last executing test programs: 4.912427726s ago: executing program 4 (id=533): getitimer(0x0, &(0x7f00000000c0)) getegid() getitimer(0x1, &(0x7f0000000000)) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x2) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000200)={&(0x7f00000000c0)='./file0\x00', r0, 0x2}) r2 = getpid() setpgid(r2, r2) seteuid(0xffffffffffffffff) r3 = socket$inet6(0x18, 0x3, 0x7) fstat(r3, &(0x7f00000000c0)) clock_settime(0x3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000004480), 0x20, 0x0) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f00000044c0)=0x80000000) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r6 = syz_open_pts() ioctl$TIOCSETAW(r6, 0x802c7415, &(0x7f00000019c0)={0xfffffff8, 0x4, 0x611d, 0x7, "9244fe7a9542a741bb1a2e257e769ccf78fa6773", 0x2, 0x84}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) getpeername$inet6(r7, 0x0, 0x0) ioctl$DIOCRGETASTATS(r5, 0xc4504447, &(0x7f0000001600)={{'./file0/file0\x00', './file0/file0\x00', 0x2, 0xc}, 0x0, 0xa0, 0x0, 0x6, 0xb, 0x8, 0x5, 0x10, 0x800}) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x60) ioctl$BIOCSETWF(r8, 0x80104277, &(0x7f0000000900)={0x3, &(0x7f0000000100)=[{0x5, 0x81, 0x8}, {0xfff5, 0x0, 0x7, 0x80ac}, {0x6, 0x9, 0x8, 0x2}]}) utimensat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x40400, 0x8}, {0x8000000000000000, 0xe}}, 0x0) 4.695123337s ago: executing program 4 (id=548): r0 = socket$inet(0x2, 0x2, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) rmdir(&(0x7f0000000300)='./file0\x00') getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x17}, 0xd6, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = getppid() getsid(r2) setpgid(r2, r1) 4.616516232s ago: executing program 4 (id=550): open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='w\x00') readv(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 4.608802091s ago: executing program 5 (id=552): r0 = socket$inet6(0x18, 0x3, 0x7) recvmmsg(r0, &(0x7f0000002780)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=""/109, 0x6d}, 0xa}, 0x38, 0x1040, 0x0) unveil(0x0, 0x0) 3.524602415s ago: executing program 4 (id=553): openat$wskbd(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0) accept(0xffffffffffffff9c, 0x0, 0x0) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 3.284846799s ago: executing program 5 (id=562): r0 = syz_open_pts() unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='w\x00') unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='x\x00') ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000002a80)=0x8) r1 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') mkdir(&(0x7f00000009c0)='./file0\x00', 0x182) pselect(0x18, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmdt(r2) closefrom(r0) 2.978460172s ago: executing program 0 (id=574): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="f62ffcb76fbd80cc139f4d4607979298cea8e19e5e8dc5be4c2152bbcd3d7f59dba869085b2fc38ebbe99f5544917c4b512f5b5572b2c8fb59eb84dcf2146664947c81ae2da896d63fbac2b29b0935be7e2c285f3a22434849f6239a09cf2c78154e3a8f15ebd15571a7421c6985fd4986d375a43e5392c4d99aaf09998f7ea6ea54d1a1c935ab494102dd34b7874eba3f50df0f9a5a7d5af7b521df98a15e500c4284", 0xa3}, {&(0x7f0000000140)="44e3cf992d707a4d45812da47accf86d325cfe554f57502cf68024c0c4ff1bccfc370abfd4d991f6857d3a00154bd6c85c7622aa088285a9caa4db1bb3e43a6bbd8fa014a376a5f659027fb4d6a17361d477e353e200d184584e5c619292cea06033236b9011745db3105196cc917ada1461daccb383644cfc5f7215e6a12e7d21025c5894baf77a9a834201254f8e83ccfdbf785403a6dd12f813f94bdc11165bfc42b35dcd0fa79ff8ae2daf2f3c857fb4779f9fa4f4f07e8a6e03bfd51527ebd26e3a5a02ea53207bfc282ede", 0xce}], 0x2, 0x0, 0x68}, 0x400) 2.953167914s ago: executing program 0 (id=577): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$audio(r0, &(0x7f0000000040)=""/58, 0x3a) 2.858263673s ago: executing program 3 (id=579): mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10, 0x52) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) 2.857703753s ago: executing program 7 (id=581): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000040)) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) closefrom(r1) accept$unix(r1, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$DIOCGETLIMIT(r2, 0xc0084427, &(0x7f00000005c0)={0x0, 0xf}) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2) r3 = semget(0x1, 0x1, 0x172) semctl$GETVAL(r3, 0x0, 0x5, 0x0) semop(r3, &(0x7f0000000080)=[{0x1, 0x800}, {0x1, 0x1, 0x1000}], 0x2) 2.85480417s ago: executing program 1 (id=582): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000024c0), 0x8000, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000002540)={0x5, &(0x7f0000000100)=[{0x4, 0x0, 0x3, 0x97}, {0x1, 0x3, 0x7, 0x7}, {0x9538, 0x2, 0x5, 0x7}, {0x2, 0x7, 0x5a, 0x18}, {0x0, 0x4, 0x0, 0x4a29}]}) r1 = syz_open_pts() ppoll(&(0x7f0000000140)=[{r1, 0x2}, {r1, 0x1}], 0x2, 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000a40)=0x3) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0xffffffff, 0x0, 0xfffffffa, 0x0) sysctl$vm(&(0x7f0000000180)={0x2, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) 2.772843428s ago: executing program 6 (id=584): sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, 0x0}}, 0x38, 0x2) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f0000002e00)={0xf83e0f83e0f87c}) 2.736519717s ago: executing program 2 (id=585): sysctl$kern(&(0x7f0000000000)={0x1, 0x28}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.60613444s ago: executing program 4 (id=586): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x8, 0x0) write$audio(r2, &(0x7f00000018c0)="0b2fc455c0f8db670199ca8e090bdfeb956eed03f1eb2c62199b22a151bf0dbdaed377611f912f285004d8fe0f9062a5fbea6747586f92d7c8a3ec1adfaa00000000c93b446b45f0a72addba3245020bb8d90669331934dcbd89a5a73169b23ccaeaff369a094798e8ba85bde6f16b6729d991c4118b2b26df3fa7bb06e91f17318d70d55c4f230a3c26b3ff8ab77bfa70241f093635751162cecf88b7595816eeaac5e8cab5d8cf76d947409f8b3af2da94b9df3e2e8b5ba6df8a2e9d7468d57c46", 0xc2) pread(r0, &(0x7f0000000100)="fe46e53010d6204e53fa03421bbeae7b4d5ea1e5cfb93c54af9ae662665915662a869ac6acad767ebb6d345532238a4133f63f6e09ee5edd53aac4044ec15a17003260bc6cceab0480f0be43e6016a29d0510b9e0b214314b4217e23a32ba78e5299f638", 0x64, 0x401) openat$tty(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) kevent(r0, &(0x7f0000000300)=[{{r0}, 0xfffffffffffffffb, 0xa, 0x4, 0x8000000000000000, 0x3}, {{}, 0xfffffffffffffffd, 0x5, 0x1, 0x6a00abc1}, {{r0}, 0xfffffffffffffff6, 0x0, 0x20, 0x6, 0x401}, {{}, 0xfffffffffffffff6, 0x20, 0x80000000, 0x820, 0x7}, {{}, 0xfffffffffffffffb, 0x20, 0x40, 0xff, 0x2}], 0x33d, &(0x7f0000000480)=[{{r0}, 0xfffffffffffffffa, 0x92, 0x40000000, 0x3, 0x2}], 0x8f2, &(0x7f0000000500)={0x9, 0x2}) futimens(0xffffffffffffffff, &(0x7f0000000540)=[{0x3, 0x8}, {0xd, 0x7}]) ioctl$AUDIO_MIXER_DEVINFO(r0, 0xc32c4d02, &(0x7f0000001480)={0xd5, {"9624e776520f349ca1a24b41aa252352", 0x2}, 0x1ff, 0x6, 0xa00000, 0x3, "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"}) ftruncate(r1, 0x5) fcntl$getown(0xffffffffffffffff, 0x5) openat(r3, &(0x7f0000000600)='./file0\x00', 0x40, 0x4) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DIOCGETRULE(0xffffffffffffffff, 0xcd604407, &(0x7f00000006c0)={0x2, 0x10, 0x5, './file0\x00', './file0\x00', 0x0, "f1b0eff0db5c8f5fb30a8d3dcc89eb504b6be57f4df18eccd88cf309eb76805be9ff507bcb135f5c00d8903cc2927be525e1818336a70c9edd24b3de91b0c74d24498964e0e97e6097df60117abb2b470c77525be8204b25780f76a1a266a9c47fb23fe3c14374ae5ffc56483c6c492500e58460db4c72ebc2c110a6a852918d79686daed3ce65cee2e038fd1b0c2f92c947ab826447bc2da519ebb271dfc0a6bc86970753ccaac8684517d9db6dcca5d8cbbb0c080a84d97ac5e2b36563258cec3b47fca50b5745fac2ab245ceffc6fee33c805f33e68ab544cbbce5576af2128e2043aa32d0fe4286ac9566e2698f484e0dc8dd242de8b32142527574ce3189453730f2fe1c1a2975546d69465a21f1236a4bb91a1f6525cf33e581daf7139ea59fa58c5ddc8fdbe10a39a700b0ab4a6f7e73c1131e5aed43702fdd15096ecb5b57c17e9f8691a61c7aac18b88defa47909991733b6c4bb387c4cdf53cb5f41967d58128c1998b3dcd12e9c2a50e7a9ad218d01fe0a69b4b92dbecd2da4908acff399d77c0b592049ee045d32f7df085f5753777f145d2422f061038ce69d55ea4d3a99101e5999cf0aee5fea84045557a6f190f3c6f290b1f9021b046950b1115317fc0e7c188425289e4eab11d396e14dc423f0d98c7d052966b0a3065e3495f415814c3600feb8d1bda7d6735581997f5d30920c03e4a4e071958891990c40c0d1f8122cc50d02761b77c301bc75f8680e364b96c9f59b10b5b179b302d1a7835b95b8d1a169f4b8dbf0488d6cd8ad5fb1f401a53366898fe5f8f0132f7d1350aedd46f5245d9e590261f84146c67167a8e608dac9878136ec899f43dd0ab378075ee029b205540c49056e18c015ffee72273b68e721831d6fe5f4300f879ea4ee4e37e3ca774dcce9d7f4dc06fea2e827044845e92b7b87d71f59a7da23a0f595520f552ddb1a24081cb6316764cb1ffbbcadd265da81292504ba86dc0f7945e315c83eace266267cd8dfa6c96f096750ccc33d3844953f932377c3e97a2dcc2af10a5dc7ba70850b1783ac32e2bf5e2a5a0d1f10528d73f8dba3d0df1dfb19e499fb3e828836228e287252ef25c8019162a05fc4615b2dbc71ba1bd0703a68225efbcff676204d6674a140a1f61e37d29f8c4386e625b1ae235b3a9ffb08f0f9f4c4ffe7ca031ef6d8628f6b6d7aec3dc2fb2fa845aff0ce772029ca8c0da25a970213043edbfea032d3c1350064ff21117e455f7139398e23fc71a775a5957adff3cb44c83bccb460969f8a6ef61266016c82d10de76d99fed1539752467456c69ae9ec059617a09f9d495c532d4a1cd918c400664766f36bd81572fde2132277d6468642bbbfb55f55a22079210647d11031f3661014e39a7d70319952933edcc82c6d8232998cc61b56cc48c171339a156771eaaae198880e10f21d3fe9f74a7856a8df6d6bc3d35fa82636c4fcaad850eddf4471483d9291d3040078e00d9feeb8e3f999f97c57838db2c1be0e9c2338783cfbaf870e098b0f7547fa33c92ed58d324fc7e35974a6a0cc296a56219bf0d8e49caa84b47f7a0b9bbc3e5cd44fefb03caacbbb688188dcafc2e40be8963ddc18af4f91a029e5e692ec83c084e9f31fbf443a1529d6a1695a44c567997c753731de5821b5b473c61c9dcf94efacf680e06f56e9df8240181a18b9ff5a6f9154717d3c82914fd37a440fcb24990cf2cac95462906c6174982b72ec544a6de0bd6809502b95a98f6539cf1e1f548fb4daa9312309ecd876746ed47189a78722b157d91a19b8e67de57a7d3e66d332ef43329c0eb2fe5eb96585bd2d2ba6951cde3139f882708e6a2bb7af7cb80273170dd0356afe111d395b321d77d9acd0dd170d89292d1ce41b7cf7d08de8ffa670f032bd80aaae81a5bdf22"}) ioctl$TIOCGWINSZ(r4, 0x40087468, &(0x7f0000001440)) sendto$inet(0xffffffffffffffff, &(0x7f0000001480), 0x0, 0x2, &(0x7f0000002480)={0x10, 0x2, 0x3, 0x9}, 0x10) flock(r0, 0x3b7b6ff7101f9643) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000180)=0x40) sendto$inet(r4, &(0x7f00000001c0)="1eb7e581b939dbf2c81e84c92892cc3aa3af7c2e56b069a016f70b341b02f1a8bea2b074a91940ce83a377671a70c5958e900477207b1d8a06a79eedde7d59c30d1ee3d7441b7e70a389081b35deac7c4690a5b0e80aab452ffb8f2a9e4cec5bd9b8ef4717837ababf4dae833bc783d7d7c945695f2dbe1e25dbbc63b25050628c68fe5621915fdb50bf59672ac9463c89c9e4819296bf2c02280d67a1f23fa198af65e9b3d91e830425875086fee43b1466d5d342ff3efb8ad6577ef1fe62433421085b1ba0c1f7b3f7b117789af36b80abf625eb83c02960f0", 0xda, 0x408, 0x0, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000040), 0xc) listen(r1, 0x401) listen(0xffffffffffffffff, 0xffff) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f00000024c0)={0xd, 0x9, 0x96, 0x2, "1e398aa94823f1193909d2a455c40cd942f5f1dc", 0x10, 0x9}) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) ioctl$WSKBDIO_SETMAP(r4, 0x8010570e, 0x0) poll(0x0, 0x0, 0xffffffff) 1.605337848s ago: executing program 0 (id=587): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x1, 0x5a0) semctl$SETVAL(r2, 0x2, 0x8, 0x0) setsockopt$sock_linger(r1, 0xffff, 0x80, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) getsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$BIOCFLUSH(r3, 0x20004268) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) utimes(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{0x6, 0xb6}, {0x7, 0x2926}}) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000f00), 0x800, 0x0) r5 = syz_open_pts() r6 = dup2(r5, r5) ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000a00)={0x5d5, 0x2, 0x3, 0x7ff, "101b4de661f650e3a02777680ca2a9cf653197f2", 0x5, 0x98}) mquery(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x1) r7 = openat$pci(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) ioctl$BIOCSBLEN(r4, 0xc0044266, &(0x7f0000000000)=0x2) ioctl$TIOCSDTR(r4, 0x20007479) closefrom(r4) openat$vnd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$VNDIOCSET(r7, 0xc0384600, &(0x7f0000000640)={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff00, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf8}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, 0x0, 0x0, 0x0, 0x0) linkat(r4, &(0x7f0000002c40)='./file0\x00', r4, 0x0, 0x4) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') open$dir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0xda) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) dup(r6) 1.604519832s ago: executing program 1 (id=588): r0 = semget(0x1, 0x4, 0xf33) semctl$SETALL(r0, 0x0, 0x9, 0x0) r1 = syz_open_pts() ppoll(&(0x7f0000000280)=[{r1, 0x2}], 0x1, 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000a40)=0x3) r2 = semget$private(0x0, 0x4, 0x9) semctl$SETVAL(r2, 0x2, 0x8, &(0x7f0000000000)=0x8) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) futimes(r3, &(0x7f0000000040)=[{0x6, 0x1}, {0x7, 0x3b26}]) futimens(r3, 0x0) 1.603784707s ago: executing program 2 (id=589): r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) seteuid(0xffffffffffffffff) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) ioctl$DIOCXROLLBACK(0xffffffffffffffff, 0xc0104453, &(0x7f0000003600)={0x0, 0x1, 0x0}) clock_gettime(0x2, &(0x7f0000003680)) syz_emit_ethernet(0x3e, &(0x7f0000001880)={@broadcast, @random="a081091432a0", [], {@ipv4={0x800, {{0xa, 0x4, 0x2, 0x4, 0x30, 0x67, 0x8, 0x9, 0x62, 0x0, @multicast1, @rand_addr=0x7, {[@generic={0xb, 0x9, "127436232e7125"}, @lsrr={0x83, 0xb, 0x7, [@broadcast, @broadcast]}]}}, @udp={{0x2, 0x3, 0x8}}}}}}) 1.597729574s ago: executing program 3 (id=590): open$dir(&(0x7f0000000800)='./file0\x00', 0x200, 0xfdf98e28ba4af85) chdir(&(0x7f00000000c0)='./file0\x00') sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f0000000040)="35deb8d6fed10721c60a2920d874949140c9ac0f78e4a69d5ae32bfe1cf1e97dad8780f8d197", &(0x7f0000000080)=0x26, 0x0, 0x0) 1.596783254s ago: executing program 5 (id=591): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r0 = msgget$private(0x0, 0x40) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6a552300f00746ff"], 0x8, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x120) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') (async) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') 1.596609119s ago: executing program 6 (id=592): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x2b1, 0x5, 0x80, 0x6}]}) 1.596053127s ago: executing program 7 (id=593): poll(0x0, 0x0, 0xffffffff) 1.484427295s ago: executing program 5 (id=594): r0 = kqueue1(0x10000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x3010, 0xffffffffffffffff, 0x1c40000) (async, rerun: 64) r2 = dup3(r0, r1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x1, 0x7fff, 0x6ffe, 0x7}) 1.482941664s ago: executing program 6 (id=595): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) read$audio(0xffffffffffffffff, &(0x7f00000000c0)=""/142, 0x8e) getthrid() r1 = dup2(r0, r0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) ioctl$DIOCRGETTABLES(r2, 0xc450443f, &(0x7f0000000140)={{'./file0\x00', './file0\x00', 0x11, 0x2}, 0x0, 0x428, 0x0, 0x3, 0xf, 0xfffffb10, 0x1, 0x42, 0x7}) write$audio(r1, &(0x7f0000000180)="ed49d0947dc7d276e8364d88d9c657c1ebed80cd05f329b34a46ecd939256a093ab54a68d62e51950d5f64ff2a435feb7077535e0d2982a4571580e96356c085a74d965406286da21c46f0755b50722cf32c5af27e916fff40fd4ab6eac7dd522781a8c7a9fa17a7506d6974450006842263cf7ecc124721151454eaefacc872e142ab41", 0x84) flock(0xffffffffffffffff, 0xf) 1.413304577s ago: executing program 2 (id=596): sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x10, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000440)={0x2, 0x1, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0x1) getsockopt$sock_int(r2, 0xffff, 0x800, 0x0, 0x0) ioctl$DIOCSETHOSTID(r0, 0xc0044456, &(0x7f0000000080)) 1.412735163s ago: executing program 3 (id=597): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2}) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) fsync(r0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x1, 0x4) chmod(&(0x7f00000000c0)='./file0\x00', 0x10) ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f00000001c0)={{'./file0\x00', './file0\x00', 0x36, 0x3}, &(0x7f0000000100)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x6, 0x3, 0x2, 0x6b, 0x1, 0x9, 0x40}, {@rand_addr=0x7, '\x00', './file1\x00', 0x400, 0x1a2, 0x0, 0x3, 0x87, 0x40, 0xf9}, {@loopback, '\x00', './file0\x00', 0xa, 0xb, 0x2, 0xfa, 0xaf, 0x9}], 0x5, 0x3, 0x7, 0x1, 0x401, 0x1, 0x2a}) faccessat(r0, &(0x7f0000000640)='./file0\x00', 0x40, 0x1) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) fstatat(r0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', r2, r3) pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000008c0), 0x2040b, 0x0) ioctl$DIOCGETSTATE(r5, 0xc1084413, &(0x7f0000000900)={{0x3, './file1\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @multicast1}, @v4=@multicast1], [0x1, 0x200], 0x0, 0x18}, {[@v4=@multicast1, @v4=@local={0xac, 0x14, 0x0}], [0x4, 0x100], 0xe38, 0x2}], {{0x9, 0x0, 0xff, 0x8}, 0xffffffff, 0xbc0, 0xc, 0x8e4a, 0x6000, 0x0, 0xb}, {{0x4, 0x96, 0x80, 0x7}, 0x4d, 0x5, 0x800, 0x5, 0x0, 0x1, 0x5}, @v4=@rand_addr=0x5, 0x0, 0xa824, 0x4, 0x99e8, 0x6, [[0x3, 0x800], [0xb9, 0x7f]], [[0x0, 0x8], [0x5, 0x9]], 0xffffff81, [0x2, 0x8], 0x3, 0x0, 0x1, 0x2, 0x3, 0x4, 0x6, 0xc, 0x4, 0x9, 0x8, 0xfff9, 'oN'}}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000a40), 0x200, 0x0) pwritev(r4, &(0x7f0000000d80)=[{&(0x7f0000000a80)="2b1036526915a784d7a3c1f55e258befea6a7e1e51cc7d3fdf723d6718988a0e1d8ec6ead9d20667e541d867ea7fb9ead66c7b5e57b115abd097652ae84026a687c60cd098cbd3fd1a101ffdae77c8ccc214602d8c6ecb9465151aa5ad091224650e66c4dfdd1a3d41acbf1e946b3487f784c23f15669263e70ac01de5d5da00578f6d98e0f11bf5cec25dce4bbc18ac7a062892fd720899ac02b7c0b911f0f48312a09a56a9f5091467392a04494b599d53fa697fa3065300b8b20fe58e8d32e1b9ca", 0xc3}, {&(0x7f0000000b80)="61e9827c9a0a2a017484025ebeea0c3dc52f2bb8b24e6f8228873803ae63769b5626486ccf6868fdfec289a992392f3c8214e412d25b3be6d7f6fd7727b145acf376491a5eb65bea70576a245a6673ab2b867f54f11256af05abc9dd96c7b4abe8e3486862c561f0ad24c414de24cf91320ce844dc556486d5258e474d54531ff1ce2d14dd5066aefdf36db4f0bf15dc4504eac82c029a420b4d41971f9974f98a2df9d352c74f7307f31e985029ecd24db718d149bd03e676b52d1262ec038a7db41c2b53cc912c623cc0b00acd823a13a1176d8fabcd394950", 0xda}, {&(0x7f0000000c80)="6f10684a638ec372b1745e3c57fb2e49234e8dd4cf32cb5f04f6826edd5e2c19430823a95935b59c46051103edf9650d2fbb2cc703078a017d417f66a7c44671be0d8ff5c18f7d14453aad56d1070814646c80d4914c6cca", 0x58}, {&(0x7f0000000d00)="d91ca29c2dc9a3c00ff8ff050d41ef4b7f2ff56ddc7ffacb7f8894d977728f36a4bb439eb8542c895079feb9750f1d016c90d8bd6f4d4f55a23d91617c998425c07a9654165d4946c6a25b2c5a8c02bf6a183a81a234ac799ac08af64c1a017b722903a40759d5bd601da7abbd8a282531f5b8bfb67165f239699f37", 0x7c}], 0x4, 0xa) getpgid(r1) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$VT_RELDISP(r6, 0x20007604, &(0x7f0000000e00)) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffff9c, 0x8058574f, &(0x7f0000000e40)={'./file1\x00', 0x5a, 0x2, 0xffffa211, 0x1, 0xff, 0x5, 0x7, 0x2, 0x1, 0xc26b, 0x7fffffffffffffff}) lstat(&(0x7f0000000ec0)='./file1/file0\x00', &(0x7f0000000f00)) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000f80), 0x40000, 0x0) dup3(0xffffffffffffffff, r7, 0x4) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000001000)={&(0x7f0000000fc0)='./file1/file0/file0\x00', r7, 0x1}) openat$bpf(0xffffffffffffff9c, &(0x7f0000001040), 0x40, 0x0) r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001080), 0x40, 0x0) ioctl$WSDISPLAYIO_SBURNER(r8, 0x800c5751, &(0x7f00000010c0)={0x3, 0xfffffc01}) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000001100), 0x80, 0x0) ioctl$DIOCSETSTATUSIF(r9, 0xc0284414, &(0x7f0000001240)={'./file1/file0\x00', &(0x7f0000001140)=""/224, 0x6, 0x200, 0xdb8, 0xdd97}) 1.412608374s ago: executing program 6 (id=598): sysctl$vm(&(0x7f0000000180)={0x2, 0xa}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) 1.411905139s ago: executing program 2 (id=599): sysctl$kern(&(0x7f00000001c0)={0x1, 0x2a}, 0x2, 0x0, 0x0, &(0x7f0000000340), 0x0) 1.411677422s ago: executing program 6 (id=600): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, &(0x7f0000000080)={0x3, 0x5}, &(0x7f00000000c0)={0x7}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.361978464s ago: executing program 0 (id=601): sysctl$hw(&(0x7f0000000580)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001640)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7fffffff}, 0x38, 0x5800, 0x0) 1.36161368s ago: executing program 5 (id=602): openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) setresgid(0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='w\x00') ioctl$DIOCGETQUEUE(r1, 0xc148445f, &(0x7f00000007c0)={0x84a, 0x200, {'\x00', './file0\x00', './file0\x00', './file0/file0\x00', {{0x7ff, 0xb84fe75f}, {0x4, 0xffffffff}, 0x62a}, {{0x3, 0x82f}, {0x0, 0x440}, 0x3}, {{0xa, 0x6}, {0x3, 0x2}, 0x2}, {0x0, 0x8, 0x1, 0x5}, 0x0, 0xa, 0xd, 0x400, 0x6}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) seteuid(0xffffffffffffffff) chroot(0x0) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r2 = semget$private(0x0, 0x7, 0x30) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x410, &(0x7f0000ffc000/0x4000)=nil) semop(r2, &(0x7f0000000700)=[{0x2, 0x9, 0x1000}, {0x0, 0x200, 0x1800}, {0x1, 0xffc0, 0x1000}, {0x3, 0x6, 0x1000}], 0x4) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000005c00), 0x8000, 0x0) socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) open$dir(&(0x7f0000002340)='./file0\x00', 0x0, 0x8b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000043c0)={0xffffffffffffffff}) listen(r3, 0x800) closefrom(r0) 1.360455917s ago: executing program 2 (id=603): munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 1.258594916s ago: executing program 3 (id=604): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) unveil(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0)='c\x00') 1.258353149s ago: executing program 0 (id=605): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$audio(r0, &(0x7f0000000040)=""/58, 0x3a) 1.258193483s ago: executing program 6 (id=606): mkdir(&(0x7f0000000400)='./file0\x00', 0x120) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') r0 = getpid() setpgid(r0, r0) sysctl$hw(&(0x7f0000000240)={0x6, 0x9}, 0x2, &(0x7f0000000280), 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x1) chflagsat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000001740), 0x10000, 0x0) ioctl$PCIOCREAD(r1, 0xc0107002, &(0x7f0000001780)={{0x3, 0x8, 0x80}, 0x3, 0x3, 0x8}) sysctl$hw(&(0x7f0000000180)={0x6, 0x19}, 0x2, &(0x7f00000001c0)="eb140716a98799b1e02d0d7f160685ca7690bbcd50b04e313da0745bdb0f1bb83731f9990900000067ca8a562bfd8711ee3902724bce700ab92954ed0c5067ea8c990bbf2e85e655548f1911553629159dc55847b901fbb05c4cbdec0fbd5c0ca989471092bd0000000000", 0x0, 0x0, 0x0) 1.257189135s ago: executing program 3 (id=607): openat$wskbd(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x4000000) 168.411396ms ago: executing program 5 (id=608): r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getown(r0, 0x5) sysctl$hw(&(0x7f0000000180)={0x6, 0xf}, 0x2, &(0x7f0000000240)="68f3d526c9aa00009f9a110000000000000000400000", &(0x7f00000002c0)=0x16, 0x0, 0x0) 167.925552ms ago: executing program 2 (id=609): openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) pipe(&(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000002f00)=0x1000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_CLOSEFB(r0, 0xc00864d0, &(0x7f0000003600)) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000001740), 0x10000, 0x0) ioctl$PCIOCREAD(r1, 0xc0107002, &(0x7f0000001780)={{0x3, 0x8, 0x80}, 0x3, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000040)={'./file0\x00', 0xb423, 0x6, 0x5, 0x1, 0xfff, 0x5, 0x8, 0x1, 0x1, 0x6, 0x5}) sysctl$net_pipex(&(0x7f00000004c0)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000000500), 0x0, 0x0, 0x0) 166.522339ms ago: executing program 4 (id=610): mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCADDRULE(r0, 0xcd604404, &(0x7f0000000040)={0x1, 0x49c, 0x1, './file0\x00', './file0\x00', 0x0, "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"}) 166.362366ms ago: executing program 7 (id=611): mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x100, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) flock(r0, 0x1) open$dir(&(0x7f00000002c0)='./file0\x00', 0x40, 0x3c) 62.995963ms ago: executing program 1 (id=612): munmap(&(0x7f0000ff5000/0x6000)=nil, 0x6000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000000)={0x1, 0x41}, 0x2, 0x0, 0x0, &(0x7f00000000c0)="2000e2e95ba7e35566c610f37b53b360d41d180e9c5ef486a4c44e91049fe34add75c67ad701896771c5096159176d632445ea7f3076fd4ae26e59807e3cf58b21a691c4c9a38bb174a84c28a5a7d8cfe8c5f886b0cadeeb25de0bd609cf97", 0x5f) sysctl$vm(&(0x7f0000000000)={0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='w\x00') unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') clock_getres(0x3, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 62.783318ms ago: executing program 1 (id=613): sysctl$kern(&(0x7f0000000000)={0x1, 0x28}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) 62.597769ms ago: executing program 3 (id=614): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) stat(&(0x7f0000004700)='.\x00', &(0x7f0000004740)) ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f0000001380)={{'./file1\x00', './file0\x00', 0x8, 0x81}, 0x0, 0x34, 0x0, 0x0, 0x80000000, 0x7, 0x7, 0x40, 0x4}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) fchmod(r1, 0x101) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 62.383462ms ago: executing program 7 (id=615): socketpair(0x2, 0x2, 0x3, 0x0) getppid() 61.840038ms ago: executing program 0 (id=616): r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x400c0, 0x0) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000000140)={{'./file0\x00', './file0\x00', 0x11, 0x2}, 0x0, 0x7, 0x0, 0x3, 0xf, 0xfffffb10, 0x1, 0x42, 0x7}) fchmod(r0, 0x101) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, 0x0) link(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='./file0\x00') pipe(0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) sysctl$net_inet_carp(&(0x7f0000001240)={0x4, 0x2, 0x70, 0x1}, 0x2, &(0x7f0000000000)="b11efad0f20dac5904a1", 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) ioctl$WSDISPLAYIO_GVIDEO(r1, 0x40045744, &(0x7f0000000040)) execve(0x0, 0x0, &(0x7f0000001c00)=[&(0x7f0000001bc0)='/dev/pf\x00']) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 47.265841ms ago: executing program 1 (id=617): r0 = semget$private(0x0, 0x7, 0x30) semop(r0, 0x0, 0x0) 1.464083ms ago: executing program 7 (id=618): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000002300), 0x10000, 0x0) ioctl$DIOCRSETADDRS(r0, 0xc4504445, 0x0) 1.217027ms ago: executing program 7 (id=619): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000700)=[{r0, 0x6}], 0x1, 0xb6) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) seteuid(0xffffffffffffffff) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x1) pipe2(&(0x7f0000000180), 0x0) (async) poll(&(0x7f0000000700)=[{r0, 0x6}], 0x1, 0xb6) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async) seteuid(0xffffffffffffffff) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) openat(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x1) (async) 0s ago: executing program 1 (id=620): sysctl$hw(&(0x7f0000000000)={0x6, 0x14}, 0x2, &(0x7f0000000040)="a95eccb77901aeb4", &(0x7f0000000080)=0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Connection to 10.128.0.123 closed by remote host. OpenBSD/amd64 (Amnesiac) (tty00) login: $%ÙÁ“¾ÚæZ„-j/£¨èRL;0 È„$DÀb~¤ÀDìÿik’=9þð÷š[•¡ûá#Œ¦5lL½·.Kö“½TÈ´4¸4Ÿ“ ×bÉf-€Z ™ðmU2²ý! $%ÙÁ“¾ÚæZ„-j/£¨èRL;0 È„$DÀb~¤ÀDìÿik’=9þð÷š[•¡ûá#Œ¦5lL½·.Kö“½TÈ´4¸4Ÿ“ ×bÉf-€Z ™ðmU2²ý! $%ÙÁ“¾ÚæZ„-j/£¨èRL;0 È„$DÀb~¤ÀDìÿik’=9þð÷š[•¡ûá#Œ¦5lL½·.Kö“½TÈ´4¸4Ÿ“ ×bÉf-€Z ™ðmU2²ý! pckbd_enable: command error malloc(): allocation too large, type = 6, size = 94307484168 pckbd_enable: command error 1425012335 valid accesses KASAN: invalid read of 1 byte at 0xffff8000012f0d60 from pc 0xffffffff829f143b KASAN: first bad byte at 0xffff8000012f0d60 (+0); shadow 0xfb: heap redzone (out-of-bounds) Starting stack trace... __asan_load1_noabort(ffff8000012f0d60) at __asan_load1_noabort+0xcc strlcpy(ffff800000f4c650,ffff8000012f0928,40) at strlcpy+0x19b pf_rule_copyin(ffff8000012f0810,ffff800000f4c538) at pf_rule_copyin+0x52b pfioctl(24900,cd604404,ffff8000012f0000,2,ffff80003533ad28) at pfioctl+0x1b3d VOP_IOCTL(ffff800000faad88,cd604404,ffff8000012f0000,2,ffff800000039478,ffff80003533ad28) at VOP_IOCTL+0x131 vn_ioctl(ffff800001024650,cd604404,ffff8000012f0000,ffff80003533ad28) at vn_ioctl+0x18c sys_ioctl(ffff80003533ad28,ffff80003c3b2f70,ffff80003c3b2ee0) at sys_ioctl+0x868 syscall(ffff80003c3b2f70) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x82f0de2a240, count: 248 End of stack trace. panic: Caught invalid memory access at ffff8000012f0d60 size 1 op 0 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 319343 43200 0 0 0 1 syz-executor *258429 93280 0 0 0x4000000 0K syz-executor db_enter() at db_enter+0x17 panic(ffffffff82a63def) at panic+0x270 __asan_load1_noabort(ffff8000012f0d60) at __asan_load1_noabort+0xed strlcpy(ffff800000f4c650,ffff8000012f0928,40) at strlcpy+0x19b pf_rule_copyin(ffff8000012f0810,ffff800000f4c538) at pf_rule_copyin+0x52b pfioctl(24900,cd604404,ffff8000012f0000,2,ffff80003533ad28) at pfioctl+0x1b3d VOP_IOCTL(ffff800000faad88,cd604404,ffff8000012f0000,2,ffff800000039478,ffff80003533ad28) at VOP_IOCTL+0x131 vn_ioctl(ffff800001024650,cd604404,ffff8000012f0000,ffff80003533ad28) at vn_ioctl+0x18c sys_ioctl(ffff80003533ad28,ffff80003c3b2f70,ffff80003c3b2ee0) at sys_ioctl+0x868 syscall(ffff80003c3b2f70) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x82f0de2a240, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: Caught invalid memory access at ffff8000012f0d60 size 1 op 0 ddb{0}> trace db_enter() at db_enter+0x17 panic(ffffffff82a63def) at panic+0x270 __asan_load1_noabort(ffff8000012f0d60) at __asan_load1_noabort+0xed strlcpy(ffff800000f4c650,ffff8000012f0928,40) at strlcpy+0x19b pf_rule_copyin(ffff8000012f0810,ffff800000f4c538) at pf_rule_copyin+0x52b pfioctl(24900,cd604404,ffff8000012f0000,2,ffff80003533ad28) at pfioctl+0x1b3d VOP_IOCTL(ffff800000faad88,cd604404,ffff8000012f0000,2,ffff800000039478,ffff80003533ad28) at VOP_IOCTL+0x131 vn_ioctl(ffff800001024650,cd604404,ffff8000012f0000,ffff80003533ad28) at vn_ioctl+0x18c sys_ioctl(ffff80003533ad28,ffff80003c3b2f70,ffff80003c3b2ee0) at sys_ioctl+0x868 syscall(ffff80003c3b2f70) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x82f0de2a240, count: -11 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3b23f0 rbx 0xffff80003c3b2460 rdx 0 rcx 0xffffffff82f0bff0 cpu_info_full_primary+0x1ff0 rax 0xffff80000008d700 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003c3b23b8 r11 0xffffffff813f8360 x86_bus_space_io_read_1 r12 0xffffffff82a63def .str.5+0x4fcaf r13 0xffffffff82f0cc08 cpu_info_full_primary+0x2c08 r14 0xffffffff82f0ce07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff814dc617 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003c3b23f0 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=258429 pid=93280 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003533a2c8,0xffff80003533aaa0 process=0xffff80003c429368 user=0xffff80003c3ae000, vmspace=0xffff8000012be3f0 estcpu=36, cpticks=15, pctcpu=0.0, user=0, sys=15, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 21302 92811 54014 0 2 0 syz-executor 43200 319343 19992 0 7 0 syz-executor 54130 141778 25512 0 2 0 syz-executor 54130 279702 25512 0 3 0x4000080 fsleep syz-executor 98130 279738 19849 0 2 0 syz-executor 75042 245749 70094 0 2 0 syz-executor 75042 43282 70094 0 3 0x4000080 fsleep syz-executor 93280 153058 37281 0 2 0 syz-executor *93280 258429 37281 0 7 0x4000000 syz-executor 19286 238366 63438 0 2 0 syz-executor 19286 439663 63438 0 3 0x4000080 fsleep syz-executor 578 33378 1 0 3 0x100083 ttyin getty 63685 373781 0 0 3 0x14280 nfsidl nfsio 87450 51728 0 0 3 0x14280 nfsidl nfsio 48804 301392 0 0 3 0x14280 nfsidl nfsio 47730 129588 0 0 3 0x14280 nfsidl nfsio 75660 43561 0 0 3 0x14280 nfsidl nfsio 94894 34875 0 0 3 0x14280 nfsidl nfsio 60933 523427 0 0 3 0x14280 nfsidl nfsio 33024 429476 0 0 3 0x14280 nfsidl nfsio 35834 466483 0 0 3 0x14280 nfsidl nfsio 83657 229539 0 0 3 0x14280 nfsidl nfsio 67064 4648 0 0 3 0x14280 nfsidl nfsio 19957 23351 0 0 3 0x14280 nfsidl nfsio 5369 218346 0 0 3 0x14280 nfsidl nfsio 87365 408356 0 0 3 0x14280 nfsidl nfsio 69589 185732 0 0 3 0x14280 nfsidl nfsio 73790 287603 0 0 3 0x14280 nfsidl nfsio 63289 392939 0 0 3 0x14280 nfsidl nfsio 9392 193450 0 0 3 0x14280 nfsidl nfsio 71656 80871 0 0 3 0x14280 nfsidl nfsio 67747 402321 0 0 3 0x14280 nfsidl nfsio 25512 465057 59912 0 2 0xc82 syz-executor 19992 69690 59912 0 2 0xc82 syz-executor 54014 510411 59912 0 2 0xc82 syz-executor 37281 399153 59912 0 2 0xc82 syz-executor 70094 232683 59912 0 2 0xc82 syz-executor 63438 404093 59912 0 2 0xc82 syz-executor 19849 20116 59912 0 2 0xc82 syz-executor 61617 209598 59912 0 2 0x2 syz-executor 59912 109410 1 0 3 0x82 kqread syz-executor 95362 112377 0 0 3 0x14200 bored smr 73705 367299 0 0 2 0x14200 zerothread 86971 422404 0 0 3 0x14200 aiodoned aiodoned 48323 106477 0 0 3 0x14200 syncer update 96496 406147 0 0 3 0x14200 cleaner cleaner 3690 192019 0 0 3 0x14200 reaper reaper 57042 92808 0 0 3 0x14200 pgdaemon pagedaemon 12624 350319 0 0 3 0x14200 bored viomb 58905 327948 0 0 3 0x40014200 acpi0 acpi0 75638 478140 0 0 3 0x40014200 idle1 386 90695 0 0 3 0x14200 bored softnet1 92679 112313 0 0 3 0x14200 bored softnet0 7765 196077 0 0 3 0x14200 bored systqmp 10400 455269 0 0 3 0x14200 bored systq 17545 220180 0 0 3 0x14200 tmoslp softclockmp 50416 505789 0 0 3 0x40014200 tmoslp softclock 17923 139354 0 0 3 0x40014200 idle0 1 5110 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 93280 (syz-executor) thread 0xffff80003533ad28 (258429) exclusive rwlock pfioctl_rw r = 0 (0xffffffff83138d38) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 pfioctl+0x256 #3 VOP_IOCTL+0x131 #4 vn_ioctl+0x18c #5 sys_ioctl+0x868 #6 syscall+0x1089 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xfff