last executing test programs:

1.464176454s ago: executing program 6 (id=1336):
mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x800, 0x1f2ee1f15fe0ed07)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x3ff, 0x16, 0x1, 0x5fe, 0x80000004, 0x80008003, 0xf0e4, 0x10, [{0x200006, 0x5, 0x4, 0x71002}, {0x10000, 0x8, 0x8, 0x8001}, {0x7, 0x0, 0x20000003, 0x3b}, {0x8000001, 0x80c, 0x100005}, {0x4, 0x4, 0x22850, 0x3}, {0x2, 0x0, 0xfffffffe, 0x7}, {0xa1, 0xf7, 0x9, 0x2000006d}, {0x10a, 0x1803, 0x14, 0x7}, {0x1, 0x3, 0x5, 0x8683}, {0x0, 0x7fff, 0x40d1b, 0x80000088}, {0x1cd, 0x4, 0x1003, 0x6}, {0x9, 0xb, 0x1000006, 0x2}, {0x400, 0x4, 0x6, 0x4}, {0x29a71717, 0xfffefffe, 0x0, 0x6}, {0x10000f, 0x0, 0x3, 0x7ffd}, {0x0, 0x1, 0x0, 0x4}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0})
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4}], 0x1, 0x5)

1.308150525s ago: executing program 6 (id=1346):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f00001d1000/0x2000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil, 0x7}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f000021f000/0x1000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe, 0x3, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x7d2cba93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]})
sysctl$net_inet_carp(0x0, 0x0, &(0x7f0000000080)="fdb80f0b3611e89cf7a1d8eb6590379b30ceefdfc0", 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)

1.086052566s ago: executing program 7 (id=1367):
r0 = socket(0x2, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x9, 0x5, 0x9, 0xbc, "6ccbf38ef91f5dd24d28855d9c51383db613aa3c", 0x3, 0xfffffffa})
read(r3, &(0x7f00000001c0)=""/184, 0xb8)
closefrom(r1)

1.085861536s ago: executing program 6 (id=1368):
mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x0)
setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x18c)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
setgroups(0x0, 0x0)
setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f})

1.08325337s ago: executing program 0 (id=1369):
syz_open_pts()
syz_open_pts()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x3, 0x80000001, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x4, 0x7, 0xdf60, 0x0, 0x0, 0x2f03, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x8dc, 0xfffffffffffffffd, 0x1ffffffd, 0x5e, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0xfe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x1, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x3}, {0x4, 0x0, 0xfffffffe, 0x20000080}, {0x3, 0x6000, 0x6, 0x1fd}, {0x0, 0x2000002, 0x3, 0x8}, {0x686, 0x401, 0x3, 0x1000}, {}, {0x2, 0x100, 0x31, 0x8001}], {0x0, 0x5, 0x5, 0x1}, {0xfffe, 0x80000000, 0x6d5, 0x1002}}})
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
syz_open_pts()
kevent(r0, 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0)

1.041496651s ago: executing program 1 (id=1370):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0xfffffffd, 0x800bd3d, 0xf778, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0)

959.054218ms ago: executing program 3 (id=1375):
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0xfffffffe)
rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

958.647594ms ago: executing program 7 (id=1377):
socket(0x18, 0x2, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xff, 0x0, {[0xfffefbfffffffff6, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x10002, 0x4, 0x5, 0xffffffffffffffff, 0x4, 0x8000000, 0xa8, 0x2, 0x3], [0x1, 0x80000001, 0xfffffffffffffffb, 0x2, 0x100, 0x7b97, 0x1fe, 0x2000404, 0x1], [0x100000001, 0x2, 0x40000000, 0x4, 0xffffffffffffffff, 0x200000011003, 0xfffffffffffffffe], [0x100, 0xfffffffffffffffd, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x2, 0x0, 0x7d06}, {0xfffc, 0x0, 0x5, 0x3}, {0x8, 0x10000, 0x5bea, 0x814}, {0x3, 0x5, 0x7, 0x80000001}, {0xd, 0xfffffffe, 0x0, 0xa000000}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0x20000, 0x4, 0x9}, {0x0, 0x965, 0x0, 0x4}], {0x2000, 0x1000001, 0x10003, 0x3}, {0x0, 0x9, 0x3, 0x8000000000000002}}})
r0 = kqueue()
kevent(r0, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0)
kevent(r0, &(0x7f0000000040), 0x3ff, 0x0, 0x8, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000040), 0x10100, &(0x7f00000001c0), 0x642705d8, 0x0)

958.509479ms ago: executing program 1 (id=1378):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0xfffffff8, 0x6, 0xfffff966, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x2})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1)

824.261309ms ago: executing program 5 (id=1379):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3})
r2 = socket(0x1, 0x8002, 0x0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
closefrom(r3)
execve(0x0, 0x0, 0x0)

801.369274ms ago: executing program 0 (id=1380):
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140)
open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
r1 = getpid()
ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r1)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0)
ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})

761.672397ms ago: executing program 1 (id=1381):
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)

761.403623ms ago: executing program 0 (id=1382):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000001800)={&(0x7f0000000040)='./file0\x00', r0})
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x1c)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x4, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0x101, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x1, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x20000080}, {0x3, 0x5, 0x6, 0x2}, {0x0, 0x2000002, 0x3, 0x8}, {0x0, 0x401, 0x3, 0x1000}, {}, {0x2, 0x100, 0x31, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x1002}}})
r1 = kqueue()
kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0)
kevent(r1, 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0)

722.170877ms ago: executing program 2 (id=1383):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c6)
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd})
r1 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1)
setuid(0xffffffffffffffff)
poll(0x0, 0x0, 0x0)
futimes(r0, &(0x7f0000000040)=[{0xffffffffffffffff, 0x5b0}, {0x6, 0x8}])

701.863516ms ago: executing program 2 (id=1384):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}, {0x0}], 0x2)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
rename(&(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
unveil(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='r\x00')
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

657.395803ms ago: executing program 3 (id=1385):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0xbed, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000010, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2000002}, {0x0, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x2, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x5, 0x8d}, {0xfffffffd, 0xe2b5, 0x40000003, 0x2}, {0x4, 0x2d1, 0x80410401, 0x1fe}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1012, 0x25, 0x50, 0x2d0e}, {0x3, 0x4f6, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0x4, 0x7}, {0x1, 0x800bd3d, 0xf778, 0xc}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0x80000000, 0xfffffffa, 0x1000, 0x0, "080000000000000000010000080000000f1e0400", 0xfffffffe, 0x5})

657.198609ms ago: executing program 1 (id=1386):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x40}, {0xfffffff3, 0xfffffffb, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x7, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x4020002, 0x8, 0x8, 0x109d7}, {0x9, 0xdf61, 0x200004f8, 0x10}, {0x3, 0x11, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0xa}, {0x4, 0x8a, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0x1, 0x2, 0xa, 0x408}, {0x29a7171a, 0x8, 0x3, 0x2579}, {0x8000, 0xf8f, 0x8}, {0x10000, 0x800bd3d, 0xf779, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b2909fffffffffffeff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0)

657.066017ms ago: executing program 2 (id=1387):
mknod(0x0, 0x2000, 0x1e60)
r0 = open(0x0, 0x200, 0x4c)
socket(0x18, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
r1 = socket$inet(0x18, 0x3, 0x102)
getsockopt$sock_int(r1, 0xffff, 0x1023, 0x0, 0x0)

656.962689ms ago: executing program 2 (id=1388):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0x7fffffff, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x80, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0xd, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x5}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x5, 0x80000000}, {0xfffffffd, 0xe2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x927c, 0x9}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f6, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
r1 = socket$inet(0x2, 0x3, 0x5)
getsockname(r1, 0x0, &(0x7f0000000780))

656.812628ms ago: executing program 5 (id=1389):
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x79eb800, 0x2100007, 0x6, 0x80000001, 0xfffffff8, 0x10001, 0x10, [{0x1000003, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0x49b}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0xf1f4, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x3, 0x99}, {0xce1, 0x401, 0x0, 0x6d}, {0xfffffff8, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x4003}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0xfffffff2}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x7, 0x9}, {0x8000, 0x1, 0x101002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
setsid()
setsid()

628.204246ms ago: executing program 0 (id=1391):
ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f0000000000)=0x3c4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
r1 = dup2(r0, r0)
sendmmsg(r1, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8)

628.045881ms ago: executing program 4 (id=1392):
r0 = kqueue()
kevent(r0, 0x0, 0x7fffffff, 0x0, 0x3ff, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x802, 0xffffffffffffffd, 0x1, 0xc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1], [0x63, 0x5, 0x4, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0xfffffffffffffff8], [0x7fffffffffffffff, 0x8, 0x0, 0x0, 0x9], [0xdb9d, 0x0, 0x0, 0x165, 0x0, 0xb], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x4}, {0x1000, 0xa, 0x0, 0x1}, {0x0, 0x1000, 0xfffd, 0x1}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x9, 0x5, 0x0, 0x1}, {0x0, 0x0, 0xaa, 0xfffffffffffffff9}, {0x0, 0xfffffff5, 0xc00000}], {0xffeb, 0xfffffffd, 0x20000003, 0xf5a752c}, {0x0, 0x6, 0x10000000}}})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c6)
setrlimit(0x1, 0x0)
getpid()
ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000280)={0x6, 0xa525, 0x10, 0x127492, "0849a2ba6300000058302a2f0e83050095ea0868", 0x20004118, 0x6})

590.197628ms ago: executing program 0 (id=1393):
chmod(&(0x7f0000000040)='.\x00', 0x35e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
fchdir(r0)
unveil(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='c\x00')

570.128772ms ago: executing program 0 (id=1394):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfff, 0x4e, 0x2100009, 0x6, 0x1, 0x6, 0x5d7227f9, 0x10, [{0x40000003, 0x10007, 0x4, 0x71000}, {0x6, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x7, 0x800, 0x8000}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000000, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x8}, {0x2, 0x82, 0x7, 0x9}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0x8, 0xe}, {0x29a71717, 0x80, 0x1, 0xc377}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000000)=0xd)

569.879053ms ago: executing program 6 (id=1395):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BIOCPROMISC(r1, 0x20004269)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})

569.613423ms ago: executing program 4 (id=1396):
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000180)=0xa1, 0x0, 0x0)
sysctl$vm_swapencrypt(&(0x7f00000001c0), 0x3, &(0x7f0000000200)="db9872e6442cda7443b3", &(0x7f0000000240)=0xa, &(0x7f0000000440)="cef6fc7089d1da01c2199f81cc645e6713d55221d36b7931ca4d317184b756c428728738138f7002baa3c6d550649cf181e23a7c7c70897053966f3dc56e0d97345baccea4cb597e03974327889fa603249c6aa4b2e9a56bbf795e73ee6fcba089f2027170f910c29caf068b329c9ef6934493f0f637b4be449ddc2a739204b011e817e3ab0dcf67ba03022d2aee29452eff35af1ca05d1218a5f87b89744a64b1398bf42bf1abbbfac214c221917e9152c43c492b7575ab01aefdff9cbd3f7bff989e904bcf364bc1e652", 0xcb)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
r1 = kqueue()
kevent(r1, &(0x7f0000000000)=[{{r0}, 0xffffffffffffffff, 0xc2, 0xa0000003, 0xfffffffffffffc00, 0x1}], 0x93, &(0x7f0000000100), 0xfffb4162, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000900000000000068a95a010400", 0x6, 0x2})

569.418911ms ago: executing program 1 (id=1397):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000300)={0x40, 0x7, {[0x3, 0x9, 0x4, 0x0, 0x9, 0x1, 0x4a, 0x2, 0x7, 0xffffffffffffffff, 0x9, 0x7f, 0x2, 0x4, 0xffffffff, 0x81, 0x7fffffff, 0x7], [0x7, 0x8, 0x25f0, 0x5, 0xe25f, 0x9, 0x9, 0x6, 0x401, 0xffffffffffffff09], [0x8001, 0x6, 0x3, 0x7, 0x1000, 0x3ff, 0x101], [0x8000000000000001, 0xa86, 0x64, 0x6, 0x0, 0x8000000000000000], [{0x256, 0x4, 0x7, 0x4}, {0x7, 0x6, 0x2c2a, 0x3}, {0x2, 0x4, 0x1, 0xff}, {0x2000, 0x4, 0x9, 0x93}, {0x2b, 0xe3, 0xef, 0x9}, {0x1000, 0x5, 0x7}, {0x2, 0xc05, 0x4, 0x2d}, {0xfff, 0xd, 0x24bd, 0x3}], {0x5, 0x98, 0x4, 0x4000000}, {0x4, 0x3, 0x5, 0x1}}})
close(r0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="a18eaf8353f6135448cf4b1aab605d10fda86cd6cc4454f1545a94b26c86730503354d79b6eb509306bb", 0x2a}], 0x1)
r1 = syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x42b788, 0xc60, 0x5, 0x84819b, "bb080006020900d91050080000000f0000004000", 0x6, 0x1383})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)

482.027172ms ago: executing program 2 (id=1398):
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xffffffbd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x201, 0x101002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
pread(r0, &(0x7f00000004c0)="55ffd462", 0x4, 0x81)
sendto$unix(r0, 0x0, 0x0, 0x403, 0x0, 0x0)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})

429.150546ms ago: executing program 3 (id=1399):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
setsid()
ioctl$TIOCSCTTY(r1, 0x20007461)
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x2df57367, 0xffffc765, 0xd, 0x7fffffff, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff})
writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="032ac9323d9e00c8d038ce9e061f6cef3e1077dda782d6a8cc89dc382d8233c811f66a8210fa7d25c36d72b55e5e5972b07cbdcd20ac1d2818097af604", 0x3d}], 0x1)

428.879468ms ago: executing program 4 (id=1400):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x2000, 0x5)
setuid(0xffffffffffffffff)
fchdir(r0)
unveil(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='w\x00')

422.012682ms ago: executing program 5 (id=1401):
setresuid(0x0, 0xee00, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0)
r1 = getpid()
fcntl$setown(r0, 0x6, r1)
setreuid(0xee00, 0x0)
setuid(0xffffffffffffffff)
close(r0)

401.242856ms ago: executing program 6 (id=1402):
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0)
setrlimit(0x8, &(0x7f0000000440)={0x45, 0x56})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x1)
write(r0, &(0x7f0000000240)="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", 0x14c)
read(r0, &(0x7f0000001ec0)=""/194, 0xc2)

400.826546ms ago: executing program 7 (id=1403):
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f00000000c0)={0x2df57367, 0xffffc761, 0xd, 0xea19, "0a6400b70700605c9b0051696203000000020400", 0x40000089, 0x10003ff})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2}})
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13bbfd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x2)

345.27414ms ago: executing program 3 (id=1404):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x3bc00000}, {0x8, 0xf, 0x5, 0x8d}, {0xfffffffd, 0xe2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f6, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
r1 = socket(0x18, 0x3, 0x0)
getsockname(r1, 0x0, &(0x7f00000003c0))

345.073774ms ago: executing program 4 (id=1405):
setreuid(0x0, 0xee01)
setuid(0xee01)
syz_emit_ethernet(0x42, 0x0)
r0 = msgget$private(0x0, 0x1ba)
msgrcv(r0, 0x0, 0x0, 0x1, 0x1000)
r1 = getpid()
ktrace(0x0, 0x0, 0x510, r1)
msgctl$IPC_RMID(r0, 0x0)

344.867779ms ago: executing program 5 (id=1406):
socket$inet(0x18, 0x3, 0x102)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_emit_ethernet(0x3e, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x6}, 0x2)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18dffffffff0000000040c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xa}, 0x4)
ioctl$TIOCSETA(r0, 0xc450444d, &(0x7f0000000740)={0x0, 0x1, 0xfffffffd, 0x4, "97a2224ff1ebb1000000000000000000ff00", 0x4, 0x5})

344.750276ms ago: executing program 7 (id=1407):
mknod(0x0, 0x2000, 0x285b9a)
r0 = semget(0x0, 0x1, 0x281)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
setresgid(r2, r2, 0x0)
setgroups(0x0, 0x0)
setuid(0xffffffffffffffff)
semctl$GETNCNT(r0, 0x4, 0x3, 0x0)

344.643237ms ago: executing program 5 (id=1408):
setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f0000000080)="03100008", 0x4)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0xfffffff8, 0x6, 0xfffff966, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x2})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x65)

251.53205ms ago: executing program 7 (id=1409):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0xfff, 0x4e, 0x2100009, 0x6, 0x3, 0x6, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x4, 0x71000}, {0x8, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x7, 0x300, 0x55, 0x40000008}, {0x2, 0x82, 0x7, 0x9}, {0x4008007, 0xa78, 0x3, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x200007ff, 0x9, 0xfffff86a, 0x1}, {0x1, 0x5, 0x9, 0xe}, {0x29a71717, 0x80, 0x201, 0xc377}, {0x0, 0x407, 0x5}, {0x8000, 0x8000001, 0x1, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0})
r1 = socket(0x1e, 0x3, 0x0)
write(r1, 0x0, 0x0)

251.237012ms ago: executing program 3 (id=1410):
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
sendmmsg(r0, &(0x7f0000000200)={{&(0x7f00000001c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff01f0d10065168bb1e98d0000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8)
sendmmsg(r1, &(0x7f0000000040)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "fffe00", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8)

159.504813ms ago: executing program 6 (id=1411):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x40005, 0x80000005, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x6, 0x55, 0x200}, {0xc2, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x5, 0x8d}, {0xfffffffd, 0xe2b5, 0x40000003, 0x6}, {0x7, 0x2d1, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f6, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x88}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
r1 = socket(0x24, 0x2, 0x0)
getsockname$inet6(r1, 0x0, &(0x7f00000002c0))

159.291738ms ago: executing program 7 (id=1412):
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x192)
open(0x0, 0x9cab835cfdc52675, 0x0)
r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0})
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
execve(0x0, 0x0, 0x0)

158.330666ms ago: executing program 2 (id=1413):
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000440)="5700d000", 0x4}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
read(r1, &(0x7f00000009c0)=""/4096, 0x1000)

157.844538ms ago: executing program 4 (id=1414):
open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c6)
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd})
r0 = getpid()
setgroups(0x0, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
setuid(0xffffffffffffffff)
sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x308}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0)

55.126198ms ago: executing program 4 (id=1415):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x6, './file0\x00', [{[@v4=@rand_addr=0x1000, @v6=@ipv4={'\x00', '\xff\xff', @multicast1}], [0x9, 0x40], 0x4000, 0x18}, {[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v6=@mcast2], [0x46], 0x4}], {{0x242, 0x48, 0xfa, 0x800}, 0x6543, 0x409, 0xfff00000, 0xbe46, 0x8, 0x17, 0x4}, {{0x0, 0x4, 0x1, 0x5}, 0x8001, 0xc86, 0x1000a, 0x2, 0x801, 0xf0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x7, 0xb, 0x2, 0xf23b, 0x6, [[0x8, 0x7], [0x2, 0x34c]], [[0x8, 0x403], [0x9]], 0x9, [0xf, 0x7b], 0x1, 0x2, 0xf0, 0x2, 0x0, 0x3, 0xb, 0x83, 0x5, 0x8, 0x1, 0xce57}})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
read(r1, &(0x7f0000000000)=""/63, 0x3f)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f)

54.864056ms ago: executing program 3 (id=1416):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x80, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0xd, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x5}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x5, 0x80000000}, {0xfffffffd, 0xe2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f6, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x8}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0})
r1 = socket(0x1e, 0x3, 0x0)
getsockname$unix(r1, 0x0, &(0x7f0000000380))

628.327µs ago: executing program 5 (id=1417):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xe2)
ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x8, 0xfffffff9}, {0x80000101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x3fd, 0xffff, 0x2800, 0xb}, {0x200001, 0x650, 0x3, 0x9b}, {0x8ce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x5, 0x14, 0x5910}, {0x86000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x3, 0x8}, {0x29a71717, 0x9, 0x60, 0x7}, {0x6, 0xfffffffa, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x230003}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f)

0s ago: executing program 1 (id=1418):
mknod(0x0, 0x2000, 0x33b9)
mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x7fff}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000593000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x1}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x15340, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd824, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff]})
r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0})
openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10622, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts.
Connection to 10.128.0.74 closed by remote host.
+42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$
¹j¼õ¬|ÿ ž¨E1\…:
OpenBSD/amd64 (ci-openbsd-main-7.us-central1-b.c.syzkaller.internal) (tty00)

login: 0#+"$%.!",%: #/--!.$ %22/2
+42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$

.$6$!$4)-%2: #!,,%$ 7)4( ./.-4%.4!4)6% !$$2%33 ::1(,/0)
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
pckbd_enable: command error
ktrace write failed, errno 27, tracing stopped


ktrace write failed, errno 27, tracing stopped


uvn_flush: obj=0xfffff300689410b0, offset=0x1000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
lo0: can't handle af0
nd6_resolve: ::: route contains no ND information

	
	
	

	
	
	

	
	
	

	
	
	

OpenBSD/amd64 (ci-openbsd-main-7.us-central1-b.c.syzkaller.internal) (tty00)

login: ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
pppx: unable to set addresses for pppx1, error=17
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
ktrace write failed, errno 27, tracing stopped
uvm_fault(0xffffffff83a72490, 0xffff800029322170, 0, 1) -> d
kernel: page fault trap, code=0
Stopped at      ffs2_balloc+0xa0a:      movq    0(%rcx,%rax,8),%r14
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*482245  94039      0         0x2        0x1    0  syz-executor
ffs2_balloc(fffff3006c12aa00,eb799,50,fffff30007ffd820,1,ffff80002a890d08) at ffs2_balloc+0xa0a
ffs_write(ffff80002a890d90) at ffs_write+0x4f9
VOP_WRITE(fffff3006f3e9480,ffff80002a890e40,3,fffff30007ffd820) at VOP_WRITE+0x101
ktrwriteraw(ffff80002a77cd10,fffff3006f3e9480,fffff30007ffd820,ffff80002a890f10,ffff80002a890ef0) at ktrwriteraw+0x19b
ktrsysret(ffff80002a77cd10,5b,0,ffff80002a890fd0) at ktrsysret+0x17f
syscall(ffff80002a891080) at syscall+0xad9
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7321d643a7b0, count: 8
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb>