last executing test programs: 2.849117784s ago: executing program 1 (id=1589): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0xb, 0x4, 0x101, 0x4, 0x1001, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0x10037fe, 0x800002, 0x7}, {0x100006, 0x0, 0x8, 0x3}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x3, 0x80000000, 0x7}, {0x5, 0x48000, 0x14000009, 0xc}, {0x8, 0xbffffff5, 0x20007, 0x6d}, {0x2000a, 0x7, 0xfdf0, 0x6}, {0x0, 0x40007, 0x8ceb}, {0xfffffc07, 0xffffffff, 0x401, 0x1}, {0xa44f, 0xfff9, 0xa38c000}, {0x4, 0x6, 0x8, 0x8}, {0x2000df, 0x9, 0x1, 0x4}, {0x10008, 0x20000e2, 0xfffffff5, 0xfffffff8}, {0x5, 0x40000005, 0x24, 0x51d}, {0x81, 0xd654, 0x0, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x8, 0x20800c1, 0x12, 0x0, 0x1040807, 0x10050001, 0x103, 0x2, 0x1, 0x9, 0xf5ffeffffffffff9}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 2.784727532s ago: executing program 1 (id=1595): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000000)=0x9) pread(r0, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[]) 2.686873274s ago: executing program 1 (id=1601): open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file0\x00', 0x2040002ffff) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) 2.052240332s ago: executing program 1 (id=1619): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x140) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r0, 0x8) ktrace(&(0x7f00000000c0)='./file0\x00', 0x1, 0x2, 0x0) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.260493113s ago: executing program 7 (id=1664): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0x6d, 0x5, 0x8}, {0xb1, 0xf0, 0x1, 0x900}, {0x6, 0x24, 0x0, 0x4}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="91287ea7a80000000000000000000000000000f3006b1b69a2fb8452a9291f34113e88fd", &(0x7f0000000000)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 1.244735314s ago: executing program 0 (id=1665): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) r1 = kqueue() recvfrom$unix(0xffffffffffffffff, &(0x7f0000000340)=""/194, 0xc2, 0x0, &(0x7f0000000440)=@abs={0x4, 0x1, 0x0, 0x3}, 0x8) kevent(r1, &(0x7f0000000180), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) 1.235930351s ago: executing program 7 (id=1668): setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) r0 = syz_open_pts() close(r0) socket(0x18, 0x1, 0x0) r1 = syz_open_pts() r2 = syz_open_pts() fcntl$dupfd(r2, 0x0, r1) 1.234348399s ago: executing program 0 (id=1669): mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x3ff) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r0 = socket(0x800000018, 0x3, 0x0) setsockopt(r0, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a11", 0x3) open(0x0, 0x100, 0x4ebfac6bbaf7960) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) 1.222951962s ago: executing program 7 (id=1671): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x44000802) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r1, 0x1) 954.217051ms ago: executing program 0 (id=1678): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x1004, 0x8, 0x2, 0xfffffffd, "d518890a380104000000000000380f4ce3b100", 0x7fff, 0x7f}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffff7fffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) 926.94158ms ago: executing program 1 (id=1682): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) pselect(0x40, &(0x7f0000000040)={0x100000001, 0x6, 0x8000, 0xfffffffffffffffe, 0x4b87, 0x1607d4d5, 0x0, 0x7}, &(0x7f0000000080)={0xfffffffffffffff7, 0x7, 0x6bb4, 0x3, 0x32b5, 0x4, 0x7, 0x96b9}, &(0x7f00000000c0)={0x400, 0x9, 0x2, 0x81, 0xfffffffffffff800, 0x3, 0x0, 0x7}, 0x0, &(0x7f0000000100)={0x800}) 840.079157ms ago: executing program 1 (id=1689): poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x2}], 0x1, 0xa7) mknod(&(0x7f0000000580)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000002) 834.796822ms ago: executing program 0 (id=1690): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v6=@rand_addr="b6cf4cbd366540d2dc57a10dab2063a0"], [0x6, 0x40], 0xfffe, 0x28}, {[@v4=@loopback], [0x6, 0x1002], 0x4, 0x18}], {{0x247, 0x3, 0xc, 0x7ff}, 0xd, 0x409, 0x80, 0xfff, 0x80, 0x17, 0xe}, {{0x5, 0x2, 0xff, 0x7}, 0x8002, 0x2, 0x2, 0xff, 0x9, 0xf0, 0xac}, @v4=@rand_addr=0x2c5c, 0x0, 0x9, 0x2, 0x0, 0x6, [[0xfffffff7, 0x4], [0x2, 0x8350]], [[0x3, 0x603f], [0x20007, 0x3]], 0x1, [0x0, 0x7], 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0xb, 0x83, 0x1, 0x8, 0x9, 0xce51}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x4, 0x0, 0x7, 0x8, "210d0000000200007f00000100000200", 0x2000000, 0x10000e0}) 813.970911ms ago: executing program 0 (id=1693): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSRTIMEOUT(r0, 0xc0307004, &(0x7f0000000080)={0x2, 0x2000000f}) 802.364586ms ago: executing program 4 (id=1695): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x0, 0xa, "759f5a5ad65ada388e47a1e7a5446cfe", 0x1071}, {0x1c, 0x18, 0x3, 0x4, "7e908ea871810362ffeeb2b2c94fa87b", 0x4}, 0x0, [0x3efa, 0x9f74, 0x1, 0x4, 0x8, 0x5, 0x800, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000200)={{0x1c, 0x18, 0x0, 0x891c, "ce73085b838e525a5567a74bc9a72b1b", 0x3}, {0x1c, 0x18, 0x0, 0x8, "646bdef64c95392bc93deba7f2d9392a", 0x3ff}, 0x0, [0x4, 0x81, 0xfff, 0x7, 0x81, 0x1, 0x8, 0x6]}, 0x5c) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000100)="ea9726b9c549f74a9cb5412bedbfa1e1b3b962a69a5e98664e321ddefeb881a60c72d71e13f9907d21af02c615a0594411eb1bb1c0662fba895c75ae1b8e07ec5768af0f08d459fef288c0fafd4a3db90ba98f2a453bb9407d28610a92987b8ec21e7d137f9deaf31082d5561cc93f38198d1802382ad3a6", &(0x7f00000001c0)=0x78, 0x0, 0x0) 790.622203ms ago: executing program 4 (id=1712): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) symlink(&(0x7f00000001c0)='.\x02/file1/file0\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 691.190403ms ago: executing program 0 (id=1700): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x140) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r0, 0x8) ktrace(&(0x7f00000000c0)='./file0\x00', 0x1, 0x2, 0x0) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 581.294406ms ago: executing program 2 (id=1711): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1}, 0x6) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, 0x0) ioctl$BIOCSETF(r1, 0x80104267, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x20008, 0x3, 0x2, 0x20000023, "040000000000000100", 0x5, 0x2}) 566.285195ms ago: executing program 2 (id=1714): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x7b, 0x5, 0x48}, {0x48, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f0000002480)="00f60000", &(0x7f0000000000)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 562.547946ms ago: executing program 2 (id=1716): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79b9, 0x8, 0x10, [{0x8003, 0x7, 0x0, 0x71000}, {0x7, 0x88, 0x1, 0x7}, {0x2, 0x9, 0x1, 0x9}, {0x9, 0xd}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0x9, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x3, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11084}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x6, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x100000b, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xe, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 562.034753ms ago: executing program 4 (id=1717): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x1004, 0x8, 0x2, 0xfffffffd, "d518890a380104000000000000380f4ce3b100", 0x7fff, 0x7f}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffff7fffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) 456.638082ms ago: executing program 2 (id=1720): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x0, 0x4c, 0x5, 0x2, 0x8, 0x3, 0xf7, 0x10, [{0x6, 0xb, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x3, 0x4baa, 0x30f, 0x9}, {0x0, 0xe2, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0x3, 0x8, 0xc}, {0x3, 0x800, 0x2, 0xfffffffa}, {0x204, 0x33f8, 0x28000, 0xffffe2e9}, {0x9, 0xffe, 0x6, 0x7fff}, {0x3, 0x1, 0x8, 0x8bfd}, {0xfffffffd, 0x0, 0x8, 0x10}, {0x9, 0x401, 0x5, 0xa6a}, {0x401, 0x4, 0x400008, 0x6}, {0x3, 0x2006e2, 0x2, 0x6f5fc48f}, {0x8000003, 0x8, 0x3, 0x9}, {0x8ff9, 0x4, 0x100000, 0x400}]}) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x1e, 0xffff, 0xfffdff80, 0x160350d, "04f0ee091a0004be1fa614e0ff22700907ffdd00", 0x7fffffff, 0x40}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 456.453249ms ago: executing program 4 (id=1721): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) close(r1) accept4(r0, 0x0, 0x0, 0x4000) 455.48197ms ago: executing program 5 (id=1722): sysctl$kern(0x0, 0x0, &(0x7f0000000080)="0acfaf07339321da5bb4064894cd32099898b95a41c235c1b7e37f6f18d6628dfecd812e23960c3eb58628a21e8e5135579048d8a34e277f075005ef2ed6f5be98ccf46e6c6e2bd033", 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2}}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13bbfd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 360.790964ms ago: executing program 6 (id=1723): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="91287ea7a80000000000000000000000000000f3006b1b69a2fb8452a9291f34113e88fd76a2d781e02a7de4a57a64da65682da841024aa000"/72, &(0x7f0000000000)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 360.54352ms ago: executing program 5 (id=1724): syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "dd12bf", 0x2c, 0x0, 0xa, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0xff81}, @jumbo={0xc2, 0x4, 0x7}]}], @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x4, 0x0, 0x7}}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r0, &(0x7f0000000080)="d99aca906c", 0x1dd6) 360.237524ms ago: executing program 4 (id=1725): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x22c) setrlimit(0x1, &(0x7f0000000240)={0x2, 0x1fd}) setgroups(0x0, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xee01) pledge(&(0x7f0000000140)=' r\x91\xb9\xa8zzW\xc8\x9a\xc7\xed\x861r?\xd3\xd4\xcbl\b>-\xe5\xd0I\xe5\x88\xb5\x05\x83\xc9!g\xaaq\xc53\xfd\xf5\xe9\xd4\x85\t\x83\xbc\xd9@\f\x82\x18>e\xd7\xef\x88\xff\x1a\x02b\xba\xa5\xdbz&\xde\xec\xc3\xb8\x0eg', 0x0) 359.982677ms ago: executing program 6 (id=1726): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x6, 0x7, 0x8}, {0x28, 0xf0, 0xff, 0x10001}, {0x6, 0x2, 0xb6, 0xf}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="91288156c41fe591026c9e82b38988f5b0631eaa1f298a490ade00e2e95cd2e1", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 329.085804ms ago: executing program 5 (id=1727): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f00000000c0)={0x3, 0x2, 0x8, 0x1000300000004}) flock(r2, 0x1) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x40000000000007f, 0x100000001}) closefrom(r1) 278.260078ms ago: executing program 4 (id=1729): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mknod(&(0x7f0000000100)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={0x3ff}, 0x0) 278.008527ms ago: executing program 6 (id=1730): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) poll(&(0x7f0000000180)=[{r0, 0x27}], 0x1, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) accept$unix(r0, 0x0, 0x0) 277.541854ms ago: executing program 3 (id=1731): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x80, 0x123) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 277.004234ms ago: executing program 3 (id=1732): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="91287ea7a80000000000000000000000000000f3006b1b69a2fb8452a9291f34113e88fd76a2d781e02a7de4a5", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[]) 276.32857ms ago: executing program 7 (id=1733): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x2, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x4000008, 0x5}, {0x81, 0x800, 0x9d29, 0x4000071}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x82, 0x4, 0xaf}, {0x5, 0x7ffffffe, 0xd1b, 0x88}, {0x1d0, 0xa, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x4000009, 0x6}, {0x0, 0x2, 0x2, 0x7fff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) 254.738223ms ago: executing program 3 (id=1734): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff803}]}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="91287e205cc911dda7a800000000000000000000000000ffb1d2bf3b69a2fb8452a92d1f34113e88fd76a2d781e3bb6c4c7ee02a7de400"/69, &(0x7f0000000000)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 253.341829ms ago: executing program 3 (id=1735): syz_open_pts() syz_open_pts() syz_open_pts() socket(0x2, 0x8002, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x80, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x800181c, 0x8, 0x2}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x2000007, 0xfffffffffffffffd, 0x27fffff7ffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0) 251.99384ms ago: executing program 5 (id=1736): r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCCLRVERAUTH(r1, 0x2000741d) ioctl$TIOCCHKVERAUTH(r2, 0x2000741e) 248.247904ms ago: executing program 6 (id=1737): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x3, 0x3, 0x48}, {0x4, 0xac, 0xff}, {0x6, 0x7e, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000540)="a7a6d61de4a1090992003b980831015f9b9ab115aafc21ba0f47915d7556c41f4170c8bfbcc59c1eb93e1f0b83d72201", &(0x7f0000000000)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 137.706662ms ago: executing program 5 (id=1738): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x1004, 0x8, 0x2, 0xfffffffd, "d518890a380104000000000000380f4ce3b100", 0x7fff, 0x7f}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffff7fffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) 137.45113ms ago: executing program 6 (id=1739): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000100)='./file2/file0\x00', &(0x7f0000000140)='./file0\x00') 137.10995ms ago: executing program 7 (id=1740): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x4b0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x6) 136.795973ms ago: executing program 6 (id=1741): r0 = msgget$private(0x0, 0x204) msgrcv(r0, &(0x7f0000000fc0)={0x0, ""/4096}, 0x1008, 0x0, 0x1000) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000e3a4a21ea41f9a1fa66958025b5e1c1bfa1c4f840000000061c5d23d289a18caa32d90c70df2d2e57060c51d5d82a124383380587e07e18b68e1033ba804ae8c4fb777736c54de54114e49a64a07cb277c0000000000000000000000c2eb70040054d994875235bde0cf6f966db6960ec7308fbc94ee3d17e8790edb6be052a6d44d7f47d8b34dc0d535c62ce1526fad51abebab2267370fccc42893377720c37e3b7fecac56b8dda11326ef80a8170de2c47ce59bf1ae46fa02b7bbca6b"], 0x105, 0x800) openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) msgctl$IPC_RMID(r0, 0x0) 136.557059ms ago: executing program 7 (id=1742): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xd, 0xff, 0x8}, {0x16, 0x80, 0xb6, 0xfffff802}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1", 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 81.22679ms ago: executing program 5 (id=1743): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r0, &(0x7f0000000080)="d99a", 0x2) 78.031229ms ago: executing program 3 (id=1744): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) pselect(0x40, &(0x7f0000000040)={0x100000001, 0x6, 0x8000, 0xfffffffffffffffe, 0x4b87, 0x1607d4d5, 0x0, 0x7}, &(0x7f0000000080)={0xfffffffffffffff7, 0x7, 0x6bb4, 0x3, 0x32b5, 0x4, 0x7, 0x96b9}, &(0x7f00000000c0)={0x400, 0x9, 0x2, 0x81, 0xfffffffffffff800, 0x3, 0x0, 0x7}, 0x0, &(0x7f0000000100)={0x800}) 62.353363ms ago: executing program 3 (id=1745): r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) socket(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) 41.787256ms ago: executing program 2 (id=1746): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @loopback}], [0x6, 0x40], 0xfffe, 0x28}, {[@v4=@loopback, @v4=@multicast1], [0x6, 0x2], 0x4, 0x18}], {{0x247, 0x3, 0x1, 0x7ff}, 0xd, 0x409, 0x80, 0xfff, 0x80, 0x17, 0xe}, {{0x5, 0x2, 0xff, 0x7}, 0x8002, 0x7, 0x2, 0x6, 0x9, 0xf0, 0xac}, @v4=@rand_addr=0x2c5c, 0x0, 0x9, 0x2, 0x0, 0x6, [[0xfffffff7, 0x4], [0x2, 0x8350]], [[0x3, 0x603f], [0x20007, 0x3]], 0x1, [0x0, 0x7], 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0xb, 0x83, 0x1, 0x8, 0x9, 0xce51}}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) 96.932µs ago: executing program 2 (id=1747): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSRTIMEOUT(r0, 0xc0307004, &(0x7f00000000c0)={0x790, 0x2000000f}) 0s ago: executing program 32 (id=1747): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSRTIMEOUT(r0, 0xc0307004, &(0x7f00000000c0)={0x790, 0x2000000f}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. €Â¬ÝÏòS’c©±Ûi}ËF ‰Eñ *¥¬cŠI á?SVÃc_]DLê¹j¼õ¬|ÿ ž¨E1\…: OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error Connection to 10.128.1.78 closed by remote host. pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00) login: sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code R¯ÿy´ÍÍï¬øóh OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00) login:                                       cP${×âðàV)»ÏÇR ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped uvm_fault(0xffffffff839ce170, 0xffff80001aad2004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *118640 93133 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a82b840) at ufs_readdir+0x26e VOP_READDIR(fffffd807e186708,ffff80002a82b8c8,fffffd8007ffd410,ffff80002a82b90c) at VOP_READDIR+0x125 sys_getdents(ffff80002a736538,ffff80002a82ba50,ffff80002a82b9a0) at sys_getdents+0x2dd syscall(ffff80002a82ba50) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d9bb503b210, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb>