last executing test programs:

1.230627901s ago: executing program 5 (id=1152):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
setitimer(0x2, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x805, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7})

1.223130652s ago: executing program 5 (id=1154):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02)
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000a40)='./bus\x00', &(0x7f0000000680)='./file0\x00')

1.188919927s ago: executing program 1 (id=1158):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
fchown(r0, 0x0, 0x0)
close(0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

1.122878225s ago: executing program 7 (id=1160):
setreuid(0x0, 0xee01)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
r0 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x8020697f, 0x0)
r1 = msgget$private(0x0, 0x60d)
msgctl$IPC_STAT(r1, 0x2, 0x0)

1.117955171s ago: executing program 7 (id=1161):
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x1, 0xfffffeff}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x400}, {0x1, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1, 0xe00e}, {0x3, 0x8001}, {0x1, 0x200060}]})
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x5)
setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}]}}}}}}})

1.117727457s ago: executing program 5 (id=1162):
sendto$unix(0xffffffffffffffff, &(0x7f0000000200)="4cd33ea7ab0f3d9d5881e9e87e211ed403465c3e6bc41160dd8ba742f55041f30b35e75bd02b41cdcbd83747f11076e1a8eeebb18b", 0x35, 0x3, 0x0, 0x0)
kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x25, 0xf27ff7794bbc9c2d, 0x61c, 0x10000}], 0x1, 0x0, 0x9b68, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9)
r0 = open(&(0x7f0000000480)='./file0\x00', 0x20, 0x4ebfac6bbaf7900)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCCLR(r0, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0})

1.098091705s ago: executing program 7 (id=1164):
r0 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r0, 0x20007461)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000040)=0x5)
r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$TIOCCHKVERAUTH(r2, 0x2000741e)

1.06898876s ago: executing program 5 (id=1168):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
read(r1, &(0x7f00000000c0)=""/110, 0x6e)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0xa, 0x9, 0xffffdfc1, 0xffffff8e, "25589519000403007fd8f90d6400ffffbfff6aa0", 0x3, 0x4})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

918.220364ms ago: executing program 7 (id=1169):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
kqueue()
select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

895.347647ms ago: executing program 1 (id=1170):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0xed00, 0x7, 0x5, 0x800}]})
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f0000000000)={0x0, 0x1, 0x0})
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xffffffff7ffffffd, 0x0})

783.508556ms ago: executing program 1 (id=1174):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53})
syz_open_pts()

778.968081ms ago: executing program 6 (id=1176):
r0 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r0, 0x20007461)
r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
dup3(r1, r0, 0x0)
openat$tty(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)

775.051647ms ago: executing program 6 (id=1177):
r0 = semget(0x0, 0x1, 0x281)
semget(0x2, 0x1, 0x2c1)
socket$inet(0x2, 0x1, 0x0)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

761.391931ms ago: executing program 6 (id=1178):
r0 = syz_open_pts()
syz_open_pts()
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x18a)
ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x9)
close(r1)

748.422437ms ago: executing program 6 (id=1179):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1000000002}})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "fffe0000000000000000009000", 0xff}, 0x1c)

730.050309ms ago: executing program 6 (id=1181):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
open(&(0x7f0000000140)='./file0\x00', 0x200, 0xca)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x2)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)

609.6948ms ago: executing program 1 (id=1189):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x3, 0x9, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe0, 0xffffff26, 0x71800}, {0x0, 0x300b7fe, 0x7, 0x7}, {0x100006, 0x9, 0xe, 0x2}, {0xe0, 0x0, 0x1fd, 0xffffeffe}, {0x7, 0x0, 0x80000001, 0xfff}, {0x3, 0x6, 0x9, 0xd}, {0x1, 0x7, 0x7, 0x70}, {0x58a, 0x8, 0xfdf2, 0x6}, {0x0, 0x5, 0x34, 0x2}, {0xfefffc04, 0x8, 0x8003, 0x1}, {0x8, 0xff79, 0xa38c000, 0xe1}, {0xcb, 0x6, 0x5, 0x8}, {0x2100df, 0x6, 0x5, 0x3ff}, {0x10008, 0xe2, 0xfffffff5, 0xfffffff8}, {0x5, 0x5, 0xd8, 0x4}, {0x5, 0xd659, 0x1000, 0x6}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))

606.819697ms ago: executing program 3 (id=1190):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x45)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="813107c47439899b99b221ec1b949c841a152bb0010c796cecd0a593d49fad8d2b82007d3866288541507902adade032c29966aed6d9b32a1812ca1c705afe95fd76fdd12817d0fb492590d0c6666477a622381e31adb578c24d395deeba3d3b6fa2a2c502a530fd163195908780dcc7b863a9ed4619564a21062f07ee716ba60d8933d326d911d0327180a9b4ae355834455dd98154e465eba07b851ee1670a5108a933cefc88da9cb71736d60be7b71a2c", 0xb2}, {&(0x7f0000000580)="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", 0x111}, {&(0x7f0000000300)="9b7902f8de160ada068046f2b7f49c20c9ec7efa7816d15f84dfd24ad4e8769a088049e33dad0477ea0a8daf908f68516549b65cbdc0eda1798d732808548949147bb6a09d450a715c8e96261b5cb795ec4da109", 0x54}, {&(0x7f0000000380)="74eab658766c9a4ee769bfce6aa9060d87f4271be6b3e012dc1cda21e46d7fefd58a1b69605ea0d089288e20f11eaaeb62d3d5ddabf14401debbe79f58d0f238b16ef2fa08", 0x45}, {&(0x7f0000000400)="ec6c6dc6bc0ddd488c5e89d5ac836dd66455897b", 0x14}, {&(0x7f0000000440)="bcc7373ee99529b4ef366a3d4127b57bf85561aa8a6de53321d27973264874a8d8c1ff5e5a30f5d287ff7afafb881c5ea8bb3bede7335894039a9f34ec3cf27c2b2910e9bedf690fde74a75dacfca1ba24e9e8e0e2c578d94ac0a380e91f03f10440c6e9879feb24cd84824c418646723c5e79cca770abda6a7b1b0cc4c7bc7bb6f720bbf50a8983e09aa8296fb4b5d120b92847d566b20e809749bd62cfd5de6ac80b44d4239d6c3824dfc71b2253ca2929e8c3c0ab94f5e20c8aafbf80321856ba3ea34dfae5aa865b11838da2167543640f14b60312808cec1e", 0xdb}, {&(0x7f0000000540)="074a5aed6f4d42c97b97d7d57c6874cadad06f701896773c58933ec19a4ca08956738c1e6511b3eebf4d8946bf531e797feeade4df083a33baba85", 0x3b}], 0x7)

605.862755ms ago: executing program 1 (id=1191):
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x10802, 0x6b881aef, 0x2000007, 0x6, 0x80000001, 0xffff79a9, 0x4, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8008, 0x6}, {0x101, 0x8, 0x0, 0x43}, {0x9, 0x902, 0xe, 0x1000}, {0x401, 0xa, 0x10002804, 0x4}, {0x2, 0x27f7, 0x3, 0x105}, {0xce3, 0x4, 0x24f5, 0x2}, {0x6, 0x800, 0x9, 0x8e}, {0x2, 0x282, 0x7, 0x7}, {0xa, 0x6, 0xd18, 0x51088}, {0x1e8, 0x10001, 0x4, 0x6}, {0x808, 0x9, 0x8, 0x3}, {0x40b8e, 0x5, 0xf, 0x2}, {0x29a7171c, 0x4008, 0x1}, {0x8000c, 0x7, 0x1, 0x3}, {0x0, 0xfffffffe, 0x1002, 0x8}]})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x42b788, 0xffffffff, 0x7, 0x86a19c, "bb080006020900d91050080000000f0000004000", 0x5, 0x1383})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)

543.37139ms ago: executing program 3 (id=1192):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100))

538.932317ms ago: executing program 3 (id=1193):
r0 = socket(0x2, 0x3, 0xff)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa)
listen(r1, 0x1)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa)
closefrom(r0)

519.398904ms ago: executing program 3 (id=1194):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0)
r1 = kqueue()
ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000180)={'./file0/file0/..', 0x0, 0x102, 0x21, 0x36d, 0x40009})
kevent(r1, &(0x7f0000000180), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7})

511.442003ms ago: executing program 2 (id=1195):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r0, 0x3})
close(r0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, 0x0, 0x0)

510.105883ms ago: executing program 3 (id=1196):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900)
mkdir(&(0x7f0000000040)='./file2\x00', 0x102)
open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
open(&(0x7f0000000100)='./file3\x00', 0x8, 0x102)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f0000001000)={{'./file0\x00', './file0\x00', 0x6a, 0x6}, 0x0, 0x4d0, 0x0, 0x0, 0xb60, 0x457d, 0x0, 0x0, 0x20000f})

458.556077ms ago: executing program 0 (id=1198):
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd})
ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1})
r0 = socket(0x18, 0xc003, 0x3a)
setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc)
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0xc028756b, &(0x7f0000000240))

419.202397ms ago: executing program 0 (id=1200):
syz_emit_ethernet(0x3e, 0x0)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
shmget$private(0x0, 0xc00000, 0xe, &(0x7f0000400000/0xc00000)=nil)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="76e5eac907f9ccf7a251ceddceacd6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f72aaac92b37109c899ffb736e8c4a47f553d92f5387b4d4366d794af9d683ad8fbe463d334d2eaa97ea25e075f9408185cad90027b0fc4707e82952d26c486eb", 0x81}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2})

418.669723ms ago: executing program 0 (id=1202):
r0 = socket(0x2, 0x8002, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
poll(0x0, 0x0, 0xff)
select(0x40, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800, 0x0, 0x0, 0xe}, &(0x7f00000001c0)={0xff, 0x4, 0x9, 0x5, 0xfffffffffffffff8, 0x0, 0xa}, 0x0, 0x0)
closefrom(r1)

400.619421ms ago: executing program 4 (id=1204):
sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000080)="ad979dfb", &(0x7f0000000140)=0x4, &(0x7f0000000040)="f060ce0d", 0x4)
sysctl$hw(&(0x7f00000000c0)={0x6, 0x19}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x8003, 0x0)
getegid()
setsockopt(r0, 0x0, 0x1f, 0x0, 0x0)

391.599144ms ago: executing program 4 (id=1205):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1", 0x1, 0x400, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe)

342.441749ms ago: executing program 4 (id=1206):
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)=@in={0x10, 0x2, 0x3, 0xf0}, 0x10, 0x0, 0x0, 0x0}, 0x1)
r0 = socket(0x2, 0x3, 0x11)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r0, &(0x7f0000000000), 0x10)
write(r0, &(0x7f0000000080)="55fdb050ab5b45d498800a61e87dd7c6b62c7d43", 0x14)

341.971818ms ago: executing program 2 (id=1207):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000240)="91288156c41fe591f5b0631eaa1f298a490ade00", &(0x7f0000000000)=0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe)

341.719833ms ago: executing program 4 (id=1208):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x5, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000200)="9128814414e2d14c8dbd5d137b0c6f56c41fff91026c9e82b389880de78fffeaf5b0631e", &(0x7f0000000000)=0x24, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[])

341.563978ms ago: executing program 2 (id=1209):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000040)=0x11002)
ioctl$TIOCSTOP(r0, 0x2000746f)
poll(&(0x7f0000000300)=[{r0, 0xe3b038fca49cb4dd}], 0x1, 0x5)

341.312461ms ago: executing program 4 (id=1210):
r0 = semget(0x0, 0x0, 0x509)
semget$private(0x0, 0x4, 0x465)
semop(r0, &(0x7f0000000000)=[{0x0, 0x3}, {0x0, 0x8, 0x1800}, {0x1}, {0x2, 0x57b, 0x800}], 0x4)
semget(0x1, 0x4, 0x100)
semget$private(0x0, 0x3, 0x2a4)
r1 = semget$private(0x0, 0x9, 0xa0)
semctl$SETVAL(r1, 0xb4595f6bd179632d, 0x8, 0x0)

340.735886ms ago: executing program 3 (id=1211):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
write(r0, &(0x7f0000000580)="9ca812d8e8208aab2546358c134cdfd305def0701d8080203e9fc5f58a8b195d67fb65b254295272582b552eeaf971864708a135a2e10841d3a5ed5a58461fa8945ad74583fbea00d345abb77105baf4a2897cc715", 0x55)

332.736079ms ago: executing program 4 (id=1212):
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]})
r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111)
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @loopback}], [0x6, 0x40], 0xfffe, 0x28}, {[@v4=@loopback, @v4=@multicast1], [0x6, 0x2], 0x4, 0x18}], {{0x247, 0x3, 0x1, 0x7ff}, 0xd, 0x409, 0x80, 0xfff, 0x80, 0x17, 0xe}, {{0x5, 0x2, 0xff, 0x7}, 0x8002, 0x7, 0x2, 0x6, 0x9, 0xf0, 0xac}, @v4=@rand_addr=0x2c5c, 0x0, 0x9, 0x2, 0x0, 0x6, [[0xfffffff7, 0x4], [0x2, 0x8350]], [[0x3, 0x603f], [0x20007, 0x3]], 0x1, [0x0, 0x7], 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0xb, 0x83, 0x1, 0x8, 0x9, 0xce51}})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0})

331.580137ms ago: executing program 7 (id=1213):
setreuid(0x0, 0xee01)
socket$inet(0x18, 0x3, 0x102)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10)
listen(r0, 0x7fff)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa7}}}}}})
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}})

132.055933ms ago: executing program 6 (id=1214):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0)
munmap(&(0x7f000061e000/0x1000)=nil, 0x1000)
open(0x0, 0x0, 0x8)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
ioctl$DIOCXCOMMIT(r0, 0xc0104452, &(0x7f00000000c0)={0x1, 0x408, &(0x7f0000001200)=[{0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x1}]})

82.719135ms ago: executing program 1 (id=1215):
sysctl$net_pipex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0})
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x44, 0x12, 0x5, 0x1}, {0x4, 0xd, 0x3, 0x900}, {0x6, 0x2, 0x0, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0})
write(r0, &(0x7f0000000240)="30d0aad3075dceb7a3b61f000000", 0xe)

82.455256ms ago: executing program 5 (id=1216):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda)
syz_open_pts()
syz_open_pts()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x4, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0x101, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x1, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x20000080}, {0x3, 0x5, 0x6, 0x2}, {0x0, 0x2000002, 0x3, 0x8}, {0x0, 0x401, 0x3, 0x1000}, {}, {0x2, 0x100, 0x31, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x1002}}})
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kevent(r0, 0x0, 0x0, 0x0, 0x6, 0x0)

58.514926ms ago: executing program 0 (id=1217):
r0 = socket(0x2, 0x3, 0x11)
close(0x3)
socket$inet(0x2, 0x2, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r0, &(0x7f0000000000), 0x10)
write(r0, &(0x7f0000000040)="55fdb050ab5b45d498800a61e87d2c7d43d937d1ff1992f871f120faaaf19dfd65118ba2b91afc99b80dc008d8890450b0d47ee3c49ee701f238beeb638dfa089b2e0763d43ceed09e2eea8303021e48a0e722619b9ba94b709d2d27571345239ca73815167971edcbdb20667e360e957bf872267add0f7eb527e4d67bdd5388b2123e7b0374e3bfcb93c111d59549a2bf", 0x91)

58.279961ms ago: executing program 5 (id=1218):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xf, 0x4e, 0x2100007, 0x6, 0x1, 0x6, 0x5d7227f9, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf86, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x3, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x8001, 0x91b, 0x103}, {0x1cc, 0x10001, 0xf7, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x80, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')

58.101872ms ago: executing program 0 (id=1219):
ioctl$DIOCGETRULESET(0xffffffffffffffff, 0xc444443b, &(0x7f0000000200)={0x81, './file0\x00', './file0\x00'})
setrlimit(0x8, &(0x7f0000000000)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="6fcba904", 0x4}], 0x1)
readv(r1, &(0x7f0000000600), 0x10000000000002a5)

57.9625ms ago: executing program 0 (id=1220):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
read(r0, &(0x7f00000001c0)=""/136, 0x88)
ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="2aa8d9292c", 0x5}, {&(0x7f00000002c0)}], 0x2)

57.090481ms ago: executing program 2 (id=1221):
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x7fff, 0x7, 0xffffdf84, 0x1eccf7f6, "ffff02010700000000ff00", 0x3fffffd, 0xfd8})
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)="bf0f7a3911656fa61fe7a53f6c0aa25c254b8d72de9402", 0x17}], 0x1)
read(r1, &(0x7f00000001c0)=""/184, 0xb8)

22.947766ms ago: executing program 2 (id=1222):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000680)={0x6, 0x8, 0x2, 0x3, "c679febddaf10473e816fbddaaf1e758a16750c9", 0x6b8606ac, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000740)="9bcf8edc", 0x4}], 0x1)

19.91211ms ago: executing program 7 (id=1223):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]})
sysctl$kern(0x0, 0x0, &(0x7f0000000140)="91287ea7a80000000000000000000000000000f300", &(0x7f0000000000)=0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0})
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x9, 0x6, "529c37", 0x30, 0x0, 0x96, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x2, 0x6, "af7eff", 0x0, 0x1d, 0x8, @mcast2, @loopback}}}}}}})

0s ago: executing program 2 (id=1224):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r0 = msgget(0x2, 0x600)
msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x2, 0x1000)
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0))
r2 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts.
pckbd_enable: command error
¹j¼õ¬|ÿ ž¨E1\…:pckbd_enable: command error
Connection to 10.128.0.71 closed by remote host.
3$0(6)/3#3)0:1:0): (%#+ /.$)4)/. (%22/2 0870) /. /0#/$% 081%
     : 	,,%'!, %15%34
     
/
: 	.6!,)$ /--!.$ 0%2!4)/. /$%
+42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$
+42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$
+42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$
+42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$

OpenBSD/amd64 (ci-openbsd-main-4.us-central1-b.c.syzkaller.internal) (tty00)

login: ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped

	
	
	

	
	
	
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
uvn_flush: obj=0xfffffc0064d2b560, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
ktrace write failed, errno 27, tracing stopped
uvm_fault(0xffffffff839ee618, 0xffff800029ee6000, 0, 2) -> e
kernel: page fault trap, code=2
Stopped at      kcov_remote_enter+0x122:        movq    $0,0(%rcx)
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 71224  32245      0           0  0x4000000    0  syz-executor
kcov_remote_enter(0,ffff80002a76df90) at kcov_remote_enter+0x122
timeout_run(ffffffff83905f20,ffff80002a736338) at timeout_run+0xdf
softclock_process_tick_timeout(ffff80002a736338,0) at softclock_process_tick_timeout+0x230
softclock(0) at softclock+0x152
softintr_dispatch(0) at softintr_dispatch+0xf9
dosoftint(0) at dosoftint+0x48
Xsoftclock() at Xsoftclock+0x27
writedisklabel(d02,ffffffff82dde440,ffff800000039000) at writedisklabel+0x1b8
sdioctl(d01,84946467,ffff8000015f6000,3,ffff80002a736a68) at sdioctl+0x959
VOP_IOCTL(fffffc007d1bfcd8,84946467,ffff8000015f6000,3,fffffc0007ffd680,ffff80002a736a68) at VOP_IOCTL+0xa3
vn_ioctl(fffffc006cadd690,84946467,ffff8000015f6000,ffff80002a736a68) at vn_ioctl+0xea
sys_ioctl(ffff80002a736a68,ffff80003a4cf560,ffff80003a4cf4b0) at sys_ioctl+0x660
syscall(ffff80003a4cf560) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7e0abaf2de0, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff839ee618, 0xffff800029ee6000, 0, 2) -> e
ddb>