last executing test programs: 12.177220461s ago: executing program 3 (id=294): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x400000, 0x1, 0x0, 0x7ff}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0xa1c, 0x0, 0x33, 0x124}, {0x9, 0x39, 0x7, 0x9}, {0x8, 0x2, 0x6, 0x40}, {0x78b6, 0x70, 0x0, 0x2}, {0x9, 0x80, 0x7f, 0x6}, {0x9c05, 0x0, 0x3, 0x3}, {0x8000, 0x6, 0xb, 0x2}, {0x3, 0x7, 0x5e, 0x2}, {0x5, 0x6, 0xff, 0x1}]}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0xa1c, 0x0, 0x33, 0x124}, {0x9, 0x39, 0x7, 0x9}, {0x8, 0x2, 0x6, 0x40}, {0x78b6, 0x70, 0x0, 0x2}, {0x9, 0x80, 0x7f, 0x6}, {0x9c05, 0x0, 0x3, 0x3}, {0x8000, 0x6, 0xb, 0x2}, {0x3, 0x7, 0x5e, 0x2}, {0x5, 0x6, 0xff, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x1, 0x4001, 0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) socket(0x2, 0x2, 0x0) (async) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) (async) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) 12.073245016s ago: executing program 3 (id=296): setrlimit(0x8, &(0x7f00000000c0)={0xfffffffffffffffd, 0x6c}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="2f048ddda4f6485a1cc83b0f0fa565590ac3", 0x12}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r1, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x7c, 0xfffbfff0, 0xffc00000, "d6a24900b178926c79486b46c1d100", 0x4, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$TIOCSETA(r2, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0x400, 0x30c8262c, "210d0000000200000000000000000040218100", 0x2, 0x5}) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2000, 0x407d) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x3, 0x3, 0x9, 0x3, "25b4393aa6c2cb0ed450622d96358bda2def4ce0", 0x6, 0x4279}) sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000140)=@abs={0x5, 0x1, 0x0, 0x3}, 0x8, &(0x7f0000000340)=[{&(0x7f0000000180)="9694e2396877a0a6998cf4a5948414d13242b9736311eb55a32089e0cda311144728b550f559eaa1e0eab874dd0621ffc1bb4d9b9bf068e12ec76094552b8b09000000bdf454ced42bacd0867c342767b040ad333a1aa5c3ba638a8dd7ba7cb54a60a3f708e5375f02bb3d0dde138f953d950b706f64a53a7204a499d33f", 0x7e}, {&(0x7f0000000200)="f706c06c6cc20e4a6b7725cf1f342002d18a548996b1e861d18f3614df9e271c3c7c986d6c6e1f1f50ccb2568be472242f537e89940d7c8caf34637a6b20b9ecffc32991948b31984b51b27fbc529040be76d1c2258c439fa998d6a2e329958484a800038a80d686b0ff0141d0d0bdb60d0f1ddf0592128255d5bf7ffa5e77e686e79dd4f5f15411e8353a27a3e085cd74161274d4514a3d7e35e84f7d976a37864415a611d27a0fd0072c", 0xab}, {&(0x7f00000002c0)="400e0282", 0x4}, {&(0x7f0000000400)="448a0851b111f49cd1ca7d2c3d630a3136f85aeb7f38019580251d6d61235ea7b78720048024964d2b277d232ba02d59c31d4f4400551c5c8c41c1d07b8febc58115c2822011a8e9f5985cff3ca616cbf52d14a299", 0x55}], 0x4, 0x0, 0x0, 0x402}, 0x5) 6.279302066s ago: executing program 4 (id=469): setrlimit(0x8, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) syz_open_pts() mknod(&(0x7f0000000200)='./file1\x00', 0x2000, 0x8052a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) setsid() openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) 5.253545444s ago: executing program 3 (id=470): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000000c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="032ac9323d9e00c8d038ce9e061f6cef3e1077dda782d6a8cc89dc382d8233c811f66a8210fa7d25c36d72b55e5e5972b07cbdcd20ac1d2818097af604", 0x3d}], 0x1) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) fcntl$lock(r3, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003}) socket$inet6(0x18, 0x1, 0x6) mquery(&(0x7f000098f000/0x1000)=nil, 0x1000, 0x0, 0x0, r2, 0xfffffffffffffff7) 5.231180257s ago: executing program 5 (id=471): ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000630, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, 0xffffffffffffffff, 0x0) ioctl$DIOCGETSTATES(0xffffffffffffffff, 0xc0104419, 0xffffffffffffffff) setuid(0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), 0x0) setuid(r1) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, r2, 0x0, 0x21, 0x81}, 0x20000000000, 0xfff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afed37082", &(0x7f0000000180)=0x5, 0x0, 0x27) 5.141848053s ago: executing program 5 (id=479): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f00000000c0)) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xf2) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) sysctl$vm(&(0x7f0000000040)={0x2, 0xb}, 0x2, &(0x7f0000000000)="79960000", &(0x7f0000000200)=0x4, 0x0, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x538, r1) setuid(0xffffffffffffffff) setrlimit(0x5, &(0x7f0000000140)={0x57e8, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 5.105752988s ago: executing program 4 (id=482): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x40005, 0x80000005, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x6, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x6, 0xfffffe01, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f7, 0x10}, {0x8, 0xf, 0x5, 0x8d}, {0xfffffffd, 0xe2b5, 0x40000003, 0x6}, {0x7, 0x2d1, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f4, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x88}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x1, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931", 0x11) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "febf000000140000000000700100", 0xffffffc0}, 0x1c) socket(0x11, 0x1, 0x0) r3 = openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) sysctl$vfs_nfs(&(0x7f0000001c00)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001cc0)="d55e5c", 0x3) ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x9, 0x7}, 0x18, '\x00', 0x2, {@any={'\x00', 0x0, 0x6, 0x9}, [0xfff7, 0x40], 0x4, 0x1, 0xbb6}, {@table={'./file0\x00', 0x0, 0x3, 0x80}, [0x38, 0x80], 0x0, 0x3, 0x2}, './file0\x00', './file0\x00', 0x2, 0xb12e}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x80000, "00000000000000000000000000000001", 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff3177f8ffff00200000004000000001", 0x10001}, 0x1c) sendto(r4, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@un=@file={0x0, 0x0, './file0/file0\x00'}, 0x10) r5 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d771020000004e2b1f0000000000", 0x10}], 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$TIOCSETA(r3, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) 5.08249278s ago: executing program 0 (id=485): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4ebfac6bbaf780d) (async) syz_open_pts() (async) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x1, 0x7fffffff, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x8, 0x5, 0xfffffffffffffff7, 0x100], [0x9, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80104000, 0xfffffffffffffffd, 0x0, 0x8, 0x48], [0x7, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x295dcbee, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xff9}, {0x1008, 0x0, 0x8, 0x3}, {0x8000, 0x400, 0x10, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x4}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x1fd, 0xc}], {0x0, 0x25, 0x1, 0x849}, {0x7, 0x40010, 0x4, 0x2}}}) (async) kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) ioctl$FIONREAD(r0, 0x800474c4, &(0x7f0000000080)) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) setgroups(0x0, 0x0) (async) r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) setuid(0xee01) r3 = socket(0x10, 0x8000, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff3177f8ffff00200000004000000001", 0x7}, 0x1c) (async) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x7bf, 0x8, 0xffffdf82, 0xffffff8c, "08ed957f0000000080ffff44ffff00ffe600", 0x4, 0x4}) (async) write(r4, &(0x7f0000000580)="9ca812d8e8208aab2546358c134cdfd305def0701d8080203e9fc5f58a8b195d67fb65b254295272582b552eeaf971864708a135a2e10841d3a5ed5a58461fa8945ad74583fbea00d345abb77105baf4a2897cc7155ae1203b727f", 0x5b) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) (async) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) (async) r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) lseek(r5, 0x7, 0x2) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)={{0x0, 0xfffffffffffffda9, 0x0, 0x64, 0x0}}, 0x38, 0x802) setuid(0xffffffffffffffff) (async) kill(0xffffffffffffffff, 0x13) unveil(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='c\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5409008a306f5a881be234b6", 0xc}], 0x1) 4.974295989s ago: executing program 4 (id=487): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000180)=0x8) r1 = socket(0x18, 0x1, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000806000f888806050000aaaaaaaaaabba2934c780f93e18b51194abeea0135ffff16ffffffaf64e4b5ab068d687de00e394d511088"]) sysctl$net_inet_icmp(&(0x7f00000000c0)={0x4, 0x2, 0x1, 0x7}, 0x4, &(0x7f00000001c0)="cb0df93c0766d1df994017d382aaa6e2ac2cfc2f4eea5a7867fa1b23cf92cfc8961622c951c39b246f2b3c0f4d1b94274d3a1b0f758b5e92da2e2d2ab2151f4c76d5b4d13e22b9f5580b38f1b121bfb934d9289c857621a8dee1c49bca78dce34994346fc35844af2c127a00274532d1414b57b1b0ad529fed54378e5f57c000b3f7daa05d03774e653cbb6e3b54f4f7dd5bf660c6999e42d88406c5c6b80892050062", &(0x7f0000000280)=0xa3, &(0x7f00000002c0)="1b5fffe1346431859988", 0xa) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x9, 0x2, 0x1, 0x2, "cd00220004000000000000000000000000008000", 0x40048003, 0x6}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf1155dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d00000000000000000000000000000000d9dda15e070b94f6689c71b46bae7c5f230fb2974a1b2f970c80cb33696e7b04021261dd42b88a190d5bce1ef2cf9cfdfb55d648fd39a9fdef393d221afa0ec25152ff14919b4d54ab717421b0b1041202dbade64cd9de91225fb5e5a8494afadafe95eddd586be04eab50f066bd4f9f501dd3eb2724a671863c0fe2f353dff444ff2e568e702f0522ac0004eb26485474114c3218103f9c3c6050537f7b1615936908231aba4633cec3df0bcb3ca1d883650f9491321109b6800f46474d089c22fe290ae7812b2508e264c8716e55094da82f9ea2425e2c", 0x4) setsockopt(r1, 0x4, 0x3c, &(0x7f0000000000)="4f99f99da7e830aa38803926cf52b6356f33d6b201e25fe5093184e69e439c3c2ce3515817e3d46c6228e871fcd1bf7ec8ef1825f3540d7c160141466907745043e5f07955401335968cdb52b287a56684df8f73635a", 0xa) 4.971143181s ago: executing program 5 (id=489): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x4, 0x0, 0x0, 0x1, 0x7, 0x0, 0x2, 0x100], [0x8, 0x5, 0x7f, 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, 0xb81], [0x8, 0x0, 0x8f, 0x0, 0x800000, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x0, 0xfff7fffe, 0x1000}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x6, 0x4}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0x8}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) r0 = kqueue() setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000000)=0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x5}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) writev(r1, &(0x7f0000000400)=[{0x0}], 0x1) kevent(r0, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) 4.969751264s ago: executing program 0 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) shmget(0x1, 0x1000, 0x147, &(0x7f0000fff000/0x1000)=nil) getrusage(0x0, &(0x7f0000000a80)) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x40, 0x6, 0x2a, 0x101}, {0x5, 0x2, 0xfe}, {0xd41e, 0x3, 0xe, 0x1}]}) mknod(0x0, 0x2000, 0x5900) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) poll(0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x9, 0x0, 0xf, 0x7, "7aef99d5ffa7279021179f11943512928ed61e54", 0x9, 0xfffffff9}) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10, 0xcb) mkfifoat(r3, &(0x7f00000001c0)='./file1/file0\x00', 0x100) unveil(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000000)='r\x00') semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000480)=""/107) sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') r4 = socket(0x18, 0x1, 0x0) getsockopt(r4, 0x29, 0x3d, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x54, 0xfe, 0x3f, 0x8}, {0x1, 0xaf, 0x5, 0x207}, {0x16, 0x24, 0xc, 0x9}]}) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3]) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') 4.860549778s ago: executing program 3 (id=493): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x2}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x40002}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x88) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) close(0x3) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 4.859906107s ago: executing program 4 (id=494): r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) (async, rerun: 64) ioctl$FIONREAD(r0, 0x80206916, &(0x7f00000001c0)) (rerun: 64) setitimer(0x2, &(0x7f0000000000)={{0x1000000, 0xb00}, {0xfffffffffffffffc}}, 0x0) 4.848313314s ago: executing program 4 (id=496): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x1}], 0x0, 0x0) close(r0) socket(0x18, 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1ff, 0x4e, 0x2100009, 0x6, 0x1, 0x6, 0x5d7227f9, 0x9, [{0x40000003, 0x10007, 0x4, 0x71000}, {0x6, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x4, 0x9}, {0x3, 0x4, 0x8000}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000000, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x8}, {0x2, 0x82, 0x7, 0x9}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0x8, 0xe}, {0x29a71717, 0x80, 0x1, 0xc377}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x10100a, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mquery(&(0x7f0000602000/0x4000)=nil, 0x4000, 0x62c5dee589abeff4, 0x0, r1, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) socket(0x24, 0x2, 0x0) 4.847213813s ago: executing program 6 (id=499): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) setreuid(0x0, 0xee01) kill(0xffffffffffffffff, 0x1e) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x400000000, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x5, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0x0, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x3, 0x40000000, 0x0, 0xffffffffffffffff, 0x872a, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xffffffffffffffff, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d0a}, {0x0, 0x2, 0x5, 0x10}, {0x0, 0x75d, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x4, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x400001, 0x200}, {0x8, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, 0x0, 0xfffa4961, 0x0) r2 = kqueue() gettimeofday(0x0, &(0x7f0000000580)) kevent(r2, 0x0, 0x8, 0x0, 0x15, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) getpeername(r0, &(0x7f0000000040)=@in, &(0x7f00000001c0)=0x10) ioctl$BIOCSRTIMEOUT(r0, 0xc0307006, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000280)="e854630471809e1e06175e041fbd314f9d5869e1e5470b0ff6b3c2c05ffac2982edba76d49dfe4a3341f57d437d5c303b5c2b8eb8f326959eee827dac329920f341109d8d44fcc01a627c51a6648091acd7be291489bb27391a23474ad60f50ae34210ddfe2d67b6387b0b8b6fe9cd0eebe1cadf09c3d1790c35297c4f3c45c41c0db61d92c8c8e8ad70c4eb00e56c288a8cb7019e51616013b58d877c980fb9a4f8636428cb65258b2e6ad4c197e9093a1b1a510c9d5c059023adad3dd836a0396350c84755b87ef12814969cf7964614746e0d260acc1e9bcb84f82cb8be0340d5f2ba6cad364090c7", 0xea}], 0x1, 0x0) ioctl$DIOCSETTIMEOUT(0xffffffffffffffff, 0xc008441d, &(0x7f0000000000)={0x13, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x41}, 0x2, 0x0, 0x0, 0x0, 0x0) 2.72278196s ago: executing program 0 (id=501): r0 = socket(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x7f687d54, 0x35, &(0x7f0000000040)="03000000", 0x4) 2.681412855s ago: executing program 5 (id=502): setuid(0xee01) chmod(&(0x7f0000000040)='.\x00', 0x35e) 2.679425245s ago: executing program 3 (id=504): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x2c, 0x0, 0x7, 0x1}, {0xe, 0x18, 0x8, 0x7}]}) syz_emit_ethernet(0x32, &(0x7f0000000100)={@random="b905f0ffffff", @empty, [], {@arp={0x806, @generic={0xf, 0x7007, 0x6, 0x0, 0x1, @random="a4b6e15a1d98", "", @local, "761728464e60a2d6e26e14117e23a02c"}}}}) (async) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./bus\x00', 0x567, 0x0, 0xfffffea5}) 2.66979685s ago: executing program 5 (id=505): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) preadv(r0, &(0x7f0000001940)=[{&(0x7f0000000040)=""/163, 0xa3}, {&(0x7f0000000000)=""/27, 0x2a}, {&(0x7f0000001980)=""/4095}, {&(0x7f0000001840)=""/209, 0xd1}], 0x1000000000000224, 0xffffffffffff0000) unveil(0x0, &(0x7f00000000c0)='c\x00') r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) writev(r1, &(0x7f0000001200)=[{&(0x7f00000000c0)="c2f9ed657bd19344f0c0e9e71f2e1aa72d6ff31f27f68a18341d7ddd517ddca00def3f0a1d6f1a5588b9b7228eeb8eed7de70856ff489c34164168d2d4af62fa7c9ea0167cc061161cb23751a57c376f04399324f6e078908f71c99c350cb21b03c4f69f5c09a979bc3a1d842e0313b2", 0x70}], 0x1) syz_open_pts() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1e, 0x3, 0x0) ioctl$FIONREAD(r2, 0x808c694e, &(0x7f00000001c0)) r3 = socket(0x2, 0x1001, 0x0) setsockopt(r3, 0x0, 0x6, &(0x7f0000000140)='!\x00\x00\x00', 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x53}, 0x2, 0xfffffffffffffffe, &(0x7f0000000080)=0xffffff0f, 0x0, 0x0) 2.628033909s ago: executing program 4 (id=507): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4117, 0x1015}, {&(0x7f0000002540)=""/4118, 0x1016}], 0x2) ioctl$PCIOCREAD(r2, 0xc0107002, &(0x7f0000000340)={{0x4, 0x40, 0xeb}, 0x7, 0x3, 0xe23}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x38413552, 0x1, [0x0, 0x0, 0x0], [0x0, 0x100, 0x7, 0x3], [0xfffffffe, 0xa3, 0xfffffff8, 0x2], [0x0, 0x1ff, 0x1000, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000400)={r3}) recvmmsg(r1, &(0x7f0000001380)={{&(0x7f0000000040)=@in, 0x10, &(0x7f0000001300)=[{&(0x7f0000001980)=""/4117, 0x1012}], 0x1, 0x0}, 0x9}, 0xffffffffffffff13, 0x3042, 0x0) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe) r4 = setsid() r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x1, 0x9, 0x3, 0x7}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000000)=@abs={0x8, 0x1, 0x0, 0x1}, 0x8, &(0x7f0000000080), 0x0, &(0x7f0000000240)=[@cred={0x18, 0xffff, 0x0, r4, r6, r7}], 0x18, 0x40d}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) readv(r2, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4117, 0x1015}, {&(0x7f0000002540)=""/4118, 0x1016}], 0x2) (async) ioctl$PCIOCREAD(r2, 0xc0107002, &(0x7f0000000340)={{0x4, 0x40, 0xeb}, 0x7, 0x3, 0xe23}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x38413552, 0x1, [], [0x0, 0x100, 0x7, 0x3], [0xfffffffe, 0xa3, 0xfffffff8, 0x2], [0x0, 0x1ff, 0x1000, 0xfffffffffffffffd]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000400)={r3}) (async) recvmmsg(r1, &(0x7f0000001380)={{&(0x7f0000000040)=@in, 0x10, &(0x7f0000001300)=[{&(0x7f0000001980)=""/4117, 0x1012}], 0x1, 0x0}, 0x9}, 0xffffffffffffff13, 0x3042, 0x0) (async) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe) (async) setsid() (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x1, 0x9, 0x3, 0x7}]}) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000000)=@abs={0x8, 0x1, 0x0, 0x1}, 0x8, &(0x7f0000000080), 0x0, &(0x7f0000000240)=[@cred={0x18, 0xffff, 0x0, r4, r6, r7}], 0x18, 0x40d}, 0x8) (async) 2.584574251s ago: executing program 7 (id=509): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) socket$inet(0x18, 0x3, 0x102) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x24) setuid(0xffffffffffffffff) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, 0x0) ioctl$BIOCSETF(r1, 0x80104267, 0x0) syz_emit_ethernet(0x307, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x6c, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000000c, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}) socket$inet(0x18, 0x3, 0x102) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) 2.56368841s ago: executing program 1 (id=510): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000000c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="032ac9323d9e00c8d038ce9e061f6cef3e1077dda782d6a8cc89dc382d8233c811f66a8210fa7d25c36d72b55e5e5972b07cbdcd20ac1d2818097af604", 0x3d}], 0x1) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) fcntl$lock(r3, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003}) socket$inet6(0x18, 0x1, 0x6) mquery(&(0x7f000098f000/0x1000)=nil, 0x1000, 0x0, 0x0, r2, 0xfffffffffffffff7) 2.563345904s ago: executing program 7 (id=511): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f00000000c0)={0x4, './file0\x00', './file0\x00'}) r1 = socket(0x18, 0x1, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000040)={0x0}) r3 = getthrid() getpgid(r3) setsockopt(r1, 0x1000000029, 0x3c, &(0x7f0000000040), 0x0) 2.562766789s ago: executing program 7 (id=512): r0 = syz_open_pts() sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x2, 0x0, 0x0, &(0x7f0000000280), 0x0) close(r0) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, &(0x7f0000000040)="7a30ee22", &(0x7f00000000c0)=0x4, &(0x7f0000000100)="debcb641", 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_metric}) syz_open_pts() writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="2f048ddda4f6485a1cc83b0f0fa565590ac3", 0x12}], 0x1) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x3, 0x3, 0x9, 0x3, "25b4393aa6c2cb0ed450622d96358bda2def4ce0", 0x6, 0x4279}) 2.561238067s ago: executing program 1 (id=513): r0 = kqueue() kevent(r0, &(0x7f0000000740)=[{{}, 0xfffffffffffffff9, 0xc7, 0x1, 0x200000000000000, 0x7ff}], 0x200020, 0x0, 0x2, 0x0) 2.460523205s ago: executing program 0 (id=514): openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0x65, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x400, 0x80000005, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x3, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x6, 0x9}, {0x4, 0xffff7e76, 0xd1b, 0x100}, {0x18e, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x7494, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5, 0x4000}, {0x8000, 0x21, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x1c0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0x8, 0x0, 0x3, 0x400000000009, 0x0, 0x8000000000000001}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000303c03cb697a653e336f000000500000000000ff020000000000000000000000000001"]) 2.459428222s ago: executing program 1 (id=515): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x2, './file1\x00', [{[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x9, 0x40], 0x4000, 0x2}, {[@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast1], [0x46], 0x4}], {{0x246, 0x48, 0xfa, 0x7ff}, 0x5, 0x409, 0xfff00000, 0xbe46, 0x8, 0x17, 0x16}, {{0x0, 0x7, 0x1, 0x5}, 0x8001, 0xc86, 0x1000a, 0x2, 0x800, 0xf0}, @v4=@multicast1, 0x4, 0xb, 0x2, 0xf23b, 0x3, [[0xfffffff7, 0x27], [0x2, 0x34c]], [[0xfc000002, 0x6], [0x9]], 0x9, [0xf, 0x79], 0x1, 0x18, 0x1, 0x1, 0x0, 0x40, 0x1, 0x83, 0x5, 0x8, 0x1, 0xce57}}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40b}, 0x604) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, "210d0000000200000006000000000200007fffff", 0x7effdffe}) 2.456748924s ago: executing program 7 (id=516): openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0xa, 0xf3, 0xffffdfc1, 0xffffffff, "25589519020000007fd8f90d6400ffffbfff6aa0", 0x3, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000003540)=[{&(0x7f00000012c0)=""/238, 0xee}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x2, 0x3, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x40, 0x7, 0x3, 0x4}, {0x20, 0xf4, 0xbf}, {0x6, 0x7d, 0x9b, 0xfffff802}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) socket$inet6(0x18, 0x3, 0x6) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x22, 0xffffffffffffffff, &(0x7f0000000040)) 2.448104643s ago: executing program 1 (id=517): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1003, 0x4c, 0x2100009, 0x6, 0x1, 0x6, 0x5d7227f9, 0x10, [{0x3, 0x10003, 0x1000004, 0x71000}, {0x8, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x40000008}, {0x8002, 0x82, 0x7, 0x9}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0x8, 0x6}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x406, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r2 = dup(r1) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0xa, 0xfd}, &(0x7f0000001040), 0x428, 0x0, 0x6, 0x4, 0x9, 0x8001, 0x12, 0x8}) 2.350923094s ago: executing program 7 (id=519): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0xfffffffd, 0x800bd3d, 0xf778, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) r1 = socket(0x18, 0x1, 0x0) getsockname(r1, 0x0, 0x0) 1.277309102s ago: executing program 7 (id=521): mknod(0x0, 0x2000, 0x1e5f) r0 = open(0x0, 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r1, 0x8060693f, &(0x7f00000001c0)) 1.240711533s ago: executing program 6 (id=522): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r4, r4, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{r3, r4, r3, r4, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETZCNT(r0, 0x0, 0x7, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r5 = syz_open_pts() close(r5) syz_open_pts() r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0) ioctl$DIOCRDELADDRS(r6, 0xc4504444, &(0x7f00000019c0)={{'./file1\x00', './file1/file0\x00', 0x5f, 0x7}, 0x0, 0x34, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x1}) ioctl$FIOASYNC(r5, 0x80047470, &(0x7f0000000000)=0x2) accept$unix(r2, 0x0, &(0x7f0000000100)) ioctl$TIOCSETA(r5, 0x80047460, &(0x7f0000000a40)={0xb53, 0x2, 0x6, 0x8, "b6b287e92ddd995fc0bf2d0694f2853fb9d336d9", 0x8}) r7 = socket(0x1, 0x4001, 0x0) connect$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0xfffffff8, "424e4131055663abaa5e8101ba2d379f", 0xd20}, 0x1c) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000440)=0x5, 0x4) 1.240425822s ago: executing program 6 (id=523): mknod(&(0x7f0000000200)='./bus\x00', 0x2000, 0x412dff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) select(0x40, &(0x7f00000000c0)={0x9, 0x2, 0x3, 0x9, 0xbd8, 0x4, 0x80000001, 0x4}, 0x0, 0x0, 0x0) r1 = getpgrp() getpgid(r1) close(r0) 1.240099124s ago: executing program 6 (id=524): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open$dir(&(0x7f0000000080)='./bus\x00', 0x40, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) close(0x3) r1 = open(&(0x7f0000000180)='./file0\x00', 0x18080, 0x83) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x9) 1.239300791s ago: executing program 3 (id=525): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) futimens(r0, &(0x7f0000000040)=[{0x1, 0xfffffffffffffffe}, {0x7fff, 0x8}]) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x0) r2 = socket(0x18, 0x3, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x67, &(0x7f0000000000)={0x12, 0x1, 0x80}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000080)={0xfffffffffffffe09, 0x0}) (async) r4 = syz_open_pts() (async, rerun: 32) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000800), 0x10000, 0x0) (rerun: 32) ioctl$BIOCLOCK(r5, 0x20004276) (async) ioctl$BIOCGBLEN(r5, 0x40047477, 0x0) (async) ppoll(&(0x7f0000000440)=[{r0, 0x80}, {r2, 0x100}, {r1, 0x100}], 0x3, &(0x7f0000000480)={0x7, 0x8}, &(0x7f00000004c0)={0x800}) recvmmsg(r0, &(0x7f00000003c0)={{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000100)=""/77, 0x4d}, {&(0x7f0000000180)=""/227, 0xe3}], 0x3, &(0x7f00000002c0)=""/214, 0xd6}, 0x7}, 0x38, 0x2040, &(0x7f0000000400)={0x6}) poll(&(0x7f0000000080)=[{r2, 0x80}, {r1, 0x40}, {r4, 0x8}, {r1, 0x4}, {r1, 0x80}, {r0, 0x40}, {r0, 0x20}, {r1, 0x20}], 0x8, 0x3) 1.221095929s ago: executing program 1 (id=526): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x40005, 0x80000005, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x6, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x6, 0xfffffe01, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f7, 0x10}, {0x8, 0xf, 0x5, 0x8d}, {0xfffffffd, 0xe2b5, 0x40000003, 0x6}, {0x7, 0x2d1, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f4, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x88}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x1, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931", 0x11) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "febf000000140000000000700100", 0xffffffc0}, 0x1c) socket(0x11, 0x1, 0x0) r3 = openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) sysctl$vfs_nfs(&(0x7f0000001c00)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001cc0)="d55e5c17", 0x4) ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x80000, "00000000000000000000000000000001", 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff3177f8ffff00200000004000000001", 0x10001}, 0x1c) sendto(r4, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@un=@file={0x0, 0x0, './file0/file0\x00'}, 0x10) r5 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d771020000004e2b1f0000000000", 0x10}], 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$TIOCSETA(r3, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) 1.158886868s ago: executing program 6 (id=527): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000280)=0x2, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x4d, 0x0, 0x2, 0xc5}, {0x28, 0x1e, 0x23, 0x1001}, {0x9b1e, 0x7, 0xff, 0x200000}, {0xe, 0x1f, 0x0, 0x8}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') setuid(0xee01) r2 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000280)={0x1c, 0x18, 0x1, 0x7ff, "0000000000000000066600", 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet6(r2, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x5, "fe803c4000000000000000000000fdff"}, 0x1c) r3 = socket(0x18, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff3177f8ffff00200000004000000001", 0x7}, 0x1c) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) setrlimit(0x7, &(0x7f0000000100)={0x0, 0x9}) 1.158382357s ago: executing program 6 (id=528): r0 = kqueue() r1 = open(&(0x7f0000002600)='./file0\x00', 0x78e, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0xe26c, 0x3, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x4, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f03, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x61, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0x101, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x9, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0xfffffffd, 0xfffffffe, 0x20000080}, {0x3, 0x6000, 0x6, 0x2}, {0x0, 0x2000002, 0x3, 0x8}, {0x0, 0x401, 0x6, 0x3}, {0x4, 0x0, 0xfffffffc, 0xffffffff}, {0x2, 0x100, 0x31, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x1ff, 0x1002}}}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) kevent(r2, 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0) kevent(r0, &(0x7f0000000000), 0x96, 0x0, 0xfffa4961, 0x0) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) kevent(r2, &(0x7f0000000080)=[{{r2}, 0xfffffffffffffffb, 0x21, 0x2, 0x8001, 0x401}, {{r3}, 0xffffffffffffffff, 0x8, 0x20000000, 0x80000000, 0x69}, {{r0}, 0xffffffffffffffff, 0x85, 0x80, 0x4, 0xffffffffffffffff}, {{r0}, 0xfffffffffffffff6, 0xcc, 0x4, 0x5, 0x217}, {{r0}, 0xfffffffffffffffa, 0x8, 0x4, 0x1, 0x4}, {{r1}, 0xfffffffffffffff8, 0x3c, 0x2, 0x100, 0x81}, {{r1}, 0xfffffffffffffff7, 0x20, 0x1, 0x6, 0x80000001}, {{r4}, 0xfffffffffffffffc, 0x40, 0x20, 0xd0, 0x4}], 0x7, &(0x7f0000000180)=[{{r2}, 0xfffffffffffffffc, 0x0, 0x20000000, 0x6, 0x6}, {{r2}, 0xfffffffffffffffa, 0x20, 0x8000001d, 0x40, 0x7fff}, {{r0}, 0xfffffffffffffff6, 0x27, 0x10, 0x4, 0x8000000000000001}], 0x9, &(0x7f0000000200)={0x6, 0x1}) close(0x3) 1.132334408s ago: executing program 0 (id=529): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) socket$inet(0x18, 0x3, 0x102) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x24) setuid(0xffffffffffffffff) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, 0x0) ioctl$BIOCSETF(r1, 0x80104267, 0x0) syz_emit_ethernet(0x307, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x6c, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000000c, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}) socket$inet(0x18, 0x3, 0x102) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) 1.131992151s ago: executing program 2 (id=530): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x44, 0x12, 0x5, 0x1}]}) r0 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x2}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x2}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 1.131229007s ago: executing program 1 (id=531): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) futimes(r0, &(0x7f0000000000)=[{0x6, 0x8}, {0x8, 0x2}]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000005c0)=0xc) setreuid(r2, r2) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x2b, &(0x7f0000000000)="5ab7776a", 0x4) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000002c0)={0x0, &(0x7f0000000080)}) mknod(&(0x7f0000000300)='./file0\x00', 0x6000, 0x4080ede) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x2) unveil(0x0, 0x0) unveil(0x0, &(0x7f0000000200)='x\x00') mlockall(0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$vm(&(0x7f0000000000)={0x2, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) close(r0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @random="00e0300eaaf8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x39, 0x20, 0xfffd, 0x0, 0x7, 0x1, 0x0, @broadcast}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0x1000}}}}}) 1.0698799s ago: executing program 2 (id=532): syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @random="ca0f00", [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x12, 0x24, 0x66, 0xf, 0xff, 0x2, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}, {[@generic={0x7, 0x3, 'Z'}, @timestamp={0x44, 0xc, 0x8, 0x1, 0xc, [{[@broadcast], 0x4000000}]}]}}}}}}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f000021f000/0x1000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) (async) mknod(&(0x7f0000000580)='./bus\x00', 0x2000, 0xd02) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./bus\x00', 0x567, 0x0, 0xfffffea5}) (async) rename(&(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40)='./file0\x00') 1.065565827s ago: executing program 0 (id=533): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x37, 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x7, 0x6e}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="2f048ddda4f6485a1cc83b0f0fa565590ac3", 0x12}], 0x1) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100) fcntl$lock(r2, 0x9, 0x0) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) lseek(r3, 0x56a7, 0x1) close(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000080)={0x3, 0x3, 0x9, 0x3, "25b4393aa6c2cb0ed450622d96358bda2def4ce0", 0x6, 0x4279}) 1.065025491s ago: executing program 2 (id=534): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f00000000c0)) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xf2) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) sysctl$vm(&(0x7f0000000040)={0x2, 0xb}, 0x2, &(0x7f0000000000)="79960000", &(0x7f0000000200)=0x4, 0x0, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x538, 0x0) setuid(0xffffffffffffffff) setrlimit(0x5, &(0x7f0000000140)={0x57e8, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.064574045s ago: executing program 2 (id=535): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x2000, 0x3ffe) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000005f40)={{'./file0\x00', './file0\x00', 0x18, 0x2}, 0x0, 0xffffffff, 0x0, 0x4, 0x7, 0xfe, 0x7, 0x1a, 0x5}) socket(0x800000018, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0x8000000000000001, 0xffffffffffffffff, 0x200000000002, 0xd, 0x1000, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x3, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0xffff, 0x0, 0x0, 0x7d06}, {0x0, 0x22, 0x5}, {0x4, 0x3, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0x3}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) open$dir(&(0x7f0000000a80)='./file0\x00', 0x2, 0x0) 1.037470578s ago: executing program 2 (id=536): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000503000004000000000105000000331c01040100008000000000ff0100007ae302fffe4e3039d2d236acf20b7810be38164991f7c8cf5f881029ffffff7fda0000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42118000000720fc18bfbb670c1f5a8b67114d66e2ec589040000000000800078e36b361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa", 0xb1, 0x804, 0x0, 0x39) ftruncate(r0, 0x2000000000020003) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$BIOCGBLEN(0xffffffffffffffff, 0x40044266, &(0x7f0000000000)) r2 = socket(0x1, 0x3, 0x0) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r3, 0x8020699d, &(0x7f0000000100)) socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206916, &(0x7f00000001c0)) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) r6 = kqueue() openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) syz_open_pts() r7 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0xf, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x0, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x206, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x0, 0x2, 0xfffffffb}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETWF(r8, 0x80104277, &(0x7f0000000140)={0x0, 0x0}) poll(&(0x7f0000000000), 0x35, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a", 0x0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{}, {r6, 0x4}], 0x2, 0x3) ioctl$TIOCFLUSH(r7, 0x80047410, 0x0) fcntl$getflags(r5, 0x3) 1.036889911s ago: executing program 2 (id=537): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x138, &(0x7f0000000100)=[{{}, 0xfffffffffffffff9, 0x1d, 0x0, 0x8100000000000000}], 0xffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) listen(r1, 0x60005) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="b00282009078fffc080a000008ed00000009"]) poll(&(0x7f0000000000)=[{r0, 0x4}, {r0, 0x1}], 0x2, 0x4) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="91287eaca80000000000000000000000000000f3e86e524d9aaaa5977c276b65b1", &(0x7f0000000000)=0x21, 0x0, 0x0) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000740)={0xfffffffe, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x7, 0x2f01, 0x96, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x4000004000fd], [0xfffffffffffffffe, 0x80000000, 0xfffffffffffffffd, 0x525, 0x5e, 0x750c, 0x80000000000001fe, 0x9, 0x0, 0x9], [0x8000, 0x8000, 0x3ffffffe, 0xfffffffffffffffe, 0xb, 0x11004, 0x8001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x3, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x1, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x10005, 0xffffffffffffffff}, {0x0, 0x200, 0x83, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x8, 0x7780}], {0x1, 0x5, 0x47, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) setrlimit(0x8, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) syz_open_pts() r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x1, 0x5}, {0x46fc, 0xb}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0}) socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) setreuid(0xee00, 0x0) 0s ago: executing program 5 (id=538): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) setreuid(0x0, 0xee01) kill(0xffffffffffffffff, 0x1e) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x400000000, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x5, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0x0, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x3, 0x40000000, 0x0, 0xffffffffffffffff, 0x872a, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xffffffffffffffff, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d0a}, {0x0, 0x2, 0x5, 0x10}, {0x0, 0x75d, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x4, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x400001, 0x200}, {0x8, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, 0x0, 0xfffa4961, 0x0) r2 = kqueue() gettimeofday(0x0, &(0x7f0000000580)) kevent(r2, 0x0, 0x8, 0x0, 0x15, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) getpeername(r0, &(0x7f0000000040)=@in, &(0x7f00000001c0)=0x10) ioctl$BIOCSRTIMEOUT(r0, 0xc0307006, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000280)="e854630471809e1e06175e041fbd314f9d5869e1e5470b0ff6b3c2c05ffac2982edba76d49dfe4a3341f57d437d5c303b5c2b8eb8f326959eee827dac329920f341109d8d44fcc01a627c51a6648091acd7be291489bb27391a23474ad60f50ae34210ddfe2d67b6387b0b8b6fe9cd0eebe1cadf09c3d1790c35297c4f3c45c41c0db61d92c8c8e8ad70c4eb00e56c288a8cb7019e51616013b58d877c980fb9a4f8636428cb65258b2e6ad4c197e9093a1b1a510c9d5c059023adad3dd836a0396350c84755b87ef12814969cf7964614746e0d260acc1e9bcb84f82cb8be0340d5f2ba6cad364090c7", 0xea}], 0x1, 0x0) ioctl$DIOCSETTIMEOUT(0xffffffffffffffff, 0xc008441d, &(0x7f0000000000)={0x13, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x41}, 0x2, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error Connection to 10.128.0.32 closed by remote host. pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-8.us-central1-a.c.syzkaller.internal) (tty00) login: init: getty repeating too quickly on port /dev/tty00, sleeping ktrace write failed, errno 27, tracing stopped pckbd_enable: command error ktrace write failed, errno 27, tracing stopped pckbd_enable: command error pty: table is full ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error init: getty repeating too quickly on port /dev/tty00, sleeping uvn_flush: obj=0xfffff3006c3666a0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error ktrace write failed, errno 27, tracing stopped init: getty repeating too quickly on port /dev/tty00, sleeping pckbd_enable: command error pty: table is full ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error pckbd_enable: command error ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-8.us-central1-a.c.syzkaller.internal) (tty00) u login: vm_fault(0xfffff3006d463a28, 0x70, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff8197b678 cs 8 rflags 10246 cr2 70 cpl 0 rsp ffff8000318bd100 gsbase 0xffffffff83957ff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff8197b678 Starting stack trace... panic(ffffffff834b6d89) at panic+0x1ba kerntrap(ffff8000318bd050) at kerntrap+0x2fb alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff80002a77d4d8,fffff3006db94958,ffff8000318bd230) at dovutimens+0x368 sys_futimes(ffff80002a77d4d8,ffff8000318bd370,ffff8000318bd2c0) at sys_futimes+0x208 syscall(ffff8000318bd370) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x83c783f9020, count: 250 End of stack trace. dump to dev 4,1 not possible rebooting... SeaBIOS (version 1.8.2-google) Total RAM Size = 0x0000000080000000 = 2048 MiB CPUs found: 2 Max CPUs supported: 2 SeaBIOS (version 1.8.2-google) Machine UUID 76582f3e-a63b-2822-d4cd-02c674c1a7ff found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2600: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Sending Seabios boot VM event. Booting from Hard Disk 0...