last executing test programs: 1.144181726s ago: executing program 1 (id=2): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = geteuid() setresuid(r1, 0xffffffffffffffff, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setgroups(0x1, &(0x7f0000000000)=[r3]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r3, 0x2) truncate(&(0x7f0000000080)='.\x00', 0xffffffffffffffff) 1.13505911s ago: executing program 7 (id=8): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mknod(0x0, 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x407, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) ioctl$TIOCSETA(r0, 0xc0884450, &(0x7f0000000000)={0x0, 0x2, 0xfffffffe, 0x0, "01d04b0a0047c1d100", 0x7, 0x9}) setuid(0xffffffffffffffff) mknod(&(0x7f0000000640)='./bus\x00', 0x2000, 0x5579) open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x5187d3828501e403) chown(&(0x7f0000000300)='.\x00', 0x0, 0x0) 1.089911156s ago: executing program 6 (id=7): r0 = socket$inet(0x2, 0x3, 0xfc) (async) syz_emit_ethernet(0xbc, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000ea6131744cbd73f21545f835f0b67daf08f594120fe0104876fc7db598437400a428708339111ea6b40ac49e99b8fc346f901b0e469c5d59654f41dea66c2504f9c0825710593ad8e8d4a55c8e6f01a17f1764f33dd68d9f99570d5501b94d9180976824e955458f9bdfc6a34e860b7436fdbe64586fa37243a17d27bf14b149fef57f13cae4581f6c049a2efd626c06271c62af0436298c26d60ec1dbdc8c62783806655f5e17bc39953fc1021971cc"]) (async) open$dir(&(0x7f0000000380)='./file0\x00', 0xf02, 0x170) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa946333"]) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) 1.089486426s ago: executing program 1 (id=9): select(0x40, &(0x7f0000000000)={0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)={0x7ffffffe, 0x0, 0xffffffffffffff5e, 0x6}, 0x0, 0x0) 1.089065132s ago: executing program 6 (id=10): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) syz_emit_ethernet(0x2e, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0]) (async) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) (async) write(r0, &(0x7f00000003c0)="09202000000069db0000ff4278ad535c2a4146308c2f39e4e6987f31dbf15624b77b6a0a", 0x24) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0xaf5ea23982b49182, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, 0x0, 0x0) (async) connect$unix(r2, 0x0, 0x0) r3 = open(0x0, 0x40, 0x132) ioctl$FIONBIO(r3, 0x80487008, 0x0) (async) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0) (async) ioctl$BIOCSETIF(r1, 0x40384900, 0x0) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0x801c4903, &(0x7f00000000c0)={0x3, '.\x00'}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) (async) r5 = syz_open_pts() close(r5) (async) syz_open_pts() ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f00000003c0)={0x40978b, 0x10001, 0x7, 0x800033, "3b08000100f167c99e3bb0c69d73230100040c00", 0x200, 0x81}) (async) writev(r1, &(0x7f0000000700), 0x0) (async) ioctl$DIOCGETSTATUS(r1, 0xc080445b, &(0x7f0000000440)) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) (async) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000340)='},\x00:\xac\xa3\x8d\xcb\xa6\xd2{+\xc8\xdcq6\xe1\xa4\r\\\xa9\xb3\x84\xba,\xf6\xec\xcbe&\xb8\'\xd7\x95F\xf1v\x8b\xd1\xc6\x84\x8c\x041\xfb\x0589L\x06U\\\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000100)='\\-\x00'], &(0x7f0000000300)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='\':\x00', &(0x7f0000000240)='$%[]\x00', &(0x7f0000000280)=']\\\x00', &(0x7f00000002c0)='\x00']) 1.08727407s ago: executing program 1 (id=11): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x4, 0x3, 0x86, 0xb}, {0xc, 0x3, 0xa2}, {0x6, 0x2, 0x8, 0x100cfa}]}) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x25) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x400) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x4, 0x3, 0x86, 0xb}, {0xc, 0x3, 0xa2}, {0x6, 0x2, 0x8, 0x100cfa}]}) (async) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) connect$unix(r1, 0x0, 0x25) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x400) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) (async) 1.076235202s ago: executing program 7 (id=12): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000080)) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) select(0x40, &(0x7f0000002200)={0xc, 0x2, 0x9, 0x100000001, 0x6, 0x8, 0x9, 0x4}, &(0x7f0000002240)={0x9, 0x2fe8, 0x8, 0x3, 0x1000, 0x100000000, 0x3cb14046, 0x46}, 0x0, 0x0) 1.075123584s ago: executing program 1 (id=13): r0 = socket(0x18, 0x0, 0x0) close(r0) socket(0x24, 0x2, 0x0) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000100)="ebffcbff13b9fdc12eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f0000000040)=@file={0x6, 0x1, './file0\x00'}, 0xa) setresgid(0x0, r1, r2) setreuid(0x0, 0xee01) setresgid(r2, r1, r3) setsockopt(r0, 0x6, 0x1, &(0x7f0000000280)="e9f6d779", 0x4) 1.074585038s ago: executing program 7 (id=14): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffddb) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async, rerun: 64) r2 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r2, 0x0, 0x1f, 0x0, 0x0) (async) r3 = socket(0x18, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) (async, rerun: 64) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0xa}, 0x0) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x3, 0x0, 0x0, &(0x7f0000000040)="3944eb3f115f79037148fa0ddc3adf427d080000006ceb99ea265a4a19b2e72fd9cbb4db32e128db447c5e01000080d5fa1d9213ebefff7ad23b886bf325280bc040eac897a0d4168da6b6b75d146499e1ee9ddeb2d68e8d011a", 0x5a) (async) utimensat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{0x9}, {0x0, 0x2}}, 0x2) (async, rerun: 32) r6 = syz_open_pts() (rerun: 32) syz_open_pts() (async, rerun: 64) r7 = syz_open_pts() (rerun: 64) poll(&(0x7f00000007c0)=[{r6, 0x80}, {r6, 0x10}, {r7, 0x40}, {r7, 0x2}, {r6, 0x4}, {r6, 0x40}, {r6, 0x7}], 0x7, 0x40000c) (async) setresuid(0x0, 0xee00, 0x0) r8 = msgget$private(0x0, 0x1ba) msgsnd(r8, &(0x7f0000000200)={0x1}, 0x8, 0x800) (async) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x6}, 0x0, 0x0, 0x4, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x5}) (async) msgrcv(r8, 0x0, 0x0, 0x0, 0x1800) (async) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) (async) socket(0x2, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 1.071563504s ago: executing program 1 (id=15): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000180)=""/216, 0xd8}], 0x3, 0x0) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5000) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000040)) madvise(&(0x7f0000240000/0x12000)=nil, 0x12000, 0x6) 1.071170775s ago: executing program 1 (id=16): setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r0 = getpid() r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) msgsnd(r4, &(0x7f0000000080)={0x1}, 0x8, 0x800) msgsnd(r4, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r4, 0x0) r5 = geteuid() setresuid(0x0, r5, r5) r6 = socket(0x2, 0x2, 0x0) ioctl$VT_RELDISP(r1, 0x20007604, &(0x7f0000000100)) fcntl$dupfd(r6, 0xb, r6) fstatat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) r8 = geteuid() fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{r5, r7, r8, r9, 0x184, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x84de, 0x5, 0x9, r0, r0, 0x8, 0x0, 0x76, 0x0, 0x800}) clock_gettime(0x0, 0xfffffffffffffffe) 1.070699007s ago: executing program 7 (id=17): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSKBDIO_GETBELL(r0, 0x40105704, &(0x7f0000000040)) setreuid(0x0, 0xee01) kill(0xffffffffffffffff, 0x4) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) getpeername$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c) r2 = accept$inet6(r1, 0x0, &(0x7f0000000180)) sendto$inet6(r2, &(0x7f0000000240)="05a75542bbeac136c128bcc8415627e8ac1a6875ece77b5815bb9732d7a2e9caa4ee109e130f94ab362973194459534c1b65e2bb4c1e7aaab9bac404a1ca71440eb38ad59429ac1ef349778da731471eaf40964e51c1923ff7267f1bc1afa08044a57ae9f420c0918684c9a57b37d4720a2f657fc0f3940d6a9059f08e243afe81b8a594e06f8e541301abb3fe3174debc2d2956bd1eedd6144cbe476306715d4926291cf95d382be48114deaa2bbf644acf0626163910e82d78884f259bdc6271fc8d5de2a9bd55d7f739b84c470dfd016fa39ac72d871fb0fe7416139f3bc9efb1f1c866f68c", 0xe7, 0xb, &(0x7f0000000200)={0x1c, 0x18, 0x1, 0xfffffffa, "b200000b0000001800000000000200", 0x80}, 0x1c) 0s ago: executing program 5 (id=6): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x406, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x40, 0x1, 0x17, 0x7e000002}, {0x10, 0x1, 0xcd, 0x3}, {0x5, 0x4, 0x53, 0x800207f8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000000040)={0x0, 0x408, 0x0}) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x0, 0x80000933}, {0x101}], 0x2}) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. pckbd_enable: command error SYZFAIL: SIGILL pc-offset:0xcdcae79bf71 pc:0xdeadbeef addr:0x0 code=0 (errno 35: Resource temporarily unavailable) uvn_flush: obj=0xfffffd806f2ab788, offset=0x3ff000. error during pageout. uvn_flush: WARNING: changes to page may be lost! OpenBSD/amd64 (ci-openbsd-main-5.us-central1-b.c.syzkaller.internal) (tty00) login: show panic Password: Login incorrect login: show registers Password: Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect machine ddbcpu 0 login: Password: Login incorrect machine ddbcpu 1 login: Password: