last executing test programs:

1.200143547s ago: executing program 6 (id=4994):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000480), 0x0)

1.199989387s ago: executing program 6 (id=4996):
socket(0x2, 0x3, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x9e, 0x2000007, 0x100, 0x80800001, 0x80000001, 0x40, 0x10, [{0x10000000, 0x7, 0xc3, 0x71000}, {0x7b86, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x0, 0x1, 0x80000001, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x1000}, {0xfffffffa, 0x5, 0x200004f9, 0x14}, {0x6, 0x2009, 0x13, 0xb}, {0x2, 0x82, 0x4, 0x3}, {0x4, 0x28101, 0x81, 0x1ff}, {0x1df, 0x10001, 0x7ff}, {0xa, 0x29, 0xffffe389, 0x5}, {0xb8c, 0xc3b, 0x80000003, 0x404}, {0x29a71717, 0xfffffffa, 0x0, 0x100}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x6, 0x1, 0x2}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x1, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))

890.984099ms ago: executing program 6 (id=5014):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$TIOCSETA(r0, 0x20004455, 0x0)

731.808657ms ago: executing program 6 (id=5034):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, 0x0, 0x0)

589.171729ms ago: executing program 3 (id=5042):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x1, 0x5)
ioctl$VNDIOCSET(r0, 0x80046478, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0xfffffffffffffef0})

589.050403ms ago: executing program 5 (id=5043):
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x84}], 0x2, 0xffffffff)
unveil(0x0, &(0x7f00000000c0)='x\x00')

588.955367ms ago: executing program 3 (id=5044):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x37, &(0x7f0000000040), 0x0)

588.833463ms ago: executing program 1 (id=5046):
mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
select(0x40, &(0x7f0000000040)={0x2, 0x0, 0x5, 0xa, 0xea, 0x3ff, 0x0, 0x1}, &(0x7f00000002c0)={0x1ff, 0xed03, 0x8, 0x1, 0x6, 0xffffffffffffffff, 0xc, 0x5}, 0x0, 0x0)

579.469072ms ago: executing program 3 (id=5048):
r0 = socket(0x1, 0x2, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f000069c000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x201}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x400000000000000}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f00004f8000/0x3000)=nil, 0x9f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xac3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000531000/0x2000)=nil, &(0x7f000069c000/0x4000)=nil, 0x2}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f00007f9000/0x2000)=nil}, {&(0x7f00006bf000/0x4000)=nil, &(0x7f0000010000/0x3000)=nil, 0x8}], './file0\x00'})
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))

511.184154ms ago: executing program 1 (id=5050):
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0xfff000, {[0xff, 0x1, 0x2, 0x7fffffff, 0xfffffffffffffffc, 0x1000000000000, 0x6, 0x0, 0x0, 0x7, 0x0, 0x3, 0xffffffffffffffff, 0x4, 0x3, 0x4000000000a4, 0x7, 0x4000000000000ff], [0xfffffffffffffffc, 0x80000003, 0x59, 0xffffffff, 0x100, 0x7b99, 0x200, 0x6, 0xfffffeffffffffff], [0x400000100000001, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0xb94, 0xfffffffffffffffe], [0xfffffffffffffffe, 0x20000000000, 0x401, 0x100000000, 0xfffffeffffeffffe, 0x100000005], [{0x0, 0x20000007, 0xffffffff, 0x5}, {0xfffc, 0x2, 0xc9, 0x2}, {0x0, 0x0, 0xfffffffe, 0xfffffffffffffffd}, {0xfffe, 0x8, 0x7, 0x3e}, {0x10, 0x2, 0x0, 0x80b}, {0x6, 0x2003, 0x3fffe, 0x1ffffffffffffffd}, {0x0, 0x0, 0x800000, 0x7}, {0xff81, 0x965, 0x8, 0x6}], {0x2000, 0x7aae, 0x3ff, 0xb7f}, {0x0, 0x0, 0x73e8, 0x1}}})
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0)

510.880296ms ago: executing program 6 (id=5052):
open(0x0, 0x615, 0x166)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440))

510.808737ms ago: executing program 5 (id=5053):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0xc0804467, &(0x7f0000000340)={0x2, 0x2, 0x204, 0x2f, "1800e62300", 0x800006, 0xfffffff7})
socket$inet(0x2, 0x1, 0x0)

450.23548ms ago: executing program 3 (id=5056):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="4d02cd076b00b355a6007a16e4f2df6e", 0x10}], 0x1)
execve(0x0, 0x0, 0x0)

450.16949ms ago: executing program 6 (id=5057):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000000200)="0696c96b0b8c2654800ca7e1b8a73abf71d205977a4ddc7bc8bb7146", 0x1c}], 0x1, 0x40)
close(r0)

450.033275ms ago: executing program 2 (id=5058):
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x4)
socket(0x18, 0x1, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0)
r0 = socket(0x18, 0x3, 0x4)
r1 = socket(0x18, 0x3, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100))

449.919916ms ago: executing program 1 (id=5059):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"])
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"])
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
bind(r2, &(0x7f0000000000), 0x10)
connect$unix(r2, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
recvmmsg(r1, &(0x7f00000007c0)={&(0x7f0000000780)={&(0x7f00000000c0)=@un=@file={0x0, ""/257}, 0x103, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)=""/96, 0x60}, {0x0}, {&(0x7f0000000600)=""/218, 0xda}], 0x4, 0x0}, 0x5}, 0x10, 0x40, 0x0)

449.307968ms ago: executing program 5 (id=5060):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d)

437.936725ms ago: executing program 4 (id=5061):
setitimer(0x0, &(0x7f0000000080)={{0x1000000000000, 0x4}, {0x4, 0x6}}, 0x0)
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f0000000080))

435.021274ms ago: executing program 3 (id=5063):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4)
setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0)

410.427627ms ago: executing program 2 (id=5064):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0)
open(0x0, 0x2, 0x0)
ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f00000007c0)={0x4, 0x0, {[0x8, 0x8, 0x3, 0x7fff, 0x3, 0x8000000000000001, 0x7fffffff, 0x9, 0x7, 0x2, 0x51f, 0x6, 0x0, 0xe, 0xd0, 0x800000000000, 0x1, 0x5], [0x2f9db31c, 0x3ff, 0x6, 0x530, 0x2, 0x5, 0x200, 0x8000000000000001, 0x2, 0x9], [0x400, 0x77e, 0x9920000, 0x1a, 0x40, 0x8, 0x8000000000000001], [0x5, 0x6, 0x40, 0x8, 0x720, 0x5], [{0x9, 0x5, 0x3, 0x5}, {0x7, 0x8, 0x1, 0x69e}, {0x200, 0x5, 0x7, 0x62a0}, {0x1, 0x1, 0x7ff, 0x5}, {0x1, 0x8, 0x8, 0x66b005b0}, {0x2, 0x10, 0x7, 0x5}, {0x9b, 0x7fff, 0x5, 0x7f}, {0x11, 0x2, 0x101, 0x3}], {0x8001, 0x7, 0x38e3, 0x4}, {0xff, 0x9, 0x4, 0x80000000}}})

339.819615ms ago: executing program 3 (id=5065):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/194, 0xc2}], 0x1)
write(r1, 0x0, 0x0)

339.468912ms ago: executing program 2 (id=5067):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETWF(r0, 0x8010427f, &(0x7f0000000040)={0x0, 0x0})

339.389883ms ago: executing program 4 (id=5068):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f00000006c0)={0x0, 0x0, 0x0})

339.322148ms ago: executing program 0 (id=5069):
sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$vm(&(0x7f0000000100)={0x2, 0x2}, 0x2, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0)

329.678794ms ago: executing program 2 (id=5071):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
read(r0, &(0x7f0000000600)=""/198, 0xc6)
close(r1)

238.350637ms ago: executing program 5 (id=5072):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="b563333ffa0d93d141bef9e2c31ba62aaceb77da5bcbddd4976cbf70bd6ec2a6dccc63a5e41704d3b73bbbb2ca9aa1b169a38507a239f64d5c4a1ffaa21042786010b8eb19f1ae4802e9cdd5e7717f725d2179e59c82ed88bdfd92de771d3c1b999efb64cd62f7c919a3919c046fea92839f9c91e0382ca241951c582c056856b8deba6ea52081f8ea502f1d4f0c6e97cdb0261b1e887c69677bda81ec3707c397eb7f684d4e82fbcef2419fcf8ece0425960f5c6e03a037fcb71e67c961d00ef1bc37604e1d2883e3dd6058f26a9c04687e2eef", 0xd4}], 0x1)
unveil(0x0, &(0x7f0000000080)='c\x00')

238.217303ms ago: executing program 0 (id=5073):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000040)={&(0x7f0000000100)='./file0\x00', 0x10008, 0x0})

237.355637ms ago: executing program 4 (id=5074):
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0)
flock(r0, 0x1)

174.752092ms ago: executing program 2 (id=5075):
mkdir(&(0x7f0000000040)='./file2\x00', 0x0)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0)
rename(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000000)='./file2\x00')

174.545484ms ago: executing program 0 (id=5076):
r0 = socket(0x18, 0x2, 0x0)
shutdown(r0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}})

174.420658ms ago: executing program 5 (id=5077):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
r3 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setuid(0xffffffffffffffff)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
r4 = kqueue()
kevent(r4, &(0x7f0000000000), 0x96, 0x0, 0xfffb4161, 0x0)

174.304396ms ago: executing program 4 (id=5078):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
r0 = open(&(0x7f0000000300)='./bus\x00', 0x2, 0x88)
ioctl$VNDIOCSET(r0, 0x84946466, &(0x7f0000000040)={0x0, 0x81, 0x0, 0x33})

174.23556ms ago: executing program 7 (id=5079):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = dup(r0)
ioctl$KDMKTONE(r1, 0x20004b08, 0x0)

173.788133ms ago: executing program 4 (id=5080):
r0 = semget(0x0, 0x1, 0x281)
semop(r0, &(0x7f0000000040)=[{0x0, 0xb, 0x1000}], 0x1)
semctl$SETVAL(r0, 0x0, 0x8, 0x0)

166.714729ms ago: executing program 5 (id=5081):
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0xff, 0xfffefffd, 0x1, 0x5, 0xd87, 0x800, 0x1, 0x2, 0x8001, 0xe})
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0x400af9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0x3, 0xe, 0x7}, {0x2, 0x7, 0x6, 0x9c}, {0x80000cdf, 0x7, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x4}, {0x3, 0x81, 0x1, 0x4000007}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x7, 0x4, 0x5}, {0x1, 0x4, 0x5, 0x3ff}, {0x29a7171b, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x30000}]})
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
close(r1)

145.475967ms ago: executing program 7 (id=5082):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0)
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3})
ioctl$VMM_IOC_INTR(r0, 0xc290560b, &(0x7f0000000040)={0x1, 0x0, 0x1})

92.304823ms ago: executing program 4 (id=5083):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, 0x0}, 0x1000)

92.161039ms ago: executing program 7 (id=5084):
r0 = kqueue()
kevent(r0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0)
close(r0)

92.054659ms ago: executing program 0 (id=5085):
sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x250}, 0xfffffff6}, 0x10, 0x1)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
ioctl$TIOCSETA(r0, 0xc4504447, &(0x7f0000000000)={0x2f, 0x8, 0x2, 0xfffffffe, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x3})

91.131436ms ago: executing program 1 (id=5086):
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0)

29.079076ms ago: executing program 0 (id=5087):
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='r\x00')
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

28.948833ms ago: executing program 1 (id=5088):
r0 = socket(0x18, 0x3, 0x7)
setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000780)="00000080", 0x4)
getsockopt(r0, 0x29, 0x3d, 0x0, 0x0)

28.854758ms ago: executing program 2 (id=5089):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440))

28.747326ms ago: executing program 7 (id=5090):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4)

28.552673ms ago: executing program 1 (id=5091):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x3ff, 0xffff, 0x0, 0x1000004, 0x4, 0x4000001, 0x0, 0x0, 0x1, 0xf1e})
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x100003, 0xfffffff9, 0x0, 0x4, 0xa, 0x1, 0x1, 0x2, 0x4001, 0x7f})
r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x200, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x8, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0xb80b, 0xfffffffd, 0x6}, {0x2, 0x7, 0x80000001, 0x7}, {0x6, 0x1, 0x5, 0x6}, {0xe0000000, 0x15b, 0xa, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aea}, {0x803, 0x3e, 0x5, 0x80005}, {0xe0, 0x4, 0xa, 0x9}, {0x29a71717, 0xfffffffd, 0x6, 0x100006}, {0x4, 0x81, 0x7}, {0x0, 0x5, 0x2, 0x30000}]})
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)

25.80685ms ago: executing program 7 (id=5092):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/167, 0xa7}, {&(0x7f0000000100)=""/221, 0xdd}], 0x3)

24.72481ms ago: executing program 0 (id=5093):
unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)

0s ago: executing program 7 (id=5094):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f00000000c0), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts.
pckbd_enable: command error
pckbd_enable: command error
malloc(): allocation too large, type = 29, size = 16796513700
-!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700
.vm_create: uvm_map failed: 12
pckbd_enable: command error


	malloc(): allocation too large, type = 29, size = 16796513700
pckbd_enable: command error
vm_create: uvm_map failed: 12
vm_resetcpu: failed
uvn_flush: obj=0xfffffd8060b241a0, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
malloc(): allocation too large, type = 29, size = 16796513700
WARNING: thread `nfsio' (466078) exits with status -1
WARNING: thread `nfsio' (331275) exits with status -1
WARNING: thread `nfsio' (51821) exits with status -1
WARNING: thread `nfsio' (309337) exits with status -1
WARNING: thread `nfsio' (508496) exits with status -1
WARNING: thread `nfsio' (85971) exits with status -1
WARNING: thread `nfsio' (136629) exits with status -1
WARNING: thread `nfsio' (200884) exits with status -1
WARNING: thread `nfsio' (214951) exits with status -1
WARNING: thread `nfsio' (469314) exits with status -1
WARNING: thread `nfsio' (461517) exits with status -1
WARNING: thread `nfsio' (209211) exits with status -1
WARNING: thread `nfsio' (501052) exits with status -1
WARNING: thread `nfsio' (175224) exits with status -1
WARNING: thread `nfsio' (344287) exits with status -1
WARNING: thread `nfsio' (430200) exits with status -1
WARNING: thread `nfsio' (477512) exits with status -1
WARNING: thread `nfsio' (395631) exits with status -1
WARNING: thread `nfsio' (69081) exits with status -1
WARNING: thread `nfsio' (298702) exits with status -1
pmap_unwire: wiring for pmap 0xfffffd8060904800 va 0x200000001000 didn't change!
pppx: unable to set addresses for pppx1, error=17

OpenBSD/amd64 (ci-openbsd-multicore-8.us-central1-b.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffffd8060b24dd0, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
WARNING: thread `nfsio' (208690) exits with status -1
WARNING: thread `nfsio' (199599) exits with status -1
uvn_flush: obj=0xfffffd805ff9bab8, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
pppx: unable to set addresses for pppx1, error=17
malloc(): allocation too large, type = 29, size = 16796513700
pppx: unable to set addresses for pppx1, error=17
malloc(): allocation too large, type = 29, size = 16796513700
panic: kernel diagnostic assertion "rn != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pipex.c", line 459
Starting stack trace...
panic(ffffffff833aa1bb) at panic+0x1d0
__assert(ffffffff833ec59c,ffffffff8340899b,1cb,ffffffff833a6241) at __assert+0x29
pipex_unlink_session_locked(ffff8000333ea098) at pipex_unlink_session_locked+0x409
pipex_destroy_all_sessions(ffff800001523000) at pipex_destroy_all_sessions+0xd9
pppacclose(637e,41,2000,ffff80003c4da2d0) at pppacclose+0x16f
spec_close(ffff80003c4d8ef0) at spec_close+0x417
VOP_CLOSE(fffffd8060b7a998,41,fffffd80097fd2d8,ffff80003c4da2d0) at VOP_CLOSE+0x132
vn_closefile(fffffd806008dcd0,ffff80003c4da2d0) at vn_closefile+0x12b
fdrop(fffffd806008dcd0,ffff80003c4da2d0) at fdrop+0x121
closef(fffffd806008dcd0,ffff80003c4da2d0) at closef+0x192
fdfree(ffff80003c4da2d0) at fdfree+0x116
exit1(ffff80003c4da2d0,0,0,1) at exit1+0x576
sys_exit(ffff80003c4da2d0,ffff80003c4d9260,ffff80003c4d91b0) at sys_exit+0x1a
syscall(ffff80003c4d9260) at syscall+0xb17
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x74342c8bdd90, count: 242
End of stack trace.