81a5f1309aa2ec7e65f6ade688f2add13bb159834dbdf76133415b4256035d74c671bb2264be524c3afeaad46488c2c79f1df8f56f90bb65ca53474c2b5f2f128655d08ae9ee7d489432a9b6adee7c2b7012ab88f90cb0b6b5d9ad734049a29c3bb401b10f10328fc748d41d6c70160dcaf1c5494468cf48455e", 0xf9}, {&(0x7f0000000580)="3d6c6fcd075e3850df540c151b30a8e6a8dfae24c2e3edd0e76de7bca6648ad027fe3306a1ffeee9e5ad12c0506d372cb35193c357bad18062afef261f7ee1609f2bcde84bcf285412d40e5b39840605ed4ed872e79b2c4f95e7e2fc829c7544b3337353d450fae0a5999144cfd4cd4cfd4ddbc8e1127f20fb4b3403eccf390c09e0ffa62e32131f270ab2f8a3f293b942308bb42c6fa295ec770b8ea86b8c4859815c27f0dc2cb4e2ae9e18bb2cd04bdce81f90495a8c194a2e0cac1469", 0xbe}, {&(0x7f0000000640)="1712d0a52a047ecc34ca904ff1c7c04403e6d39728c25aee93b9cdedff38f68a603e0dc648fc0cd6d3238bf2d7915d1555303974b7f35b576bbebd805086f7e5113cab3448aab7822f59608b39a4ec4144c8f8e38de427025850fe0c8e32fb4e1954e26af71e2a", 0x67}, {&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="82a7c23b2078798a678df3f02adb0d22d67231ca89f8f280ce78c82a6c0ec34e0e7896bee27093800f87c7072ea76382c1a888d52b2e99bc1d98afca976a5cc57aba71a07eeb2d8b0b3816528cd131467ec38b7ee45133b5d88b8eea2a403b60629bef3e6419e579a8a6452daa7baebf9daa8322517cd861acbf4c72f9ea76c225a892a33dad56e551a400ff346bf951d565c933a1d33de542c8963f6d68a42e87d5cb1388b56acb626c6029a8bf2be55958ea9b0ce3a2912c3a34b8b26a44a3192bdbfe16d78516b2fb675daedc52faa11a071ce1ac00848ccc93fe7867a150c391b7800b7dda1966fc80b066", 0xed}, {&(0x7f00000008c0)="ba25a3811c27cc7c5685a9a8846f3d79499e6f98a807032762458bc865675e18db82e0b9c681b68651b08affc7fefe9815ae048edfde292bf5866c2382d7cc80cf5fff8ea4f4ad3fb458317f8a5d01c3", 0x50}], 0x8, 0x3) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='x\x00') open$dir(&(0x7f00000002c0)='./file0\x00', 0x200, 0x80) access(0x0, 0x4) 464.343306ms ago: executing program 7 (id=41): openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = dup(0xffffffffffffffff) futimes(r0, &(0x7f0000000300)=[{0x7, 0x5}, {0x6, 0x100000001}]) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000180)='^-f\a', &(0x7f00000001c0)=0x4, 0x0, 0x0) ioctl$AUDIO_GETSTATUS_ctl(r0, 0x40204128, &(0x7f0000000200)) semop(0xffffffffffffffff, &(0x7f0000000240)=[{0x3, 0x20}], 0x1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000000100)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async) dup(0xffffffffffffffff) (async) futimes(r0, &(0x7f0000000300)=[{0x7, 0x5}, {0x6, 0x100000001}]) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000180)='^-f\a', &(0x7f00000001c0)=0x4, 0x0, 0x0) (async) ioctl$AUDIO_GETSTATUS_ctl(r0, 0x40204128, &(0x7f0000000200)) (async) semop(0xffffffffffffffff, &(0x7f0000000240)=[{0x3, 0x20}], 0x1) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000000100)) (async) 233.895082ms ago: executing program 5 (id=42): r0 = semget$private(0x0, 0x3, 0x698) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x69) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x2013, r1, 0x4) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) r3 = kqueue1(0x0) kevent(r3, &(0x7f0000000480), 0x3ff, &(0x7f00000004c0), 0xb592, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000000540)={0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}) closefrom(r5) r6 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000580)={0x1c, 0x18, 0x2, 0x94, "fffe0000000000000000008000", 0xfffffff6}, 0x1c) connect$inet6(r6, &(0x7f00000005c0)={0x1c, 0x18, 0x0, 0xa69d, '\aOp\x00', 0x88}, 0x1c) r7 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r7, 0xffff, 0x1023, &(0x7f0000000600), 0x20) ioctl$PCIOCREAD(r2, 0xc0107004, &(0x7f0000000380)={{0x4, 0x3}, 0x48cc, 0x4, 0x2}) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0xea) writev(r8, &(0x7f0000000080)=[{&(0x7f00000000c0)="19a09f0a202db400721b86085f2ccb05793b8c2b5fa2ca44d6760feccbaa42ce584b73722125bc3a0080e544a9b04f43186c91c63608e995b3d891c8ad165b0e2c", 0x41}, {&(0x7f0000000140)="e33028486f207984d904e906003aeccb3023e6", 0xfffffe6b}], 0x2) semctl$SETVAL(r0, 0x1, 0x8, 0x0) r9 = semget$private(0x0, 0x1, 0x62) execve(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x1c, 0x18, 0x2, 0x8, '\x00', 0x4}, 0x1c, 0x0, 0x0, 0x0}, 0x402) openat$audioctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff"]) sysctl$kern(&(0x7f0000000280)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000000300)="283e36a0", 0x4) r10 = kqueue1(0x10000) kevent(r10, &(0x7f0000000340), 0xf00, 0x0, 0xffff4b51, 0x0) semctl$GETVAL(r9, 0x4, 0x5, 0x0) semctl$IPC_RMID(r9, 0x0, 0x0) 222.50845ms ago: executing program 6 (id=43): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async, rerun: 64) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x20, 0xc0) (rerun: 64) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') (async) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000140)={0x1007, 0x4, 0xffffffc0, 0x3b6d67bb, "ff09fa7adfd4070f5b20ffff9caaac0349bfe360", 0xfb, 0x3}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000180)=0x7) (async) r1 = socket$inet6(0x18, 0x2, 0x0) shutdown(r1, 0x2) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x4, 0x6, "31f05f", 0x8, 0x11, 0x91, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x3, 0x8}}}}}}}) (rerun: 32) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) r2 = open(&(0x7f0000000200)='./file0\x00', 0x7c6, 0xea) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="19", 0x1}], 0x1) (async) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r0, 0x2}) (async, rerun: 64) sysctl$vfs_nfs(&(0x7f00000001c0)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (rerun: 64) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') 222.155493ms ago: executing program 7 (id=44): chroot(&(0x7f0000000000)='.\x00') unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='x\x00') sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$DIOCRDELADDRS(r0, 0xc4504444, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0xa, 0x9}, 0x0, 0x34, 0x0, 0x4, 0xc0, 0x8004, 0x4, 0x0, 0x4}) ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f0000002840)={{'./file0\x00', './file0\x00', 0x0, 0x6}, &(0x7f0000000700)=[{'./file0\x00', './file0\x00', 0x24, 0xc6}, {'./file0\x00', './file0\x00', 0x32, 0x4}, {'./file0\x00', './file0\x00', 0x44}, {'./file0\x00', './file0\x00', 0x10, 0x5}, {'./file0\x00', './file0\x00', 0x40, 0x7d}, {'./file0\x00', './file0\x00', 0x3, 0x5}, {'./file0\x00', './file0/file0\x00', 0x68, 0x3}, {'./file0\x00', './file0\x00', 0x21, 0x6}], 0x3, 0x8, 0x631da490, 0x7fffffff, 0x2, 0x3, 0x4, 0xb}) (async) ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f0000002840)={{'./file0\x00', './file0\x00', 0x0, 0x6}, &(0x7f0000000700)=[{'./file0\x00', './file0\x00', 0x24, 0xc6}, {'./file0\x00', './file0\x00', 0x32, 0x4}, {'./file0\x00', './file0\x00', 0x44}, {'./file0\x00', './file0\x00', 0x10, 0x5}, {'./file0\x00', './file0\x00', 0x40, 0x7d}, {'./file0\x00', './file0\x00', 0x3, 0x5}, {'./file0\x00', './file0/file0\x00', 0x68, 0x3}, {'./file0\x00', './file0\x00', 0x21, 0x6}], 0x3, 0x8, 0x631da490, 0x7fffffff, 0x2, 0x3, 0x4, 0xb}) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='c\x00') (async) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='c\x00') r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x182) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) 1.301417ms ago: executing program 7 (id=45): sysctl$net_inet_tcp(&(0x7f0000004a40)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00002cd000/0x4000)=nil, 0x4000) r0 = syz_open_pts() ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000240)={0x1007, 0x3, 0x7, 0xfffffffe, "9e9277bea6000000fa080000000200", 0x3, 0xcfe}) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004eda00540068000005019078ffffffffe000ffe194047fff071f08e0000002ac1400aa7f00000100000006ac1400aa000000007f00000100031ace912fb7f6f9a137972dea0f9078000000027f000001e0000001"]) ioctl$DIOCCLRSTATES(0xffffffffffffffff, 0x0, &(0x7f00000017c0)={{0x3, 0xe, 0x1}, 0x18, '\x00', 0x1ff, {@addrmask={@v4, @v4=@rand_addr=0x8, 0x0, 0x0, 0x8}, [0x2, 0x200], 0x4, 0x4, 0x7f}, {@any={'\x00', 0x0, 0x1, 0x2}, [0xfffb, 0x1], 0x5c, 0x2, 0xcf}, './file0\x00', './file0\x00', 0x2, 0x5}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) r2 = kqueue1(0x4) kevent(r2, &(0x7f0000001900), 0x3ff, &(0x7f0000001940), 0x1acf, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCADDRULE(r1, 0xcd604404, &(0x7f0000001980)={0x800, 0xffffc9ea, 0x5, './file0\x00', './file0\x00', 0x0, "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"}) write(r0, &(0x7f0000000280)="5d47de3679fd6808c284d0d37af80f966e9f8f6dc306b0381cd894744db250c481e8924bfd9addea2d48e33e7b455b34a2ffb87289924d001da1bcbc69874e3bde7a73a297aa7a1bc15a44377d74f982dd235a83024db752ed5494ba827fede38d", 0x61) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x20}, 0x402) closefrom(r3) setrlimit(0x6, &(0x7f0000000380)={0xe, 0x10037e1790c}) kqueue() r4 = syz_open_pts() mprotect(&(0x7f0000120000/0x2000)=nil, 0x2000, 0x2) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f00000003c0)={0x1007, 0x8003, 0xffffffc0, 0x3b6d67bb, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0xff, 0x7f}) ioctl$TIOCSTOP(r0, 0x2000746f) write(r0, &(0x7f0000000400)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) r5 = kqueue() pread(r5, &(0x7f0000000580)="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", 0x1000, 0x9) mknod(&(0x7f00000016c0)='./file0\x00', 0x2000, 0x672) r6 = open(&(0x7f0000001700)='./file0\x00', 0x80, 0x0) ioctl$TIOCSETA(r6, 0x8004745f, &(0x7f0000001740)={0x1d, 0xffffffff, 0x519, 0x6, "4522ab1c59b3f1beca704340880e1a5213513f4c", 0x2c1, 0x4}) closefrom(r5) mlockall(0x1) execve(0x0, 0x0, &(0x7f0000000100)=[&(0x7f0000001580)=')$/\x00-\x86Qw\xaaN\xd3[\x04\x95\xf7*\x12\x8f\xa4\v\x13$P\xe9\xb1\xf0M\x0f`,\f\x10\xdb\nh(\xff\xabD\x90\x06\x98\xeb\x9f\x9caB%\x92\xf2@\xc8\xe6w\xbd\xb1u\x82\x00*e\xdf\"\xbfF\xf7\xba\b\xb8\x12\xe4\xa6F\x00_k\xc2\x91t\xc8\xa6D\xae3\xbf\xd2(\f\x8b\x14\xcc\x1ckB\xc1$\xbb#\x80|\xb8{\xa6`\xdbYd\xa4?\xd1@\xca\xcf\xa0\xe7\xf3\xf3\x04\f\xe7\x82\x8d*wW\xb3Vw\x0f\xf4uI4\xe9\x0f_\x03~q\xfd\x18\xb9G\xba\b\x176?g\x8c\x12\b\xb724\b\"\xf7\x9c\x16\xfeq\xf3\xf6I>\xd0']) 0s ago: executing program 2 (id=46): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6503) (async, rerun: 64) open(&(0x7f0000000040)='./file0\x00', 0x40000, 0xea) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. Connection to 10.128.1.54 closed by remote host. smr: dispatch took 2.359991s OpenBSD/amd64 (ci-openbsd-kasan-0.us-central1-a.c.syzkaller.internal) (tty00) login: pmap_unwire: wiring for pmap 0xffff800000dbb000 va 0xf46efe63000 didn't change! panic: kernel WdiARaNgINGn:o SsPtLi c NaOsT sLerOWtEiRoEnD " pOgN- >SYwiSCrALeL_ c0 ou0 nEtX I!T =0 a0 " faStopped at savectx+0x9e: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *262974 44274 0 0x2 0 0 ifconfig savectx() at savectx+0x9e end trace frame: 0x0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/kasan/kernel/sys/uvm/uvm_page.c", line 1207 ddb{0}> show kasan kasan: no report recorded this boot ddb{0}> trace savectx() at savectx+0x9e end trace frame: 0x0, count: -1 ddb{0}> show registers rdi 0xffffffff854962a0 panicstr rsi 0xffffffff84f7e4c0 __sancov_gen_cov_switch_values.22 rbp 0xffff800029919690 rbx 0 rdx 0 rcx 0xffffffff85093ff0 cpu_info_full_primary+0x1ff0 rax 0x31 r8 0xffff800029919560 r9 0x1 r10 0 r11 0xffffffff8154eec0 x86_bus_space_io_read_1 r12 0 r13 0 r14 0xffff80003bb72558 r15 0 rip 0xffffffff83dc934e savectx+0x9e cs 0x8 rflags 0x46 rsp 0xffff800029919610 ss 0x10 savectx+0x9e: movl $0,%gs:0x688 ddb{0}> show proc PROC (ifconfig) tid=262974 pid=44274 tcnt=1 stat=onproc flags process=2 proc=0 runpri=76, usrpri=77, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800029884008,0xffff80003bb73cc0 process=0xffff8000298dc010 user=0xffff80002990e000, vmspace=0xffff800001829990 estcpu=27, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 50273 211150 80579 0 2 0x2 0 sh *44274 262974 58385 0 7 0x2 0 ifconfig 90601 121845 96936 0 3 0 0x80 nanoslp syz-executor 90601 469070 96936 0 3 0 0x4000080 fsleep syz-executor 90601 6708 96936 0 2 0 0x4000000 syz-executor 58385 364772 52259 0 3 0x100002 0x88 sigsusp sh 97342 209521 18576 0 3 0x2 0x80 wait syz-executor 52259 112343 18576 0 3 0x2 0x80 wait syz-executor 60015 319896 1 0 3 0x100003 0x80 ttyin getty 80579 334714 18576 0 2 0x10000002 0 syz-executor 35127 179471 18576 0 3 0x2 0x80 piperd syz-executor 62307 15928 18576 0 3 0x2 0x80 nanoslp syz-executor 36588 45255 18576 0 3 0x2 0x80 piperd syz-executor 96936 475494 18576 0 3 0x2 0x80 nanoslp syz-executor 18576 86249 1 0 3 0x2 0x80 wait syz-executor 77167 340747 0 0 3 0x14000 0x200 bored smr 64274 277153 0 0 2 0x14000 0x200 zerothread 89149 317201 0 0 3 0x14000 0x200 aiodoned aiodoned 69098 354694 0 0 3 0x14000 0x200 syncer update 73725 268000 0 0 3 0x14000 0x200 cleaner cleaner 67232 333619 0 0 2 0x14000 0x200 reaper 69080 184058 0 0 3 0x14000 0x200 pgdaemon pagedaemon 53927 399474 0 0 3 0x14000 0x200 bored viomb 34483 337488 0 0 3 0x14000 0x40000200 acpi0 acpi0 43561 299796 0 0 3 0x14000 0x40000200 idle1 13602 271307 0 0 3 0x14000 0x200 bored softnet1 93060 37287 0 0 3 0x14000 0x200 bored softnet0 48048 435842 0 0 3 0x14000 0x200 smrbar systqmp 71988 77579 0 0 3 0x14000 0x200 bored systq 33846 242509 0 0 3 0x14000 0x200 tmoslp softclockmp 89159 367230 0 0 3 0x14000 0x40000200 tmoslp softclock 22004 327897 0 0 3 0x14000 0x40000200 idle0 1 447119 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff854c3868) #0 witness_lock+0x632 #1 mtx_enter+0x683 #2 uvm_pmr_freepages+0x225 #3 pmap_do_remove+0xe85 #4 uvm_unmap_kill_entry_withlock+0x42f #5 uvm_unmap_remove+0x92a #6 uvmspace_exec+0x38c #7 sys_execve+0x1183 #8 syscall+0x1089 #9 Xsyscall+0x128 Process 44274 (ifconfig) thread 0xffff80003bb72558 (262974) exclusive rwlock amaplk r = 0 (0xffff800001af7be0) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 uvm_unmap_kill_entry_withlock+0x136 #3 uvm_unmap_remove+0x92a #4 uvmspace_exec+0x38c #5 sys_execve+0x1183 #6 syscall+0x1089 #7 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xffff800001829a90) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 vm_map_lock_ln+0x19f #3 uvmspace_exec+0x2e7 #4 sys_execve+0x1183 #5 syscall+0x1089 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8558dbc0) #0 witness_lock+0x632 #1 syscall+0x1048 #2 Xsyscall+0x128 exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff854c3868) #0 witness_lock+0x632 #1 mtx_enter+0x683 #2 uvm_pmr_freepages+0x225 #3 pmap_do_remove+0xe85 #4 uvm_unmap_kill_entry_withlock+0x42f #5 uvm_unmap_remove+0x92a #6 uvmspace_exec+0x38c #7 sys_execve+0x1183 #8 syscall+0x1089 #9 Xsyscall+0x128 Process 48048 (systqmp) thread 0xffff800045ffe298 (435842) shared rwlock systqmp r = 0 (0xffffffff8540d1b8) #0 witness_lock+0x632 #1 taskq_thread+0x1ba #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11059 12175K 12394K 166960K 12164 0 pcb 18 24K 24K 166960K 22 0 rtable 233 15K 30K 166960K 395 0 pf 37 23K 26K 166960K 53 0 ifaddr 44 12K 13K 166960K 54 0 ifgroup 59 2K 2K 166960K 67 0 sysctl 3 1K 13K 166960K 7 0 counters 72 43K 43K 166960K 76 0 ioctlops 1 0K 194K 166960K 1498 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1333 86K 86K 166960K 1425 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 405K 166960K 12470 0 file desc 19 58K 121K 166960K 220 0 proc 100 50K 198K 166960K 646 0 subproc 90 11K 11K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 8K 166960K 121 0 ether_multi 1 0K 0K 166960K 1 0 mrt 7 0K 0K 166960K 12 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 43 303K 303K 166960K 43 0 exec 22 5K 17K 166960K 422 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 456 177K 378K 166960K 3651 0 UVM aobj 6 4K 4K 166960K 7 0 pinsyscall 112 198K 386K 166960K 1445 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 19 0K 2K 166960K 35 0 temp 240 9275K 9470K 166960K 3912 0 kqueue 12 39K 84K 166960K 36 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 36 1 0 1 1 0 8 1 rtentry 176 132 0 56 6 0 6 6 0 8 0 unpcb 144 76 0 76 1 0 1 1 0 8 1 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 12 0 11 1 0 1 1 0 8 0 arp 136 22 0 10 1 0 1 1 0 8 0 inpcb 328 103 0 102 2 0 2 2 0 8 1 nd6 152 29 0 15 1 0 1 1 0 8 0 kcovpl 48 12 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 32 0 0 1 0 1 1 0 8 0 pfstkey 128 32 0 0 2 0 2 2 0 8 0 pfstate 448 32 0 0 4 0 4 4 0 8 0 pfrule 1360 24 0 19 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 540 0 176 29 0 29 29 0 8 4 art_table 40 541 0 176 5 0 5 5 0 8 0 art_node 32 132 0 53 1 0 1 1 0 8 0 semapl 72 5 0 2 1 0 1 1 0 8 0 shmpl 120 4 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1649 0 175 93 0 93 93 0 8 0 ffsino 296 1649 0 175 114 0 114 114 0 8 0 nchpl 144 1903 0 192 64 0 64 64 0 8 0 vnodes 216 1787 0 0 100 0 100 100 0 8 0 namei 1024 7280 0 7280 6 2 4 4 0 8 4 percpumem 16 54 0 5 1 0 1 1 0 8 0 kstatmem 264 33 0 10 2 0 2 2 0 8 0 scxspl 216 7050 0 7050 6 3 3 3 1 8 3 plimitpl 152 44 0 33 1 0 1 1 0 8 0 sigapl 424 530 0 496 7 0 7 7 0 8 1 knotepl 120 54 0 0 2 0 2 2 0 8 0 kqueuepl 224 48 0 47 1 0 1 1 0 8 0 pipepl 344 145 0 118 3 0 3 3 0 8 0 fdescpl 528 514 0 498 3 0 3 3 0 8 0 filepl 160 2170 0 2022 12 0 12 12 0 8 2 lockfpl 104 15 0 15 1 0 1 1 0 8 1 lockfspl 48 7 0 7 1 0 1 1 0 8 1 sessionpl 144 30 0 27 1 0 1 1 0 8 0 pgrppl 48 42 0 31 1 0 1 1 0 8 0 ucredpl 104 131 0 128 1 0 1 1 0 8 0 zombiepl 144 499 0 496 1 0 1 1 0 8 0 processpl 1240 530 0 496 5 0 5 5 0 8 1 procpl 664 619 0 583 6 0 6 6 0 8 1 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 752 216 0 215 4 0 4 4 0 8 3 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 129 0 0 17 0 17 17 0 8 0 mcl2k 2048 24 0 0 3 0 3 3 0 8 0 mextrefs 64 24 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 242 0 0 16 0 16 16 0 8 0 bufpl 272 4936 0 106 322 0 322 322 0 8 0 anonpl 32 6014 0 0 49 0 49 49 0 222 0 amapchunkpl 152 10496 0 9996 20 0 20 20 0 158 0 amappl16 200 2295 0 2285 13 0 13 13 0 8 10 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 463 0 462 1 0 1 1 0 8 0 amappl13 176 127 0 126 1 0 1 1 0 8 0 amappl12 168 775 0 761 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 1 0 1 0 8 0 amappl10 152 68 0 68 1 0 1 1 0 8 1 amappl9 144 273 0 273 1 1 0 1 0 8 0 amappl8 136 121 0 120 1 0 1 1 0 8 0 amappl7 128 152 0 150 1 0 1 1 0 8 0 amappl6 120 188 0 184 1 0 1 1 0 8 0 amappl5 112 106 0 106 1 0 1 1 0 8 1 amappl4 104 305 0 302 1 0 1 1 0 8 0 amappl3 96 1778 0 1736 3 0 3 3 0 8 1 amappl2 88 613 0 595 2 0 2 2 0 8 0 amappl1 80 10933 0 10826 15 0 15 15 0 8 7 amappl 88 2888 0 2803 4 0 4 4 0 92 0 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 2 1 0 1 1 0 8 0 uaddrrnd 24 514 0 497 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 514 0 497 1 0 1 1 0 8 0 vmmpekpl 168 6338 0 6303 3 0 3 3 0 8 0 vmmpepl 168 42858 0 42249 89 1 88 88 0 357 39 vmsppl 488 513 0 496 5 0 5 5 0 8 1 rwobjpl 80 16018 0 15634 24 0 24 24 0 8 4 pdppl 4096 1037 0 992 103 52 51 89 0 8 6 pvpl 32 22480 0 0 182 0 182 182 0 265 0 pmappl 256 513 0 496 3 0 3 3 0 8 1 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 608 0 58 17 0 17 17 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace savectx() at savectx+0x9e end trace frame: 0x0, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028fd3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 acpitimer_delay(1) at acpitimer_delay+0x2a2 comcnputc(800,61) at comcnputc+0x342 cnputc(61) at cnputc+0xaf db_putchar(61) at db_putchar+0x29f kprintf() at kprintf+0x2afa db_printf(ffffffff847d27c0) at db_printf+0x102 panic(ffffffff847d2720) at panic+0x17d __assert(ffffffff8492a340,ffffffff8492a360,4b7,ffffffff8492ac80) at __assert+0x48 uvm_pageunwire(fffffd80082530c0) at uvm_pageunwire+0x1d8 uvm_fault_unwire_locked(ffff8000018293d8,f46efe63000,f46f0262000) at uvm_fault_unwire_locked+0x4a8 end trace frame: 0xffff80002990d8b0, count: 0 ddb{1}> trace x86_ipi_db(ffff800028fd3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 acpitimer_delay(1) at acpitimer_delay+0x2a2 comcnputc(800,61) at comcnputc+0x342 cnputc(61) at cnputc+0xaf db_putchar(61) at db_putchar+0x29f kprintf() at kprintf+0x2afa db_printf(ffffffff847d27c0) at db_printf+0x102 panic(ffffffff847d2720) at panic+0x17d __assert(ffffffff8492a340,ffffffff8492a360,4b7,ffffffff8492ac80) at __assert+0x48 uvm_pageunwire(fffffd80082530c0) at uvm_pageunwire+0x1d8 uvm_fault_unwire_locked(ffff8000018293d8,f46efe63000,f46f0262000) at uvm_fault_unwire_locked+0x4a8 uvm_unmap_kill_entry_withlock(ffff8000018293d8,ffff8000017052a8,0) at uvm_unmap_kill_entry_withlock+0xc6 uvm_map_teardown(ffff8000018293d8) at uvm_map_teardown+0x1d7 exit1(ffff80003bb722c0,0,0,1) at exit1+0xa58 sys_exit(ffff80003bb722c0,ffff80002990dc00,ffff80002990db60) at sys_exit+0x4a syscall(ffff80002990dc00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7776043af1d0, count: -20 ddb{1}>