last executing test programs: 4.665378127s ago: executing program 7 (id=408): sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10000100000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13bbfd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$unix(r0, &(0x7f0000000480)="b100051300000000", 0x18, 0x40a, 0x0, 0x0) 4.664679027s ago: executing program 7 (id=410): r0 = syz_open_pts() close(r0) rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000040)={0x1000ff28, 0x2, 0x86a, 0x100006, "2800180000020002000000000068ab5ade800600", 0x2, 0x400cb61}) 4.54763447s ago: executing program 7 (id=414): syz_emit_ethernet(0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520800000000000005b10000000000000000000000bbff020000000000000000000000000001000a00c2"]) 4.546852186s ago: executing program 7 (id=416): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7909) (async) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$DIOCRGETADDRS(r3, 0xc4504446, &(0x7f0000000200)={{'./file0\x00', './file0\x00', 0x40, 0x7}, &(0x7f0000000080), 0x5435, 0x0, 0xa, 0x63, 0x0, 0x7, 0x4e, 0x3}) (async) r4 = socket$inet(0x2, 0x1, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000080)=0x7) (async) r7 = socket(0x2, 0x2, 0x0) (async) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000680)={0xd8, 0xe}, 0x10) connect$inet(r7, &(0x7f00000004c0)={0x10, 0x2, 0x2, 0xe3}, 0x10) (async) sendmmsg(r7, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000480e68b8ad115f3c95000000"], 0x18}}, 0x38, 0x400) (async) dup2(r6, r5) (async) ioctl$DIOCRCLRTSTATS(r3, 0xc4504441, &(0x7f0000003e80)={{'./file0\x00', './file0\x00', 0x41, 0x5}, &(0x7f0000001900)=[{'./file0\x00', './file0\x00', 0x2, 0x1}, {'./file1\x00', './file0\x00', 0x8, 0x2}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file1\x00', './file0\x00', 0x20, 0x1}, {'./file1\x00', './file0\x00', 0x39, 0x4}, {'./file0/file0\x00', './file0\x00', 0x13}, {'./file0\x00', './file0\x00', 0x1, 0xc}, {'./file0\x00', './file0\x00', 0x10, 0x9}, {'./file1\x00', './file0\x00', 0x14}], 0xfff, 0x9, 0x6, 0x1, 0x1000, 0x8, 0x2, 0x1}) (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80046478, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803) (async) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x18a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETD(r8, 0x8004741b, &(0x7f0000000040)=0x40020009) (async) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0x2, 0x1}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) 4.512845424s ago: executing program 7 (id=419): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCKILLSTATES(r0, 0x0, &(0x7f0000000180)={{0xf, 0x80080000, 0x3}, 0x0, '\x00', 0x2, {@table={'./file0\x00', 0x0, 0x3, 0x6}, [0xaa], 0xa, 0x3, 0xe4}, {@addrmask={@v4=@broadcast, @v4=@rand_addr=0x2, 0x0, 0x0, 0xa}, [0xa, 0x2], 0xf2, 0x3, 0x406}, './file0/file0\x00', './file0/file0\x00', 0x1, 0xfffe}) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x0, 0x8, 0x3, 0x127492, "08010000200000005895ea086800", 0x0, 0x9}) 4.477430803s ago: executing program 7 (id=421): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = syz_open_pts() ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) select(0x37, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000140)=0x3, 0x4) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) r3 = syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x6, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x5, 0x8, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0x1dc, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x5, 0x9, 0x8, 0xfffffffffffff7fe], [0x100000001, 0x8000, 0x40000003, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1, 0x80000001, 0x4000000, 0x2, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x4008}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x9, 0x0, 0xfffffff7, 0xb}, {0xe, 0x2, 0x1, 0xc}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x1, 0x6d5, 0x8000000000006}}}) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r5, 0xcd60441a, &(0x7f0000000580)={0x2, 0x100, 0x1, 0x10000, "000800000a00020f000000aff0338a6b4fc6d780", 0x4, 0xa}) write(r3, &(0x7f00000003c0)="5b62a9db38bc691f256871f69fe6b078bbb924fb4477643932f533fd8ed732ae7822c7df0cab922787d348259aeb9fa76c411cf50317041d1a5f5dab4c4945a055da5d574d578f8286c6c8b914b713d98de11e077838a36624c35aadb54516f8c0a11834497f3432fa9ecab4b4da11614ae586586b82920fa448b0644d36da65e9420bfaf099b5d01b359c35933fa9e9bad70250ac7805c7241f0df7e5e37287f8faf536ceef38fdcf74a4cbab3ade26", 0xb0) execve(0x0, 0x0, 0x0) close(r1) 1.126040807s ago: executing program 4 (id=575): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={0x0, r1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x21, 0x0, 0x2e) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x3, "fe8234022c23bdd0e86bc2a6b5ae30dd", 0x3}, 0x13) sendmsg(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@un=@file={0x5, 0x1, './file0\x00'}, 0xa, &(0x7f0000000340)=[{&(0x7f0000000080)="d66c73d38c7b6b857068c734b2e117c5c0f0a8b265970a055d998d512e337415a49b15f4595bc53f4b66a2f946ec72d8ec31e148c889adc52b76b24e70453af30ea71800121d68085493f98271c25e24f2a57d532a26796e73fa75d530c76a57a5bce5c1d336f073ffaadfcc28ac9055743040a86910d97e5330b96e88e5719936c532db3496f09dfd51257fd8d185eb435bcb5716e71bd8eb2c51e957e2142115e4cc01", 0xa4}, {&(0x7f0000000140)="d1abdfbec1763bbc95ce2f0fe5059b55ee10cc6f5c896d6fe82a86a84f58581fe13b4948ca61a72a52d1076f906d7a6a47256fe02468a7c1f97593f9b5d27ae1b38bf394a13a", 0x46}, {&(0x7f00000001c0)="b5dcbdaa0a9f4a7ffa652706ac344afe6a19bb55cdd132c34e72f4757b410ec5a323966c3c383bfb78157ebea25ede0731fc3a6d5d12ba6cd670f29a93ea77ce72b2b27d0d0eb33f77e6cf32bc2617e682433391c49aa416075e5386f8c7cf2095baebf8ca9a52b08687217c74ff29a6eb3ac01ee0767d48f0a14221c5a670a4b4ec0fd4a6e5a87c12e96a5002d3d53f0694f7f81da07c5dd1841c0e2236966213e36c2a93f727", 0xa7}, {&(0x7f0000000400)="1d2b0f770ac07fe216f0aa3ec0b9c6d04c179effce2dbfc49da7a753658d05bc3dc4398da713e42bd06e3fc482941127bb622ce8c7d82605705577a4d71591345dbd4d2b4f602f09ee7d1593de308d4751d7c9815bbe6c39be36bd5d637945a8ebf63d0699396da104ffbb4bd43ff24a560fdfdaa921bbfca7fea221edd4af6b4c9a2864a54bda569dd3a7e8", 0x8c}], 0x4, &(0x7f0000000380)=[{0x24, 0xffff, 0x8, "74ec35fa2fed756e00a406fd390019b0723ce123896f73"}], 0x24}, 0x0) 1.125728987s ago: executing program 4 (id=577): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x805, 0x6b881aef, 0x3000007, 0xfe, 0x80000001, 0xffff79a9, 0x0, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x4, 0x88, 0x8008, 0x7}, {0xffffffff, 0x8, 0x1, 0x9}, {0x320, 0x900, 0xe}, {0x481, 0x2, 0x10002800, 0x7}, {0x2, 0x4, 0x3, 0x4}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x56, 0xf, 0x8b}, {0x2, 0x82, 0x5, 0x80}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0xd}, {0xb8e, 0x4, 0x1, 0x2}, {0x29a7171c, 0x8, 0x1}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x40000, 0x1, 0x1002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x4, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100002bfffff000001"], 0x10, 0x1}, 0x6) 1.11385187s ago: executing program 1 (id=578): socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1e, 0x3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r3 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) mmap(&(0x7f00003b5000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0xf) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) fcntl$getflags(r0, 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x4012, 0xffffffffffffffff, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x6d74, &(0x7f0000000240)='./file0\x00', 0x8}) msgget$private(0x0, 0x284) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d7710200005e004e2b1f00020000", 0x10}], 0x1}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71", &(0x7f0000000080)=0x15, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x8, 0x1, 0x0, 0x1}, 0x8) 888.665192ms ago: executing program 4 (id=581): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x6, 0x7, 0x7}, {0x0, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) (async, rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a7a6d61de4a1090992003b47915d8156c41fe591026c9e82b38988f5b063c973f06ac0153544e9331a36e74e7e37a7a88ba9625925bb9d46e46ba9630c7e1d9855f945c97d49b682", &(0x7f0000000000)=0x48, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) r1 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r1, 0x20007461) (async) r2 = syz_open_pts() ioctl$TIOCSCTTY(r2, 0x20007461) 887.227945ms ago: executing program 4 (id=582): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000140)=0x3, 0x4) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28, 0x300}, 0x0) execve(0x0, 0x0, 0x0) 865.757116ms ago: executing program 1 (id=583): open$dir(&(0x7f0000000200)='./file0\x00', 0x40f02, 0x0) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8000}, &(0x7f0000000300)={0x7fffffff}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000380)={0x11f1800000000000, 0x9}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x7}, 0x2, 0xfffffffffffffff7, 0x0, 0x0, 0x80000000004, 0x400000000009, 0x8000, 0x4702}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) 857.640567ms ago: executing program 1 (id=585): r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x102) r3 = dup2(r2, r1) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000000ac0)={0x10, 0x2, 0x1, 0x1}, 0x10) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x12d, 0x0, 0x6, 0x1}, {0x7ff, 0x8, 0x6f, 0xffffff0e}, {0x9, 0xf, 0x4, 0x9}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x80, 0x884) mlock(&(0x7f0000294000/0x2000)=nil, 0x2000) mlock(&(0x7f0000120000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setgroups(0x1, &(0x7f0000000000)=[r8]) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@abs={0xfd, 0x0, 0x0, 0x3}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000180)}, {&(0x7f0000000200)="79eb0142ec9141d020b5edd6a4ef2e6b7cfe01f792999a075c6eb4d207d2ccce8996d4", 0x23}], 0x2, &(0x7f0000000380)=[@cred={0x18, 0xffff, 0x0, r5, r6, r8}, @rights={0x10, 0xffff, 0x1, [r0]}, @rights={0x10, 0xffff, 0x1, [r3]}], 0x38, 0x40c}, 0x406) r9 = socket(0x1e, 0x3, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIONREAD(r9, 0x801169ac, &(0x7f00000001c0)) mmap(&(0x7f0000110000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x284) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d7710200005e004e2b1f00020000", 0x10}], 0x1}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71", &(0x7f0000000080)=0x15, 0x0, 0x0) 821.146498ms ago: executing program 1 (id=591): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000040)={0x8, 0x7fffffff}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="af27ead1b4f32865e4eb0cc615c0b5a54d03", 0x12}], 0x1, 0x7) getresuid(0xfffffffffffffffe, 0x0, 0x0) 820.660107ms ago: executing program 1 (id=592): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x8, 0x0) ioctl$DIOCSTOP(r0, 0x20004402) 807.031565ms ago: executing program 3 (id=593): r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) setrlimit(0x1, &(0x7f0000000200)={0x8, 0x1fd}) r3 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3) getrlimit(0x0, &(0x7f0000000280)) setuid(0xffffffffffffffff) pledge(0x0, &(0x7f00000000c0)='\x00') pselect(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xff, 0x13b9aca02}, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$BIOCPROMISC(r2, 0x20004269) ioctl$BIOCPROMISC(r1, 0x20004269) ioctl$TIOCSETD(r0, 0x8004741b, 0x0) r4 = socket(0x18, 0x8002, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./bus\x00', 0x40, 0xd02) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f00000002c0)=""/16, 0x10}], 0x4, 0x1) closefrom(r5) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r7, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x7c, 0xfffffffe, 0xffc00000, "d6a24900b178926c795c6b46c100b1b479cece00", 0x4, 0x5}) shmctl$IPC_STAT(0x0, 0x2, 0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSETA(r5, 0xcd604406, &(0x7f0000000040)={0x80000801, 0x4003fffd, 0x9, 0x0, "d6a24900b178926c79486b47c1dd00", 0x6, 0x4000a}) ioctl$TIOCSETA(r7, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0x403, 0x7, "210d0029913497e10c180b00000040831883bd00", 0x4, 0x5}) 786.961363ms ago: executing program 1 (id=594): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000000029, 0x4, &(0x7f0000000040)="03000000", 0x4) r1 = syz_open_pts() r2 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r2, 0xffa48a258e09b778, 0x5, &(0x7f0000000140)=""/30) sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x12, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x40007cd, 0x400, 0xfffffffc, "296438fe7b906000001a00cdff00", 0x4}) write(r1, &(0x7f0000000100)="d75d97b78a800fb011e50a97", 0xc) 786.677613ms ago: executing program 3 (id=595): r0 = semget(0x2, 0x2, 0x200) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, 0x0, 0x0, 0x0, 0xc5}, 0x20000000000}) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x802378, 0x800, 0xeba4, 0x800104, "bb00c3bf000000ec2d0a436a79c10d00000900", 0x8f4c}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) munmap(&(0x7f00003bc000/0x2000)=nil, 0x2000) (rerun: 64) socket(0x1, 0x2, 0x1) r1 = syz_open_pts() ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000000)) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r2, 0xc0d0446b, &(0x7f0000000040)={0x7fff, 0x800, 0x2, 0x926, "de4b31ffff00006c79480002000000000400", 0x4, 0x5}) ioctl$DIOCADDQUEUE(r2, 0xc148445d, &(0x7f00000001c0)={0x5, 0x4, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x401, 0x1da0}, {0x200, 0x24}, 0x2}, {{0x400, 0x8}, {0xd6}, 0x7fff}, {{0x3, 0x4}, {0x10000, 0x7}, 0x3ff}, {0x9, 0x3, 0x1, 0x1}, 0x0, 0x1, 0x401, 0x5, 0x800}}) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='r\x00') 775.98129ms ago: executing program 3 (id=596): r0 = kqueue() open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12c8}, 0x2) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') kevent(r0, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x25, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) 747.404304ms ago: executing program 3 (id=598): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x35, 0x8) r0 = open$dir(0x0, 0x40f02, 0x0) setrlimit(0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x2, r0}) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000000)={0xfffffffe, 0x0, {0xfffffffffffffffd, 0x4000000000000005}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f0000000080)=@file={0xb, 0x1, './file0\x00'}, 0xa) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = socket(0x18, 0x3, 0x10) r6 = syz_open_pts() futimes(r6, 0x0) ioctl$FIONREAD(r5, 0xc1206951, &(0x7f0000000100)) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f00000000c0)={&(0x7f00000002c0)='./file0\x00', r7}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0) socket(0x1e, 0x8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(0x0, 0x0, 0x0) 695.172829ms ago: executing program 5 (id=606): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0x17, 0x30, 0x5, 0x3fe, 0x80010001, 0x8, 0x10, [{0x0, 0x6, 0x7, 0x9}, {0xc5f, 0x0, 0x9, 0xc}, {0x3a77, 0x5, 0x3, 0xa}, {0x80000000, 0xd, 0x107, 0x70a}, {0x401, 0xff59, 0x1002805, 0x9}, {0x20000008, 0x4, 0x4, 0xb4}, {0xce1, 0x91, 0x4f5, 0xfffffffe}, {0x0, 0x801, 0x7ff, 0xe}, {0x483a2561, 0x9, 0xe, 0x100000}, {0x2005, 0x2001, 0xcee, 0x400000}, {0x1c1, 0x80000004, 0x1}, {0xd2, 0xdbc, 0x8, 0x8000006}, {0x26, 0x67, 0xc, 0x2c6}, {0x29a70716, 0xfffffffa, 0x0, 0xd}, {0x2, 0x8009, 0x6, 0xfffffffd}, {0x0, 0x101, 0x2, 0x20000b}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1) write(r1, &(0x7f0000000180)="c7283c", 0x3) 654.002058ms ago: executing program 3 (id=609): r0 = socket$inet(0x18, 0x3, 0x102) close(r0) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x801, 0x0, 0x100, 0x0) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f00000000c0)=0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x205311) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) poll(0x0, 0x0, 0xfffffffe) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) r4 = socket(0x11, 0x1, 0x0) setsockopt(r4, 0x10000011, 0x4, &(0x7f00000002c0), 0x0) socket(0x20, 0x3, 0xfd) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getppid() r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000140)=[{0x11, 0x7c, 0x3, 0x5cdb}, {0x5, 0x8, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}, {0x0, 0x7f, 0x9e, 0x14}]}) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00004b9000/0x4000)=nil, 0x4000, 0x2) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRES8=r1]) ioctl$FIONREAD(0xffffffffffffffff, 0x801169ac, &(0x7f00000001c0)) 587.613722ms ago: executing program 3 (id=613): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) poll(0x0, 0x0, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfd98}], 0x1) select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 553.779ms ago: executing program 5 (id=617): r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x7, "000000000000001000", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="638802000000299a8c51f6f2efa24a85abdd612dd68e59ad4ecf9323100084410a8591426ee03e53", 0x28}], 0x1, 0x0}, 0x402) (async) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x7, "000000000000001000", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="638802000000299a8c51f6f2efa24a85abdd612dd68e59ad4ecf9323100084410a8591426ee03e53", 0x28}], 0x1, 0x0}, 0x402) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1f}, 0x4, &(0x7f00000000c0)="9d42ab1f8f0b511a6af0cdba0b764e79f7cc058629e78063f2c97c3fa591afe966d619b2318bdff5d2a736d781a4bb34d5e041a583f29e8b7e9a5868707e9ca96877bb4103052ff09e30edd865738c3b7936189c8ab21d63d3e90874602cb865a5db3972d1195fea8f3afaad7074bf0158202c3df978cc097b5c26c4e2914c7628da5f824f93a13e1a9ec258abef4a7edc765d02250e918690352176c21a283dfcf970ce8762378d626ecafb9b2671008398bc82df8435d7596ad4632985db26a5a5377b88417969e991f493ac807408eca742", &(0x7f00000001c0)=0xd3, &(0x7f0000000200)="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", 0xfc) syz_emit_ethernet(0x66, &(0x7f0000002f40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaab386dd6000000800302b00fe8000000000000000000000000000bb00002d54944dde0d8e7c020000000000000000000000000129000000000000004e204e2100089078e45cbeaa42f078dc07101400ba7b3d19d9a2fd5f0252"]) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r2, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x7, 0x82, 0x24, 0x1003}, {0x1035, 0x1, 0x1, 0x400}, {0x400e, 0xff, 0x53, 0xd}, {0x70ae, 0xf8, 0x0, 0x2}]}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x7, 0x82, 0x24, 0x1003}, {0x1035, 0x1, 0x1, 0x400}, {0x400e, 0xff, 0x53, 0xd}, {0x70ae, 0xf8, 0x0, 0x2}]}) 552.243515ms ago: executing program 5 (id=619): r0 = socket(0x18, 0x2, 0x2) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r1, 0x80804465, &(0x7f0000000000)={0x2000c, 0x8, 0x6, 0x9, "04f1ffffff000000000080000400", 0x800, 0x1}) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000040)={0x1, 0x80000001, 0x7, 0x5, "8fe70f33b6c17c744e362a603bc38a26f69f2b83", 0x21, 0x4}) closefrom(r0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000340)={&(0x7f0000000300)=[{0x101}, {0x45, 0x6}], 0x2}) getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 526.546246ms ago: executing program 5 (id=621): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) ioctl$VNDIOCSET(r0, 0xc0284408, &(0x7f0000000000)={0x0, 0x7, 0x0}) r1 = kqueue1(0x10000) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000280)=""/25, 0x19}], 0x2) r2 = socket(0x18, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0x7, "00000000000000000000ffff00", 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="58fbffffffffffffff000000e1850fe0e2275792f1407675edd709581452f826d54e85bfb3280d1e05e104e69f01e81884c622a81acd2d0324567dde01ff265849e2977df7518e761bcd421961925a5eb1c0563ac0000000"], 0x58}}, 0x38, 0x8) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x0, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x6, 0x7}, 0x0, 0x0, 0x0) kqueue() ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000bc0)=[{0x1a0, 0x9}, {0x2, 0x4}], 0x2}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0xfffffcc6) mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = socket(0x1, 0x2, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSDIRFILT(r4, 0x8004427d, &(0x7f0000000000)=0x44307cff) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v4, @v4=@broadcast], [0x6, 0x40], 0x8000, 0x2}, {[@v6=@mcast1, @v4=@multicast2], [0x46, 0x15], 0x4, 0x1a}], {{0x5, 0x3, 0xfd, 0x7ff}, 0x5, 0x407, 0x80, 0xfff, 0x80, 0x17, 0xe}, {{0x10, 0x2, 0xff, 0x7}, 0x8001, 0x7, 0x800002, 0x6, 0x6, 0xee, 0xac}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, 0x6, 0xb, 0x2, 0xf23b, 0x5, [[0xfffffff7, 0x77], [0x3, 0x834c]], [[0xffffffff, 0x603f], [0x9, 0x2]], 0x9, [0x0, 0x79], 0x0, 0x2, 0x1, 0x0, 0x0, 0x3, 0xb, 0x83, 0x81, 0x8, 0x1, 0xce51}}) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r5, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x8, "210d0000000200000006000000000200", 0x2000000, 0x5}) ioctl$FIONREAD(r3, 0x8020697f, &(0x7f0000000100)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f0000000300)={0x81, 0x2973, 0x7, 0x8, 0x8, 0xbf07, 0xdcc, 0x10, [{0x401, 0x9, 0x81, 0x80}, {0xd4, 0xfff, 0x4, 0x986}, {0x8, 0x9, 0xca28, 0x9}, {0x7, 0x776a, 0x8, 0x1}, {0x9, 0x3ff, 0x9, 0x1}, {0x6, 0x8, 0x7, 0xb7e}, {0x1, 0x1000, 0x8, 0xb}, {0x1, 0xfffffff8, 0xc08}, {0x3e, 0x20000}, {0x5, 0x9, 0x2, 0x5}, {0x9, 0x0, 0x3e32, 0x6}, {0x5, 0x1, 0x2, 0xfffff800}, {0x1, 0x4, 0x3, 0x82}, {0xfffff001, 0x6, 0x7, 0x8}, {0x3, 0x1, 0x3, 0x1000}, {0xb, 0x2, 0x4, 0x3}]}) 523.102497ms ago: executing program 5 (id=623): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x805, 0x6b881aef, 0x3000007, 0xfe, 0x80000001, 0xffff79a9, 0x0, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x4, 0x88, 0x8008, 0x7}, {0xffffffff, 0x8, 0x1, 0x9}, {0x320, 0x900, 0xe}, {0x481, 0x2, 0x10002800, 0x7}, {0x2, 0x4, 0x3, 0x4}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x56, 0xf, 0x8b}, {0x2, 0x82, 0x5, 0x80}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0xd}, {0xb8e, 0x4, 0x1, 0x2}, {0x29a7171c, 0x8, 0x1}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x40000, 0x1, 0x1002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x4, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000d0ffff000001"], 0x10, 0x1}, 0x6) 416.419859ms ago: executing program 5 (id=629): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)="48dd2af5dee5622cc54322f92c", 0xd, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, r2) close(r3) open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) dup2(r2, r3) 415.95615ms ago: executing program 6 (id=631): socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1e, 0x3, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)=0x1) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x284) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d7710200005e004e2b1f00020000", 0x10}], 0x1}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71", &(0x7f0000000080)=0x15, 0x0, 0x0) 388.21487ms ago: executing program 0 (id=632): r0 = socket(0x18, 0x3, 0x0) sysctl$kern(&(0x7f0000000240)={0x1, 0x48}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000200)=0x4, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) setsockopt(r0, 0x1000000029, 0x41, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000480)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, &(0x7f0000000740), 0x0) 274.428866ms ago: executing program 6 (id=633): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000000)="02000000", 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)={@broadcast, @empty, [{[{0x88a8, 0x7, 0x0, 0x2}], {0x8100, 0x7, 0x0, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "99ffff", 0x4, 0x16, 0x81, @rand_addr="cb697a653c336f0068707f6b00009992", @mcast1, {[], @generic="a4d1b234"}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setgroups(0x1, &(0x7f0000000000)=[r2]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_pts() setsid() setuid(0xffffffffffffffff) kill(0xffffffffffffffff, 0x13) ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$TIOCSETD(r3, 0x80047476, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) rmdir(&(0x7f0000000000)='./file0\x00') 274.074239ms ago: executing program 0 (id=634): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0x17, 0x30, 0x5, 0x3fe, 0x80010001, 0x8, 0x10, [{0x0, 0x6, 0x7, 0x9}, {0xc5f, 0x0, 0x9, 0xc}, {0x3a77, 0x5, 0x3, 0xa}, {0x80000000, 0xd, 0x107, 0x70a}, {0x401, 0xff59, 0x1002805, 0x9}, {0x20000008, 0x4, 0x4, 0xb4}, {0xce1, 0x91, 0x4f5, 0xfffffffe}, {0x0, 0x801, 0x7ff, 0xe}, {0x483a2561, 0x9, 0xe, 0x100000}, {0x2005, 0x2001, 0xcee, 0x400000}, {0x1c1, 0x80000004, 0x1}, {0xd2, 0xdbc, 0x8, 0x8000006}, {0x26, 0x67, 0xc, 0x2c6}, {0x29a70716, 0xfffffffa, 0x0, 0xd}, {0x2, 0x8009, 0x6, 0xfffffffd}, {0x0, 0x101, 0x2, 0x20000b}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1) write(r1, &(0x7f0000000180)="c7283c", 0x3) 273.537486ms ago: executing program 6 (id=635): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffffc, 0x21, 0x2, 0x8, 0x400000000000}], 0x9, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x18, 0x2, 0x0) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) execve(0x0, 0x0, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x7e, 0x3, 0x48}, {0x48, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r4, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) setsockopt(r3, 0x1000000029, 0x2b, &(0x7f0000000000), 0xe) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) fchownat(r0, &(0x7f0000000080)='./file0\x00', r2, r5, 0x2) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) close(0xffffffffffffffff) syz_open_pts() openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x8004745f, &(0x7f0000000040)={0x409789, 0x10001, 0xfffffc06, 0x80a1a1, "bb08000110f167d910508bc49d7323000000007e", 0x0, 0x4}) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r6, 0x3}) 273.161159ms ago: executing program 2 (id=636): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) getpid() setgroups(0x0, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000136, r1) setuid(0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x47) write(r2, &(0x7f00000001c0)="e971295d90a154c989d73fd1c9d6ca04282b8a7c57d21deb493e5a281c8d4a3a442b37dfb1795ab41790b85b38b4107c6d91544e7364cf178e34352ab1cc23ad0100000001000000eb07097273333066c3a9b3247cc5f97b22230600b828faa1687787a29f42d488", 0x68) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12c8}, 0x2) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r3, 0x80045713, &(0x7f00000000c0)=0x11fd) 272.496693ms ago: executing program 2 (id=637): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x80, 0x123) r1 = socket(0x2, 0x8002, 0x0) setpgid(0x0, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) sysctl$vm(&(0x7f0000000300)={0x2, 0xc}, 0x2, 0x0, 0x0, &(0x7f00000003c0)="daa89a45da3821f3130f43a7cd408802", 0x10) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000340)={0x202, 0xe, {[0x1180000000000000, 0x5, 0xcb9, 0x7, 0x7ff, 0x4, 0x97, 0x33, 0x3, 0x4, 0x4, 0x800, 0x17, 0x7, 0x2, 0xd186, 0x1, 0x4], [0x8001, 0xc, 0x7fff, 0xff, 0x9, 0x8, 0x400, 0x3, 0x6, 0x8], [0xd5, 0x3, 0x2e, 0xee, 0xfffffffffffffffc, 0x6, 0x9], [0x7, 0x1, 0x9, 0x7, 0x81, 0x2aa4], [{0x1, 0x6, 0x2, 0x8}, {0xa, 0x2, 0xd, 0x7}, {0x80, 0x0, 0x1000, 0x100}, {0x9, 0x2, 0x80000000, 0xbea}, {0xc6, 0x7fff, 0x7ff, 0x6b}, {0x3, 0x19d63d17, 0x200, 0x80}, {0x7ff, 0xfffffffd, 0x4, 0xa}, {0x0, 0x14e, 0x3, 0x7f}], {0xf, 0x4, 0xffff0001, 0x8f48}, {0x3, 0xcf2, 0x6, 0x7b2f}}}) closefrom(r2) r3 = socket$inet(0x2, 0x1, 0x1) getsockopt(r3, 0x0, 0x18, 0xffffffffffffffff, &(0x7f0000000240)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x2, 0x3}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x9a) ioctl$TIOCSWINSZ(r4, 0x80087467, &(0x7f0000000980)={0x9, 0xecf, 0x800, 0x6}) ioctl$VNDIOCGET(r4, 0xc4104603, &(0x7f0000000580)={'./file0\x00', 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x8000, 0x8f6d], 0x2, 0x10000}) 222.544344ms ago: executing program 0 (id=638): chmod(&(0x7f0000000040)='.\x00', 0x2cd) setuid(0xee01) r0 = socket$inet(0x2, 0x3, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="457f479c2c65", @remote, [], {@ipv4={0x800, {{0x9, 0x4, 0x3, 0x13, 0x2c, 0x67, 0x80, 0x7, 0x33, 0x0, @local={0xac, 0x14, 0x0}, @multicast2, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x2, 0xc, [{[], 0x2800}, {[], 0x2}]}]}}, @udp={{0x3, 0x3, 0x8}}}}}}) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) r3 = syz_open_pts() (rerun: 64) closefrom(r3) (async) setresgid(0xffffffffffffffff, 0x0, r2) (async) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc) setgroups(0x4, &(0x7f0000000280)=[r2, r4, r5, r6]) (async) getsockopt(r0, 0xffff, 0x3, 0x0, 0x0) (async) unveil(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='w\x00') 197.546033ms ago: executing program 2 (id=639): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) 195.620794ms ago: executing program 0 (id=640): syz_emit_ethernet(0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520800000000fe0000b10000000000000000000000bbff020000000000000000000000000001000a00c2"]) 190.33161ms ago: executing program 6 (id=641): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000b00), 0x472, 0x0) syz_emit_ethernet(0x33, &(0x7f00000001c0)={@broadcast, @random="a71b47736ae8", [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x0, 0x25, 0x66, 0x5, 0x9a, 0x3b, 0x0, @multicast2, @local={0xac, 0x14, 0x0}, {[@end]}}, @udp={{0x1, 0x1, 0x8}, {"95f15dd907"}}}}}}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0xa4, 0x3, 0x4, 0x40}, {0x7, 0x70, 0x2, 0xfffffffb}, {0x3c56, 0x5, 0x4}]}) syz_emit_ethernet(0x2b, &(0x7f0000000200)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x3, 0x8}, {"e3"}}}}}}) 186.851328ms ago: executing program 2 (id=642): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff03000000000000006800000806ff78e0000001ac0900aa4e224e423b6fdf5de6d953f0c0e222cf13c03823", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="900282009078fffc0101080a000000087fffffff00000000"]) open(&(0x7f0000000080)='./file0\x00', 0x200, 0xb6) 185.958535ms ago: executing program 6 (id=643): r0 = kqueue() kevent(r0, 0x0, 0x6, &(0x7f00000000c0)=[{{r0}, 0xffffffffffffffff, 0x25, 0xd3, 0x7, 0x40}], 0x8, 0x0) kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x63, 0x10}], 0x0, 0x0, 0x4, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) pipe(&(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x9) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x2) 183.601673ms ago: executing program 0 (id=644): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2d87) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000400)="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", &(0x7f0000000280)=0x10011, 0x0, 0x9c) r0 = msgget$private(0x0, 0xb) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x1, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xc, 0x8000000000000000, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x1ff, 0x0, 0xd}) setuid(0xffffffffffffffff) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0xc}, 0x4, &(0x7f0000000240)="ffb4de4e9568de4672929fd4e172ebe0702fbdd38a27444a6eca014dd090904e625ccd4bf0b4", &(0x7f0000000380)=0x26, &(0x7f0000000540)="6c5ae7d675b83328fdc5f5c3551e519255dcc04adf822cadcc16e713f551cc0948afbda5011b44965e58ba60ae4a469438fd485140c19a266201d6abf0275d775a2c1839249f5f24ea9d40b4d024eba62ebf1c2175e6f25460cf12b487db12f8807d9d482e0fc0dbd1639deb47fccc92ff3bad40c28f23d22fb4d05eebee7d3b30e0832a32737e2c49843d2ede43f716b4bda48801d5d83149c393b14f75902dca59ff98c3c67a1d61a41429561e52973baf4109e0019b36146d35f2c35826483a6f5e1fc1eaa4c1b9f66050a71aa0d0abf4fb", 0xd3) msgsnd(r0, &(0x7f0000002500)=ANY=[@ANYBLOB='@'], 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x1800) syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x7, 0x101, 0x80000003, 0x1, 0x80000000, 0x10, [{0x4, 0x9, 0x0, 0xfffffffb}, {0x7, 0x6, 0x6, 0xfffffffc}, {0x8, 0xf86, 0x0, 0xaf9}, {0x2000004, 0x800, 0x7, 0x40}, {0x3, 0x7fffffff, 0x0, 0x7}, {0x2, 0x6, 0x3, 0x101}, {0xcdf, 0x1, 0x1, 0x6c}, {0x200a, 0x80803, 0x17, 0x8}, {0x0, 0x4, 0x7, 0x9}, {0x6, 0x8002, 0x100000c7, 0x4088}, {0x4, 0xffffaac5, 0x34, 0x10000aeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffff9, 0x6, 0x6}, {0x4, 0x7, 0x4}, {0x0, 0x1, 0x0, 0x30000}]}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 182.728245ms ago: executing program 2 (id=645): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8847450000280067000000119078ffffffffac1400bb0e00907800030002fffffffa000000010010000d"]) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) pipe2(&(0x7f0000000540), 0x10002) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x24, &(0x7f0000000180)="fd0c", 0x2) sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000080)=@un=@file={0xfa89b05bdb287abb}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000024"], 0x18}, 0x0) recvfrom$inet6(r0, &(0x7f0000000380)=""/65, 0x41, 0x842, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0xd, 0x8, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x4, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x4, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x6123, 0x0, 0x401, 0x8}, {0xfffe, 0xffffbfc0, 0x8, 0x4}}}) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) getsockopt(r0, 0x8000, 0x30b9b732, &(0x7f0000000400)=""/255, &(0x7f0000000500)=0xff) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b1a5f4228d5fa319e80b38e5b4b0a6fc0424e9cd72b43238a685b3ff5ef00a7cbc0cbe4021f4ef82c80f8a6545694fb6ff52358f2c181c74176234a1bb19b9882c9a3772e03529c5b681b68bfaed6d2948c05f1559c88226fbfc93260911954ffbcb1da21097b9118db4121b72cea145125a61788e1954bd07928f2d419f14fe68e07cf3481c168bf2d2b3865f12e4c6f3465ad2f16d15df7e5962cd5821d2d426c708be055d21e54e8435a0345514e41425f3ab8054553a2d564c0e2d9f7a5e6342"], 0xe7, 0x800) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file0\x00', 0x2040002ffff) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 57.974576ms ago: executing program 4 (id=646): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000040)={0x1000ff28, 0x2, 0x86a, 0x4, "2800180000020002000000000068ab5ade800600", 0x4, 0xdb61}) 4.722945ms ago: executing program 4 (id=647): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8847450000280067000000119078ffffffffac1400bb0e00907800030002fffffffa000000010010000d"]) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) pipe2(&(0x7f0000000540), 0x10002) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x24, &(0x7f0000000180)="fd0c", 0x2) sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000080)=@un=@file={0xfa89b05bdb287abb}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000024"], 0x18}, 0x0) recvfrom$inet6(r0, &(0x7f0000000380)=""/65, 0x41, 0x842, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0xd, 0x8, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x4, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x4, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x6123, 0x0, 0x401, 0x8}, {0xfffe, 0xffffbfc0, 0x8, 0x4}}}) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) getsockopt(r0, 0x8000, 0x30b9b732, &(0x7f0000000400)=""/255, &(0x7f0000000500)=0xff) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b1a5f4228d5fa319e80b38e5b4b0a6fc0424e9cd72b43238a685b3ff5ef00a7cbc0cbe4021f4ef82c80f8a6545694fb6ff52358f2c181c74176234a1bb19b9882c9a3772e03529c5b681b68bfaed6d2948c05f1559c88226fbfc93260911954ffbcb1da21097b9118db4121b72cea145125a61788e1954bd07928f2d419f14fe68e07cf3481c168bf2d2b3865f12e4c6f3465ad2f16d15df7e5962cd5821d2d426c708be055d21e54e8435a0345514e41425f3ab8054553a2d564c0e2d9f7a5e6342"], 0xe7, 0x800) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file0\x00', 0x2040002ffff) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 4.420154ms ago: executing program 6 (id=648): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x805, 0x6b881aef, 0x3000007, 0xfe, 0x80000001, 0xffff79a9, 0x0, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x4, 0x88, 0x8008, 0x7}, {0xffffffff, 0x8, 0x1, 0x9}, {0x320, 0x900, 0xe}, {0x481, 0x2, 0x10002800, 0x7}, {0x2, 0x4, 0x3, 0x4}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x56, 0xf, 0x8b}, {0x2, 0x82, 0x5, 0x80}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0xd}, {0xb8e, 0x4, 0x1, 0x2}, {0x29a7171c, 0x8, 0x1}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x40000, 0x1, 0x1002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x4, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffffd00001"], 0x10, 0x1}, 0x6) 1.609718ms ago: executing program 0 (id=649): socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1e, 0x3, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) write(r1, &(0x7f0000000800)="5dcb87240a875619586e69cae8e45c921ef79c7d59378995c4464ac072c1a19dfb60d8981aaa04e699dd462a0b4d01896eddecba17db76f2c431ffc0b21d0610f1375cde8f9ae047a94adccc68e3f6aaba44edcf996594ac18c498c4116e9da8c67f2493571a29dfa091a6dc24f7434facd0a68dd17096731d496c03763a13ffe9d0fea24975825f4d870b4760468b496fad3adf168986445f5a97c8bae9afb1e9cee64c24eada55852b739d1e1857498987ea22d4ffc2937149ecdb84119cc2fd7eb919d5e8c1eab66c8bc6638c35562db48a22c71104dd036248729ba25a06", 0xe0) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000140)={0x81, 0xc}) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0xe, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000640)={0x4, &(0x7f0000000200)=[{0x0, ""/16, [{[@v6=@remote, @v6=@mcast2]}, {[@v4=@local, @v6=@mcast2]}], {}, {}, @v4=@broadcast}, {0x0, ""/16, [{[@v6=@ipv4={""/10, ""/2, @local}, @v6=@ipv4={""/10, ""/2, @broadcast}]}, {[@v4=@rand_addr, @v6=@mcast1]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v6, @v4=@remote]}, {[@v4=@multicast1, @v6=@ipv4={""/10, ""/2, @remote}]}], {}, {}, @v6=@mcast2}, {0x0, ""/16, [{[@v6=@mcast2, @v4=@local]}, {[@v4=@broadcast, @v4=@remote]}], {}, {}, @v4=@rand_addr}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x284) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee00, 0x0) fstat(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r4) r5 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) chown(&(0x7f0000000200)='./file0\x00', r5, r7) setreuid(0xee00, r5) chown(&(0x7f0000000140)='./file0\x00', r3, r7) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d7710200005e004e2b1f00020000", 0x10}], 0x1}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71", &(0x7f0000000080)=0x15, 0x0, 0x0) 0s ago: executing program 2 (id=650): open$dir(&(0x7f0000000200)='./file0\x00', 0x40f02, 0x0) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000630, 0x0) socket$inet(0x2, 0x4, 0xc0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f00000006c0)={0x1, 0xfffffff7, &(0x7f0000000280)=[{0x0, './file0\x00', 0x8}]}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) utimes(0x0, &(0x7f0000000100)={{0x5, 0xfffffffffffffffb}, {0x7, 0x4}}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3, 0x564, 0x9ce8, 0x80000000, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) r1 = syz_open_pts() fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x100000001}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0xd9, 0x20001fffffffd}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error Connection to 10.128.0.34 closed by remote host. OpenBSD/amd64 (ci-openbsd-main-6.us-central1-b.c.syzkaller.internal) (tty00) login: OpenBSD/amd64 (ci-openbsd-main-6.us-central1-b.c.syzkaller.internal) (tty00) login: uvm_fault(0xffffffff839645c8, 0xffff800028465ff8, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs_indirtrunc+0x689: movq 0(%rax,%rbx,8),%rbx TID PID UID PRFLAGS PFLAGS CPU COMMAND *386166 37502 0 0x2 0 0 syz-executor ffs_indirtrunc(fffffd806cb07f00,fffffffff7fff7f3,96560,ffffffffffffffff,1,ffff80003c9114d8) at ffs_indirtrunc+0x689 ffs_indirtrunc(fffffd806cb07f00,ffffffffffbff7f2,96d00,ffffffffffffffff,2,ffff80003c9116d8) at ffs_indirtrunc+0x723 ffs_truncate(fffffd806cb07f00,0,0,ffffffffffffffff) at ffs_truncate+0x1036 ufs_inactive(ffff80003c911830) at ufs_inactive+0x1ff VOP_INACTIVE(fffffd8069638c00,ffff80002a7807e8) at VOP_INACTIVE+0xfb vput(fffffd8069638c00) at vput+0xdc VOP_REMOVE(fffffd806ed56e80,fffffd8069638c00,ffff80003c911998) at VOP_REMOVE+0x199 dounlinkat(ffff80002a7807e8,ffffff9c,70181771b9c0,0) at dounlinkat+0x1c4 syscall(ffff80003c911b00) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70181771be70, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb>