last executing test programs: 346.169903ms ago: executing program 5 (id=6): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mknod(&(0x7f0000000380)='./bus\x00', 0x2000, 0x11bc62ce) (async) mknod(&(0x7f0000000380)='./bus\x00', 0x2000, 0x11bc62ce) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x402a0, 0x12c) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000700)=0x6) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000700)=0x6) ioctl$BIOCGBLEN(r1, 0x4010427e, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x8015, r0, 0x0) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f00000003c0)) (async) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f00000003c0)) syz_emit_ethernet(0x1c3, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd664402900ea79d858f2703816a018d3c3000f8ff00000000000000000000000000fe8000000000000000000000000000aa4e214e27000890786d9dc4634589900025ec72e565b21b9b125b2fb2ecda4f6588939066bdf7f331fce074fd221a58bd7ee34711122006036f1a893eaae356bd4ee10e3253bfe85d0c61d6a0bbd03f6cd5f102ae240c817ef8dead35d6a8ba76b16ae7bfdf21dfb98c49ae69f7f50f443e8f77d9fadf4fe4f8c6fc5b59d0d66930d7990be6297d869d8645c479a96a48ffb405396c2f5c3ec9a56d742692622b7cc45b3d22b9f1181b5edf77f92d8945159c91636dbd0533221bb37e28b8d681531101a1bc5eaccfb7283cb0dc70be8ab84635c5e5c6c53523a21040ff6c2852d03913f5832964d49014775f6df13c50f4a359edcc251eafbdd4f6197b015b3133d775c07e3e23baa2cc2a4611b63e78458a03edea11c8d5498b3e8f0e75ba36a7f3d0ac1c3c0aa79c7e7c3f447a9fbcb0689ed0fb0d2260eec483d4f436edbc8a37e743050000008756bb13c393145e94771122aede0d05ed82c963fe1911ad02df86c72454d6874966830fe06b8710bb89bea7ad3b76e90449c6efba0a221e1d5c2fc79bc8f27e3135fa04a9899d19"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1e60) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1e60) r2 = open(&(0x7f0000000100)='./bus\x00', 0x200, 0x0) mknod(&(0x7f0000000740)='./file0\x00', 0x2000, 0x1e60) r3 = open(&(0x7f0000000780)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f00000007c0)={0xffb, 0xfe7f, 0x210000a, 0x5bd, 0x4, 0x6, 0x5d7227f9, 0x10, [{0x4, 0x10007, 0x6, 0x80000001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0xc58e, 0x9}, {0x1, 0x800, 0x800c}, {0x6, 0x8, 0xfffffc01, 0x7}, {0x0, 0x1ff, 0x2000002, 0x8}, {0xce1, 0xfffffffe, 0x4f8, 0xa}, {0x101, 0x100001, 0x55, 0x6}, {0x2, 0x100, 0x7, 0x9}, {0x8007, 0x8001, 0x0, 0x103}, {0x1c4, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x5105b52f, 0x100, 0x3}, {0x9, 0x5, 0x4, 0xb}, {0x29a71717, 0x83, 0x200007fc, 0xc377}, {0xfffffff8, 0x424, 0x6, 0x1}, {0x208004, 0x8200001, 0x101002, 0x30007}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000000940)={0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000000940)={0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_udp(&(0x7f0000000980)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000009c0), 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000140)={0x3, 0xffffaf35, 0x7f, 0x2, 0xa2, 0x40003, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x400, 0x1000002}, {0x20006, 0x8200b86, 0xa, 0x9}, {0xa, 0x1fd, 0x5, 0x6}, {0x42, 0x9, 0x3, 0x800007}, {0x20002, 0x8, 0x8, 0xd}, {0x4cdf, 0xdf61, 0x200004f8, 0x66}, {0x2, 0xf, 0xa43, 0x8d}, {0xfffffffa, 0x8e2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x400008, 0x3}, {0x1e0, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x1, 0x45b, 0x2d09}, {0x3, 0x1ff, 0x90000001, 0x408}, {0x29a71718, 0x4, 0x3, 0xc98}, {0x1, 0xf8f, 0xdda}, {0x1, 0x5, 0xf777, 0x8}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000140)={0x3, 0xffffaf35, 0x7f, 0x2, 0xa2, 0x40003, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x400, 0x1000002}, {0x20006, 0x8200b86, 0xa, 0x9}, {0xa, 0x1fd, 0x5, 0x6}, {0x42, 0x9, 0x3, 0x800007}, {0x20002, 0x8, 0x8, 0xd}, {0x4cdf, 0xdf61, 0x200004f8, 0x66}, {0x2, 0xf, 0xa43, 0x8d}, {0xfffffffa, 0x8e2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x400008, 0x3}, {0x1e0, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x1, 0x45b, 0x2d09}, {0x3, 0x1ff, 0x90000001, 0x408}, {0x29a71718, 0x4, 0x3, 0xc98}, {0x1, 0xf8f, 0xdda}, {0x1, 0x5, 0xf777, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pread(0xffffffffffffffff, &(0x7f0000000400)="6ea5bcd6e32af8b63672279c6e0543e8e25c1b6abd513059c3eb307bb7af5334648c69cf547c20c663d5dda7c2cf8011c772d63387d5a249ae1e61a0fe3b43d4a9b5469290a1eae4d79ceb4c5b36", 0x4e, 0x9) (async) pread(0xffffffffffffffff, &(0x7f0000000400)="6ea5bcd6e32af8b63672279c6e0543e8e25c1b6abd513059c3eb307bb7af5334648c69cf547c20c663d5dda7c2cf8011c772d63387d5a249ae1e61a0fe3b43d4a9b5469290a1eae4d79ceb4c5b36", 0x4e, 0x9) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x3, 0x7) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1f, &(0x7f0000000040)="8fe2fac5e71fa2354cedd3d74bed476e92099274e9", 0x15) (async) setsockopt$inet_opts(r5, 0x0, 0x1f, &(0x7f0000000040)="8fe2fac5e71fa2354cedd3d74bed476e92099274e9", 0x15) bind$inet(r4, &(0x7f0000000300)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) 257.581635ms ago: executing program 0 (id=1): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000080)='./file0\x00', r0}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r1]) 75.096658ms ago: executing program 6 (id=7): r0 = socket(0x11, 0x3, 0x0) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x1, 0x10}, {0x21, 0x8562413f}], 0x2}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0xfe10, 0x0, 0xfffffffffffffff9) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0xfe10, 0x0, 0xfffffffffffffff9) mknod(&(0x7f00000001c0)='./file0\x00', 0x1ffa, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106978, &(0x7f0000000240)) (async) ioctl$FIONREAD(r2, 0xc0106978, &(0x7f0000000240)) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) closefrom(r0) 73.987237ms ago: executing program 6 (id=9): setsid() r0 = syz_open_pts() ioctl$TIOCSCTTY(r0, 0x20007461) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x605f27831488456c, 0x0) 56.494776ms ago: executing program 5 (id=10): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x50}, 0x3, &(0x7f0000000080)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000100)=0xfe10, 0x0, 0x37) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000140)={0x1080ff68, 0x202, 0x80c, 0x80000a, "74de681f00ffc75300", 0x5, 0xdb60}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000180)={0x0, 0x4, 0x7f, 0x5, 0x7, 0x6, 0x5, 0x10, [{0x10000000, 0x40, 0x7, 0x3}, {0xfffffff3, 0xfffffffd, 0x9, 0x6}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x8a, 0x6, 0x2, 0x6}, {0x45, 0x8, 0x5, 0x800007}, {0x20002, 0x40000206, 0x8, 0x95}, {0xcdf, 0xdfe1, 0xb0a, 0x3}, {0x8, 0xf, 0x6664, 0x8d}, {0xfffffffd, 0xe2b5, 0x40000005, 0x6}, {0x8, 0x2cf, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x9280, 0x4}, {0x1016, 0x3, 0x9, 0x2d0b}, {0x3, 0x600004f6, 0x80002001, 0x7f}, {0x29a71718, 0x7c, 0x3, 0x68}, {0x0, 0x1ff, 0x5}, {0x1, 0x800bd3d, 0xf778, 0x8}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f0000000300)) mmap(&(0x7f000052d000/0x4000)=nil, 0x4000, 0x1, 0x15, r0, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000340)}], 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$DIOCRSETADDRS(r3, 0xc4504445, &(0x7f0000000580)={{'.\x00', './file0\x00', 0x21, 0x8}, &(0x7f00000003c0)=[{@empty, '\x00', './file0\x00', 0x9, 0x2, 0x1a, 0xfe, 0x10, 0x7, 0x7}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0xffff, 0x0, 0x3, 0xa, 0x5, 0x2}, {@loopback, '\x00', './file0\x00', 0x2, 0xd43, 0x18, 0x9, 0x0, 0x7f, 0x9}, {@multicast2, '\x00', './file0\x00', 0xc, 0xadc, 0x18, 0x1, 0x2, 0x40, 0x7}, {@loopback, '\x00', './file0\x00', 0x6, 0x1, 0x0, 0x5, 0x3, 0x0, 0x6}, {@multicast1, '\x00', './file0/../file0', 0xfffffffd, 0x4, 0x18, 0x0, 0x9, 0x71, 0xf}, {@rand_addr=0x3, '\x00', './file0\x00', 0x3, 0x9, 0x1a, 0x5, 0x8, 0x9, 0x7}, {@multicast1, '\x00', './file0\x00', 0x3, 0xfffe, 0x18, 0x5, 0x7, 0x3, 0xff}], 0xffff, 0x8, 0x4, 0xa5, 0x4, 0x7, 0x24, 0x5d}) 55.67464ms ago: executing program 6 (id=11): setrlimit(0x8, &(0x7f0000000300)={0x42, 0x66}) r0 = syz_open_pts() readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/236, 0xec}], 0x1) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5bf, 0x9, 0x10007fff, 0x2416, "08a98f2aebccf7bdac976973b4280100", 0x4, 0x2}) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="d90bdeb27a7090073cfca6154f826461cf7f847cff7b2f6e3355fa0a608f6bc4b15a781ef6b8fa0be070cc1c6adb1e194a9a6867635500", 0x37}], 0x1) 50.332933ms ago: executing program 3 (id=4): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCSETSTATUSIF(r0, 0xc0284414, &(0x7f0000000100)={'./file0/../file0', 0x0, 0x799d4de4, 0xf8, 0x0, 0x1}) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='c\x00') open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) symlink(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000001c0)='./file0/file0/..\x00') 47.929006ms ago: executing program 2 (id=3): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x120) write(r0, &(0x7f00000000c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000100)='./file0\x00', 0xafffe) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xca) select(0x40, &(0x7f0000000180)={0x7, 0x4, 0x8, 0xbbde, 0x1ffffffefb, 0x8, 0x2aa, 0x400000000000009}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000001c0)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts() ioctl$TIOCSTOP(r1, 0x2000746f) r2 = kqueue() socket(0x10, 0x4, 0x7) kevent(r2, &(0x7f0000000000)=[{{r2}, 0xffffffffffffffff, 0xc7, 0x20, 0xfffffffffffffffc, 0x54733e1c}, {{r2}, 0xffffffffffffffff, 0x26, 0x10, 0x8, 0x2c80000000000}], 0x548e, 0x0, 0xffffffff, 0x0) ioctl$TIOCSTOP(r1, 0x2000746f) sysctl$kern(&(0x7f0000000040)={0x1, 0x58}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0) 37.416801ms ago: executing program 4 (id=5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000340)={0x46, 0x38a}) r3 = syz_open_pts() close(r3) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000380)=0x7) r4 = syz_open_pts() ppoll(&(0x7f00000001c0)=[{r4, 0xe5}], 0x1, 0x0, 0x0) syz_open_pts() syz_open_pts() poll(&(0x7f0000000200)=[{r4, 0x80}], 0x1, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) minherit(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) writev(r2, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000001600)=0xc) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000000800)=""/166, 0xa6}, {&(0x7f0000000600)=""/215, 0xd7}], 0x5) mquery(&(0x7f0000634000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x7fffffff], 0x2, 0x10002, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x8001, 0xbf, r1}) closefrom(r0) 36.988322ms ago: executing program 0 (id=12): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x24, &(0x7f0000000000)="fd0cc085", 0x4) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@un=@file={0xfa89b05bdb287abb}, 0xc, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000024"], 0x18}, 0x0) kill(0xffffffffffffffff, 0xe) sendsyslog(0x0, 0xfec3, 0x9) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x24, &(0x7f0000000000)="fd0cc085", 0x4) (async) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@un=@file={0xfa89b05bdb287abb}, 0xc, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000024"], 0x18}, 0x0) (async) kill(0xffffffffffffffff, 0xe) (async) sendsyslog(0x0, 0xfec3, 0x9) (async) 33.294183ms ago: executing program 0 (id=13): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000080)={0xfffbfffffffffffd, 0xffffffffffffdfff}) ftruncate(r0, 0x48001000007) getrlimit(0x2, &(0x7f0000000000)) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000000) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) setrlimit(0x1, &(0x7f0000000080)={0xfffbfffffffffffd, 0xffffffffffffdfff}) (async) ftruncate(r0, 0x48001000007) (async) getrlimit(0x2, &(0x7f0000000000)) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000000) (async) 8.917129ms ago: executing program 7 (id=8): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x6381) r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x6, "fff4ce00", 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x5, "58ec3d1192caed3a508571b376fcdc9a"}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x0, "2b1ce1d8347546c6a7046b5f8958cf26", 0x2}, 0x1c) open(&(0x7f0000000240)='./file0\x00', 0x10, 0x114) select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0) poll(&(0x7f0000000780)=[{}], 0x20000000000000fe, 0x0) 5.176876ms ago: executing program 3 (id=14): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c5) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x6, 0xffffaf35, 0x7f, 0x5, 0xd0, 0x6, 0x5, 0x10, [{0x50000000, 0x3c, 0x6, 0x8}, {0xfffffff3, 0xfffffffe, 0x2bf, 0x42}, {0x20006, 0x8000b86, 0xa, 0x9}, {0xa, 0x200, 0x0, 0x6}, {0x2, 0x9, 0x3, 0x800007}, {0x20002, 0x8, 0x4000005, 0x95}, {0x4cdf, 0xdf62, 0x200004f8, 0x66}, {0x8, 0xb, 0xa43, 0x101}, {0xfffffffa, 0x8e2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x400008, 0x3}, {0x1e0, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x1, 0x55b, 0x2d0b}, {0x3, 0xfff, 0x5, 0x8}, {0x843, 0x9, 0x0, 0x2579}, {0x4, 0xf8f, 0xdda, 0x6}, {0x1, 0x800bd3d, 0x4, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x18, 0x3, 0xfd) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000), 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000002c0)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61c3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d981007000000aba8c500002012010073de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0x80c, 0x0, 0x0) 0s ago: executing program 5 (id=15): mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 64) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x8) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0xcbd6381a1dfda99c, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000080)=0x34) (async, rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00e0300eaaf8080045e41cfffd0000cc019078770b0aeb5e313be3ea7c00010000140400"]) pread(r1, &(0x7f0000000180)="e7077b050008007383eaea2158d2b4873e7de9f2d8fdefa99efe8fd538557cd8694e185f8f580ff9ffffffd61074785c8814a129", 0x34, 0xfffffffffffffffe) (async) open(&(0x7f00000001c0)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7909) (async, rerun: 32) closefrom(r0) (rerun: 32) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. Connection to 10.128.0.82 closed by remote host. uvm_fault(0xffffffff83b1bca8, 0xffff80000161308a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND *413460 63740 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff8000002a3058,1,fffffb006d0b2238) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8caad0,0,ffff80003c8caa40,16) at rtrequest+0xdc1 rtm_output(ffff800001610c00,ffff80003c8cab78,ffff80003c8caad0,0,16) at rtm_output+0x91a route_output(fffffb006e3d9e00,ffff800010fe1148) at route_output+0xa6a route_send(ffff800010fe1148,fffffb006e3d9e00,0,0) at route_send+0xd7 sosend(ffff800010fe1148,0,ffff80003c8cad28,0,0,80c) at sosend+0x7f4 sendit(ffff80002a76e018,6,ffff80003c8cae20,80c,ffff80003c8caec0) at sendit+0x5a5 sys_sendto(ffff80002a76e018,ffff80003c8caf70,ffff80003c8caec0) at sys_sendto+0x8d syscall(ffff80003c8caf70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x88f2721ca0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83b1bca8, 0xffff80000161308a, 0, 1) -> e ddb> show kasan No such command ddb> trace arp_rtrequest(ffff8000002a3058,1,fffffb006d0b2238) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8caad0,0,ffff80003c8caa40,16) at rtrequest+0xdc1 rtm_output(ffff800001610c00,ffff80003c8cab78,ffff80003c8caad0,0,16) at rtm_output+0x91a route_output(fffffb006e3d9e00,ffff800010fe1148) at route_output+0xa6a route_send(ffff800010fe1148,fffffb006e3d9e00,0,0) at route_send+0xd7 sosend(ffff800010fe1148,0,ffff80003c8cad28,0,0,80c) at sosend+0x7f4 sendit(ffff80002a76e018,6,ffff80003c8cae20,80c,ffff80003c8caec0) at sendit+0x5a5 sys_sendto(ffff80002a76e018,ffff80003c8caf70,ffff80003c8caec0) at sys_sendto+0x8d syscall(ffff80003c8caf70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x88f2721ca0, count: -10 ddb> show registers rdi 0xffff8000314a8000 rsi 0x94d rbp 0xffff80003c8ca920 rbx 0xde rdx 0xffff8000314a8000 rcx 0xffff800001612fa0 rax 0xfffffb006e3d95e0 r8 0x1000 __ALIGN_SIZE r9 0 r10 0x6c0a61e6d05fd62d r11 0xaad9496ccb96fc63 r12 0x19 r13 0xfffffb006e3d9500 r14 0xfffffb006d0b2238 r15 0xffff8000002a3058 rip 0xffffffff833e07b4 arp_rtrequest+0x6a4 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c8ca8a0 ss 0x10 arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=413460 pid=63740 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a76e2b0,0xffffffff839d6118 process=0xffff80003c8cd238 user=0xffff80003c8c6000, vmspace=0xfffffb0070c32e68 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 63740 3106 71751 0 2 0 0 syz-executor *63740 413460 71751 0 7 0 0x4000000 syz-executor 96508 420299 3402 0 2 0 0 syz-executor 96508 4894 3402 0 3 0 0x4000080 fsleep syz-executor 82991 460022 1 0 3 0x2 0x80 nanoslp getty 26385 23718 23674 0 2 0 0xc80 syz-executor 26385 444426 23674 0 3 0 0x4000080 fsleep syz-executor 26385 25728 23674 0 3 0 0x4000080 fsleep syz-executor 26385 279492 23674 0 2 0 0x4000000 syz-executor 38152 427353 24630 0 3 0 0x80 nanoslp syz-executor 38152 447888 24630 0 3 0 0x4000080 kqread syz-executor 38152 135859 24630 0 3 0 0x4000080 fsleep syz-executor 7085 343852 28005 0 2 0 0 syz-executor 7085 67843 28005 0 3 0 0x4000080 fsleep syz-executor 69216 379530 71631 0 2 0x2 0 arp 71631 348765 71280 0 3 0x100002 0x88 sigsusp sh 2977 39852 27888 0 3 0 0x80 nanoslp syz-executor 2977 309403 27888 0 3 0 0x4000080 ttyin syz-executor 2977 140648 27888 0 3 0 0x4000080 fsleep syz-executor 3402 484861 27785 0 2 0x2 0xc80 syz-executor 27888 229969 27785 0 2 0x2 0xc80 syz-executor 57348 240093 27785 0 2 0x2 0 syz-executor 24630 260318 27785 0 2 0x2 0xc80 syz-executor 71751 391718 27785 0 2 0x2 0xc80 syz-executor 28005 359241 27785 0 3 0x2 0x80 nanoslp syz-executor 71280 487440 27785 0 3 0x2 0x80 wait syz-executor 23674 389853 27785 0 2 0x2 0xc80 syz-executor 27785 24027 1 0 3 0x2 0x80 kqread syz-executor 11015 81640 0 0 3 0x14000 0x200 bored smr 29114 239011 0 0 2 0x14000 0x200 zerothread 60051 271132 0 0 3 0x14000 0x200 aiodoned aiodoned 65393 517818 0 0 3 0x14000 0x200 syncer update 48239 32343 0 0 3 0x14000 0x200 cleaner cleaner 76353 26307 0 0 3 0x14000 0x200 reaper reaper 99344 88826 0 0 3 0x14000 0x200 pgdaemon pagedaemon 64212 427161 0 0 3 0x14000 0x200 bored viomb 93726 110770 0 0 3 0x14000 0x40000200 acpi0 acpi0 23304 206683 0 0 3 0x14000 0x200 bored softnet0 43609 503442 0 0 3 0x14000 0x200 smrbar systqmp 33362 462487 0 0 3 0x14000 0x200 bored systq 16328 501651 0 0 2 0x14000 0x40000200 softclock 59546 91946 0 0 3 0x14000 0x40000200 idle0 1 188546 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11032 12115K 12167K 166960K 12130 0 pcb 18 12K 12K 166960K 18 0 rtable 230 7K 7K 166960K 346 0 pf 30 12K 12K 166960K 30 0 ifaddr 40 7K 7K 166960K 42 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 6 0 counters 33 17K 17K 166960K 33 0 ioctlops 0 0K 4K 166960K 31 0 mount 1 1K 1K 166960K 1 0 log 0 0K 8K 166960K 6 0 vnodes 1292 81K 81K 166960K 1364 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 65K 81K 166960K 140 0 proc 17 25K 100K 166960K 498 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 89 6K 6K 166960K 89 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 369 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 134 83K 165K 166960K 2910 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 20 40K 88K 166960K 1228 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 25 1K 1K 166960K 25 0 temp 34 9114K 9178K 166960K 3225 0 kqueue 3 6K 22K 166960K 27 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 36 0 35 1 0 1 1 0 8 0 rtentry 136 104 0 1 4 0 4 4 0 8 0 unpcb 144 43 0 43 1 0 1 1 0 8 1 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 8 0 7 1 0 1 1 0 8 0 arp 96 17 0 0 1 0 1 1 0 8 0 inpcb 328 64 0 61 2 0 2 2 0 8 1 nd6 112 21 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfrule 1360 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 411 0 0 26 0 26 26 0 8 0 art_table 40 413 0 0 5 0 5 5 0 8 0 art_node 32 104 0 9 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1578 0 111 92 0 92 92 0 8 0 ffsino 256 1578 0 111 92 0 92 92 0 8 0 nchpl 144 1789 0 90 63 0 63 63 0 8 0 vnodes 216 1666 0 0 93 0 93 93 0 8 0 namei 1024 6076 0 6076 3 0 3 3 0 8 3 kstatmem 264 23 0 0 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 6220 0 6220 5 0 5 5 1 8 5 plimitpl 152 33 0 20 1 0 1 1 0 8 0 sigapl 424 428 0 395 6 0 6 6 0 8 0 knotepl 120 3131 0 3112 2 0 2 2 0 8 0 kqueuepl 184 23 0 20 1 0 1 1 0 8 0 pipepl 304 123 0 96 3 0 3 3 0 8 0 fdescpl 448 415 0 395 4 0 4 4 0 8 0 filepl 120 1562 0 1402 8 0 8 8 0 8 0 lockfpl 104 13 0 12 1 0 1 1 0 8 0 lockfspl 48 7 0 6 1 0 1 1 0 8 0 sessionpl 144 24 0 22 1 0 1 1 0 8 0 pgrppl 48 32 0 22 1 0 1 1 0 8 0 ucredpl 104 101 0 98 1 0 1 1 0 8 0 zombiepl 144 395 0 395 1 0 1 1 0 8 1 processpl 1160 428 0 395 4 0 4 4 0 8 0 procpl 664 450 0 407 5 0 5 5 0 8 0 sockpl 552 143 0 139 3 0 3 3 0 8 2 mcl8k 8192 12 0 12 1 0 1 1 0 8 1 mcl4k 4096 2552 0 2497 14 0 14 14 0 8 5 mcl2k 2048 102 0 102 1 0 1 1 0 8 1 mextrefs 64 34 0 34 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4260 0 4136 9 0 9 9 0 8 1 bufpl 272 2332 0 86 150 0 150 150 0 8 0 anonpl 24 76689 0 74930 20 0 20 20 0 187 7 amapchunkpl 152 7916 0 7573 18 0 18 18 0 158 2 amappl16 200 1055 0 1030 4 0 4 4 0 8 2 amappl15 192 4 0 4 1 0 1 1 0 8 1 amappl14 184 391 0 390 1 0 1 1 0 8 0 amappl13 176 112 0 111 1 0 1 1 0 8 0 amappl12 168 643 0 625 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 0 1 1 0 8 1 amappl10 152 62 0 62 1 0 1 1 0 8 1 amappl9 144 279 0 279 1 0 1 1 0 8 1 amappl8 136 184 0 184 1 0 1 1 0 8 1 amappl7 128 139 0 137 1 0 1 1 0 8 0 amappl6 120 109 0 108 1 0 1 1 0 8 0 amappl5 112 127 0 126 1 0 1 1 0 8 0 amappl4 104 260 0 258 1 0 1 1 0 8 0 amappl3 96 1434 0 1358 3 0 3 3 0 8 0 amappl2 88 439 0 434 2 0 2 2 0 8 1 amappl1 80 9710 0 9589 12 0 12 12 0 8 5 amappl 88 2257 0 2140 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 415 0 395 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 415 0 395 1 0 1 1 0 8 0 vmmpekpl 168 5084 0 5056 2 0 2 2 0 8 0 vmmpepl 168 35300 0 34471 77 0 77 77 0 357 38 vmsppl 368 414 0 395 4 0 4 4 0 8 1 rwobjpl 40 13021 0 12597 10 0 10 10 0 8 0 pdppl 4096 836 0 790 84 10 74 74 0 8 28 pvpl 32 194798 0 190345 68 0 68 68 0 265 28 pmappl 216 414 0 395 2 0 2 2 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 491 0 10 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff8000002a3058,1,fffffb006d0b2238) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8caad0,0,ffff80003c8caa40,16) at rtrequest+0xdc1 rtm_output(ffff800001610c00,ffff80003c8cab78,ffff80003c8caad0,0,16) at rtm_output+0x91a route_output(fffffb006e3d9e00,ffff800010fe1148) at route_output+0xa6a route_send(ffff800010fe1148,fffffb006e3d9e00,0,0) at route_send+0xd7 sosend(ffff800010fe1148,0,ffff80003c8cad28,0,0,80c) at sosend+0x7f4 sendit(ffff80002a76e018,6,ffff80003c8cae20,80c,ffff80003c8caec0) at sendit+0x5a5 sys_sendto(ffff80002a76e018,ffff80003c8caf70,ffff80003c8caec0) at sys_sendto+0x8d syscall(ffff80003c8caf70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x88f2721ca0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff8000002a3058,1,fffffb006d0b2238) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8caad0,0,ffff80003c8caa40,16) at rtrequest+0xdc1 rtm_output(ffff800001610c00,ffff80003c8cab78,ffff80003c8caad0,0,16) at rtm_output+0x91a route_output(fffffb006e3d9e00,ffff800010fe1148) at route_output+0xa6a route_send(ffff800010fe1148,fffffb006e3d9e00,0,0) at route_send+0xd7 sosend(ffff800010fe1148,0,ffff80003c8cad28,0,0,80c) at sosend+0x7f4 sendit(ffff80002a76e018,6,ffff80003c8cae20,80c,ffff80003c8caec0) at sendit+0x5a5 sys_sendto(ffff80002a76e018,ffff80003c8caf70,ffff80003c8caec0) at sys_sendto+0x8d syscall(ffff80003c8caf70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x88f2721ca0, count: -10 ddb>