last executing test programs: 2.268074343s ago: executing program 6 (id=785): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f00000007c0)="a5584e4c34d0247bcfb911933d748f973f94c34eaaf6f0e584b5c3c2409be9536cce3cc8847ce1ad27c5b95dd5cc6f0cc72c3c", 0x33}], 0x1) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d84cbaa28aad78faea7019357d334b2f9ddc03ef3cc1b9c996070000000000000086aa0ab3764dbc5ce147f6a0ca0dbd652bcf04e0a445235a119dbdf1791d7d2bc83f8623b3106617264544949b45b281a3eecfac9aa0d0d45acde620110aa1427bec66cd2375e99a27254313acf5a2d073dde4c989652c20dd5d280ed47a94b563ee79036aafb504a2acfc30fb57f55cec618354e0a4cb9c324f64bcb08dfb49490aee932a483b02b94829786f1779971795c1898523af29f1427cc8dc3b7457dae0f7da1e919aa1196694df4e843a76edd2a63e34562679713cfe", 0xdc}], 0x1, 0xc) execve(0x0, 0x0, 0x0) 2.248701021s ago: executing program 6 (id=789): mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000001c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)="4fabb8b0b9fc51202d7b572f9d305c5e0ff6626747bd2ffa9dc1c0483a9affe0ef996c60a04477c704", 0x29}], 0x1) 1.958456843s ago: executing program 7 (id=821): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x9, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4c, 0xfb, 0x3, 0x48}, {0x1, 0xf0, 0xff, 0x1ff}, {0x1006, 0xc5, 0xe, 0xfffffff9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[]) 1.954077231s ago: executing program 7 (id=824): open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x2) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000740)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x3], [0x8000, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x20}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) r0 = kqueue() kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) close(0x3) 1.952969401s ago: executing program 3 (id=825): sendto$unix(0xffffffffffffffff, &(0x7f0000000200)="b1000516000000000000000020000000000013fecea10500fef96ecf2ac72fd3357ae30208004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699af4879b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770bef5a872c88106002ec5890400000000000000361b1257aea8c508002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000e1718d30d4a13f1dd80460259bbdf3688f457ceb4dbd32bcd83790095c6eb09e606187259a80efe2122e02afb4f82cdc", 0xe1, 0xe, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000040)={0x1000ff28, 0x2, 0x86a, 0x4, "2800180000020002000000000068ab5ade800600", 0x4, 0xdb61}) 1.861547281s ago: executing program 3 (id=829): r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x807, 0x6b881aef, 0x3000007, 0xfe, 0x80000001, 0xffff79a9, 0x0, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x4, 0x88, 0x8008, 0x7}, {0xffffffff, 0x8, 0x1, 0x9}, {0x320, 0x900, 0xe}, {0x481, 0x2, 0x10002800, 0x7}, {0x2, 0x4, 0x3, 0x4}, {0xce3, 0x0, 0x4f5, 0x6}, {0x6, 0x56, 0xf, 0x8b}, {0xe, 0x82, 0x5, 0x80}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0xc, 0x8, 0xd}, {0xb8e, 0x4, 0x0, 0x2}, {0x29a7171c, 0x8, 0x1}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x40000, 0x1, 0x7}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x4, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x9010, 0xffffffffffffffff, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/240, 0xed5ffd65}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.694686781s ago: executing program 2 (id=852): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000680)=[{0x54, 0x7, 0xff, 0x1a000000}, {0x48, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 1.6740589s ago: executing program 2 (id=855): sysctl$kern(&(0x7f0000001340)={0x1, 0x32}, 0x2, &(0x7f0000000040)='v', &(0x7f0000001440)=0x1, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r1 = dup(r0) ioctl$DIOCRCLRTSTATS(r1, 0xc4504441, &(0x7f0000002100)={{'./file0\x00', './file0\x00', 0x20, 0xfd}, &(0x7f0000001040), 0x428, 0x62, 0x9, 0x4, 0x9, 0x8001, 0x12, 0x8}) 1.632194034s ago: executing program 2 (id=858): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x44000802) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r1, 0x1) 1.51930083s ago: executing program 7 (id=864): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0206925, &(0x7f00000001c0)) 1.441462685s ago: executing program 0 (id=871): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x44, 0x12, 0x5, 0xffffffff}, {0x48, 0xf0, 0x3, 0x900}, {0x6, 0x24, 0x0, 0xfffff800}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 1.414964862s ago: executing program 0 (id=873): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) chmod(0x0, 0x2ea) chdir(0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 1.414439626s ago: executing program 0 (id=875): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r0, &(0x7f0000000080)="d99a", 0x2) 1.41107357s ago: executing program 1 (id=877): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0xc0285108, &(0x7f0000000000)={0x0, 0xda, 0x0}) 1.391237059s ago: executing program 6 (id=878): getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x88) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) 1.370294388s ago: executing program 0 (id=879): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d9, 0xf7f8, 0x2, 0x8, 0x3, 0x47, 0x10, [{0x8, 0x10000, 0xfffff115, 0x80000002}, {0x0, 0xffffffff, 0x2, 0xfff}, {0xcd5, 0x4baa, 0x4, 0x6}, {0x3, 0xff, 0xe, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x3890, 0xfffd, 0x8, 0x2}, {0x10000, 0xa00, 0x3, 0xfffffffe}, {0x207, 0xffffffff, 0x28000, 0x2}, {0x9, 0x1000, 0x138b, 0x7fff}, {0x7, 0x1, 0xffb, 0x8bfd}, {0x82, 0x0, 0x5, 0x20006}, {0x10000, 0x0, 0x4, 0xa6a}, {0x401, 0x0, 0x400009, 0xa1}, {0x3, 0x2, 0x2, 0x6f5fc48f}, {0x3, 0xb, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0xe7ed}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 1.36993918s ago: executing program 1 (id=880): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x1, 0x65, 0x4, 0x10005}, {0x1c, 0xf0, 0x44, 0x900}, {0x6, 0x24, 0x8, 0x8001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000001c0)="dbecc0b71498e087fc2f23b74c84", 0xe) 1.289100366s ago: executing program 1 (id=883): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x30, 0x85, 0xd}, {0x50, 0x5, 0xff, 0x40}, {0x6, 0x80, 0x80, 0xfffff800}]}) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="1f1394649331ef866cee7d7026ac2b84fc1f92af953f1fe0803142655ccaccb0fcce70fd3733c3520acd2ed3ffd8fbae8303ad3ce7710587cf6d2667149dcaa82256d5360b79bca0b7145d4680df71761ec4d1ad2888a6b7a302e6cfa7c2fb68", &(0x7f0000000000)=0x60, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe0) 1.268686526s ago: executing program 0 (id=884): syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "dd12bf", 0x2c, 0x0, 0xa, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0xff81}, @jumbo={0xc2, 0x4, 0x7}]}], @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x4, 0x0, 0x7}}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r0, &(0x7f0000000080)="d99aca906c", 0x1dd6) 1.22695386s ago: executing program 3 (id=885): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x7b, 0x5, 0x48}, {0x48, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="91288156c41fe591f5b0631eaa1f298a490ade00e2", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 1.226815493s ago: executing program 3 (id=886): mknod(0x0, 0x2000, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) 1.226737899s ago: executing program 5 (id=887): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x7e, 0x3, 0x48}, {0x3, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 1.22665297s ago: executing program 5 (id=888): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x88) semop(0x0, &(0x7f0000000140)=[{0x0, 0xfff8, 0x1000}], 0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) 1.226122203s ago: executing program 4 (id=889): r0 = socket(0x18, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB]) recvmmsg(r0, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/6, 0x6}, 0x3ae}, 0x38, 0x1000, 0x0) 1.206453669s ago: executing program 1 (id=890): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="91287ea7a80000000000000000000000000000f3006b1ba6f6164bc9682cc4b86bffb1d2bf3b69a2fb8452a92d1f34113e88fd76a2d781e3bb6c4c7ee02a7de4a57a64da", &(0x7f0000000000)=0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 1.206207389s ago: executing program 1 (id=891): socket$inet6(0x18, 0x3, 0x6) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x2, './file0\x00', [{[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x9, 0x40], 0x0, 0x2}, {[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4=@broadcast], [0x46], 0x4}], {{0x246, 0x48, 0xfa, 0x7ff}, 0xe, 0x409, 0xfff00000, 0xbe46, 0x8, 0x17, 0x16}, {{0x0, 0x7, 0x1, 0x5}, 0x8001, 0xc86, 0x4cdf, 0x6, 0x800, 0xf0}, @v4=@multicast1, 0x4, 0xb, 0x2, 0x85d3, 0x6, [[0xfffffff7, 0x7], [0x2, 0x34c]], [[0xfc000002, 0x401], [0x9, 0x3]], 0x9, [0xf, 0x79], 0x1, 0x18, 0x6, 0x1, 0x0, 0x40, 0xb, 0x83, 0x5, 0x8, 0x1, 0xce57}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, "210d0000000200000006000000000200007fffff", 0x7effdffe}) 1.205542265s ago: executing program 4 (id=892): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="91288156c41fe591026c9e82b38988f5b0631eaa1f298a490ade00e2", &(0x7f0000000000)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[]) 1.195711268s ago: executing program 5 (id=893): pipe2(0x0, 0x0) poll(&(0x7f00000001c0), 0x0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) 1.16820721s ago: executing program 4 (id=894): socket(0x6, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000011100002e"]) fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) ioctl$WSMOUSEIO_SETMODE(0xffffffffffffffff, 0x80045726, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) 1.16734628s ago: executing program 5 (id=895): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSRTIMEOUT(r0, 0xc0307004, &(0x7f00000000c0)={0x790, 0x2000000f}) 1.167207444s ago: executing program 4 (id=896): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6(0x18, 0x1, 0x6) dup3(r1, r0, 0x0) 65.765778ms ago: executing program 5 (id=897): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x7b, 0x5, 0x48}, {0x48, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x84, 0x9, 0xa, 0x5}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 65.589764ms ago: executing program 4 (id=898): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pread(r1, &(0x7f0000000080)=':', 0x1, 0x81) 65.371314ms ago: executing program 0 (id=899): r0 = syz_open_pts() flock(r0, 0x1) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x1000000, 0x300000003}) closefrom(r0) 65.233169ms ago: executing program 1 (id=900): shmget$private(0x0, 0x3000, 0x41, &(0x7f0000003000/0x3000)=nil) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000001c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)="4fabb8b0b9fc51202d7b572f9d305c5e0ff6626747bd2ffa9dc1c0483a9affe0ef996c60a04477c704", 0x29}], 0x1) 63.440078ms ago: executing program 4 (id=901): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v6=@loopback], [0x6, 0x40], 0xfffe, 0x28}, {[@v4=@loopback, @v4=@multicast1], [0x4, 0x2], 0x4, 0x18}], {{0x247, 0x3, 0x1, 0x7ff}, 0xd, 0x409, 0x80, 0xfff, 0x80, 0x17, 0xe}, {{0x5, 0x2, 0x1, 0x7}, 0x8002, 0x7, 0x2, 0x6, 0x9, 0xf0, 0xac}, @v4=@loopback, 0x0, 0x9, 0x2, 0x0, 0x6, [[0xfffffff7, 0x4], [0x2, 0x8350]], [[0x3, 0x603f], [0x20007, 0x3]], 0x1, [0x0, 0x9], 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0xb, 0x83, 0x1, 0x8, 0x9, 0xce53}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet(0x2, 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x4, 0x0, 0x7, 0x8, "210d0000000200007f00000100000200", 0x2000000, 0x10000e0}) 63.294521ms ago: executing program 5 (id=902): semop(0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) socketpair$unix(0x1, 0x5, 0x0, 0x0) 59.944348ms ago: executing program 7 (id=903): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x0, &(0x7f0000000140)={{0xf32b476, 0x8}, {0x7ffefffbfff7fffc, 0xbe}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 58.967437ms ago: executing program 6 (id=904): socket(0x18, 0x2, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x20c02, 0x81) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x400000000, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x5, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0x0, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x3, 0x40000000, 0x0, 0xffffffffffffffff, 0x872a, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xffffffffffffffff, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d0a}, {0x0, 0x2, 0x5, 0x10}, {0x0, 0x75d, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x4, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x400001, 0x200}, {0x8, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000040)={0x1000ff28, 0x2, 0x86a, 0x4, "2800180000020002000000000068ab5ade800600", 0x4, 0xdb61}) 58.705892ms ago: executing program 2 (id=905): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x30, 0x85, 0xd}, {0x50, 0x5, 0xff, 0x40}, {0x6, 0x80, 0x80, 0xfffff800}]}) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="a7a6d61de4a1090992003b47915d7556c41fe593", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 34.352352ms ago: executing program 7 (id=906): mkdir(&(0x7f0000000180)='./file0\x00', 0x25) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8981, 0x0) 33.555213ms ago: executing program 7 (id=907): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x48, 0x0, 0x0, 0x37f}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 22.938849ms ago: executing program 2 (id=908): r0 = open(&(0x7f0000000240)='./file0\x00', 0x800, 0x1f2ee1f15fe0ed07) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7fe, 0xe, 0x0, 0x9, 0xc, 0x5, 0x10001, 0x10, [{0x6, 0x2, 0x9, 0x71002}, {0x10000, 0x8f12, 0x8, 0x8001}, {0x7, 0x0, 0x3, 0x3b}, {0x8000001, 0x80c, 0x5}, {0x5, 0x1000, 0x2850, 0x6}, {0x2, 0x0, 0x0, 0x99}, {0xa1, 0x3, 0x6, 0x2000006d}, {0x106, 0x1803, 0x14, 0x9}, {0x0, 0x80, 0x1ff, 0x8683}, {0x7, 0x7ffb, 0xd1b, 0x88}, {0x1ce, 0x2, 0x1003, 0x3}, {0x802, 0xb, 0x3, 0x9}, {0x400, 0x4, 0x40000008, 0x5}, {0x548, 0xfffefbfa, 0x1, 0x6}, {0xc, 0x7, 0x3, 0x7ffd}, {0x0, 0x6, 0x0, 0x5}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000), 0x0) 22.725964ms ago: executing program 6 (id=909): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DIOCKILLSTATES(r0, 0x0, &(0x7f0000000180)={{0x12, 0x6, 0x3}, 0x2, '\x00', 0x7e, {@addrmask={@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x0, 0x0, 0xe}, [0x1, 0x10], 0x28, 0x2, 0xe4}, {@addrmask={@v4=@rand_addr=0x8, @v6=@empty, 0x0, 0x0, 0x8}, [0x8000, 0x1], 0xf5, 0x2, 0x6}, './file0/file0/fi', './file0/file0\x00', 0x1, 0xdffc}) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0xfffeffff, 0xa525, 0x5, 0x127492, "0849a2ba6300000058302a2f0e83050095ea0868", 0x20004118, 0x9}) 832.346µs ago: executing program 3 (id=910): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6b881aef, 0x2000007, 0x102, 0x80001001, 0x12, 0x8, 0x10, [{0x3, 0x1, 0x7, 0x71000}, {0x8, 0x88, 0x8008, 0x6}, {0x101, 0x8, 0xc, 0x9}, {0x8, 0x900}, {0x401, 0xa, 0x100027fd, 0x7ff800}, {0x5, 0x27f3, 0x231, 0x6}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x400801, 0xb, 0x8b}, {0x2, 0x59b, 0x5, 0x7}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10005, 0x4, 0x6}, {0x800, 0x0, 0x4, 0x1}, {0xb8e, 0x4, 0x4, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x2004, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = socket(0x24, 0x2, 0x0) shutdown(r1, 0x1) 713.008µs ago: executing program 2 (id=911): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, 0x0) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETZCNT(r0, 0x0, 0x7, &(0x7f0000000200)=""/189) 524.459µs ago: executing program 3 (id=912): pipe2(0x0, 0x0) poll(&(0x7f00000001c0), 0x0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) 0s ago: executing program 6 (id=913): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fdc12eaa4e713048e69931929648", 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. R^ÿÑ´ÍÍõ¬ë…huvn_flush: obj=0xfffffd806c8567e0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! Connection to 10.128.0.49 closed by remote host. init: getty repeating too quickly on port /dev/tty00, sleeping                              ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pppx: unable to set addresses for pppx1, error=17 ktrace write failed, errno 27, tracing stopped pckbd_enable: command error uvm_fault(0xffffffff83a5ce70, 0xffff800029ee5000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pvclock_get+0x53: movl 0(%r15),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND *103542 93397 0 0 0x4000000 0 syz-executor pvclock_get(ffffffff838abfd0) at pvclock_get+0x53 nsecuptime() at nsecuptime+0x62 clockintr_dispatch(ffff80003a4cef30) at clockintr_dispatch+0xe8 lapic_clockintr(0,0) at lapic_clockintr+0x43 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf uvm_pagelookup(fffffd806f6f6e18,436000) at uvm_pagelookup+0x51 buf_free_pages(fffffd806f6f6d58) at buf_free_pages+0xec buf_dealloc_mem(fffffd806f6f6d58) at buf_dealloc_mem+0x14e buf_put(fffffd806f6f6d58) at buf_put+0x1d9 brelse(fffffd806f6f6d58) at brelse+0x397 writedisklabel(d02,ffffffff831a1c80,ffff800000039000) at writedisklabel+0x1b8 sdioctl(d01,84946467,ffff800001609800,3,ffff80003c8fa550) at sdioctl+0x959 VOP_IOCTL(fffffd806b151208,84946467,ffff800001609800,3,fffffd8007ffd888,ffff80003c8fa550) at VOP_IOCTL+0xa3 end trace frame: 0xffff80003a4cf4e0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a5ce70, 0xffff800029ee5000, 0, 1) -> e ddb> trace pvclock_get(ffffffff838abfd0) at pvclock_get+0x53 nsecuptime() at nsecuptime+0x62 clockintr_dispatch(ffff80003a4cef30) at clockintr_dispatch+0xe8 lapic_clockintr(0,0) at lapic_clockintr+0x43 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf uvm_pagelookup(fffffd806f6f6e18,436000) at uvm_pagelookup+0x51 buf_free_pages(fffffd806f6f6d58) at buf_free_pages+0xec buf_dealloc_mem(fffffd806f6f6d58) at buf_dealloc_mem+0x14e buf_put(fffffd806f6f6d58) at buf_put+0x1d9 brelse(fffffd806f6f6d58) at brelse+0x397 writedisklabel(d02,ffffffff831a1c80,ffff800000039000) at writedisklabel+0x1b8 sdioctl(d01,84946467,ffff800001609800,3,ffff80003c8fa550) at sdioctl+0x959 VOP_IOCTL(fffffd806b151208,84946467,ffff800001609800,3,fffffd8007ffd888,ffff80003c8fa550) at VOP_IOCTL+0xa3 vn_ioctl(fffffd807abf97f8,84946467,ffff800001609800,ffff80003c8fa550) at vn_ioctl+0xea sys_ioctl(ffff80003c8fa550,ffff80003a4cf6c0,ffff80003a4cf610) at sys_ioctl+0x660 syscall(ffff80003a4cf6c0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x837091d560, count: -18 ddb> show registers rdi 0xffffffff rsi 0xd rbp 0xffff80003a4cee20 rbx 0x3 rdx 0xffff8000015e7100 rcx 0 rax 0xc r8 0 r9 0 r10 0 r11 0x23ebe02d2002fcc9 r12 0x10e5 __ALIGN_SIZE+0xe5 r13 0xffffffff838b8b70 th0 r14 0xffffffff838abfd0 pvclock_timecounter r15 0xffff800029ee5000 rip 0xffffffff81372d13 pvclock_get+0x53 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003a4cedd0 ss 0x10 pvclock_get+0x53: movl 0(%r15),%r12d ddb> show proc PROC (syz-executor) tid=103542 pid=93397 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=81, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c8faa80,0xffffffff83a18de8 process=0xffff8000ffffa418 user=0xffff80003a4ca000, vmspace=0xfffffd806cad4010 estcpu=31, cpticks=247, pctcpu=2.47, user=0, sys=247, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 93397 267001 50935 0 2 0 syz-executor *93397 103542 50935 0 7 0x4000000 syz-executor 60850 55178 46518 0 2 0 syz-executor 60850 288256 46518 0 2 0x4000c80 syz-executor 4144 255030 86910 0 2 0 syz-executor 4144 489818 86910 0 2 0x4000000 syz-executor 31684 116964 66348 0 2 0 syz-executor 31684 482224 66348 0 2 0x4000000 syz-executor 23382 381614 88286 0 2 0 syz-executor 23382 195471 88286 0 2 0x4000000 syz-executor 15202 523888 77595 0 2 0xc80 syz-executor 15202 353762 77595 0 3 0x4000080 lockf syz-executor 15202 385360 77595 0 3 0x4000080 fsleep syz-executor 77595 335140 33406 0 2 0xc82 syz-executor 90680 271052 1 0 3 0x80 nanoslp init 50935 381615 33406 0 2 0xc82 syz-executor 64340 158674 33406 0 3 0x82 piperd syz-executor 86910 161591 33406 0 2 0xc82 syz-executor 66348 453315 33406 0 2 0xc82 syz-executor 46518 441111 33406 0 2 0xc82 syz-executor 22534 372473 33406 0 3 0x82 piperd syz-executor 88286 98201 33406 0 2 0xc82 syz-executor 33406 84972 1 0 2 0x2 syz-executor 55537 77140 0 0 2 0x14200 smr 24959 428178 0 0 2 0x14200 zerothread 13936 121111 0 0 3 0x14200 aiodoned aiodoned 98459 410104 0 0 2 0x14e00 update 1576 345796 0 0 3 0x14200 cleaner cleaner 91346 463094 0 0 3 0x14200 reaper reaper 83899 272101 0 0 3 0x14200 pgdaemon pagedaemon 29536 344221 0 0 3 0x14200 bored viomb 19965 483481 0 0 3 0x40014200 acpi0 acpi0 67750 403223 0 0 3 0x14200 bored softnet0 99384 95843 0 0 3 0x14200 smrbar systqmp 13274 481434 0 0 3 0x14200 bored systq 59427 487009 0 0 2 0x40014200 softclock 31836 88996 0 0 3 0x40014200 idle0 1 296875 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb>