last executing test programs: 2.180889955s ago: executing program 6 (id=7): syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa54d3ca52ace9811b500e1355d62ad6441f0f7cdcb2b2674db13dfa05a0b3d0ba796a9c11dffe4bac720a7fd091c9074ba10df38b6379ae4032790fef5fb56191de5035904abdb6e57b16741a1a6da0518724ee404cf942a77c3d00a5703a7bde602fd0e65eb6ce96cc13059604e3c970f3e8b85c1bf7aea23b80b1d55a51f0de55e8ec77b2d4880a"]) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa54d3ca52ace9811b500e1355d62ad6441f0f7cdcb2b2674db13dfa05a0b3d0ba796a9c11dffe4bac720a7fd091c9074ba10df38b6379ae4032790fef5fb56191de5035904abdb6e57b16741a1a6da0518724ee404cf942a77c3d00a5703a7bde602fd0e65eb6ce96cc13059604e3c970f3e8b85c1bf7aea23b80b1d55a51f0de55e8ec77b2d4880a"]) (async) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 2.162801535s ago: executing program 1 (id=2): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000001d40)={0x3}) pread(r0, &(0x7f0000000040)="6baed270ffb8f0b1409c56914f6e9637dbbf8573b68dbf90b916a489ebdfea1e253ed9e9ded43fee706f288f1a0a3044d50232b94e0f1c575ae737fb4e2380c8608b43974d54d468d364321202e3633cb9783c5abc4884ced6fb30c403a4ea92d84b9f7af754cbbe44b727f9", 0x6c, 0xfff) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000001d40)={0x3}) (async) pread(r0, &(0x7f0000000040)="6baed270ffb8f0b1409c56914f6e9637dbbf8573b68dbf90b916a489ebdfea1e253ed9e9ded43fee706f288f1a0a3044d50232b94e0f1c575ae737fb4e2380c8608b43974d54d468d364321202e3633cb9783c5abc4884ced6fb30c403a4ea92d84b9f7af754cbbe44b727f9", 0x6c, 0xfff) (async) 2.075075108s ago: executing program 0 (id=1): r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x3, "ff020080870000000000000000000020", 0x8}, 0x1c) mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x9) 1.999570453s ago: executing program 1 (id=9): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x23, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xa094, 0x24}, 0x8) sendmsg(r1, &(0x7f0000000a00)={&(0x7f0000000400)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000840)=[{0x14, 0xffff, 0x3d, "80783a2bce"}], 0x14}, 0x402) read(r0, &(0x7f00000000c0)=""/214, 0xd6) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) getsockname$unix(r2, 0x0, &(0x7f0000000040)) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000240)={{'./file0\x00', './file0\x00', 0x9, 0x7}, 0x0, 0x0, 0x0, 0x6, 0x3, 0x2, 0x9, 0x40, 0xc4380}) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa76aaaa86dd6f15184a001c0601fec000000000000000000000000000bbfecd318c5d7974600109f43a1bc1bc6a4e214e210008907859e4f44a70c403"]) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r3, 0x800c5709, &(0x7f0000000200)={0x0, 0x1, 0x664b}) 1.997296991s ago: executing program 0 (id=10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) r1 = syz_open_pts() r2 = socket$unix(0x1, 0x2, 0x0) closefrom(r2) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000080)={0x7fffffff, 0x8007, 0xffffffc0, 0x94b, "fe09feff770caaac0349bfe34b00001700", 0xff, 0xd3}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r4) sendmmsg(r0, &(0x7f0000000000)={{0x0, 0xffffffffffffff74, &(0x7f0000000680), 0x1000000000000365, 0x0}}, 0x38, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0x80047308, &(0x7f00000001c0)={0x0, 0x0, 0x4}) kqueue1(0x10004) socket$inet6(0x18, 0x1, 0x38) ioctl$DIOCRADDADDRS(r5, 0xc4504443, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0x10, 0x3e}, &(0x7f0000000140)=[{@rand_addr=0x8, '\x00', './file0\x00', 0x8, 0x673, 0x0, 0x1, 0x4, 0x2, 0x1}, {@rand_addr=0xfffffffc, '\x00', './file0\x00', 0x3, 0x3, 0x2, 0x3a, 0x8, 0x9, 0x5}, {@broadcast, '\x00', './file0\x00', 0xb, 0x6, 0x0, 0x2, 0x7, 0x40, 0xc}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8, 0xdab, 0x2, 0x4, 0x6a, 0x4, 0xff}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x1000, 0x3ff, 0xc, 0x9, 0x3, 0x2, 0xa4}, {@rand_addr=0x4, '\x00', './file0\x00', 0x10002, 0xffff, 0x2, 0xe, 0x5, 0x0, 0x8}], 0x800, 0x6, 0x8, 0x8, 0x1000, 0x4b4b, 0x60, 0x6}) 650.163234ms ago: executing program 6 (id=11): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000080)=[{0x7c, 0x3, 0x3, 0xfffffffe}, {0x1, 0x41, 0xfe, 0x1}, {0x2006, 0xe, 0x69, 0x100000}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040), 0xc) fcntl$lock(r1, 0x8, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff}) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) clock_getres(0x4, 0xffffffffffffffff) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) pwrite(r2, 0x0, 0x0, 0x2) symlinkat(&(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x1d}, 0x2, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$DIOCRGETASTATS(r1, 0xc4504447, &(0x7f0000001800)={{'./file0\x00', './file0\x00', 0x20, 0x6}, 0x0, 0x9e9, 0x0, 0x7, 0x2, 0xc, 0x81, 0x18, 0x1000}) 649.434008ms ago: executing program 5 (id=6): kqueue1(0x0) kqueue1(0x10004) (async) r0 = kqueue1(0x10004) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x404) kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffffd, 0x8, 0x10, 0x3, 0xffffffff}, {{r0}, 0xfffffffffffffff7, 0x5, 0x4, 0x5, 0x1}, {{r0}, 0xfffffffffffffffe, 0x68, 0xf0000000, 0x6}, {{r0}, 0xfffffffffffffffa, 0xc7, 0x1, 0x0, 0xbf}, {{r1}, 0xfffffffffffffff8, 0x90, 0x1, 0x7ff, 0x6}, {{r0}, 0xfffffffffffffff7, 0x0, 0x1, 0x6, 0x9}, {{r2}, 0xfffffffffffffffb, 0x0, 0x10, 0x3, 0x6}, {{r3}, 0xfffffffffffffffe, 0xa, 0x2, 0x2, 0xffffffffffffffff}, {{r0}, 0xfffffffffffffffd, 0x50, 0x10, 0x8, 0x400}], 0x100f00, 0x0, 0xffff4b51, 0x0) (async) kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffffd, 0x8, 0x10, 0x3, 0xffffffff}, {{r0}, 0xfffffffffffffff7, 0x5, 0x4, 0x5, 0x1}, {{r0}, 0xfffffffffffffffe, 0x68, 0xf0000000, 0x6}, {{r0}, 0xfffffffffffffffa, 0xc7, 0x1, 0x0, 0xbf}, {{r1}, 0xfffffffffffffff8, 0x90, 0x1, 0x7ff, 0x6}, {{r0}, 0xfffffffffffffff7, 0x0, 0x1, 0x6, 0x9}, {{r2}, 0xfffffffffffffffb, 0x0, 0x10, 0x3, 0x6}, {{r3}, 0xfffffffffffffffe, 0xa, 0x2, 0x2, 0xffffffffffffffff}, {{r0}, 0xfffffffffffffffd, 0x50, 0x10, 0x8, 0x400}], 0x100f00, 0x0, 0xffff4b51, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) fsync(0xffffffffffffffff) (async) fsync(0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) fcntl$getown(r3, 0x5) r6 = openat(r4, &(0x7f00000001c0)='./file0\x00', 0x200, 0x1c6) ppoll(&(0x7f0000000200)=[{r4}, {r6, 0x40}, {r4, 0x1}, {r4, 0x10}, {r0, 0x40}], 0x5, &(0x7f0000000240)={0x9, 0x7}, &(0x7f0000000280)={0x8}) closefrom(r5) (async) closefrom(r5) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) 410.994404ms ago: executing program 1 (id=12): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async) chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) seteuid(0xffffffffffffffff) (async, rerun: 32) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0xe1) (rerun: 32) setreuid(0x0, 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) chflags(&(0x7f0000000080)='./file0\x00', 0x0) 410.077067ms ago: executing program 3 (id=4): mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sysctl$kern(&(0x7f0000000000)={0x1, 0x28}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x57) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0x4) r1 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2, 0x3, 0xffff}, 0x10) fstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) seteuid(r2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000002b40), 0x10502, 0x0) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) ioctl$WSMOUSEIO_GTYPE(r4, 0x40045720, &(0x7f0000000280)) fcntl$lock(r3, 0x9, 0xfffffffffffffffe) semget(0x2, 0x7, 0x240) semget(0x2, 0x7, 0x240) r5 = semget$private(0x0, 0x2, 0x10) r6 = semget(0x2, 0x7, 0x240) semop(r6, &(0x7f0000000000)=[{0x3, 0x1, 0x1000}], 0x1) r7 = semget(0x3, 0x0, 0x240) semop(r7, &(0x7f00000001c0)=[{0x1, 0x1, 0x1000}, {0x1, 0xffff, 0x1000}, {0x4, 0x2}], 0x3) r8 = semget(0x1, 0x4, 0x140) semop(r8, &(0x7f0000000180)=[{0x0, 0x40, 0x800}, {0x4, 0x0, 0x1800}], 0x2) semctl$GETPID(r5, 0xc09ae81eb593c929, 0x4, 0x0) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2, 0x1, 0x401}, 0x10) seteuid(0xffffffffffffffff) setsockopt(r0, 0x0, 0x1d, &(0x7f0000000140)="9a350700", 0x4) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) setsockopt(r0, 0x9, 0x4, &(0x7f0000000000)="6370afa9b378702f420d0e8827e203fe4df37415d12164d03b929e7d1d3febc8b9038a7bf64572f9088fbc9973ac3029ddc8db54040ac9e7eb1cf8c27fbfa36831b0da3b733e2261108ab819a5c7b3a79298b254", 0x54) 407.372445ms ago: executing program 7 (id=8): open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x200, 0xfdf98e28ba4af85) openat$bpf(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000280)=0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x14, 0x28, 0x64, 0x401, 0x3, 0xf0, 0x0, @multicast2, @multicast2}, @icmp=@timestamp={0xd, 0x0, 0x0, 0xb, 0x4d7b, 0xff, 0x8, 0x5}}}}}) unveil(&(0x7f0000000180)='./file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') 369.352248ms ago: executing program 2 (id=3): mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) r0 = open(0x0, 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0xd2, 0x2, {'\x00', './file0\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x200002f1c, 0x526}, 0x4}, {{0xc, 0xfffffffc}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0xfffffffe, 0x4}, 0x0, 0x10800, 0x6, 0x7, 0x4}}) ioctl$DIOCGETQUEUES(r0, 0x80044403, &(0x7f0000000040)={0x8, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x7, 0x7ff}}, {{0x8, 0x2}, {0xc, 0x5000}, 0x3fffbffd}, {0x7, 0x0, 0x8000, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x4}}) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f0000000140)=0x200) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x80000004, 0x5, 0x1, 0x2, "2feac1b1549b00", 0x0, 0xf403}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vm_swapencrypt(&(0x7f00000005c0), 0x3, 0x0, 0x0, &(0x7f0000000880)="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"/406, 0x196) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f00000000c0)=0xfffffc01) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000005240), 0x2, 0x0) ioctl$DIOCIGETIFACES(r3, 0xc0284457, &(0x7f0000000200)={'\x00', &(0x7f0000000140)=""/119, 0x100, 0x38, 0xff, 0x1a3}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCCLRSTATUS(r3, 0xc0284416, &(0x7f0000001140)={'./file2\x00', 0x0, 0x7, 0x8, 0x4}) shutdown(r2, 0x2) pselect(0x40, &(0x7f0000000580)={0x1000006, 0x4000000b, 0x33, 0x2000000001, 0x9, 0x4, 0x20002fc, 0x10}, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_open_pts() sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x3, &(0x7f0000000180)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400"/104, &(0x7f0000000080)=0x5b, 0x0, 0xfffa) seteuid(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0xc8) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) ioctl$DIOCRSETTFLAGS(r4, 0xc450444a, &(0x7f0000000100)={{'./file3/file0\x00', './file3\x00', 0x8, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x4f, 0x1, 0x9, 0x60, 0x7}) 365.508705ms ago: executing program 4 (id=5): mknod$loop(&(0x7f0000000580)='./file1\x00', 0x4, 0x0) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x15c) sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, [], {@ipv6={0x86dd, {0x5, 0x6, "647497", 0x0, 0x3a, 0xfb, @mcast2, @mcast2}}}}) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0\x00') link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 364.363792ms ago: executing program 6 (id=13): msgget(0x2, 0x200) msgget(0x2, 0x400) msgget(0x2, 0x4ea) 81.577205ms ago: executing program 7 (id=14): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) setreuid(0xffffffffffffffff, 0x0) (async) stat(&(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r3) r4 = socket$inet(0x2, 0x5, 0x0) (async) fstatat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(0x0, 0xffffffffffffffff, r8) setresgid(0x0, r8, 0x0) (async, rerun: 32) r9 = getuid() (rerun: 32) r10 = getegid() setresgid(r6, 0x0, 0x0) (async) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000240)={0x0}, 0xc) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{r5, r8, r9, r10, 0x52, 0xfffb, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x4d, 0x7ff, 0x8, r11, 0x0, 0x6, 0x0, 0xfffffffffffffff9, 0x0, 0x7}) (async, rerun: 32) setsockopt$sock_cred(r4, 0xffff, 0x1023, &(0x7f00000003c0)={0x0, 0xffffffffffffffff}, 0x20) (async, rerun: 32) symlink(&(0x7f0000000040)='\x00', &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)="dea6", 0x61}], 0x1, 0x8) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) open(&(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00, 0x28) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) openat$vnd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async, rerun: 64) r12 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r12, 0x80206979, &(0x7f0000000580)=0x7) socket$inet(0x2, 0x3, 0x80) 9.970805ms ago: executing program 3 (id=15): ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000040)={0x6, 0x8, 0x6, {[0xb, 0x5, 0x6f6, 0x100000001, 0x1, 0xfffffffffffffff9, 0x6, 0x6, 0x1e, 0x80, 0x3, 0xdde0, 0x9, 0x7, 0x8, 0x7, 0x1, 0x6], [0x5, 0x4000007, 0xfffffffffffffffa, 0xd, 0xffff, 0x9, 0xfffffffffffffff9, 0x100000000, 0xfffffffffffffff7, 0x81], [0x6, 0x6, 0x4, 0xfffffffffffffff8, 0x8, 0x8, 0x4000000000001], [0x0, 0x8000000000000008, 0x1, 0x9, 0x0, 0x7], [{0x0, 0xffff, 0xffffff01, 0x3}, {0x1, 0x4, 0x6, 0x4}, {0x2, 0x4, 0x4, 0x2c2}, {0x9, 0x6, 0x2e, 0x5}, {0x5, 0x5, 0x7, 0x4}, {0x9555, 0x5, 0x5, 0x8}, {0x7, 0x8000, 0x9, 0x8}, {0x1, 0x3, 0x1e, 0x7}], {0x42, 0x8, 0x8001, 0x8}, {0x3, 0x9, 0x7}}}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x64, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x1c}, 0x2, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) 4.804752ms ago: executing program 6 (id=16): sync() sync() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) r0 = open$dir(&(0x7f00000009c0)='./file0\x00', 0x8, 0x70) fchdir(r0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r1 = socket$inet(0x2, 0x3, 0x14) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$VMM_IOC_INFO(r2, 0xc0185603, &(0x7f0000000100)={0x0, 0x8, 0x0}) ioctl$FIOASYNC(r1, 0x802069a1, &(0x7f0000000580)=0x7) 0s ago: executing program 4 (id=17): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x50c12, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x610, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x49) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x9, 0x300000002}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x1, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) ioctl$DIOCGETQUEUES(r0, 0x80044403, &(0x7f0000000040)={0x1, 0x9, {'\x00', './file1\x00', './file0/file0\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x6}, 0x4}, {{0x9, 0x1}, {0x7, 0x3363}, 0x3}, {{0x7f, 0x2}, {0x9, 0x1000}, 0x1}, {0x47, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x8}}) closefrom(0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. pckbd_enable: command error SYZFAIL: SIGILL pc-offset:0x8f69ee80081 pc:0xdeadbeef addr:0x0 code=0 (errno 35: Resource temporarily unavailable) smr: dispatch took 2.869993s uvn_flush: obj=0xffff80000192bcd8, offset=0x3ff000. error during pageout. uvn_flush: WARNING: changes to page may be lost! OpenBSD/amd64 (ci-openbsd-kasan-3.us-central1-b.c.syzkaller.internal) (tty00) login: show panic Password: Login incorrect login: trace Password: Login incorrect login: show proc Password: Login incorrect login: show all locks Password: Login incorrect show all pools login: Password: Login incorrect trace login: Password: Login incorrect trace login: Password: